{"schemaVersion":1,"status":{"id":"2a3e272d-10b3-4c0e-963b-458f2163b897","scanId":"20644033-c46d-409b-8823-58916f8118fc","invalidatedAt":null,"invalidationReason":null,"replacedBy":null,"snapshotAvailable":true,"policyAllowed":true,"createdAt":"2026-10-09T14:50:00.934Z","observationRevision":0,"previousScanId":null,"previousReportId":null,"current":true},"report":{"schemaVersion":1,"id":"2a3e272d-10b3-4c0e-963b-458f2163b897","scanId":"20644033-c46d-409b-8823-58916f8118fc","classifierRevision":"classifier_v2","observedAt":"2026-10-09T14:49:59.862Z","classifiedAt":"2026-10-09T14:50:00.938Z","artifact":{"name":"bcrypt","version":"6.0.0","integrity":"sha512-cU8v/EGSrnH+HnxV2z0J7/blxH8gq7Xh2JFT6Aroax7UohdmiJJlxApMxtKfuI7z68NvvVcmR78k2LbT6efhRg==","tarballUrl":"https://registry.npmjs.org/bcrypt/-/bcrypt-6.0.0.tgz"},"preparation":{"id":"d7804402-5694-4851-a529-820d99d25546","outcome":"pass","failure":null,"profileRevision":"npm_11_19_0_linux_amd64_v2","snapshot":{"id":"c57ef8c7-8d7f-4ade-92d1-614cd7f32c83","generation":"356e255c-891d-4a7d-aa09-4445d14f0738","lockDigest":"e4420370b9e96d4aaa1084dd9133199ad32aecdc9789bee92636eebb1a7ee133","treeDigest":"8fa0ad75e90a2e77f858690f7cf95b58ba6a68fef28c13e4ec675684d519c9aa","profileRevision":"npm_11_19_0_linux_amd64_v2","installerImage":"node:24.21.0-bookworm-slim@sha256:5cbc7caba8c2c0f0bca675d1b61b9f2857e1cf1853c6164ee9dd409501a936e7"},"installedCount":3,"omittedOptionalCount":0,"staticObservations":{"native":{"count":10,"paths":["node_modules/bcrypt/prebuilds/win32-x64/bcrypt.node","node_modules/bcrypt/prebuilds/win32-arm64/bcrypt.node","node_modules/bcrypt/prebuilds/linux-x64/bcrypt.glibc.node","node_modules/bcrypt/prebuilds/linux-x64/bcrypt.musl.node","node_modules/bcrypt/prebuilds/linux-arm64/bcrypt.glibc.node","node_modules/bcrypt/prebuilds/linux-arm64/bcrypt.musl.node","node_modules/bcrypt/prebuilds/linux-arm/bcrypt.glibc.node","node_modules/bcrypt/prebuilds/linux-arm/bcrypt.musl.node","node_modules/bcrypt/prebuilds/darwin-x64/bcrypt.node","node_modules/bcrypt/prebuilds/darwin-arm64/bcrypt.node"],"buildIndicators":["node_modules/bcrypt/binding.gyp"],"prerequisiteProven":false},"declared":{"main":"./bcrypt","engines":{"node":">= 18"},"scripts":{"test":"jest","build":"prebuildify --napi --tag-libc --strip","install":"node-gyp-build"},"dependencies":{"node-addon-api":"^8.3.0","node-gyp-build":"^4.8.4"},"devDependencies":{"jest":"^29.7.0","prebuildify":"^6.0.1"}},"platform":{"os":true,"cpu":true,"libc":true},"evidenceLevel":"static_only","lifecycleScripts":["install"]}},"matrix":{"id":"bfab88d7-3f4a-41b5-97a9-5aafd5bda511","revision":"production_ab51508deb208994caf81cb80f14b800","platform":"linux_amd64_glibc","harnessRevision":"load_v2","planRevision":"explicit_exports_v1","policyRevision":"runtime_limits_v2","images":[{"profileId":"node_24_21_0","kind":"node","version":"24.21.0","imageId":"sha256:f2fcbb4dfbd6d5f57f4e43de97e70182d9982ac7cc0cc063dfff2cf1759a411d","builtAt":"2026-10-04T15:20:38.392Z","sourceImage":"node:24.21.0-bookworm-slim@sha256:5cbc7caba8c2c0f0bca675d1b61b9f2857e1cf1853c6164ee9dd409501a936e7","baseImage":"gcr.io/distroless/cc-debian13:nonroot@sha256:20afe6a70f2565277b704cc17289cb557f353a3619f6350f52a2317106598df4","