{"schemaVersion":1,"reportPath":"/reports/2e83aa94-e443-4c73-a271-37a5c31cffde","status":{"id":"2e83aa94-e443-4c73-a271-37a5c31cffde","scanId":"7ea0df4b-e0bf-4374-b70d-fbc352a07f88","invalidatedAt":null,"invalidationReason":null,"replacedBy":null,"snapshotAvailable":true,"policyAllowed":true,"createdAt":"2026-10-09T11:15:12.063Z","observationRevision":0,"previousScanId":null,"previousReportId":null,"current":true},"summary":{"id":"2e83aa94-e443-4c73-a271-37a5c31cffde","scanId":"7ea0df4b-e0bf-4374-b70d-fbc352a07f88","artifact":{"name":"hono","version":"4.13.13","integrity":"sha512-CQ46U0ZkAGmbT/4UxdzzGJpacP2IeKgY4a5/tOI9AABbpOMfK739wfDXmv1usCk+3RkKj1hQy4/fjhiwa2xlrA==","tarballUrl":"https://registry.npmjs.org/hono/-/hono-4.13.13.tgz"},"observedAt":"2026-10-09T11:15:09.757Z","classifiedAt":"2026-10-09T11:15:12.066Z","classifierRevision":"classifier_v2","matrix":{"id":"bfab88d7-3f4a-41b5-97a9-5aafd5bda511","revision":"production_ab51508deb208994caf81cb80f14b800","platform":"linux_amd64_glibc","harnessRevision":"load_v2","planRevision":"explicit_exports_v1","policyRevision":"runtime_limits_v2","images":[{"profileId":"node_24_21_0","kind":"node","version":"24.21.0","imageId":"sha256:f2fcbb4dfbd6d5f57f4e43de97e70182d9982ac7cc0cc063dfff2cf1759a411d","builtAt":"2026-10-04T15:20:38.392Z","sourceImage":"node:24.21.0-bookworm-slim@sha256:5cbc7caba8c2c0f0bca675d1b61b9f2857e1cf1853c6164ee9dd409501a936e7","baseImage":"gcr.io/distroless/cc-debian13:nonroot@sha256:20afe6a70f2565277b704cc17289cb557f353a3619f6350f52a2317106598df4","supportImage":"node:26.10.0-bookworm-slim@sha256:0a992e1420e2d70611578f1844a6f10a9d11fe6bb535aabf72efe3007f13d79b","platform":"linux_amd64_glibc","recipeRevision":"runtime_image_v1"},{"profileId":"node_26_10_0","kind":"node","version":"26.10.0","imageId":"sha256:9c1c93cc35d1408d26a61c4efccbde37c35425e362a2e723b885c3333d2be073","builtAt":"2026-10-04T15:20:47.161Z","sourceImage":"node:26.10.0-bookworm-slim@sha256:0a992e1420e2d70611578f1844a6f10a9d11fe6bb535aabf72efe3007f13d79b","baseImage":"gcr.io/distroless/cc-debian13:nonroot@sha256:20afe6a70f2565277b704cc17289cb557f353a3619f6350f52a2317106598df4","supportImage":"node:26.10.0-bookworm-slim@sha256:0a992e1420e2d70611578f1844a6f10a9d11fe6bb535aabf72efe3007f13d79b","platform":"linux_amd64_glibc","recipeRevision":"runtime_image_v1"},{"profileId":"bun_1_4_2","kind":"bun","version":"1.4.2","imageId":"sha256:2343363679fb92d59a395ff081b783b5514f06295b1bc6d61baaeef17e793789","builtAt":"2026-10-04T15:21:07.160Z","sourceImage":"oven/bun:1.4.2-debian@sha256:53710ce0f14eef8312521c586a7ae1d9aeab4011840f09f1966073b68fc2e2ab","baseImage":"gcr.io/distroless/cc-debian13:nonroot@sha256:20afe6a70f2565277b704cc17289cb557f353a3619f6350f52a2317106598df4","supportImage":"node:26.10.0-bookworm-slim@sha256:0a992e1420e2d70611578f1844a6f10a9d11fe6bb535aabf72efe3007f13d79b","platform":"linux_amd64_glibc","recipeRevision":"runtime_image_v1"},{"profileId":"deno_2_9_7","kind":"deno","version":"2.9.7","imageId":"sha256:4292bb23555f98fb9dfc30fb447daa1c301686d89264fd8643ccb86bc0d53c29","builtAt":"2026-10-04T15:21:22.570Z","sourceImage":"denoland/deno:debian-2.9.7@sha256:869d374bdaddda4fde029c492d7219199b0e821c2c53cca5357b3a6f5b9336fc","baseImage":"gcr.io/distroless/cc-debian13:nonroot@sha256:20afe6a70f2565277b704cc17289cb557f353a3619f6350f52a2317106598df4","supportImage":"node:26.10.0-bookworm-slim@sha256:0a992e1420e2d70611578f1844a6f10a9d11fe6bb535aabf72efe3007f13d79b","platform":"linux_amd64_glibc","recipeRevision":"runtime_image_v1"}]},"outcome":"inconclusive","evidenceLevel":"smoke_tested","coverageComplete":false,"limitations":["Only