depsdev.version

stable Standard

Metadata of one package version incl. licenses and advisories (deps.dev).

GET /v1/depsdev/version

What you get#

One Depsdev record in Onekey's unified shape, in data. If the record does not exist you get a 404 not_found and are not charged.

What it costs#

Standard · 1 credit for a fresh fetch, charged only when it succeeds.
Free when served from cache (0.2 credit for a cached response over 100 KB).
Free if the request is invalid (never charged) or the source fails or reports not found (refunded).

Parameters#

Name	Type	Required	Default	What it is	Constraints
`system`	string	yes	(required)	Package ecosystem: npm, pypi, go, maven, cargo, nuget	max 6 chars; must match `npm\|pypi\|go\|maven\|cargo\|nuget`; trimmed, lowercased
`name`	string	yes	(required)	Package name in its ecosystem (e.g. react, @babel/core, github.com/gin-gonic/gin, com.google.guava:guava)	max 200 chars; must match `[A-Za-z0-9@][A-Za-z0-9@_./:-]{0,199}`; trimmed
`version`	string	yes	(required)	Exact version	max 64 chars; must match `[A-Za-z0-9][A-Za-z0-9._+!-]{0,63}`; trimmed

Request#

curl "https://api.onekey.dev/v1/depsdev/version?system=npm&name=react&version=18.2.0" \
  -H "x-api-key: YOUR_API_KEY"

Try it

Add your key to run this call right here. No key? Get one free. The key stays in this tab.

Recorded response#

A real Depsdev response, recorded and returned in Onekey's shape. Fields the platform does not provide are null.

json

{
  "success": true,
  "data": {
    "entity": {
      "name": "react",
      "createdAt": "2022-06-14T19:46:38Z"
    },
    "package": {
      "version": "18.2.0",
      "deprecated": false
    },
    "ext": {
      "licenses": [
        "MIT"
      ],
      "advisories": [],
      "links": [
        {
          "label": "HOMEPAGE",
          "url": "https://reactjs.org/"
        },
        {
          "label": "ISSUE_TRACKER",
          "url": "https://github.com/facebook/react/issues"
        },
        {
          "label": "ORIGIN",
          "url": "https://registry.npmjs.org/react/18.2.0"
        }
      ]
    }
  },
  "metadata": {
    "platform": "depsdev",
    "endpoint": "version",
    "cached": false,
    "stale": false,
    "age_s": 0,
    "fetched_at": "2026-01-01T12:00:00+00:00",
    "credits_charged": 1,
    "request_id": "7f3a9c2e5b1d4c8fa2e6d0b9c4f18e37"
  },
  "error": null
}

Field mapping#

How this endpoint's source fields become Onekey's unified schema. Fields the source lacks come back as null.

Source path	Onekey field	Transform
`versionKey.name`	`entity.name`	-
`versionKey.version`	`package.version`	-
`publishedAt`	`entity.createdAt`	`toIsoDate`
`licenses`	`ext.licenses`	-
`isDeprecated`	`package.deprecated`	`toBoolean`
`advisoryKeys`	`ext.advisories`	-
`links`	`ext.links`	-

Caching and freshness#

Fresh for about 1 hour. Repeat calls in that window are served from cache and are free.
Between 1 hour and 1 day the cached copy is still served instantly and marked stale: true while Onekey refreshes it in the background.
If the source is down when a refresh is needed, the last copy can be served for up to 3 days more (marked stale).
A "not found" is remembered for 5 minutes and is free.
The cache is shared across all customers, which is what keeps repeat calls cheap.

What can go wrong#

Status	Code	What to do
401	`unauthorized`	Check the `x-api-key` header.
402	`insufficient_credits`	Add credits; your balance must cover the price.
404	`not_found`	That record does not exist. Free; do not retry.
422	`invalid_params`	Fix the parameters using the table above. Free.
429	`rate_limited`	Wait `Retry-After` seconds, then retry.
502	`upstream_error`	The source failed. Refunded; retry with backoff.

See Errors for the full list and retry guidance.

Status: stable (verified against the live source).