← The evidence ledger
Evidence row 76390
Observed , by baseline/1.
- Kind
- listing
- About
- source_record x402_bazaar:https://http--forest-gas-station--lcjl27p8lmjs.code.run/package/security
- Recorded
- Previous row
- None: the first of its kind about this subject
- Body SHA-256
- 6314992bbcf5fce6d9f43319f337dceec839ffce5fe971d55af01200128cbd1b
- Leaf
- 0x2267344c0ed640db9384ce9d617a45bfe6d220e63d2c316552fd49fa7bd2d47d
What was observed
{
"endpoints": [
[
"x402",
"https://http--forest-gas-station--lcjl27p8lmjs.code.run/package/security"
]
],
"name": "Forest Gas Station",
"owner_address": "0xf9c2a7255e7c51d7bf38331dcfc23ba881cf61ba",
"raw": {
"accepts": [
{
"amount": "3000",
"asset": "0x036CbD53842c5426634e7929541eC2318f3dCF7e",
"extra": {
"name": "USDC",
"version": "2"
},
"maxTimeoutSeconds": 120,
"network": "eip155:84532",
"payTo": "0xf9c2a7255E7C51D7BF38331DcFC23Ba881cF61Ba",
"scheme": "exact"
}
],
"description": "Known vulnerabilities for package+version; normalized evidence, not a safety verdict.",
"extensions": {
"bazaar": {
"info": {
"input": {
"body": {
"ecosystem": "npm",
"package": "express",
"version": "4.21.2"
},
"bodyType": "json",
"method": "POST",
"type": "http"
},
"output": {
"example": {
"capability": "package.security",
"data": {
"count": 0,
"ecosystem": "npm",
"evidence": [],
"package": "express",
"version": "4.21.2",
"vulnerabilities": []
},
"meta": {
"cache": "miss",
"checked_at": "2026-01-01T00:00:00.000Z",
"duration_ms": 1,
"provider": "osv"
},
"ok": true,
"version": "1"
},
"type": "json"
}
},
"schema": {
"$schema": "https://json-schema.org/draft/2020-12/schema",
"properties": {
"input": {
"additionalProperties": false,
"properties": {
"body": {
"additionalProperties": false,
"properties": {
"ecosystem": {
"enum": [
"npm",
"pypi"
]
},
"package": {
"maxLength": 214,
"minLength": 1,
"type": "string"
},
"version": {
"maxLength": 128,
"minLength": 1,
"type": "string"
}
},
"required": [
"ecosystem",
"package",
"version"
],
"type": "object"
},
"bodyType": {
"enum": [
"json",
"form-data",
"text"
],
"type": "string"
},
"method": {
"enum": [
"POST"
],
"type": "string"
},
"type": {
"const": "http",
"type": "string"
}
},
"required": [
"type",
"method",
"bodyType",
"body"
],
"type": "object"
},
"output": {
"properties": {
"example": {
"additionalProperties": false,
"properties": {
"capability": {
"const": "package.security"
},
"data": {
"additionalProperties": false,
"properties": {
"count": {
"type": "integer"
},
"ecosystem": {
"type": "string"
},
"evidence": {
"type": "array"
},
"package": {
"type": "string"
},
"version": {
"type": "string"
},
"vulnerabilities": {
"type": "array"
}
},
"required": [
"ecosystem",
"package",
"version",
"vulnerabilities",
"count",
"evidence"
],
"type": "object"
},
"meta": {
"additionalProperties": false,
"properties": {
"cache": {
"enum": [
"hit",
"miss",
"bypass"
]
},
"checked_at": {
"type": "string"
},
"duration_ms": {
"minimum": 0,
"type": "integer"
},
"provider": {
"type": [
"string",
"null"
]
}
},
"required": [
"provider",
"checked_at",
"cache",
"duration_ms"
],
"type": "object"
},
"ok": {
"const": true
},
"version": {
"const": "1"
}
},
"required": [
"ok",
"capability",
"version",
"data",
"meta"
],
"type": "object"
},
"type": {
"type": "string"
}
},
"required": [
"type"
],
"type": "object"
}
},
"required": [
"input"
],
"type": "object"
}
}
},
"lastUpdated": "2026-09-27T07:00:32.498Z",
"quality": {
"l30DaysTotalCalls": 1,
"l30DaysUniquePayers": 1,
"lastCalledAt": "2026-09-27T07:00:32.119Z"
},
"resource": "https://http--forest-gas-station--lcjl27p8lmjs.code.run/package/security",
"serviceName": "Forest Gas Station",
"tags": [
"package",
"security",
"osv",
"testnet"
],
"type": "http",
"x402Version": 2
},
"source": "x402_bazaar",
"summary": "Known vulnerabilities for package+version; normalized evidence, not a safety verdict."
