{"schemaVersion":1,"status":{"id":"9e83887f-cf4b-4598-a43e-51890f7c2cfe","scanId":"40b8b192-cc0b-4e29-881d-3fe6ac64537f","invalidatedAt":null,"invalidationReason":null,"replacedBy":null,"snapshotAvailable":true,"policyAllowed":true,"createdAt":"2026-10-09T15:56:25.929Z","observationRevision":0,"previousScanId":null,"previousReportId":null,"current":true},"report":{"schemaVersion":1,"id":"9e83887f-cf4b-4598-a43e-51890f7c2cfe","scanId":"40b8b192-cc0b-4e29-881d-3fe6ac64537f","classifierRevision":"classifier_v2","observedAt":"2026-10-09T15:56:24.205Z","classifiedAt":"2026-10-09T15:56:25.931Z","artifact":{"name":"postgres","version":"3.4.9","integrity":"sha512-GD3qdB0x1z9xgFI6cdRD6xu2Sp2WCOEoe3mtnyB5Ee0XrrL5Pe+e4CCnJrRMnL1zYtRDZmQQVbvOttLnKDLnaw==","tarballUrl":"https://registry.npmjs.org/postgres/-/postgres-3.4.9.tgz"},"preparation":{"id":"fada9d88-7934-4ec7-ace0-db6ef2faa69c","outcome":"pass","failure":null,"profileRevision":"npm_11_19_0_linux_amd64_v2","snapshot":{"id":"28f720f9-26f4-40a6-b1ef-e10aab0ee5a0","generation":"deec64a2-2118-4b21-bb4d-14fb1a0f1072","lockDigest":"8bf25ea91e7742f39a9367f5ea82f2c7130037a98974803c49858972642af820","treeDigest":"8fdcb048a44baabf63f0fdb9d810165ee278fadf69701b15dae9c01eccfa5716","profileRevision":"npm_11_19_0_linux_amd64_v2","installerImage":"node:24.21.0-bookworm-slim@sha256:5cbc7caba8c2c0f0bca675d1b61b9f2857e1cf1853c6164ee9dd409501a936e7"},"installedCount":1,"omittedOptionalCount":0,"staticObservations":{"native":{"count":0,"paths":[],"buildIndicators":[],"prerequisiteProven":false},"declared":{"main":"cjs/src/index.js","type":"module","module":"src/index.js","engines":{"node":">=12"},"exports":{"bun":"./src/index.js","types":"./types/index.d.ts","import":"./src/index.js","default":"./cjs/src/index.js","workerd":"./cf/src/index.js"},"scripts":{"lint":"eslint src && eslint tests","test":"npm run test:esm && npm run test:cjs && npm run test:deno","build":"npm run build:cjs && npm run build:deno && npm run build:cf","prepare":"npm run build","build:cf":"node transpile.cf.js","test:cjs":"npm run build:cjs && cd cjs/tests && node index.js && cd ../../","test:esm":"node tests/index.js","build:cjs":"node transpile.cjs","test:deno":"npm run build:deno && cd deno/tests && deno run --no-lock --allow-all --unsafely-ignore-certificate-errors index.js && cd ../../","build:deno":"node transpile.deno.js","prepublishOnly":"npm run lint"}},"platform":{"os":true,"cpu":true,"libc":true},"evidenceLevel":"static_only","lifecycleScripts":["prepare"]}},"matrix":{"id":"bfab88d7-3f4a-41b5-97a9-5aafd5bda511","revision":"production_ab51508deb208994caf81cb80f14b800","platform":"linux_amd64_glibc","harnessRevision":"load_v2","planRevision":"explicit_exports_v1","policyRevision":"runtime_limits_v2","images":[{"profileId":"node_24_21_0","kind":"node","version":"24.21.0","imageId":"sha256:f2fcbb4dfbd6d5f57f4e43de97e70182d9982ac7cc0cc063dfff2cf1759a411d","builtAt":"2026-10-04T15:20:38.392Z","sourceImage":"node:24.21.0-bookworm-slim@sha256:5cbc7caba8c2c0f0bca675d1b61b9f2857e1cf1853c6164ee9dd409501a936e7","baseImage":"gcr.io/distroless/cc-debian13:nonroot@sha256:20afe6a70f2565277b704cc17289cb557f353a3619f6350f52a2317106598df4","supportImage":"node:26.10.0-bookworm-slim@sha256:0a992e1420e2d70611578f1844a6f10a9d11fe6bb535aabf72efe3007f13d79b","platform":"linux_amd64_glibc","recipeRevision":"runtime_image_v1"},{"profileId":"node_26_10_0","kind":"node","version":"26.10.0","imageId":"sha256:9c1c93cc35d1408d26a61c4efccbde37c35425e362a2e723b885c3333d2be073","builtAt":"2026-10-04T15:20:47.161Z","sourceImage":"node:26.10.0-bookworm-slim@sha256:0a992e1420e2d70611578f1844a6f10a9d11fe6bb535aabf72efe3007f13d79b","baseImage":"gcr.io/distroless/cc-debian13:nonroot@sha256:20afe6a70f2565277b704cc17289cb557f353a3619f6350f52a2317106598df4","supportImage":"node:26.10.0-bookworm-slim@sha256:0a992e1420e2d70611578f1844a6f10a9d11fe6bb535aabf72efe3007f13d79b","platform":"linux_amd64_glibc","recipeRevision":"runtime_image_v1"},{"profileId":"bun_1_4_2","kind":"bun","version":"1.4.2","imageId":"sha256:2343363679fb92d59a395ff081b783b5514f06295b1bc6d61baaeef17e793789","builtAt":"2026-10-04T15:21:07.160Z","sourceImage":"oven/bun:1.4.2-debian@sha256:53710ce0f14eef8312521c586a7ae1d9aeab4011840f09f1966073b68fc2e2ab","baseImage":"gcr.io/distroless/cc-debian13:nonroot@sha256