genesiscode2026/openapi-breaking-change-detector · v1.0.0
What an agent reads when it fetches this URL: the whole manifest, in order, with the offer on the last line as a 402 it can pay. Nothing here is a button — an agent does not click, it signs. The page a person reads is here.
Pack · 1 script · 1 source file · 1 test file · 2 examples · 4 docs · 1 config file · 1 asset · 11 files · text 15 kB · binary 6 B (0%) · JavaScript 100% · licence undetermined
scan passed 2026-09-17 · scanner 2026.09.1 · 1 release · last release today · 0% of files seen elsewhere
computed 2026-09-17 21:46 UTC · analyzer 0.1.0Security scan report
Scanned by X402 Git, OSV (opens in a new tab) and Socket (opens in a new tab) — passed on all three. Findings from X402 Git and Socket are listed below.
- secrets
- none found
- X402 Git
- size limits
- within caps
- X402 Git
- known malware
- no dependency manifests to check
- OSV
- known vulnerabilities
- no dependency manifests to check
- OSV
- dependency behaviour
- nothing on a direct dependency · 1 in transitive packages
- Socket
- instruction smuggling
- none found
- X402 Git
- what it can do
- listed below
- X402 Git
What this can do
- Tools
- none
- Runs
- bin/openapi-break-detect.js
- Talks to
- nothing
- Reads
- no environment variables
- At install
- nothing runs
- Links to
- img.shields.io
- www.getly.store
Findings (2)
- LOWSocket SBOM Resolver — Socket SBOM Resolver (transitive) — no lockfile, so installs are not reproducible
- LOWbin/openapi-break-detect.js — Ships the script bin/openapi-break-detect.js
Description self_reported
Written by the creator. Not verified by this platform — everything above and below this section is computed from the repository.
Detects backwards-incompatible breaking changes between two OpenAPI 3.0/3.1 specifications in CI under 5 seconds.
When to use it. When requiring verified API Templates functionality in autonomous workflows
Readme
openapi-breaking-change-detector
Detects backwards-incompatible breaking changes between two OpenAPI 3.0/3.1 specifications in CI under 5 seconds.
What Can Break?
Removed endpoints, dropped HTTP methods, new required parameters, and deleted 2xx response codes that break frontend and mobile API clients.
What Does This Tool Check?
Paths, HTTP verbs, path/query/header parameters, requestBody schema mutations, and response status codes.
What Does It NOT Check?
Runtime server latency, backend business logic correctness, or network firewalls.
How Fast Can I Run It?
Under 5 seconds. Zero external dependencies. Pure Node.js standard library.
# Clone and run
git clone git@github.com:genesiscode2026/openapi-breaking-change-detector.git
cd openapi-breaking-change-detector
# Execute 60-second demo
./bin/openapi-break-detect.js --help
./bin/openapi-break-detect.js --old examples/v1.json --new examples/v2.json
What Do I Get?
- Deterministic CLI Exit Codes: Returns code
0on backward-compatible contracts; returns code1on breaking drift. - Machine-Readable JSON: Pass
--jsonto integrate directly into GitHub Actions, GitLab CI, or pre-commit hooks. - Human-Readable Diffs: Clear, actionable error reports with exact field pointers.
Commercial Distribution
- Catalog ID:
P46 - Price Band: standard micro-tool ($15)
- List Price: $15 USD
- License: GENESIS Commercial Source License v1.0
- Seller:
genesiscode2026 - Official Storefront: Genesis Code on Getly
Contents
| Size | Path |
|---|---|
| 2.1 kB | LICENSE |
| 444 B | QUICKSTART.md |
| 1.9 kB | README.md |
| 326 B | SECURITY.md |
| 6 B | VERSION · binary |
| 5.2 kB | bin/openapi-break-detect.js |
| 702 B | examples/v1.json |
| 514 B | examples/v2.json |
| 589 B | package.json |
| 2.6 kB | src/detector.js |
| 694 B | tests/test_detector.js |
Dependencies
None found in the software bill of materials for this release.
computed 2026-09-17 21:46 UTC · analyzer 0.1.0Releases
| Version | Date | Scan | Changed | Notes |
|---|---|---|---|---|
| v1.0.0 | 2026-09-17 | pass | — | Commercial release v1.0.0 for openapi-breaking-change-detector |
Machine-readable at https://x402git.com/api/v/genesiscode2026/openapi-breaking-change-detector/releases. Entries cannot be deleted by the creator.
Order
GET v1.0.0 · $15 · new releases $5
The resource endpoint answers 402 with the price and the exact bytes to sign; the same request carrying PAYMENT-SIGNATURE returns a signed download URL. Access is granted only after settlement returns a transaction hash. A person can do the same thing with a browser wallet on the product page.
