{"schemaVersion":1,"status":{"id":"4e2d8d25-f753-4566-a877-140d8723eef1","scanId":"4451692f-cf9d-4031-be2b-bb02c1082552","invalidatedAt":null,"invalidationReason":null,"replacedBy":null,"snapshotAvailable":true,"policyAllowed":true,"createdAt":"2026-10-09T11:07:59.383Z","observationRevision":0,"previousScanId":null,"previousReportId":null,"current":true},"report":{"schemaVersion":1,"id":"4e2d8d25-f753-4566-a877-140d8723eef1","scanId":"4451692f-cf9d-4031-be2b-bb02c1082552","classifierRevision":"classifier_v2","observedAt":"2026-10-09T11:07:55.067Z","classifiedAt":"2026-10-09T11:07:59.387Z","artifact":{"name":"nanoid","version":"6.0.2","integrity":"sha512-hIvVOb9Qr1p/9CNNLOe0OlWvgx/ziTsVwKN/GDSsuArN2K0wDiafP3s0SWmsm7o2BdnyS8Z9Z64NFBUbn6ziBg==","tarballUrl":"https://registry.npmjs.org/nanoid/-/nanoid-6.0.2.tgz"},"preparation":{"id":"2991708e-7fbd-45f7-8ec3-f5f216e6297c","outcome":"pass","failure":null,"profileRevision":"npm_11_19_0_linux_amd64_v2","snapshot":{"id":"1317afef-ffb8-40b4-9e1a-579abaaf7c04","generation":"62a89322-24d6-469e-b0ff-f423c69d125c","lockDigest":"b857adaa1f5b82df84c12791c719f6f0d2d3d048f0cb774e7c3fc6a7694009db","treeDigest":"c292dbd80c059db1fcff2d09d338a8b3bceefaf18883e78f8a7b1f8c0d032267","profileRevision":"npm_11_19_0_linux_amd64_v2","installerImage":"node:24.21.0-bookworm-slim@sha256:5cbc7caba8c2c0f0bca675d1b61b9f2857e1cf1853c6164ee9dd409501a936e7"},"installedCount":1,"omittedOptionalCount":0,"staticObservations":{"native":{"count":0,"paths":[],"buildIndicators":[],"prerequisiteProven":false},"declared":{"bin":"./bin/nanoid.js","type":"module","engines":{"node":"^22 || ^24 || >=26"},"exports":{".":{"types":"./index.d.ts","browser":"./index.browser.js","default":"./index.js","react-native":"./index.browser.js"},"./non-secure":{"types":"./non-secure/index.d.ts","default":"./non-secure/index.js"},"./package.json":"./package.json"}},"platform":{"os":true,"cpu":true,"libc":true},"evidenceLevel":"static_only","lifecycleScripts":[]}},"matrix":{"id":"bfab88d7-3f4a-41b5-97a9-5aafd5bda511","revision":"production_ab51508deb208994caf81cb80f14b800","platform":"linux_amd64_glibc","harnessRevision":"load_v2","planRevision":"explicit_exports_v1","policyRevision":"runtime_limits_v2","images":[{"profileId":"node_24_21_0","kind":"node","version":"24.21.0","imageId":"sha256:f2fcbb4dfbd6d5f57f4e43de97e70182d9982ac7cc0cc063dfff2cf1759a411d","builtAt":"2026-10-04T15:20:38.392Z","sourceImage":"node:24.21.0-bookworm-slim@sha256:5cbc7caba8c2c0f0bca675d1b61b9f2857e1cf1853c6164ee9dd409501a936e7","baseImage":"gcr.io/distroless/cc-debian13:nonroot@sha256:20afe6a70f2565277b704cc17289cb557f353a3619f6350f52a2317106598df4","supportImage":"node:26.10.0-bookworm-slim@sha256:0a992e1420e2d70611578f1844a6f10a9d11fe6bb535aabf72efe3007f13d79b","platform":"linux_amd64_glibc","recipeRevision":"runtime_image_v1"},{"profileId":"node_26_10_0","kind":"node","version":"26.10.0","imageId":"sha256:9c1c93cc35d1408d26a61c4efccbde37c35425e362a2e723b885c3333d2be073","builtAt":"2026-10-04T15:20:47.161Z","sourceImage":"node:26.10.0-bookworm-slim@sha256:0a992e1420e2d70611578f1844a6f10a9d11fe6bb535aabf72efe3007f13d79b","baseImage":"gcr.io/distroless/cc-debian13:nonroot@sha256:20afe6a70f2565277b704cc17289cb557f353a3619f6350f52a2317106598df4","supportImage":"node:26.10.0-bookworm-slim@sha256:0a992e1420e2d70611578f1844a6f10a9d11fe6bb535aabf72efe3007f13d79b","platform":"linux_amd64_glibc","recipeRevision":"runtime_image_v1"},{"profileId":"bun_1_4_2","kind":"bun","version":"1.4.2","imageId":"sha256:2343363679fb92d59a395ff081b783b5514f06295b1bc6d61baaeef17e793789","