Evidence row 2201500

What was observed

{
  "endpoints": [
    [
      "x402",
      "https://package-health.x402tookit.com/package-provenance"
    ]
  ],
  "name": "Package Health",
  "owner_address": "0xb531320805c5bed1d46aeadcf4f008fdf172dbda",
  "raw": {
    "accepts": [
      {
        "amount": "20000",
        "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
        "extra": {
          "name": "USD Coin",
          "version": "2"
        },
        "maxTimeoutSeconds": 300,
        "network": "eip155:8453",
        "payTo": "0xb531320805C5BED1D46AEaDcF4F008FDF172DBDa",
        "scheme": "exact"
      },
      {
        "amount": "20000",
        "asset": "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v",
        "extra": {
          "feePayer": "D6ZhtNQ5nT9ZnTHUbqXZsTx5MH2rPFiBBggX4hY1WePM",
          "transactionVersions": [
            0
          ]
        },
        "maxTimeoutSeconds": 300,
        "network": "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",
        "payTo": "DUPiupXtuox38dcGoXUKer5mAydCzmaHjrbQ66qeEm8s",
        "scheme": "exact"
      },
      {
        "amount": "20000",
        "asset": "0x3c499c542cEF5E3811e1192ce70d8cC03d5c3359",
        "extra": {
          "name": "USD Coin",
          "version": "2"
        },
        "maxTimeoutSeconds": 300,
        "network": "eip155:137",
        "payTo": "0xb531320805C5BED1D46AEaDcF4F008FDF172DBDa",
        "scheme": "exact"
      },
      {
        "amount": "20000",
        "asset": "0xaf88d065e77c8cC2239327C5EDb3A432268e5831",
        "extra": {
          "name": "USD Coin",
          "version": "2"
        },
        "maxTimeoutSeconds": 300,
        "network": "eip155:42161",
        "payTo": "0xb531320805C5BED1D46AEaDcF4F008FDF172DBDa",
        "scheme": "exact"
      }
    ],
    "description": "Does a package version carry build provenance (SLSA/sigstore attestations)? Signals a verifiable build, not safety.",
    "extensions": {
      "bazaar": {
        "info": {
          "input": {
            "method": "GET",
            "queryParams": {
              "name": "express",
              "system": "npm",
              "version": "4.19.2"
            },
            "type": "http"
          },
          "output": {
            "example": {
              "asOf": "2026-10-11T03:35:01.349Z",
              "attestations": 0,
              "degraded": false,
              "disclaimer": "Screening signal computed from the named public source. Not financial, legal or investment advice; provided as is. Verify at the source before acting.",
              "name": "express",
              "notChecked": [
                "verifying the signatures",
                "what the source code does",
                "…1 more"
              ],
              "publishedAt": "2024-03-25T14:30:36Z",
              "reasons": [
                "No provenance was found. Most packages still publish none; its absence is common and not a sign of malice.",
                "Provenance proves where a build came from, not that the code is safe."
              ],
              "relatedProjects": [
                "github.com/expressjs/express",
                "github.com/expressjs/express"
              ],
              "slsaProvenances": 0,
              "source": "deps.dev",
              "sourceUrl": "https://api.deps.dev",
              "summary": "express@4.19.2: 0 SLSA provenance(s), 0 attestation(s).",
              "system": "npm",
              "verdict": "NO_PROVENANCE_PUBLISHED",
              "version": "4.19.2"
            },
            "type": "json"
          }
        },
        "schema": {
          "$schema": "https://json-schema.org/draft/2020-12/schema",
          "properties": {
            "input": {
              "additionalProperties": false,
              "properties": {
                "method": {
                  "enum": [
                    "GET"
                  ],
                  "type": "string"
                },
                "queryParams": {
                  "properties": {
                    "name": {
                      "description": "Package name",
                      "type": "string"
                    },
                    "system": {
                      "description": "npm, pypi, go, maven, cargo or nuget",
                      "type": "string"
                    },
                    "version": {
                      "description": "Version; default is the registry's default version",
                      "type": "string"
                    }
                  },
                  "required": [
                    "system",
                    "name"
                  ],
                  "type": "object"
                },
                "type": {
                  "const": "http",
                  "type": "string"
                }
              },
              "required": [
                "type",
                "method"
              ],
              "type": "object"
            },
            "output": {
              "properties": {
                "example": {
                  "properties": {
                    "asOf": {
                      "type": [
                        "null",
                        "string"
                      ]
                    },
                    "attestations": {
                      "type": [
                        "null",
                        "number"
                      ]
                    },
                    "degraded": {
                      "type": [
                        "boolean",
                        "null"
                      ]
                    },
                    "disclaimer": {
                      "type": [
                        "null",
                        "string"
                      ]
                    },
                    "name": {
                      "type": [
                        "null",
                        "string"
                      ]
                    },
                    "notChecked": {
                      "items": {
                        "type": "string"
                      },
                      "type": [
                        "array",
                        "null"
                      ]
                    },
                    "publishedAt": {
                      "type": [
                        "null",
                        "string"
                      ]
                    },
                    "reasons": {
                      "items": {
                        "type": "string"
                      },
                      "type": [
                        "array",
                        "null"
                      ]
                    },
                    "relatedProjects": {
                      "items": {
                        "type": "string"
                      },
                      "type": [
                        "array",
                        "null"
                      ]
                    },
                    "slsaProvenances": {
                      "type": [
                        "null",
                        "number"
                      ]
                    },
                    "source": {
                      "type": [
                        "null",
                        "string"
                      ]
                    },
                    "sourceUrl": {
                      "type": [
                        "null",
                        "string"
                      ]
                    },
                    "summary": {
                      "type": [
                        "null",
                        "string"
                      ]
                    },
                    "system": {
                      "type": [
                        "null",
                        "string"
                      ]
                    },
                    "verdict": {
                      "type": [
                        "null",
                        "string"
                      ]
                    },
                    "version": {
                      "type": [
                        "null",
                        "string"
                      ]
                    }
                  },
                  "type": "object"
                },
                "type": {
                  "type": "string"
                }
              },
              "required": [
                "type"
              ],
              "type": "object"
            }
          },
          "required": [
            "input"
          ],
          "type": "object"
        }
      }
    },
    "lastUpdated": "2026-11-01T23:41:55.973Z",
    "quality": {
      "l30DaysTotalCalls": 2,
      "l30DaysUniquePayers": 2,
      "lastCalledAt": "2026-11-01T23:41:55.794Z"
    },
    "resource": "https://package-health.x402tookit.com/package-provenance",
    "serviceName": "Package Health",
    "tags": [
      "packages",
      "provenance",
      "slsa",
      "supply-chain"
    ],
    "type": "http",
    "x402Version": 2
  },
  "source": "x402_bazaar",
  "summary": "Does a package version carry build provenance (SLSA/sigstore attestations)? Signals a verifiable build, not safety."
}

