{"schemaVersion":1,"reportPath":"/reports/64bdd089-a98f-46d3-8245-b9f2373c2480","status":{"id":"64bdd089-a98f-46d3-8245-b9f2373c2480","scanId":"48dcfbde-34e0-4261-b491-486cb120900f","invalidatedAt":null,"invalidationReason":null,"replacedBy":null,"snapshotAvailable":true,"policyAllowed":true,"createdAt":"2026-10-09T14:58:14.443Z","observationRevision":0,"previousScanId":null,"previousReportId":null,"current":true},"summary":{"id":"64bdd089-a98f-46d3-8245-b9f2373c2480","scanId":"48dcfbde-34e0-4261-b491-486cb120900f","artifact":{"name":"@supabase/supabase-js","version":"2.117.3","integrity":"sha512-K+f8PimXDunPWQ63CKRXaF5pbVPJxmfw5ryAnh0s9S9PkwcuqBjiSpIaqpF7KLDljeYwXIL85ST8QxaO0+XuvA==","tarballUrl":"https://registry.npmjs.org/@supabase/supabase-js/-/supabase-js-2.117.3.tgz"},"observedAt":"2026-10-09T14:58:13.837Z","classifiedAt":"2026-10-09T14:58:14.445Z","classifierRevision":"classifier_v2","matrix":{"id":"bfab88d7-3f4a-41b5-97a9-5aafd5bda511","revision":"production_ab51508deb208994caf81cb80f14b800","platform":"linux_amd64_glibc","harnessRevision":"load_v2","planRevision":"explicit_exports_v1","policyRevision":"runtime_limits_v2","images":[{"profileId":"node_24_21_0","kind":"node","version":"24.21.0","imageId":"sha256:f2fcbb4dfbd6d5f57f4e43de97e70182d9982ac7cc0cc063dfff2cf1759a411d","builtAt":"2026-10-04T15:20:38.392Z","sourceImage":"node:24.21.0-bookworm-slim@sha256:5cbc7caba8c2c0f0bca675d1b61b9f2857e1cf1853c6164ee9dd409501a936e7","baseImage":"gcr.io/distroless/cc-debian13:nonroot@sha256:20afe6a70f2565277b704cc17289cb557f353a3619f6350f52a2317106598df4","supportImage":"node:26.10.0-bookworm-slim@sha256:0a992e1420e2d70611578f1844a6f10a9d11fe6bb535aabf72efe3007f13d79b","platform":"linux_amd64_glibc","recipeRevision":"runtime_image_v1"},{"profileId":"node_26_10_0","kind":"node","version":"26.10.0","imageId":"sha256:9c1c93cc35d1408d26a61c4efccbde37c35425e362a2e723b885c3333d2be073","builtAt":"2026-10-04T15:20:47.161Z","sourceImage":"node:26.10.0-bookworm-slim@sha256:0a992e1420e2d70611578f1844a6f10a9d11fe6bb535aabf72efe3007f13d79b","baseImage":"gcr.io/distroless/cc-debian13:nonroot@sha256:20afe6a70f2565277b704cc17289cb557f353a3619f6350f52a2317106598df4","supportImage":"node:26.10.0-bookworm-slim@sha256:0a992e1420e2d70611578f1844a6f10a9d11fe6bb535aabf72efe3007f13d79b","platform":"linux_amd64_glibc","recipeRevision":"runtime_image_v1"},{"profileId":"bun_1_4_2","kind":"bun","version":"1.4.2","imageId":"sha256:2343363679fb92d59a395ff081b783b5514f06295b1bc6d61baaeef17e793789","builtAt":"2026-10-04T15:21:07.160Z","sourceImage":"oven/bun:1.4.2-debian@sha256:53710ce0f14eef8312521c586a7ae1d9aeab4011840f09f1966073b68fc2e2ab","baseImage":"gcr.io/distroless/cc-debian13:nonroot@sha256:20afe6a70f2565277b704cc17289cb557f353a3619f6350f52a2317106598df4","supportImage":"node:26.10.0-bookworm-slim@sha256:0a992e1420e2d70611578f1844a6f10a9d11fe6bb535aabf72efe3007f13d79b","platform":"linux_amd64_glibc","recipeRevision":"runtime_image_v1"},{"profileId":"deno_2_9_7","kind":"deno","version":"2.9.7","imageId":"sha256:4292bb23555f98fb9dfc30fb447daa1c301686d89264fd8643ccb86bc0d53c29","builtAt":"2026-10-04T15:21:22.570Z","sourceImage":"denoland/deno:debian-2.9.7@sha256:869d374bdaddda4fde029c492d7219199b0e821c2c53cca5357b3a6f5b9336fc","baseImage":"gcr.io/distroless/cc-debian13:nonroot@sha256:20afe6a70f2565277b704cc17289cb557f353a3619f6350f52a2317106598df4","supportImage":"node:26.10.0-bookworm-slim@sha256:0a992e1420e2d70611578f1844a6f10a9d11fe6bb535aabf72efe3007f13d79b","platform":"linux_amd64_glibc","recipeRevision":"runtime_image_v1"}]},"outcome":"inconclusive","evidenceLevel":"smoke_tested","coverageComplete":false,"limitations":["Only installation and loading were observed; functional correctness and package safety are not established.","Subpath batches share module caches and globals; root modes use separate fresh sandboxes.","Package-visible harness observations can be tampered with. They are not adversarial attestation.","Evidence applies to these exact artifacts, dependency snapshot, runtime images and Linux amd64/glibc