Evidence row 1038058

What was observed

{
  "endpoints": [
    [
      "x402",
      "https://http--forest-gas-station-mainnet--lcjl27p8lmjs.code.run/package/security"
    ]
  ],
  "name": "Forest Packages",
  "owner_address": "0xb48d918151311f982d542ef5c84cc1cd54cff7a9",
  "raw": {
    "accepts": [
      {
        "amount": "3000",
        "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
        "extra": {
          "name": "USD Coin",
          "version": "2"
        },
        "maxTimeoutSeconds": 120,
        "network": "eip155:8453",
        "payTo": "0xb48D918151311F982d542eF5C84cc1cd54CFf7a9",
        "scheme": "exact"
      }
    ],
    "description": "Known vulnerabilities for package+version; normalized evidence, not a safety verdict. Base mainnet USDC",
    "extensions": {
      "bazaar": {
        "info": {
          "input": {
            "body": {
              "ecosystem": "npm",
              "package": "express",
              "version": "4.21.2"
            },
            "bodyType": "json",
            "method": "POST",
            "type": "http"
          },
          "output": {
            "example": {
              "capability": "package.security",
              "data": {
                "count": 0,
                "ecosystem": "npm",
                "evidence": [],
                "package": "express",
                "version": "4.21.2",
                "vulnerabilities": []
              },
              "meta": {
                "cache": "miss",
                "checked_at": "2026-01-01T00:00:00.000Z",
                "duration_ms": 1,
                "provider": "osv"
              },
              "ok": true,
              "version": "1"
            },
            "type": "json"
          }
        },
        "schema": {
          "$schema": "https://json-schema.org/draft/2020-12/schema",
          "properties": {
            "input": {
              "additionalProperties": false,
              "properties": {
                "body": {
                  "additionalProperties": false,
                  "properties": {
                    "ecosystem": {
                      "description": "Public ecosystem value used to scope this lookup.",
                      "enum": [
                        "npm",
                        "pypi"
                      ]
                    },
                    "package": {
                      "description": "Public package name to inspect.",
                      "maxLength": 214,
                      "minLength": 1,
                      "type": "string"
                    },
                    "version": {
                      "description": "Package version whose public metadata should be checked.",
                      "maxLength": 128,
                      "minLength": 1,
                      "type": "string"
                    }
                  },
                  "required": [
                    "ecosystem",
                    "package",
                    "version"
                  ],
                  "type": "object"
                },
                "bodyType": {
                  "enum": [
                    "json",
                    "form-data",
                    "text"
                  ],
                  "type": "string"
                },
                "method": {
                  "enum": [
                    "POST"
                  ],
                  "type": "string"
                },
                "type": {
                  "const": "http",
                  "type": "string"
                }
              },
              "required": [
                "type",
                "method",
                "bodyType",
                "body"
              ],
              "type": "object"
            },
            "output": {
              "properties": {
                "example": {
                  "additionalProperties": false,
                  "properties": {
                    "capability": {
                      "const": "package.security",
                      "description": "Public capability value used to scope this lookup."
                    },
                    "data": {
                      "additionalProperties": false,
                      "description": "Public data value used to scope this lookup.",
                      "properties": {
                        "count": {
                          "description": "Public count value used to scope this lookup.",
                          "type": "integer"
                        },
                        "ecosystem": {
                          "description": "Public ecosystem value used to scope this lookup.",
                          "type": "string"
                        },
                        "evidence": {
                          "description": "Public evidence value used to scope this lookup.",
                          "type": "array"
                        },
                        "package": {
                          "description": "Public package name to inspect.",
                          "type": "string"
                        },
                        "version": {
                          "description": "Package version whose public metadata should be checked.",
                          "type": "string"
                        },
                        "vulnerabilities": {
                          "description": "Public vulnerabilities value used to scope this lookup.",
                          "type": "array"
                        }
                      },
                      "required": [
                        "ecosystem",
                        "package",
                        "version",
                        "vulnerabilities",
                        "count",
                        "evidence"
                      ],
                      "type": "object"
                    },
                    "meta": {
                      "additionalProperties": false,
                      "description": "Public meta value used to scope this lookup.",
                      "properties": {
                        "cache": {
                          "description": "Public cache value used to scope this lookup.",
                          "enum": [
                            "hit",
                            "miss",
                            "bypass"
                          ]
                        },
                        "checked_at": {
                          "description": "Public checked at value used to scope this lookup.",
                          "type": "string"
                        },
                        "duration_ms": {
                          "description": "Public duration ms value used to scope this lookup.",
                          "minimum": 0,
                          "type": "integer"
                        },
                        "provider": {
                          "description": "Public provider value used to scope this lookup.",
                          "type": [
                            "string",
                            "null"
                          ]
                        }
                      },
                      "required": [
                        "provider",
                        "checked_at",
                        "cache",
                        "duration_ms"
                      ],
                      "type": "object"
                    },
                    "ok": {
                      "const": true,
                      "description": "Public ok value used to scope this lookup."
                    },
                    "version": {
                      "const": "1",
                      "description": "Package version whose public metadata should be checked."
                    }
                  },
                  "required": [
                    "ok",
                    "capability",
                    "version",
                    "data",
                    "meta"
                  ],
                  "type": "object"
                },
                "type": {
                  "type": "string"
                }
              },
              "required": [
                "type"
              ],
              "type": "object"
            }
          },
          "required": [
            "input"
          ],
          "type": "object"
        }
      }
    },
    "lastUpdated": "2026-10-25T21:10:41.743Z",
    "quality": {
      "l30DaysTotalCalls": 4,
      "l30DaysUniquePayers": 3,
      "lastCalledAt": "2026-10-25T21:10:41.528Z"
    },
    "resource": "https://http--forest-gas-station-mainnet--lcjl27p8lmjs.code.run/package/security",
    "serviceName": "Forest Packages",
    "tags": [
      "package",
      "dependency",
      "security",
      "vulnerability",
      "cve"
    ],
    "type": "http",
    "x402Version": 2
  },
  "source": "x402_bazaar",
  "summary": "Known vulnerabilities for package+version; normalized evidence, not a safety verdict. Base mainnet USDC"
}

