Evidence row 122050

What was observed

{
  "endpoints": [
    [
      "x402",
      "https://stormap.ai/x402/v1/package_check"
    ]
  ],
  "name": "Stormap",
  "owner_address": "0x1260d8d1fd47e22416156b72ee75e97986f8ba70",
  "raw": {
    "accepts": [
      {
        "amount": "10000",
        "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
        "extra": {
          "name": "USD Coin",
          "version": "2"
        },
        "maxTimeoutSeconds": 120,
        "network": "eip155:8453",
        "payTo": "0x1260d8d1fd47e22416156b72ee75e97986f8ba70",
        "scheme": "exact"
      }
    ],
    "description": "Use when an npm or PyPI package is about to be installed, especially a name an LLM suggested. Returns ok_to_install, caution, dont_install or does_not_exist with reasons: malicious-package reports, known vulnerabilities for the version with the fixed version, deprecated or yanked, age, install scripts, downloads and typosquat look-alikes. From OSV.dev, deps.dev, npm and PyPI. ecosystem=pypi for Python. Errors: 400 bad_input, 502 registry unreachable. Failed calls are not charged.",
    "extensions": {
      "bazaar": {
        "info": {
          "input": {
            "method": "GET",
            "queryParams": {
              "name": "lodash@4.17.15"
            },
            "type": "http"
          },
          "output": {
            "example": {
              "ecosystem": "npm",
              "first_published": "2012-04-23",
              "install_scripts": [],
              "latest_version": "4.18.1",
              "malicious_reports": [],
              "package": "lodash",
              "reasons": [
                "3 high-severity known vulnerabilities in 4.17.15; fixed in 4.17.21."
              ],
              "similar_to": null,
              "summary": "Install with caution: lodash@4.17.15. 3 high-severity known vulnerabilities in 4.17.15; fixed in 4.17.21.",
              "verdict": "caution",
              "version_checked": "4.17.15",
              "vulnerabilities": [
                {
                  "aliases": [
                    "CVE-2021-23337"
                  ],
                  "fixed_in": [
                    "4.17.21"
                  ],
                  "id": "GHSA-35jh-r3h4-6jhm",
                  "severity": "high",
                  "summary": "Command Injection in lodash"
                }
              ],
              "vulnerability_count": 6,
              "weekly_downloads": 162267012
            },
            "type": "json"
          }
        },
        "schema": {
          "$schema": "https://json-schema.org/draft/2020-12/schema",
          "properties": {
            "input": {
              "additionalProperties": false,
              "properties": {
                "method": {
                  "enum": [
                    "GET"
                  ],
                  "type": "string"
                },
                "queryParams": {
                  "properties": {
                    "ecosystem": {
                      "description": "npm (default) or pypi.",
                      "enum": [
                        "npm",
                        "pypi"
                      ],
                      "type": "string"
                    },
                    "name": {
                      "description": "Package name, optionally with a version: \"lodash\", \"lodash@4.17.15\", \"@scope/pkg\", \"requests==2.31.0\".",
                      "type": "string"
                    },
                    "version": {
                      "description": "Optional version to check (default: latest).",
                      "type": "string"
                    }
                  },
                  "required": [
                    "name"
                  ],
                  "type": "object"
                },
                "type": {
                  "const": "http",
                  "type": "string"
                }
              },
              "required": [
                "type",
                "method"
              ],
              "type": "object"
            },
            "output": {
              "properties": {
                "example": {
                  "properties": {
                    "ecosystem": {
                      "type": "string"
                    },
                    "first_published": {
                      "type": "string"
                    },
                    "install_scripts": {
                      "type": "array"
                    },
                    "latest_version": {
                      "type": "string"
                    },
                    "malicious_reports": {
                      "type": "array"
                    },
                    "package": {
                      "type": "string"
                    },
                    "reasons": {
                      "type": "array"
                    },
                    "similar_to": {},
                    "summary": {
                      "type": "string"
                    },
                    "verdict": {
                      "type": "string"
                    },
                    "version_checked": {
                      "type": "string"
                    },
                    "vulnerabilities": {
                      "type": "array"
                    },
                    "vulnerability_count": {
                      "type": [
                        "integer",
                        "number"
                      ]
                    },
                    "weekly_downloads": {
                      "type": [
                        "integer",
                        "number"
                      ]
                    }
                  },
                  "type": "object"
                },
                "type": {
                  "type": "string"
                }
              },
              "required": [
                "type"
              ],
              "type": "object"
            }
          },
          "required": [
            "input"
          ],
          "type": "object"
        }
      }
    },
    "lastUpdated": "2026-10-17T17:17:42.74Z",
    "quality": {
      "l30DaysTotalCalls": 3,
      "l30DaysUniquePayers": 2,
      "lastCalledAt": "2026-10-17T17:17:42.543Z"
    },
    "resource": "https://stormap.ai/x402/v1/package_check",
    "serviceName": "Stormap",
    "tags": [
      "web",
      "security",
      "ai-agents"
    ],
    "type": "http",
    "x402Version": 2
  },
  "source": "x402_bazaar",
  "summary": "Use when an npm or PyPI package is about to be installed, especially a name an LLM suggested. Returns ok_to_install, caution, dont_install or does_not_exist with reasons: malicious-package reports, known vulnerabilities for the version with the fixed version, deprecated or yanked, age, install scripts, downloads and typosquat look-alikes. From OSV.dev, deps.dev, npm and PyPI. ecosystem=pypi for Python. Errors: 400 bad_input, 502 registry unreachable. Failed calls are not charged."
}

What the leaf hashes

{"body":"652b268fe134fd9a2f064a5a53ee0f6594e7d17b6dc7300da2d2f769a98d9e24","id":122050,"kind":"listing","method":"baseline/1","observed_us":1793025620846082,"prev":null,"subject":"x402_bazaar:https://stormap.ai/x402/v1/package_check","subject_kind":"source_record"}

Proof

Its day has not closed yet. A day closes ten minutes after midnight UTC; the proof appears here then.