Evidence row 2204598

What was observed

{
  "endpoints": [
    [
      "x402",
      "https://x402.freeq.one/tools/package_supply_chain_risk"
    ]
  ],
  "name": "x402-gateway",
  "owner_address": "0x90b0dc893406d6ea63bb077ed59f5e8340f98d84",
  "raw": {
    "accepts": [
      {
        "amount": "30000",
        "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
        "extra": {
          "name": "USD Coin",
          "version": "2"
        },
        "maxTimeoutSeconds": 60,
        "network": "eip155:8453",
        "payTo": "0x90b0dC893406d6eA63bb077ED59F5e8340f98d84",
        "scheme": "exact"
      }
    ],
    "description": "Package Supply-Chain Risk: Package supply-chain risk bundle: 0-100 safety score and risk band for an npm or PyPI package, with OSV vulnerabilities and fixed versions plus maintenance and adoption evidence. Known-vuln data only — no code scan. Pay per call in USDC on Base via x402 — POST https://x402.freeq.one/tools/package_supply_chain_risk.",
    "extensions": {
      "bazaar": {
        "info": {
          "input": {
            "body": {
              "ecosystem": "npm",
              "name": "lodash",
              "version": "4.17.21"
            },
            "bodyType": "json",
            "method": "POST",
            "type": "http"
          },
          "output": {
            "example": {
              "content": [],
              "isError": false,
              "structuredContent": {}
            },
            "type": "json"
          }
        },
        "resource": "https://x402.freeq.one/tools/package_supply_chain_risk",
        "schema": {
          "$schema": "https://json-schema.org/draft/2020-12/schema",
          "properties": {
            "input": {
              "additionalProperties": false,
              "properties": {
                "body": {
                  "description": "JSON request body. See GET /tools for the parameter catalog.",
                  "properties": {
                    "ecosystem": {
                      "description": "Registry ecosystem (default npm)",
                      "enum": [
                        "npm",
                        "pypi"
                      ],
                      "example": "npm",
                      "type": "string"
                    },
                    "name": {
                      "description": "Package name, e.g. lodash or @scope/pkg (npm) or requests (PyPI)",
                      "example": "lodash",
                      "type": "string"
                    },
                    "version": {
                      "description": "A registry version; defaults to latest",
                      "example": "4.17.21",
                      "type": "string"
                    }
                  },
                  "type": "object"
                },
                "bodyType": {
                  "enum": [
                    "json",
                    "form-data",
                    "text"
                  ],
                  "type": "string"
                },
                "description": {
                  "type": "string"
                },
                "headers": {
                  "additionalProperties": {
                    "type": "string"
                  },
                  "type": "object"
                },
                "mcpServerUrl": {
                  "type": "string"
                },
                "method": {
                  "enum": [
                    "POST"
                  ],
                  "type": "string"
                },
                "queryParams": {
                  "additionalProperties": {
                    "type": "string"
                  },
                  "type": "object"
                },
                "toolName": {
                  "type": "string"
                },
                "transport": {
                  "type": "string"
                },
                "type": {
                  "const": "http",
                  "type": "string"
                }
              },
              "required": [
                "type",
                "method",
                "bodyType",
                "body"
              ],
              "type": "object"
            },
            "output": {
              "properties": {
                "example": {
                  "properties": {
                    "content": {
                      "type": "array"
                    },
                    "isError": {
                      "type": "boolean"
                    },
                    "structuredContent": {
                      "type": "object"
                    }
                  },
                  "type": "object"
                },
                "type": {
                  "const": "json",
                  "type": "string"
                }
              },
              "required": [
                "type"
              ],
              "type": "object"
            }
          },
          "required": [
            "input"
          ],
          "type": "object"
        }
      }
    },
    "lastUpdated": "2026-11-01T18:48:44.583Z",
    "quality": {
      "l30DaysTotalCalls": 1,
      "l30DaysUniquePayers": 1,
      "lastCalledAt": "2026-11-01T18:48:44.337Z"
    },
    "resource": "https://x402.freeq.one/tools/package_supply_chain_risk",
    "serviceName": "x402-gateway",
    "tags": [
      "mcp",
      "pay-per-call",
      "x402",
      "usdc",
      "base"
    ],
    "type": "http",
    "x402Version": 2
  },
  "source": "x402_bazaar",
  "summary": "Package Supply-Chain Risk: Package supply-chain risk bundle: 0-100 safety score and risk band for an npm or PyPI package, with OSV vulnerabilities and fixed versions plus maintenance and adoption evidence. Known-vuln data only — no code scan. Pay per call in USDC on Base via x402 — POST https://x402.freeq.one/tools/package_supply_chain_risk."
}

