← The evidence ledger
Evidence row 3250
Observed , by baseline/1.
- Kind
- listing
- About
- source_record agentic_market:paket-halowerk-com
- Recorded
- Previous row
- None: the first of its kind about this subject
- Body SHA-256
- 2727ca733b5f3010d192dc1521884cbcf367970c79da54b83353a94e34710dd6
- Leaf
- 0x17067a6a960a76cca6944d8fb236726efdf89ba64d0ff7a605a24e988016e8f1
What was observed
{
"endpoints": [
[
"x402",
"https://paket.halowerk.com/v1/artifact-hash"
],
[
"x402",
"https://paket.halowerk.com/v1/dependency-bloat"
],
[
"x402",
"https://paket.halowerk.com/v1/dependency-confusion"
],
[
"x402",
"https://paket.halowerk.com/v1/dependency-graph"
],
[
"x402",
"https://paket.halowerk.com/v1/deprecation-monitor"
],
[
"x402",
"https://paket.halowerk.com/v1/lifecycle-check"
],
[
"x402",
"https://paket.halowerk.com/v1/maintainer-pulse"
],
[
"x402",
"https://paket.halowerk.com/v1/package-freshness"
],
[
"x402",
"https://paket.halowerk.com/v1/package-match"
],
[
"x402",
"https://paket.halowerk.com/v1/package-versions"
],
[
"x402",
"https://paket.halowerk.com/v1/release-cadence"
],
[
"x402",
"https://paket.halowerk.com/v1/runtime-compat"
],
[
"x402",
"https://paket.halowerk.com/v1/typosquat-radar"
],
[
"x402",
"https://paket.halowerk.com/v1/upgrade-path"
]
],
"name": "paket.halowerk.com",
"owner_address": null,
"raw": {
"caip2_networks": [
"eip155:8453"
],
"category": "",
"description": "",
"domain": "paket.halowerk.com",
"endpoints": [
{
"description": "Takes a file digest and answers which released package version it is. Useful for an artefact found in a container layer, a build directory or an attachment with no metadata attached. Hex and base64 input are both accepted and normalised, the digest length is checked against the declared algorithm before anything is fetched, and the response names every matching package version, since one artefact can be published under more than one coordinate.",
"method": "POST",
"parameters": [
{
"default": null,
"description": "",
"enumValues": [],
"example": "SHA1",
"group": "body",
"name": "algorithm",
"required": false,
"type": "string"
},
{
"default": null,
"description": "",
"enumValues": [],
"example": "3fabe08296e930c796c19e3c516979386ba9fd59",
"group": "body",
"name": "hash",
"required": false,
"type": "string"
}
],
"pricing": {
"amount": "0.003",
"currency": "USDC",
"maxAmount": "",
"minAmount": "",
"network": "eip155:8453",
"scheme": "exact"
},
"providerName": "",
"quality": {
"l30DaysTotalCalls": "3",
"l30DaysUniquePayers": "3"
},
"serviceName": "",
"tags": [],
"url": "https://paket.halowerk.com/v1/artifact-hash"
},
{
"description": "Scores how much a package costs to depend on, using the resolved graph rather than a guess. Four measurements: the number of transitive nodes, the maximum depth, how many packages appear at more than one version, and the fan-out of the root. From those comes a grade from A to E with every threshold returned, so the judgement can be recomputed with different weights.",
"method": "POST",
"parameters": [
{
"default": null,
"description": "",
"enumValues": [],
"example": "express",
"group": "body",
"name": "name",
"required": false,
"type": "string"
},
{
"default": null,
"description": "",
"enumValues": [],
"example": "npm",
"group": "body",
"name": "system",
"required": false,
"type": "string"
},
{
"default": null,
"description": "",
"enumValues": [],
"example": "4.18.2",
"group": "body",
"name": "version",
"required": false,
"type": "string"
}
],
"pricing": {
"amount": "0.005",
"currency": "USDC",
"maxAmount": "",
"minAmount": "",
"network": "eip155:8453",
"scheme": "exact"
},
"providerName": "",
"quality": null,
"serviceName": "",
"tags": [],
"url": "https://paket.halowerk.com/v1/dependency-bloat"
},
{
"description": "Takes the names your organisation publishes internally and checks each against the public registry of the same ecosystem. Three findings, kept apart because they call for different actions. Name is free: nobody has taken it, the door is open but unattended, and the answer is to reserve the name yourself. Name is taken and old: probably an unrelated project that happens to share the name, worth confirming but rarely urgent.",
