sbom component diff derived

api.zfinia.comMarket data derived

POST https://api.zfinia.com/x402/v1/sbom-component-diff

failabsent from every registry#7 by calls of 15 on this host

0.16 USDC

per call, as the listing declares it on eip155:8453

Compare with another Every figure as JSON Cite this page

the price, as of 2026-10-04 21:22 UTC · method

Validation state: fail; as of 2026-10-04 13:11 UTC · method · sweep daily-2026-10-04
Uptime, 7 / 30 / 90 days: — / 50% / 50%; as of 2026-10-04 13:11 UTC · method · 0 of 0 in 7d, 1 of 2 in 30d, 1 of 2 in 90d
Calls, trailing 30 days: 1; as of 2026-10-04 21:22 UTC · method
Unique payers, trailing 30 days: 1; as of 2026-10-04 21:22 UTC · method
Last called: 2026-10-04 08:04 UTC; as of 2026-10-04 21:22 UTC · method
First observed by TOLLderived: 2026-10-04; as of 2026-10-04 12:19 UTC · method · observation began 10 September 2026; listings that predate it show that date
Pricederived: 0.16 USDC; as of 2026-10-04 21:22 UTC · method · on eip155:8453
Networks: 1; as of 2026-10-04 21:22 UTC · method

Counters

2 observations, 1 of them a change, fewer than the 3 a trace needs

How big is this endpoint among the ones like it?

Calls counted in the trailing thirty days across the 8,872 endpoints in Market data that carry counters, binned on a logarithmic scale because the range runs over five orders of magnitude. The marked bin is this endpoint, at 1: 6,656 in the category are counted higher and 2,215 lower.

No trace is drawn of this endpoint’s own volume. Its counters have changed 1 time across 2 observations, and 3 changes are the fewest this site will draw a trace through, because two points and a guess are not a series. Every observation is in the JSON.

In words

sbom component diff answered HTTP 429 rather than 402 at the sweep of 2026-10-04; the recorded state is fail.

TOLL files sbom component diff under market data: a POST endpoint on api.zfinia.com, listed in neither registry at the last pull.

Per call, sbom component diff declares 0.16 USDC on Base.

sbom component diff takes a json body with the fields after and before.

A response from sbom component diff, as declared, includes added, limits, passed, removed, complete, findings and 2 others.

sbom component diff drew a single call from a single payer in the trailing 30 days.

The last call to sbom component diff came 9 days before the snapshot, 2026-10-04.

api.zfinia.com lists 15 endpoints; sbom component diff is tied 7th by calls with 9 others.

It accounts for 4% of the calls counted across the host.

sbom component diff is near the top of prices in market data; 97% of comparable listings are cheaper.

Closest in price to sbom component diff within market data: analyze at svm402.com and q verdict resource at www.ax1.vc.

The wallet paid by sbom component diff is the payee of 179 endpoints across 5 hosts.

The seller's own tags are sbom, supply chain, inventory and diff.

sbom component diff was missing from the Coinbase registry at the pull of 2026-10-05, confirmed at the pull of 2026-10-05; that is registry presence, not liveness.

Where the sentences above compare this endpoint with others, the comparison is against the index as it stands now, live; the figures above are final.

Payment options as declared

the payment options, as of 2026-10-04 21:22 UTC · method

Every payment option declared on this listing
registry	network	asset	amount	scheme	pay to
Coinbase	eip155:8453	USDC	0.16 USDC	exact	0x25e824…6a9608

Preflight checks at the last sweep

the checks, as of 2026-10-04 13:11 UTC · methodendpoint answered HTTP 429

returns_402 · an unauthenticated request gets HTTP 402

Validation history, 90 days

Every sweep that observed this endpoint, newest first.

Validation observations over the last 90 days
observed, UTC	state	failed checks	sweep
2026-10-04 13:11 UTC	fail	1	daily-2026-10-04
2026-10-04 12:38 UTC	pass	0	new-after-daily-2026-10-04

Registry presence

Presence in a registry, not liveness of the service (method). Newest first.

2026-10-05 14:34 UTCabsence from Coinbase confirmed, rule v1
2026-10-05 05:36 UTCabsent from Coinbase at this pull
2026-10-04 12:19 UTClisted in Coinbase

Declared input and output, as listed

From the registry record, not validated by TOLL.the declared schema, as of 2026-10-04 08:04 UTC · method