What the leaf hashes

{"body":"c60b9c4650be19d8c7acf4124b556d8f1d8cf4607b3f153eb4c2f62f69f6d8ea","id":2204598,"kind":"listing","method":"sync.x402_bazaar/1","observed_us":1793646918381607,"prev":1811249,"subject":"x402_bazaar:https://x402.freeq.one/tools/package_supply_chain_risk","subject_kind":"source_record"}

Proof

Fold these into the leaf in order, hashing each sorted pair with keccak256, to reach the root of 2026-11-02 (444186 rows).

1. 0x92d1fe2788153cb7f57f4a323195322919116a472e797bfebdc2cd136c27b5a5
2. 0x465455946b566404ad8a0a601c47b95f88c6a8f575636a3c116a56ed3aa01141
3. 0x4dfd96d737d6a3d265b2f149c85e1d09914296f1f4299feaca8fb01a48217e7b
4. 0xd2c24be99d15eeccd49c97b04bc343c8fc290cb5b36cea341128c351a289cbb2
5. 0xfecf1debe030e4f00e93dd3584824fcfef2d019901444a0d4b24ae2547ad7dd1
6. 0xa501983d828545b4600acf96c0ff9e354104e3905a8cf3d173f83c68c2df18bd
7. 0x646fd37bd4c192edad5171746b990d830c64b8c7692e90d68a605cbebcd38ac6
8. 0x2d959172251bb526e560684a18e25e4697b97dd28963ea8318714ef616559a55
9. 0x12efcc302e71397efb4903da01edd13e0f962753126345ec6539cd2163422ecc
10. 0x86eb66381b499f04c219b4c572ee7d18f58df5d6c2e3b1c3daec564b33386806
11. 0xa139defc534a4f37fca6b25f0e9099854a709fc1a1f9c16c1db48e18213ea388
12. 0x132b7eb9839b9a3992040318f9144c58f82ba495d3a19d95d05ee1b6917c441b
13. 0xa17f6a1bac5d26cc57d2e02b81d6f7d4d897fa15d99d32d506b3ff7cbcfd9c03
14. 0xece99d4dfafa93913edbe131eb22b3d7ab2648b58b5bd9dcd361be4f8953b107
15. 0x5d92631d189bd0292c27a05f85a5ec38ec5f4197dfe4660eb991dc6a511e25a6
16. 0x5e23ec5954c11a4530aab8c635a72b12bcfeb6fcb03c6cb1a990cc1743424543
17. 0x1805ef693fbdb2c23fcb61616f830408ca89bec1dc5b68ee47a770ffc0b9760a
18. 0x4d205063c881c48edbbb37762a8d3bbb7444d4c42daa882f663a231893d25c35
19. 0x365b161a4b68d750dcc4b3ecce1154a2163c87b08762079428e68f0ebb6a754e

Day root

0x78fecaabbe319e56f5c4b80fc02e2052e198ad24781da8832a475ff65f2002d1

Chained

0xdc35957db5d1371ca382b9152878ffece28ec7c5cb4f98fd71ddb367f8b999b2

Published

On Arc Testnet, block 70432815: 0x56b814612eb2e3e544153df3e91e1f7199106d1e430c7d8c6b653feeb9ebe9af