{"schemaVersion":1,"status":{"id":"3da47982-5f74-4189-bee6-05ba14a195f9","scanId":"4b685bce-2f7b-4c39-92e8-8aafa068f9ef","invalidatedAt":null,"invalidationReason":null,"replacedBy":null,"snapshotAvailable":true,"policyAllowed":true,"createdAt":"2026-10-04T18:22:27.766Z","observationRevision":0,"previousScanId":null,"previousReportId":null,"current":true},"report":{"schemaVersion":1,"id":"3da47982-5f74-4189-bee6-05ba14a195f9","scanId":"4b685bce-2f7b-4c39-92e8-8aafa068f9ef","classifierRevision":"classifier_v1","observedAt":"2026-10-04T18:22:24.128Z","classifiedAt":"2026-10-04T18:22:27.771Z","artifact":{"name":"kleur","version":"4.1.5","integrity":"sha512-o+NO+8WrRiQEE4/7nwRJhN1HWpVmJm511pBHUxPLtp0BUISzlBplORYSmTclCnJvQq2tKu/sgl3xVpkc7ZWuQQ==","tarballUrl":"https://registry.npmjs.org/kleur/-/kleur-4.1.5.tgz"},"preparation":{"id":"2eefc4e0-8c8a-45d3-9949-6eb5db859067","outcome":"pass","failure":null,"profileRevision":"npm_11_19_0_linux_amd64_v2","snapshot":{"id":"53e77c40-5fab-425c-95de-732576eb2213","generation":"19800fb7-885b-45d1-a857-f208ce34ec59","lockDigest":"cb4ca7f2656336c8be49c183553f8ed14e96f5d8ab0200e495e3909a47ee4f21","treeDigest":"00e5aca7e1f8a33b1f0eee410e0c60e2c3d80c5984bd864329ae241e04b19622","profileRevision":"npm_11_19_0_linux_amd64_v2","installerImage":"node:24.21.0-bookworm-slim@sha256:5cbc7caba8c2c0f0bca675d1b61b9f2857e1cf1853c6164ee9dd409501a936e7"},"installedCount":1,"omittedOptionalCount":0,"staticObservations":{"native":{"count":0,"paths":[],"buildIndicators":[],"prerequisiteProven":false},"declared":{"main":"index.js","module":"index.mjs","engines":{"node":">=6"},"exports":{".":{"types":"./index.d.ts","import":"./index.mjs","require":"./index.js"},"./colors":{"types":"./colors.d.ts","import":"./colors.mjs","require":"./colors.js"}},"scripts":{"test":"uvu -r esm -i utils -i xyz","build":"node build"},"devDependencies":{"esm":"3.2.25","uvu":"0.3.3"}},"platform":{"os":true,"cpu":true,"libc":true},"evidenceLevel":"static_only","lifecycleScripts":[]}},"matrix":{"id":"c18bed16-c2f6-4100-94c2-9117ac7bc2e5","revision":"production_f10071512e0e7e24c6867f11e90a7da0","platform":"linux_amd64_glibc","harnessRevision":"load_v2","planRevision":"explicit_exports_v1","policyRevision":"runtime_limits_v2","images":[{"profileId":"node_24_21_0","kind":"node","version":"24.21.0","imageId":"sha256:cb6150e21f96e0cced8169843922f9f0363d32d3be86393172958aeb9d653aac","builtAt":"2026-10-04T15:20:38.392Z","sourceImage":"node:24.21.0-bookworm-slim@sha256:5cbc7caba8c2c0f0bca675d1b61b9f2857e1cf1853c6164ee9dd409501a936e7","baseImage":"gcr.io/distroless/cc-debian13:nonroot@sha256:20afe6a70f2565277b704cc17289cb557f353a3619f6350f52a2317106598df4","supportImage":"node:26.10.0-bookworm-slim@sha256:0a992e1420e2d70611578f1844a6f10a9d11fe6bb535aabf72efe3007f13d79b","platform":"linux_amd64_glibc","recipeRevision":"runtime_image_v1"},{"profileId":"node_26_10_0","kind":"node","version":"26.10.0","imageId":"sha256:348bbebdc16cde773af001ccf9734936485091fadf0b6162224c796fbf343a81","builtAt":"2026-10-04T15:20:47.161Z","sourceImage":"node:26.10.0-bookworm-slim@sha256:0a992e1420e2d70611578f1844a6f10a9d11fe6bb535aabf72efe3007f13d79b","baseImage":"gcr.io/distroless/cc-debian13:nonroot@sha256:20afe6a70f2565277b704cc17289cb557f353a3619f6350f52a2317106598df4","supportImage":"node:26.10.0-bookworm-slim@sha256:0a992e1420e2d70611578f1844a6f10a9d11fe6bb535aabf72efe3007f13d79b","platform":"linux_amd64_glibc","recipeRevision":"runtime_image_v1"},{"profileId":"bun_1_4_2","kind":"bun","version":"1.4.2","imageId":"sha256:58846b11e3e63c83dd1bbfa12097e641025bd57febe737c2bfaf2962a63fbacb","builtAt":"2026-10-04T15:21:07.160Z","sourceImage":"oven/bun:1.4.2-debian@sha256:53710ce0f14eef8312521c586a7ae1d9aeab4011840f09f1966073b68fc2e2ab","baseImage":"gcr.io/distroless/cc-debian13:nonroot@sha256:20afe6a70f2565277b704cc17289cb557f353a3619f6350f52a2317106598df4","supportImage":"node:26.10.0-bookworm-slim@sha256:0a992e1420e2d70611578f1844a6f10a9d11fe6bb535aabf72efe3007f13d79b","platform":"linux_amd64_glibc","recipeRevision":"runtime_image_v1"},{"profileId":"deno_2_9_7","kind":"deno","version":"2.9.7","imageId":"sha256:d2ee9affe35ff6eb8d788fcdc202e2e74802a2936e9acdfc63cd6b7d2aea0777","builtAt":"2026-10-04T15:21:22.570Z","sourceImage":"denoland/deno:debian-2.9.7@sha256:869d374bdaddda4fde029c492d7219199b0e821c2c53cca5357b3a6f5b9336fc","baseImage":"gcr.io/distroless/cc-debian13:nonroot@sha256:20afe6a70f2565277b704cc17289cb557f353a3619f6350f52a2317106598df4","supportImage":"node:26.10.0-bookworm-slim@sha256:0a992e1420e2d70611578f1844a6f10a9d11fe6bb535aabf72efe3007f13d79b","platform":"linux_amd64_glibc","recipeRevision":"runtime_image_v1"}]},"omissions":{"counts":{"pattern":0,"non_executable":0,"not_exported":0,"invalid_subpath":0,"coverage_limit":0},"samples":[]},"outcome":"pass","evidenceLevel":"smoke_tested","coverageComplete":true,"cells":[{"runId":"cdf5a7aa-ac70-48fc-b851-2f2b8b42ab5d","profileId":"node_24_21_0","group":"root","mode":"esm","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"interrupted":0,"untested":0,"complete":true},"durationMs":307.68177500000456,"failure":null,"entries":[{"index":0,"specifier":"kleur","displaySpecifier":"kleur","outcome":"pass","durationMs":2.0848329999999997,"resolvedTo":"file:///workspace/node_modules/kleur/index.mjs","failure":null}],"sessions":[{"probeId":"2344c6b4-e45a-4a7c-8447-f44b5efb2396","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":307.68177500000456}]},{"runId":"c4889b4c-0a4a-4526-b58f-ffafabf438e7","profileId":"node_24_21_0","group":"root","mode":"commonjs","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"interrupted":0,"untested":0,"complete":true},"durationMs":716.4793660000141,"failure":null,"entries":[{"index":0,"specifier":"kleur","displaySpecifier":"kleur","outcome":"pass","durationMs":15.908226000000013,"resolvedTo":"/workspace/node_modules/kleur/index.js","failure":null}],"sessions":[{"probeId":"649388cf-6cf8-44bb-bb97-a346eaff4f12","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":716.4793660000141}]},{"runId":"e89d08eb-1cda-4280-a0db-4c1de607fd90","profileId":"node_24_21_0","group":"subpaths","mode":"esm","method":"sequential_batch_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"interrupted":0,"untested":0,"complete":true},"durationMs":409.1782129999774,"failure":null,"entries":[{"index":0,"specifier":"kleur/colors","displaySpecifier":"kleur/colors","outcome":"pass","durationMs":1.822458000000001,"resolvedTo":"file:///workspace/node_modules/kleur/colors.mjs","failure":null}],"sessions":[{"probeId":"00b5a9fe-40c5-48e9-9bd4-bfd93fbd3394","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":409.1782129999774}]},{"runId":"a2594549-e171-4219-9e1b-d95a7ce04391","profileId":"node_24_21_0","group":"subpaths","mode":"commonjs","method":"sequential_batch_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"interrupted":0,"untested":0,"complete":true},"durationMs":319.87742600002093,"failure":null,"entries":[{"index":0,"specifier":"kleur/colors","displaySpecifier":"kleur/colors","outcome":"pass","durationMs":2.728627000000003,"resolvedTo":"/workspace/node_modules/kleur/colors.js","failure":null}],"sessions":[{"probeId":"74413140-dfb2-4e39-a8ac-649c6b9acf0d","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":319.87742600002093}]},{"runId":"89171cdf-2256-4da7-8ae0-63e287f17e13","profileId":"node_26_10_0","group":"root","mode":"esm","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"interrupted":0,"untested":0,"complete":true},"durationMs":319.64297