{"schemaVersion":1,"status":{"id":"9cd8f0df-8d72-42af-93ba-b709afd47b84","scanId":"1f0d41e7-23d4-4d05-9a39-b829433c0501","invalidatedAt":null,"invalidationReason":null,"replacedBy":null,"snapshotAvailable":false,"policyAllowed":true,"createdAt":"2026-10-17T06:43:03.481Z","observationRevision":0,"previousScanId":null,"previousReportId":null,"current":true},"report":{"schemaVersion":1,"id":"9cd8f0df-8d72-42af-93ba-b709afd47b84","scanId":"1f0d41e7-23d4-4d05-9a39-b829433c0501","classifierRevision":"classifier_v3","observedAt":"2026-10-17T06:43:02.993Z","classifiedAt":"2026-10-17T06:43:03.485Z","artifact":{"name":"ofetch","version":"1.5.1","integrity":"sha512-2W4oUZlVaqAPAil6FUg/difl6YhqhUR7x2eZY4bQCko22UXg3hptq9KLQdqFClV+Wu85UX7hNtdGTngi/1BxcA==","tarballUrl":"https://registry.npmjs.org/ofetch/-/ofetch-1.5.1.tgz"},"preparation":{"id":"52cdd19f-35c4-4dd0-8c74-0c2143a59c6a","outcome":"pass","failure":null,"profileRevision":"npm_11_19_0_linux_amd64_v2","snapshot":{"id":"bc2f4d43-d822-4714-a6c0-4af9fb1d6850","generation":"5421846b-8391-4eec-a286-ac2d664ad380","lockDigest":"6d6f38ae49cf49c7af3fe68d52927a9cd5b2a5c04a047a24da1bf1f4ce6aa292","treeDigest":"83b90c3d88b1feeec973a19b758029f46a5bcea22bc32e13f7eaf652b71aa57d","profileRevision":"npm_11_19_0_linux_amd64_v2","installerImage":"node:24.21.0-bookworm-slim@sha256:5cbc7caba8c2c0f0bca675d1b61b9f2857e1cf1853c6164ee9dd409501a936e7"},"installedCount":4,"omittedOptionalCount":0,"staticObservations":{"native":{"count":0,"paths":[],"buildIndicators":[],"prerequisiteProven":false},"declared":{"main":"./dist/node.cjs","type":"module","module":"./dist/index.mjs","exports":{".":{"bun":"./dist/index.mjs","deno":"./dist/index.mjs","node":{"import":{"types":"./dist/node.d.mts","default":"./dist/node.mjs"},"require":{"types":"./dist/node.d.cts","default":"./dist/node.cjs"}},"types":"./dist/index.d.mts","import":{"types":"./dist/index.d.mts","default":"./dist/index.mjs"},"worker":"./dist/index.mjs","browser":"./dist/index.mjs","default":"./dist/index.mjs","netlify":"./dist/index.mjs","require":{"types":"./dist/node.d.cts","default":"./dist/node.cjs"},"workerd":"./dist/index.mjs","wintercg":"./dist/index.mjs","edge-light":"./dist/index.mjs","edge-routine":"./dist/index.mjs","react-native":"./dist/index.mjs"},"./node":{"import":{"types":"./dist/node.d.mts","default":"./dist/node.mjs"},"require":{"types":"./dist/node.d.cts","default":"./dist/node.cjs"}},"./package.json":"./package.json"},"scripts":{"dev":"vitest","lint":"eslint . && prettier -c src test playground examples","play":"jiti playground/index.ts","test":"pnpm lint && vitest run --coverage","build":"unbuild","prepack":"pnpm build","release":"pnpm test && changelogen --release --publish","lint:fix":"eslint --fix . && prettier -w src test playground examples"},"dependencies":{"ufo":"^1.6.1","destr":"^2.0.5","node-fetch-native":"^1.6.7"},"devDependencies":{"h3":"^1.15.4","jiti":"^2.6.1","eslint":"^9.38.0","undici":"^7.16.0","vitest":"^4.0.4","listhen":"^1.9.0","std-env":"^3.10.0","unbuild":"^3.6.1","prettier":"^3.6.2","fetch-blob":"^4.0.0","typescript":"^5.9.3","@types/node":"^24.9.1","changelogen":"^0.6.2","formdata-polyfill":"^4.0.10","eslint-config-unjs":"^0.5.0","@vitest/coverage-v8":"^4.0.4"}},"platform":{"os":true,"cpu":true,"libc":true},"evidenceLevel":"static_only","lifecycleScripts":[]}},"matrix":{"id":"8b9775d8-5acc-4186-a456-b008ad7a2ffa","revision":"production_2db44d825b68aeb5839111e38