vøiddo

Snapshot NPM package metadata + download stats via the public registry.npmjs.org and api.npmjs.org/downloads endpoints. One row per package with version, dependencies count, repository, maintainers, weekly + monthly downloads.

Pull new/modified CVEs from NIST NVD. Filter by vendor/product (CPE), severity, CWE, keyword. One row per CVE — id, description, CVSS v3 score, vector, CWEs, affected CPEs, refs. AppSec cron watchlist. NIST NVD REST 2.0 (free, no auth).

Screen names against OFAC SDN (Specially Designated Nationals) — the primary US sanctions list. Joins sdn.csv + alt.csv + add.csv for full names, aliases, addresses. Returns matches with similarity score, programs, type, addresses. Daily-refreshed from treasury.gov. No auth.

Pull recent FDA drug recall actions. Filter by class (I/II/III), recalling firm, distribution state, or keyword. One row per recall — id, class, firm, product, reason, dates, distribution. Cron-ready for pharma + retail-health watchlists. openFDA API (free, no auth).

Pull recent Product Hunt launches via the public Atom feed. One row per post with name, tagline, link, posted-at, author, comments URL. Optional keyword filter. No auth required.

Pull daily-new PubMed citations matching any query. One clean row per article — PMID, title, abstract, authors, journal, year, DOI, MeSH terms, full Pubmed URL. Built for cron: pass `sinceDays:1` to get just yesterday's new articles. Source: NCBI E-utilities (free, no auth).

Snapshot PyPI package metadata using the public pypi.org/pypi/<pkg>/json endpoint. One row per package with version, classifiers, requires_python, maintainers, project URLs, release count.

Scrape SEC EDGAR 13D and 13G beneficial ownership filings by company CIK. Track activist investor 5%+ stake disclosures and ownership changes. Returns accession number, form, filing date, report date, primary doc URL.

Pull SEC Form 13F quarterly holdings for any institutional manager by CIK. One row per holding — CUSIP, issuer, USD value, shares, put/call, investment discretion, sub-manager attribution, voting authority. Built for cron and ad-hoc research. SEC EDGAR direct (free, no auth).

Pull recent SEC 8-K filings (Current Reports) by stock ticker. One clean row per filing — ticker, company, filing date, accession, parsed 8-K Item numbers, summary of items reported. Built for cron: pass sinceDays=1 for yesterday's material events. Source: SEC EDGAR (free, no auth).

Snapshot any Shopify storefront's full public catalog. One row per product with title, vendor, type, tags, all variants (SKU, price, compare_at_price, available), images. Skips non-Shopify domains gracefully. Source: /products.json + /collections.json (public, no auth).

Discover every URL a site exposes via its public sitemap chain. Reads robots.txt, follows Sitemap declarations, recursively descends sitemap-index files, extracts URLs with lastmod, changefreq, priority.

Scrape Steam player reviews by App ID. Returns review text, recommendation, playtime, helpful votes, language, purchase type and timestamps for sentiment analysis and competitor research on PC game titles.

Pull Substack newsletter posts via the public {slug}.substack.com/feed RSS endpoint. One row per post with title, link, author, pubDate, summary, category. No auth required.

For each Trustpilot business slug, scrape reviews via Next.js __NEXT_DATA__. One row per review. Star-filter pagination (1..5 stars, paginated) bypasses Trustpilot's per-business 200-review window for deep historical pulls.

Pull all US Presidential Documents from the Federal Register API — Executive Orders, Proclamations, Memoranda, Determinations, Notices. One clean row per document, with EO number, signing date, publication date, abstract, plus PDF/HTML/raw-text URLs.

Pull recent federal contract & grant awards from USAspending.gov. Filter by award type, agency, recipient, PSC/NAICS, state, or keyword. One row per award — id, recipient, amount, agency, dates, codes. Built for cron. USAspending.gov v2 API (free, no auth).

Fetches extension metadata (downloads, version, publisher, repo, license, tags, timestamps) from the Open VSX registry — the open marketplace used by VSCodium, Gitpod, Theia, Cursor. Input a list of namespace/extension ids, get one structured row each.

Pull Capterra.com product reviews via the public reviews page. One row per review with title, body, rating, reviewer name + role + industry, posted date, pros, cons. Specify maxReviewsPerProduct.

Snapshot Chrome Web Store extension metadata via the public listing page. One row per extension ID with title, developer, rating, user count, version, screenshots, last updated. JSON-LD + targeted HTML probes.

For each ecosystem (NPM, PIP, MAVEN, NUGET, RUBYGEMS, RUST, GO, ACTIONS, SWIFT, …), pull recent GitHub Security Advisories via GraphQL. One row per advisory: severity, CVE/CWE mapping, affected packages, version ranges, fix versions. For AppSec + supply-chain auditors.

Pull Medium articles via the public RSS feed endpoints — /feed/@user, /feed/tag/{tag}, /feed/{publication-slug}. One row per article with title, link, author, pubDate, summary, categories.

Pull clean, parsed Form 4 insider trades from SEC EDGAR by ticker. One row per transaction — insider, role, code, shares, price, total USD value, plus link to the filing XML. No auth, no scraping tricks. Uses SEC's free public API. For traders, quants, finance researchers.

Search the Apple Podcasts catalog via the public iTunes Search API. One row per (query × country × hit) with artist, genre, episode count, feed URL, artwork. Same source that powers podcasts.apple.com search.