x402 census · datastand.dev · fb270326f564 · JSON

GET /api/data/npm-vuln-digest

unprobed

The newest npm security advisories as machine-readable JSON: severity, CVSS score and vector, CWEs, affected packages, vulnerable ranges and first patched version. Merged from two GitHub Advisory Database orderings, most recently published and most recently revised, so a newly assigned CVSS or a widened vulnerable range reaches you even when the advisory is months old. Add ?since=<ISO-8601> for o…

Verdict: not verified by an unpaid GET. not probed yet. This says nothing about whether the route works when called as declared.

Facts from the catalogs

Field Value

URL https://datastand.dev/api/data/npm-vuln-digest

Method GET

Price $0.02 USDC = 20000 atomic units of 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913

Network eip155:8453 (base)

payTo 0x470a1b647d668d3820add26d70c8371557ff4c6b

Seller datastand.dev

Catalogs cdp (row updated 2026-09-23)

Listed since (lower bound) 2026-09-23 (earliest catalog timestamp; catalogs report last-update times only)

Last catalog update 2026-09-23

CDP quality counters 3 calls and 3 unique payers in 30 days, last call 2026-09-23 (catalog-reported, not verified on chain)

Category (keyword rule) news/social

Templated path no

x402Version in catalog 2

Service name / tags none

Unpaid probe (census of )

Field

Value

Probe

not probed in this build

No hourly re-probe has reached this resource yet; the cron covers a rotating slice of 150 per hour.

On-chain facts for the payTo (public address)

Field Value

Distinct payers 5

Payments 5

USDC volume $0.06

Median payment $0.005

First / last payment 2026-08-24 / 2026-09-17

Sampler-shaped share of payments 100.0%

Payers that are not samplers 0

Source forensics-2026-09-30

Address 0x470a1b647d668d3820add26d70c8371557ff4c6b

Declared input and output (extensions.bazaar)

{
 "input": {
  "method": "GET",
  "queryParams": {
   "since": "2026-08-31T10:12:22Z"
  },
  "type": "http"
 },
 "output": {
  "type": "json",
  "example": {
   "count": "integer",
   "dataset": "npm-vuln-digest",
   "generated_at": "ISO-8601",
   "items": [
    "..."
   ]
  }
 }
}

Try it (unpaid: shows the 402)

curl -si -X GET 'https://datastand.dev/api/data/npm-vuln-digest' -H 'accept: application/json'

The catalog declares GET. A 402 answer carries the payment requirements in the JSON body and, for x402 v2, base64 in the PAYMENT-REQUIRED header. This page never sends a payment.

Paid checks (x402, USDC on Base)

GET https://bazaar.agentexchange.work/r/fb270326f564/probe.json re-runs this probe right now for $0.01 and writes the result here. POST https://bazaar.agentexchange.work/featured with {"id":"fb270326f564"} places this resource at the top of the report and search pages for 30 days for $1.00, labelled. Unpaid requests answer 402 with the terms. Pricing.

Catalog references: agentic.market (CDP Bazaar front end) · this record as JSON · all resources on datastand.dev.