What the leaf hashes

{"body":"50545f68934a570c9cda5ca1cfe920874471e55ecade868671e8ab77832d9444","id":2201500,"kind":"listing","method":"sync.x402_bazaar/1","observed_us":1793646805739896,"prev":null,"subject":"x402_bazaar:https://package-health.x402tookit.com/package-provenance","subject_kind":"source_record"}

Proof

Fold these into the leaf in order, hashing each sorted pair with keccak256, to reach the root of 2026-11-02 (444186 rows).

1. 0x4a3bde8a7fdf904998027b122fefebe558b6eaafe6a29f61599e6e7fb5c76c86
2. 0xe9f2e03123d09e6dfe7aae9f6c2723d9dd08f193a37ab0e7d3863d4a62526dd2
3. 0xdf89800a36b33132f11ef806e91960af9a1feb4c91ef8126111506478ce6d0a1
4. 0xb3d51334fa21ff2a7f18a72dee4ad48f37245917ba09a0321449c54f81140c9a
5. 0x82452cffa5db9a95634cadb628cb4419aa116d25f8c30272a3328d2399f7b395
6. 0x4eaa09cfca3baadc4ec2d62b7aece99cad89f83430a10fbbea1c0c8aac502373
7. 0x8bf540f7bc287f659976c6c45b1b2f5c137f0105f0f4d10ee8297600487fbe0c
8. 0xd1b26c83cdda01fdcd4148585017dff34b8638119a76047608c58e522fface2d
9. 0x43ec9172b64040e887681c7654bf2086c646de527a5ffbeaa85c9150ef822cde
10. 0x823047108e64f2f157138d3c8e683a90dbb4c33e0d67c01ba4edef7111ab5036
11. 0x52da6a9dae8a9c708636ff5019aef4ebb095666b1c6470c2fa8709af018b69d6
12. 0xb49c87ba1f1d6bd8b04974a4b725b1a6c4ec061e7b19895e6ac177e2e5bcb780
13. 0xec50fb8bdb629a8eec60882415de93b837c0015821049eeb6965a6cdd0d6c186
14. 0xdc58bc56b35577036d6185abcf0d4c91a45df10bd65f767505c1d43fcecde566
15. 0x3217f821997a6d778dcf0814a25b1296c55ab77710c675e7b15695d25a6ce67d
16. 0x8760c227928c5295506cd8606e763f86cf8cd2a549820fab4dc86d29ca0d816d
17. 0xa20b9be86af7d690e040c9060a373b2fc5498edf3432f43c26f74fa2febc1e9a
18. 0x050f2978b537f7afb21ee1551577cdf146d1c56f4df12d24315ae5e69366b0a4
19. 0x365b161a4b68d750dcc4b3ecce1154a2163c87b08762079428e68f0ebb6a754e

Day root

0x78fecaabbe319e56f5c4b80fc02e2052e198ad24781da8832a475ff65f2002d1

Chained

0xdc35957db5d1371ca382b9152878ffece28ec7c5cb4f98fd71ddb367f8b999b2

Published

On Arc Testnet, block 70432815: 0x56b814612eb2e3e544153df3e91e1f7199106d1e430c7d8c6b653feeb9ebe9af