supportImage":"node:26.10.0-bookworm-slim@sha256:0a992e1420e2d70611578f1844a6f10a9d11fe6bb535aabf72efe3007f13d79b","platform":"linux_amd64_glibc","recipeRevision":"runtime_image_v1"},{"profileId":"node_26_10_0","kind":"node","version":"26.10.0","imageId":"sha256:9c1c93cc35d1408d26a61c4efccbde37c35425e362a2e723b885c3333d2be073","builtAt":"2026-10-04T15:20:47.161Z","sourceImage":"node:26.10.0-bookworm-slim@sha256:0a992e1420e2d70611578f1844a6f10a9d11fe6bb535aabf72efe3007f13d79b","baseImage":"gcr.io/distroless/cc-debian13:nonroot@sha256:20afe6a70f2565277b704cc17289cb557f353a3619f6350f52a2317106598df4","supportImage":"node:26.10.0-bookworm-slim@sha256:0a992e1420e2d70611578f1844a6f10a9d11fe6bb535aabf72efe3007f13d79b","platform":"linux_amd64_glibc","recipeRevision":"runtime_image_v1"},{"profileId":"bun_1_4_2","kind":"bun","version":"1.4.2","imageId":"sha256:2343363679fb92d59a395ff081b783b5514f06295b1bc6d61baaeef17e793789","builtAt":"2026-10-04T15:21:07.160Z","sourceImage":"oven/bun:1.4.2-debian@sha256:53710ce0f14eef8312521c586a7ae1d9aeab4011840f09f1966073b68fc2e2ab","baseImage":"gcr.io/distroless/cc-debian13:nonroot@sha256:20afe6a70f2565277b704cc17289cb557f353a3619f6350f52a2317106598df4","supportImage":"node:26.10.0-bookworm-slim@sha256:0a992e1420e2d70611578f1844a6f10a9d11fe6bb535aabf72efe3007f13d79b","platform":"linux_amd64_glibc","recipeRevision":"runtime_image_v1"},{"profileId":"deno_2_9_7","kind":"deno","version":"2.9.7","imageId":"sha256:4292bb23555f98fb9dfc30fb447daa1c301686d89264fd8643ccb86bc0d53c29","builtAt":"2026-10-04T15:21:22.570Z","sourceImage":"denoland/deno:debian-2.9.7@sha256:869d374bdaddda4fde029c492d7219199b0e821c2c53cca5357b3a6f5b9336fc","baseImage":"gcr.io/distroless/cc-debian13:nonroot@sha256:20afe6a70f2565277b704cc17289cb557f353a3619f6350f52a2317106598df4","supportImage":"node:26.10.0-bookworm-slim@sha256:0a992e1420e2d70611578f1844a6f10a9d11fe6bb535aabf72efe3007f13d79b","platform":"linux_amd64_glibc","recipeRevision":"runtime_image_v1"}]},"omissions":{"counts":{"pattern":0,"non_executable":0,"not_exported":0,"invalid_subpath":0,"coverage_limit":0},"samples":[]},"outcome":"pass","evidenceLevel":"smoke_tested","coverageComplete":true,"cells":[{"runId":"4642db09-9032-4e21-bf81-aab627000c09","profileId":"node_24_21_0","group":"root","mode":"esm","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":314.2229040004313,"failure":null,"entries":[{"index":0,"specifier":"bcrypt","displaySpecifier":"bcrypt","outcome":"pass","durationMs":11.310859999999998,"resolvedTo":"file:///workspace/node_modules/bcrypt/bcrypt.js","failure":null}],"sessions":[{"probeId":"d4959544-ea78-44b4-a634-e5ad36f728f9","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":314.2229040004313}]},{"runId":"2fa9d518-63b1-44ad-ae16-3e38346f5673","profileId":"node_24_21_0","group":"root","mode":"commonjs","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":302.3114330000244,"failure":null,"entries":[{"index":0,"specifier":"bcrypt","displaySpecifier":"bcrypt","outcome":"pass","durationMs":7.108809000000001,"resolvedTo":"/workspace/node_modules/bcrypt/bcrypt.js","failure":null}],"sessions":[{"probeId":"c39fad77-5827-4a71-bc70-24d479bb63ab","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