addrbookFor publishers
← The evidence ledger

Evidence row 792562

Observed , by sync.x402_bazaar/1.

Kind
listing
About
source_record x402_bazaar:https://agents.crowdspark.me/v1/dev/package-advisories
Recorded
Previous row
None: the first of its kind about this subject
Body SHA-256
7297c4e37333ec4ac3f06e2c531c1c42d12e817c8363a00cd3a3a54708d47a1b
Leaf
0x991e0c4b5a6d6ef7c825df253e0b635c153eb364ce32d9f4421c7ab606c971d9

What was observed

{
  "endpoints": [
    [
      "x402",
      "https://agents.crowdspark.me/v1/dev/package-advisories"
    ]
  ],
  "name": "Agent Tools",
  "owner_address": "0x0dea0030a17bf886543a757c55924710258c2eec",
  "raw": {
    "accepts": [
      {
        "amount": "5000",
        "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
        "extra": {
          "name": "USD Coin",
          "version": "2"
        },
        "maxTimeoutSeconds": 300,
        "network": "eip155:8453",
        "payTo": "0x0dEA0030A17BF886543a757c55924710258c2eec",
        "scheme": "exact"
      }
    ],
    "description": "Check a package before installing it: known vulnerabilities for one npm, PyPI, cargo, Go or Maven package version (OSV.dev), fixed-in version, latest version and release date, licence, deprecated flag, and a safe, caution or avoid verdict with reasons. Version defaults to latest.",
    "extensions": {
      "bazaar": {
        "info": {
          "input": {
            "method": "GET",
            "queryParams": {
              "ecosystem": "npm",
              "name": "lodash",
              "version": "4.17.20"
            },
            "type": "http"
          },
          "output": {
            "example": {
              "deprecated": false,
              "ecosystem": "npm",
              "latest_version": "4.18.1",
              "licenses": [
                "MIT"
              ],
              "name": "lodash",
              "reasons": [
                "5 known advisories affect this version (worst: high)",
                "a newer version exists"
              ],
              "suggested_min_fixed_version": "4.18.0",
              "verdict": "avoid",
              "version": "4.17.20",
              "version_checked": "requested",
              "vulnerabilities": {
                "by_severity": {
                  "HIGH": 2,
                  "MODERATE": 3
                },
                "count": 5,
                "items": [
                  {
                    "cve": [
                      "CVE-2020-28500"
                    ],
                    "fixed_in": [
                      "4.17.21"
                    ],
                    "id": "GHSA-29mw-wpgm-hmr9",
                    "severity": "MODERATE"
                  }
                ]
              }
            },
            "type": "json"
          }
        },
        "schema": {
          "$schema": "https://json-schema.org/draft/2020-12/schema",
          "properties": {
            "input": {
              "additionalProperties": false,
              "properties": {
                "method": {
                  "enum": [
                    "GET"
                  ],
                  "type": "string"
                },
                "queryParams": {
                  "properties": {
                    "ecosystem": {
                      "description": "Package ecosystem",
                      "enum": [
                        "npm",
                        "pypi",
                        "cargo",
                        "go",
                        "maven"
                      ],
                      "type": "string"
                    },
                    "name": {
                      "description": "Package name, e.g. lodash or requests (maven: group:artifact)",
                      "type": "string"
                    },
                    "version": {
                      "description": "Optional. Defaults to the latest version",
                      "type": "string"
                    }
                  },
                  "required": [
                    "ecosystem",
                    "name"
                  ],
                  "type": "object"
                },
                "type": {
                  "const": "http",
                  "type": "string"
                }
              },
              "required": [
                "type",
                "method"
              ],
              "type": "object"
            },
            "output": {
              "properties": {
                "example": {
                  "type": "object"
                },
                "type": {
                  "type": "string"
                }
              },
              "required": [
                "type"
              ],
              "type": "object"
            }
          },
          "required": [
            "input"
          ],
          "type": "object"
        }
      }
    },
    "lastUpdated": "2026-10-28T13:49:00.801Z",
    "quality": {
      "lastCalledAt": "2026-10-28T13:44:16.961Z"
    },
    "resource": "https://agents.crowdspark.me/v1/dev/package-advisories",
    "serviceName": "Agent Tools",
    "type": "http",
    "x402Version": 2
  },
  "source": "x402_bazaar",
  "summary": "Check a package before installing it: known vulnerabilities for one npm, PyPI, cargo, Go or Maven package version (OSV.dev), fixed-in version, latest version and release date, licence, deprecated flag, and a safe, caution or avoid verdict with reasons. Version defaults to latest."
}

What the leaf hashes

{"body":"7297c4e37333ec4ac3f06e2c531c1c42d12e817c8363a00cd3a3a54708d47a1b","id":792562,"kind":"listing","method":"sync.x402_bazaar/1","observed_us":1793211815697576,"prev":null,"subject":"x402_bazaar:https://agents.crowdspark.me/v1/dev/package-advisories","subject_kind":"source_record"}

Proof

Fold these into the leaf in order, hashing each sorted pair with keccak256, to reach the root of (231336 rows).

  1. 0x991f03b31eb41d2ec38e83501e0688ac7498acb8042f6123f072fad4bb12d66d
  2. 0x1f86925c6ffc7575c55845e72b3296fc48fe21f459088b45f10dcc716b482283
  3. 0xfd6321eeb22cdf941a626bfbabb12fb6d84be34bf47d3754f9e8d92f3465fc9c
  4. 0xb425745e1e3f44fae859072c1a1fc58f76fa55f304f7e5136f5f070bb0e59e93
  5. 0xfc452b28071f3bc598a627badd2e7bb25648ccce982d627d78a1158d3237afb1
  6. 0xb3dc898aebb122b6b17f108d994f4eb3ef386ebb29ea49241b5ab0b6c395cda4
  7. 0x7814f2d07832ac996e594363d871418f1a20b6393a3da1dc68ff990a83098998
  8. 0xab5dea26d6dd53d7205349cdad02385af2ef899b88dcb740c894eea9ce30e156
  9. 0xdb26235db1d2f0e21a5942620f508799c5cd14f7b1586c17ad3302920594383a
  10. 0xfb3c70129d75f28fd3bb5933e418827bb13cd7ea5980b6d16470d2d47d559df5
  11. 0xd4d12ce6287fcce9a5054c1131f9f51062607f90c41a0c931e9ce0ae3233da0f
  12. 0x59f061c5d52dca5c3c9576a7db2ad9b0eebf4adaed10f502f6cd38e68c3ebf89
  13. 0xddcdda94a0fa130582c880a437970c1e6d81827500911acf5ca2c5b1aaafe0a6
  14. 0x088061c71633d244b99c7cc0814bbe03af458b18487f352611ae649c73589766
  15. 0xcf313ac43fef601c9e46f82a687b6a3c655f47c31675c1791c49de20295be63d
  16. 0x0f8977bd16865247451d1ee836b084081d3d0cd17d6a07353fad0c70393c7403
  17. 0xe08e8bd91858a8a10c46ecde9c29a6288b960987303173c5e882afb46ce91fa0
  18. 0xe6cfe00ae4e02bc12327e45b5f3334ea5850ba3bcc8e3101d30a8189856a95af
Day root
0x2c19037464cc4c493624565f01775d6446fc78eaa118fc6865bfe2bfca9ff78e
Chained
0xd1d7dee8322ceff8f4c8d83aa1fe4a4466825c2af1c97dbde3d35db61234f7be
Published
On Arc Testnet, block 69584042: 0x8bae2b1d097834c8b458513862d70d29ee807e98dc2e863b27250131c15b35ae

How to check it · This row as JSON