{"schemaVersion":1,"reportPath":"/reports/9d84d3e5-1279-4c64-883f-c96c182d388c","status":{"id":"9d84d3e5-1279-4c64-883f-c96c182d388c","scanId":"e6be8309-286f-43cd-a083-9d55698c72d7","invalidatedAt":null,"invalidationReason":null,"replacedBy":null,"snapshotAvailable":true,"policyAllowed":true,"createdAt":"2026-10-09T05:14:51.215Z","observationRevision":0,"previousScanId":null,"previousReportId":null,"current":true},"summary":{"id":"9d84d3e5-1279-4c64-883f-c96c182d388c","scanId":"e6be8309-286f-43cd-a083-9d55698c72d7","artifact":{"name":"@tanstack/react-start","version":"1.168.60","integrity":"sha512-WMOM0Xlh2lPbVlbjYM6uOxOpiaWRPvODm/dwkLsGKq5tjyHOHZmKckJgwlrZl7OQUqFlOZHYj8bKUTgoeg8cUQ==","tarballUrl":"https://registry.npmjs.org/@tanstack/react-start/-/react-start-1.168.60.tgz"},"observedAt":"2026-10-08T20:59:16.217Z","classifiedAt":"2026-10-09T05:14:51.225Z","classifierRevision":"classifier_v2","matrix":{"id":"f4112e34-308e-4c64-bab2-ef0335fffe77","revision":"production_56d463b6f06722afc008ed99fb1a0179","platform":"linux_amd64_glibc","harnessRevision":"load_v2","planRevision":"explicit_exports_v1","policyRevision":"runtime_limits_v2","images":[{"profileId":"node_24_21_0","kind":"node","version":"24.21.0","imageId":"sha256:5023d2ff993649ea7c5d8e2360ba8b8256488ec3cec9b7b3edd4d0261b641778","builtAt":"2026-10-04T15:20:38.392Z","sourceImage":"node:24.21.0-bookworm-slim@sha256:5cbc7caba8c2c0f0bca675d1b61b9f2857e1cf1853c6164ee9dd409501a936e7","baseImage":"gcr.io/distroless/cc-debian13:nonroot@sha256:20afe6a70f2565277b704cc17289cb557f353a3619f6350f52a2317106598df4","supportImage":"node:26.10.0-bookworm-slim@sha256:0a992e1420e2d70611578f1844a6f10a9d11fe6bb535aabf72efe3007f13d79b","platform":"linux_amd64_glibc","recipeRevision":"runtime_image_v1"},{"profileId":"node_26_10_0","kind":"node","version":"26.10.0","imageId":"sha256:6fd2353d7583d6c98e540d32b8c7c6e8b345d3d55056221eb24dd05cfd15f6eb","builtAt":"2026-10-04T15:20:47.161Z","sourceImage":"node:26.10.0-bookworm-slim@sha256:0a992e1420e2d70611578f1844a6f10a9d11fe6bb535aabf72efe3007f13d79b","baseImage":"gcr.io/distroless/cc-debian13:nonroot@sha256:20afe6a70f2565277b704cc17289cb557f353a3619f6350f52a2317106598df4","supportImage":"node:26.10.0-bookworm-slim@sha256:0a992e1420e2d70611578f1844a6f10a9d11fe6bb535aabf72efe3007f13d79b","platform":"linux_amd64_glibc","recipeRevision":"runtime_image_v1"},{"profileId":"bun_1_4_2","kind":"bun","version":"1.4.2","imageId":"sha256:f7ed957f11f06db3be00760147a186e7e66e6a431204d3d591e5a282ef1aadef","builtAt":"2026-10-04T15:21:07.160Z","sourceImage":"oven/bun:1.4.2-debian@sha256:53710ce0f14eef8312521c586a7ae1d9aeab4011840f09f1966073b68fc2e2ab","baseImage":"gcr.io/distroless/cc-debian13:nonroot@sha256:20afe6a70f2565277b704cc17289cb557f353a3619f6350f52a2317106598df4","supportImage":"node:26.10.0-bookworm-slim@sha256:0a992e1420e2d70611578f1844a6f10a9d11fe6bb535aabf72efe3007f13d79b","platform":"linux_amd64_glibc","recipeRevision":"runtime_image_v1"},{"profileId":"deno_2_9_7","kind":"deno","version":"2.9.7","imageId":"sha256:0441484bc07f45de2c9d37971931dba8ece8e3854fb4fb7f004eca8b1aa5263f","builtAt":"2026-10-04T15:21:22.570Z","sourceImage":"denoland/deno:debian-2.9.7@sha256:869d374bdaddda4fde029c492d7219199b0e821c2c53cca5357b3a6f5b9336fc","baseImage":"gcr.io/distroless/cc-debian13:nonroot@sha256:20afe6a70f2565277b704cc17289cb557f353a3619f6350f52a2317106598df4","supportImage":"node:26.10.0-bookworm-slim@sha256:0a992e1420e2d70611578f1844a6f10a9d11fe6bb535aabf72efe3007f13d79b","platform":"linux_amd64_glibc","recipeRevision":"runtime_image_v1"}]},"outcome":"inconclusive","evidenceLevel":"smoke_tested","coverageComplete":true,"limitations":["Only installation and loading were observed; functional