"method": "POST",
"parameters": [
{
"default": null,
"description": "",
"enumValues": [],
"example": [],
"group": "body",
"name": "packages",
"required": false,
"type": "array"
},
{
"default": null,
"description": "",
"enumValues": [],
"example": "npm",
"group": "body",
"name": "system",
"required": false,
"type": "string"
}
],
"pricing": {
"amount": "0.005",
"currency": "USDC",
"maxAmount": "",
"minAmount": "",
"network": "eip155:8453",
"scheme": "exact"
},
"providerName": "",
"quality": null,
"serviceName": "",
"tags": [],
"url": "https://paket.halowerk.com/v1/dependency-confusion"
},
{
"description": "Returns the resolved dependency graph of one package version across seven ecosystems: every node with its ecosystem, name, resolved version, whether it is bundled, and its depth from the root. Depth is computed as the shortest path from the root by breadth-first search — a depth-first walk loops forever on a cyclic graph and recursion overflows the stack on large trees, so neither is used.",
"method": "POST",
"parameters": [
{
"default": null,
"description": "",
"enumValues": [],
"example": true,
"group": "body",
"name": "include_edges",
"required": false,
"type": "boolean"
},
{
"default": null,
"description": "",
"enumValues": [],
"example": 800,
"group": "body",
"name": "max_nodes",
"required": false,
"type": "number"
},
{
"default": null,
"description": "",
"enumValues": [],
"example": "express",
"group": "body",
"name": "name",
"required": false,
"type": "string"
},
{
"default": null,
"description": "",
"enumValues": [],
"example": "npm",
"group": "body",
"name": "system",
"required": false,
"type": "string"
},
{
"default": null,
"description": "",
"enumValues": [],
"example": "4.18.2",
"group": "body",
"name": "version",
"required": false,
"type": "string"
}
],
"pricing": {
"amount": "0.005",
"currency": "USDC",
"maxAmount": "",
"minAmount": "",
"network": "eip155:8453",
"scheme": "exact"
},
"providerName": "",
"quality": null,
"serviceName": "",
"tags": [],
"url": "https://paket.halowerk.com/v1/dependency-graph"
},
{
"description": "A monitor with memory. The first call stores a snapshot of the packages you name and returns the baseline, explicitly marked as such rather than reporting everything as new — a monitor that cries wolf on day one is not read on day two. Every later call with the returned snapshot token compares the current registry state against what was stored and reports the differences: packages whose newest version became deprecated, individual versions that gained a deprecation notice, and, equally…",
"method": "POST",
"parameters": [
{
"default": null,
"description": "",
"enumValues": [],
"example": [],
"group": "body",
"name": "packages",
"required": false,
"type": "array"
}
],
"pricing": {
"amount": "0.004",
"currency": "USDC",
"maxAmount": "",
"minAmount": "",
"network": "eip155:8453",
"scheme": "exact"
},
"providerName": "",
"quality": null,
"serviceName": "",
"tags": [],
"url": "https://paket.halowerk.com/v1/deprecation-monitor"
},
{
"description": "Answers the question an agent actually has about a product cycle: for the version in use, is support over, how many days remain, and where should it move. Given a product identifier from endoflife.date and optionally a version, it locates the matching release line and returns the release date, the end of active support, the end of life, the end of extended security support where one exists, whether the line is an LTS line, the latest patch release within that line and the number of days to each…",
"method": "POST",
"parameters": [
{
"default": null,
"description": "",
"enumValues": [],
"example": "nodejs",
"group": "body",
"name": "product",
"required": false,
"type": "string"
},
{
"default": null,
"description": "",
"enumValues": [],
"example": "20.11.1",
"group": "body",
"name": "version",
"required": false,
"type": "string"
}
],
"pricing": {
"amount": "0.003",
"currency": "USDC",
"maxAmount": "",
"minAmount": "",
"network": "eip155:8453",
"scheme": "exact"
},
"providerName": "",
