Evidence row 76454

What was observed

{
  "endpoints": [
    [
      "x402",
      "https://http--forest-gas-station-mainnet--lcjl27p8lmjs.code.run/package/security"
    ]
  ],
  "name": "Forest Packages",
  "owner_address": "0xb48d918151311f982d542ef5c84cc1cd54cff7a9",
  "raw": {
    "accepts": [
      {
        "amount": "3000",
        "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
        "extra": {
          "name": "USD Coin",
          "version": "2"
        },
        "maxTimeoutSeconds": 120,
        "network": "eip155:8453",
        "payTo": "0xb48D918151311F982d542eF5C84cc1cd54CFf7a9",
        "scheme": "exact"
      }
    ],
    "description": "Known vulnerabilities for package+version; normalized evidence, not a safety verdict. Base mainnet USDC",
    "extensions": {
      "bazaar": {
        "info": {
          "input": {
            "body": {
              "ecosystem": "npm",
              "package": "express",
              "version": "4.21.2"
            },
            "bodyType": "json",
            "method": "POST",
            "type": "http"
          },
          "output": {
            "example": {
              "capability": "package.security",
              "data": {
                "count": 0,
                "ecosystem": "npm",
                "evidence": [],
                "package": "express",
                "version": "4.21.2",
                "vulnerabilities": []
              },
              "meta": {
                "cache": "miss",
                "checked_at": "2026-01-01T00:00:00.000Z",
                "duration_ms": 1,
                "provider": "osv"
              },
              "ok": true,
              "version": "1"
            },
            "type": "json"
          }
        },
        "schema": {
          "$schema": "https://json-schema.org/draft/2020-12/schema",
          "properties": {
            "input": {
              "additionalProperties": false,
              "properties": {
                "body": {
                  "additionalProperties": false,
                  "properties": {
                    "ecosystem": {
                      "description": "Public ecosystem value used to scope this lookup.",
                      "enum": [
                        "npm",
                        "pypi"
                      ]
                    },
                    "package": {
                      "description": "Public package name to inspect.",
                      "maxLength": 214,
                      "minLength": 1,
                      "type": "string"
                    },
                    "version": {
                      "description": "Package version whose public metadata should be checked.",
                      "maxLength": 128,
                      "minLength": 1,
                      "type": "string"
                    }
                  },
                  "required": [
                    "ecosystem",
                    "package",
                    "version"
                  ],
                  "type": "object"
                },
                "bodyType": {
                  "enum": [
                    "json",
                    "form-data",
                    "text"
                  ],
                  "type": "string"
                },
                "method": {
                  "enum": [
                    "POST"
                  ],
                  "type": "string"
                },
                "type": {
                  "const": "http",
                  "type": "string"
                }
              },
              "required": [
                "type",
                "method",
                "bodyType",
                "body"
              ],
              "type": "object"
            },
            "output": {
              "properties": {
                "example": {
                  "additionalProperties": false,
                  "properties": {
                    "capability": {
                      "const": "package.security",
                      "description": "Public capability value used to scope this lookup."
                    },
                    "data": {
                      "additionalProperties": false,
                      "description": "Public data value used to scope this lookup.",
                      "properties": {
                        "count": {
                          "description": "Public count value used to scope this lookup.",
                          "type": "integer"
                        },
                        "ecosystem": {
                          "description": "Public ecosystem value used to scope this lookup.",
                          "type": "string"
                        },
                        "evidence": {
                          "description": "Public evidence value used to scope this lookup.",
                          "type": "array"
                        },
                        "package": {
                          "description": "Public package name to inspect.",
                          "type": "string"
                        },
                        "version": {
                          "description": "Package version whose public metadata should be checked.",
                          "type": "string"
                        },
                        "vulnerabilities": {
                          "description": "Public vulnerabilities value used to scope this lookup.",
                          "type": "array"
                        }
                      },
                      "required": [
                        "ecosystem",
                        "package",
                        "version",
                        "vulnerabilities",
                        "count",
                        "evidence"
                      ],
                      "type": "object"
                    },
                    "meta": {
                      "additionalProperties": false,
                      "description": "Public meta value used to scope this lookup.",
                      "properties": {
                        "cache": {
                          "description": "Public cache value used to scope this lookup.",
                          "enum": [
                            "hit",
                            "miss",
                            "bypass"
                          ]
                        },
                        "checked_at": {
                          "description": "Public checked at value used to scope this lookup.",
                          "type": "string"
                        },
                        "duration_ms": {
                          "description": "Public duration ms value used to scope this lookup.",
                          "minimum": 0,
                          "type": "integer"
                        },
                        "provider": {
                          "description": "Public provider value used to scope this lookup.",
                          "type": [
                            "string",
                            "null"
                          ]
                        }
                      },
                      "required": [
                        "provider",
                        "checked_at",
                        "cache",
                        "duration_ms"
                      ],
                      "type": "object"
                    },
                    "ok": {
                      "const": true,
                      "description": "Public ok value used to scope this lookup."
                    },
                    "version": {
                      "const": "1",
                      "description": "Package version whose public metadata should be checked."
                    }
                  },
                  "required": [
                    "ok",
                    "capability",
                    "version",
                    "data",
                    "meta"
                  ],
                  "type": "object"
                },
                "type": {
                  "type": "string"
                }
              },
              "required": [
                "type"
              ],
              "type": "object"
            }
          },
          "required": [
            "input"
          ],
          "type": "object"
        }
      }
    },
    "lastUpdated": "2026-10-25T21:10:41.743Z",
    "quality": {
      "l30DaysTotalCalls": 6,
      "l30DaysUniquePayers": 5,
      "lastCalledAt": "2026-10-25T21:10:41.528Z"
    },
    "resource": "https://http--forest-gas-station-mainnet--lcjl27p8lmjs.code.run/package/security",
    "serviceName": "Forest Packages",
    "tags": [
      "package",
      "dependency",
      "security",
      "vulnerability",
      "cve"
    ],
    "type": "http",
    "x402Version": 2
  },
  "source": "x402_bazaar",
  "summary": "Known vulnerabilities for package+version; normalized evidence, not a safety verdict. Base mainnet USDC"
}

