HALOWERKSicherwerk
license check
Looks up the declared licence of each package through deps.dev and sorts the result by the only question that matters for a closed, sold product: what does this licence demand. Permissive licences need attribution. Weak copyleft affects changes to the library itself. Strong copyleft can force disclosure of the whole work on distribution. Network copyleft such as AGPL and SSPL bites on operating the software as a service, which is the sharpest case for a paid API.
POST https://sicher.halowerk.com/v1/license-checkEingaben
| Feld | Typ | Pflicht | Beschreibung |
|---|---|---|---|
| packages | array | Ja | Packages to check. |
| ecosystem | string | Nein | Default ecosystem. |
| usage | string | Nein | How you use the code. saas = operated as a network service, which is what triggers AGPL. |
Vollständiges Eingabeschema anzeigen
{
"type": "object",
"required": [
"packages"
],
"additionalProperties": false,
"properties": {
"packages": {
"type": "array",
"minItems": 1,
"maxItems": 80,
"description": "Packages to check.",
"items": {
"type": "object",
"required": [
"name"
],
"additionalProperties": false,
"properties": {
"name": {
"type": "string",
"minLength": 1,
"maxLength": 200
},
"version": {
"type": "string",
"maxLength": 60,
"description": "Exact version. The default version is used if omitted."
},
"ecosystem": {
"type": "string",
"maxLength": 30
}
}
}
},
"ecosystem": {
"type": "string",
"maxLength": 30,
"default": "npm",
"description": "Default ecosystem."
},
"usage": {
"type": "string",
"enum": [
"saas",
"distributed",
"internal"
],
"default": "saas",
"description": "How you use the code. saas = operated as a network service, which is what triggers AGPL."
}
}
}Veröffentlichtes Eingabebeispiel
{
"packages": [
{
"name": "lodash",
"version": "4.17.21",
"ecosystem": "npm"
}
],
"usage": "internal"
}Ergebnis & Dokumentation
Veröffentlichtes Ergebnisschema anzeigen
{
"$ref": "https://sicher.halowerk.com/v1/license-check/schema#/outputSchema"
}Veröffentlichtes Ergebnisbeispiel öffnen
Maschinenlesbare Dokumentation dieses Hubs
Quelle dieser Seite: der veröffentlichte HALOWERK-Katalog. Stand: 2026-11-01, 15:19 UTC.
Weitere Endpunkte dieses Hubs
- Sicherwerk0,005 USDC
container inspect
POSThttps://sicher.halowerk.com/v1/container-inspectReads the manifest and config of an OCI or Docker image straight from the registry — a few kilobytes, never the layers, and the image is never run. Returns the digest, the platforms a multi-arch index covers, every layer with its size and t
- Sicherwerk0,005 USDC
cve check
POSThttps://sicher.halowerk.com/v1/cve-checkQueries OSV.dev for a list of packages with versions across npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist and the Linux distributions. For each package it returns the vulnerabilities found with their identifiers, severity and
- Sicherwerk0,005 USDC
hash reputation
POSThttps://sicher.halowerk.com/v1/hash-reputationQueries three abuse.ch metadata services for an MD5, SHA-1 or SHA-256 value. It reports known malware metadata, associated ThreatFox indicators, and URLhaus payload provenance, then derives a conservative known-malicious or unknown verdict.