How to hit the deps.dev (Open Source Insights) API

Google's deps.dev at https://api.deps.dev/v3 covers npm, PyPI, Go, Maven, Cargo, and NuGet: versions, licenses, dependency graphs, and security advisories.

Authentication

None — no key, no signup. Every example runs as-is.

Full reference: https://docs.deps.dev/api/v3/

Get a package version

Licenses, advisories, links.

curl https://api.deps.dev/v3/systems/npm/packages/express/versions/4.21.2
Run in PostTaco
Example response (trimmed) 
{
  "versionKey": {
    "system": "NPM",
    "name": "express",
    "version": "4.21.2"
  },
  "publishedAt": "2024-12-05T22:31:40Z",
  "isDefault": false,
  "isDeprecated": false,
  "deprecatedReason": "",
  "licenses": [
    "MIT"
  ],
  "advisoryKeys": [],
  "links": [
    {
      "label": "HOMEPAGE",
      "url": "http://expressjs.com/"
    },
    {
      "label": "ISSUE_TRACKER",
      "url": "https://github.com/expressjs/express/issues"
    }
  ],
  "slsaProvenances": [],
  "attestations": [],
  "registries": [
    "https://registry.npmjs.org/"
  ],
  "relatedProjects": [
    {
      "projectKey": {
        "id": "github.com/expressjs/express"
      },
      "relationProvenance": "UNVERIFIED_METADATA",
      "relationType": "ISSUE_TRACKER"
    },
    {
      "projectKey": {
        "id": "github.com/expressjs/express"
      },
      "relationProvenance": "UNVERIFIED_METADATA",
      "relationType": "SOURCE_REPO"
    }
  ]
}

Resolved dependency graph

curl https://api.deps.dev/v3/systems/npm/packages/express/versions/4.21.2:dependencies
Run in PostTaco
Example response (trimmed) 
{
  "nodes": [
    {
      "versionKey": {
        "system": "NPM",
        "name": "express",
        "version": "4.21.2"
      },
      "bundled": false,
      "relation": "SELF",
      "errors": []
    },
    {
      "versionKey": {
        "system": "NPM",
        "name": "accepts",
        "version": "1.3.8"
      },
      "bundled": false,
      "relation": "DIRECT",
      "errors": []
    }
  ],
  "edges": [
    {
      "fromNode": 0,
      "toNode": 1,
      "requirement": "~1.3.8"
    },
    {
      "fromNode": 0,
      "toNode": 2,
      "requirement": "1.1.1"
    }
  ],
  "error": ""
}