":302.3114330000244}]},{"runId":"ba3c5878-085e-4c11-b713-e3bc702eb7ae","profileId":"node_24_21_0","group":"subpaths","mode":"esm","method":"sequential_batch_v2","outcome":"not_applicable","evidenceLevel":"static_only","coverage":{"planned":0,"observed":0,"passed":0,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":0,"failure":null,"entries":[],"sessions":[]},{"runId":"5f58eb89-8f3f-4fa1-a349-e4f37e3bc4c4","profileId":"node_24_21_0","group":"subpaths","mode":"commonjs","method":"sequential_batch_v2","outcome":"not_applicable","evidenceLevel":"static_only","coverage":{"planned":0,"observed":0,"passed":0,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":0,"failure":null,"entries":[],"sessions":[]},{"runId":"b881cc2c-820f-4612-9b35-fe341e3fdc9c","profileId":"node_26_10_0","group":"root","mode":"esm","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":303.7992980000563,"failure":null,"entries":[{"index":0,"specifier":"bcrypt","displaySpecifier":"bcrypt","outcome":"pass","durationMs":15.629192000000003,"resolvedTo":"file:///workspace/node_modules/bcrypt/bcrypt.js","failure":null}],"sessions":[{"probeId":"ea46a350-f7bf-47d5-8b17-7014957a4237","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":303.7992980000563}]},{"runId":"5b2c58b1-debe-47ff-ae8b-68f13550d6d6","profileId":"node_26_10_0","group":"root","mode":"commonjs","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":329.8291990002617,"failure":null,"entries":[{"index":0,"specifier":"bcrypt","displaySpecifier":"bcrypt","outcome":"pass","durationMs":13.116601000000003,"resolvedTo":"/workspace/node_modules/bcrypt/bcrypt.js","failure":null}],"sessions":[{"probeId":"64f012c1-833d-4940-860a-2b31e3886306","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":329.8291990002617}]},{"runId":"d6fb97c9-eb09-4fce-be52-6a13b98a6e9d","profileId":"node_26_10_0","group":"subpaths","mode":"esm","method":"sequential_batch_v2","outcome":"not_applicable","evidenceLevel":"static_only","coverage":{"planned":0,"observed":0,"passed":0,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":0,"failure":null,"entries":[],"sessions":[]},{"runId":"9819a725-3897-4d2c-914e-ecaeeb8f6b71","profileId":"node_26_10_0","group":"subpaths","mode":"commonjs","method":"sequential_batch_v2","outcome":"not_applicable","evidenceLevel":"static_only","coverage":{"planned":0,"observed":0,"passed":0,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":0,"failure":null,"entries":[],"sessions":[]},{"runId":"9a7e47ad-a189-44f8-a301-9946cba73ae5","profileId":"bun_1_4_2","group":"root","mode":"esm","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":329.34159500012174,"failure":null,"entries":[{"index":0,"specifier":"bcrypt","displaySpecifier":"bcrypt","outcome":"pass","durationMs":17.459485,"resolvedTo":"file:///workspace/node_modules/bcrypt/bcrypt.js","failure":null}],"sessions":[{"probeId":"a08b6ecc-6213-43ab-a317-5900f1b27b94","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":329.34159500012174}]},{"runId":"e7dd9375-efc4-45f1-8751-e18f284b2af5","profileId":"bun_1_4_2","group":"root","mode":"commonjs","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":323.6826169998385,"failure":null,"entries":[{"index":0,"specifier":"bcrypt","