What the leaf hashes

{"body":"eeda471bf8ee0a123778bd5e73acbde5120f4b8d663e34b8e7f73c42a9180708","id":1038058,"kind":"listing","method":"sync.x402_bazaar/1","observed_us":1793298249802950,"prev":525814,"subject":"x402_bazaar:https://http--forest-gas-station-mainnet--lcjl27p8lmjs.code.run/package/security","subject_kind":"source_record"}

Proof

Fold these into the leaf in order, hashing each sorted pair with keccak256, to reach the root of 2026-10-29 (242798 rows).

1. 0xcc63ba6a8dd05d2841f2f4d08927a700e83465920db7455204f9bd0832898693
2. 0x7b2ba6e36ffb21c3c30f7fbf6ae8779ad947fabeefcc44237834db035217dfe6
3. 0xa6211022eb1cedd029cdc5a6db0799b12c80dd6613af6153597539fcc98c6be6
4. 0x4035a79a19f73d85e386b0cac93d94d96ce784b1da8cd7ade6504601608bd5d4
5. 0x7ff6f5e875803792b0eb5d62394fb2387c6f358732b51d839159fd3adde8ec84
6. 0x1f91d032d210b423b6d0b6b896c129f2607169ac1f99581062635c72d13c4644
7. 0x320474a3a816a75ce88f6b16ab6555a6f566ea8cbb2238881a36feb714558684
8. 0x2b22d979cf4b4049e9d26dd80bf862480e3ac6f16c6243840d9b727a3a768394
9. 0x741fe5f3a39139e52b2f42d60d789da23a6fbbe6095cac4a2e6f8e702384d221
10. 0x1b578487e81f3a7869542649c0dac064c1b95fce2143c5e096626dbc4bbc19b4
11. 0xddb758338c77c74a0df13717e76fab95f0c9469213b61e570e4b63e9002742c7
12. 0xbee8e8d8ca5c95a66e562a294bddb8d5c6d024ece4511762f33f67eb3eff2dfb
13. 0x97f0ccb56ab0f3fc0746e8ceca39a31e5cd22b8979ee43500468693a013c5beb
14. 0xff4a7a4ef98a9db806f61d17fd3535917a23846dc8183da0b176c5699301b5ba
15. 0x4e4f8f228a3b7a38299ec6f2b1967c6cf4de15fdd9dc0d200e691266e51ef99d
16. 0xef5d5572aac8f06b61579b7167b369fcb479d9027d4037dc9cacff9e3a26ffd2
17. 0xa1fa2e97e71ad6e802f325afd74bb7095901f2060529c9739182a1233f8804bc
18. 0xe01539ac4c9f9cdf265a9e5c6d99c8da11e70ff0c7175fb23e402d33b9d79785

Day root

0xc050555c6b023f2aefb6536efb9f0760b92c30a0d06c572b7daf63db259ea17c

Chained

0x4cde8bae2042512e1bec11650628f0293556311cc4ea74d99ffddf02b671a7d6

Published

On Arc Testnet, block 69753317: 0x9e85c340732f416e431b111fae72f7624870125f7f379af2732eb6c2ba8cf6a1