List unlicensed SCA packages

List packages that deps.dev CONFIRMED have no license for the user’s repositories. An unlicensed package is represented as the absence of a license — there is no synthetic ‘Unknown’ license. Packages whose license lookup FAILED transiently (deps.dev unreachable) are NOT included: their license is unknown, not absent, so they are excluded rather than mislabeled as unlicensed. Org-scoped: packages in repos outside the caller’s access are never returned. Honest empty when the org has none.

POST /api/v1/sca/licenses/unlicensed

List unlicensed SCA packages

cURL

curl --request POST \
  --url https://zeropath.com/api/v1/sca/licenses/unlicensed \
  --header 'Content-Type: application/json' \
  --header 'X-ZeroPath-API-Token-Id: <api-key>' \
  --header 'X-ZeroPath-API-Token-Secret: <api-key>' \
  --data '
{
  "organizationId": "<string>",
  "repositoryIds": [
    "<string>"
  ],
  "cursor": "<string>",
  "limit": 50
}
'

200

{
  "packages": [
    {
      "id": "<string>",
      "name": "<string>",
      "ecosystem": "<string>",
      "version": "<string>",
      "manifestPath": "<string>",
      "manifestStartLine": 123,
      "manifestEndLine": 123,
      "manifestStartColumn": 123,
      "manifestEndColumn": 123,
      "repositoryId": "<string>",
      "repositoryName": "<string>",
      "branch": "<string>",
      "commitSha": "<string>",
      "count": 123,
      "items": "<array>"
    }
  ],
  "hasMorePackages": true,
  "nextPackageCursor": "<string>"
}

Authorizations

X-ZeroPath-API-Token-Id · string · header · required

X-ZeroPath-API-Token-Secret · string · header · required

Body

application/json

organizationId · string · required

repositoryIds · string[]

cursor · string

Package id cursor for pagination

limit · integer · default: 50

Required range: 1 <= x <= 200

Response

200

application/json

Successful response

packages · object[] · required

Show child attributes

hasMorePackages · boolean · required

nextPackageCursor · string | null