{"schemaVersion":1,"status":{"id":"9a95d4e7-8603-4d72-847d-b6c6cad21b8a","scanId":"07dae345-7ff2-488d-b51d-89ab2853e870","invalidatedAt":null,"invalidationReason":null,"replacedBy":null,"snapshotAvailable":true,"policyAllowed":true,"createdAt":"2026-10-09T15:55:30.639Z","observationRevision":0,"previousScanId":null,"previousReportId":null,"current":true},"report":{"schemaVersion":1,"id":"9a95d4e7-8603-4d72-847d-b6c6cad21b8a","scanId":"07dae345-7ff2-488d-b51d-89ab2853e870","classifierRevision":"classifier_v2","observedAt":"2026-10-09T15:55:27.042Z","classifiedAt":"2026-10-09T15:55:30.643Z","artifact":{"name":"argon2","version":"0.45.1","integrity":"sha512-skm+/WCjkGqCQxF7FG1LuZXM5yvbFjgbfiCGsud2oLgaDhh6b6dbH0b1EkghbM+xx4Bj8Ape+KKgixoIlWZicQ==","tarballUrl":"https://registry.npmjs.org/argon2/-/argon2-0.45.1.tgz"},"preparation":{"id":"1fb9659e-178b-431e-8d84-f06f15e069d4","outcome":"pass","failure":null,"profileRevision":"npm_11_19_0_linux_amd64_v2","snapshot":{"id":"7d6b7933-99e0-4d59-9d66-d30cbf17946b","generation":"3d2e61aa-3d50-447a-a6e2-3d2decd3f5b3","lockDigest":"8e76903325655f531cd1ade137f41e596469fbdb1e2f704f0068e762e08f384e","treeDigest":"5d0cb94758c31f1bc1076e9aae0893d77e34faf471945186588338515b5a64d2","profileRevision":"npm_11_19_0_linux_amd64_v2","installerImage":"node:24.21.0-bookworm-slim@sha256:5cbc7caba8c2c0f0bca675d1b61b9f2857e1cf1853c6164ee9dd409501a936e7"},"installedCount":12,"omittedOptionalCount":0,"staticObservations":{"native":{"count":10,"paths":["node_modules/argon2/prebuilds/win32-x64/argon2.glibc.node","node_modules/argon2/prebuilds/linux-x64/argon2.glibc.node","node_modules/argon2/prebuilds/linux-x64/argon2.musl.node","node_modules/argon2/prebuilds/linux-arm64/argon2.armv8.glibc.node","node_modules/argon2/prebuilds/linux-arm64/argon2.armv8.musl.node","node_modules/argon2/prebuilds/linux-arm/argon2.armv7.glibc.node","node_modules/argon2/prebuilds/linux-arm/argon2.armv7.musl.node","node_modules/argon2/prebuilds/freebsd-x64/argon2.glibc.node","node_modules/argon2/prebuilds/freebsd-arm64/argon2.armv8.glibc.node","node_modules/argon2/prebuilds/darwin-arm64/argon2.armv8.glibc.node"],"buildIndicators":["node_modules/argon2/binding.gyp"],"prerequisiteProven":false},"declared":{"main":"argon2.cjs","type":"commonjs","engines":{"node":">=16.17.0"},"scripts":{"fmt":"oxfmt","lint":"oxlint","test":"node --test test.cjs","build":"prebuildify --napi --strip --tag-armv --tag-libc","install":"cross-env ZERO_AR_DATE=1 node-gyp-build","prepare":"tsc","lint:fix":"oxlint --fix","fmt:check":"oxfmt --check"},"dependencies":{"cross-env":"^10.1.0","@phc/format":"^1.0.0","node-addon-api":"^8.9.0","node-gyp-build":"^4.8.4"},"devDependencies":{"oxfmt":"0.59.0","oxlint":"1.74.0","node-gyp":"12.4.0","typescript":"7.0.2","@types/node":"24.13.3","prebuildify":"6.0.1","@tsconfig/node22":"22.0.5"}},"platform":{"os":true,"cpu":true,"libc":true},"evidenceLevel":"static_only","lifecycleScripts":["install","prepare"]}},"matrix":{"id":"bfab88d7-3f4a-41b5-97a9-5aafd5bda511","revision":"production_ab51508deb208994caf81cb80f14b800","platform":"linux_amd64_glibc","harnessRevision":"load_v2","planRevision":"explicit_exports_v1","policyRevision":"runtime_limits_v2","images":[{"profileId":"node_24_21_0","kind":"node","version":"24.21.0","imageId":"sha256:f2fcbb4dfbd6d5f57f4e43de97e70182d9982ac7cc0cc063dfff2cf1759a411d","builtAt":"2026-10-04T15:20:38.392Z","sourceImage":"node:24.21.0-bookworm-slim@sha256:5cbc7caba8c2c0f0bca675d1b61b9f2857e1cf1853c6164ee9dd409501a936e7","baseImage":"gcr.io/distroless/cc-debian13:nonroot@sha256:20afe6a70f2565277b704cc17289cb557f353a3619f6350f52a2317106598df4","supportImage":"node:26.10.0-bookworm-slim@sha256:0a992e1420e2d70611578f1844a6f10a9d11fe6bb535aabf72efe3007f13d79b","platform":"linux_amd64_glibc","recipeRevision":"runtime_image_v1"},{"profileId":"node_26_10_0","kind":"node","version":"26.10.0","imageId":"sha256:9c1c93cc35d1408d26a61c4efccbde37c35425e362a2e723b885c3333d2be073","builtAt":"2026-10-04T15:20:47.161Z","sourceImage":"node:26.10.0-bookworm-slim@sha256:0a992e1420e2d70611578f1844a6f10a9d11fe6bb535aabf72efe3007f13d79b","baseImage":"gcr.io/distroless/cc-debian13:nonroot@sha256:20afe6a70f2565277b704cc17289cb557f353a3619f6350f52a2317106598df4","supportImage":"node:26.10.0-bookworm-slim@sha256:0a992e1420e2d70611578f1844a6f10a9d11fe6bb535aabf72efe3007f13d79b","platform":"linux_amd64_glibc","recipeRevision":"runtime_image_v1"},{"profileId":"bun_1_4_2","kind":"bun","version":"1.4.2","imageId":"sha256:2343363679fb92d59a395ff081b783b5514f06295b1bc6d61baaeef17e793789","builtAt":"2026-10-04T15:21:07.160Z","sourceImage":"oven/bun:1.4.2-debian@sha256:53710ce0f14eef8312521c586a7ae1d9aeab4011840f09f1966073b68fc2e2ab","baseImage":"gcr.io/distroless/cc-debian13:nonroot@sha256:20afe6a70f2565277b704cc17289cb557f353a3619f6350f52a2317106598df4","supportImage":"node:26.10.0-bookworm-slim@sha256:0a992e1420e2d70611578f1844a6f10a9d11fe6bb535aabf72efe3007f13d79b","platform":"linux_amd64_glibc","recipeRevision":"runtime_image_v1"},{"profileId":"deno_2_9_7","kind":"deno","version":"2.9.7","imageId":"sha256:4292bb23555f98fb9dfc30fb447daa1c301686d89264fd8643ccb86bc0d53c29","builtAt":"2026-10-04T15:21:22.570Z","sourceImage":"denoland/deno:debian-2.9.7@sha256:869d374bdaddda4fde029c492d7219199b0e821c2c53cca5357b3a6f5b9336fc","baseImage":"gcr.io/distroless/cc-debian13:nonroot@sha256:20afe6a70f2565277b704cc17289cb557f353a3619f6350f52a2317106598df4","supportImage":"node:26.10.0-bookworm-slim@sha256:0a992e1420e2d70611578f1844a6f10a9d11fe6bb535aabf72efe3007f13d79b","platform":"linux_amd64_glibc","recipeRevision":"runtime_image_v1"}]},"omissions":{"counts":{"pattern":0,"non_executable":0,"not_exported":0,"invalid_subpath":0,"coverage_limit":0},"samples":[]},"outcome":"pass","evidenceLevel":"smoke_tested","coverageComplete":true,"cells":[{"runId":"7a8fc297-b069-406a-84ef-08e46072cd13","profileId":"node_24_21_0","group":"root","mode":"esm","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":338.18729799985886,"failure":null,"entries":[{"index":0,"specifier":"argon2","displaySpecifier":"argon2","outcome":"pass","durationMs":9.853954000000002,"resolvedTo":"file:///workspace/node_modules/argon2/argon2.cjs","failure":null}],"sessions":[{"probeId":"a2130fab-74e9-4117-8925-830dc1444d17","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":338.18729799985886}]},{"runId":"cc625085-7e6f-426f-98a0-70a0d9ca1a1e","profileId":"node_24_21_0","group":"root","mode":"commonjs","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":433.20911699999124,"failure":null,"entries":[{"index":0,"specifier":"argon2","displaySpecifier":"argon2","outcome":"pass","durationMs":9.588776