b0ad23c","platform":"linux_amd64_glibc","harnessRevision":"load_v2","planRevision":"explicit_exports_v1","policyRevision":"runtime_limits_v2","images":[{"profileId":"node_24_21_0","kind":"node","version":"24.21.0","imageId":"sha256:12a6a4db05cc9f4f55fe7e4731983c5476658c748b722cac3332c4bfc986c2f1","builtAt":"2026-10-04T15:20:38.392Z","sourceImage":"node:24.21.0-bookworm-slim@sha256:5cbc7caba8c2c0f0bca675d1b61b9f2857e1cf1853c6164ee9dd409501a936e7","baseImage":"gcr.io/distroless/cc-debian13:nonroot@sha256:20afe6a70f2565277b704cc17289cb557f353a3619f6350f52a2317106598df4","supportImage":"node:26.10.0-bookworm-slim@sha256:0a992e1420e2d70611578f1844a6f10a9d11fe6bb535aabf72efe3007f13d79b","platform":"linux_amd64_glibc","recipeRevision":"runtime_image_v1"},{"profileId":"node_26_10_0","kind":"node","version":"26.10.0","imageId":"sha256:8cef3b37b8edb5af9da80cb7416bd2c8b35b87fea1bc72c9abbb204ee000bd9c","builtAt":"2026-10-04T15:20:47.161Z","sourceImage":"node:26.10.0-bookworm-slim@sha256:0a992e1420e2d70611578f1844a6f10a9d11fe6bb535aabf72efe3007f13d79b","baseImage":"gcr.io/distroless/cc-debian13:nonroot@sha256:20afe6a70f2565277b704cc17289cb557f353a3619f6350f52a2317106598df4","supportImage":"node:26.10.0-bookworm-slim@sha256:0a992e1420e2d70611578f1844a6f10a9d11fe6bb535aabf72efe3007f13d79b","platform":"linux_amd64_glibc","recipeRevision":"runtime_image_v1"},{"profileId":"bun_1_4_2","kind":"bun","version":"1.4.2","imageId":"sha256:6d19a3cc65d5015ba20193b7610af27ad603eed4ea29caf4dd4ccc04ad5ca7ef","builtAt":"2026-10-04T15:21:07.160Z","sourceImage":"oven/bun:1.4.2-debian@sha256:53710ce0f14eef8312521c586a7ae1d9aeab4011840f09f1966073b68fc2e2ab","baseImage":"gcr.io/distroless/cc-debian13:nonroot@sha256:20afe6a70f2565277b704cc17289cb557f353a3619f6350f52a2317106598df4","supportImage":"node:26.10.0-bookworm-slim@sha256:0a992e1420e2d70611578f1844a6f10a9d11fe6bb535aabf72efe3007f13d79b","platform":"linux_amd64_glibc","recipeRevision":"runtime_image_v1"},{"profileId":"deno_2_9_7","kind":"deno","version":"2.9.7","imageId":"sha256:1a5c5f412e04bff71a674b122f4216fac988b0fddc9d36be588224490adc292e","builtAt":"2026-10-04T15:21:22.570Z","sourceImage":"denoland/deno:debian-2.9.7@sha256:869d374bdaddda4fde029c492d7219199b0e821c2c53cca5357b3a6f5b9336fc","baseImage":"gcr.io/distroless/cc-debian13:nonroot@sha256:20afe6a70f2565277b704cc17289cb557f353a3619f6350f52a2317106598df4","supportImage":"node:26.10.0-bookworm-slim@sha256:0a992e1420e2d70611578f1844a6f10a9d11fe6bb535aabf72efe3007f13d79b","platform":"linux_amd64_glibc","recipeRevision":"runtime_image_v1"}]},"omissions":{"counts":{"pattern":0,"non_executable":1,"not_exported":0,"invalid_subpath":0,"coverage_limit":0},"samples":[{"subpath":"./package.json","reason":"non_executable"}]},"outcome":"pass","evidenceLevel":"smoke_tested","coverageComplete":true,"cells":[{"runId":"aa400a81-73a6-4173-9f2e-b5e2fafe63b3","profileId":"node_24_21_0","group":"root","mode":"esm","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"isolationPassed":0,"isolationUnconfirmed":0,"interrupted":0,"untested":0,"complete":true},"durationMs":424.73034900426865,"failure":null,"entries":[{"index":0,"specifier":"ofetch","displaySpecifier":"ofetch","outcome":"pass","durationMs":88.72425199999999,"resolvedTo":"file:///workspace/node_modules/ofetch/dist/node.mjs","failure":null}],"sessions":[{"probeId":"f8c1558a-009a-4414-aba6-010797133af0","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":