{"id":122050,"recorded_at":"2026-10-26T14:40:20.846125Z","observed_at":"2026-10-26T14:40:20.846082Z","subject_kind":"source_record","subject":"x402_bazaar:https://stormap.ai/x402/v1/package_check","kind":"listing","method":"baseline/1","body":{"endpoints":[["x402","https://stormap.ai/x402/v1/package_check"]],"name":"Stormap","owner_address":"0x1260d8d1fd47e22416156b72ee75e97986f8ba70","raw":{"accepts":[{"amount":"10000","asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","extra":{"name":"USD Coin","version":"2"},"maxTimeoutSeconds":120,"network":"eip155:8453","payTo":"0x1260d8d1fd47e22416156b72ee75e97986f8ba70","scheme":"exact"}],"description":"Use when an npm or PyPI package is about to be installed, especially a name an LLM suggested. Returns ok_to_install, caution, dont_install or does_not_exist with reasons: malicious-package reports, known vulnerabilities for the version with the fixed version, deprecated or yanked, age, install scripts, downloads and typosquat look-alikes. From OSV.dev, deps.dev, npm and PyPI. ecosystem=pypi for Python. Errors: 400 bad_input, 502 registry unreachable. Failed calls are not charged.","extensions":{"bazaar":{"info":{"input":{"method":"GET","queryParams":{"name":"lodash@4.17.15"},"type":"http"},"output":{"example":{"ecosystem":"npm","first_published":"2012-04-23","install_scripts":[],"latest_version":"4.18.1","malicious_reports":[],"package":"lodash","reasons":["3 high-severity known vulnerabilities in 4.17.15; fixed in 4.17.21."],"similar_to":null,"summary":"Install with caution: lodash@4.17.15. 3 high-severity known vulnerabilities in 4.17.15; fixed in 4.17.21.","verdict":"caution","version_checked":"4.17.15","vulnerabilities":[{"aliases":["CVE-2021-23337"],"fixed_in":["4.17.21"],"id":"GHSA-35jh-r3h4-6jhm","severity":"high","summary":"Command Injection in lodash"}],"vulnerability_count":6,"weekly_downloads":162267012},"type":"json"}},"schema":{"$schema":"https://json-schema.org/draft/2020-12/schema","properties":{"input":{"additionalProperties":false,"properties":{"method":{"enum":["GET"],"type":"string"},"queryParams":{"properties":{"ecosystem":{"description":"npm (default) or pypi.","enum":["npm","pypi"],"type":"string"},"name":{"description":"Package name, optionally with a version: \"lodash\", \"lodash@4.17.15\", \"@scope/pkg\", \"requests==2.31.0\".","type":"string"},"version":{"description":"Optional version to check (default: latest).","type":"string"}},"required":["name"],"type":"object"},"type":{"const":"http","type":"string"}},"required":["type","method"],"type":"object"},"output":{"properties":{"example":{"properties":{"ecosystem":{"type":"string"},"first_published":{"type":"string"},"install_scripts":{"type":"array"},"latest_version":{"type":"string"},"malicious_reports":{"type":"array"},"package":{"type":"string"},"reasons":{"type":"array"},"similar_to":{},"summary":{"type":"string"},"verdict":{"type":"string"},"version_checked":{"type":"string"},"vulnerabilities":{"type":"array"},"vulnerability_count":{"type":["integer","number"]},"weekly_downloads":{"type":["integer","number"]}},"type":"object"},"type":{"type":"string"}},"required":["type"],"type":"object"}},"required":["input"],"type":"object"}}},"lastUpdated":"2026-10-17T17:17:42.74Z","quality":{"l30DaysTotalCalls":3,"l30DaysUniquePayers":2,"lastCalledAt":"2026-10-17T17:17:42.543Z"},"resource":"https://stormap.ai/x402/v1/package_check","serviceName":"Stormap","tags":["web","security","ai-agents"],"type":"http","x402Version":2},"source":"x402_bazaar","summary":"Use when an npm or PyPI package is about to be installed, especially a name an LLM suggested. Returns ok_to_install, caution, dont_install or does_not_exist with reasons: malicious-package reports, known vulnerabilities for the version with the fixed version, deprecated or yanked, age, install scripts, downloads and typosquat look-alikes. From OSV.dev, deps.dev, npm and PyPI. ecosystem=pypi for Python. Errors: 400 bad_input, 502 registry unreachable. Failed calls are not charged."},"body_sha256":"652b268fe134fd9a2f064a5a53ee0f6594e7d17b6dc7300da2d2f769a98d9e24","prev_id":null,"leaf":"0x3ae42c4b20976109d2170bef5c0d7a696a86a7f61fb48e2f08796452404de57d","leaf_text":"{\"body\":\"652b268fe134fd9a2f064a5a53ee0f6594e7d17b6dc7300da2d2f769a98d9e24\",\"id\":122050,\"kind\":\"listing\",\"method\":\"baseline/1\",\"observed_us\":1793025620846082,\"prev\":null,\"subject\":\"x402_bazaar:https://stormap.ai/x402/v1/package_check\",\"subject_kind\":\"source_record\"}","day":null,"proof":[]}