x402 census · saylorinnovations.com · 6b606c079979 · JSON

GET /api/vuln/check

live

Package Vulnerability Check (OSV). Package vulnerability check before you install or ship a dependency: known vulnerabilities for a specific version from OSV.dev (GitHub advisories, PyPA, RustSec, Go, npm...) with CVE aliases, severity, fixed-in versions and the recommended upgrade. npm, PyPI, crates, Go, Maven, NuGet, RubyGems, Packagist, Pub, Hex.

Verdict: live. The unpaid GET reached a valid 402 (confirmed by the re-probe of 2026-10-01). The live amount equals the catalog price.

Facts from the catalogs

Field Value

URL https://saylorinnovations.com/api/vuln/check

Method GET

Price $0.002 USDC = 2000 atomic units of 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913

Network eip155:8453 (base); also accepts solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp, eip155:137, eip155:42161

payTo 0xA2A8dF0f7CaaBEa4e120a2568118f141569fc8aa

Seller saylorinnovations.com

Catalogs cdp (row updated 2026-09-25), payai (row updated 2026-09-29)

Listed since (lower bound) 2026-09-25 (earliest catalog timestamp; catalogs report last-update times only)

Last catalog update 2026-09-29

CDP quality counters 3 calls and 1 unique payers in 30 days, last call 2026-09-25 (catalog-reported, not verified on chain)

Category (keyword rule) other/unknown

Templated path no

x402Version in catalog 2

Service name / tags · security, vulnerabilities, dependencies, osv, cve

Unpaid probe (census of 2026-09-30)

Field Value

Probed at 2026-09-30T23:40:47.047Z

HEAD 402

GET 402

Verdict live live: valid 402 to an unpaid GET

402 carried in header+body

x402Version in the 402 2

accepts[0] {"scheme":"exact","network":"eip155:8453","amount":"2000","payTo":"0xA2A8dF0f7CaaBEa4e120a2568118f141569fc8aa","asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","maxTimeoutSeconds":120,"extra":{"name":"USD Coin","version":"2"}}

Live amount equals catalog price yes

Live payTo equals catalog payTo yes

extensions.bazaar in the 402 yes

PAYMENT-REQUIRED header yes

WWW-Authenticate offer none

Content type / server / CORS application/json / cloudflare / *

Latency 2,120 ms

Error Payment required to access this resource.

Latest re-probe

Field Value

Re-probed at 2026-10-01T06:13:18.000Z (cron)

Verdict now live unchanged

HEAD / GET 402 / 402

Live amount equals catalog price yes

Latency 1,113 ms

Error none

On-chain facts for the payTo (public address)

Field Value

Distinct payers 2

Payments 6

USDC volume $0.02

Median payment $0.0025

First / last payment 2026-09-27 / 2026-09-29

Sampler-shaped share of payments 100.0%

Payers that are not samplers 0

Source forensics-2026-09-30

Address 0xA2A8dF0f7CaaBEa4e120a2568118f141569fc8aa

Declared input and output (extensions.bazaar)

{
 "input": {
  "method": "GET",
  "queryParams": {
   "ecosystem": "npm",
   "name": "lodash",
   "version": "4.17.15"
  },
  "type": "http"
 },
 "output": {
  "type": "json",
  "example": {
   "count": 6,
   "ecosystem": "npm",
   "highest_severity": "HIGH",
   "name": "lodash",
   "recommended_upgrade": "4.17.21",
   "verdict": "upgrade now to 4.17.21",
   "version": "4.17.15",
   "vulnerabilities": [
    {
     "aliases": [
      "CVE-2021-23337"
     ],
     "fixed_in": [
      "4.17.21"
     ],
     "id": "GHSA-35jh-r3h4-6jhm",
     "severity": "HIGH",
     "summary": "Command Injection in lodash"
    }
   ],
   "vulnerable": true
  }
 }
}

Try it (unpaid: shows the 402)

curl -si -X GET 'https://saylorinnovations.com/api/vuln/check' -H 'accept: application/json'

The catalog declares GET. A 402 answer carries the payment requirements in the JSON body and, for x402 v2, base64 in the PAYMENT-REQUIRED header. This page never sends a payment.

Paid checks (x402, USDC on Base)

GET https://bazaar.agentexchange.work/r/6b606c079979/probe.json re-runs this probe right now for $0.01 and writes the result here. POST https://bazaar.agentexchange.work/featured with {"id":"6b606c079979"} places this resource at the top of the report and search pages for 30 days for $1.00, labelled. Unpaid requests answer 402 with the terms. Pricing.

Catalog references: PayAI listing status · agentic.market (CDP Bazaar front end) · this record as JSON · all resources on saylorinnovations.com.