# deps.dev

This provider exposes tools and data accessible through its parent verticals. Use the example prompts as inspiration for your queries.

**Slug:** `depsdev`

**Description:** Query open source package dependencies, vulnerabilities, licenses, and project health metrics using Google's Open Source Insights (deps.dev).

## Verticals

This provider is available in the following verticals:

- [Dev](https://kirha.com/verticals/dev.md)

## Example prompts (non-exhaustive)

- `What are the dependencies of express@4.18.2?`
- `Does lodash have any security vulnerabilities?`
- `What license does react use?`
- `Get the security scorecard for github.com/facebook/react`
- `Show me the latest versions of axios`

## Available tools in this provider

Open a tool to see its input and output schemas.

### [`getPackage`](https://kirha.com/providers/depsdev/getPackage.md)

Get package information including all available versions and publication dates. Use this to discover versions before calling getVersion for details.

### [`queryByHash`](https://kirha.com/providers/depsdev/queryByHash.md)

Find packages matching a file hash. Useful for identifying unknown packages from artifacts. Supports npm, Cargo, Maven, NuGet, PyPI, and RubyGems.

### [`getAdvisory`](https://kirha.com/providers/depsdev/getAdvisory.md)

Get details about a security advisory including CVE, CVSS score, and description. Use advisoryIds from getVersion to get full details.

### [`getDependencies`](https://kirha.com/providers/depsdev/getDependencies.md)

Get the resolved dependency graph for a package version. Shows direct and transitive dependencies. Only available for npm, PyPI, Maven, and Cargo. Indirect dependencies are capped at 500; totalDependencies gives the full count.

### [`getVersion`](https://kirha.com/providers/depsdev/getVersion.md)

Get detailed version information including licenses, security advisories, and links. Use getPackage first to find available versions.

### [`getProject`](https://kirha.com/providers/depsdev/getProject.md)

Get project metadata including stars, forks, issues, license, and OpenSSF security scorecard. Supports GitHub, GitLab, and Bitbucket projects.

-----

**Tags:** dependencies, security, vulnerabilities, licenses, open-source

[< Back to providers list](https://kirha.com/providers.md)