← The evidence ledger
Evidence row 73077
Observed , by baseline/1.
- Kind
- listing
- About
- source_record x402_bazaar:https://data.greeneris.io/v1/dev/vulns
- Recorded
- Previous row
- None: the first of its kind about this subject
- Body SHA-256
- 936edeaf0955ef29151f05712593ef84165136a6640ead01ff7efc17d4da4371
- Leaf
- 0xb25d4498131deebbbc2ecb108e61cf67cc644636461d712b9057447c25c180fb
What was observed
{
"endpoints": [
[
"x402",
"https://data.greeneris.io/v1/dev/vulns"
]
],
"name": "eu-verify",
"owner_address": "0x6ab8efe305cce67daa48c97bde29c04402822dff",
"raw": {
"accepts": [
{
"amount": "10000",
"asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
"extra": {
"name": "USD Coin",
"version": "2"
},
"maxTimeoutSeconds": 300,
"network": "eip155:8453",
"payTo": "0x6ab8efe305cce67daa48c97bde29c04402822dff",
"scheme": "exact"
}
],
"description": "Security audit of one exact dependency version, backed by OSV.dev (Google), which aggregates public advisories (GHSA, PyPA, RustSec...) in near real time. Query: ?pkg=lodash&ecosystem=npm&version=4.17.20 (ecosystems: npm, pypi, go, crates.io, maven, nuget, rubygems, packagist, hex, pub). Returns vuln_count, max_severity, advisory ids and the versions that fix them; vuln_count=0 means clean. Cached 1h.",
"extensions": {
"bazaar": {
"info": {
"input": {
"method": "GET",
"queryParams": {
"ecosystem": "npm",
"pkg": "lodash",
"version": "4.17.20"
},
"type": "http"
},
"output": {
"example": {
"ecosystem": "npm",
"fixed_versions": [
"4.17.21",
"4.17.23",
"4.18.0"
],
"ids": [
"GHSA-29mw-wpgm-hmr9",
"GHSA-35jh-r3h4-6jhm",
"GHSA-f23m-r3pf-42rh"
],
"max_severity": "HIGH",
"package": "lodash",
"source": "OSV.dev (Google Open Source Vulnerabilities), aggregated public advisories",
"version": "4.17.20",
"vuln_count": 5
},
"type": "json"
}
},
"schema": {
"$schema": "https://json-schema.org/draft/2020-12/schema",
"properties": {
"input": {
"additionalProperties": false,
"properties": {
"method": {
"enum": [
"GET",
"HEAD",
"DELETE"
],
"type": "string"
},
"queryParams": {
"properties": {
"ecosystem": {
"default": "npm",
"description": "Package ecosystem",
"enum": [
"cargo",
"crates.io",
"go",
"hex",
"maven",
"npm",
"nuget",
"packagist",
"pub",
"pypi",
"rubygems"
],
"type": "string"
},
"pkg": {
"description": "Exact package name, e.g. lodash",
"type": "string"
},
"version": {
"description": "Exact version to audit, e.g. 4.17.20",
"type": "string"
}
},
"required": [
"pkg",
"version"
],
"type": "object"
},
"type": {
"const": "http",
"type": "string"
}
},
"required": [
"type",
"method"
],
"type": "object"
},
"output": {
"properties": {
"example": {
"type": "object"
},
"type": {
"type": "string"
}
},
"required": [
"type"
],
"type": "object"
}
},
"required": [
"input"
],
"type": "object"
}
}
},
"lastUpdated": "2026-10-19T13:00:26.946Z",
"quality": {
"l30DaysTotalCalls": 5,
"l30DaysUniquePayers": 3,
"lastCalledAt": "2026-10-19T13:00:26.746Z"
},
"resource": "https://data.greeneris.io/v1/dev/vulns",
"serviceName": "eu-verify",
"tags": [
"security",
"vulnerabilities",
"cve",
"dependencies",
"osv"
],
"type": "http",
"x402Version": 2
},
"source": "x402_bazaar",
"summary": "Security audit of one exact dependency version, backed by OSV.dev (Google), which aggregates public advisories (GHSA, PyPA, RustSec...) in near real time. Query: ?pkg=lodash&ecosystem=npm&version=4.17.20 (ecosystems: npm, pypi, go, crates.io, maven, nuget, rubygems, packagist, hex, pub). Returns vuln_count, max_severity, advisory ids and the versions that fix them; vuln_count=0 means clean. Cached 1h."
}What the leaf hashes
{"body":"936edeaf0955ef29151f05712593ef84165136a6640ead01ff7efc17d4da4371","id":73077,"kind":"listing","method":"baseline/1","observed_us":1793025487014243,"prev":null,"subject":"x402_bazaar:https://data.greeneris.io/v1/dev/vulns","subject_kind":"source_record"}Proof
Its day has not closed yet. A day closes ten minutes after midnight UTC; the proof appears here then.