{"id":2201500,"recorded_at":"2026-11-02T19:13:25.739948Z","observed_at":"2026-11-02T19:13:25.739896Z","subject_kind":"source_record","subject":"x402_bazaar:https://package-health.x402tookit.com/package-provenance","kind":"listing","method":"sync.x402_bazaar/1","body":{"endpoints":[["x402","https://package-health.x402tookit.com/package-provenance"]],"name":"Package Health","owner_address":"0xb531320805c5bed1d46aeadcf4f008fdf172dbda","raw":{"accepts":[{"amount":"20000","asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","extra":{"name":"USD Coin","version":"2"},"maxTimeoutSeconds":300,"network":"eip155:8453","payTo":"0xb531320805C5BED1D46AEaDcF4F008FDF172DBDa","scheme":"exact"},{"amount":"20000","asset":"EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v","extra":{"feePayer":"D6ZhtNQ5nT9ZnTHUbqXZsTx5MH2rPFiBBggX4hY1WePM","transactionVersions":[0]},"maxTimeoutSeconds":300,"network":"solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp","payTo":"DUPiupXtuox38dcGoXUKer5mAydCzmaHjrbQ66qeEm8s","scheme":"exact"},{"amount":"20000","asset":"0x3c499c542cEF5E3811e1192ce70d8cC03d5c3359","extra":{"name":"USD Coin","version":"2"},"maxTimeoutSeconds":300,"network":"eip155:137","payTo":"0xb531320805C5BED1D46AEaDcF4F008FDF172DBDa","scheme":"exact"},{"amount":"20000","asset":"0xaf88d065e77c8cC2239327C5EDb3A432268e5831","extra":{"name":"USD Coin","version":"2"},"maxTimeoutSeconds":300,"network":"eip155:42161","payTo":"0xb531320805C5BED1D46AEaDcF4F008FDF172DBDa","scheme":"exact"}],"description":"Does a package version carry build provenance (SLSA/sigstore attestations)? Signals a verifiable build, not safety.","extensions":{"bazaar":{"info":{"input":{"method":"GET","queryParams":{"name":"express","system":"npm","version":"4.19.2"},"type":"http"},"output":{"example":{"asOf":"2026-10-11T03:35:01.349Z","attestations":0,"degraded":false,"disclaimer":"Screening signal computed from the named public source. Not financial, legal or investment advice; provided as is. Verify at the source before acting.","name":"express","notChecked":["verifying the signatures","what the source code does","…1 more"],"publishedAt":"2024-03-25T14:30:36Z","reasons":["No provenance was found. Most packages still publish none; its absence is common and not a sign of malice.","Provenance proves where a build came from, not that the code is safe."],"relatedProjects":["github.com/expressjs/express","github.com/expressjs/express"],"slsaProvenances":0,"source":"deps.dev","sourceUrl":"https://api.deps.dev","summary":"express@4.19.2: 0 SLSA provenance(s), 0 attestation(s).","system":"npm","verdict":"NO_PROVENANCE_PUBLISHED","version":"4.19.2"},"type":"json"}},"schema":{"$schema":"https://json-schema.org/draft/2020-12/schema","properties":{"input":{"additionalProperties":false,"properties":{"method":{"enum":["GET"],"type":"string"},"queryParams":{"properties":{"name":{"description":"Package name","type":"string"},"system":{"description":"npm, pypi, go, maven, cargo or nuget","type":"string"},"version":{"description":"Version; default is the registry's default