"quality": null,
"serviceName": "",
"tags": [],
"url": "https://paket.halowerk.com/v1/lifecycle-check"
},
{
"description": "Answers whether the project behind a package is still alive, from two sources with different roles. deps.dev supplies stars, forks, open issue count, the declared licence and the OpenSSF scorecard without any rate limit or account. GitHub supplies the last push and recent commit activity, but only sixty requests per hour per IP without authentication, so it is treated as optional: when it is unavailable the response still comes back, the affected fields are named as unavailable, and the…",
"method": "POST",
"parameters": [
{
"default": null,
"description": "",
"enumValues": [],
"example": "express",
"group": "body",
"name": "name",
"required": false,
"type": "string"
},
{
"default": null,
"description": "",
"enumValues": [],
"example": "npm",
"group": "body",
"name": "system",
"required": false,
"type": "string"
},
{
"default": null,
"description": "",
"enumValues": [],
"example": true,
"group": "body",
"name": "use_github",
"required": false,
"type": "boolean"
}
],
"pricing": {
"amount": "0.005",
"currency": "USDC",
"maxAmount": "",
"minAmount": "",
"network": "eip155:8453",
"scheme": "exact"
},
"providerName": "",
"quality": null,
"serviceName": "",
"tags": [],
"url": "https://paket.halowerk.com/v1/maintainer-pulse"
},
{
"description": "Turns the release history of a package into a maintenance signal an agent can act on. Four measurements go in: the age in days of the newest stable release, the median gap between the last ten releases, the ratio of the current silence to that median, and whether the newest version is deprecated. Each maps to a component score and the components combine into a grade from A to E.",
"method": "POST",
"parameters": [
{
"default": null,
"description": "",
"enumValues": [],
"example": false,
"group": "body",
"name": "include_prereleases",
"required": false,
"type": "boolean"
},
{
"default": null,
"description": "",
"enumValues": [],
"example": "express",
"group": "body",
"name": "name",
"required": false,
"type": "string"
},
{
"default": null,
"description": "",
"enumValues": [],
"example": "npm",
"group": "body",
"name": "system",
"required": false,
"type": "string"
}
],
"pricing": {
"amount": "0.003",
"currency": "USDC",
"maxAmount": "",
"minAmount": "",
"network": "eip155:8453",
"scheme": "exact"
},
"providerName": "",
"quality": null,
"serviceName": "",
"tags": [],
"url": "https://paket.halowerk.com/v1/package-freshness"
},
{
"description": "Resolves a package to the source projects it declares, with the provenance of each link stated. This is the honest way to answer whether two packages belong together: names repeat across ecosystems and mean different things there, and that gap is exactly what dependency confusion attacks aim at.",
"method": "POST",
"parameters": [
{
"default": null,
"description": "",
"enumValues": [],
"example": "requests",
"group": "body",
"name": "compare_name",
"required": false,
"type": "string"
},
{
"default": null,
"description": "",
"enumValues": [],
"example": "pypi",
"group": "body",
"name": "compare_system",
"required": false,
"type": "string"
},
{
"default": null,
"description": "",
"enumValues": [],
"example": "express",
"group": "body",
"name": "name",
"required": false,
"type": "string"
},
{
"default": null,
"description": "",
"enumValues": [],
"example": "npm",
"group": "body",
"name": "system",
"required": false,
"type": "string"
}
],
"pricing": {
"amount": "0.004",
"currency": "USDC",
"maxAmount": "",
"minAmount": "",
"network": "eip155:8453",
"scheme": "exact"
},
"providerName": "",
"quality": null,
"serviceName": "",
"tags": [],
"url": "https://paket.halowerk.com/v1/package-match"
},
{
"description": "Returns the full version history of a package from a single normalised schema that covers seven ecosystems. Versions are ordered by semantic version, not alphabetically and not in registry order, so 1.10.0 sorts after 1.9.0 — the mistake that quietly breaks naive comparisons. For each version you get the publication timestamp, whether it is the registry default, whether it is deprecated and the deprecation reason as the registry states it.",
