← The evidence ledger
Evidence row 73156
Observed , by baseline/1.
- Kind
- listing
- About
- source_record x402_bazaar:https://data.japanagent.dev/vuln/check
- Recorded
- Previous row
- None: the first of its kind about this subject
- Body SHA-256
- 3e9c0ec76f2af3f29ef427c745ace0425221c4dcd3205f575100e0cd39c4922b
- Leaf
- 0xefa06fe926b83c478c935dd01e2fb5051d0527d3c0783f858d41cc6765a7fa8a
What was observed
{
"endpoints": [
[
"x402",
"https://data.japanagent.dev/vuln/check"
]
],
"name": "data.japanagent.dev/vuln/check",
"owner_address": "0x64e81e0287ffdf31eb21d0891398899879f1fa6a",
"raw": {
"accepts": [
{
"amount": "2000",
"asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
"extra": {
"name": "USD Coin",
"version": "2"
},
"maxTimeoutSeconds": 120,
"network": "eip155:8453",
"payTo": "0x64E81E0287FfDF31EB21D0891398899879f1fA6a",
"scheme": "exact"
}
],
"description": "Check an open-source package for known vulnerabilities via the OSV database (Google Open Source Vulnerabilities). Pass package name, ecosystem (npm, PyPI, Go, crates.io, Maven, RubyGems, etc.) and optional version. Returns vulnerability IDs, summaries, severity and fixed versions. Essential pre-install check for coding agents.",
"extensions": {
"bazaar": {
"info": {
"input": {
"method": "GET",
"queryParams": {
"ecosystem": "npm",
"package": "lodash",
"version": "4.17.15"
},
"type": "http"
},
"output": {
"example": {
"package": "lodash",
"vuln_count": 2,
"vulns": [
{
"id": "GHSA-p6mc-m468-83gw",
"severity": "HIGH",
"summary": "Prototype pollution in lodash"
}
]
},
"type": "json"
}
},
"schema": {
"$schema": "https://json-schema.org/draft/2020-12/schema",
"properties": {
"input": {
"additionalProperties": false,
"properties": {
"method": {
"enum": [
"GET"
],
"type": "string"
},
"queryParams": {
"properties": {
"ecosystem": {
"description": "npm | PyPI | Go | Maven | crates.io | RubyGems | NuGet | Packagist",
"type": "string"
},
"package": {
"description": "Package name as registered in the ecosystem (npm: lodash / PyPI: requests / Maven: org.apache.logging.log4j:log4j-core)",
"type": "string"
},
"version": {
"description": "Optional exact version to check",
"type": "string"
}
},
"required": [
"package",
"ecosystem"
],
"type": "object"
},
"type": {
"const": "http",
"type": "string"
}
},
"required": [
"type",
"method"
],
"type": "object"
},
"output": {
"properties": {
"example": {
"type": "object"
},
"type": {
"type": "string"
}
},
"required": [
"type"
],
"type": "object"
}
},
"required": [
"input"
],
"type": "object"
}
}
},
"lastUpdated": "2026-10-12T05:40:28.576Z",
"quality": {
"l30DaysTotalCalls": 3,
"l30DaysUniquePayers": 3,
"lastCalledAt": "2026-10-12T05:40:27.971Z"
},
"resource": "https://data.japanagent.dev/vuln/check",
"type": "http",
"x402Version": 2
},
"source": "x402_bazaar",
"summary": "Check an open-source package for known vulnerabilities via the OSV database (Google Open Source Vulnerabilities). Pass package name, ecosystem (npm, PyPI, Go, crates.io, Maven, RubyGems, etc.) and optional version. Returns vulnerability IDs, summaries, severity and fixed versions. Essential pre-install check for coding agents."
}What the leaf hashes
{"body":"3e9c0ec76f2af3f29ef427c745ace0425221c4dcd3205f575100e0cd39c4922b","id":73156,"kind":"listing","method":"baseline/1","observed_us":1793025487098875,"prev":null,"subject":"x402_bazaar:https://data.japanagent.dev/vuln/check","subject_kind":"source_record"}Proof
Fold these into the leaf in order, hashing each sorted pair with keccak256, to reach the root of (296695 rows).
- 0xefa0da7d30938db999d0750dcbe97999ca65cb3f36e09db25812402a43138da7
- 0x7482bceabba887d037a68c45ff84a80668fbae4eb235dd5178a2b0f41c685f3b
- 0x545784d3360aeb518120a439801dedfe1d2ed469596d98bc52a737ab9fbe55cf
- 0x1b3e8bfa8e6374846d00cace35dac143e29b4093869d516c3ef86afd528a4610
- 0x21e8909b26158abe68729a48c21b4549b29675c25a273f37d8c599aeab2d7bc5
- 0x320fc72a2d97d18558366eaf09aba29368861a545a924772f7cfb8ecab6fa446
- 0x89a78dc55748c0c6d7e4ac2e9e0ae6bbe8eb1784463d8369c18630e3fa8f0684
- 0x928b60e53ce109dc0379a4a0e6eb32098c28bf66fc7495c77ec676b364f21afa
- 0x2c716b830000b27548fc6097a77d598592b51faf67e034f69a47c380fc4d1f3b
- 0xe8ce6526203eeff278621cde08607876fd3c33b3d5f8f0c68cd3d71fb0fdc142
- 0xe34b4862878cc4926f0e4b84b3f031ef1f0cf0de9bf8fb3c13adbc6abc010ee1
- 0xb0cc0b4ce5a68e83d3e3e55b0387f828adf6f5eb6cfa666d75f6e16ed9d89c1f
- 0x746e9e5b6765727b6b96f41204cc115b0302259f6c67be0cf0efbf245601d500
- 0x614d844c9e0509d9f9e63697aa2935555bce5f13695a8dc0047aa9e9898d70b3
- 0x95657a7d540ed6cac0bde9995782333b2562a9a6641853269ac95148827410f0
- 0x5fb5dda563336cd1bc1b9f44c52b76237ae72ed2145cb9290f39f304ca7dd678
- 0x74a0a08e4e7ab9aa5bfbead33dec7e1c7e8e364cff69a63720d764bbe987aadc
- Day root
- 0xf43e8dcc3d451a4788b26be904c55e8c4c0fa75c9666796c51db38d37e2c0df8
- Chained
- 0x702d5ac508f08b0d1accf36af25822d8e5660367494edd17a642fb61e158a57a
- Published
- On Arc Testnet, block 69251483: 0x495162f8936e19f0039918feebe6c307f327cd6bf8c37219620b1970041fa9ae