correctness and package safety are not established.","Subpath batches share module caches and globals; root modes use separate fresh sandboxes.","Package-visible harness observations can be tampered with. They are not adversarial attestation.","Evidence applies to these exact artifacts, dependency snapshot, runtime images and Linux amd64/glibc policy.","Runtime error codes are captured observations and can also be thrown by package code."],"preparation":{"id":"cc574a9c-6c3c-4c30-ae97-418ab6a497bf","outcome":"pass","failure":null,"profileRevision":"npm_11_19_0_linux_amd64_v2","snapshot":{"id":"a775fbea-0075-4125-9c82-0b511600a1a8","generation":"f563f7df-20a4-4ba6-9e4e-35d32f6184db","lockDigest":"f6402c118b3bd36479242b760987226c0679d4cdfde4bf70089b8d7277a47989","treeDigest":"e593d49598320dff349b2bc971ad0d0f069877e0cf224ff68851d24196d261ba","profileRevision":"npm_11_19_0_linux_amd64_v2","installerImage":"node:24.21.0-bookworm-slim@sha256:5cbc7caba8c2c0f0bca675d1b61b9f2857e1cf1853c6164ee9dd409501a936e7"},"installedCount":98,"omittedOptionalCount":10},"cells":[{"runId":"4c34ef3c-425b-4b0d-b8bf-e140c960e20c","profileId":"node_24_21_0","group":"root","mode":"esm","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":553.0360260009766,"failure":null},{"runId":"5ee08068-689e-44e3-b239-7a6b06d25533","profileId":"node_24_21_0","group":"root","mode":"commonjs","method":"fresh_root_v2","outcome":"not_applicable","evidenceLevel":"static_only","coverage":{"planned":0,"observed":0,"passed":0,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":0,"failure":null},{"runId":"e2d174db-87fc-42bd-8310-7ceea5c53360","profileId":"node_24_21_0","group":"subpaths","mode":"esm","method":"sequential_batch_v2","outcome":"inconclusive","evidenceLevel":"smoke_tested","coverage":{"planned":16,"observed":16,"passed":10,"failed":6,"prerequisiteLimited":2,"interrupted":0,"untested":0,"complete":true},"durationMs":824.5561559796333,"failure":{"classification":"optional_peer_missing","phase":"module_resolution","origin":"prerequisite","retryable":false,"source":"captured_error_code","message":"Cannot find package 'vite' imported from /workspace/node_modules/@tanstack/start-plugin-core/dist/esm/vite/import-protection-plugin/plugin.js","optionalPeer":{"name":"vite","range":">=7.0.0"}}},{"runId":"2e7f1992-e0ab-468c-b7de-bae6f8e745f8","profileId":"node_24_21_0","group":"subpaths","mode":"commonjs","method":"sequential_batch_v2","outcome":"not_applicable","evidenceLevel":"static_only","coverage":{"planned":0,"observed":0,"passed":0,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":0,"failure":null},{"runId":"d4c503fe-870b-4ada-9353-dc98aa7096bc","profileId":"node_26_10_0","group":"root","mode":"esm","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":527.5826980173588,"failure":null},{"runId":"020c6a02-5e3f-4927-988e-9c605434cab6","profileId":"node_26_10_0","group":"root","mode":"commonjs","method":"fresh_root_v2","outcome":"not_applicable","evidenceLevel":"static_only","coverage":{"planned":0,"observed":0,"passed":0,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":0,"failure":null},{"runId":"306ec2ae-67b7-48f8-99eb-173ecf4b764f","profileId":"node_26_10_0","group":"subpaths","mode":"esm","method":"sequential_batch_v2","outcome":"inconclusive","evidenceLevel":"smoke_tested","coverage":{"planned":16,"observed":16,"passed":10,"failed":6,"prerequisiteLimited":2,"interrupted":0,"untested":0,"complete":true},"durationMs":840.5124669969082,"failure":{"classification":"optional_peer_missing","phase":"module_resolution","origin":"prerequisite","retryable":false,"source":"captured_error_code","message":"Cannot find package 'vite' imported from /workspace/node_modules/@tanstack/start-plugin-core/dist/esm/vite/import-protection-plugin/plugin.js","optionalPeer":{"name":"vite","range":">=7.0.0"}}},{"runId":"5d3b4732-c4f2-4451-bd16-9f1b700b2fa6","profileId":"node_26_10_0","group":"subpaths","mode":"commonjs","method":"sequential_batch_v2","outcome":"not_applicable","evidenceLevel":"static_only","coverage":{"planned":0,"observed":0,"passed":0,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":0,"failure":null},{"runId":"99216268-207d-40a8-82ee-c038fe360ac8","profileId":"bun_1_4_2","group":"root","mode":"esm","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":344.14035099744797,"failure":null},{"runId":"9f50276c-e905-478a-93da-a80a8bd21911","profileId":"bun_1_4_2","group":"root","mode":"commonjs","method":"fresh_root_v2","outcome":"not_applicable","evidenceLevel":"static_only","coverage":{"planned":0,"observed":0,"passed":0,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":0,"failure":null},{"runId":"090624b0-d368-4206-bcb2-1013164ee86b","profileId":"bun_1_4_2","group":"subpaths","mode":"esm","method":"sequential_batch_v2","outcome":"partial","evidenceLevel":"smoke_tested","coverage":{"planned":16,"observed":16,"passed":10,"failed":6,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":1226.3020679950714,"failure":{"classification":"esm_import_failed","phase":"module_evaluation","origin":"package","retryable":false,"source":"harness_observation","message":"The runtime reported a loading failure without a captured error message. Its cause is unknown."}},{"runId":"8c6cc79d-87ac-4ab6-a7eb-eefa160b7cb4","profileId":"bun_1_4_2","group":"subpaths","mode":"commonjs","method":"sequential_batch_v2","outcome":"not_applicable","evidenceLevel":"static_only","coverage":{"planned":0,"observed":0,"passed":0,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":0,"failure":null},{"runId":"1fd7c615-4d6e-4ea0-b562-1286c94c5e10","profileId":"deno_2_9_7","group":"root","mode":"esm","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":512.5248540043831,"failure":null},{"runId":"17f84c21-dddd-4c04-a901-05eee415f694","profileId":"deno_2_9_7","group":"root","mode":"commonjs","method":"fresh_root_v2","outcome":"not_applicable","evidenceLevel":"static_only","coverage":{"planned":0,"observed":0,"passed":0,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":0,"failure":null},{"runId":"dcedca41-a462-4016-ace5-53b68fec8570","profileId":"deno_2_9_7","group":"subpaths","mode":"esm","method":"sequential_batch_v2","outcome":"inconclusive","evidenceLevel":"smoke_tested","coverage":{"planned":16,"observed":16,"passed":10,"failed":6,"prerequisiteLimited":2,"interrupted":0,"untested":0,"complete":true},"durationMs":622.1396600008011,"failure":{"classification":"optional_peer_missing","phase":"module_resolution","origin":"prerequisite","retryable":false,"source":"captured_error_code","message":"Could not find package 'vite' from referrer 'file:///workspace/node_modules/@tanstack/start-plugin-core/dist/esm/vite/import-protection-plugin/plugin.js'.","optionalPeer":{"name":"vite","range":">=7.0.0"}}},{"runId":"746b35d0-3cee-493b-9b05-41769df27bfc","profileId":"deno_2_9_7","group":"subpaths","mode":"commonjs","method":"sequential_batch_v2","outcome":"not_applicable","evidenceLevel":"static_only","coverage":{"planned":0,"observed":0,"passed":0,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":0,"failure":null}],"runtimes":[{"profileId":"node_24_21_0","outcome":"inconclusive"},{"profileId":"node_26_10_0","outcome":"inconclusive"},{"profileId":"bun_1_4_2","outcome":"partial"},{"profileId":"deno_2_9_7","outcome":"inconclusive"}],"missingOptionalPeers":[{"name":"@rsbuild/core","range":"^2.0.0"},{"name":"vite","range":">=7.0.0"}],"missingOptionalPeersTruncated":false}}