curl --request POST \
  --url https://api.pramaan.dev/v1/capabilities/security.vuln.lookup \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "package": {
    "ecosystem": "npm",
    "name": "lodash"
  },
  "version": "4.17.15"
}
'

const options = {
  method: 'POST',
  headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
  body: JSON.stringify({package: {ecosystem: 'npm', name: 'lodash'}, version: '4.17.15'})
};

fetch('https://api.pramaan.dev/v1/capabilities/security.vuln.lookup', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

import requests

url = "https://api.pramaan.dev/v1/capabilities/security.vuln.lookup"

payload = {
    "package": {
        "ecosystem": "npm",
        "name": "lodash"
    },
    "version": "4.17.15"
}
headers = {
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

{
  "vulns": [
    {
      "id": "<string>",
      "summary": "<string>",
      "severity": "low",
      "cvssScore": 5,
      "cvssVector": "<string>",
      "publishedAt": "<string>",
      "modifiedAt": "<string>",
      "aliases": [
        "<string>"
      ],
      "references": [
        {
          "url": "<string>",
          "tags": [
            "<string>"
          ]
        }
      ]
    }
  ],
  "nextCursor": "<string>"
}

{
  "error": {
    "code": "addendum_required",
    "message": "<string>",
    "next": "<string>",
    "request_id": "<string>",
    "retryable": true,
    "effect": "none",
    "slot": "<string>",
    "required_micro": 123,
    "reason": "balance",
    "plan": "<string>",
    "needs": [
      {
        "kind": "approval",
        "detail": "<string>",
        "step": "<string>"
      }
    ]
  }
}