installation and loading were observed; functional correctness and package safety are not established.","Subpath batches share module caches and globals; root modes use separate fresh sandboxes.","Package-visible harness observations can be tampered with. They are not adversarial attestation.","Evidence applies to these exact artifacts, dependency snapshot, runtime images and Linux amd64/glibc policy.","Runtime error codes are captured observations and can also be thrown by package code."],"preparation":{"id":"8c359728-4df6-4627-adc0-f42c1b96f3fa","outcome":"pass","failure":null,"profileRevision":"npm_11_19_0_linux_amd64_v2","snapshot":{"id":"0aa3ab3b-8be6-46f3-8467-fa5252762dea","generation":"b801a8cf-6423-4933-be56-5caa435f034e","lockDigest":"7049f95222a131f838f6b6983a750dd3020cfe9974c4fe562fd2ffddaa88d0f4","treeDigest":"fa2bb0280b80b32af0d89b11ec8e67260ef682243348b4392a1dd10e41d275c0","profileRevision":"npm_11_19_0_linux_amd64_v2","installerImage":"node:24.21.0-bookworm-slim@sha256:5cbc7caba8c2c0f0bca675d1b61b9f2857e1cf1853c6164ee9dd409501a936e7"},"installedCount":1,"omittedOptionalCount":0},"cells":[{"runId":"55ce269b-c999-4329-a7c9-75f2cfe758ff","profileId":"node_24_21_0","group":"root","mode":"esm","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":340.31689000013284,"failure":null},{"runId":"a04d71b4-cd72-4ae7-a700-f2c8be4663ee","profileId":"node_24_21_0","group":"root","mode":"commonjs","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":344.71374900010414,"failure":null},{"runId":"a1d1a178-2912-479d-a835-2039d06572f4","profileId":"node_24_21_0","group":"subpaths","mode":"esm","method":"sequential_batch_v2","outcome":"partial","evidenceLevel":"smoke_tested","coverage":{"planned":75,"observed":75,"passed":73,"failed":2,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":708.9862270001322,"failure":{"classification":"esm_import_failed","phase":"module_evaluation","origin":"package","retryable":false,"source":"harness_observation","message":"Deno is not defined"}},{"runId":"609524cb-2f01-48f7-a38e-43ba2cbd8a3b","profileId":"node_24_21_0","group":"subpaths","mode":"commonjs","method":"sequential_batch_v2","outcome":"partial","evidenceLevel":"smoke_tested","coverage":{"planned":75,"observed":75,"passed":73,"failed":2,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":626.1968600000255,"failure":{"classification":"commonjs_require_failed","phase":"module_evaluation","origin":"package","retryable":false,"source":"harness_observation","message":"Deno is not defined"}},{"runId":"613118c5-519f-4222-b355-6af05a1ad894","profileId":"node_26_10_0","group":"root","mode":"esm","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":347.3518580000382,"failure":null},{"runId":"d9832ce1-1ebb-4cdc-b5a6-0ddb8aabe4f2","profileId":"node_26_10_0","group":"root","mode":"commonjs","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":336.3829300000798,"failure":null},{"runId":"8c4e6e93-247b-4d0b-b0f5-60f7de26cf8f","profileId":"node_26_10_0","group":"subpaths","mode":"esm","method":"sequential_batch_v2","outcome":"partial","evidenceLevel":"smoke_tested","coverage":{"planned":75,"observed":75,"passed":73,"failed":2,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":722.2392059999984,"failure":{"classification":"esm_import_failed","phase":"module_evaluation","origin":"package","retryable":false,"source":"harness_observation","message":"Deno is not defined"}},{"runId":"b05d281b-f0e5-4dd5-8f6a-80a36c6f04fc","profileId":"node_26_10_0","group":"subpaths","mode":"commonjs","method":"sequential_batch_v2","outcome":"partial","evidenceLevel":"smoke_tested","coverage":{"planned":75,"observed":75,"passed":73,"failed":2,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":513.801199000096,"failure":{"classification":"commonjs_require_failed","phase":"module_evaluation","origin":"package","retryable":false,"source":"harness_observation","message":"Deno is not defined"}},{"runId":"628a0724-7280-49ec-aa41-53b99a602582","profileId":"bun_1_4_2","group":"root","mode":"esm","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":318.31953700003214,"failure":null},{"runId":"bfe5090d-8009-4774-8fc1-8aa04191d541","profileId":"bun_1_4_2","group":"root","mode":"commonjs","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":333.03514400008135,"failure":null},{"runId":"93ed3d07-6b27-40c3-973c-2c6764993fb6","profileId":"bun_1_4_2","group":"subpaths","mode":"esm","method":"sequential_batch_v2","outcome":"partial","evidenceLevel":"smoke_tested","coverage":{"planned":75,"observed":75,"passed":74,"failed":1,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":573.5176760000177,"failure":{"classification":"esm_import_failed","phase":"module_evaluation","origin":"package","retryable":false,"source":"harness_observation","message":"Deno is not defined"}},{"runId":"686f37ff-92c7-4fc2-8f83-d52c0dd2df66","profileId":"bun_1_4_2","group":"subpaths","mode":"commonjs","method":"sequential_batch_v2","outcome":"partial","evidenceLevel":"smoke_tested","coverage":{"planned":75,"observed":75,"passed":74,"failed":1,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":422.52092100004666,"failure":{"classification":"commonjs_require_failed","phase":"module_evaluation","origin":"package","retryable":false,"source":"harness_observation","message":"Deno is not defined"}},{"runId":"e74104c7-571e-41f3-87d3-c4a879818fbd","profileId":"deno_2_9_7","group":"root","mode":"esm","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":450.34643599996343,"failure":null},{"runId":"202cb5ff-92be-4555-9a8a-2401dc0f6698","profileId":"deno_2_9_7","group":"root","mode":"commonjs","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":430.30840400001034,"failure":null},{"runId":"1fbaf331-b68f-43a1-896e-1b21085f5131","profileId":"deno_2_9_7","group":"subpaths","mode":"esm","method":"sequential_batch_v2","outcome":"partial","evidenceLevel":"smoke_tested","coverage":{"planned":75,"observed":75,"passed":74,"failed":1,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":540.8264769997913,"failure":{"classification":"esm_import_failed","phase":"module_evaluation","origin":"package","retryable":false,"source":"harness_observation","message":"Bun is not defined"}},{"runId":"30c18eab-9efc-4e0c-bc11-d19d054d1fd4","profileId":"deno_2_9_7","group":"subpaths","mode":"commonjs","method":"sequential_batch_v2","outcome":"partial","evidenceLevel":"smoke_tested","coverage":{"planned":75,"observed":75,"passed":74,"failed":1,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":663.7456650000531,"failure":{"classification":"commonjs_require_failed","phase":"module_evaluation","origin":"package","retryable":false,"source":"harness_observation","message":"Bun is not defined"}}],"runtimes":[{"profileId":"node_24_21_0","outcome":"partial"},{"profileId":"node_26_10_0","outcome":"partial"},{"profileId":"bun_1_4_2","outcome":"partial"},{"profileId":"deno_2_9_7","outcome":"partial"}],"missingOptionalPeers":[],"missingOptionalPeersTruncated":false}}