561 Group Market

Orphan-Patch Score

Ranks packages with disclosed advisories, silent maintainers, and many dependents as orphan-patch candidates, deterministically, from public inputs alone.

Price
$0.02 USDC per request
Network
Base mainnet, eip155:8453, settled in USDC through the Coinbase CDP facilitator
Method and URL
POST https://market.561.group/v1/orphan-patch/score
Response type
application/json
Seller
Causeway Services (561 Group)

Input contract

Input that fails this contract is refused with a 4xx status before any payment is requested.

{
  "maxBytes": 102400,
  "bodySchema": {
    "type": "object",
    "required": [
      "advisories",
      "maintenance",
      "dependents"
    ],
    "properties": {
      "advisories": {
        "type": "array",
        "description": "{id, package, ecosystem, severity, published, fixedVersion} rows; fixedVersion is null when no fix is known."
      },
      "maintenance": {
        "type": "array",
        "description": "{package, ecosystem, lastReleaseDaysAgo, openIssueResponseDaysMedian} rows; openIssueResponseDaysMedian is null when no issue response was ever recorded."
      },
      "dependents": {
        "type": "array",
        "description": "{package, ecosystem, dependentCount} rows."
      }
    }
  }
}

Example request

{
  "method": "POST",
  "url": "https://market.561.group/v1/orphan-patch/score",
  "headers": {
    "accept": "application/json",
    "content-type": "application/json"
  },
  "body": {
    "advisories": [
      {
        "id": "GHSA-2026-0001",
        "package": "left-pad-example",
        "ecosystem": "npm",
        "severity": "high",
        "published": "2026-01-15T00:00:00Z",
        "fixedVersion": null
      }
    ],
    "maintenance": [
      {
        "package": "left-pad-example",
        "ecosystem": "npm",
        "lastReleaseDaysAgo": 900,
        "openIssueResponseDaysMedian": null
      }
    ],
    "dependents": [
      {
        "package": "left-pad-example",
        "ecosystem": "npm",
        "dependentCount": 4200
      }
    ]
  }
}

Output

{
  "schema": {
    "type": "object",
    "required": [
      "candidates"
    ],
    "properties": {
      "candidates": {
        "type": "array",
        "items": {
          "type": "object",
          "required": [
            "package",
            "ecosystem",
            "score",
            "reasons",
            "advisoryIds"
          ],
          "properties": {
            "package": {
              "type": "string"
            },
            "ecosystem": {
              "type": "string"
            },
            "score": {
              "type": "number"
            },
            "reasons": {
              "type": "array",
              "items": {
                "type": "string"
              }
            },
            "advisoryIds": {
              "type": "array",
              "items": {
                "type": "string"
              }
            }
          }
        }
      }
    }
  },
  "example": {
    "candidates": [
      {
        "package": "left-pad-example",
        "ecosystem": "npm",
        "score": 62.5,
        "reasons": [
          "unpatched high advisory GHSA-2026-0001 (published 2026-01-15T00:00:00Z)",
          "last release 900 days ago",
          "no issue response recorded",
          "4200 known dependents"
        ],
        "advisoryIds": [
          "GHSA-2026-0001"
        ]
      }
    ]
  }
}

How to buy with x402

  1. Send the request without payment. The server answers 402 Payment Required with a base64 JSON PAYMENT-REQUIRED header holding the amount, asset, network and payee.
  2. Have your wallet sign an EIP-3009 transferWithAuthorization for exactly those terms (an x402 client library does this for you).
  3. Repeat the identical request with the signed payload in the PAYMENT-SIGNATURE header.
  4. The server verifies, runs the operation, settles, and returns 200 with the result and a PAYMENT-RESPONSE header carrying the settlement receipt.

Read the price without paying

curl --include --request POST --header 'accept: application/json' --header 'content-type: application/json' --data-raw '{"advisories":[{"id":"GHSA-2026-0001","package":"left-pad-example","ecosystem":"npm","severity":"high","published":"2026-01-15T00:00:00Z","fixedVersion":null}],"maintenance":[{"package":"left-pad-example","ecosystem":"npm","lastReleaseDaysAgo":900,"openIssueResponseDaysMedian":null}],"dependents":[{"package":"left-pad-example","ecosystem":"npm","dependentCount":4200}]}' --url 'https://market.561.group/v1/orphan-patch/score'

This request authorizes nothing; it returns the live payment terms. Read the full explanation of x402.

Machine-readable