displaySpecifier":"bcrypt","outcome":"pass","durationMs":13.773959999999999,"resolvedTo":"/workspace/node_modules/bcrypt/bcrypt.js","failure":null}],"sessions":[{"probeId":"5ccab2fe-a6fc-4daa-8586-e3dafe8d4175","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":323.6826169998385}]},{"runId":"1c5dba73-ca68-4745-a0b1-ab6a2f87823d","profileId":"bun_1_4_2","group":"subpaths","mode":"esm","method":"sequential_batch_v2","outcome":"not_applicable","evidenceLevel":"static_only","coverage":{"planned":0,"observed":0,"passed":0,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":0,"failure":null,"entries":[],"sessions":[]},{"runId":"ba642c42-99c1-453e-a1eb-e763275ccf03","profileId":"bun_1_4_2","group":"subpaths","mode":"commonjs","method":"sequential_batch_v2","outcome":"not_applicable","evidenceLevel":"static_only","coverage":{"planned":0,"observed":0,"passed":0,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":0,"failure":null,"entries":[],"sessions":[]},{"runId":"6c93b4dd-0ba4-4c1a-a9ba-b89d8136e0b6","profileId":"deno_2_9_7","group":"root","mode":"esm","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":475.35242599993944,"failure":null,"entries":[{"index":0,"specifier":"bcrypt","displaySpecifier":"bcrypt","outcome":"pass","durationMs":56.49628,"resolvedTo":"file:///workspace/node_modules/bcrypt/bcrypt.js","failure":null}],"sessions":[{"probeId":"97c5da49-e9ea-4aff-ac2a-bc24a94ba176","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":475.35242599993944}]},{"runId":"e45bcb90-81ad-4e5b-bfa2-61e40c688e04","profileId":"deno_2_9_7","group":"root","mode":"commonjs","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":402.4074719999917,"failure":null,"entries":[{"index":0,"specifier":"bcrypt","displaySpecifier":"bcrypt","outcome":"pass","durationMs":11.975363999999999,"resolvedTo":"/workspace/node_modules/bcrypt/bcrypt.js","failure":null}],"sessions":[{"probeId":"b351ca0b-44fd-4f65-af4f-c9a711fc4af4","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":402.4074719999917}]},{"runId":"8af66193-3638-45db-a91d-fb1d641a8b57","profileId":"deno_2_9_7","group":"subpaths","mode":"esm","method":"sequential_batch_v2","outcome":"not_applicable","evidenceLevel":"static_only","coverage":{"planned":0,"observed":0,"passed":0,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":0,"failure":null,"entries":[],"sessions":[]},{"runId":"93952a44-ffd4-4218-9a26-a553e8124781","profileId":"deno_2_9_7","group":"subpaths","mode":"commonjs","method":"sequential_batch_v2","outcome":"not_applicable","evidenceLevel":"static_only","coverage":{"planned":0,"observed":0,"passed":0,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":0,"failure":null,"entries":[],"sessions":[]}],"limitations":["Only installation and loading were observed; functional correctness and package safety are not established.","Subpath batches share module caches and globals; root modes use separate fresh sandboxes.","Package-visible harness observations can be tampered with. They are not adversarial attestation.","Evidence applies to these exact artifacts, dependency snapshot, runtime images and Linux amd64/glibc policy.","Runtime error codes are captured observations and can also be thrown by package code."]}}