Evidence row 122682

What was observed

{
  "endpoints": [
    [
      "x402",
      "https://tolca.tonbot.ca/v1/pkg-check"
    ]
  ],
  "name": "Tolca",
  "owner_address": "0x35f0b86a7e33f561faf7cfa5654cad9162c4a17d",
  "raw": {
    "accepts": [
      {
        "amount": "20000",
        "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
        "extra": {
          "name": "USD Coin",
          "version": "2"
        },
        "maxTimeoutSeconds": 120,
        "network": "eip155:8453",
        "payTo": "0x35F0B86a7E33F561faf7cfa5654CAd9162C4A17d",
        "scheme": "exact"
      }
    ],
    "description": "Is this package safe to install? One call, one verdict: safe / caution / avoid, with a score, concrete reasons (known vulnerabilities from OSV, deprecation, abandonment, adoption, install scripts, typosquat signals) and a one-line recommendation. Input: name, ecosystem (npm | PyPI), optional version.",
    "extensions": {
      "bazaar": {
        "info": {
          "input": {
            "body": {
              "ecosystem": "npm",
              "name": "lodash",
              "version": "4.17.15"
            },
            "bodyType": "json",
            "method": "POST",
            "type": "http"
          },
          "output": {
            "example": {
              "facts": {
                "latest_version": "4.17.21",
                "license": "MIT",
                "weekly_downloads": 50000000
              },
              "reasons": [
                "1 high/critical known vulnerability affecting this version",
                "a newer version exists (4.17.21)"
              ],
              "recommendation": "Upgrade to 4.17.21 before installing.",
              "score": 55,
              "verdict": "caution",
              "vulnerabilities": [
                {
                  "fixed_in": "4.17.19",
                  "id": "GHSA-p6mc-m468-83gw",
                  "severity": "HIGH",
                  "summary": "Prototype pollution in lodash"
                }
              ]
            },
            "type": "json"
          }
        },
        "schema": {
          "$schema": "https://json-schema.org/draft/2020-12/schema",
          "properties": {
            "input": {
              "additionalProperties": false,
              "properties": {
                "body": {
                  "properties": {
                    "ecosystem": {
                      "enum": [
                        "npm",
                        "PyPI"
                      ],
                      "type": "string"
                    },
                    "name": {
                      "description": "Package name as published",
                      "type": "string"
                    },
                    "version": {
                      "description": "Optional exact version; defaults to latest",
                      "type": "string"
                    }
                  },
                  "required": [
                    "name",
                    "ecosystem"
                  ],
                  "type": "object"
                },
                "bodyType": {
                  "enum": [
                    "json",
                    "form-data",
                    "text"
                  ],
                  "type": "string"
                },
                "method": {
                  "enum": [
                    "POST"
                  ],
                  "type": "string"
                },
                "type": {
                  "const": "http",
                  "type": "string"
                }
              },
              "required": [
                "type",
                "method",
                "bodyType",
                "body"
              ],
              "type": "object"
            },
            "output": {
              "properties": {
                "example": {
                  "type": "object"
                },
                "type": {
                  "type": "string"
                }
              },
              "required": [
                "type"
              ],
              "type": "object"
            }
          },
          "required": [
            "input"
          ],
          "type": "object"
        }
      }
    },
    "lastUpdated": "2026-10-25T17:05:35.408Z",
    "quality": {
      "l30DaysTotalCalls": 18,
      "l30DaysUniquePayers": 5,
      "lastCalledAt": "2026-10-25T17:05:35.224Z"
    },
    "resource": "https://tolca.tonbot.ca/v1/pkg-check",
    "serviceName": "Tolca",
    "tags": [
      "security",
      "npm",
      "pypi",
      "dependencies",
      "supply-chain"
    ],
    "type": "http",
    "x402Version": 2
  },
  "source": "x402_bazaar",
  "summary": "Is this package safe to install? One call, one verdict: safe / caution / avoid, with a score, concrete reasons (known vulnerabilities from OSV, deprecation, abandonment, adoption, install scripts, typosquat signals) and a one-line recommendation. Input: name, ecosystem (npm | PyPI), optional version."
}

What the leaf hashes

{"body":"cf884a4bb2616eb26d51d80c50891a882903cc4a531a5f6bd33daf300d8e7dfe","id":122682,"kind":"listing","method":"baseline/1","observed_us":1793025622066454,"prev":null,"subject":"x402_bazaar:https://tolca.tonbot.ca/v1/pkg-check","subject_kind":"source_record"}

Proof

Fold these into the leaf in order, hashing each sorted pair with keccak256, to reach the root of 2026-10-26 (296695 rows).

1. 0x07dffc60b5587d75286ced15aca18d9a597895ca12b82000acd88d4353e94eec
2. 0xd4aae3b8c5d4641e92827311c73dc1921b95c63a6a30ebdd6b44445731f0b72e
3. 0x5feddc91a86e6826c032ba9c5970ba4aa00f286c24655e00cbbf078633a4cb90
4. 0xeb4a2605b45b37704fdd637acc14237204981507f103659196110c169cc51f2e
5. 0x9d9abd37c982da6a9090104142101bb3a27f6ff6ab382e8cd253124b77276be7
6. 0x35a4c8ca1629ed84181e10b8a0cc226a74ce76dc2209edbecf9d0888dd74c4ef
7. 0xc93d04ec1d29cf128e8b6a80cda0c0cdc0d765c485e48f4120269934a529d5d5
8. 0xdf87df06fdcf89db35b6453a58a424384495df9b0db1ae98d66a5192572bcf0b
9. 0x8da37e2700bbc5dfe661eaae05282fd51bb2e599e1ad9c964285101b9847ad6d
10. 0x286d15bd62bd4bdc9d226a5307435d38911f3c64d096f3d8addf809f96068fe4
11. 0xe5919b091405f2537da4d32a97f1520286a61795e2d149438b884ef5190051cc
12. 0x6003e14d04cde1d24b195ac15b568dd483e04047e0f2ff64d9632a51a8f7123d
13. 0xe5a836cf25a8dfc72c9e3b6a69a7561a1f61f50f9cf36707d36f6e926aa15dec
14. 0xa96bb9408ce00a0d40ddaba8736257dfce76d5478b131d69db1afdf8a824312b
15. 0x7ddc2fead128357f881b63e6c7c26d7fbbb84fca6c7c8e0bbfe386de86ca8d39
16. 0xc6a4d7899a0f442958e26505011190b7cff2483611c1b94eba9043e0ba9ac36e
17. 0x8c756542e482157df0c36464d75c937b845e4423dbbcfad08f0cf8d5a16b9a13
18. 0x20704208aa6923d6b2450ef74ede87a6e0265d46447926038fe9506e9e154b2d
19. 0x9b9ce5b74b9bab5121612ef6b64920a8d453cbf311096a423eef9702747e868a

Day root

0xf43e8dcc3d451a4788b26be904c55e8c4c0fa75c9666796c51db38d37e2c0df8

Chained

0x702d5ac508f08b0d1accf36af25822d8e5660367494edd17a642fb61e158a57a

Published

Not published on a chain yet