{"schemaVersion":1,"reportPath":"/reports/48812379-c29a-44bd-bf0e-df93834fa99c","status":{"id":"48812379-c29a-44bd-bf0e-df93834fa99c","scanId":"41afeead-eab5-4cdf-b10f-668c0f22d197","invalidatedAt":null,"invalidationReason":null,"replacedBy":null,"snapshotAvailable":true,"policyAllowed":true,"createdAt":"2026-10-09T11:08:59.701Z","observationRevision":0,"previousScanId":null,"previousReportId":null,"current":true},"summary":{"id":"48812379-c29a-44bd-bf0e-df93834fa99c","scanId":"41afeead-eab5-4cdf-b10f-668c0f22d197","artifact":{"name":"@hono/node-server","version":"2.1.4","integrity":"sha512-2g1qeHl4BduwDn6L8nkAvDrPUWPMlkQ//a5NhP/zIyaXKMjZNRV+cG9Csu+BiJFf6+68pqzjf4Hi5sJGKHuS1g==","tarballUrl":"https://registry.npmjs.org/@hono/node-server/-/node-server-2.1.4.tgz"},"observedAt":"2026-10-09T11:08:58.309Z","classifiedAt":"2026-10-09T11:08:59.704Z","classifierRevision":"classifier_v2","matrix":{"id":"bfab88d7-3f4a-41b5-97a9-5aafd5bda511","revision":"production_ab51508deb208994caf81cb80f14b800","platform":"linux_amd64_glibc","harnessRevision":"load_v2","planRevision":"explicit_exports_v1","policyRevision":"runtime_limits_v2","images":[{"profileId":"node_24_21_0","kind":"node","version":"24.21.0","imageId":"sha256:f2fcbb4dfbd6d5f57f4e43de97e70182d9982ac7cc0cc063dfff2cf1759a411d","builtAt":"2026-10-04T15:20:38.392Z","sourceImage":"node:24.21.0-bookworm-slim@sha256:5cbc7caba8c2c0f0bca675d1b61b9f2857e1cf1853c6164ee9dd409501a936e7","baseImage":"gcr.io/distroless/cc-debian13:nonroot@sha256:20afe6a70f2565277b704cc17289cb557f353a3619f6350f52a2317106598df4","supportImage":"node:26.10.0-bookworm-slim@sha256:0a992e1420e2d70611578f1844a6f10a9d11fe6bb535aabf72efe3007f13d79b","platform":"linux_amd64_glibc","recipeRevision":"runtime_image_v1"},{"profileId":"node_26_10_0","kind":"node","version":"26.10.0","imageId":"sha256:9c1c93cc35d1408d26a61c4efccbde37c35425e362a2e723b885c3333d2be073","builtAt":"2026-10-04T15:20:47.161Z","sourceImage":"node:26.10.0-bookworm-slim@sha256:0a992e1420e2d70611578f1844a6f10a9d11fe6bb535aabf72efe3007f13d79b","baseImage":"gcr.io/distroless/cc-debian13:nonroot@sha256:20afe6a70f2565277b704cc17289cb557f353a3619f6350f52a2317106598df4","supportImage":"node:26.10.0-bookworm-slim@sha256:0a992e1420e2d70611578f1844a6f10a9d11fe6bb535aabf72efe3007f13d79b","platform":"linux_amd64_glibc","recipeRevision":"runtime_image_v1"},{"profileId":"bun_1_4_2","kind":"bun","version":"1.4.2","imageId":"sha256:2343363679fb92d59a395ff081b783b5514f06295b1bc6d61baaeef17e793789","builtAt":"2026-10-04T15:21:07.160Z","sourceImage":"oven/bun:1.4.2-debian@sha256:53710ce0f14eef8312521c586a7ae1d9aeab4011840f09f1966073b68fc2e2ab","baseImage":"gcr.io/distroless/cc-debian13:nonroot@sha256:20afe6a70f2565277b704cc17289cb557f353a3619f6350f52a2317106598df4","supportImage":"node:26.10.0-bookworm-slim@sha256:0a992e1420e2d70611578f1844a6f10a9d11fe6bb535aabf72efe3007f13d79b","platform":"linux_amd64_glibc","recipeRevision":"runtime_image_v1"},{"profileId":"deno_2_9_7","kind":"deno","version":"2.9.7","imageId":"sha256:4292bb23555f98fb9dfc30fb447daa1c301686d89264fd8643ccb86bc0d53c29","builtAt":"2026-10-04T15:21:22.570Z","sourceImage":"denoland/deno:debian-2.9.7@sha256:869d374bdaddda4fde029c492d7219199b0e821c2c53cca5357b3a6f5b9336fc","baseImage":"gcr.io/distroless/cc-debian13:nonroot@sha256:20afe6a70f2565277b704cc17289cb557f353a3619f6350f52a2317106598df4","supportImage":"node:26.10.0-bookworm-slim@sha256:0a992e1420e2d70611578f1844a6f10a9d11fe6bb535aabf72efe3007f13d79b","platform":"linux_amd64_glibc","recipeRevision":"runtime_image_v1"}]},"outcome":"inconclusive","evidenceLevel":"smoke_tested","coverageComplete":false,"limitations":["Only installation and loading were observed; functional correctness and package safety are not established.","Subpath batches share module caches and globals; root modes use separate fresh sandboxes.","Package-visible harness observations can be tampered with. They are not adversarial attestation.","Evidence applies to these exact artifacts, dependency snapshot, runtime images and Linux amd64/glibc policy.","Runtime error codes are captured observations and can also be thrown by package