x402 census · relay402.georgespring.workers.dev · 3054d9ad2c37 · JSON
GET /api/npm-package-check
unprobed
Typosquat and quality signals for an npm package before installing it: weekly downloads, latest version, license, deprecation notice, repository link, and computed risk flags (low_downloads, deprecated, no_repository, no_license, not_found). A package with 12 weekly downloads pretending to be a popular library is the classic supply-chain attack on coding agents. Pairs with the package-vulns endpo…
Verdict: not verified by an unpaid GET. not probed yet. This says nothing about whether the route works when called as declared.
Facts from the catalogs
| Field | Value |
|---|---|
| URL | https://relay402.georgespring.workers.dev/api/npm-package-check |
| Method | GET |
| Price | $0.01 USDC = 10000 atomic units of 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913 |
| Network | eip155:8453 (base) |
| payTo | 0x73fc43d426a89577c7b58f5fee50ec95d4396079 |
| Seller | relay402.georgespring.workers.dev |
| Catalogs | payai (row updated 2026-09-30) |
| Listed since (lower bound) | 2026-09-30 (earliest catalog timestamp; catalogs report last-update times only) |
| Last catalog update | 2026-09-30 |
| CDP quality counters | not in the CDP catalog |
| Category (keyword rule) | trading-signals |
| Templated path | no |
| x402Version in catalog | 2 |
| Service name / tags | npm package quality check · security, npm, supply-chain, dev, typosquat |
Unpaid probe (census of )
| Field | Value |
|---|---|
| Probe | not probed in this build |
No hourly re-probe has reached this resource yet; the cron covers a rotating slice of 150 per hour.
On-chain facts for the payTo (public address)
| Field | Value |
|---|---|
| Distinct payers | 2 |
| Payments | 50 |
| USDC volume | $1.74 |
| Median payment | n/a |
| First / last payment | 2026-09-13 / 2026-09-30 |
| Sampler-shaped share of payments | n/a |
| Payers that are not samplers | n/a |
| Source | blockscout-sample — newest page of inbound ERC-20 transfers only (<=50); counts are a floor, not a total |
| Address | 0x73fc43d426a89577c7b58f5fee50ec95d4396079 |
Declared input and output (extensions.bazaar)
{
"input": {
"type": "http",
"method": "GET",
"queryParams": {
"name": "lodash"
}
}
}
Try it (unpaid: shows the 402)
curl -si -X GET 'https://relay402.georgespring.workers.dev/api/npm-package-check' -H 'accept: application/json'
The catalog declares GET. A 402 answer carries the payment requirements in the JSON body and, for x402 v2, base64 in the PAYMENT-REQUIRED header. This page never sends a payment.
Paid checks (x402, USDC on Base)
GET https://bazaar.agentexchange.work/r/3054d9ad2c37/probe.json re-runs this probe right now for $0.01 and writes the result here. POST https://bazaar.agentexchange.work/featured with {"id":"3054d9ad2c37"} places this resource at the top of the report and search pages for 30 days for $1.00, labelled. Unpaid requests answer 402 with the terms. Pricing.
Catalog references: PayAI listing status · this record as JSON · all resources on relay402.georgespring.workers.dev.