The input and output block

{
  "input": {
    "body": {
      "after": {
        "bomFormat": "CycloneDX",
        "components": [
          {
            "name": "express",
            "purl": "pkg:npm/express",
            "type": "library",
            "version": "5.0.0",
            "licenses": [
              {
                "license": {
                  "id": "MIT"
                }
              }
            ]
          },
          {
            "name": "tiny-lib",
            "purl": "pkg:npm/tiny-lib",
            "type": "library",
            "version": "0.5.0",
            "licenses": [
              {
                "license": {
                  "id": "GPL-3.0-only"
                }
              }
            ]
          },
          {
            "name": "fresh-dep",
            "purl": "pkg:npm/fresh-dep",
            "type": "library",
            "version": "1.0.0"
          }
        ],
        "specVersion": "1.5"
      },
      "before": {
        "bomFormat": "CycloneDX",
        "components": [
          {
            "name": "express",
            "purl": "pkg:npm/express",
            "type": "library",
            "version": "4.18.2",
            "licenses": [
              {
                "license": {
                  "id": "MIT"
                }
              }
            ]
          },
          {
            "name": "tiny-lib",
            "purl": "pkg:npm/tiny-lib",
            "type": "library",
            "version": "0.4.1",
            "licenses": [
              {
                "license": {
                  "id": "MIT"
                }
              }
            ]
          },
          {
            "name": "retired",
            "purl": "pkg:npm/retired",
            "type": "library",
            "version": "1.0.0",
            "licenses": [
              {
                "license": {
                  "id": "Apache-2.0"
                }
              }
            ]
          }
        ],
        "specVersion": "1.5"
      }
    },
    "type": "http",
    "method": "POST",
    "bodyType": "json"
  },
  "output": {
    "type": "json",
    "example": {
      "added": [
        {
          "name": "fresh-dep",
          "purl": "pkg:npm/fresh-dep",
          "version": "1.0.0",
          "licenses": []
        }
      ],
      "limits": {
        "maxJobs": 200,
        "maxFindings": 500,
        "maxServices": 200,
        "maxResources": 2000,
        "maxVariables": 1000,
        "maxComponents": 5000,
        "maxDependencies": 5000
      },
      "passed": false,
      "removed": [
        {
          "name": "retired",
          "purl": "pkg:npm/retired",
          "version": "1.0.0"
        }
      ],
      "complete": true,
      "findings": [
        {
          "code": "COMPONENT_MAJOR_CHANGE",
          "detail": "express moved 4.18.2 to 5.0.0, a major change.",
          "component": "express"
        },
        {
          "code": "COMPONENT_MAJOR_CHANGE",
          "detail": "tiny-lib moved 0.4.1 to 0.5.0, a minor change.",
          "component": "tiny-lib"
        },
        {
          "code": "DECLARED_LICENSE_CHANGED",
          "detail": "tiny-lib declares GPL-3.0-only where it declared MIT. This is a change in a declared field, not a licensing conclusion.",
          "component": "tiny-lib"
        }
      ],
      "unchanged": false,
      "request_id": "example-request",
      "service_id": "sbom_component_diff",
      "added_count": 1,
      "assumptions": [
        "Components are matched by package URL when both sides carry one, because a bare name matches the wrong component across ecosystems.",
        "Both CycloneDX components and SPDX packages are read, and comparing across formats is reported so a caller knows a field only one format carries was not compared."
      ],
      "limitations": [
        "Inventory comparison only. No advisory database is consulted, nothing is scanned, and no licence conclusion is drawn; a licence change is reported as a change in a declared field.",
        "unchanged is true only when both inventories were fully read and nothing moved."
      ],
      "observed_at": "2026-10-02T00:00:00.000Z",
      "after_format": "cyclonedx",
      "not_examined": [],
      "before_format": "cyclonedx",
      "finding_count": 5,
      "removed_count": 1,
      "license_changes": [
        {
          "name": "tiny-lib",
          "after": [
            "GPL-3.0-only"
          ],
          "before": [
            "MIT"
          ]
        }
      ],
      "service_version": "1.0.0",
      "version_changes": [
        {
          "to": "5.0.0",
          "from": "4.18.2",
          "kind": "major",
          "name": "express",
          "potentially_breaking": true
        },
        {
          "to": "0.5.0",
          "from": "0.4.1",
          "kind": "minor",
          "name": "tiny-lib",
          "potentially_breaking": true
        }
      ],
      "findings_by_code": {
        "COMPONENT_ADDED": 1,
        "COMPONENT_MAJOR_CHANGE": 2,
        "DECLARED_LICENSE_CHANGED": 1,
        "NEW_COMPONENT_WITHOUT_DECLARED_LICENSE": 1
      },
      "license_change_count": 1,
      "version_change_count": 2,
      "after_component_count": 3,
      "before_component_count": 3,
      "potentially_breaking_count": 2
    }
  }
}

What the listing says

Compare two software inventories and report what entered, left and moved. Reads CycloneDX components and SPDX packages, matching by package URL where both sides carry one because a bare name matches the wrong component across ecosystems. Reports version moves with breaking risk, a declared licence that changed, and a new component declaring no licence. A licence change is reported as a change in a declared field, not as a licensing conclusion.

the record, 2026-10-04 08:04 UTC · method

As declared

POST
eip155:8453
USDC
exact

Every tag is a field on the listing, not a keyword TOLL assigned.

Who is paid

0x25e824…6a9608

Takes payment for 179 endpoints on 5 hosts.

Among Market data

counted above0%

of 8,872 that carry counters

cheaper than97%

of 8,851 with a comparable price

9,140 endpoints are in this category.

the comparison, 2026-10-13 14:08 UTC · method · live

Nearest on price

send tokenkeyring-agent.blockchhub.link0.05 USDCpass
distribution balance exchanges relativex402.glassnode.com0.05 USDCpass
smart money netflowapi.nansen.ai0.05 USDCpass
analyzesvm402.com0.03 USDCfail
q verdict resourcewww.ax1.vc0.02 USDCmalformed

Same category, nearest declared price, one per payee wallet (method). the list, 2026-10-13 14:08 UTC · method · live

Elsewhere in the record

Cite this page

This endpoint is delisted: the page is frozen at its last observation and its live URL is the stable one. Data reuse is under CC BY 4.0 (terms).

Plain text

TOLL, "sbom component diff on api.zfinia.com". https://tollindex.com/e/api-zfinia-com-x402-v1-sbom-component-diff-8a1e3f. Accessed [access date].

BibTeX

@misc{toll-e-api-zfinia-com-x402-v1-sbom-component-diff-8a1e3f-2026-10-13,
  author = {TOLL},
  title = {sbom component diff on api.zfinia.com},
  howpublished = {\url{https://tollindex.com/e/api-zfinia-com-x402-v1-sbom-component-diff-8a1e3f}},
  year = {2026},
  month = {10},
  note = {Frozen at its last observation, 2026-10-13 14:08 UTC. Accessed [access date].}
}

Reports and replies about this endpoint

None yet. Anything submitted through the form below is published here with its outcome.

Report an error about sbom component diff, or reply as the named seller