"method": "POST",
"parameters": [],
"pricing": {
"amount": "0.003",
"currency": "USDC",
"maxAmount": "",
"minAmount": "",
"network": "eip155:8453",
"scheme": "exact"
},
"providerName": "",
"quality": {
"l30DaysTotalCalls": "6",
"l30DaysUniquePayers": "3"
},
"serviceName": "package_versions",
"tags": [
"packages",
"versions",
"sbom",
"dependencies"
],
"url": "https://paket.halowerk.com/v1/package-versions"
},
{
"description": "Looks at when a package published, not how often, and reports where the pattern breaks. Three kinds of finding, which mean different things and are kept apart. A long gap: a silence several times the package own median interval, which suggests dormancy. A burst: several releases inside a short window, which is either emergency fixes or an automated publish loop that ran away, and the response gives the dates so the reader can tell.",
"method": "POST",
"parameters": [
{
"default": null,
"description": "",
"enumValues": [],
"example": false,
"group": "body",
"name": "include_prereleases",
"required": false,
"type": "boolean"
},
{
"default": null,
"description": "",
"enumValues": [],
"example": "express",
"group": "body",
"name": "name",
"required": false,
"type": "string"
},
{
"default": null,
"description": "",
"enumValues": [],
"example": "normal",
"group": "body",
"name": "sensitivity",
"required": false,
"type": "string"
},
{
"default": null,
"description": "",
"enumValues": [],
"example": "npm",
"group": "body",
"name": "system",
"required": false,
"type": "string"
}
],
"pricing": {
"amount": "0.004",
"currency": "USDC",
"maxAmount": "",
"minAmount": "",
"network": "eip155:8453",
"scheme": "exact"
},
"providerName": "",
"quality": null,
"serviceName": "",
"tags": [],
"url": "https://paket.halowerk.com/v1/release-cadence"
},
{
"description": "Normalises what a package version declares about where it can run. For npm that is the engines, os and cpu fields plus the declared package type and whether native build scripts are present; for PyPI it is requires_python together with the operating system, implementation and Python version classifiers.",
"method": "POST",
"parameters": [
{
"default": null,
"description": "",
"enumValues": [],
"example": "express",
"group": "body",
"name": "name",
"required": false,
"type": "string"
},
{
"default": null,
"description": "",
"enumValues": [],
"example": "npm",
"group": "body",
"name": "system",
"required": false,
"type": "string"
},
{
"default": null,
"description": "",
"enumValues": [],
"example": "linux",
"group": "body",
"name": "target_os",
"required": false,
"type": "string"
},
{
"default": null,
"description": "",
"enumValues": [],
"example": "20.11.1",
"group": "body",
"name": "target_runtime",
"required": false,
"type": "string"
},
{
"default": null,
"description": "",
"enumValues": [],
"example": "4.18.2",
"group": "body",
"name": "version",
"required": false,
"type": "string"
}
],
"pricing": {
"amount": "0.004",
"currency": "USDC",
"maxAmount": "",
"minAmount": "",
"network": "eip155:8453",
"scheme": "exact"
},
"providerName": "",
"quality": null,
"serviceName": "",
"tags": [],
"url": "https://paket.halowerk.com/v1/runtime-compat"
},
{
"description": "Generates the typical misspellings of a package name and looks up every one of them in the registry. Generation rather than search is deliberate: most of the seven ecosystems have no search API, and the ones that do rank by popularity instead of similarity, so a fresh squat with no downloads never appears.",
"method": "POST",
"parameters": [
{
"default": null,
"description": "",
"enumValues": [],
"example": 45,
"group": "body",
"name": "max_variants",
"required": false,
"type": "number"
},
{
"default": null,
"description": "",
"enumValues": [],
"example": "express",
"group": "body",
"name": "name",
"required": false,
"type": "string"
},
{
"default": null,
"description": "",
"enumValues": [],
"example": 365,
"group": "body",
"name": "recent_days",
"required": false,
"type": "number"
},
{
"default": null,