}What the leaf hashes
{"body":"6314992bbcf5fce6d9f43319f337dceec839ffce5fe971d55af01200128cbd1b","id":76390,"kind":"listing","method":"baseline/1","observed_us":1793025492209516,"prev":null,"subject":"x402_bazaar:https://http--forest-gas-station--lcjl27p8lmjs.code.run/package/security","subject_kind":"source_record"}Proof
Fold these into the leaf in order, hashing each sorted pair with keccak256, to reach the root of (296695 rows).
- 0x22671b3dec2f1d799c2ae178bcab754b4ad7edba8fea216b5f614f4da8e5afb4
- 0x77c995b2220ec1944b62fb56b6213c7684b4a6a2b5af63ddecbc42b97b1c3871
- 0x2244a7ce548e0d2b3ba3a4691b35bb825e3053d9aac4f82eeafc2867d04bbc6a
- 0x994bcdf6b079bec87387e7769f1b02140c0362a0d11d086d62fa51183b2b2b24
- 0x073651aa3ccc7d6536b831f23c4d012f6f5a123d8da651a6c9de309c033829b8
- 0x02e41d76ad52dbca9b7e07b72d33c8ab91a4f1fcccb7eb84a29a1f6911bc4fec
- 0xe9298372e1f7140915585ccdf5b2ba2381bab009958eb92af7f635a12ea07541
- 0x658e02808197003c3dbc79fd874c83b874ec6759f98da00339d3a459218b76ad
- 0x17fd9be5d3acece21fa5c8c938982f0f0a90f5a69eddcae326055075bdbb52bf
- 0xd81c3cf131471d45d342b29a60570fa24072a4e8fc4286cf312da4677e4d486d
- 0xda2a271b0447c8ac22315d2ea7582e04968ddef46c7cbd29d7462934a9b3b37a
- 0xac5b705d705b0f1bc42cf2ad1a7f1f197ea96178ce0704432cbb5d556e8671a4
- 0x9d75d4d3ab6219edefa04be60b32fdd56be7a7672f370a5115f02f7b098ecd27
- 0x9dfd312f3d4937f7cb144cee3987e8516f222932b4ea286605236d73cfa1ed16
- 0xc3a6a3ae44ec0da1848b16d40c45d7aac97a67352eea8df18e0f26edabea8a2f
- 0x06d71bfa7d8b41d62c8836efc2c601e1cc3772d9453596b2ae4950887f3310ca
- 0x8c756542e482157df0c36464d75c937b845e4423dbbcfad08f0cf8d5a16b9a13
- 0x20704208aa6923d6b2450ef74ede87a6e0265d46447926038fe9506e9e154b2d
- 0x9b9ce5b74b9bab5121612ef6b64920a8d453cbf311096a423eef9702747e868a
- Day root
- 0xf43e8dcc3d451a4788b26be904c55e8c4c0fa75c9666796c51db38d37e2c0df8
- Chained
- 0x702d5ac508f08b0d1accf36af25822d8e5660367494edd17a642fb61e158a57a
- Published
- On Arc Testnet, block 69251483: 0x495162f8936e19f0039918feebe6c307f327cd6bf8c37219620b1970041fa9ae