Evidence row 525814

What was observed

{
  "endpoints": [
    [
      "x402",
      "https://http--forest-gas-station-mainnet--lcjl27p8lmjs.code.run/package/security"
    ]
  ],
  "name": "Forest Packages",
  "owner_address": "0xb48d918151311f982d542ef5c84cc1cd54cff7a9",
  "raw": {
    "accepts": [
      {
        "amount": "3000",
        "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
        "extra": {
          "name": "USD Coin",
          "version": "2"
        },
        "maxTimeoutSeconds": 120,
        "network": "eip155:8453",
        "payTo": "0xb48D918151311F982d542eF5C84cc1cd54CFf7a9",
        "scheme": "exact"
      }
    ],
    "description": "Known vulnerabilities for package+version; normalized evidence, not a safety verdict. Base mainnet USDC",
    "extensions": {
      "bazaar": {
        "info": {
          "input": {
            "body": {
              "ecosystem": "npm",
              "package": "express",
              "version": "4.21.2"
            },
            "bodyType": "json",
            "method": "POST",
            "type": "http"
          },
          "output": {
            "example": {
              "capability": "package.security",
              "data": {
                "count": 0,
                "ecosystem": "npm",
                "evidence": [],
                "package": "express",
                "version": "4.21.2",
                "vulnerabilities": []
              },
              "meta": {
                "cache": "miss",
                "checked_at": "2026-01-01T00:00:00.000Z",
                "duration_ms": 1,
                "provider": "osv"
              },
              "ok": true,
              "version": "1"
            },
            "type": "json"
          }
        },
        "schema": {
          "$schema": "https://json-schema.org/draft/2020-12/schema",
          "properties": {
            "input": {
              "additionalProperties": false,
              "properties": {
                "body": {
                  "additionalProperties": false,
                  "properties": {
                    "ecosystem": {
                      "description": "Public ecosystem value used to scope this lookup.",
                      "enum": [
                        "npm",
                        "pypi"
                      ]
                    },
                    "package": {
                      "description": "Public package name to inspect.",
                      "maxLength": 214,
                      "minLength": 1,
                      "type": "string"
                    },
                    "version": {
                      "description": "Package version whose public metadata should be checked.",
                      "maxLength": 128,
                      "minLength": 1,
                      "type": "string"
                    }
                  },
                  "required": [
                    "ecosystem",
                    "package",
                    "version"
                  ],
                  "type": "object"
                },
                "bodyType": {
                  "enum": [
                    "json",
                    "form-data",
                    "text"
                  ],
                  "type": "string"
                },
                "method": {
                  "enum": [
                    "POST"
                  ],
                  "type": "string"
                },
                "type": {
                  "const": "http",
                  "type": "string"
                }
              },
              "required": [
                "type",
                "method",
                "bodyType",
                "body"
              ],
              "type": "object"
            },
            "output": {
              "properties": {
                "example": {
                  "additionalProperties": false,
                  "properties": {
                    "capability": {
                      "const": "package.security",
                      "description": "Public capability value used to scope this lookup."
                    },
                    "data": {
                      "additionalProperties": false,
                      "description": "Public data value used to scope this lookup.",
                      "properties": {
                        "count": {
                          "description": "Public count value used to scope this lookup.",
                          "type": "integer"
                        },
                        "ecosystem": {
                          "description": "Public ecosystem value used to scope this lookup.",
                          "type": "string"
                        },
                        "evidence": {
                          "description": "Public evidence value used to scope this lookup.",
                          "type": "array"
                        },
                        "package": {
                          "description": "Public package name to inspect.",
                          "type": "string"
                        },
                        "version": {
                          "description": "Package version whose public metadata should be checked.",
                          "type": "string"
                        },
                        "vulnerabilities": {
                          "description": "Public vulnerabilities value used to scope this lookup.",
                          "type": "array"
                        }
                      },
                      "required": [
                        "ecosystem",
                        "package",
                        "version",
                        "vulnerabilities",
                        "count",
                        "evidence"
                      ],
                      "type": "object"
                    },
                    "meta": {
                      "additionalProperties": false,
                      "description": "Public meta value used to scope this lookup.",
                      "properties": {
                        "cache": {
                          "description": "Public cache value used to scope this lookup.",
                          "enum": [
                            "hit",
                            "miss",
                            "bypass"
                          ]
                        },
                        "checked_at": {
                          "description": "Public checked at value used to scope this lookup.",
                          "type": "string"
                        },
                        "duration_ms": {
                          "description": "Public duration ms value used to scope this lookup.",
                          "minimum": 0,
                          "type": "integer"
                        },
                        "provider": {
                          "description": "Public provider value used to scope this lookup.",
                          "type": [
                            "string",
                            "null"
                          ]
                        }
                      },
                      "required": [
                        "provider",
                        "checked_at",
                        "cache",
                        "duration_ms"
                      ],
                      "type": "object"
                    },
                    "ok": {
                      "const": true,
                      "description": "Public ok value used to scope this lookup."
                    },
                    "version": {
                      "const": "1",
                      "description": "Package version whose public metadata should be checked."
                    }
                  },
                  "required": [
                    "ok",
                    "capability",
                    "version",
                    "data",
                    "meta"
                  ],
                  "type": "object"
                },
                "type": {
                  "type": "string"
                }
              },
              "required": [
                "type"
              ],
              "type": "object"
            }
          },
          "required": [
            "input"
          ],
          "type": "object"
        }
      }
    },
    "lastUpdated": "2026-10-25T21:10:41.743Z",
    "quality": {
      "l30DaysTotalCalls": 5,
      "l30DaysUniquePayers": 4,
      "lastCalledAt": "2026-10-25T21:10:41.528Z"
    },
    "resource": "https://http--forest-gas-station-mainnet--lcjl27p8lmjs.code.run/package/security",
    "serviceName": "Forest Packages",
    "tags": [
      "package",
      "dependency",
      "security",
      "vulnerability",
      "cve"
    ],
    "type": "http",
    "x402Version": 2
  },
  "source": "x402_bazaar",
  "summary": "Known vulnerabilities for package+version; normalized evidence, not a safety verdict. Base mainnet USDC"
}