200000146,"failure":null,"entries":[{"index":0,"specifier":"kleur","displaySpecifier":"kleur","outcome":"pass","durationMs":1.8918500000000016,"resolvedTo":"file:///workspace/node_modules/kleur/index.mjs","failure":null}],"sessions":[{"probeId":"23aa970d-46c5-457e-a8f6-87bdae8aca84","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":319.64297200000146}]},{"runId":"b49a1179-fc33-4113-9733-b2dfcfc174e7","profileId":"node_26_10_0","group":"root","mode":"commonjs","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"interrupted":0,"untested":0,"complete":true},"durationMs":338.50128699999186,"failure":null,"entries":[{"index":0,"specifier":"kleur","displaySpecifier":"kleur","outcome":"pass","durationMs":3.2403119999999994,"resolvedTo":"/workspace/node_modules/kleur/index.js","failure":null}],"sessions":[{"probeId":"d1dda62e-2398-40d1-b329-55a4a9271be2","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":338.50128699999186}]},{"runId":"ea9170cc-24e8-4702-93a2-2bd9ea08bb0c","profileId":"node_26_10_0","group":"subpaths","mode":"esm","method":"sequential_batch_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"interrupted":0,"untested":0,"complete":true},"durationMs":320.3098009999958,"failure":null,"entries":[{"index":0,"specifier":"kleur/colors","displaySpecifier":"kleur/colors","outcome":"pass","durationMs":2.1141169999999967,"resolvedTo":"file:///workspace/node_modules/kleur/colors.mjs","failure":null}],"sessions":[{"probeId":"06fd9ffd-7318-4e36-8250-5dee6cdf724f","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":320.3098009999958}]},{"runId":"f5e0b79a-5c94-45c6-ba3a-ba7932a04567","profileId":"node_26_10_0","group":"subpaths","mode":"commonjs","method":"sequential_batch_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"interrupted":0,"untested":0,"complete":true},"durationMs":851.5490290000162,"failure":null,"entries":[{"index":0,"specifier":"kleur/colors","displaySpecifier":"kleur/colors","outcome":"pass","durationMs":33.94735800000001,"resolvedTo":"/workspace/node_modules/kleur/colors.js","failure":null}],"sessions":[{"probeId":"88a708cf-cb10-4de6-95d5-2cdcd5381aac","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":851.5490290000162}]},{"runId":"4c4f96c0-e37a-4c8a-af56-9c298926433f","profileId":"bun_1_4_2","group":"root","mode":"esm","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"interrupted":0,"untested":0,"complete":true},"durationMs":344.22977599999285,"failure":null,"entries":[{"index":0,"specifier":"kleur","displaySpecifier":"kleur","outcome":"pass","durationMs":8.660718,"resolvedTo":"file:///workspace/node_modules/kleur/index.mjs","failure":null}],"sessions":[{"probeId":"b88fbb84-1985-4225-acef-c98d2f2455c8","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":344.22977599999285}]},{"runId":"6989abfd-0525-4e69-a77d-8880d7ba7051","profileId":"bun_1_4_2","group":"root","mode":"commonjs","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"interrupted":0,"untested":0,"complete":true},"durationMs":317.1993440000224,"failure":null,"entries":[{"index":0,"specifier":"kleur","displaySpecifier":"kleur","outcome":"pass","durationMs":6.4324,"resolvedTo":"/workspace/node_modules/kleur/index.js","failure":null}],"sessions":[{"probeId":"64bb2af6-9320-4fac-a860-b4c8ab0d7040","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":317.1993440000224}]},{"runId":"6d7540c3-4f92-446f-857d-7d0bd7cf16e3","profileId":"bun_1_4_2","group":"subpaths","mode":"esm","method":"sequential_batch_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"interrupted":0,"untested":0,"complete":true},"durationMs":307.78143199998885,"failure":null,"entries":[{"index":0,"specifier":"kleur/colors","displaySpecifier":"kleur/colors","outcome":"pass","durationMs":13.475301,"resolvedTo":"file