{"schemaVersion":1,"status":{"id":"a533c962-bb7e-4577-98c9-6351823f599f","scanId":"bfecf63b-3c8e-4af0-9c99-4e71fe45361a","invalidatedAt":null,"invalidationReason":null,"replacedBy":null,"snapshotAvailable":true,"policyAllowed":true,"createdAt":"2026-10-09T14:55:08.438Z","observationRevision":0,"previousScanId":null,"previousReportId":null,"current":true},"report":{"schemaVersion":1,"id":"a533c962-bb7e-4577-98c9-6351823f599f","scanId":"bfecf63b-3c8e-4af0-9c99-4e71fe45361a","classifierRevision":"classifier_v2","observedAt":"2026-10-09T14:55:07.917Z","classifiedAt":"2026-10-09T14:55:08.443Z","artifact":{"name":"stripe","version":"23.0.0","integrity":"sha512-MDE2A5ZVVluYURORaZEVghSmnLJc3w6aHAlZSxDQMsOjOb3V0O6ro/CiaeFlJS4N7uIVmsg98ocRsPmUK6YfyA==","tarballUrl":"https://registry.npmjs.org/stripe/-/stripe-23.0.0.tgz"},"preparation":{"id":"1cb412da-8ce3-412d-978f-d0acb3e7add4","outcome":"pass","failure":null,"profileRevision":"npm_11_19_0_linux_amd64_v2","snapshot":{"id":"e351e552-cf0d-4394-9171-4bda315b8d43","generation":"600488c2-df07-482d-8603-f4e6ae0f8395","lockDigest":"2744136808e7ba5d2e9ea2743e5a7245526e374dd06007d0be8db099470ed565","treeDigest":"e3dc4cf71d9ef3e7703881a2220488799d879a7a9561dd138f9bda5499282494","profileRevision":"npm_11_19_0_linux_amd64_v2","installerImage":"node:24.21.0-bookworm-slim@sha256:5cbc7caba8c2c0f0bca675d1b61b9f2857e1cf1853c6164ee9dd409501a936e7"},"installedCount":1,"omittedOptionalCount":0,"staticObservations":{"native":{"count":0,"paths":[],"buildIndicators":[],"prerequisiteProven":false},"declared":{"main":"cjs/stripe.cjs.node.js","engines":{"node":">=20"},"exports":{"bun":{"import":"./esm/stripe.esm.worker.js","require":"./cjs/stripe.cjs.worker.js"},"deno":{"import":"./esm/stripe.esm.worker.js","require":"./cjs/stripe.cjs.worker.js"},"worker":{"import":"./esm/stripe.esm.worker.js","require":"./cjs/stripe.cjs.worker.js"},"browser":{"import":"./esm/stripe.esm.worker.js","require":"./cjs/stripe.cjs.worker.js"},"default":{"import":{"types":"./esm/stripe.esm.node.d.ts","default":"./esm/stripe.esm.node.js"},"require":{"types":"./cjs/stripe.cjs.node.d.ts","default":"./cjs/stripe.cjs.node.js"}},"workerd":{"import":"./esm/stripe.esm.worker.js","require":"./cjs/stripe.cjs.worker.js"},"extensibility":{"import":"./esm/stripe.esm.extensibility.js","require":"./cjs/stripe.cjs.extensibility.js"}},"scripts":{"test":"tsc -p tsconfig.cjs.json && mocha","prepack":"just install && just build"},"dependencies":{},"devDependencies":{"nyc":"^15.1.0","chai":"^4.3.6","nock":"^14.0.17","mocha":"^8.4.0","eslint":"^7.32.0","ts-node":"^10.9.1","prettier":"^1.16.4","node-fetch":"^2.6.7","typescript":"^4.9.4","@types/chai":"^4.3.4","@types/node":"~22","@types/mocha":"^10.0.1","undici-types":"^7.8.0","chai-as-promised":"~7.1.1","eslint-plugin-import":"^2.27.5","mocha-junit-reporter":"^2.1.0","eslint-config-prettier":"^8.5.0","eslint-plugin-prettier":"^3.4.1","@types/chai-as-promised":"^7.1.5","@typescript-eslint/parser":"^4.33.0","eslint-plugin-chai-friendly":"^0.7.2","@typescript-eslint/eslint-plugin":"^4.33.0"},"peerDependencies":{"@types/node":">=20"},"peerDependenciesMeta":{"@types/node":{"optional":true}}},"platform":{"os":true,"cpu":true,"libc":true},"evidenceLevel":"static_only","lifecycleScripts":[]}},"matrix":{"id":"bfab88d7-3f4a-41b