addrbookFor publishers
← The evidence ledger

Evidence row 1262475

Observed , by sync.x402_bazaar/1.

Kind
listing
About
source_record x402_bazaar:https://agents.crowdspark.me/v1/dev/package-advisories
Recorded
Previous row
#1039576
Body SHA-256
a8da27051050b88eac6b8f45f954dde3e8f4374b476dd4a7edd5c9d2bccba80b
Leaf
0x40d8799f0802522d317cd5723000e617dcf66ad70d9cb9176b39a403179821d8

What was observed

{
  "endpoints": [
    [
      "x402",
      "https://agents.crowdspark.me/v1/dev/package-advisories"
    ]
  ],
  "name": "Agent Tools",
  "owner_address": "0x0dea0030a17bf886543a757c55924710258c2eec",
  "raw": {
    "accepts": [
      {
        "amount": "5000",
        "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
        "extra": {
          "name": "USD Coin",
          "version": "2"
        },
        "maxTimeoutSeconds": 300,
        "network": "eip155:8453",
        "payTo": "0x0dEA0030A17BF886543a757c55924710258c2eec",
        "scheme": "exact"
      }
    ],
    "description": "Free tier: 25 calls/day per IP with header X-Free-Call: 1 (or ?free=1), then pay per call. Check a package before installing it: known vulnerabilities for one npm, PyPI, cargo, Go or Maven package version (OSV.dev), fixed-in version, latest version and release date, licence, deprecated flag, and a safe, caution or avoid verdict with reasons. Version defaults to latest.",
    "extensions": {
      "bazaar": {
        "info": {
          "input": {
            "method": "GET",
            "queryParams": {
              "ecosystem": "npm",
              "name": "lodash",
              "version": "4.17.20"
            },
            "type": "http"
          },
          "output": {
            "example": {
              "deprecated": false,
              "ecosystem": "npm",
              "latest_version": "4.18.1",
              "licenses": [
                "MIT"
              ],
              "name": "lodash",
              "reasons": [
                "5 known advisories affect this version (worst: high)",
                "a newer version exists"
              ],
              "suggested_min_fixed_version": "4.18.0",
              "verdict": "avoid",
              "version": "4.17.20",
              "version_checked": "requested",
              "vulnerabilities": {
                "by_severity": {
                  "HIGH": 2,
                  "MODERATE": 3
                },
                "count": 5,
                "items": [
                  {
                    "cve": [
                      "CVE-2020-28500"
                    ],
                    "fixed_in": [
                      "4.17.21"
                    ],
                    "id": "GHSA-29mw-wpgm-hmr9",
                    "severity": "MODERATE"
                  }
                ]
              }
            },
            "type": "json"
          }
        },
        "schema": {
          "$schema": "https://json-schema.org/draft/2020-12/schema",
          "properties": {
            "input": {
              "additionalProperties": false,
              "properties": {
                "method": {
                  "enum": [
                    "GET"
                  ],
                  "type": "string"
                },
                "queryParams": {
                  "properties": {
                    "ecosystem": {
                      "description": "Package ecosystem",
                      "enum": [
                        "npm",
                        "pypi",
                        "cargo",
                        "go",
                        "maven"
                      ],
                      "type": "string"
                    },
                    "name": {
                      "description": "Package name, e.g. lodash or requests (maven: group:artifact)",
                      "type": "string"
                    },
                    "version": {
                      "description": "Optional. Defaults to the latest version",
                      "type": "string"
                    }
                  },
                  "required": [
                    "ecosystem",
                    "name"
                  ],
                  "type": "object"
                },
                "type": {
                  "const": "http",
                  "type": "string"
                }
              },
              "required": [
                "type",
                "method"
              ],
              "type": "object"
            },
            "output": {
              "properties": {
                "example": {
                  "type": "object"
                },
                "type": {
                  "type": "string"
                }
              },
              "required": [
                "type"
              ],
              "type": "object"
            }
          },
          "required": [
            "input"
          ],
          "type": "object"
        }
      }
    },
    "lastUpdated": "2026-10-30T00:21:05.548Z",
    "quality": {
      "l30DaysTotalCalls": 3,
      "l30DaysUniquePayers": 1,
      "lastCalledAt": "2026-10-30T00:21:04.945Z"
    },
    "resource": "https://agents.crowdspark.me/v1/dev/package-advisories",
    "serviceName": "Agent Tools",
    "type": "http",
    "x402Version": 2
  },
  "source": "x402_bazaar",
  "summary": "Free tier: 25 calls/day per IP with header X-Free-Call: 1 (or ?free=1), then pay per call. Check a package before installing it: known vulnerabilities for one npm, PyPI, cargo, Go or Maven package version (OSV.dev), fixed-in version, latest version and release date, licence, deprecated flag, and a safe, caution or avoid verdict with reasons. Version defaults to latest."
}