000000003,"resolvedTo":"/workspace/node_modules/argon2/argon2.cjs","failure":null}],"sessions":[{"probeId":"42cce7f3-e9cb-4364-9205-51a370be83d3","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":433.20911699999124}]},{"runId":"e41b4a7a-fb44-450c-b738-954a7da5329a","profileId":"node_24_21_0","group":"subpaths","mode":"esm","method":"sequential_batch_v2","outcome":"not_applicable","evidenceLevel":"static_only","coverage":{"planned":0,"observed":0,"passed":0,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":0,"failure":null,"entries":[],"sessions":[]},{"runId":"8ed0a930-f905-4382-ad7c-8e6c9b4736c0","profileId":"node_24_21_0","group":"subpaths","mode":"commonjs","method":"sequential_batch_v2","outcome":"not_applicable","evidenceLevel":"static_only","coverage":{"planned":0,"observed":0,"passed":0,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":0,"failure":null,"entries":[],"sessions":[]},{"runId":"3fdd50a8-8d93-4bf6-9d70-0135650c9e50","profileId":"node_26_10_0","group":"root","mode":"esm","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":547.1071309999097,"failure":null,"entries":[{"index":0,"specifier":"argon2","displaySpecifier":"argon2","outcome":"pass","durationMs":19.217885000000003,"resolvedTo":"file:///workspace/node_modules/argon2/argon2.cjs","failure":null}],"sessions":[{"probeId":"eb0ae9b4-a62a-4f72-a0e4-1cdb996c887b","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":547.1071309999097}]},{"runId":"0619b8a4-f977-4fa5-bd7c-7e9eac294fd5","profileId":"node_26_10_0","group":"root","mode":"commonjs","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":464.7778610000387,"failure":null,"entries":[{"index":0,"specifier":"argon2","displaySpecifier":"argon2","outcome":"pass","durationMs":16.894263999999993,"resolvedTo":"/workspace/node_modules/argon2/argon2.cjs","failure":null}],"sessions":[{"probeId":"62f1aa46-9316-4530-957b-58ef70e3ed9b","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":464.7778610000387}]},{"runId":"580612e9-af79-424e-a5d7-ce28de42440d","profileId":"node_26_10_0","group":"subpaths","mode":"esm","method":"sequential_batch_v2","outcome":"not_applicable","evidenceLevel":"static_only","coverage":{"planned":0,"observed":0,"passed":0,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":0,"failure":null,"entries":[],"sessions":[]},{"runId":"b0779c08-89da-403e-9d7f-6e11ebcffe37","profileId":"node_26_10_0","group":"subpaths","mode":"commonjs","method":"sequential_batch_v2","outcome":"not_applicable","evidenceLevel":"static_only","coverage":{"planned":0,"observed":0,"passed":0,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":0,"failure":null,"entries":[],"sessions":[]},{"runId":"f0107060-b48e-4af1-9709-a6c2c6f573c0","profileId":"bun_1_4_2","group":"root","mode":"esm","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":350.5377730000764,"failure":null,"entries":[{"index":0,"specifier":"argon2","displaySpecifier":"argon2","outcome":"pass","durationMs":11.743454999999999,"resolvedTo":"file:///workspace/node_modules/argon2/argon2.cjs","failure":null}],"sessions":[{"probeId":"14492035-6a00-4688-8cc3-f57cdac08451","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":350.5377730000764}]},{"runId":"20bc2956-2e5f-450c-a8bb-8e78ae485185","profileId":"bun_1_4_2","group":"root","mode":"commonjs","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