5-97a9-5aafd5bda511","revision":"production_ab51508deb208994caf81cb80f14b800","platform":"linux_amd64_glibc","harnessRevision":"load_v2","planRevision":"explicit_exports_v1","policyRevision":"runtime_limits_v2","images":[{"profileId":"node_24_21_0","kind":"node","version":"24.21.0","imageId":"sha256:f2fcbb4dfbd6d5f57f4e43de97e70182d9982ac7cc0cc063dfff2cf1759a411d","builtAt":"2026-10-04T15:20:38.392Z","sourceImage":"node:24.21.0-bookworm-slim@sha256:5cbc7caba8c2c0f0bca675d1b61b9f2857e1cf1853c6164ee9dd409501a936e7","baseImage":"gcr.io/distroless/cc-debian13:nonroot@sha256:20afe6a70f2565277b704cc17289cb557f353a3619f6350f52a2317106598df4","supportImage":"node:26.10.0-bookworm-slim@sha256:0a992e1420e2d70611578f1844a6f10a9d11fe6bb535aabf72efe3007f13d79b","platform":"linux_amd64_glibc","recipeRevision":"runtime_image_v1"},{"profileId":"node_26_10_0","kind":"node","version":"26.10.0","imageId":"sha256:9c1c93cc35d1408d26a61c4efccbde37c35425e362a2e723b885c3333d2be073","builtAt":"2026-10-04T15:20:47.161Z","sourceImage":"node:26.10.0-bookworm-slim@sha256:0a992e1420e2d70611578f1844a6f10a9d11fe6bb535aabf72efe3007f13d79b","baseImage":"gcr.io/distroless/cc-debian13:nonroot@sha256:20afe6a70f2565277b704cc17289cb557f353a3619f6350f52a2317106598df4","supportImage":"node:26.10.0-bookworm-slim@sha256:0a992e1420e2d70611578f1844a6f10a9d11fe6bb535aabf72efe3007f13d79b","platform":"linux_amd64_glibc","recipeRevision":"runtime_image_v1"},{"profileId":"bun_1_4_2","kind":"bun","version":"1.4.2","imageId":"sha256:2343363679fb92d59a395ff081b783b5514f06295b1bc6d61baaeef17e793789","builtAt":"2026-10-04T15:21:07.160Z","sourceImage":"oven/bun:1.4.2-debian@sha256:53710ce0f14eef8312521c586a7ae1d9aeab4011840f09f1966073b68fc2e2ab","baseImage":"gcr.io/distroless/cc-debian13:nonroot@sha256:20afe6a70f2565277b704cc17289cb557f353a3619f6350f52a2317106598df4","supportImage":"node:26.10.0-bookworm-slim@sha256:0a992e1420e2d70611578f1844a6f10a9d11fe6bb535aabf72efe3007f13d79b","platform":"linux_amd64_glibc","recipeRevision":"runtime_image_v1"},{"profileId":"deno_2_9_7","kind":"deno","version":"2.9.7","imageId":"sha256:4292bb23555f98fb9dfc30fb447daa1c301686d89264fd8643ccb86bc0d53c29","builtAt":"2026-10-04T15:21:22.570Z","sourceImage":"denoland/deno:debian-2.9.7@sha256:869d374bdaddda4fde029c492d7219199b0e821c2c53cca5357b3a6f5b9336fc","baseImage":"gcr.io/distroless/cc-debian13:nonroot@sha256:20afe6a70f2565277b704cc17289cb557f353a3619f6350f52a2317106598df4","supportImage":"node:26.10.0-bookworm-slim@sha256:0a992e1420e2d70611578f1844a6f10a9d11fe6bb535aabf72efe3007f13d79b","platform":"linux_amd64_glibc","recipeRevision":"runtime_image_v1"}]},"omissions":{"counts":{"pattern":0,"non_executable":0,"not_exported":0,"invalid_subpath":0,"coverage_limit":0},"samples":[]},"outcome":"pass","evidenceLevel":"smoke_tested","coverageComplete":true,"cells":[{"runId":"7d745834-f48a-4311-9cf4-ddb31f637dea","profileId":"node_24_21_0","group":"root","mode":"esm","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":514.2309949998744,"failure":null,"entries":[{"index":0,"specifier":"stripe","displaySpecifier":"stripe","outcome":"pass","durationMs":234.19378800000004,"resolvedTo":"file:///workspace/node_modules/stripe/esm/stripe.esm.node.js","failure":null}],"sessions":[{"probeId":"f31789f3-3f0e-4e82-be47-1013bb507