Evidence row 60361

What was observed

{
  "endpoints": [
    [
      "x402",
      "https://2s.io/api/security/package"
    ]
  ],
  "name": "2s",
  "owner_address": "0x2b6d4988db4723e6908db86ab2b8dfbc51fc32c5",
  "raw": {
    "accepts": [
      {
        "amount": "5400",
        "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
        "extra": {
          "name": "USD Coin",
          "version": "2"
        },
        "maxTimeoutSeconds": 60,
        "network": "eip155:8453",
        "payTo": "0x2b6D4988Db4723E6908Db86Ab2b8dFBc51FC32C5",
        "scheme": "exact"
      },
      {
        "amount": "5400",
        "asset": "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v",
        "extra": {
          "feePayer": "D6ZhtNQ5nT9ZnTHUbqXZsTx5MH2rPFiBBggX4hY1WePM",
          "name": "USDC",
          "version": "1"
        },
        "maxTimeoutSeconds": 60,
        "network": "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",
        "payTo": "TW6ntaGzvj63ZgPjszd4FCGmVTGfzv1MAYZbjYcyWhn",
        "scheme": "exact"
      }
    ],
    "description": "Security and provenance for an open-source package, composed live from three authoritative sources in one call. Pass ecosystem (npm, pypi, go, maven, cargo, nuget) + name (+ optional version; defaults to latest). Returns: known vulnerabilities from OSV (osv.dev — aggregates GitHub Security Advisories, PyPA, RustSec, Go vuln DB, etc.) each with its id, CVE aliases, summary, severity, and references; the resolved license and deprecation status (deps.dev); and the source repo's OpenSSF Scorecard health score (overall + per-check) plus stars/forks/open-issues. All live — newly-disclosed advisories appear within hours. Distinct from registry.npm-lookup / pypi-lookup (metadata only): this answers \"is this dependency safe to add, what license does it carry, and how well-maintained is it.\"",
    "extensions": {
      "bazaar": {
        "info": {
          "input": {
            "method": "GET",
            "queryParams": {
              "ecosystem": "npm",
              "name": "lodash",
              "version": "4.17.20"
            },
            "type": "http"
          }
        },
        "schema": {
          "$schema": "https://json-schema.org/draft/2020-12/schema",
          "properties": {
            "input": {
              "properties": {
                "method": {
                  "const": "GET"
                },
                "queryParams": {
                  "properties": {
                    "ecosystem": {
                      "description": "Package ecosystem: npm, pypi, go, maven, cargo, or nuget.",
                      "type": "string"
                    },
                    "name": {
                      "description": "Package name (e.g. lodash, requests).",
                      "type": "string"
                    },
                    "version": {
                      "description": "Version (defaults to latest).",
                      "type": "string"
                    }
                  },
                  "required": [
                    "ecosystem",
                    "name"
                  ]
                },
                "type": {
                  "const": "http"
                }
              },
              "required": [
                "type",
                "method",
                "queryParams"
              ],
              "type": "object"
            }
          },
          "required": [
            "input"
          ],
          "type": "object"
        }
      }
    },
    "iconUrl": "https://res.cloudinary.com/bdb-prod/image/upload/c_fill,ar_1:1,w_256,h_256,f_auto,q_auto/v1781454341/bazaar-icons/58f7ba8f2b3b8047.png",
    "lastUpdated": "2026-10-19T06:27:28.229Z",
    "quality": {
      "l30DaysTotalCalls": 3,
      "l30DaysUniquePayers": 3,
      "lastCalledAt": "2026-10-19T06:27:27.958Z"
    },
    "resource": "https://2s.io/api/security/package",
    "serviceName": "2s",
    "tags": [
      "public-records",
      "identifiers",
      "ai-agents",
      "us-gov-data",
      "x402"
    ],
    "type": "http",
    "x402Version": 2
  },
  "source": "x402_bazaar",
  "summary": "Security and provenance for an open-source package, composed live from three authoritative sources in one call. Pass ecosystem (npm, pypi, go, maven, cargo, nuget) + name (+ optional version; defaults to latest). Returns: known vulnerabilities from OSV (osv.dev — aggregates GitHub Security Advisories, PyPA, RustSec, Go vuln DB, etc.) each with its id, CVE aliases, summary, severity, and references; the resolved license and deprecation status (deps.dev); and the source repo's OpenSSF Scorecard health score (overall + per-check) plus stars/forks/open-issues. All live — newly-disclosed advisories appear within hours. Distinct from registry.npm-lookup / pypi-lookup (metadata only): this answers \"is this dependency safe to add, what license does it carry, and how well-maintained is it.\""
}

