data
deps.dev Lua API for KosmoKrator Agents
Agent-facing Lua documentation and function reference for the deps.dev KosmoKrator integration.Lua Namespace
Agents call this integration through app.integrations.deps_dev.*.
Use lua_read_doc("integrations.deps-dev") inside KosmoKrator to discover the same reference at runtime.
Call Lua from the Headless CLI
Use kosmo integrations:lua when a shell script, CI job, cron job, or another coding CLI should run a deterministic
deps.dev workflow without starting an interactive agent session.
kosmo integrations:lua --eval 'dump(app.integrations.deps_dev.package({}))' --jsonkosmo integrations:lua --eval 'print(docs.read("deps-dev"))' --json
kosmo integrations:lua --eval 'print(docs.read("deps-dev.package"))' --jsonWorkflow file
Put repeatable logic in a Lua file, then execute it with JSON output for the calling process.
local deps_dev = app.integrations.deps_dev
local result = deps_dev.package({})
dump(result)kosmo integrations:lua workflow.lua --json
kosmo integrations:lua workflow.lua --force --jsonintegrations:lua exposes app.integrations.deps_dev, app.mcp.*, docs.*, json.*, and regex.*. Use app.integrations.deps_dev.default.* or app.integrations.deps_dev.work.* when you configured named credential accounts.
MCP-only Lua
If the script only needs configured MCP servers and does not need deps.dev, use the narrower mcp:lua command.
# Use mcp:lua for MCP-only scripts; use integrations:lua for this integration namespace.
kosmo mcp:lua --eval 'dump(mcp.servers())' --jsonAgent-Facing Lua Docs
This is the rendered version of the full Lua documentation exposed to agents when they inspect the integration namespace.
deps.dev
Namespace: deps-dev
Use this integration to query deps.dev Open Source Insights package metadata, version metadata, declared requirements, resolved dependencies, source projects, project-to-package mappings, OSV advisories, and content-hash lookups.
Authentication
The deps.dev API v3 is public and requires no credentials.
Tools
deps_dev_package: package metadata and available versions.deps_dev_version: metadata for one package version, including licenses, advisories, links, attestations, registries, and related projects.deps_dev_requirements: declared dependency requirements in the package system’s native shape.deps_dev_dependencies: resolved dependency graph for ecosystems supported by deps.dev dependency resolution.deps_dev_project: source repository metadata, such as stars, forks, license, homepage, and embedded Scorecard data when known.deps_dev_project_package_versions: package versions mapped to a source project.deps_dev_advisory: OSV advisory metadata known to deps.dev.deps_dev_query: query package versions by base64 content hash,system/name/version, or both.
Systems
Valid system values are GO, RUBYGEMS, NPM, CARGO, MAVEN, PYPI,
and NUGET. Maven package names use group:artifact, for example
org.apache.logging.log4j:log4j-core.
Return Notes
This package keeps deps.dev field names intact. Dependency graphs return
nodes, edges, and error. Query responses return results, with at most
1000 results from the API.
Examples
local package = tools.deps_dev_package({
system = "NPM",
name = "react"
})
local version = tools.deps_dev_version({
system = "MAVEN",
name = "org.apache.logging.log4j:log4j-core",
version = "2.15.0"
})
local graph = tools.deps_dev_dependencies({
system = "NPM",
name = "react",
version = "18.2.0"
})Path parameters are encoded by the integration. Pass package names and project IDs in their natural form rather than pre-encoding them.
Raw agent markdown
# deps.dev
Namespace: `deps-dev`
Use this integration to query deps.dev Open Source Insights package metadata,
version metadata, declared requirements, resolved dependencies, source projects,
project-to-package mappings, OSV advisories, and content-hash lookups.
## Authentication
The deps.dev API v3 is public and requires no credentials.
## Tools
- `deps_dev_package`: package metadata and available versions.
- `deps_dev_version`: metadata for one package version, including licenses,
advisories, links, attestations, registries, and related projects.
- `deps_dev_requirements`: declared dependency requirements in the package
system's native shape.
- `deps_dev_dependencies`: resolved dependency graph for ecosystems supported
by deps.dev dependency resolution.
- `deps_dev_project`: source repository metadata, such as stars, forks, license,
homepage, and embedded Scorecard data when known.
- `deps_dev_project_package_versions`: package versions mapped to a source
project.
- `deps_dev_advisory`: OSV advisory metadata known to deps.dev.
- `deps_dev_query`: query package versions by base64 content hash,
`system`/`name`/`version`, or both.
## Systems
Valid `system` values are `GO`, `RUBYGEMS`, `NPM`, `CARGO`, `MAVEN`, `PYPI`,
and `NUGET`. Maven package names use `group:artifact`, for example
`org.apache.logging.log4j:log4j-core`.
## Return Notes
This package keeps deps.dev field names intact. Dependency graphs return
`nodes`, `edges`, and `error`. Query responses return `results`, with at most
1000 results from the API.
## Examples
```lua
local package = tools.deps_dev_package({
system = "NPM",
name = "react"
})
local version = tools.deps_dev_version({
system = "MAVEN",
name = "org.apache.logging.log4j:log4j-core",
version = "2.15.0"
})
local graph = tools.deps_dev_dependencies({
system = "NPM",
name = "react",
version = "18.2.0"
})
```
Path parameters are encoded by the integration. Pass package names and project
IDs in their natural form rather than pre-encoding them.local result = app.integrations.deps_dev.package({})
print(result)Functions
package Read
Retrieve package metadata and available versions.
- Lua path
app.integrations.deps_dev.package- Full name
deps-dev.deps_dev_package
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
version Read
Retrieve metadata for one package version.
- Lua path
app.integrations.deps_dev.version- Full name
deps-dev.deps_dev_version
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
requirements Read
Retrieve declared dependency requirements for one version.
- Lua path
app.integrations.deps_dev.requirements- Full name
deps-dev.deps_dev_requirements
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
dependencies Read
Retrieve the resolved dependency graph for one version.
- Lua path
app.integrations.deps_dev.dependencies- Full name
deps-dev.deps_dev_dependencies
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
project Read
Retrieve project metadata for a source repository.
- Lua path
app.integrations.deps_dev.project- Full name
deps-dev.deps_dev_project
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
project_package_versions Read
Retrieve package versions built from a source project.
- Lua path
app.integrations.deps_dev.project_package_versions- Full name
deps-dev.deps_dev_project_package_versions
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
advisory Read
Retrieve one OSV advisory from deps.dev.
- Lua path
app.integrations.deps_dev.advisory- Full name
deps-dev.deps_dev_advisory
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
query Read
Query package versions by content hash, version key, or both.
- Lua path
app.integrations.deps_dev.query- Full name
deps-dev.deps_dev_query
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||