EU CRA Readiness Check

$2.40 USDC per call · Developer and security · POST /api/v1/pipelines/cra-readiness · Id cra-readiness

Repository or manifests in, EU Cyber Resilience Act Art. 14 position out: dependency-advisor resolves every declared package to its locked version (deterministic, no model), those versions go to cra-exploit-clock as package URLs (OSV, CISA KEV, EPSS, EUVD), and each actively exploited component is joined back to the manifest that declares it with the fixed versions and the advisor's findings. Reports the 24 h / 72 h / 14 day reporting deadlines from the awareness time. Charged once, dependency-advisor + cra-exploit-clock at 20% below their combined list price; not charged when a required step fails.

What you get

One call tells a manufacturer whether an exploited vulnerability in its own dependency tree starts the CRA reporting clock, and which manifest line to change.

Call it

Send the JSON body below to https://agents.writerslogic.com/api/v1/pipelines/cra-readiness. An unpaid request answers 402 with the price and how to pay; a request that fails with a 5xx status is not charged.

curl -i -X POST https://agents.writerslogic.com/api/v1/pipelines/cra-readiness \
  -H 'content-type: application/json' \
  -d '{"repo":"star7th/htq","product":{"name":"htq"}}'

Input

Field	Type	Required	Description
`repo`	string; length 3..200	no	Public GitHub repository: owner/repo, https://github.com/owner/repo[/tree/ref], a commit URL, or a pull request URL (analyzed at the PR head).
`ref`	string; length 0..200	no	Branch, tag or commit; defaults to the default branch.
`files`	array<object>; max 600 items	no	Alternative to repo: manifests (package.json, lockfile, pyproject.toml, requirements.txt, Cargo.toml) and source files with repository-relative paths.
`ecosystems`	array<string; one of "npm", "pypi", "cargo">; max 3 items	no	Restrict the analysis; default all detected.
`repoLicense`	string; length 0..100	no	SPDX id of the repository's license, for alternative ranking; detected from manifests or LICENSE when absent.
`product`	object	no	Your product with digital elements; used only to fill the draft fields (defaults to the SBOM's own product name).
`awareness_time`	string; length 0..40	no	When the manufacturer became aware, ISO 8601 with UTC offset (e.g. 2026-11-04T09:30:00Z). Defaults to now. Taken as given; this agent cannot verify it.
`fix_available_at`	string; length 0..40	no	When a corrective or mitigating measure became available, ISO 8601 with UTC offset; sets the Art. 14(2)(c) final-report date.

Example request body

{
  "repo": "star7th/htq",
  "product": {
    "name": "htq"
  }
}

Result

The response is { "data": ..., "_provenance": ... }. data carries these fields; _provenance is a signed W3C Verifiable Credential with a C2PA-style manifest, checked free at POST /api/v1/verify-provenance.

Field	Type	Required	Description
`readiness`	string; one of "REPORTABLE_CANDIDATES", "NO_EXPLOITED_EVIDENCE", "INSUFFICIENT_EVIDENCE", "NO_RESOLVED_VERSIONS"	no	REPORTABLE_CANDIDATES when an exploited vulnerability affects a resolved dependency; NO_EXPLOITED_EVIDENCE only when every resolved dependency was fully checked and none was unresolved.
`fixPlan`	array<object>	no
`deadlines`	one of	no
`nextStep`	any	no	cra-exploit-clock's next_step, or null.
`unresolved`	array<object>	no
`results`	object	yes	Each executed member step's full result, keyed by step id (forEach steps: one entry per item).
`steps`	object	yes	Per step: status (ok \| skipped \| failed), reason, attempts, ms, inputSha256, outputSha256, and the output hashes of the upstream steps its input was derived from.
`partial`	boolean	yes	True when an optional step was missing or a member returned its own partial result.
`missing`	array<object>	yes
`deterministic`	boolean	yes	True only when every executed member answered without a model.

Pay and connect

Available through: x402 (USDC on Base), MCP, RapidAPI, Apify.

Machine-readable

This agent as JSON (schemas, example, OpenAPI operation)
Free signed sample response
OpenAPI 3.1 · Catalog · Index of every agent