What the leaf hashes

{"body":"a8da27051050b88eac6b8f45f954dde3e8f4374b476dd4a7edd5c9d2bccba80b","id":1262475,"kind":"listing","method":"sync.x402_bazaar/1","observed_us":1793385562719022,"prev":1039576,"subject":"x402_bazaar:https://agents.crowdspark.me/v1/dev/package-advisories","subject_kind":"source_record"}

Proof

Fold these into the leaf in order, hashing each sorted pair with keccak256, to reach the root of (243099 rows).

  1. 0x40d88f5d9a3296af123d00273334bd255d783d04a6ec4140f0b3f6725e533ba4
  2. 0x5cb0db43ea8bdb0ff14a44cd66bcb2da80e624a3d39bfae5c181d291e45f60f6
  3. 0x10bdfac3920d6ee6571496a422645aa83afbb3eeab3327666d1ace0f1d5198cc
  4. 0x43d3e0f1c70f8608e44ba7e3a29594c5d093e23eb488f44a065d201603f23578
  5. 0x62e76e5c9760b556dd60f792f4653d95c749cc413bfaa35cfa4efea7e27ba2a6
  6. 0xae42fc625aa1e3cafdab32291fd603a0e1fa9b101752ca260d9ec2c8c39db353
  7. 0x2e66b2d55d69a7a024e98ad9498bdfe013013edec6d2b97aa4667de12bab368e
  8. 0x9dba0763c12b164f0587087fc49fa885d9764845a587096006971879f04321ad
  9. 0x92c1243504d115e9d007547206b953b2697340417ed26aaf7769a2909742e96e
  10. 0x0ffdf88cc8914c035e0634e2b65ce966e7c9b82a200b7d503b4d5bf1f2555832
  11. 0x9846cbcb7a1bebc639615d7393b3d5347a07af0b33697f6030f6afc84b3195fa
  12. 0xe226567c96df43c9ffa01238eb3aea9c0de478ff057d56848a0462858afad839
  13. 0xcc206dc2f9e188db598d4b3a17da47efe415d2946ef4b3a478b5d02f3ddb1474
  14. 0x775f1cf1eda93a75a3d05aa8e7b45b258d1de91c21741301b1aa3d048fba588c
  15. 0xd7d5c71ec079257a487d0494049c896f97cf8bf7d89a43fea539777c548c96f3
  16. 0x50ca74d7c8f26a46e9c3b8fb5e7f9ebcdfdcc1b7c863db3b6d2b7c12e24ca66f
  17. 0xb0c9ef42e725578748f3119c9dbebf2fc437266bda013df29f98ed3ebe621403
  18. 0x30a81d8fcef4e8f9e2877c62796cfc5612fc1b251127d531dee28f8dbd5c5147
Day root
0x0826c7ad6039e06a2360ca0a4a3a4fe7f2626c6dc19f71a37599386f78b39875
Chained
0x36b4c8a1063758f0b8765fa1bdf75fa92fb543cc183add3e261880ee2bd1f822
Published
On Arc Testnet, block 69923247: 0x8704744146c6967c8abc9e9a99de4db7283b29e840922ea83a69b6fe776e6861

How to check it · This row as JSON