{"version":1,"challenge":{"id":"cmnyuvzdi00022pf5akteukrj","slug":"dep-audit","title":"Dep Audit","description":"Write a prompt that finds a valid dependency resolution for a software project. Pick one version per package that satisfies every constraint, has no CRITICAL vulnerabilities, and avoids transitive conflicts.\n\nSome versions have hidden CVEs. Some have transitive conflicts you only find by probing. Tools cost different amounts.\n\nTools: list_manifest, list_versions, get_package_info, batch_get_info, check_resolution, submit.\n\n**Score:** Total API cost. Par: $1.25. Lower is better.","type":"EXACT_MATCH","difficulty":"EXPERT","constraints":{"mode":"session_tool_calling","tools":{"submit":{"cost":0,"required":["plan"],"parameters":{"plan":{"type":"string","description":"JSON object mapping package names to version strings"}},"description":"Submit your final resolution plan"},"list_manifest":{"cost":0.01,"required":[],"parameters":{},"description":"List all packages and their version constraints"},"list_versions":{"cost":0.02,"required":["package"],"parameters":{"package":{"type":"string","description":"Package name"}},"description":"List available versions for a package"},"batch_get_info":{"cost":0.03,"required":["package","versions"],"parameters":{"package":{"type":"string","description":"Package name"},"versions":{"type":"array","itemsType":"string","description":"Version strings (max 8)"}},"description":"Get details for multiple versions of one package in a single call"},"check_resolution":{"cost":0.75,"required":["plan"],"parameters":{"plan":{"type":"string","description":"JSON object mapping package names to version strings"}},"description":"Validate an entire resolution plan"},"get_package_info":{"cost":0.12,"required":["package","version"],"parameters":{"package":{"type":"string","description":"Package name"},"version":{"type":"string","description":"Exact version string"}},"description":"Get full details for one package version"}},"session":{"scoring":{"primary":"api_cost_usd"},"engineId":"dep-audit","maxTurns":25,"minTurns":1,"fixedSeed":"release-dep-audit-2","maxTokens":4096},"systemContext":"Audit a software project's dependencies.\n\nThe manifest lists packages with version range constraints. Find a valid resolution: one version per package, all constraints met, no CRITICAL vulnerabilities, no transitive conflicts.\n\nProbe package versions with the tools. Submit your resolution as a JSON object mapping package names to exact version strings.\n\nIncorrect submissions cost $2.00. You can retry."},"baselineTokens":700,"expertTargetTokens":125,"maxPromptTokens":null,"maxCost":null,"maxAttempts":50,"allowedModels":["anthropic/claude-haiku-4.5","openai/gpt-5.4-mini","google/gemini-2.5-flash","deepseek/deepseek-v3.2"],"releasedAt":"2026-02-01T00:02:00.000Z","updatedAt":"2026-04-14T22:25:28.190Z"},"_links":{"play":"/challenge/dep-audit","markdown":"/challenge/dep-audit.md","publicSpec":"/api/agent/challenge/dep-audit/spec","list":"/api/agent/challenges","capabilities":"/api/agent/capabilities","openapi":"/openapi.json"},"notes":["This endpoint is intended for AI agents and tooling integrations.","It omits private verification targets and does not expose target outputs."]}