Evidence row 1039576

What was observed

{
  "endpoints": [
    [
      "x402",
      "https://agents.crowdspark.me/v1/dev/package-advisories"
    ]
  ],
  "name": "Agent Tools",
  "owner_address": "0x0dea0030a17bf886543a757c55924710258c2eec",
  "raw": {
    "accepts": [
      {
        "amount": "5000",
        "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
        "extra": {
          "name": "USD Coin",
          "version": "2"
        },
        "maxTimeoutSeconds": 300,
        "network": "eip155:8453",
        "payTo": "0x0dEA0030A17BF886543a757c55924710258c2eec",
        "scheme": "exact"
      }
    ],
    "description": "Check a package before installing it: known vulnerabilities for one npm, PyPI, cargo, Go or Maven package version (OSV.dev), fixed-in version, latest version and release date, licence, deprecated flag, and a safe, caution or avoid verdict with reasons. Version defaults to latest.",
    "extensions": {
      "bazaar": {
        "info": {
          "input": {
            "method": "GET",
            "queryParams": {
              "ecosystem": "npm",
              "name": "lodash",
              "version": "4.17.20"
            },
            "type": "http"
          },
          "output": {
            "example": {
              "deprecated": false,
              "ecosystem": "npm",
              "latest_version": "4.18.1",
              "licenses": [
                "MIT"
              ],
              "name": "lodash",
              "reasons": [
                "5 known advisories affect this version (worst: high)",
                "a newer version exists"
              ],
              "suggested_min_fixed_version": "4.18.0",
              "verdict": "avoid",
              "version": "4.17.20",
              "version_checked": "requested",
              "vulnerabilities": {
                "by_severity": {
                  "HIGH": 2,
                  "MODERATE": 3
                },
                "count": 5,
                "items": [
                  {
                    "cve": [
                      "CVE-2020-28500"
                    ],
                    "fixed_in": [
                      "4.17.21"
                    ],
                    "id": "GHSA-29mw-wpgm-hmr9",
                    "severity": "MODERATE"
                  }
                ]
              }
            },
            "type": "json"
          }
        },
        "schema": {
          "$schema": "https://json-schema.org/draft/2020-12/schema",
          "properties": {
            "input": {
              "additionalProperties": false,
              "properties": {
                "method": {
                  "enum": [
                    "GET"
                  ],
                  "type": "string"
                },
                "queryParams": {
                  "properties": {
                    "ecosystem": {
                      "description": "Package ecosystem",
                      "enum": [
                        "npm",
                        "pypi",
                        "cargo",
                        "go",
                        "maven"
                      ],
                      "type": "string"
                    },
                    "name": {
                      "description": "Package name, e.g. lodash or requests (maven: group:artifact)",
                      "type": "string"
                    },
                    "version": {
                      "description": "Optional. Defaults to the latest version",
                      "type": "string"
                    }
                  },
                  "required": [
                    "ecosystem",
                    "name"
                  ],
                  "type": "object"
                },
                "type": {
                  "const": "http",
                  "type": "string"
                }
              },
              "required": [
                "type",
                "method"
              ],
              "type": "object"
            },
            "output": {
              "properties": {
                "example": {
                  "type": "object"
                },
                "type": {
                  "type": "string"
                }
              },
              "required": [
                "type"
              ],
              "type": "object"
            }
          },
          "required": [
            "input"
          ],
          "type": "object"
        }
      }
    },
    "lastUpdated": "2026-10-28T13:49:00.801Z",
    "quality": {
      "l30DaysTotalCalls": 2,
      "l30DaysUniquePayers": 1,
      "lastCalledAt": "2026-10-28T13:49:00.111Z"
    },
    "resource": "https://agents.crowdspark.me/v1/dev/package-advisories",
    "serviceName": "Agent Tools",
    "type": "http",
    "x402Version": 2
  },
  "source": "x402_bazaar",
  "summary": "Check a package before installing it: known vulnerabilities for one npm, PyPI, cargo, Go or Maven package version (OSV.dev), fixed-in version, latest version and release date, licence, deprecated flag, and a safe, caution or avoid verdict with reasons. Version defaults to latest."
}

What the leaf hashes

{"body":"7a8cba376e128736e6da7aa2f3478cb1ac37fcb280ecf976dbebbbef359fd52a","id":1039576,"kind":"listing","method":"sync.x402_bazaar/1","observed_us":1793298445127835,"prev":792562,"subject":"x402_bazaar:https://agents.crowdspark.me/v1/dev/package-advisories","subject_kind":"source_record"}

Proof

Fold these into the leaf in order, hashing each sorted pair with keccak256, to reach the root of 2026-10-29 (242798 rows).

1. 0x48a1061250b60d87a553bfd2eb310a91f753683311555c157fc113d6b651e037
2. 0x814ca0546a8ec545088359123b127c6b82bbc72fcaf4bf29df2a43ee720166d1
3. 0xedc84abe7b8a2127a62a6a0bf50c1ae6fb20d937f35c022edd38c21815caab9c
4. 0x4e813c43a7df1c77046fa6eb89e7c8657d991629512bbcc42d80fef0747407e9
5. 0x0a5705b98e544fb13daf5d64b5e5e95eae961e1fac1bb0743069bc6d57a17a6e
6. 0xb16b737e919f86b74b85c8d3931e10acec7c3202b17ebb82560e8b3edb108a20
7. 0x6adc5a281ed28841b8b51f2319f0a1ddbc59a064c999bc07b28b13687c3d5a3c
8. 0x3b7fa72b7393714404fe689cff97cd6d3c3abb2bacd09e31a0478ae1912228ec
9. 0x44296a93eb7561d28a86f3b9ce0ce5611e9989b414bf400662437919522d7318
10. 0x743b6bfa2e1ded4532f6fab7cc03b14d0077c6d91dec826ccf975ff08a5d19dc
11. 0x487de3ba4efb2bb56dd05aee1d12289180b99923ce617da3ddf2936b35b3d739
12. 0x00f80427cabcb85e35e7af8883650af028d6a3e7492db08341cf01daa341447b
13. 0xf671ac144e55381320422b5475c2bfb30442fc6b55a1424d1c0f0576f2d27c5c
14. 0xba203712cc4170d9697121c2026471be02b4061fd0831c90d2971031c905f0c1
15. 0x0bc4adb5c11d6f42a54004eb9a86e4a9294c3fb793d78af72f971454ecfe5b44
16. 0x976395aaca1b771b7e37710dee4157412909d2398c44e306a2e1e3fe83b984fd
17. 0x91f12a2db1e2c1be07cbe4de3981a37a33051a36d3c3eee5a260804add6d1d75
18. 0xd56e61af23709ed9f460471e3c08400c0142ee83e1fd9057e46350d12edf9c07

Day root

0xc050555c6b023f2aefb6536efb9f0760b92c30a0d06c572b7daf63db259ea17c

Chained

0x4cde8bae2042512e1bec11650628f0293556311cc4ea74d99ffddf02b671a7d6

Published

On Arc Testnet, block 69753317: 0x9e85c340732f416e431b111fae72f7624870125f7f379af2732eb6c2ba8cf6a1