:20afe6a70f2565277b704cc17289cb557f353a3619f6350f52a2317106598df4","supportImage":"node:26.10.0-bookworm-slim@sha256:0a992e1420e2d70611578f1844a6f10a9d11fe6bb535aabf72efe3007f13d79b","platform":"linux_amd64_glibc","recipeRevision":"runtime_image_v1"},{"profileId":"deno_2_9_7","kind":"deno","version":"2.9.7","imageId":"sha256:4292bb23555f98fb9dfc30fb447daa1c301686d89264fd8643ccb86bc0d53c29","builtAt":"2026-10-04T15:21:22.570Z","sourceImage":"denoland/deno:debian-2.9.7@sha256:869d374bdaddda4fde029c492d7219199b0e821c2c53cca5357b3a6f5b9336fc","baseImage":"gcr.io/distroless/cc-debian13:nonroot@sha256:20afe6a70f2565277b704cc17289cb557f353a3619f6350f52a2317106598df4","supportImage":"node:26.10.0-bookworm-slim@sha256:0a992e1420e2d70611578f1844a6f10a9d11fe6bb535aabf72efe3007f13d79b","platform":"linux_amd64_glibc","recipeRevision":"runtime_image_v1"}]},"omissions":{"counts":{"pattern":0,"non_executable":0,"not_exported":0,"invalid_subpath":0,"coverage_limit":0},"samples":[]},"outcome":"pass","evidenceLevel":"smoke_tested","coverageComplete":true,"cells":[{"runId":"f493bf3e-0084-4459-8b26-8eb5f75d2dab","profileId":"node_24_21_0","group":"root","mode":"esm","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":338.48252799990587,"failure":null,"entries":[{"index":0,"specifier":"postgres","displaySpecifier":"postgres","outcome":"pass","durationMs":15.844171999999997,"resolvedTo":"file:///workspace/node_modules/postgres/src/index.js","failure":null}],"sessions":[{"probeId":"0f3c89da-e7fd-4cf5-bb38-b9b44478ea47","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":338.48252799990587}]},{"runId":"5c182ff8-cf4d-4609-bd03-8ecb65bc8b51","profileId":"node_24_21_0","group":"root","mode":"commonjs","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":365.9697789999191,"failure":null,"entries":[{"index":0,"specifier":"postgres","displaySpecifier":"postgres","outcome":"pass","durationMs":12.824165,"resolvedTo":"/workspace/node_modules/postgres/cjs/src/index.js","failure":null}],"sessions":[{"probeId":"1205ed66-bd0c-4bc3-9783-e58af93ed8e9","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":365.9697789999191}]},{"runId":"dfede67b-cfc9-43bf-8114-51c4a7d02eb6","profileId":"node_24_21_0","group":"subpaths","mode":"esm","method":"sequential_batch_v2","outcome":"not_applicable","evidenceLevel":"static_only","coverage":{"planned":0,"observed":0,"passed":0,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":0,"failure":null,"entries":[],"sessions":[]},{"runId":"8f53c3ef-9920-4f52-ba73-0c8d2844e33e","profileId":"node_24_21_0","group":"subpaths","mode":"commonjs","method":"sequential_batch_v2","outcome":"not_applicable","evidenceLevel":"static_only","coverage":{"planned":0,"observed":0,"passed":0,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":0,"failure":null,"entries":[],"sessions":[]},{"runId":"e25cfe49-939f-4883-9cc1-c371c0f07ed4","profileId":"node_26_10_0","group":"root","mode":"esm","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":342.20986799988896,"failure":null,"entries":[{"index":0,"specifier":"postgres","displaySpecifier":"postgres","outcome":"pass","durationMs":40.781321000000005,"resolvedTo":"file:///workspace/node_modules/postgres/src/index.js","failure":null}],"sessions":[{"probeId":"75a6b9a2-7479-46e0-b300-9383c78d6f70","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":342.20986799988896}]},{"runId":"8703b6f4-58c9-4d6c-8858-d480ec0e3237","profileId":"node_26_10_0","group":"root","mode":"commonjs","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":304.51984500000253,"failure":null,"entries":[{"index":0,"specifier":"postgres","displaySpecifier":"postgres","outcome":"pass","durationMs":17.471152,"resolvedTo":"/workspace/node_modules/postgres/cjs/src/index.js","failure":null}],"sessions":[{"probeId":"c5460191-d7f2-44ce-b1d5-a361c38c91dd","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":304.51984500000253}]},{"runId":"afead578-0abb-4edf-aba6-e9aff9ff473f","profileId":"node_26_10_0","group":"subpaths","mode":"esm","method":"sequential_batch_v2","outcome":"not_applicable","evidenceLevel":"static_only","coverage":{"planned":0,"observed":0,"passed":0,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":0,"failure":null,"entries":[],"sessions":[]},{"runId":"793a11cc-00bd-47a7-bc05-e4b8c05ba287","profileId":"node_26_10