What the leaf hashes

{"body":"2ca3488bf4b0d05a95679213594829d0dd9a8d3d2b62402e84e732e8451faeb2","id":60361,"kind":"listing","method":"baseline/1","observed_us":1793025448386329,"prev":null,"subject":"x402_bazaar:https://2s.io/api/security/package","subject_kind":"source_record"}

Proof

Fold these into the leaf in order, hashing each sorted pair with keccak256, to reach the root of 2026-10-26 (296695 rows).

1. 0x1623a8a516385ba9d053a5a00e264db6b9f1bf2e5b0ad07d5f260d14eb30512f
2. 0x65ab2efa5e9475ad2d8237f75eb0073bc3dd8d6afe6b4fb2f19aaf3d682e9003
3. 0xb9cd0b34b1daaca383eefc05ff7cb5fe23a38e69e1d783db0ec73a106cd71aad
4. 0x0523694d8f405eaf67067d155fec964aed4ad6cddb513b63ebaf9caac4e0e166
5. 0xeb7e234e5866f441318778c8f13d15df851ba09cbbe4101616319b2dbe5fa2f1
6. 0x1fbc525662f0d1e2c80200573abac03f3cb6208274069c897a6b8a95bf3b7795
7. 0x0e92d097267d048d5beb7c05b72350254076fedbf79b5da67e96e91d4fef043f
8. 0x2bff58401d520d6ae8841ffd0959f08117245a742d4e6fdfd81d489fc501554e
9. 0x4353f9765dc35ef405c74366e0d045e048fd321b985e9cd73a26be88ce05f264
10. 0xd3388b2b4c7f521364d933c4432002eaf85765d15a09631fb8cf2491679dccc1
11. 0xed7aa4f0a0c93f40e8bb99589e49cbc6da4d8144091eb55a8707245d7bf94039
12. 0x856fd0d049baa5f07cd2d5d524b40c994bed22cb46ea15af4cc075b3f3f3d444
13. 0x32f46c5f73ecbfd4f770f7f760a79bee2afed4b3e7572fa882b3e7dce8df4356
14. 0x770e4376196188c7fc9ec40f8e218dc0d1cb92bba5fe0425a0edce27ca9a997f
15. 0x60582ab4b41e72eb70eb0bce07fbf0fb4d2b62a8bad5be50f5d16d511adc746c
16. 0xc6a4d7899a0f442958e26505011190b7cff2483611c1b94eba9043e0ba9ac36e
17. 0x8c756542e482157df0c36464d75c937b845e4423dbbcfad08f0cf8d5a16b9a13
18. 0x20704208aa6923d6b2450ef74ede87a6e0265d46447926038fe9506e9e154b2d
19. 0x9b9ce5b74b9bab5121612ef6b64920a8d453cbf311096a423eef9702747e868a

Day root

0xf43e8dcc3d451a4788b26be904c55e8c4c0fa75c9666796c51db38d37e2c0df8

Chained

0x702d5ac508f08b0d1accf36af25822d8e5660367494edd17a642fb61e158a57a

Published

On Arc Testnet, block 69251483: 0x495162f8936e19f0039918feebe6c307f327cd6bf8c37219620b1970041fa9ae