{"inputSchema":{"type":"object","required":["packages"],"additionalProperties":false,"properties":{"packages":{"type":"array","minItems":1,"maxItems":80,"description":"Packages to check.","items":{"type":"object","required":["name"],"additionalProperties":false,"properties":{"name":{"type":"string","minLength":1,"maxLength":200},"version":{"type":"string","maxLength":60,"description":"Exact version. The default version is used if omitted."},"ecosystem":{"type":"string","maxLength":30}}}},"ecosystem":{"type":"string","maxLength":30,"default":"npm","description":"Default ecosystem."},"usage":{"type":"string","enum":["saas","distributed","internal"],"default":"saas","description":"How you use the code. saas = operated as a network service, which is what triggers AGPL."}}},"requestExample":{"packages":[{"name":"lodash","version":"4.17.21","ecosystem":"npm"}],"usage":"internal"},"price_usdc":"0.002","example_request":{"packages":[{"name":"lodash","version":"4.17.21","ecosystem":"npm"}],"usage":"internal"},"serviceName":"HALOWERK sicherwerk","tags":["security","licenses","compliance","supply-chain"],"outputSchema":{"type":"object"},"outputExample":{"usage":"internal","usage_note":"Rein interne Nutzung ohne Weitergabe: Copyleft greift meist nicht.","packages_checked":1,"packages_found":0,"results":[{"name":"lodash","ecosystem":"npm","version":"4.17.21","found":false,"error":"Name nicht auflösbar: api.deps.dev","licenses":[],"no_license_declared":false,"worst_risk":"unbekannt","worst_class":"unbekannt","blocks_usage":false,"blocking_reason":null,"deprecated":null,"deprecated_reason":null}],"class_counts":{"unbekannt":1},"blocking":[],"blocking_count":0,"no_license_declared":[],"unknown_licenses":[],"gate":"pass","advice":"Keine Lizenzkonflikte fuer diese Nutzungsart gefunden.","source":"deps.dev (Google), oeffentlich","checked_at":"2026-10-22T23:41:36.989Z","duration_ms":0,"cache":"miss","limits":"A triage classification, not legal advice. deps.dev reports the licence declared by the package; it may differ from licence files in the source, and subcomponents with different licences are not visible. Transitive dependencies are not checked: only the submitted packages are assessed."}}