builtAt":"2026-10-04T15:21:07.160Z","sourceImage":"oven/bun:1.4.2-debian@sha256:53710ce0f14eef8312521c586a7ae1d9aeab4011840f09f1966073b68fc2e2ab","baseImage":"gcr.io/distroless/cc-debian13:nonroot@sha256:20afe6a70f2565277b704cc17289cb557f353a3619f6350f52a2317106598df4","supportImage":"node:26.10.0-bookworm-slim@sha256:0a992e1420e2d70611578f1844a6f10a9d11fe6bb535aabf72efe3007f13d79b","platform":"linux_amd64_glibc","recipeRevision":"runtime_image_v1"},{"profileId":"deno_2_9_7","kind":"deno","version":"2.9.7","imageId":"sha256:4292bb23555f98fb9dfc30fb447daa1c301686d89264fd8643ccb86bc0d53c29","builtAt":"2026-10-04T15:21:22.570Z","sourceImage":"denoland/deno:debian-2.9.7@sha256:869d374bdaddda4fde029c492d7219199b0e821c2c53cca5357b3a6f5b9336fc","baseImage":"gcr.io/distroless/cc-debian13:nonroot@sha256:20afe6a70f2565277b704cc17289cb557f353a3619f6350f52a2317106598df4","supportImage":"node:26.10.0-bookworm-slim@sha256:0a992e1420e2d70611578f1844a6f10a9d11fe6bb535aabf72efe3007f13d79b","platform":"linux_amd64_glibc","recipeRevision":"runtime_image_v1"}]},"omissions":{"counts":{"pattern":0,"non_executable":1,"not_exported":0,"invalid_subpath":0,"coverage_limit":0},"samples":[{"subpath":"./package.json","reason":"non_executable"}]},"outcome":"pass","evidenceLevel":"smoke_tested","coverageComplete":true,"cells":[{"runId":"42608754-64e0-479e-8994-675bcc727f51","profileId":"node_24_21_0","group":"root","mode":"esm","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":338.63201799988747,"failure":null,"entries":[{"index":0,"specifier":"nanoid","displaySpecifier":"nanoid","outcome":"pass","durationMs":2.146243000000002,"resolvedTo":"file:///workspace/node_modules/nanoid/index.js","failure":null}],"sessions":[{"probeId":"fac1a8e5-6f24-479f-9272-1de120f95072","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":338.63201799988747}]},{"runId":"2ae62572-c039-4688-a9d6-3ce59483b1fd","profileId":"node_24_21_0","group":"root","mode":"commonjs","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":353.08808100013994,"failure":null,"entries":[{"index":0,"specifier":"nanoid","displaySpecifier":"nanoid","outcome":"pass","durationMs":3.071097999999999,"resolvedTo":"/workspace/node_modules/nanoid/index.js","failure":null}],"sessions":[{"probeId":"ed8bb630-42f5-43f3-b280-16af2a817c2f","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":353.08808100013994}]},{"runId":"66eacd56-4c0c-4ded-abb3-af1ee16e8511","profileId":"node_24_21_0","group":"subpaths","mode":"esm","method":"sequential_batch_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":329.48280899995007,"failure":null,"entries":[{"index":0,"specifier":"nanoid/non-secure","displaySpecifier":"nanoid/non-secure","outcome":"pass","durationMs":2.189641999999999,"resolvedTo":"file:///workspace/node_modules/nanoid/non-secure/index.js","failure":null}],"sessions":[{"probeId":"b0316790-39f2-4c7e-995f-998ae87e3e21","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":329.48280899995007}]},{"runId":"871cd946-b507-406f-b123-9b8d990dd46b","profileId":"node_24_21_0","group":"subpaths","mode":"commonjs","method":"sequential_batch_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":321.9505620000418,"failure":null,"entries":[{"index":0,"specifier":"nanoid/non-secure","displaySpecifier":"nanoid/non-secure","outcome":"pass","durationMs":2.7344849999999994,"resolvedTo":"/workspace/node_modules/nanoid/non-secure/index.js","failure":null}],"sessions":[{"probeId":"e7130a21-898c-4dab-bfef-d50a97ea33c6","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":321.9505620000418}]},{"runId":"0b542f73-746c-