version","type":"string"}},"required":["system","name"],"type":"object"},"type":{"const":"http","type":"string"}},"required":["type","method"],"type":"object"},"output":{"properties":{"example":{"properties":{"asOf":{"type":["null","string"]},"attestations":{"type":["null","number"]},"degraded":{"type":["boolean","null"]},"disclaimer":{"type":["null","string"]},"name":{"type":["null","string"]},"notChecked":{"items":{"type":"string"},"type":["array","null"]},"publishedAt":{"type":["null","string"]},"reasons":{"items":{"type":"string"},"type":["array","null"]},"relatedProjects":{"items":{"type":"string"},"type":["array","null"]},"slsaProvenances":{"type":["null","number"]},"source":{"type":["null","string"]},"sourceUrl":{"type":["null","string"]},"summary":{"type":["null","string"]},"system":{"type":["null","string"]},"verdict":{"type":["null","string"]},"version":{"type":["null","string"]}},"type":"object"},"type":{"type":"string"}},"required":["type"],"type":"object"}},"required":["input"],"type":"object"}}},"lastUpdated":"2026-11-01T23:41:55.973Z","quality":{"l30DaysTotalCalls":2,"l30DaysUniquePayers":2,"lastCalledAt":"2026-11-01T23:41:55.794Z"},"resource":"https://package-health.x402tookit.com/package-provenance","serviceName":"Package Health","tags":["packages","provenance","slsa","supply-chain"],"type":"http","x402Version":2},"source":"x402_bazaar","summary":"Does a package version carry build provenance (SLSA/sigstore attestations)? Signals a verifiable build, not safety."},"body_sha256":"50545f68934a570c9cda5ca1cfe920874471e55ecade868671e8ab77832d9444","prev_id":null,"leaf":"0x4a3c54650c00331c150d5e74b9b7a9ff9758f098b4d2379b59d9e5c86bbc1732","leaf_text":"{\"body\":\"50545f68934a570c9cda5ca1cfe920874471e55ecade868671e8ab77832d9444\",\"id\":2201500,\"kind\":\"listing\",\"method\":\"sync.x402_bazaar/1\",\"observed_us\":1793646805739896,\"prev\":null,\"subject\":\"x402_bazaar:https://package-health.x402tookit.com/package-provenance\",\"subject_kind\":\"source_record\"}","day":{"day":"2026-11-02","leaves":444186,"root":"0x78fecaabbe319e56f5c4b80fc02e2052e198ad24781da8832a475ff65f2002d1","chained":"0xdc35957db5d1371ca382b9152878ffece28ec7c5cb4f98fd71ddb367f8b999b2","anchor_chain":"eip155:5042002","anchor_tx":"0x56b814612eb2e3e544153df3e91e1f7199106d1e430c7d8c6b653feeb9ebe9af","anchor_block":70432815},"proof":["0x4a3bde8a7fdf904998027b122fefebe558b6eaafe6a29f61599e6e7fb5c76c86","0xe9f2e03123d09e6dfe7aae9f6c2723d9dd08f193a37ab0e7d3863d4a62526dd2","0xdf89800a36b33132f11ef806e91960af9a1feb4c91ef8126111506478ce6d0a1","0xb3d51334fa21ff2a7f18a72dee4ad48f37245917ba09a0321449c54f81140c9a","0x82452cffa5db9a95634cadb628cb4419aa116d25f8c30272a3328d2399f7b395","0x4eaa09cfca3baadc4ec2d62b7aece99cad89f83430a10fbbea1c0c8aac502373","0x8bf540f7bc287f659976c6c45b1b2f5c137f0105f0f4d10ee8297600487fbe0c","0xd1b26c83cdda01fdcd4148585017dff34b8638119a76047608c58e522fface2d","0x43ec9172b64040e887681c7654bf2086c646de527a5ffbeaa85c9150ef822cde","0x823047108e64f2f157138d3c8e683a90dbb4c33e0d67c01ba4edef7111ab5036","0x52da6a9dae8a9c708636ff5019aef4ebb095666b1c6470c2fa8709af018b69d6","0xb49c87ba1f1d6bd8b04974a4b725b1a6c4ec061e7b19895e6ac177e2e5bcb780","0xec50fb8bdb629a8eec60882415de93b837c0015821049eeb6965a6cdd0d6c186","0xdc58bc56b35577036d6185abcf0d4c91a45df10bd65f767505c1d43fcecde566","0x3217f821997a6d778dcf0814a25b1296c55ab77710c675e7b15695d25a6ce67d","0x8760c227928c5295506cd8606e763f86cf8cd2a549820fab4dc86d29ca0d816d","0xa20b9be86af7d690e040c9060a373b2fc5498edf3432f43c26f74fa2febc1e9a","0x050f2978b537f7afb21ee1551577cdf146d1c56f4df12d24315ae5e69366b0a4","0x365b161a4b68d750dcc4b3ecce1154a2163c87b08762079428e68f0ebb6a754e"]}