_0","group":"subpaths","mode":"commonjs","method":"sequential_batch_v2","outcome":"not_applicable","evidenceLevel":"static_only","coverage":{"planned":0,"observed":0,"passed":0,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":0,"failure":null,"entries":[],"sessions":[]},{"runId":"dee84508-1ed8-4a7c-9214-f2790bdb43d4","profileId":"bun_1_4_2","group":"root","mode":"esm","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":375.5160189999733,"failure":null,"entries":[{"index":0,"specifier":"postgres","displaySpecifier":"postgres","outcome":"pass","durationMs":15.025395999999999,"resolvedTo":"file:///workspace/node_modules/postgres/src/index.js","failure":null}],"sessions":[{"probeId":"88c593d4-ee4c-4339-8225-e9d2d46b316e","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":375.5160189999733}]},{"runId":"47953b1b-dfa0-42b1-a608-b9c002464205","profileId":"bun_1_4_2","group":"root","mode":"commonjs","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":335.3962199999951,"failure":null,"entries":[{"index":0,"specifier":"postgres","displaySpecifier":"postgres","outcome":"pass","durationMs":16.425468000000002,"resolvedTo":"/workspace/node_modules/postgres/src/index.js","failure":null}],"sessions":[{"probeId":"836f947a-7ff1-4328-84cc-38e87ac93e10","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":335.3962199999951}]},{"runId":"8c6d5e5a-8aca-4131-a750-6cb0cb74a8e0","profileId":"bun_1_4_2","group":"subpaths","mode":"esm","method":"sequential_batch_v2","outcome":"not_applicable","evidenceLevel":"static_only","coverage":{"planned":0,"observed":0,"passed":0,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":0,"failure":null,"entries":[],"sessions":[]},{"runId":"eb1024c1-7172-4445-be19-956417029c03","profileId":"bun_1_4_2","group":"subpaths","mode":"commonjs","method":"sequential_batch_v2","outcome":"not_applicable","evidenceLevel":"static_only","coverage":{"planned":0,"observed":0,"passed":0,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":0,"failure":null,"entries":[],"sessions":[]},{"runId":"662b591e-f9e4-4617-bb02-c991940e3b89","profileId":"deno_2_9_7","group":"root","mode":"esm","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":414.2372679999098,"failure":null,"entries":[{"index":0,"specifier":"postgres","displaySpecifier":"postgres","outcome":"pass","durationMs":17.489855000000006,"resolvedTo":"file:///workspace/node_modules/postgres/src/index.js","failure":null}],"sessions":[{"probeId":"a53f96f3-6ab0-47b8-a1bf-51e011bbaf61","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":414.2372679999098}]},{"runId":"773ad8a5-366f-48cc-82bb-da0cb6cf1e90","profileId":"deno_2_9_7","group":"root","mode":"commonjs","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":441.81617200002074,"failure":null,"entries":[{"index":0,"specifier":"postgres","displaySpecifier":"postgres","outcome":"pass","durationMs":28.156904999999995,"resolvedTo":"/workspace/node_modules/postgres/cjs/src/index.js","failure":null}],"sessions":[{"probeId":"1a03629d-1421-4d10-850b-1643342975ca","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":441.81617200002074}]},{"runId":"f62764df-6c04-4826-a0e4-be6db8a300d3","profileId":"deno_2_9_7","group":"subpaths","mode":"esm","method":"sequential_batch_v2","outcome":"not_applicable","evidenceLevel":"static_only","coverage":{"planned":0,"observed":0,"passed":0,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":0,"failure":null,"entries":[],"sessions":[]},{"runId":"80ed3766-b9e4-41c1-9149-5cbe6ce11d84","profileId":"deno_2_9_7","group":"subpaths","mode":"commonjs","method":"sequential_batch_v2","outcome":"not_applicable","evidenceLevel":"static_only","coverage":{"planned":0,"observed":0,"passed":0,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":0,"failure":null,"entries":[],"sessions":[]}],"limitations":["Only installation and loading were observed; functional correctness and package safety are not established.","Subpath batches share module caches and globals; root modes use separate fresh sandboxes.","Package-visible harness observations can be tampered with. They are not adversarial attestation.","Evidence applies to these exact artifacts, dependency snapshot, runtime images and Linux amd64/glibc policy.","Runtime error codes are captured observations and can also be thrown by package code."]}}