npm package discovery and stats viewer.

Discover Tips

  • General search

    [free text search, go nuts!]

  • Package details

    pkg:[package-name]

  • User packages

    @[username]

Sponsor

Optimize Toolset

I’ve always been into building performant and accessible sites, but lately I’ve been taking it extremely seriously. So much so that I’ve been building a tool to help me optimize and monitor the sites that I build to make sure that I’m making an attempt to offer the best experience to those who visit them. If you’re into performant, accessible and SEO friendly sites, you might like it too! You can check it out at Optimize Toolset.

About

Hi, 👋, I’m Ryan Hefner  and I built this site for me, and you! The goal of this site was to provide an easy way for me to check the stats on my npm packages, both for prioritizing issues and updates, and to give me a little kick in the pants to keep up on stuff.

As I was building it, I realized that I was actually using the tool to build the tool, and figured I might as well put this out there and hopefully others will find it to be a fast and useful way to search and browse npm packages as I have.

If you’re interested in other things I’m working on, follow me on Twitter or check out the open source projects I’ve been publishing on GitHub.

I am also working on a Twitter bot for this site to tweet the most popular, newest, random packages from npm. Please follow that account now and it will start sending out packages soon–ish.

Open Software & Tools

This site wouldn’t be possible without the immense generosity and tireless efforts from the people who make contributions to the world and share their work via open source initiatives. Thank you 🙏

© 2026 – Pkg Stats / Ryan Hefner

@xpayr/payment-evidence

v0.1.0

Published

Canonical XPayr payment-evidence envelopes and Merkle inclusion proofs.

Vulnerabilities

Powered byPowered by Snyk
  • 0High
  • 0Medium
  • 0Low

Links

Git

Maintainers

xpayrxpayr

Keywords

Readme

XPayr Payment Evidence

CI License: MIT

Canonical payment-evidence envelopes, deterministic hashing, and Merkle inclusion proofs for independently verifiable XPayr receipts.

Status: Arc Testnet anchor verified · Arc Mainnet remains disabled

Purpose

Package facts already verified by XPAYR into portable evidence without pretending that a hash or Merkle proof creates payment truth.

Included

  • Canonical JSON and domain-separated envelope hashes
  • Sorted-pair Keccak Merkle batches and inclusion proofs
  • Privacy-safe evidence schema and verification CLI
  • Non-custodial immutable-root registry with a real Arc Testnet anchor

Quick start

npm install @xpayr/payment-evidence

For repository development:

npm ci
npm test
node ./bin/xpayr-evidence.mjs --help

Evidence is not payment truth

An envelope packages facts that XPayr has already verified. Canonical JSON, hashes, and Merkle proofs detect mutation and prove inclusion in a specific batch; they do not prove that the original facts were correct. The XPayr receipt verifier and reconciliation state remain authoritative.

xpayr-evidence seal envelope.json > sealed.json
xpayr-evidence verify sealed.json
xpayr-evidence batch sealed-a.json sealed-b.json > batch.json

The schema forbids secret-shaped fields, uses atomic-unit strings for blockchain amounts, and marks payment_status_mutation_allowed: false in verification output. The registry cannot hold funds, approve tokens, execute arbitrary calls, upgrade itself, or mutate XPayr payment state.

Verified Arc Testnet anchor

The repository ships a sealed envelope for a real XPayr Arc Testnet agent payment and its independently reproducible on-chain anchor.

| Item | Value | | --- | --- | | Network | Arc Testnet (5042002) | | Registry | 0xf2B78A7A32Eb390827D272Dbd175Aa48341646ba | | Root transaction | 0x7ae84fee1f3f00fb96d136aa908be2651743238342dace3fcf4bdf00383614b2 | | Merkle root | 0x049b78193f72b821cdcb2f2a76f4bba307a184e1dc69f0aa265e7448cba248f2 |

Run the same read-only RPC verification locally:

npm run verify:arc-testnet

The deployment owner is the deterministic XPayr 2-of-3 Safe address. That address currently has no bytecode on Arc Testnet, so owner-only publisher rotation is intentionally unavailable there; existing roots remain immutable and the allowlisted publisher can only append new roots. This Testnet governance constraint is recorded in deployments/arc-testnet.json. It must be resolved before any future Mainnet deployment.

Arc Mainnet deployment and publishing are not supported by these scripts. Every write command requires the explicit ARC_TESTNET_ONLY acknowledgement and verifies chain ID 5042002 before signing.

Use an XPayr test key before live credentials. Never expose sk_test_*, sk_live_*, agent keys, webhook secrets, or wallet private keys in browser code or commits.

Documentation

Security

Read SECURITY.md before reporting a vulnerability. Payment completion must be based on verified XPayr webhook/API state and canonical on-chain evidence, not browser callbacks alone.

License

MIT. See LICENSE.