To follow this guide you need a SafeDep Cloud API Key and Tenant Identifier. See Cloud Quickstart on how to onboard to SafeDep Cloud and get an API key.
Project Setup
Initialize TypeScript Project
Create a new TypeScript project:Configure Buf Registry
Configure npm to use the Buf Registry for SafeDep API SDKs:Install SafeDep API SDKs
Install the required libraries:Authentication Setup
Environment Variables
Set your SafeDep Cloud credentials:Implementation
Import Dependencies
Set up the necessary imports for ConnectRPC client and SafeDep services. The exact import paths and client constructor track the connect-es version of the generated SDK, so validate them against the version you install:Authentication Interceptor
This interceptor adds authentication headers to each request:Main Application Logic
Query package insights with the main function:API Reference
For request and response schemas, see the Insights v2 API Specification.Available Ecosystems
Supported package ecosystems:NPM- Node.js packagesPYPI- Python packagesMAVEN- Java/JVM packagesCARGO- Rust packagesNUGET- .NET packages
Response Data
The response includes:- Vulnerabilities: Known security vulnerabilities
- Licenses: License information and compliance data
- Scorecard: OpenSSF Scorecard metrics
- Malware: Malware detection results
- Metadata: Package information and statistics
API Documentation
Complete API specification and schema documentation
SDK Support
SDKs available for multiple programming languages
SafeDep Cloud
Get started with SafeDep Cloud and API access
ConnectRPC
Learn more about the ConnectRPC framework