":473.36461900011636,"failure":null,"entries":[{"index":0,"specifier":"argon2","displaySpecifier":"argon2","outcome":"pass","durationMs":16.450634,"resolvedTo":"/workspace/node_modules/argon2/argon2.cjs","failure":null}],"sessions":[{"probeId":"69086143-df10-464a-8d2f-c439fbc266be","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":473.36461900011636}]},{"runId":"48568019-0ad0-4cca-b94c-a3e0edf45f23","profileId":"bun_1_4_2","group":"subpaths","mode":"esm","method":"sequential_batch_v2","outcome":"not_applicable","evidenceLevel":"static_only","coverage":{"planned":0,"observed":0,"passed":0,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":0,"failure":null,"entries":[],"sessions":[]},{"runId":"55faf7f4-61c5-4f01-90cf-b00ecd350c1a","profileId":"bun_1_4_2","group":"subpaths","mode":"commonjs","method":"sequential_batch_v2","outcome":"not_applicable","evidenceLevel":"static_only","coverage":{"planned":0,"observed":0,"passed":0,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":0,"failure":null,"entries":[],"sessions":[]},{"runId":"30383f8a-06dd-4dce-a09c-6f87be235073","profileId":"deno_2_9_7","group":"root","mode":"esm","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":437.7779459999874,"failure":null,"entries":[{"index":0,"specifier":"argon2","displaySpecifier":"argon2","outcome":"pass","durationMs":14.824449999999999,"resolvedTo":"file:///workspace/node_modules/argon2/argon2.cjs","failure":null}],"sessions":[{"probeId":"98adb83e-c722-4cb6-a49b-9cf3652cd6ba","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":437.7779459999874}]},{"runId":"7a8b8c12-22c8-443c-a40d-7a6dcec71503","profileId":"deno_2_9_7","group":"root","mode":"commonjs","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":591.1324320000131,"failure":null,"entries":[{"index":0,"specifier":"argon2","displaySpecifier":"argon2","outcome":"pass","durationMs":18.541052000000008,"resolvedTo":"/workspace/node_modules/argon2/argon2.cjs","failure":null}],"sessions":[{"probeId":"2245f4bc-35f7-44a2-ac24-a9869bc03d45","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":591.1324320000131}]},{"runId":"d06cb1d8-9a53-4296-9883-242f6e9e6a6c","profileId":"deno_2_9_7","group":"subpaths","mode":"esm","method":"sequential_batch_v2","outcome":"not_applicable","evidenceLevel":"static_only","coverage":{"planned":0,"observed":0,"passed":0,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":0,"failure":null,"entries":[],"sessions":[]},{"runId":"7a8baf68-47f0-44ba-954b-898323e8a709","profileId":"deno_2_9_7","group":"subpaths","mode":"commonjs","method":"sequential_batch_v2","outcome":"not_applicable","evidenceLevel":"static_only","coverage":{"planned":0,"observed":0,"passed":0,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":0,"failure":null,"entries":[],"sessions":[]}],"limitations":["Only installation and loading were observed; functional correctness and package safety are not established.","Subpath batches share module caches and globals; root modes use separate fresh sandboxes.","Package-visible harness observations can be tampered with. They are not adversarial attestation.","Evidence applies to these exact artifacts, dependency snapshot, runtime images and Linux amd64/glibc policy.","Runtime error codes are captured observations and can also be thrown by package code."]}}