{"id":60361,"recorded_at":"2026-10-26T14:37:28.386397Z","observed_at":"2026-10-26T14:37:28.386329Z","subject_kind":"source_record","subject":"x402_bazaar:https://2s.io/api/security/package","kind":"listing","method":"baseline/1","body":{"endpoints":[["x402","https://2s.io/api/security/package"]],"name":"2s","owner_address":"0x2b6d4988db4723e6908db86ab2b8dfbc51fc32c5","raw":{"accepts":[{"amount":"5400","asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","extra":{"name":"USD Coin","version":"2"},"maxTimeoutSeconds":60,"network":"eip155:8453","payTo":"0x2b6D4988Db4723E6908Db86Ab2b8dFBc51FC32C5","scheme":"exact"},{"amount":"5400","asset":"EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v","extra":{"feePayer":"D6ZhtNQ5nT9ZnTHUbqXZsTx5MH2rPFiBBggX4hY1WePM","name":"USDC","version":"1"},"maxTimeoutSeconds":60,"network":"solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp","payTo":"TW6ntaGzvj63ZgPjszd4FCGmVTGfzv1MAYZbjYcyWhn","scheme":"exact"}],"description":"Security and provenance for an open-source package, composed live from three authoritative sources in one call. Pass ecosystem (npm, pypi, go, maven, cargo, nuget) + name (+ optional version; defaults to latest). Returns: known vulnerabilities from OSV (osv.dev — aggregates GitHub Security Advisories, PyPA, RustSec, Go vuln DB, etc.) each with its id, CVE aliases, summary, severity, and references; the resolved license and deprecation status (deps.dev); and the source repo's OpenSSF Scorecard health score (overall + per-check) plus stars/forks/open-issues. All live — newly-disclosed advisories appear within hours. Distinct from registry.npm-lookup / pypi-lookup (metadata only): this answers \"is this dependency safe to add, what license does it carry, and how well-maintained is it.\"","extensions":{"bazaar":{"info":{"input":{"method":"GET","queryParams":{"ecosystem":"npm","name":"lodash","version":"4.17.20"},"type":"http"}},"schema":{"$schema":"https://json-schema.org/draft/2020-12/schema","properties":{"input":{"properties":{"method":{"const":"GET"},"queryParams":{"properties":{"ecosystem":{"description":"Package ecosystem: npm, pypi, go, maven, cargo, or nuget.","type":"string"},"name":{"description":"Package name (e.g. lodash, requests).","type":"string"},"version":{"description":"Version (defaults to latest).","type":"string"}},"required":["ecosystem","name"]},"type":{"const":"http"}},"required":["type","method","queryParams"],"type":"object"}},"required":["input"],"type":"object"}}},"iconUrl":"https://res.cloudinary.com/bdb-prod/image/upload/c_fill,ar_1:1,w_256,h_256,f_auto,q_auto/v1781454341/bazaar-icons/58f7ba8f2b3b8047.png","lastUpdated":"2026-10-19T06:27:28.229Z","quality":{"l30DaysTotalCalls":3,"l30DaysUniquePayers":3,"lastCalledAt":"2026-10-19T06:27:27.958Z"},"resource":"https://2s.io/api/security/package","serviceName":"2s","tags":["public-records","identifiers","ai-agents","us-gov-data","x402"],"type":"http","x402Version":2},"source":"x402_bazaar","summary":"Security and provenance for an open-source package, composed live from three authoritative sources in one call. Pass ecosystem (npm, pypi, go, maven, cargo, nuget) + name (+ optional version; defaults to latest). Returns: known vulnerabilities from OSV (osv.dev — aggregates GitHub Security Advisories, PyPA, RustSec, Go vuln DB, etc.) each with its id, CVE aliases, summary, severity, and references; the resolved license and deprecation status (deps.dev); and the source repo's OpenSSF Scorecard health score (overall + per-check) plus stars/forks/open-issues. All live — newly-disclosed advisories appear within hours. Distinct from registry.npm-lookup / pypi-lookup (metadata only): this answers \"is this dependency safe to add, what license does it carry, and how well-maintained is it.\""},"body_sha256":"2ca3488bf4b0d05a95679213594829d0dd9a8d3d2b62402e84e732e8451faeb2","prev_id":null,"leaf":"0x162382ab8904225f438da928f8da297427897f90b3171017c174d82951cebe29","leaf_text":"{\"body\":\"2ca3488bf4b0d05a95679213594829d0dd9a8d3d2b62402e84e732e8451faeb2\",\"id\":60361,\"kind\":\"listing\",\"method\":\"baseline/1\",\"observed_us\":1793025448386329,\"prev\":null,\"subject\":\"x402_bazaar:https://2s.io/api/security/package\",\"subject_kind\":\"source_record\"}","day":{"day":"2026-10-26","leaves":296695,"root":"0xf43e8dcc3d451a4788b26be904c55e8c4c0fa75c9666796c51db38d37e2c0df8","chained":"0x702d5ac508f08b0d1accf36af25822d8e5660367494edd17a642fb61e158a57a","anchor_chain":"eip155:5042002","anchor_tx":"0x495162f8936e19f0039918feebe6c307f327cd6bf8c37219620b1970041fa9ae","anchor_block":69251483},"proof":["0x1623a8a516385ba9d053a5a00e264db6b9f1bf2e5b0ad07d5f260d14eb30512f","0x65ab2efa5e9475ad2d8237f75eb0073bc3dd8d6afe6b4fb2f19aaf3d682e9003","0xb9cd0b34b1daaca383eefc05ff7cb5fe23a38e69e1d783db0ec73a106cd71aad","0x0523694d8f405eaf67067d155fec964aed4ad6cddb513b63ebaf9caac4e0e166","0xeb7e234e5866f441318778c8f13d15df851ba09cbbe4101616319b2dbe5fa2f1","0x1fbc525662f0d1e2c80200573abac03f3cb6208274069c897a6b8a95bf3b7795","0x0e92d097267d048d5beb7c05b72350254076fedbf79b5da67e96e91d4fef043f","0x2bff58401d520d6ae8841ffd0959f08117245a742d4e6fdfd81d489fc501554e","0x4353f9765dc35ef405c74366e0d045e048fd321b985e9cd73a26be88ce05f264","0xd3388b2b4c7f521364d933c4432002eaf85765d15a09631fb8cf2491679dccc1","0xed7aa4f0a0c93f40e8bb99589e49cbc6da4d8144091eb55a8707245d7bf94039","0x856fd0d049baa5f07cd2d5d524b40c994bed22cb46ea15af4cc075b3f3f3d444","0x32f46c5f73ecbfd4f770f7f760a79bee2afed4b3e7572fa882b3e7dce8df4356","0x770e4376196188c7fc9ec40f8e218dc0d1cb92bba5fe0425a0edce27ca9a997f","0x60582ab4b41e72eb70eb0bce07fbf0fb4d2b62a8bad5be50f5d16d511adc746c","0xc6a4d7899a0f442958e26505011190b7cff2483611c1b94eba9043e0ba9ac36e","0x8c756542e482157df0c36464d75c937b845e4423dbbcfad08f0cf8d5a16b9a13","0x20704208aa6923d6b2450ef74ede87a6e0265d46447926038fe9506e9e154b2d","0x9b9ce5b74b9bab5121612ef6b64920a8d453cbf311096a423eef9702747e868a"]}