code."],"preparation":{"id":"b513f3da-f5f7-4f7a-93a7-b3e1ef5bcdb1","outcome":"pass","failure":null,"profileRevision":"npm_11_19_0_linux_amd64_v2","snapshot":{"id":"054ebe80-bbaa-49f1-9570-c1e91a596275","generation":"867a71c2-7ec8-4111-9f0a-06eee890bd1f","lockDigest":"0a58fb5f0f7c5c04256a95f1ca77bd13e834fb625da645b4dc5f593506c70dad","treeDigest":"e25ce80efe0a3b45b45fc75419c436e33898d75f8f064f327730dca36e1a5eb6","profileRevision":"npm_11_19_0_linux_amd64_v2","installerImage":"node:24.21.0-bookworm-slim@sha256:5cbc7caba8c2c0f0bca675d1b61b9f2857e1cf1853c6164ee9dd409501a936e7"},"installedCount":2,"omittedOptionalCount":0},"cells":[{"runId":"b59d3b24-bd99-404c-b5a3-ac1cf934fbba","profileId":"node_24_21_0","group":"root","mode":"esm","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":315.377760999836,"failure":null},{"runId":"12094a55-d9a1-4c78-8186-a26327c42e92","profileId":"node_24_21_0","group":"root","mode":"commonjs","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":424.67003299994394,"failure":null},{"runId":"a73d022a-4a39-4d9e-91a4-37ee480d3b06","profileId":"node_24_21_0","group":"subpaths","mode":"esm","method":"sequential_batch_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":3,"observed":3,"passed":3,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":333.1200059999246,"failure":null},{"runId":"8df35876-370c-44dc-8c11-ca33fea49302","profileId":"node_24_21_0","group":"subpaths","mode":"commonjs","method":"sequential_batch_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":3,"observed":3,"passed":3,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":334.3710460001603,"failure":null},{"runId":"0e9f97e7-8554-4db3-82d0-12d8f03bd08b","profileId":"node_26_10_0","group":"root","mode":"esm","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":439.61258199997246,"failure":null},{"runId":"6e8a466e-f0be-48b1-b5de-ca0d41080215","profileId":"node_26_10_0","group":"root","mode":"commonjs","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":358.76869700010866,"failure":null},{"runId":"cc532b00-2d45-457a-a196-40ef8e97f987","profileId":"node_26_10_0","group":"subpaths","mode":"esm","method":"sequential_batch_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":3,"observed":3,"passed":3,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":340.15585400001146,"failure":null},{"runId":"b70dbf63-1792-421e-96e3-6d28cae84302","profileId":"node_26_10_0","group":"subpaths","mode":"commonjs","method":"sequential_batch_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":3,"observed":3,"passed":3,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":328.8714690001216,"failure":null},{"runId":"ba3ecc85-f4d5-4d04-9725-8e680eb58837","profileId":"bun_1_4_2","group":"root","mode":"esm","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":348.3797820000909,"failure":null},{"runId":"7ce82789-89b9-4efb-a617-954842936021","profileId":"bun_1_4_2","group":"root","mode":"commonjs","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":318.26510199997574,"failure":null},{"runId":"305005cc-a39a-4859-a01c-7415412f4baf","profileId":"bun_1_4_2","group":"subpaths","mode":"esm","method":"sequential_batch_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":3,"observed":3,"passed":3,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":316.3628730000928,"failure":null},{"runId":"0d46b69b-8bc5-4277-9458-b2ed70e85acc","profileId":"bun_1_4_2","group":"subpaths","mode":"commonjs","method":"sequential_batch_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":3,"observed":3,"passed":3,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":322.3414950000588,"failure":null},{"runId":"3f0cb639-b73e-421f-b82a-327570316077","profileId":"deno_2_9_7","group":"root","mode":"esm","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":421.79446100001223,"failure":null},{"runId":"0a278557-4c67-472d-9158-5c22e9739341","profileId":"deno_2_9_7","group":"root","mode":"commonjs","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":463.1451890000608,"failure":null},{"runId":"f95cc8e4-aad0-49cb-8952-cde34cbcde42","profileId":"deno_2_9_7","group":"subpaths","mode":"esm","method":"sequential_batch_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":3,"observed":3,"passed":3,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":446.166269000154,"failure":null},{"runId":"c43783a6-7c3d-4bf3-a59a-475cfa286c1f","profileId":"deno_2_9_7","group":"subpaths","mode":"commonjs","method":"sequential_batch_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":3,"observed":3,"passed":3,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":423.35335099999793,"failure":null}],"runtimes":[{"profileId":"node_24_21_0","outcome":"pass"},{"profileId":"node_26_10_0","outcome":"pass"},{"profileId":"bun_1_4_2","outcome":"pass"},{"profileId":"deno_2_9_7","outcome":"pass"}],"missingOptionalPeers":[],"missingOptionalPeersTruncated":false}}