424.73034900426865}]},{"runId":"d87416cb-6a02-4450-b13f-5fced787c455","profileId":"node_24_21_0","group":"root","mode":"commonjs","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"isolationPassed":0,"isolationUnconfirmed":0,"interrupted":0,"untested":0,"complete":true},"durationMs":471.11186599731445,"failure":null,"entries":[{"index":0,"specifier":"ofetch","displaySpecifier":"ofetch","outcome":"pass","durationMs":30.138784,"resolvedTo":"/workspace/node_modules/ofetch/dist/node.cjs","failure":null}],"sessions":[{"probeId":"6951949c-a97a-4fd2-98e4-19e4cd3eead8","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":471.11186599731445}]},{"runId":"6827b08d-5391-4769-b5c3-881a2ba5b80a","profileId":"node_24_21_0","group":"subpaths","mode":"esm","method":"sequential_batch_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"isolationPassed":0,"isolationUnconfirmed":0,"interrupted":0,"untested":0,"complete":true},"durationMs":447.85454899072647,"failure":null,"entries":[{"index":0,"specifier":"ofetch/node","displaySpecifier":"ofetch/node","outcome":"pass","durationMs":60.412331,"resolvedTo":"file:///workspace/node_modules/ofetch/dist/node.mjs","failure":null}],"sessions":[{"probeId":"80dce39e-c559-4eee-868e-8427b7db6180","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":447.85454899072647}]},{"runId":"61adf9b1-590a-4249-a165-8becfeb2749b","profileId":"node_24_21_0","group":"subpaths","mode":"commonjs","method":"sequential_batch_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"isolationPassed":0,"isolationUnconfirmed":0,"interrupted":0,"untested":0,"complete":true},"durationMs":469.1730269789696,"failure":null,"entries":[{"index":0,"specifier":"ofetch/node","displaySpecifier":"ofetch/node","outcome":"pass","durationMs":31.530428,"resolvedTo":"/workspace/node_modules/ofetch/dist/node.cjs","failure":null}],"sessions":[{"probeId":"e0472ae6-ff33-4eba-b900-5d5f1465f4a6","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":469.1730269789696}]},{"runId":"df635929-89cd-46b2-b352-ba997b89777b","profileId":"node_26_10_0","group":"root","mode":"esm","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"isolationPassed":0,"isolationUnconfirmed":0,"interrupted":0,"untested":0,"complete":true},"durationMs":459.69459599256516,"failure":null,"entries":[{"index":0,"specifier":"ofetch","displaySpecifier":"ofetch","outcome":"pass","durationMs":37.097744000000006,"resolvedTo":"file:///workspace/node_modules/ofetch/dist/node.mjs","failure":null}],"sessions":[{"probeId":"18297934-8b01-49d6-9824-96ca8aa9c0cf","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":459.69459599256516}]},{"runId":"01431d73-e148-47fe-ba84-2d5c6f0b956b","profileId":"node_26_10_0","group":"root","mode":"commonjs","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"isolationPassed":0,"isolationUnconfirmed":0,"interrupted":0,"untested":0,"complete":true},"durationMs":444.3872430026531,"failure":null,"entries":[{"index":0,"specifier":"ofetch","displaySpecifier":"ofetch","outcome":"pass","durationMs":90.036306,"resolvedTo":"/workspace/node_modules/ofetch/dist/node.cjs","failure":null}],"sessions":[{"probeId":"05600d81-c488-4cd0-a6b1-c23fb95074ad","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":444.3872430026531}]},{"runId":"27de4c11-bf9d-4027-8281-c38987c9bf1c","profileId":"node_26_10_0","group":"subpaths","mode":"esm","method":"sequential_batch_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"isolationPassed":0,"isolationUnconfirmed":0,"interrupted":0,"untested":0,"complete":true},"durationMs":440.3036629855633,"failure":null,"entries":[{"index":0,"specifier":"ofetch/node","displaySpecifier":"ofetch/node","outcome":"pass","durationMs":42.287192,"resolvedTo":"file:///workspace/node_modules/ofetch/dist/node.mjs","failure":null}],"sessions":[{"probeId":"f096c606-db1a-4a01-aedf-3d86ca22f209","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":440.3036629855633}]},{"runId":"cc5babe1-ec59-4e8e-a99c-a1415bfc2ad5","profileId":"node_26_10_0","group":"subpaths","mode":"commonjs","method":"sequential_batch_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"isolationPassed":0,"isolationUnconfirmed":0,"interrupted":0,"untested":0,"complete":true},"durationMs":429.5506419837475,"failure":null,"entries":[{"index":0,"specifier":"ofetch/node","displaySpecifier":"ofetch/node","outcome":"pass","durationMs":41.198042,"resolvedTo":"/workspace/node_modules/ofetch/dist/node.cjs","failure":null}],"sessions":[{"probeId":"06b75c8c-65cf-415c-88e4-4998b5f06fa0","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":429.5506419837475}]},{"runId":"ecad0a0e-9191-496f-913e-0e3d50a730c0","profileId":"bun_1_4_2","group":"root","mode":"esm","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"isolationPassed":0,"isolationUnconfirmed":0,"interrupted":0,"untested":0,"complete":true},"durationMs":350.24736401438713,"failure":null,"entries":[{"index":0,"specifier":"ofetch","displaySpecifier":"ofetch","outcome":"pass","durationMs":5.066310999999999,"resolvedTo":"file:///workspace/node_modules/ofetch/dist/index.mjs","failure":null}],"sessions":[{"probeId":"a959ae4c-cb5a-4158-b9d7-1137c48f767d","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":350.24736401438713}]},{"runId":"2abe4d8c-c784-4a9c-8135-c1cd31dc0c27","profileId":"bun_1_4_2","group":"root","mode":"commonjs","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"isolationPassed":0,"isolationUnconfirmed":0,"interrupted":0,"untested":0,"complete":true},"durationMs":326.3838030099869,"failure":null,"entries":[{"index":0,"specifier":"ofetch","displaySpecifier":"ofetch","outcome":"pass","durationMs":4.08137,"resolvedTo":"/workspace/node_modules/ofetch/dist/index.mjs","failure":null}],"sessions":[{"probeId":"fb673820-47a6-4751-9166-d8c78ff0b13a","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":326.3838030099869}]},{"runId":"cef901a4-3e6c-4e5e-8e53-10a40c71a77e","profileId":"bun_1_4_2","group":"subpaths","mode":"esm","method":"sequential_batch_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"isolationPassed":0,"isolationUnconfirmed":0,"interrupted":0,"untested":0,"complete":true},"durationMs":362.83544501662254,"failure":null,"entries":[{"index":0,"specifier":"ofetch/node","displaySpecifier":"ofetch/node","outcome":"pass","durationMs":13.545886,"resolvedTo":"file:///workspace/node_modules/ofetch/dist/node.mjs","failure":null}],"sessions":[{"probeId":"3cc839fa-2307-46f7-a813-63872379bf3e","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":362.83544501662254}]},{"runId":"19d5a952-8304-449d-bb51-e64b853bbc53","profileId":"bun_1_4_2","group":"subpaths","mode":"commonjs","method":"sequential_batch_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"isolationPassed":0,"isolationUnconfirmed":0,"interrupted":0,"untested":0,"complete":true},"durationMs":423.6178169846535,"failure":null,"entries":[{"index":0,"specifier":"ofetch/node