:///workspace/node_modules/kleur/colors.mjs","failure":null}],"sessions":[{"probeId":"0745ea31-74b9-493c-9c75-400dfc9dc524","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":307.78143199998885}]},{"runId":"3d19ddd0-a35c-4ddf-93ca-4ff033385461","profileId":"bun_1_4_2","group":"subpaths","mode":"commonjs","method":"sequential_batch_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"interrupted":0,"untested":0,"complete":true},"durationMs":556.0333429999882,"failure":null,"entries":[{"index":0,"specifier":"kleur/colors","displaySpecifier":"kleur/colors","outcome":"pass","durationMs":41.998095000000006,"resolvedTo":"/workspace/node_modules/kleur/colors.js","failure":null}],"sessions":[{"probeId":"61a5258c-15ee-4436-b2a8-1b39341fb47f","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":556.0333429999882}]},{"runId":"add08fba-5f9e-4608-9d8d-4992c8791b07","profileId":"deno_2_9_7","group":"root","mode":"esm","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"interrupted":0,"untested":0,"complete":true},"durationMs":453.58726699999534,"failure":null,"entries":[{"index":0,"specifier":"kleur","displaySpecifier":"kleur","outcome":"pass","durationMs":2.487639999999999,"resolvedTo":"file:///workspace/node_modules/kleur/index.mjs","failure":null}],"sessions":[{"probeId":"a4094386-ddac-4dd3-930e-48ee82159bd6","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":453.58726699999534}]},{"runId":"28b857c4-b454-4ffe-be96-ba902fd5be48","profileId":"deno_2_9_7","group":"root","mode":"commonjs","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"interrupted":0,"untested":0,"complete":true},"durationMs":445.14983599999687,"failure":null,"entries":[{"index":0,"specifier":"kleur","displaySpecifier":"kleur","outcome":"pass","durationMs":5.438444000000004,"resolvedTo":"/workspace/node_modules/kleur/index.js","failure":null}],"sessions":[{"probeId":"bd0fa222-c49d-49de-a7fc-aeca05d58b67","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":445.14983599999687}]},{"runId":"9b724e57-52da-497d-8981-0bca86fc8fa0","profileId":"deno_2_9_7","group":"subpaths","mode":"esm","method":"sequential_batch_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"interrupted":0,"untested":0,"complete":true},"durationMs":645.4009099999967,"failure":null,"entries":[{"index":0,"specifier":"kleur/colors","displaySpecifier":"kleur/colors","outcome":"pass","durationMs":23.63689099999999,"resolvedTo":"file:///workspace/node_modules/kleur/colors.mjs","failure":null}],"sessions":[{"probeId":"f92b145f-5784-41a3-91e3-ddc273ea1154","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":645.4009099999967}]},{"runId":"d6fc23b0-6ea3-42f9-a23a-63c64d32e135","profileId":"deno_2_9_7","group":"subpaths","mode":"commonjs","method":"sequential_batch_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"interrupted":0,"untested":0,"complete":true},"durationMs":427.8760449999827,"failure":null,"entries":[{"index":0,"specifier":"kleur/colors","displaySpecifier":"kleur/colors","outcome":"pass","durationMs":3.137191999999999,"resolvedTo":"/workspace/node_modules/kleur/colors.js","failure":null}],"sessions":[{"probeId":"dcaf2ec4-26de-4049-b881-374aaab8b5ce","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":427.8760449999827}]}],"limitations":["Only installation and loading were observed; functional correctness and package safety are not established.","Subpath batches share module caches and globals; root modes use separate fresh sandboxes.","Package-visible harness observations can be tampered with. They are not adversarial attestation.","Evidence applies to these exact artifacts, dependency snapshot, runtime images and Linux amd64/glibc policy.","Runtime error codes are captured observations and can also be thrown by package code."]}}