HALOWERKPaketwerk
typosquat radar
Generates the typical misspellings of a package name and looks up every one of them in the registry. Generation rather than search is deliberate: most of the seven ecosystems have no search API, and the ones that do rank by popularity instead of similarity, so a fresh squat with no downloads never appears.
POST https://paket.halowerk.com/v1/typosquat-radarEingaben
| Feld | Typ | Pflicht | Beschreibung |
|---|---|---|---|
| system | string | Ja | |
| name | string | Ja | The package name to protect. |
| max_variants | integer | Nein | How many generated variants to look up. |
| recent_days | integer | Nein | A variant first published within this many days counts as recent, which is the strongest signal. |
Vollständiges Eingabeschema anzeigen
{
"type": "object",
"required": [
"system",
"name"
],
"additionalProperties": false,
"properties": {
"system": {
"type": "string",
"enum": [
"npm",
"pypi",
"maven",
"go",
"cargo",
"nuget",
"rubygems"
]
},
"name": {
"type": "string",
"minLength": 3,
"maxLength": 120,
"description": "The package name to protect."
},
"max_variants": {
"type": "integer",
"minimum": 5,
"maximum": 80,
"default": 45,
"description": "How many generated variants to look up."
},
"recent_days": {
"type": "integer",
"minimum": 1,
"maximum": 3650,
"default": 365,
"description": "A variant first published within this many days counts as recent, which is the strongest signal."
}
}
}Veröffentlichtes Eingabebeispiel
{
"system": "npm",
"name": "express",
"max_variants": 45,
"recent_days": 365
}Ergebnis & Dokumentation
Veröffentlichtes Ergebnisschema anzeigen
{
"$ref": "https://paket.halowerk.com/v1/typosquat-radar/schema#/outputSchema"
}Veröffentlichtes Ergebnisbeispiel öffnen
Maschinenlesbare Dokumentation dieses Hubs
Quelle dieser Seite: der veröffentlichte HALOWERK-Katalog. Stand: 2026-11-01, 15:19 UTC.
Weitere Endpunkte dieses Hubs
- Paketwerk0,003 USDC
artifact hash
POSThttps://paket.halowerk.com/v1/artifact-hashTakes a file digest and answers which released package version it is. Useful for an artefact found in a container layer, a build directory or an attachment with no metadata attached. Hex and base64 input are both accepted and normalised, th
- Paketwerk0,005 USDC
dependency bloat
POSThttps://paket.halowerk.com/v1/dependency-bloatScores how much a package costs to depend on, using the resolved graph rather than a guess. Four measurements: the number of transitive nodes, the maximum depth, how many packages appear at more than one version, and the fan-out of the root
- Paketwerk0,005 USDC
dependency confusion
POSThttps://paket.halowerk.com/v1/dependency-confusionTakes the names your organisation publishes internally and checks each against the public registry of the same ecosystem. Three findings, kept apart because they call for different actions. Name is free: nobody has taken it, the door is ope