Package typosquat check API

Score how likely a package name is impersonating a popular one, combining Levenshtein edit distance, homoglyph/confusable folding, and separator-swap transforms against a snapshot of the most-installed npm/PyPI packages, then ranking the closest legitimate targets with a confidence label. Pure compute. Answers 'is this package a typosquat', 'what popular package does this impersonate', 'is expres a squat of express', 'check this name for impersonation'.

Price$0.01per request

MethodPOST

Route/v1/dev/typosquat

StatusLive

MIME typeapplication/json

Rate limit60/minute

CacheNo cache

devtyposquattypo-squatimpersonationsupply-chainnpmpypihomoglyph

API URLhttps://x402.hexl.dev/v1/dev/typosquat

Integration docs

Example request

{
  "ecosystem": "npm",
  "package": "expres"
}

Example response

{
  "package": "expres",
  "ecosystem": "npm",
  "isKnownPopularPackage": false,
  "suspectedTyposquat": true,
  "confidence": "high",
  "likelyTarget": "express",
  "candidates": [
    {
      "target": "express",
      "editDistance": 1,
      "reason": "1 edit(s)"
    }
  ]
}

Input schema

{
  "type": "object",
  "required": [
    "ecosystem",
    "package"
  ],
  "properties": {
    "ecosystem": {
      "type": "string",
      "enum": [
        "npm",
        "PyPI"
      ],
      "examples": [
        "npm"
      ]
    },
    "package": {
      "type": "string",
      "examples": [
        "expres"
      ]
    }
  }
}

Output schema

{
  "type": "object",
  "additionalProperties": true
}