{"schemaVersion":1,"status":{"id":"4712cd49-164e-4cf0-9cc1-f6cfa70d4e8f","scanId":"6fffbde2-36e2-4365-9a26-abd76f3a78cd","invalidatedAt":null,"invalidationReason":null,"replacedBy":null,"snapshotAvailable":true,"policyAllowed":true,"createdAt":"2026-10-09T10:07:02.368Z","observationRevision":0,"previousScanId":null,"previousReportId":null,"current":true},"report":{"schemaVersion":1,"id":"4712cd49-164e-4cf0-9cc1-f6cfa70d4e8f","scanId":"6fffbde2-36e2-4365-9a26-abd76f3a78cd","classifierRevision":"classifier_v2","observedAt":"2026-10-09T10:07:01.630Z","classifiedAt":"2026-10-09T10:07:02.374Z","artifact":{"name":"undici","version":"8.11.2","integrity":"sha512-u4UB2/IrKdU6lFxumHmmo1a3fCQO5tzQllRorfoRS63txhrB7xTpSn1PftwC4qEHkOaqP95fCWW4lJzwErwzhQ==","tarballUrl":"https://registry.npmjs.org/undici/-/undici-8.11.2.tgz"},"preparation":{"id":"4faf5c82-eeb1-4e9c-824a-1e87af41e158","outcome":"pass","failure":null,"profileRevision":"npm_11_19_0_linux_amd64_v2","snapshot":{"id":"54f6ae96-f6cf-4de5-9b1b-1960a62ee9e2","generation":"3d3adaf8-74e9-4255-9590-b9816ff258d3","lockDigest":"80f915b6335efa6ad4eb4cac4e1badf29117ec2aaa114a015d5d1c8da9564f23","treeDigest":"9335b947c052d413245a8dcde5ec39074fac77e5cfe2567e1baf29012f5c66cc","profileRevision":"npm_11_19_0_linux_amd64_v2","installerImage":"node:24.21.0-bookworm-slim@sha256:5cbc7caba8c2c0f0bca675d1b61b9f2857e1cf1853c6164ee9dd409501a936e7"},"installedCount":1,"omittedOptionalCount":0,"staticObservations":{"native":{"count":0,"paths":[],"buildIndicators":[],"prerequisiteProven":false},"declared":{"main":"index.js","engines":{"node":">=22.19.0"},"scripts":{"lint":"eslint --cache","test":"npm run test:javascript && cross-env NODE_V8_COVERAGE= npm run test:typescript","bench":"echo \"Error: Benchmarks have been moved to '/benchmarks'\" && exit 1","prepare":"husky && node ./scripts/platform-shell.js","test:h2":"npm run test:h2:core && npm run test:h2:fetch","coverage":"npm run coverage:clean && cross-env NODE_V8_COVERAGE=./coverage/tmp npm run test:javascript && npm run coverage:report","lint:fix":"eslint --fix --cache","test:tdd":"borp --timeout 180000 --expose-gc -p \"test/*.js\"","test:wpt":"npm run test:wpt:setup && node test/web-platform-tests/wpt-runner.mjs run /fetch /mimesniff /xhr /websockets /eventsource","test:jest":"cross-env NODE_V8_COVERAGE= jest","test:unit":"borp --timeout 180000 --expose-gc -p \"test/*.js\"","build:node":"esbuild index-fetch.js --bundle --platform=node --outfile=undici-fetch.js --define:esbuildDetection=1 --keep-names && node scripts/strip-comments.js","build:wasm":"node build/wasm.js --docker","test:cache":"borp --timeout 180000 -p \"test/cache/*.js\"","test:fetch":"npm run build:node && borp --timeout 180000 --expose-gc --concurrency 1 -p \"test/fetch/*.js\" && npm run test:webidl && npm run test:busboy","test:infra":"borp --timeout 180000 -p \"test/infra/*.js\"","coverage:ci":"npm run coverage:clean && cross-env NODE_V8_COVERAGE=./coverage/tmp npm run test:javascript && npm run coverage:report:ci","test:busboy":"borp --timeout 180000 -p \"test/busboy/*.js\"","test:webidl":"borp --timeout 180000 -p \"test/webidl/*.js\"","generate-pem":"node scripts/generate-pem.js","test:cookies":"borp --timeout 180000 -p \"test/cookie/*.js\"","test:fuzzing":"node test/fuzzing/fuzzing.test.js","test:h2:core":"borp --timeout 180000 -p \"test/+(http2|h2)*.js\"","serve:website":"echo \"Error: Documentation has been moved to '/docs'\" && exit 1","test:h2:fetch":"npm run build:node && borp --timeout 180000 -p \"test/fetch/http2*.js\"","coverage:clean":"node ./scripts/clean-coverage.js","test:node-test":"borp --timeout 180000 -p \"test/node-test/**/*.js\"","test:websocket":"borp --timeout 180000 -p \"test/websocket/**/*.js\"","test:wpt:setup":"node test/web-platform-tests/wpt-runner.mjs setup","coverage:report":"cross-env NODE_V8_COVERAGE= c8 report","test:javascript":"npm run test:javascript:no-jest && npm run test:jest","test:node-fetch":"borp --timeout 180000 -p \"test/node-fetch/**/*.js\"","test:typescript":"tsd && tsc test/imports/undici-import.ts --typeRoots ./types --noEmit && tsc ./types/*.d.ts --noEmit --typeRoots ./types","test:cache-tests":"node test/cache-interceptor/cache-tests.mjs --ci","test:eventsource":"npm run build:node && borp --timeout 180000 --expose-gc -p \"test/eventsource/*.js\"","test:interceptors":"borp --timeout 180000 -p \"test/interceptors/*.js\"","coverage:report:ci":"c8 report","test:tdd:node-test":"borp --timeout 180000 -p \"test/node-test/**/*.js\" -w","test:cache-interceptor":"borp --timeout 180000 -p \"test/cache-interceptor/*.js\"","test:javascript:no-jest":"npm run generate-pem && npm run test:unit && npm run test:fetch && npm run test:node-fetch && npm run test:infra && npm run test:cache && npm run test:cache-interceptor && npm run test:interceptors && npm run test:cookies && npm run test:eventsource && npm run test:subresource-integrity && npm run test:wpt && npm run test:websocket && npm run test:node-test && npm run test:cache-tests","test:websocket:autobahn":"node test/autobahn/client.js","test:subresource-integrity":"borp --timeout 180000 -p \"test/subresource-integrity/*.js\"","test:javascript:without-intl":"npm run test:javascript:no-jest","test:cache-interceptor:sqlite":"cross-env NODE_OPTIONS=--experimental-sqlite npm run test:cache-interceptor","test:websocket:autobahn:report":"node test/autobahn/report.js"},"devDependencies":{"c8":"^12.0.0","ws":"^8.11.0","tsd":"^0.33.0","borp":"^1.0.0","jest":"^30.0.5","husky":"^9.0.7","proxy":"^4.0.0","eslint":"^9.9.0","esbuild":"^0.28.0","cross-env":"^10.0.0","dns-packet":"^5.4.0","fast-check":"^4.1.1","node-forge":"^1.3.1","typescript":"^6.0.2","@types/node":"^22.0.0","neostandard":"^0.13.0","jsondiffpatch":"^0.7.3","@fastify/busboy":"3.2.2","abort-controller":"^3.0.0","@matteo.collina/tspl":"^0.2.0","@sinonjs/fake-timers":"^12.0.0","@metcoder95/https-pem":"^1.0.0"}},"platform":{"os":true,"cpu":true,"libc":true},"evidenceLevel":"static_only","lifecycleScripts":["prepare"]}},"matrix":{"id":"4dc87b12-9092-4ebf-a963-709a77c15297","revision":"production_ce416e976d3b4c51b252859d31c1fa7c","platform":"linux_amd64_glibc","harnessRevision":"load_v2","planRevision":"explicit_exports_v1","policyRevision":"runtime_limits_v2","images":[{"profileId":"node_24_21_0","kind":"node","version":"24.21.0","imageId":"sha256:e3a5a41a242a766e69f326b91f9ed9280c5719ad3e9ab54f0ac28bfc71d77794","builtAt":"2026-10-04T15:20:38.392Z","sourceImage":"node:24.21.0-bookworm-slim@sha256:5cbc7caba8c2c0f0bca675d1b61b9f2857e1cf1853c6164ee9dd409501a936e7","baseImage":"gcr.io/distroless/cc-debian13:nonroot@sha256:20afe6a70f2565277b704cc17289cb557f353a3619f6350f52a2317106598df4","supportImage":"node:26.10.0-bookworm-slim@sha256:0a992e1420e2d70611578f1844a6f10a9d11fe6bb535aabf72efe3007f13d79b","platform":"linux_amd64_glibc","recipeRevision":"runtime_image_v1"},{"profileId":"node_26_10_0","kind":"node","version":"26.10.0","imageId":"sha256:5d2fa297021c7db25494856bb25e2cddecbb020722ce1e0f2101385a063c0611","builtAt":"2026-10-04T15:20:47.161Z","sourceImage":"node:26.10.0-bookworm-slim@sha256:0a992e1420e2d70611578f1844a6f10a9d11fe6bb535aabf72efe3007f13d79b","baseImage":"gcr.io/distroless/cc-debian13:nonroot@sha256:20afe6a70f2565277b704cc17289cb557f353a3619f6350f52a2317106598df4","supportImage":"node:26.10.0-bookworm-slim@sha256:0a992e1420e2d70611578f1844a6f10a9d11fe6bb535aabf72efe3007f13d79b","platform":"linux_amd64_glibc","recipeRevision":"runtime_image_v1"},{"profileId":"bun_1_4_2","kind":"bun","version":"1.4.2","imageId":"sha256:fd67412f5baad0c2b1038367df9cf2d4b33237d3815e16eedae16cfd94ab3182","builtAt":"2026-10-04T15:21:07.160Z","sourceImage":"oven/bun:1.4.2-debian@sha256:53710ce0f14eef8312521c586a7ae1d9aeab4011840f09f1966073b68fc2e2ab","baseImage":"gcr.io/distroless/cc-debian13:nonroot@sha256:20afe6a70f2565277b704cc17289cb557f353a3619f6350f52a2317106598df4","supportImage":"node:26.10.0-bookworm-slim@sha256:0a992e1420e2d70611578f1844a6f10a9d11fe6bb535aabf72efe3007f13d79b","platform":"linux_amd64_glibc","recipeRevision":"runtime_image_v1"},{"profileId":"deno_2_9_7","kind":"deno","version":"2.