x402 census · dependency-risk.use.x402atlas.com · 3bd53cfdbf14 · JSON

POST /sbom

unprobed

CycloneDX SBOM vulnerability check — analyze bounded JSON 1.5 software bill of materials components against OSV and prioritize exact CVE matches from CISA KEV without remote document fetches.

Verdict: not verified by an unpaid GET. not probed yet. This says nothing about whether the route works when called as declared.

Facts from the catalogs

Field Value

URL https://dependency-risk.use.x402atlas.com/sbom

Method POST

Price $0.02 USDC = 20000 atomic units of 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913

Network eip155:8453 (base); also accepts eip155:137, eip155:42161

payTo 0x8C128f1Ee62Bb5e47867CfbAe2ad89be325Df1b2

Seller dependency-risk.use.x402atlas.com

Catalogs cdp (row updated 2026-09-15)

Listed since (lower bound) 2026-09-15 (earliest catalog timestamp; catalogs report last-update times only)

Last catalog update 2026-09-15

CDP quality counters 2 calls and 1 unique payers in 30 days, last call 2026-09-15 (catalog-reported, not verified on chain)

Category (keyword rule) dev-tools/utilities

Templated path no

x402Version in catalog 2

Service name / tags Open Source Vulnerability Check · cyclonedx-sbom-check, osv, cve, cisa-kev, software-supply-chain

Unpaid probe (census of )

Field

Value

Probe

not probed in this build

No hourly re-probe has reached this resource yet; the cron covers a rotating slice of 150 per hour.

On-chain facts for the payTo (public address)

Field Value

Distinct payers 12

Payments 46

USDC volume $0.47

Median payment $0.005

First / last payment 2026-07-27 / 2026-09-29

Sampler-shaped share of payments 100.0%

Payers that are not samplers 0

Source forensics-2026-09-30

Address 0x8C128f1Ee62Bb5e47867CfbAe2ad89be325Df1b2

Declared input and output (extensions.bazaar)

{
 "input": {
  "body": {
   "document": {
    "bomFormat": "CycloneDX",
    "components": [
     {
      "name": "log4j-core",
      "purl": "pkg:maven/org.apache.logging.log4j/log4j-core@2.14.1",
      "type": "library",
      "version": "2.14.1"
     }
    ],
    "specVersion": "1.5"
   }
  },
  "bodyType": "json",
  "method": "POST",
  "type": "http"
 },
 "output": {
  "type": "json",
  "example_truncated": true,
  "chars": 27513
 }
}

Try it (unpaid: shows the 402)

curl -si -X POST 'https://dependency-risk.use.x402atlas.com/sbom' -H 'accept: application/json' -H 'content-type: application/json' --data '{}'

The catalog declares POST. A 402 answer carries the payment requirements in the JSON body and, for x402 v2, base64 in the PAYMENT-REQUIRED header. This page never sends a payment.

Paid checks (x402, USDC on Base)

GET https://bazaar.agentexchange.work/r/3bd53cfdbf14/probe.json re-runs this probe right now for $0.01 and writes the result here. POST https://bazaar.agentexchange.work/featured with {"id":"3bd53cfdbf14"} places this resource at the top of the report and search pages for 30 days for $1.00, labelled. Unpaid requests answer 402 with the terms. Pricing.

Catalog references: agentic.market (CDP Bazaar front end) · this record as JSON · all resources on dependency-risk.use.x402atlas.com.