What the leaf hashes

{"body":"601d827a757241c32036cb181b4698cea4e88fbcc33fe425e179f340ceb9465f","id":76454,"kind":"listing","method":"baseline/1","observed_us":1793025492292937,"prev":null,"subject":"x402_bazaar:https://http--forest-gas-station-mainnet--lcjl27p8lmjs.code.run/package/security","subject_kind":"source_record"}

Proof

Fold these into the leaf in order, hashing each sorted pair with keccak256, to reach the root of 2026-10-26 (296695 rows).

1. 0x6769a4b1b421f1a665c6aa1dc80c5e89e1607aa22f7b417ea4cf67a230fb7628
2. 0x4f3b46babc01aa5c0371fa534723197bb7f8909dc49ebdf2aa785dc2008c21cd
3. 0xf11cb982f4947432ea09ac0d7ebc2e8e29f660d3f2ccea5acf111fb881c9203c
4. 0x70dde76a7b8e892ebd7791c4b47163c3d7c2259c982a8b82540a0c4535b94c03
5. 0x78b0ebc7b67aa0d04d8ad4d29547a73c361d1930e89b90b2ecdc8bcc714b49a6
6. 0xc4ca7248af01c9aa7e9177e43b4cf13a4b6f0c71e952cc85d0b17e88cce0a2e1
7. 0xe0659e20024b7036af973b8c8f590792d4d8535eeebf6fdc3d639d2a69f19c67
8. 0x819cae8af16dcdd07498610fc65166d36773d804127e98998f2f3473a7f2cbf8
9. 0xb90dcc0e1e554e6cb26d16f607798d65569313093d98a3ea8cf8c7ba864c7fa2
10. 0x8abff743dd157f0225d59527cbd5a558fe9044a13b8251e90cdf945d405603a0
11. 0x13951c97c827e2025801573dada28cfb5f8038c9b4de741f9d526cb67b3fe605
12. 0x260682fd6ecd274e73505c5e0bd798abdd0e702afca4f8eebd4331b607a6b175
13. 0x5f350d70c252ff1169c0210fd45fce1b0ab8d7316f048741a9e90a6c8cb65dcf
14. 0x9a79c65e077cd9da9d436b3ade6f5ddc0d244510c4d5903ef2f02d81205f7666
15. 0xa2d436d488e3600b0e5c3e3ed9c9234cd52853c59830b786334fd0c4292d9f40
16. 0x47b89901b0f07938a6b9a66ddf35683903f79d756a7c7763665fd632758b08d0
17. 0x9a83be955a206deb65b995adfd92c58fa31c95fbbf926bd199d300e70b08b26d
18. 0x20704208aa6923d6b2450ef74ede87a6e0265d46447926038fe9506e9e154b2d
19. 0x9b9ce5b74b9bab5121612ef6b64920a8d453cbf311096a423eef9702747e868a

Day root

0xf43e8dcc3d451a4788b26be904c55e8c4c0fa75c9666796c51db38d37e2c0df8

Chained

0x702d5ac508f08b0d1accf36af25822d8e5660367494edd17a642fb61e158a57a

Published

On Arc Testnet, block 69251483: 0x495162f8936e19f0039918feebe6c307f327cd6bf8c37219620b1970041fa9ae