","displaySpecifier":"ofetch/node","outcome":"pass","durationMs":58.369901999999996,"resolvedTo":"/workspace/node_modules/ofetch/dist/node.cjs","failure":null}],"sessions":[{"probeId":"7536b742-116b-4d22-9d22-b103a135abf0","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":423.6178169846535}]},{"runId":"a7efbbb8-a0fc-4128-bd73-4c87ddd62c00","profileId":"deno_2_9_7","group":"root","mode":"esm","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"isolationPassed":0,"isolationUnconfirmed":0,"interrupted":0,"untested":0,"complete":true},"durationMs":430.99284398555756,"failure":null,"entries":[{"index":0,"specifier":"ofetch","displaySpecifier":"ofetch","outcome":"pass","durationMs":4.854525000000002,"resolvedTo":"file:///workspace/node_modules/ofetch/dist/index.mjs","failure":null}],"sessions":[{"probeId":"8c68c238-9d86-4f20-b06b-06c0a30d22fa","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":430.99284398555756}]},{"runId":"5e46255d-0a21-4ebc-a641-cab8f467db87","profileId":"deno_2_9_7","group":"root","mode":"commonjs","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"isolationPassed":0,"isolationUnconfirmed":0,"interrupted":0,"untested":0,"complete":true},"durationMs":435.465400993824,"failure":null,"entries":[{"index":0,"specifier":"ofetch","displaySpecifier":"ofetch","outcome":"pass","durationMs":25.555321000000006,"resolvedTo":"/workspace/node_modules/ofetch/dist/node.cjs","failure":null}],"sessions":[{"probeId":"b133c968-f4ca-40f4-b9e3-9483ddab9c11","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":435.465400993824}]},{"runId":"79b3d3d7-dd6a-48d1-86b5-e583fc46c950","profileId":"deno_2_9_7","group":"subpaths","mode":"esm","method":"sequential_batch_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"isolationPassed":0,"isolationUnconfirmed":0,"interrupted":0,"untested":0,"complete":true},"durationMs":415.9239180088043,"failure":null,"entries":[{"index":0,"specifier":"ofetch/node","displaySpecifier":"ofetch/node","outcome":"pass","durationMs":17.426380999999992,"resolvedTo":"file:///workspace/node_modules/ofetch/dist/node.mjs","failure":null}],"sessions":[{"probeId":"0af2e7b7-6fc7-4f30-b8c5-1640a6e4ae60","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":415.9239180088043}]},{"runId":"4f2e1262-0dab-4c17-8ab0-c0648c228935","profileId":"deno_2_9_7","group":"subpaths","mode":"commonjs","method":"sequential_batch_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"isolationPassed":0,"isolationUnconfirmed":0,"interrupted":0,"untested":0,"complete":true},"durationMs":465.77642998099327,"failure":null,"entries":[{"index":0,"specifier":"ofetch/node","displaySpecifier":"ofetch/node","outcome":"pass","durationMs":28.969463000000005,"resolvedTo":"/workspace/node_modules/ofetch/dist/node.cjs","failure":null}],"sessions":[{"probeId":"93116c41-1fe7-4700-b496-a4cd218780d4","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":465.77642998099327}]}],"limitations":["Only installation and loading were observed; functional correctness and package safety are not established.","Subpath batches share module caches and globals; root modes use separate fresh sandboxes.","Package-visible harness observations can be tampered with. They are not adversarial attestation.","Evidence applies to these exact artifacts, dependency snapshot, runtime images and Linux amd64/glibc policy.","Runtime error codes are captured observations and can also be thrown by package code."]}}