{"id":122682,"recorded_at":"2026-10-26T14:40:22.066495Z","observed_at":"2026-10-26T14:40:22.066454Z","subject_kind":"source_record","subject":"x402_bazaar:https://tolca.tonbot.ca/v1/pkg-check","kind":"listing","method":"baseline/1","body":{"endpoints":[["x402","https://tolca.tonbot.ca/v1/pkg-check"]],"name":"Tolca","owner_address":"0x35f0b86a7e33f561faf7cfa5654cad9162c4a17d","raw":{"accepts":[{"amount":"20000","asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","extra":{"name":"USD Coin","version":"2"},"maxTimeoutSeconds":120,"network":"eip155:8453","payTo":"0x35F0B86a7E33F561faf7cfa5654CAd9162C4A17d","scheme":"exact"}],"description":"Is this package safe to install? One call, one verdict: safe / caution / avoid, with a score, concrete reasons (known vulnerabilities from OSV, deprecation, abandonment, adoption, install scripts, typosquat signals) and a one-line recommendation. Input: name, ecosystem (npm | PyPI), optional version.","extensions":{"bazaar":{"info":{"input":{"body":{"ecosystem":"npm","name":"lodash","version":"4.17.15"},"bodyType":"json","method":"POST","type":"http"},"output":{"example":{"facts":{"latest_version":"4.17.21","license":"MIT","weekly_downloads":50000000},"reasons":["1 high/critical known vulnerability affecting this version","a newer version exists (4.17.21)"],"recommendation":"Upgrade to 4.17.21 before installing.","score":55,"verdict":"caution","vulnerabilities":[{"fixed_in":"4.17.19","id":"GHSA-p6mc-m468-83gw","severity":"HIGH","summary":"Prototype pollution in lodash"}]},"type":"json"}},"schema":{"$schema":"https://json-schema.org/draft/2020-12/schema","properties":{"input":{"additionalProperties":false,"properties":{"body":{"properties":{"ecosystem":{"enum":["npm","PyPI"],"type":"string"},"name":{"description":"Package name as published","type":"string"},"version":{"description":"Optional exact version; defaults to latest","type":"string"}},"required":["name","ecosystem"],"type":"object"},"bodyType":{"enum":["json","form-data","text"],"type":"string"},"method":{"enum":["POST"],"type":"string"},"type":{"const":"http","type":"string"}},"required":["type","method","bodyType","body"],"type":"object"},"output":{"properties":{"example":{"type":"object"},"type":{"type":"string"}},"required":["type"],"type":"object"}},"required":["input"],"type":"object"}}},"lastUpdated":"2026-10-25T17:05:35.408Z","quality":{"l30DaysTotalCalls":18,"l30DaysUniquePayers":5,"lastCalledAt":"2026-10-25T17:05:35.224Z"},"resource":"https://tolca.tonbot.ca/v1/pkg-check","serviceName":"Tolca","tags":["security","npm","pypi","dependencies","supply-chain"],"type":"http","x402Version":2},"source":"x402_bazaar","summary":"Is this package safe to install? One call, one verdict: safe / caution / avoid, with a score, concrete reasons (known vulnerabilities from OSV, deprecation, abandonment, adoption, install scripts, typosquat signals) and a one-line recommendation. Input: name, ecosystem (npm | PyPI), optional version."},"body_sha256":"cf884a4bb2616eb26d51d80c50891a882903cc4a531a5f6bd33daf300d8e7dfe","prev_id":null,"leaf":"0x07e01cb653044eddb818eeb1d85c0ba756985942eec971acd3b1461961eee42d","leaf_text":"{\"body\":\"cf884a4bb2616eb26d51d80c50891a882903cc4a531a5f6bd33daf300d8e7dfe\",\"id\":122682,\"kind\":\"listing\",\"method\":\"baseline/1\",\"observed_us\":1793025622066454,\"prev\":null,\"subject\":\"x402_bazaar:https://tolca.tonbot.ca/v1/pkg-check\",\"subject_kind\":\"source_record\"}","day":{"day":"2026-10-26","leaves":296695,"root":"0xf43e8dcc3d451a4788b26be904c55e8c4c0fa75c9666796c51db38d37e2c0df8","chained":"0x702d5ac508f08b0d1accf36af25822d8e5660367494edd17a642fb61e158a57a","anchor_chain":"eip155:5042002","anchor_tx":"0x495162f8936e19f0039918feebe6c307f327cd6bf8c37219620b1970041fa9ae","anchor_block":69251483},"proof":["0x07dffc60b5587d75286ced15aca18d9a597895ca12b82000acd88d4353e94eec","0xd4aae3b8c5d4641e92827311c73dc1921b95c63a6a30ebdd6b44445731f0b72e","0x5feddc91a86e6826c032ba9c5970ba4aa00f286c24655e00cbbf078633a4cb90","0xeb4a2605b45b37704fdd637acc14237204981507f103659196110c169cc51f2e","0x9d9abd37c982da6a9090104142101bb3a27f6ff6ab382e8cd253124b77276be7","0x35a4c8ca1629ed84181e10b8a0cc226a74ce76dc2209edbecf9d0888dd74c4ef","0xc93d04ec1d29cf128e8b6a80cda0c0cdc0d765c485e48f4120269934a529d5d5","0xdf87df06fdcf89db35b6453a58a424384495df9b0db1ae98d66a5192572bcf0b","0x8da37e2700bbc5dfe661eaae05282fd51bb2e599e1ad9c964285101b9847ad6d","0x286d15bd62bd4bdc9d226a5307435d38911f3c64d096f3d8addf809f96068fe4","0xe5919b091405f2537da4d32a97f1520286a61795e2d149438b884ef5190051cc","0x6003e14d04cde1d24b195ac15b568dd483e04047e0f2ff64d9632a51a8f7123d","0xe5a836cf25a8dfc72c9e3b6a69a7561a1f61f50f9cf36707d36f6e926aa15dec","0xa96bb9408ce00a0d40ddaba8736257dfce76d5478b131d69db1afdf8a824312b","0x7ddc2fead128357f881b63e6c7c26d7fbbb84fca6c7c8e0bbfe386de86ca8d39","0xc6a4d7899a0f442958e26505011190b7cff2483611c1b94eba9043e0ba9ac36e","0x8c756542e482157df0c36464d75c937b845e4423dbbcfad08f0cf8d5a16b9a13","0x20704208aa6923d6b2450ef74ede87a6e0265d46447926038fe9506e9e154b2d","0x9b9ce5b74b9bab5121612ef6b64920a8d453cbf311096a423eef9702747e868a"]}