# deps.dev on Onekey

> 5 endpoints for deps.dev (5 stable, 0 beta), 1 to 5 credits each. Category: Developer platforms. One key, one JSON shape.

Base URL: https://api.onekey.dev
Auth: header `x-api-key: <key>`. Call shape: `GET /v1/{platform}/{endpoint}?{params}`.
Every response is `{success, data, metadata, error}`; check `success` first. Cost is in `metadata.credits_charged`. Free when served from cache (0.2 credit for a cached response over 100 KB). Failed and not-found calls are refunded.
Status: stable = verified against the live source; beta = not yet verified, fields may be missing.

Page: https://onekey.dev/platforms/depsdev
Reference (Markdown): https://onekey.dev/docs/api/depsdev.md
All docs: https://onekey.dev/llms.txt

## Canonical fields returned

Unified-schema fields (same names on every platform), with how many of the 5 mapped deps.dev endpoints return each:

- `entity.name` (string): 3
- `package.version` (string): 3
- `entity.createdAt` (ISO 8601 date): 2
- `content.id` (string): 1
- `content.title` (string): 1
- `content.url` (URL): 1
- `entity.description` (string): 1
- `entity.id` (string): 1
- `entity.stats.forks` (integer): 1
- `entity.stats.openIssues` (integer): 1
- `entity.stats.stars` (integer): 1
- `package.deprecated` (boolean): 1
- `package.homepageUrl` (URL): 1
- `package.license` (string): 1
- plus 10 platform-specific fields under `ext.`

## Endpoints

### depsdev.advisory

Details of a security advisory by id (deps.dev).
- Price: 1 credit per fresh call. Status: stable. Returns: one record.
- Request: `GET https://api.onekey.dev/v1/depsdev/advisory?id=GHSA-9wx4-h78v-vm56` with header `x-api-key: YOUR_API_KEY`
- Parameters:
  - `id` (string, required): Advisory id, e.g. GHSA-9wx4-h78v-vm56
- Fields returned: `content.id`, `content.title`, `content.url`, `ext.aliases`, `ext.cvss3`, `ext.cvss3Vector`
- Reference: https://onekey.dev/docs/api/depsdev/advisory.md

### depsdev.dependencies

Resolved dependency graph nodes of a package version (deps.dev).
- Price: 5 credits per fresh call. Status: stable. Returns: a list.
- Request: `GET https://api.onekey.dev/v1/depsdev/dependencies?system=npm&name=react&version=18.2.0` with header `x-api-key: YOUR_API_KEY`
- Parameters:
  - `system` (string, required): Package ecosystem: npm, pypi, go, maven, cargo, nuget
  - `name` (string, required): Package name in its ecosystem (e.g. react, @babel/core, github.com/gin-gonic/gin, com.google.guava:guava)
  - `version` (string, required): Exact version
- Fields returned: `entity.name`, `package.version`, `ext.relation`, `ext.errors`
- Reference: https://onekey.dev/docs/api/depsdev/dependencies.md

### depsdev.package

Versions of a package with publish dates (deps.dev).
- Price: 5 credits per fresh call. Status: stable. Returns: a list.
- Request: `GET https://api.onekey.dev/v1/depsdev/package?system=npm&name=react` with header `x-api-key: YOUR_API_KEY`
- Parameters:
  - `system` (string, required): Package ecosystem: npm, pypi, go, maven, cargo, nuget
  - `name` (string, required): Package name in its ecosystem (e.g. react, @babel/core, github.com/gin-gonic/gin, com.google.guava:guava)
- Fields returned: `package.version`, `entity.name`, `entity.createdAt`, `ext.isDefault`
- Reference: https://onekey.dev/docs/api/depsdev/package.md

### depsdev.project

Repository health, stars and OpenSSF scorecard of a source project (deps.dev).
- Price: 1 credit per fresh call. Status: stable. Returns: one record.
- Request: `GET https://api.onekey.dev/v1/depsdev/project?project=github.com%2Ffacebook%2Freact` with header `x-api-key: YOUR_API_KEY`
- Parameters:
  - `project` (string, required): Source project, e.g. github.com/facebook/react
- Fields returned: `entity.id`, `entity.description`, `package.homepageUrl`, `package.license`, `entity.stats.stars`, `entity.stats.forks`, `entity.stats.openIssues`, `ext.scorecard`
- Reference: https://onekey.dev/docs/api/depsdev/project.md

### depsdev.version

Metadata of one package version incl. licenses and advisories (deps.dev).
- Price: 1 credit per fresh call. Status: stable. Returns: one record.
- Request: `GET https://api.onekey.dev/v1/depsdev/version?system=npm&name=react&version=18.2.0` with header `x-api-key: YOUR_API_KEY`
- Parameters:
  - `system` (string, required): Package ecosystem: npm, pypi, go, maven, cargo, nuget
  - `name` (string, required): Package name in its ecosystem (e.g. react, @babel/core, github.com/gin-gonic/gin, com.google.guava:guava)
  - `version` (string, required): Exact version
- Fields returned: `entity.name`, `package.version`, `entity.createdAt`, `package.deprecated`, `ext.licenses`, `ext.advisories`, `ext.links`
- Reference: https://onekey.dev/docs/api/depsdev/version.md

## Sample request

```bash
curl "https://api.onekey.dev/v1/depsdev/advisory?id=GHSA-9wx4-h78v-vm56" \
  -H "x-api-key: YOUR_API_KEY"
```