← The evidence ledger
Evidence row 792562
Observed , by sync.x402_bazaar/1.
- Kind
- listing
- About
- source_record x402_bazaar:https://agents.crowdspark.me/v1/dev/package-advisories
- Recorded
- Previous row
- None: the first of its kind about this subject
- Body SHA-256
- 7297c4e37333ec4ac3f06e2c531c1c42d12e817c8363a00cd3a3a54708d47a1b
- Leaf
- 0x991e0c4b5a6d6ef7c825df253e0b635c153eb364ce32d9f4421c7ab606c971d9
What was observed
{
"endpoints": [
[
"x402",
"https://agents.crowdspark.me/v1/dev/package-advisories"
]
],
"name": "Agent Tools",
"owner_address": "0x0dea0030a17bf886543a757c55924710258c2eec",
"raw": {
"accepts": [
{
"amount": "5000",
"asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
"extra": {
"name": "USD Coin",
"version": "2"
},
"maxTimeoutSeconds": 300,
"network": "eip155:8453",
"payTo": "0x0dEA0030A17BF886543a757c55924710258c2eec",
"scheme": "exact"
}
],
"description": "Check a package before installing it: known vulnerabilities for one npm, PyPI, cargo, Go or Maven package version (OSV.dev), fixed-in version, latest version and release date, licence, deprecated flag, and a safe, caution or avoid verdict with reasons. Version defaults to latest.",
"extensions": {
"bazaar": {
"info": {
"input": {
"method": "GET",
"queryParams": {
"ecosystem": "npm",
"name": "lodash",
"version": "4.17.20"
},
"type": "http"
},
"output": {
"example": {
"deprecated": false,
"ecosystem": "npm",
"latest_version": "4.18.1",
"licenses": [
"MIT"
],
"name": "lodash",
"reasons": [
"5 known advisories affect this version (worst: high)",
"a newer version exists"
],
"suggested_min_fixed_version": "4.18.0",
"verdict": "avoid",
"version": "4.17.20",
"version_checked": "requested",
"vulnerabilities": {
"by_severity": {
"HIGH": 2,
"MODERATE": 3
},
"count": 5,
"items": [
{
"cve": [
"CVE-2020-28500"
],
"fixed_in": [
"4.17.21"
],
"id": "GHSA-29mw-wpgm-hmr9",
"severity": "MODERATE"
}
]
}
},
"type": "json"
}
},
"schema": {
"$schema": "https://json-schema.org/draft/2020-12/schema",
"properties": {
"input": {
"additionalProperties": false,
"properties": {
"method": {
"enum": [
"GET"
],
"type": "string"
},
"queryParams": {
"properties": {
"ecosystem": {
"description": "Package ecosystem",
"enum": [
"npm",
"pypi",
"cargo",
"go",
"maven"
],
"type": "string"
},
"name": {
"description": "Package name, e.g. lodash or requests (maven: group:artifact)",
"type": "string"
},
"version": {
"description": "Optional. Defaults to the latest version",
"type": "string"
}
},
"required": [
"ecosystem",
"name"
],
"type": "object"
},
"type": {
"const": "http",
"type": "string"
}
},
"required": [
"type",
"method"
],
"type": "object"
},
"output": {
"properties": {
"example": {
"type": "object"
},
"type": {
"type": "string"
}
},
"required": [
"type"
],
"type": "object"
}
},
"required": [
"input"
],
"type": "object"
}
}
},
"lastUpdated": "2026-10-28T13:49:00.801Z",
"quality": {
"lastCalledAt": "2026-10-28T13:44:16.961Z"
},
"resource": "https://agents.crowdspark.me/v1/dev/package-advisories",
"serviceName": "Agent Tools",
"type": "http",
"x402Version": 2
},
"source": "x402_bazaar",
"summary": "Check a package before installing it: known vulnerabilities for one npm, PyPI, cargo, Go or Maven package version (OSV.dev), fixed-in version, latest version and release date, licence, deprecated flag, and a safe, caution or avoid verdict with reasons. Version defaults to latest."
}What the leaf hashes
{"body":"7297c4e37333ec4ac3f06e2c531c1c42d12e817c8363a00cd3a3a54708d47a1b","id":792562,"kind":"listing","method":"sync.x402_bazaar/1","observed_us":1793211815697576,"prev":null,"subject":"x402_bazaar:https://agents.crowdspark.me/v1/dev/package-advisories","subject_kind":"source_record"}Proof
Fold these into the leaf in order, hashing each sorted pair with keccak256, to reach the root of (231336 rows).
- 0x991f03b31eb41d2ec38e83501e0688ac7498acb8042f6123f072fad4bb12d66d
- 0x1f86925c6ffc7575c55845e72b3296fc48fe21f459088b45f10dcc716b482283
- 0xfd6321eeb22cdf941a626bfbabb12fb6d84be34bf47d3754f9e8d92f3465fc9c
- 0xb425745e1e3f44fae859072c1a1fc58f76fa55f304f7e5136f5f070bb0e59e93
- 0xfc452b28071f3bc598a627badd2e7bb25648ccce982d627d78a1158d3237afb1
- 0xb3dc898aebb122b6b17f108d994f4eb3ef386ebb29ea49241b5ab0b6c395cda4
- 0x7814f2d07832ac996e594363d871418f1a20b6393a3da1dc68ff990a83098998
- 0xab5dea26d6dd53d7205349cdad02385af2ef899b88dcb740c894eea9ce30e156
- 0xdb26235db1d2f0e21a5942620f508799c5cd14f7b1586c17ad3302920594383a
- 0xfb3c70129d75f28fd3bb5933e418827bb13cd7ea5980b6d16470d2d47d559df5
- 0xd4d12ce6287fcce9a5054c1131f9f51062607f90c41a0c931e9ce0ae3233da0f
- 0x59f061c5d52dca5c3c9576a7db2ad9b0eebf4adaed10f502f6cd38e68c3ebf89
- 0xddcdda94a0fa130582c880a437970c1e6d81827500911acf5ca2c5b1aaafe0a6
- 0x088061c71633d244b99c7cc0814bbe03af458b18487f352611ae649c73589766
- 0xcf313ac43fef601c9e46f82a687b6a3c655f47c31675c1791c49de20295be63d
- 0x0f8977bd16865247451d1ee836b084081d3d0cd17d6a07353fad0c70393c7403
- 0xe08e8bd91858a8a10c46ecde9c29a6288b960987303173c5e882afb46ce91fa0
- 0xe6cfe00ae4e02bc12327e45b5f3334ea5850ba3bcc8e3101d30a8189856a95af
- Day root
- 0x2c19037464cc4c493624565f01775d6446fc78eaa118fc6865bfe2bfca9ff78e
- Chained
- 0xd1d7dee8322ceff8f4c8d83aa1fe4a4466825c2af1c97dbde3d35db61234f7be
- Published
- On Arc Testnet, block 69584042: 0x8bae2b1d097834c8b458513862d70d29ee807e98dc2e863b27250131c15b35ae