{"service":"HALOWERK paketwerk","endpoint":"/v1/dependency-confusion","method":"POST","content_type":"application/json","inputSchema":{"type":"object","required":["system","packages"],"additionalProperties":false,"properties":{"system":{"type":"string","enum":["npm","pypi","maven","go","cargo","nuget","rubygems"]},"packages":{"type":"array","minItems":1,"maxItems":60,"description":"Your internal package names, optionally with the internal version.","items":{"type":"object","required":["name"],"additionalProperties":false,"properties":{"name":{"type":"string","minLength":1,"maxLength":300},"internal_version":{"type":"string","maxLength":60}}}}}},"requestExample":{"system":"npm","packages":[{"name":"express","internal_version":"1.0.0"},{"name":"my-internal-lib-xyz"}]},"operations":[{"method":"POST","inputSchema":{"type":"object","required":["system","packages"],"additionalProperties":false,"properties":{"system":{"type":"string","enum":["npm","pypi","maven","go","cargo","nuget","rubygems"]},"packages":{"type":"array","minItems":1,"maxItems":60,"description":"Your internal package names, optionally with the internal version.","items":{"type":"object","required":["name"],"additionalProperties":false,"properties":{"name":{"type":"string","minLength":1,"maxLength":300},"internal_version":{"type":"string","maxLength":60}}}}}},"requestExample":{"system":"npm","packages":[{"name":"express","internal_version":"1.0.0"},{"name":"my-internal-lib-xyz"}]}}],"example_request":{"system":"npm","packages":[{"name":"express","internal_version":"1.0.0"},{"name":"my-internal-lib-xyz"}]},"serviceName":"dependency_confusion","tags":["supply-chain","security","packages","risk"],"outputSchema":{"type":"object"},"outputExample":{"system":"npm","checked":2,"urgent_count":0,"unclaimed_count":0,"results":[{"name":"express","risk":"unknown","reason":"Register nicht lesbar: Name nicht auflösbar: api.deps.dev"},{"name":"my-internal-lib-xyz","risk":"unknown","reason":"Register nicht lesbar: Name nicht auflösbar: api.deps.dev"}],"scope_note":"Namen werden genommen, wie sie uebergeben wurden. Ein Name unter einem Organisationsbereich ist ein anderer Name als der ungebundene — sie gleichzusetzen generated einen Fehlalarm bei jedem eigenen Paket.","decisive_factor":"Nicht das blosse Vorhandensein entscheidet, sondern welche Version der Aufloeser heightr findet.","meta":{"source":"deps.dev (Google Open Source Insights)","licence":"Die Rohdaten stammen aus den oeffentlichen Paketregistern; deps.dev stellt sie ohne Registrierung bereit. Angaben zu Lizenzen sind maschinell ermittelt und ersetzen keine Rechtsvalidation.","attribution":"Daten ueber deps.dev, Google Open Source Insights","source_timestamp":null,"retrieved_at":"2026-10-22T23:41:24.493Z","age_ms":0,"cache":"miss","coverage":"2 Namen","confidence":0.8,"warnings":["At least one name could not be checked; it is not treated as safe."]}}}