{"schemaVersion":1,"status":{"id":"5c77d88d-4c8e-4a9b-bc16-093acbd16e38","scanId":"47d61edf-e45f-4522-a9ac-c67d002720e8","invalidatedAt":null,"invalidationReason":null,"replacedBy":null,"snapshotAvailable":true,"policyAllowed":true,"createdAt":"2026-10-09T15:59:51.955Z","observationRevision":0,"previousScanId":null,"previousReportId":null,"current":true},"report":{"schemaVersion":1,"id":"5c77d88d-4c8e-4a9b-bc16-093acbd16e38","scanId":"47d61edf-e45f-4522-a9ac-c67d002720e8","classifierRevision":"classifier_v2","observedAt":"2026-10-09T15:59:48.513Z","classifiedAt":"2026-10-09T15:59:51.957Z","artifact":{"name":"@grpc/grpc-js","version":"1.14.6","integrity":"sha512-SgC/B3/VZ8lTyOZ4Cwk6f1skWhmkNAaVfiX90qd5u1rRXGKk1//8FTUEN9GvOUq7rfWIqAYkA3CoyumYVpOS6g==","tarballUrl":"https://registry.npmjs.org/@grpc/grpc-js/-/grpc-js-1.14.6.tgz"},"preparation":{"id":"4669416d-1cb6-446c-85cb-a9964f005f59","outcome":"pass","failure":null,"profileRevision":"npm_11_19_0_linux_amd64_v2","snapshot":{"id":"4af248cb-619c-40b4-9be6-f3cc6ab7a80a","generation":"ac62c8a0-4470-49a4-bf1a-4c5d24e4c142","lockDigest":"f0a38f229939931333453a2c043f6fc5a8be4bce2c4da62081ec231487dcaa95","treeDigest":"db51f0f50290fac166c64b0189a26653790493be2b790b4e785120a6f6ae6610","profileRevision":"npm_11_19_0_linux_amd64_v2","installerImage":"node:24.21.0-bookworm-slim@sha256:5cbc7caba8c2c0f0bca675d1b61b9f2857e1cf1853c6164ee9dd409501a936e7"},"installedCount":33,"omittedOptionalCount":0,"staticObservations":{"native":{"count":0,"paths":[],"buildIndicators":[],"prerequisiteProven":false},"declared":{"main":"build/src/index.js","engines":{"node":">=12.10.0"},"scripts":{"fix":"eslint --fix src/*.ts test/*.ts","lint":"eslint src/*.ts test/*.ts","test":"gulp test","build":"npm run compile","check":"npm run lint","clean":"rimraf ./build","format":"clang-format -i -style=\"{Language: JavaScript, BasedOnStyle: Google, ColumnLimit: 80}\" src/*.ts test/*.ts","compile":"tsc -p .","prepare":"npm run copy-protos && npm run generate-types && npm run generate-test-types && npm run compile","pretest":"npm run generate-types && npm run generate-test-types && npm run compile","posttest":"npm run check && madge -c ./build/src","copy-protos":"node ./copy-protos","generate-types":"proto-loader-gen-types --keepCase --longs String --enums String --defaults --oneofs --includeComments --includeDirs proto/ --include-dirs proto/ proto/xds/ proto/protoc-gen-validate/ -O src/generated/ --grpcLib ../index channelz.proto xds/service/orca/v3/orca.proto","generate-test-types":"proto-loader-gen-types --keepCase --longs String --enums String --defaults --oneofs --includeComments --include-dirs test/fixtures/ -O test/generated/ --grpcLib ../../src/index test_service.proto echo_service.proto"},"dependencies":{"@grpc/proto-loader":"^0.8.0","@js-sdsl/ordered-map":"^4.4.2"},"devDependencies":{"ncp":"^2.0.0","gulp":"^4.0.2","pify":"^4.0.1","execa":"^2.0.3","madge":"^5.0.1","eslint":"^8.42.0","lodash":"^4.17.21","rimraf":"^3.0.2","semver":"^7.6.0","ts-node":"^10.9.2","prettier":"^2.8.8","@types/ncp":"^2.0.8","gulp-mocha":"^6.0.0","typescript":"^5.3.3","@types/gulp":"^4.0.17","@types/node":">=20.11.20","@types/pify":"^5.0.4","@types/mocha":"^10.0.6","clang-format":"^1.8.0","@types/lodash":"^4.14.202","@types/semver":"^7.5.8","@types/gulp-mocha":"0.0.37","@grpc/proto-loader":"file:../proto-loader","eslint-plugin-node":"^11.1.0","eslint-config-prettier":"^8.8.0","eslint-plugin-prettier":"^4.2.1","mocha-jenkins-reporter":"^0.4.1","@typescript-eslint/parser":"^7.1.0","@typescript-eslint/eslint-plugin":"^7.1.0","@typescript-eslint/typescript-estree":"^7.1.0"}},"platform":{"os":true,"cpu":true,"libc":true},"evidenceLevel":"static_only","lifecycleScripts":["prepare"]}},"matrix":{"id":"bfab88d7-3f4a-41b5-97a9-5aafd5bda511","revision":"production_ab51508deb208994caf81cb80f14b800","platform":"linux_amd64_glibc","harnessRevision":"load_v2","planRevision":"explicit_exports_v1","policyRevision":"runtime_limits_v2","images":[{"profileId":"node_24_21_0","kind":"node","version":"24.21.0","imageId":"sha256:f2fcbb4dfbd6d5f57f4e43de97e70182d9982ac7cc0cc063dfff2cf1759a411d","builtAt":"2026-10-04T15:20:38.392Z","sourceImage":"node:24.21.0-bookworm-slim@sha256:5cbc7caba8c2c0f0bca675d1b61b9f2857e1cf1853c6164ee9dd409501a936e7","baseImage":"gcr.io/distroless/cc-debian13:nonroot@sha256:20afe6a70f2565277b704cc17289cb557f353a3619f6350f52a2317106598df4","supportImage":"node:26.10.0-bookworm-slim@sha256:0a992e1420e2d70611578f1844a6f10a9d11fe6bb535aabf72efe3007f13d79b","platform":"linux_amd64_glibc","recipeRevision":"runtime_image_v1"},{"profileId":"node_26_10_0","kind":"node","version":"26.10.0","imageId":"sha256:9c1c93cc35d1408d26a61c4efccbde37c35425e362a2e723b885c3333d2be073","builtAt":"2026-10-04T15:20:47.161Z","sourceImage":"node:26.10.0-bookworm-slim@sha256:0a992e1420e2d70611578f1844a6f10a9d11fe6bb535aabf72efe3007f13d79b","baseImage":"gcr.io/distroless/cc-debian13:nonroot@sha256:20afe6a70f2565277b704cc17289cb557f353a3619f6350f52a2317106598df4","supportImage":"node:26.10.0-bookworm-slim@sha256:0a992e1420e2d70611578f1844a6f10a9d11fe6bb535aabf72efe3007f13d79b","platform":"linux_amd64_glibc","recipeRevision":"runtime_image_v1"},{"profileId":"bun_1_4_2","kind":"bun","version":"1.4.2","imageId":"sha256:2343363679fb92d59a395ff081b783b5514f06295b1bc6d61baaeef17e793789","builtAt":"2026-10-04T15:21:07.160Z","sourceImage":"oven/bun:1.4.2-debian@sha256:53710ce0f14eef8312521c586a7ae1d9aeab4011840f09f1966073b68fc2e2ab","baseImage":"gcr.io/distroless/cc-debian13:nonroot@sha256:20afe6a70f2565277b704cc17289cb557f353a3619f6350f52a2317106598df4","supportImage":"node:26.10.0-bookworm-slim@sha256:0a992e1420e2d70611578f1844a6f10a9d11fe6bb535aabf72efe3007f13d79b","platform":"linux_amd64_glibc","recipeRevision":"runtime_image_v1"},{"profileId":"deno_2_9_7","kind":"deno","version":"2.9.7","imageId":"sha256:4292bb23555f98fb9dfc30fb447daa1c301686d89264fd8643ccb86bc0d53c29","builtAt":"2026-10-04T15:21:22.570Z","sourceImage":"denoland/deno:debian-2.9.7@sha256:869d374bdaddda4fde029c492d7219199b0e821c2c53cca5357b3a6f5b9336fc","baseImage":"gcr.io/distroless/cc-debian13:nonroot@sha256:20afe6a70f2565277b704cc17289cb557f353a3619f6350f52a2317106598df4","supportImage":"node:26.10.0-bookworm-slim@sha256:0a992e1420e2d70611578f1844a6f10a9d11fe6bb535aabf72efe3007f13d79b","platform":"linux_amd64_glibc","recipeRevision":"runtime_image_v1"}]},"omissions":{"counts":{"pattern":0,"non_executable":0,"not_exported":0,"invalid_subpath":0,"coverage_limit":0},"samples":[]},"outcome":"pass","evidenceLevel":"smoke_tested","coverageComplete":true,"cells":[{"runId":"99b6fab3-3470-4f1a-a1e7-118c42f46a46","profileId":"node_24_21_0","group":"root","mode":"esm","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":426.89808499999344,"failure":null,"entries":[{"index":0,"specifier":"@grpc/grpc-js","displaySpecifier":"@grpc/grpc-js","outcome":"pass","durationMs":47.775048,"resolvedTo":"file:///workspace/node_modules/@grpc/grpc-js/build/src/index.js","failure":null}],"sessions":[{"probeId":"c2dbc49c-9b79-4ebe-9d19-ab3a1afceeed","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":426.89808499999344}]