Get dependency tree API

Return direct and transitive dependencies, dependency versions and available dependency metadata using Google deps.dev API.

The Get dependency tree operation is part of the CVE & Dependency Security API on BRAINIAC.software. Return direct and transitive dependencies, dependency versions and available dependency metadata using Google deps.dev API. It is exposed as POST /api/v1/cybersecurity-intelligence/dependency-tree and priced at $0.05 USDC on Base. Payment uses the x402 exact scheme: an unpaid call returns HTTP 402 with payment requirements; after paying the exact USDC amount, retry the same request with a payment-signature header and Idempotency-Key. No account and no API key are required. Data sources for this product: OSV.dev API for vulnerability database queries and batch checks (api.osv.dev). CISA Known Exploited Vulnerabilities (KEV) catalog (cisa.gov). FIRST Exploit Prediction Scoring System (EPSS) for exploit probability (first.org). NIST NVD API for CVE details, CVSS scores, and CWE classifications (nvd.nist.gov). Google deps.dev API for dependency metadata (api.deps.dev). OpenSSF Scorecard API for repository security metrics (api.scorecard.dev). Limitations: OSV data may not include all vulnerability databases or ecosystems. CISA KEV data is cached for 5 minutes and may not reflect the latest additions. EPSS scores are predictions and may not reflect actual exploitation. NVD API is rate-limited to 5 requests per 30 seconds without an API key; some requests may be delayed or skipped. deps.dev supports GO, RUBYGEMS, NPM, CARGO, MAVEN, PYPI, and NUGET ecosystems only. Scorecard only supports GitHub, GitLab, and certain repository types. Lockfile parsing is limited to common formats. Risk assessments are not definitive security evaluations; review each vulnerability individually. Outputs are compliance prechecks, drafts, or data lookups for human review. They are not official determinations, legal advice, identity confirmation, or certified filings. Related operations in this group include Get vulnerability details, Check package vulnerabilities, Batch check package vulnerabilities, Assess vulnerability risk. Open the group documentation for the full request schema, field notes, and response examples before integrating.