policy.","Runtime error codes are captured observations and can also be thrown by package code."],"preparation":{"id":"35f2e8ef-dc1e-481f-843f-edd1effbea18","outcome":"pass","failure":null,"profileRevision":"npm_11_19_0_linux_amd64_v2","snapshot":{"id":"f74b0817-a141-4b6b-b79a-1f34f00d326d","generation":"1a654f17-d433-4484-b2cb-c8f61ab10ce5","lockDigest":"30bef7ae3f8463fcad58bfc6e44cbc24b5c83ce6e5711013a68f79d329c35979","treeDigest":"fc34aa5cb0c3258bd692f0ec7c3bc8ec3858e195915c19680e022f62e42b7942","profileRevision":"npm_11_19_0_linux_amd64_v2","installerImage":"node:24.21.0-bookworm-slim@sha256:5cbc7caba8c2c0f0bca675d1b61b9f2857e1cf1853c6164ee9dd409501a936e7"},"installedCount":9,"omittedOptionalCount":0},"cells":[{"runId":"b555cac4-1cb0-4bda-9026-3deebf88e823","profileId":"node_24_21_0","group":"root","mode":"esm","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":430.9329699999653,"failure":null},{"runId":"eaa4fd7f-746a-494d-aef7-71fada7bcdda","profileId":"node_24_21_0","group":"root","mode":"commonjs","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":323.2655100002885,"failure":null},{"runId":"fb67a9fe-4d32-4541-9ca9-f17641863d54","profileId":"node_24_21_0","group":"subpaths","mode":"esm","method":"sequential_batch_v2","outcome":"inconclusive","evidenceLevel":"smoke_tested","coverage":{"planned":2,"observed":2,"passed":1,"failed":1,"prerequisiteLimited":1,"interrupted":0,"untested":0,"complete":true},"durationMs":330.5344070000574,"failure":{"classification":"optional_peer_missing","phase":"module_resolution","origin":"prerequisite","retryable":false,"source":"captured_error_code","message":"Cannot find package '@opentelemetry/api' imported from /workspace/node_modules/@supabase/supabase-js/dist/tracing.mjs","optionalPeer":{"name":"@opentelemetry/api","range":">=1.0.0"}}},{"runId":"a22a29f2-8f11-443c-8c35-312514e89de6","profileId":"node_24_21_0","group":"subpaths","mode":"commonjs","method":"sequential_batch_v2","outcome":"inconclusive","evidenceLevel":"smoke_tested","coverage":{"planned":2,"observed":2,"passed":1,"failed":1,"prerequisiteLimited":1,"interrupted":0,"untested":0,"complete":true},"durationMs":343.8833269998431,"failure":{"classification":"optional_peer_missing","phase":"module_resolution","origin":"prerequisite","retryable":false,"source":"captured_error_code","message":"Cannot find module '@opentelemetry/api'\nRequire stack:\n- /workspace/node_modules/@supabase/supabase-js/dist/tracing.cjs\n- /workspace/.compatlab/probe.mjs","optionalPeer":{"name":"@opentelemetry/api","range":">=1.0.0"}}},{"runId":"e4137fb1-5b42-41dc-bb6a-58f2389772f4","profileId":"node_26_10_0","group":"root","mode":"esm","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":434.26891500037163,"failure":null},{"runId":"ad101081-31dd-4b11-882e-bc059d1fe427","profileId":"node_26_10_0","group":"root","mode":"commonjs","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":440.2433810001239,"failure":null},{"runId":"f07776a0-e765-484d-bbde-90c04430cc29","profileId":"node_26_10_0","group":"subpaths","mode":"esm","method":"sequential_batch_v2","outcome":"inconclusive","evidenceLevel":"smoke_tested","coverage":{"planned":2,"observed":2,"passed":1,"failed":1,"prerequisiteLimited":1,"interrupted":0,"untested":0,"complete":true},"durationMs":342.7049390003085,"failure":{"classification":"optional_peer_missing","phase":"module_resolution","origin":"prerequisite","retryable":false,"source":"captured_error_code","message":"Cannot find package '@opentelemetry/api' imported from /workspace/node_modules/@supabase/supabase-js/dist/tracing.mjs","optionalPeer":{"name":"@opentelemetry/api","range":">=1.0.0"}}},{"runId":"5335daa0-362e-49c6-8c1c-4313427c8306","profileId":"node_26_10_0","group":"subpaths","mode":"commonjs","method":"sequential_batch_v2","outcome":"inconclusive","evidenceLevel":"smoke_tested","coverage":{"planned":2,"observed":2,"passed":1,"failed":1,"prerequisiteLimited":1,"interrupted":0,"untested":0,"complete":true},"durationMs":360.0192509996705,"failure":{"classification":"optional_peer_missing","phase":"module_resolution","origin":"prerequisite","retryable":false,"source":"captured_error_code","message":"Cannot