},{"runId":"907402b9-6812-464e-9a10-6f5970c4ae61","profileId":"node_24_21_0","group":"root","mode":"commonjs","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":461.95186899998225,"failure":null,"entries":[{"index":0,"specifier":"@grpc/grpc-js","displaySpecifier":"@grpc/grpc-js","outcome":"pass","durationMs":96.298619,"resolvedTo":"/workspace/node_modules/@grpc/grpc-js/build/src/index.js","failure":null}],"sessions":[{"probeId":"520a2ead-c42c-407e-80ea-23dbd84e5117","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":461.95186899998225}]},{"runId":"8a99b0c3-b064-43eb-a68d-f3369b43e0e8","profileId":"node_24_21_0","group":"subpaths","mode":"esm","method":"sequential_batch_v2","outcome":"not_applicable","evidenceLevel":"static_only","coverage":{"planned":0,"observed":0,"passed":0,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":0,"failure":null,"entries":[],"sessions":[]},{"runId":"dbf24af9-6805-41fa-8f0c-95dc0c6d37bd","profileId":"node_24_21_0","group":"subpaths","mode":"commonjs","method":"sequential_batch_v2","outcome":"not_applicable","evidenceLevel":"static_only","coverage":{"planned":0,"observed":0,"passed":0,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":0,"failure":null,"entries":[],"sessions":[]},{"runId":"32a0bb75-4f28-4bf1-ad4e-82267fb69046","profileId":"node_26_10_0","group":"root","mode":"esm","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":459.71596999978647,"failure":null,"entries":[{"index":0,"specifier":"@grpc/grpc-js","displaySpecifier":"@grpc/grpc-js","outcome":"pass","durationMs":74.083118,"resolvedTo":"file:///workspace/node_modules/@grpc/grpc-js/build/src/index.js","failure":null}],"sessions":[{"probeId":"b6486d97-5d93-4a85-bd43-e50eff3280a0","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":459.71596999978647}]},{"runId":"828073d6-0170-411a-a4d9-dd8adb6a791c","profileId":"node_26_10_0","group":"root","mode":"commonjs","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":408.8807449999731,"failure":null,"entries":[{"index":0,"specifier":"@grpc/grpc-js","displaySpecifier":"@grpc/grpc-js","outcome":"pass","durationMs":79.22954100000001,"resolvedTo":"/workspace/node_modules/@grpc/grpc-js/build/src/index.js","failure":null}],"sessions":[{"probeId":"b2300160-880f-4fd9-a945-9d92ff616bda","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":408.8807449999731}]},{"runId":"e5baee0e-fb4c-4170-8ac2-e420b6d98a55","profileId":"node_26_10_0","group":"subpaths","mode":"esm","method":"sequential_batch_v2","outcome":"not_applicable","evidenceLevel":"static_only","coverage":{"planned":0,"observed":0,"passed":0,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":0,"failure":null,"entries":[],"sessions":[]},{"runId":"9f6b615f-b75b-46ec-865a-f1ea8a5c6bc4","profileId":"node_26_10_0","group":"subpaths","mode":"commonjs","method":"sequential_batch_v2","outcome":"not_applicable","evidenceLevel":"static_only","coverage":{"planned":0,"observed":0,"passed":0,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":0,"failure":null,"entries":[],"sessions":[]},{"runId":"81fb0c9d-6686-4b7a-b6d3-d75e54298980","profileId":"bun_1_4_2","group":"root","mode":"esm","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":504.13265599985607,"failure":null,"entries":[{"index":0,"specifier":"@grpc/grpc-js","displaySpecifier":"@grpc/grpc-js","outcome":"pass","durationMs":65.941918,"resolvedTo":"file:///workspace/node_modules/@grpc/grpc-js/build/src/index.js","failure":null}],"sessions":[{"probeId":"45aa41b2-b9cd-42e0-b6be-482955c6e25c","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":504