# the 402, with the price and the exact bytes to sign
curl -si https://x402git.com/api/r/genesiscode2026/openapi-breaking-change-detector
# what your wallet already owns, and what the next fetch would cost it
curl -s https://x402git.com/api/v/genesiscode2026/openapi-breaking-change-detector \
-H "X-Wallet-Signature: 0xYOURADDRESS.<nonce>.<signature>"The first request answers this — a real quote, made for this page load:
HTTP/1.1 402 Payment Required
Content-Type: application/json
{
"x402Version": 2,
"resource": {
"url": "https://x402git.com/api/r/genesiscode2026/openapi-breaking-change-detector",
"description": "genesiscode2026/openapi-breaking-change-detector v1.0.0 — release. Detects backwards-incompatible breaking changes between two OpenAPI 3.0/3.1 specifications in CI under 5 seconds. Security scan passed; signed download, 5-minute URL.",
"mimeType": "application/zip",
"serviceName": "openapi-breaking-change-detector",
"tags": [
"pack",
"scripts",
"source",
"tests",
"examples"
]
},
"accepts": [
{
"scheme": "exact",
"network": "eip155:8453",
"amount": "15000000",
"asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
"payTo": "0xDbd32F7565FFdb901Ea48281777aD03d35bB4b60",
"maxTimeoutSeconds": 300,
"extra": {
"name": "USD Coin",
"version": "2"
},
"maxAmountRequired": "15000000",
"resource": "https://x402git.com/api/r/genesiscode2026/openapi-breaking-change-detector",
"description": "genesiscode2026/openapi-breaking-change-detector v1.0.0 — release. Detects backwards-incompatible breaking changes between two OpenAPI 3.0/3.1 specifications in CI under 5 seconds. Security scan passed; signed download, 5-minute URL.",
"mimeType": "application/zip"
}
],
"extensions": {
"bazaar": {
"info": {
"input": {
"type": "http",
"queryParams": {},
"method": "GET"
},
"output": {
"type": "json",
"example": {
"version": "1.0.0",
"artifact_sha256": "0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef",
"download_url": "https://storage.example/genesiscode2026/openapi-breaking-change-detector/1.0.0.zip?signed=…",
"expires_at": "2026-09-16T12:05:00.000Z",
"version_endpoint": "https://x402git.com/api/r/genesiscode2026/openapi-breaking-change-detector/v/1.0.0",
"manifest_url": "https://x402git.com/api/label/genesiscode2026/openapi-breaking-change-detector",
"all_versions": false
}
}
},
"schema": {
"$schema": "https://json-schema.org/draft/2020-12/schema",
"type": "object",
"properties": {
"input": {
"type": "object",
"properties": {
"type": {
"type": "string",
"const": "http"
},
"method": {
"type": "string",
"enum": [
"GET"
]
},
"queryParams": {
"type": "object",
"properties": {}
}
},
"required": [
"type",
"method"
],
"additionalProperties": false
},
"output": {
"type": "object",
"properties": {
"type": {
"type": "string"
},
"example": {
"type": "object",
"properties": {
"version": {
"type": "string",
"description": "Semantic version of the release served."
},
"artifact_sha256": {
"type": "string",
"description": "sha256 of the zip; verify the download against it."
},
"download_url": {
"type": "string",
"description": "Signed URL over the exact bytes that were scanned. Valid five minutes."
},
"expires_at": {
"type": "string",
"format": "date-time"
},
"version_endpoint": {
"type": "string",
"description": "Re-fetch this exact version later, free, with X-Wallet-Signature."
},
"manifest_url": {
"type": "string",
"description": "The public manifest for this listing."
},
"all_versions": {
"type": "boolean",
"description": "True when the purchase covers every later release too."
}
},
"required": [
"version",
"artifact_sha256",
"download_url",
"expires_at",
"version_endpoint",
"manifest_url",
"all_versions"
],
"additionalProperties": false
}
},
"required": [
"type"
]
}
},
"required": [
"input"
]
}
}
},
"extra": {
"kind": "new",
"version": "1.0.0",
"manifest_url": "https://x402git.com/api/label/genesiscode2026/openapi-breaking-change-detector",
"scan_badge_url": "https://x402git.com/api/label/genesiscode2026/openapi-breaking-change-detector#scan",
"update_price_micro": "5000000",
"quote_id": "q_336d778a100d6196ac9bedb1faa7eb27",
"valid_before": "2026-09-17T23:45:43.802Z",
"instructions": "This is an x402 paywall, not an error. To buy: sign accepts[0] from the 402 as an EIP-3009 USDC authorization on Base with your own wallet, then GET https://x402git.com/api/r/genesiscode2026/openapi-breaking-change-detector again with the payment in the PAYMENT-SIGNATURE header and extra.quote_id in X-Quote-Id — or, over MCP, call `purchase` again with the same payment as `payment_signature`. The full procedure is at https://x402git.com/.well-known/agent-skills/buy-a-repo/SKILL.md; the same tools are an MCP server at https://x402git.com/api/mcp. No wallet? A person can buy at https://x402git.com/genesiscode2026/openapi-breaking-change-detector, and the free manifest at https://x402git.com/api/label/genesiscode2026/openapi-breaking-change-detector shows what is inside before anyone pays.",
"listing_url": "https://x402git.com/genesiscode2026/openapi-breaking-change-detector",
"skill_url": "https://x402git.com/.well-known/agent-skills/buy-a-repo/SKILL.md",
"mcp_url": "https://x402git.com/api/mcp"
}
}- Resource
- https://x402git.com/api/r/genesiscode2026/openapi-breaking-change-detector
- Manifest
- https://x402git.com/api/label/genesiscode2026/openapi-breaking-change-detector
- Version
- https://x402git.com/api/v/genesiscode2026/openapi-breaking-change-detector
- Artifact sha256
- 3716bce5c9ccda56721a55eef032376ee7c8c605a29d985d9e1b89d066d44f66
Later releases cost $5, and never more than the update price in force when you bought. One charge per update, whatever the release cadence.
Sold by genesiscode2026. Read the terms and the route documentation before you script against this. Base URL https://x402git.com.