4120-8c77-3b7061f0dc04","profileId":"node_26_10_0","group":"root","mode":"esm","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":311.2652099998668,"failure":null,"entries":[{"index":0,"specifier":"nanoid","displaySpecifier":"nanoid","outcome":"pass","durationMs":2.4604289999999978,"resolvedTo":"file:///workspace/node_modules/nanoid/index.js","failure":null}],"sessions":[{"probeId":"7dc4642b-8a45-45e7-9149-9f98ee8b3387","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":311.2652099998668}]},{"runId":"93e3fee2-9171-459e-a59a-97e5f0ce230c","profileId":"node_26_10_0","group":"root","mode":"commonjs","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":314.7697130001616,"failure":null,"entries":[{"index":0,"specifier":"nanoid","displaySpecifier":"nanoid","outcome":"pass","durationMs":3.017519,"resolvedTo":"/workspace/node_modules/nanoid/index.js","failure":null}],"sessions":[{"probeId":"0a167a00-fdea-4840-8626-81f9fa91960d","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":314.7697130001616}]},{"runId":"a61e4962-6650-418b-b5fb-c9216df10698","profileId":"node_26_10_0","group":"subpaths","mode":"esm","method":"sequential_batch_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":314.9238680000417,"failure":null,"entries":[{"index":0,"specifier":"nanoid/non-secure","displaySpecifier":"nanoid/non-secure","outcome":"pass","durationMs":2.2999940000000016,"resolvedTo":"file:///workspace/node_modules/nanoid/non-secure/index.js","failure":null}],"sessions":[{"probeId":"e869e1e0-ba9e-4807-87cb-ef126a5c528d","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":314.9238680000417}]},{"runId":"fe4b8d78-53bd-48ce-a0d0-535d457ef79e","profileId":"node_26_10_0","group":"subpaths","mode":"commonjs","method":"sequential_batch_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":341.5543810001109,"failure":null,"entries":[{"index":0,"specifier":"nanoid/non-secure","displaySpecifier":"nanoid/non-secure","outcome":"pass","durationMs":2.767519,"resolvedTo":"/workspace/node_modules/nanoid/non-secure/index.js","failure":null}],"sessions":[{"probeId":"02d9b21c-067e-4a4f-b79b-8ee7294d6bf6","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":341.5543810001109}]},{"runId":"fdb0d409-decd-4a6f-8ae7-aaee1a63dd32","profileId":"bun_1_4_2","group":"root","mode":"esm","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":356.8204899998382,"failure":null,"entries":[{"index":0,"specifier":"nanoid","displaySpecifier":"nanoid","outcome":"pass","durationMs":2.354811999999999,"resolvedTo":"file:///workspace/node_modules/nanoid/index.js","failure":null}],"sessions":[{"probeId":"3fb84b9e-a77a-456e-ae4e-f2218b7ee7d2","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":356.8204899998382}]},{"runId":"42745810-3db1-4841-aa51-666c2e771e04","profileId":"bun_1_4_2","group":"root","mode":"commonjs","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":316.68440499994904,"failure":null,"entries":[{"index":0,"specifier":"nanoid","displaySpecifier":"nanoid","outcome":"pass","durationMs":1.448658,"resolvedTo":"/workspace/node_modules/nanoid/index.js","failure":null}],"sessions":[{"probeId":"e0670780-240d-4473-8209-93cb8a8defd4","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":316.68440499994904}]},{"runId":"1170da50-c5a1-4768-9e73-e35069abb7aa","profileId":"bun_1_4_2","group":"subpaths","mode":"esm","method":"sequential_batch_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":365.2340190000832,"failure":null,"entries":[{"index":0,"specifier":"nanoid/non-secure","displaySpecifier":"nanoid/non-secure","outcome":"pass","durationMs":1.3555