.13265599985607}]},{"runId":"a50d4789-705a-4f77-a9ae-0ccdb7c78306","profileId":"bun_1_4_2","group":"root","mode":"commonjs","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":438.86583300004713,"failure":null,"entries":[{"index":0,"specifier":"@grpc/grpc-js","displaySpecifier":"@grpc/grpc-js","outcome":"pass","durationMs":85.039275,"resolvedTo":"/workspace/node_modules/@grpc/grpc-js/build/src/index.js","failure":null}],"sessions":[{"probeId":"555a3284-403c-47ec-a65f-c13c8601341e","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":438.86583300004713}]},{"runId":"c1986cd3-c125-4514-be2d-bf47c623d494","profileId":"bun_1_4_2","group":"subpaths","mode":"esm","method":"sequential_batch_v2","outcome":"not_applicable","evidenceLevel":"static_only","coverage":{"planned":0,"observed":0,"passed":0,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":0,"failure":null,"entries":[],"sessions":[]},{"runId":"46d4d96f-fb05-4c1c-91be-96d7217bb96f","profileId":"bun_1_4_2","group":"subpaths","mode":"commonjs","method":"sequential_batch_v2","outcome":"not_applicable","evidenceLevel":"static_only","coverage":{"planned":0,"observed":0,"passed":0,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":0,"failure":null,"entries":[],"sessions":[]},{"runId":"ea6a5bc2-41dd-4cb9-ad34-808b4cebc852","profileId":"deno_2_9_7","group":"root","mode":"esm","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":667.2944819999393,"failure":null,"entries":[{"index":0,"specifier":"@grpc/grpc-js","displaySpecifier":"@grpc/grpc-js","outcome":"pass","durationMs":158.55841599999997,"resolvedTo":"file:///workspace/node_modules/@grpc/grpc-js/build/src/index.js","failure":null}],"sessions":[{"probeId":"d5976ff0-24a2-4c4c-9a08-a99874e33eb9","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":667.2944819999393}]},{"runId":"4423c454-4866-440a-9f41-926230972544","profileId":"deno_2_9_7","group":"root","mode":"commonjs","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":1021.1679909999948,"failure":null,"entries":[{"index":0,"specifier":"@grpc/grpc-js","displaySpecifier":"@grpc/grpc-js","outcome":"pass","durationMs":237.44417099999998,"resolvedTo":"/workspace/node_modules/@grpc/grpc-js/build/src/index.js","failure":null}],"sessions":[{"probeId":"c1814dc8-dd51-44bd-b9cc-93ebe8aeb109","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":1021.1679909999948}]},{"runId":"420fff92-3f91-4de7-a91a-1296b762594c","profileId":"deno_2_9_7","group":"subpaths","mode":"esm","method":"sequential_batch_v2","outcome":"not_applicable","evidenceLevel":"static_only","coverage":{"planned":0,"observed":0,"passed":0,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":0,"failure":null,"entries":[],"sessions":[]},{"runId":"191d89b6-acce-4ea4-b1a8-e2be1608a457","profileId":"deno_2_9_7","group":"subpaths","mode":"commonjs","method":"sequential_batch_v2","outcome":"not_applicable","evidenceLevel":"static_only","coverage":{"planned":0,"observed":0,"passed":0,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":0,"failure":null,"entries":[],"sessions":[]}],"limitations":["Only installation and loading were observed; functional correctness and package safety are not established.","Subpath batches share module caches and globals; root modes use separate fresh sandboxes.","Package-visible harness observations can be tampered with. They are not adversarial attestation.","Evidence applies to these exact artifacts, dependency snapshot, runtime images and Linux amd64/glibc policy.","Runtime error codes are captured observations and can also be thrown by package code."]}}