"description": "",
"enumValues": [],
"example": "npm",
"group": "body",
"name": "system",
"required": false,
"type": "string"
}
],
"pricing": {
"amount": "0.006",
"currency": "USDC",
"maxAmount": "",
"minAmount": "",
"network": "eip155:8453",
"scheme": "exact"
},
"providerName": "",
"quality": null,
"serviceName": "",
"tags": [],
"url": "https://paket.halowerk.com/v1/typosquat-radar"
},
{
"description": "Turns \"we are on 2.4.1 and want to be current\" into an ordered list of stops. The rule it enforces is that no major version is skipped: going from 2 to 5 means stopping at the last release of 3 and the last release of 4, because that is where the migration notes live and where the warnings about the next major are published.",
"method": "POST",
"parameters": [
{
"default": null,
"description": "",
"enumValues": [],
"example": "4.16.0",
"group": "body",
"name": "from_version",
"required": false,
"type": "string"
},
{
"default": null,
"description": "",
"enumValues": [],
"example": false,
"group": "body",
"name": "include_prereleases",
"required": false,
"type": "boolean"
},
{
"default": null,
"description": "",
"enumValues": [],
"example": "express",
"group": "body",
"name": "name",
"required": false,
"type": "string"
},
{
"default": null,
"description": "",
"enumValues": [],
"example": "npm",
"group": "body",
"name": "system",
"required": false,
"type": "string"
}
],
"pricing": {
"amount": "0.004",
"currency": "USDC",
"maxAmount": "",
"minAmount": "",
"network": "eip155:8453",
"scheme": "exact"
},
"providerName": "",
"quality": null,
"serviceName": "",
"tags": [],
"url": "https://paket.halowerk.com/v1/upgrade-path"
}
],
"enriched": false,
"iconUrl": "",
"id": "paket-halowerk-com",
"integrationType": "",
"isNew": false,
"name": "paket.halowerk.com",
"networks": [
"Base"
],
"priceSummary": {
"avgCostBasis": "exact",
"avgCostPerTransaction": "0.004143",
"currency": "USDC",
"maxAmount": "0.006",
"minAmount": "0.003"
},
"provider": "paket.halowerk.com",
"providerUrl": "",
"serviceName": "package_versions",
"tags": [
"packages",
"versions",
"sbom",
"dependencies"
]
},
"source": "agentic_market",
"summary": ""
}What the leaf hashes
{"body":"2727ca733b5f3010d192dc1521884cbcf367970c79da54b83353a94e34710dd6","id":3250,"kind":"listing","method":"baseline/1","observed_us":1793025272408797,"prev":null,"subject":"agentic_market:paket-halowerk-com","subject_kind":"source_record"}Proof
Fold these into the leaf in order, hashing each sorted pair with keccak256, to reach the root of (296695 rows).
- 0x170687c67930a9fe17a5c165dace51940ddb2773572988dd0dc64a9caf708b2c
- 0x7df71ad08f3030184f805e3908b7b765ffc3bb5adb119391e216f98f47798a19
- 0x76024edbdd183b10a5318c7240c164c0fcb083d1185f02af68c97c6ddc9de2a3
- 0x58b35633a7ff8157568f8ad357f6c90079cbab13b56e0cb9f806acf6f602b625
- 0xac8cacfad31a54c8aef9ca659ae7ac04eeecd65a6c0d2c5c97e3a47d7a13059a
- 0x20f752fbc2ec2cce9f9e3b67eee69ab3919282811db034a043dada184994be36
- 0x2e0baceaa7631cf920d04fa3926b698658935f25bc7d7cf09a76a21d4ca00f8a
- 0xfa5fd26bf9907ed60f1d8e247ca354a1cfe190aa9b8764451a7a770eb4e45005
- 0x858bb23b8f30ede90cb078260507e237f0caba12169c3894f43372734660e143
- 0xd226fb22436e571794e0a32680a8d7a815d452f9ddba81af492daddbec0de485
- 0x1ff0b13d2481c9da18eda22ffeb00b1ce27c383301867cb629c19e9a2e4b869a
- 0x856fd0d049baa5f07cd2d5d524b40c994bed22cb46ea15af4cc075b3f3f3d444
- 0x32f46c5f73ecbfd4f770f7f760a79bee2afed4b3e7572fa882b3e7dce8df4356
- 0x770e4376196188c7fc9ec40f8e218dc0d1cb92bba5fe0425a0edce27ca9a997f
- 0x60582ab4b41e72eb70eb0bce07fbf0fb4d2b62a8bad5be50f5d16d511adc746c
- 0xc6a4d7899a0f442958e26505011190b7cff2483611c1b94eba9043e0ba9ac36e
- 0x8c756542e482157df0c36464d75c937b845e4423dbbcfad08f0cf8d5a16b9a13
- 0x20704208aa6923d6b2450ef74ede87a6e0265d46447926038fe9506e9e154b2d
- 0x9b9ce5b74b9bab5121612ef6b64920a8d453cbf311096a423eef9702747e868a
- Day root
- 0xf43e8dcc3d451a4788b26be904c55e8c4c0fa75c9666796c51db38d37e2c0df8
- Chained
- 0x702d5ac508f08b0d1accf36af25822d8e5660367494edd17a642fb61e158a57a
- Published
- On Arc Testnet, block 69251483: 0x495162f8936e19f0039918feebe6c307f327cd6bf8c37219620b1970041fa9ae