find module '@opentelemetry/api'\nRequire stack:\n- /workspace/node_modules/@supabase/supabase-js/dist/tracing.cjs\n- /workspace/.compatlab/probe.mjs","optionalPeer":{"name":"@opentelemetry/api","range":">=1.0.0"}}},{"runId":"4663321a-1286-4eff-878c-818bb01af2de","profileId":"bun_1_4_2","group":"root","mode":"esm","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":325.9389279996976,"failure":null},{"runId":"2a5de0a5-c549-438b-8a12-0c94b6cec791","profileId":"bun_1_4_2","group":"root","mode":"commonjs","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":354.99218900036067,"failure":null},{"runId":"407ff4f8-c17f-4c5e-bc46-10c63f097ed8","profileId":"bun_1_4_2","group":"subpaths","mode":"esm","method":"sequential_batch_v2","outcome":"partial","evidenceLevel":"smoke_tested","coverage":{"planned":2,"observed":2,"passed":1,"failed":1,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":338.6208640001714,"failure":{"classification":"esm_import_failed","phase":"module_evaluation","origin":"package","retryable":false,"source":"harness_observation","message":"The runtime reported a loading failure without a captured error message. Its cause is unknown."}},{"runId":"6dd3ec53-a820-484d-93ce-1433c5884fe9","profileId":"bun_1_4_2","group":"subpaths","mode":"commonjs","method":"sequential_batch_v2","outcome":"partial","evidenceLevel":"smoke_tested","coverage":{"planned":2,"observed":2,"passed":1,"failed":1,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":349.0646730000153,"failure":{"classification":"commonjs_require_failed","phase":"module_evaluation","origin":"package","retryable":false,"source":"harness_observation","message":"The runtime reported a loading failure without a captured error message. Its cause is unknown."}},{"runId":"ffdb96e6-8271-4055-91a9-9b64d004b940","profileId":"deno_2_9_7","group":"root","mode":"esm","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":434.08167699957266,"failure":null},{"runId":"89028eb6-8379-4ac5-a7d6-e3d6b369ea15","profileId":"deno_2_9_7","group":"root","mode":"commonjs","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":453.65637199999765,"failure":null},{"runId":"7ffb9c22-007c-4aa2-9706-9e94e3b29ac4","profileId":"deno_2_9_7","group":"subpaths","mode":"esm","method":"sequential_batch_v2","outcome":"inconclusive","evidenceLevel":"smoke_tested","coverage":{"planned":2,"observed":2,"passed":1,"failed":1,"prerequisiteLimited":1,"interrupted":0,"untested":0,"complete":true},"durationMs":458.24008799996227,"failure":{"classification":"optional_peer_missing","phase":"module_resolution","origin":"prerequisite","retryable":false,"source":"captured_error_code","message":"Could not find package '@opentelemetry/api' from referrer 'file:///workspace/node_modules/@supabase/supabase-js/dist/tracing.mjs'.","optionalPeer":{"name":"@opentelemetry/api","range":">=1.0.0"}}},{"runId":"9a69e0c6-6c75-4c9d-99ae-1f07d5cc3a04","profileId":"deno_2_9_7","group":"subpaths","mode":"commonjs","method":"sequential_batch_v2","outcome":"inconclusive","evidenceLevel":"smoke_tested","coverage":{"planned":2,"observed":2,"passed":1,"failed":1,"prerequisiteLimited":1,"interrupted":0,"untested":0,"complete":true},"durationMs":432.1141129997559,"failure":{"classification":"optional_peer_missing","phase":"module_resolution","origin":"prerequisite","retryable":false,"source":"captured_error_code","message":"Cannot find module '@opentelemetry/api'\nRequire stack:\n- /workspace/node_modules/@supabase/supabase-js/dist/tracing.cjs\n- /workspace/.compatlab/probe.mjs","optionalPeer":{"name":"@opentelemetry/api","range":">=1.0.0"}}}],"runtimes":[{"profileId":"node_24_21_0","outcome":"inconclusive"},{"profileId":"node_26_10_0","outcome":"inconclusive"},{"profileId":"bun_1_4_2","outcome":"partial"},{"profileId":"deno_2_9_7","outcome":"inconclusive"}],"missingOptionalPeers":[{"name":"@opentelemetry/api","range":">=1.0.0"}],"missingOptionalPeersTruncated":false}}