    ___  ___  ___  ___       ___   _____  __ 
   /   |/   |/   |/   |     /   | /  _  \/ / 
  / /| / /| / /| / /| |    / /| | | | / / /  
 / /_// /_// /_// /_| |   / /_| | | |/ / /___
/_/  /_/  /_/  /_/  |_|  /_/  |_| |___/_____/

STATUS: ACTIVE (REV 3.0 CATALOG-WIDE)
NODE: EDGE INFRASTRUCTURE DAAS
ENCRYPTION: HMAC-SHA256 HMAC VERIFIED

Maintainer & Dormancy Risk Signal DaaS

On-demand maintainer concentration (MCI), dormancy/reactivation (DRI), anomalous activity (ASI), and typosquatting detection. Sourced live from public registry metadata across the AI agent supply chain (MCP, npm, PyPI). No CVEs, no static code analysis. Just the raw risk matrix.

REQUEST ARBITRAGE

curl -X GET \
"https://agentrisk-daas.onrender.com/api/v1/analytics/package-risk/npm/@modelcontextprotocol/sdk" \
-H "X-API-Key: YOUR_API_KEY"

RESPONSE PAYLOAD [ILLUSTRATIVE]

{
  "package_name": "npm/example-mcp-server",
  "timestamp": "2026-07-27T18:50:00Z",
  "maintainer_concentration_index": 10.0,
  "dormancy_reactivation_index": "insufficient data",
  "anomalous_spike_index": 8.0,
  "maintainer_count": 1,
  "single_maintainer_flag": true,
  "days_since_last_publish": 2,
  "publish_cadence_variance": null,
  "fork_spike_ratio": 3.5
}

HISTORICAL TELEMETRY & TYPOSQUAT GUARD

GET /api/v1/package-risk/{package_name}/history?limit=30

[ EXAMPLE RESPONSE SHAPE — NOT LIVE DATA ]

[
  {
    "package_name": "npm/<name>",
    "timestamp": "<iso-8601>",
    "maintainer_concentration_index": <float | "insufficient data">,
    "dormancy_reactivation_index":    <float | "insufficient data">,
    "anomalous_spike_index":          <float | "insufficient data">,
    "maintainer_count": <int | null>,
    "days_since_last_publish": <int | null>
  }
  // newest first, one snapshot per ingest cycle
]

One snapshot is retained per ingest cycle. limit accepts 1–100 and defaults to 30. Any index whose inputs are unavailable returns "insufficient data" rather than a substituted value.

SLOPSQUATTING / TYPOSQUAT DETECTOR

[ LIVE RESPONSE — REPRODUCIBLE WITH AN ACTIVE KEY ]

{
  "detail": "Package identity 'npm/xios' does not exist in registry.",
  "status": "not_found",
  "possible_typosquat_of": "npm/axios",
  "similarity": 0.889
}

Calculates edit distance against known registry targets to flag hallucinated dependencies propagated by LLM agents.

SECURE PERIMETER ACCESS

RECURRING SUBSCRIPTION

$15.00 / MO

PROVISION API ACCESS

WARNING: ALL TRANSACTIONS ARE PROCESSED VIA LEMON SQUEEZY MERCHANT OF RECORD. CRYPTOGRAPHIC TOKENS ARE DISPATCHED VIA EMAIL POST-AUTHENTICATION. CANCEL ANYTIME.