What the leaf hashes

{"body":"c8d40ded686562e99ce59f957ef540dedd1ebd41884eced4a9681d1dd692b897","id":525814,"kind":"listing","method":"sync.x402_bazaar/1","observed_us":1793124767079421,"prev":76454,"subject":"x402_bazaar:https://http--forest-gas-station-mainnet--lcjl27p8lmjs.code.run/package/security","subject_kind":"source_record"}

Proof

Fold these into the leaf in order, hashing each sorted pair with keccak256, to reach the root of 2026-10-27 (273461 rows).

1. 0x7e78b80b8f4c734c1f9689951b4d6d0d21914a7ef92ca48d250ff8d652359ba0
2. 0xbd6d88d431934ea0172d2a0b7322f9609a3bf3f0e8b3e9162c0ef66f39128b5a
3. 0xcfd7118698e9d6be153bb2501c8181796807d3b7ec46910411fa1cdb028499ed
4. 0x96b980c4d2d97fae43f2eb10c2ee96bae7274748f1bda8d89dbb444bb1404074
5. 0x22d96cfd784ba2ddd28ca9181d23347b59ab6e6c79fdfbbe6d134dbd525d4575
6. 0x4aac3b26ab6c9c1682bb72127d744c579cc5187567136d30558c98471672ecb1
7. 0x083311a73159c056298e001d80199b5b6bf6dd15460b593f5668c02f606cd668
8. 0xca971828007c1bf37bdc62f363443fc7873d84b0a015d914839a2ec8ad8cf0d8
9. 0xdcdeea41992a75314af83aa17f7ebaa8d458b947fafa459fba04c34fbddce238
10. 0x63d53c86dcace63fcec156d87cf21e38de1aeee0b27dd0c2dcbfbf4a3dd56883
11. 0x868e095a0e024f898de0327309385070aef4560771a159bdc58d9e1c53b28672
12. 0x4b98c7145f5ead65ac9430579969acab10bc70758d3533f5a4fd4dbb462a2b61
13. 0xbc7cf10ae301dcdbc5db5be8c29e1b3618ffaf1c196a74cb6a9e6c4fae0bbeed
14. 0xfa0c8e8f1a1710ff197533b0a28208f2e168afe71abb7bb3416e09d1ac371d60
15. 0x3c500ec3d3edf0c74b87a6ca8fcd77656bfbe03db3d478bd0c184d0c88839c6b
16. 0xfecf3d4646dd4984a13dd715499e842c3fde63692336d97394c2bfd8e877ca5d
17. 0xf30fddbf4811226c58e8f0daf36fddd79fc5f1356b592bb1d99a8061ddbabe66
18. 0x2bf8151e5f157dd183b9de6fa00469551932a7a6e3f33a694895000ac9061197
19. 0x9fc354c0ea3efc3f1b6548bb77ea902a50f2c9647647ea61592efce2bd795699

Day root

0xdd77e5e99da32c3f154180d63e3c3e6fe11e896a2c6896412ef6b5c4bcf7e795

Chained

0x23bb4dfd09f55c15ac3962f53578e02c6114d5bfd9bb451cf8794fb6e2817ef4

Published

On Arc Testnet, block 69414147: 0xb2ebd83aafeb765a0ce66e76aefb133ed06606c98038fd56191e2bcd1dcb77b4