9.7","imageId":"sha256:3b0f993e5ec0b1d4e8e09bc50ae53f142f7347d0baf96cefe7a8cfe7a00f7958","builtAt":"2026-10-04T15:21:22.570Z","sourceImage":"denoland/deno:debian-2.9.7@sha256:869d374bdaddda4fde029c492d7219199b0e821c2c53cca5357b3a6f5b9336fc","baseImage":"gcr.io/distroless/cc-debian13:nonroot@sha256:20afe6a70f2565277b704cc17289cb557f353a3619f6350f52a2317106598df4","supportImage":"node:26.10.0-bookworm-slim@sha256:0a992e1420e2d70611578f1844a6f10a9d11fe6bb535aabf72efe3007f13d79b","platform":"linux_amd64_glibc","recipeRevision":"runtime_image_v1"}]},"omissions":{"counts":{"pattern":0,"non_executable":0,"not_exported":0,"invalid_subpath":0,"coverage_limit":0},"samples":[]},"outcome":"pass","evidenceLevel":"smoke_tested","coverageComplete":true,"cells":[{"runId":"64537012-581f-4463-8923-711da472a634","profileId":"node_24_21_0","group":"root","mode":"esm","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":424.77751699998043,"failure":null,"entries":[{"index":0,"specifier":"undici","displaySpecifier":"undici","outcome":"pass","durationMs":103.81794699999999,"resolvedTo":"file:///workspace/node_modules/undici/index.js","failure":null}],"sessions":[{"probeId":"0e83c6c0-dc04-4481-b0d0-be44bed5cba4","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":424.77751699998043}]},{"runId":"89576cf0-02d3-4297-8d8d-6537f9369e3b","profileId":"node_24_21_0","group":"root","mode":"commonjs","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":437.2632319999975,"failure":null,"entries":[{"index":0,"specifier":"undici","displaySpecifier":"undici","outcome":"pass","durationMs":142.945582,"resolvedTo":"/workspace/node_modules/undici/index.js","failure":null}],"sessions":[{"probeId":"1cea73a1-fb32-4305-bec3-a7f593a1922c","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":437.2632319999975}]},{"runId":"a1b4af90-0834-4810-8924-83896838d5c3","profileId":"node_24_21_0","group":"subpaths","mode":"esm","method":"sequential_batch_v2","outcome":"not_applicable","evidenceLevel":"static_only","coverage":{"planned":0,"observed":0,"passed":0,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":0,"failure":null,"entries":[],"sessions":[]},{"runId":"85373e97-d373-4026-9387-c6a7c5deec07","profileId":"node_24_21_0","group":"subpaths","mode":"commonjs","method":"sequential_batch_v2","outcome":"not_applicable","evidenceLevel":"static_only","coverage":{"planned":0,"observed":0,"passed":0,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":0,"failure":null,"entries":[],"sessions":[]},{"runId":"0c72656b-8404-4a05-ac18-129df8574ed1","profileId":"node_26_10_0","group":"root","mode":"esm","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":436.79262300001574,"failure":null,"entries":[{"index":0,"specifier":"undici","displaySpecifier":"undici","outcome":"pass","durationMs":142.819865,"resolvedTo":"file:///workspace/node_modules/undici/index.js","failure":null}],"sessions":[{"probeId":"5d3e1b03-8074-4d57-9027-332ce3c2b6fd","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":436.79262300001574}]},{"runId":"54a1e560-be70-4d1d-8372-b54b1636570c","profileId":"node_26_10_0","group":"root","mode":"commonjs","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":539.9005000000179,"failure":null,"entries":[{"index":0,"specifier":"undici","displaySpecifier":"undici","outcome":"pass","durationMs":185.097914,"resolvedTo":"/workspace/node_modules/undici/index.js","failure":null}],"sessions":[{"probeId":"4ac5ba7d-b6a0-4cb8-b4bd-0a5bdf88d13b","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":539.9005000000179}]},{"runId":"985b8058-2bbb-478e-9516-d425790dda5c","profileId":"node_26_10_0","group":"subpaths","mode":"esm","method":"sequential_batch_v2","outcome":"not_applicable","evidenceLevel":"static_only","coverage":{"planned":0,"observed":0,"passed":0,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":0,"failure":null,"entries":[],"sessions":[]},{"runId":"38411d92-c9a6-4986-9dbb-73eb68e03a48","profileId":"node_26_10_0","group":"subpaths","mode":"commonjs","method":"sequential_batch_v2","outcome":"not_applicable","evidenceLevel":"static_only","coverage":{"planned":0,"observed":0,"passed":0,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":0,"failure":null,"entries":[],"sessions":[]},{"runId":"1b98497c-a52e-4719-81b8-dd81bba51b0a","profileId":"bun_1_4_2","group":"root","mode":"esm","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":351.778250000003,"failure":null,"entries":[{"index":0,"specifier":"undici","displaySpecifier":"undici","outcome":"pass","durationMs":4.439427,"resolvedTo":"undici","failure":null}],"sessions":[{"probeId":"7cada5f5-5941-4773-9ad9-eed78160bbad","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":351.778250000003}]},{"runId":"9cd4ff2b-6e45-4078-9b1c-c4c84b37caff","profileId":"bun_1_4_2","group":"root","mode":"commonjs","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":338.4347889999917,"failure":null,"entries":[{"index":0,"specifier":"undici","displaySpecifier":"undici","outcome":"pass","durationMs":4.315342,"resolvedTo":"undici","failure":null}],"sessions":[{"probeId":"fc9b9bc8-5e44-48e2-ae64-ee172e319380","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":338.4347889999917}]},{"runId":"803d2f9c-2633-4b64-bb56-3039d17fbcc4","profileId":"bun_1_4_2","group":"subpaths","mode":"esm","method":"sequential_batch_v2","outcome":"not_applicable","evidenceLevel":"static_only","coverage":{"planned":0,"observed":0,"passed":0,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":0,"failure":null,"entries":[],"sessions":[]},{"runId":"86291db3-161a-4519-bd42-3e25afd4c96f","profileId":"bun_1_4_2","group":"subpaths","mode":"commonjs","method":"sequential_batch_v2","outcome":"not_applicable","evidenceLevel":"static_only","coverage":{"planned":0,"observed":0,"passed":0,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":0,"failure":null,"entries":[],"sessions":[]},{"runId":"e0f957eb-3296-407e-ba5e-7106bacfd3c4","profileId":"deno_2_9_7","group":"root","mode":"esm","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":670.7545220000029,"failure":null,"entries":[{"index":0,"specifier":"undici","displaySpecifier":"undici","outcome":"pass","durationMs":274.489112,"resolvedTo":"file:///workspace/node_modules/undici/index.js","failure":null}],"sessions":[{"probeId":"386010fb-574a-4451-a890-e29cb851a854","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":670.7545220000029}]},{"runId":"5a8d8120-429f-4d5e-b968-21716745f0b7","profileId":"deno_2_9_7","group":"root","mode":"commonjs","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":606.8972610000055,"failure":null,"entries":[{"index":0,"specifier":"undici","displaySpecifier":"undici","outcome":"pass","durationMs":219.72827600000002,"resolvedTo":"/workspace/node_modules/undici/index.js","failure":null}],"sessions":[{"probeId":"4417ec46-8a99-4ea8-8fc3-ea2fcce4646e","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":606.8972610000055}]},{"runId":"9eb22032-9a62-4d0f-a998-838a5baf5443","profileId":"deno_2_9_7","group":"subpaths","mode":"esm","method":"sequential_batch_v2","outcome":"not_applicable","evidenceLevel":"static_only","coverage":{"planned":0,"observed":0,"passed":0,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":0,"failure":null,"entries":[],"sessions":[]},{"runId":"3c5473ae-d029-4f5d-a27e-c5de3bc9933d","profileId":"deno_2_9_7","group":"subpaths","mode":"commonjs","method":"sequential_batch_v2","outcome":"not_applicable","evidenceLevel":"static_only","coverage":{"planned":0,"observed":0,"passed":0,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":0,"failure":null,"entries":[],"sessions":[]}],"limitations":["Only installation and loading were observed; functional correctness and package safety are not established.","Subpath batches share module caches and globals; root modes use separate fresh sandboxes.","Package-visible harness observations can be tampered with. They are not adversarial attestation.","Evidence applies to these exact artifacts, dependency snapshot, runtime images and Linux amd64/glibc policy.","Runtime error codes are captured observations and can also be thrown by package code."]}}