450000000002,"resolvedTo":"file:///workspace/node_modules/nanoid/non-secure/index.js","failure":null}],"sessions":[{"probeId":"57cf1258-8c1c-40d1-b032-e1bb8e3f7a8a","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":365.2340190000832}]},{"runId":"362f6fd8-55e6-47f9-a467-b2c16911f0fe","profileId":"bun_1_4_2","group":"subpaths","mode":"commonjs","method":"sequential_batch_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":302.81925499998033,"failure":null,"entries":[{"index":0,"specifier":"nanoid/non-secure","displaySpecifier":"nanoid/non-secure","outcome":"pass","durationMs":0.8444059999999993,"resolvedTo":"/workspace/node_modules/nanoid/non-secure/index.js","failure":null}],"sessions":[{"probeId":"fd753421-80eb-46a7-a7d0-7f5813304d12","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":302.81925499998033}]},{"runId":"e7a6b449-8aab-4750-9590-d2592b5a5fd9","profileId":"deno_2_9_7","group":"root","mode":"esm","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":443.1692349999212,"failure":null,"entries":[{"index":0,"specifier":"nanoid","displaySpecifier":"nanoid","outcome":"pass","durationMs":1.7974779999999981,"resolvedTo":"file:///workspace/node_modules/nanoid/index.js","failure":null}],"sessions":[{"probeId":"1d8d67b7-0a6a-49df-8dd0-873e7c06af19","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":443.1692349999212}]},{"runId":"a749296e-cbbc-40c3-8db5-40e672753092","profileId":"deno_2_9_7","group":"root","mode":"commonjs","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":408.89063199982047,"failure":null,"entries":[{"index":0,"specifier":"nanoid","displaySpecifier":"nanoid","outcome":"pass","durationMs":2.6876669999999905,"resolvedTo":"/workspace/node_modules/nanoid/index.js","failure":null}],"sessions":[{"probeId":"b8c57d35-b02e-42de-bdef-27578e6b116a","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":408.89063199982047}]},{"runId":"91733332-a65d-4a4f-bac9-b201ddcb630a","profileId":"deno_2_9_7","group":"subpaths","mode":"esm","method":"sequential_batch_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":438.3073859999422,"failure":null,"entries":[{"index":0,"specifier":"nanoid/non-secure","displaySpecifier":"nanoid/non-secure","outcome":"pass","durationMs":1.6809330000000031,"resolvedTo":"file:///workspace/node_modules/nanoid/non-secure/index.js","failure":null}],"sessions":[{"probeId":"4bc2f8a0-01d7-4966-9c8e-426312335224","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":438.3073859999422}]},{"runId":"d1729fde-340b-4c9a-bce0-8941376be185","profileId":"deno_2_9_7","group":"subpaths","mode":"commonjs","method":"sequential_batch_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":420.3470630000811,"failure":null,"entries":[{"index":0,"specifier":"nanoid/non-secure","displaySpecifier":"nanoid/non-secure","outcome":"pass","durationMs":2.1775399999999934,"resolvedTo":"/workspace/node_modules/nanoid/non-secure/index.js","failure":null}],"sessions":[{"probeId":"429bcaa7-8aa4-4271-91c5-956397df6cfc","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":420.3470630000811}]}],"limitations":["Only installation and loading were observed; functional correctness and package safety are not established.","Subpath batches share module caches and globals; root modes use separate fresh sandboxes.","Package-visible harness observations can be tampered with. They are not adversarial attestation.","Evidence applies to these exact artifacts, dependency snapshot, runtime images and Linux amd64/glibc policy.","Runtime error codes are captured observations and can also be thrown by package code."]}}