{"package":"@vellumai/vellum-gateway","ecosystem":"npm","latest_version":"0.9.0","description":"Standalone service that serves as the public ingress boundary for all external webhooks and callbacks. It owns Telegram integration end-to-end, routes Twilio voice webhooks, handles OAuth callbacks, and acts as an authenticated reverse proxy for the assis","license":"MIT","license_risk":"permissive","commercial_use_notes":"Permissive: commercial closed-source use OK; preserve the copyright notice.","homepage":"","repository":"","downloads_weekly":23171,"health":{"score":78,"risk":"moderate","breakdown":{"maintenance":25,"popularity":10,"security":25,"maturity":15,"community":3},"deprecated":false,"max_score":100},"vulnerabilities":{"count":0,"critical":0,"high":0,"medium":0,"low":0,"details":[]},"versions":{"latest":"0.9.0","total_count":350,"recent":["0.9.0-dev.202606181324.0804a69","0.9.0-dev.202606181513.fd39213","0.9.0-dev.202606181713.b269b6a","0.9.0-dev.202606181735.ae6e1d8","0.9.0-dev.202606181858.5b26a8a","0.9.0-dev.202606181935.328e5f4","0.9.0-dev.202606181950.a0151ae","0.9.0-dev.202606182044.d0c9925","0.9.0-dev.202606182057.d0c9925","0.9.0-dev.202606182147.d5eebd3","0.9.0-dev.202606182256.609733d","0.9.0-dev.202606182338.1cc9a2c","0.9.0-dev.202606190120.2d51b8d","0.9.0-dev.202606190321.e4a0347","0.9.0-dev.202606190553.7166845","0.9.0-dev.202606190609.0fd3d6e","0.9.0-dev.202606190806.0fd3d6e","0.9.0-dev.202606191038.0fd3d6e","0.9.0-dev.202606191225.6c07f1c","0.9.0-dev.202606191410.d7a0797"]},"metadata":{"deprecated":false,"deprecated_message":null,"maintainers_count":2,"first_published":"2026-02-19T12:31:06.108Z","last_published":"2026-06-16T20:29:31.676Z","dependencies_count":16,"dependencies":["zod","pino","file-type","drizzle-kit","drizzle-orm","pino-pretty","zod-openapi","web-tree-sitter","tree-sitter-bash","@vellumai/ces-client","@vellumai/slack-text","@vellumai/twilio-client","@vellumai/gateway-client","@vellumai/assistant-client","@vellumai/ipc-server-utils","@vellumai/service-contracts"]},"github_stats":null,"bundle":null,"typescript":{"score":0,"has_types":false,"types_source":null,"types_package":null},"known_issues":{"bugs_count":0,"bugs_severity":{},"status_breakdown":{},"link":null,"scope":"none"},"historical_compromise":null,"recommendation":{"action":"safe_to_use","issues":[],"use_version":"0.9.0","version_hint":null,"summary":"@vellumai/vellum-gateway@0.9.0 is safe to use (health: 78/100)"},"version_scoped":null,"_meta":{"endpoint":"check","tier":"full","philosophy":"DepScope is free. Use the cheapest endpoint that answers your real question.","cheaper_alternatives":[{"endpoint":"/api/exists/npm/%40vellumai%2Fvellum-gateway","tokens_estimated":12,"use_when":"you only need to know if the package exists (hallucination guard)"},{"endpoint":"/api/health/npm/%40vellumai%2Fvellum-gateway","tokens_estimated":80,"use_when":"you only need a 0-100 score for go/no-go (>=70 = safe)"},{"endpoint":"/api/prompt/npm/%40vellumai%2Fvellum-gateway","tokens_estimated":280,"use_when":"you want a plain-text LLM-friendly brief instead of JSON"},{"endpoint":"POST /api/check_bulk","tokens_estimated":60,"use_when":"you have 5+ packages to check; sends one round-trip instead of N"}],"docs":"https://depscope.dev/integrate","hint_bulk":"You've called /api/check 8 times in 60s. Save bandwidth + tokens with POST /api/check_bulk (1 round-trip for N pkgs)."},"requested_version":null,"_cache":"hit","_response_ms":0,"_powered_by":"depscope.dev — free package intelligence for AI agents","typosquat":{"is_suspected":false},"maintainer_trust":{"available":false},"malicious":{"is_malicious":false},"scorecard":{"available":false},"quality":{"available":false},"version_history_summary":{"total_versions":21,"first_release_age_days":null,"last_release_days_ago":2,"avg_days_between_releases":null,"release_velocity":"active"}}