Vellium & Co

Directory › Security and audits › lazaretto.dev

lazaretto.dev

Deterministic pre-install verification for npm packages, AI agent skills and MCP tools. Matches the exact version against OSV and OpenSSF malicious-package advisories, then runs behavioral analysis for credential theft, exfiltration, obfusc

Go to this service →

Our latest check (2026-10-11)

Answering
Yes — valid x402 payment terms
Time to answer
365 ms
Price
$0.030 per call
Paying buyers, last 30 days
1 (directory's own records)
Paid calls, last 30 days
1
Category
Security and audits
Address
https://lazaretto.dev/v1/scan

Accuracy: paid answers checked against an independent record

Not yet in our paid checks. A seller we have not checked has neither passed nor failed.

For agents

This page as JSON: /sellers/4e8f73f12601.json. Paid lookup by address: GET /api/seller?resource=… ($0.001, x402).

Sellers can see the evidence behind their checks and ask for a re-check at [email protected].