276","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":514.2309949998744}]},{"runId":"885ede5d-9876-417d-bd83-50ac41497001","profileId":"node_24_21_0","group":"root","mode":"commonjs","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":555.2296779998578,"failure":null,"entries":[{"index":0,"specifier":"stripe","displaySpecifier":"stripe","outcome":"pass","durationMs":137.781431,"resolvedTo":"/workspace/node_modules/stripe/cjs/stripe.cjs.node.js","failure":null}],"sessions":[{"probeId":"c507012c-96ca-4ae6-b208-7c841bbea77c","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":555.2296779998578}]},{"runId":"f5f71bcb-8507-4ea2-a8ea-67156291d53e","profileId":"node_24_21_0","group":"subpaths","mode":"esm","method":"sequential_batch_v2","outcome":"not_applicable","evidenceLevel":"static_only","coverage":{"planned":0,"observed":0,"passed":0,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":0,"failure":null,"entries":[],"sessions":[]},{"runId":"b63020c5-cd4e-49e1-a860-eba7cd9e043a","profileId":"node_24_21_0","group":"subpaths","mode":"commonjs","method":"sequential_batch_v2","outcome":"not_applicable","evidenceLevel":"static_only","coverage":{"planned":0,"observed":0,"passed":0,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":0,"failure":null,"entries":[],"sessions":[]},{"runId":"0baade25-3679-4926-bd96-0081507e58ba","profileId":"node_26_10_0","group":"root","mode":"esm","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":546.1330539998598,"failure":null,"entries":[{"index":0,"specifier":"stripe","displaySpecifier":"stripe","outcome":"pass","durationMs":202.03995700000002,"resolvedTo":"file:///workspace/node_modules/stripe/esm/stripe.esm.node.js","failure":null}],"sessions":[{"probeId":"fea66867-9a3f-4594-9c60-cabd77275a07","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":546.1330539998598}]},{"runId":"2ee5d1e8-91b3-49f7-8ef5-724f314082f3","profileId":"node_26_10_0","group":"root","mode":"commonjs","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":424.0518109998666,"failure":null,"entries":[{"index":0,"specifier":"stripe","displaySpecifier":"stripe","outcome":"pass","durationMs":131.41363199999998,"resolvedTo":"/workspace/node_modules/stripe/cjs/stripe.cjs.node.js","failure":null}],"sessions":[{"probeId":"415b7956-30e6-4aba-aafb-8d2295ea5141","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":424.0518109998666}]},{"runId":"4e17534a-20ef-41b5-8856-f2dafa97ec16","profileId":"node_26_10_0","group":"subpaths","mode":"esm","method":"sequential_batch_v2","outcome":"not_applicable","evidenceLevel":"static_only","coverage":{"planned":0,"observed":0,"passed":0,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":0,"failure":null,"entries":[],"sessions":[]},{"runId":"130f62e3-d9ea-481e-9475-4dd4916e5a47","profileId":"node_26_10_0","group":"subpaths","mode":"commonjs","method":"sequential_batch_v2","outcome":"not_applicable","evidenceLevel":"static_only","coverage":{"planned":0,"observed":0,"passed":0,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":0,"failure":null,"entries":[],"sessions":[]},{"runId":"bb507ffb-5718-4ad4-92f0-4bac2100fd78","profileId":"bun_1_4_2","group":"root","mode":"esm","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":432.5433210004121,"failure":null,"entries":[{"index":0,"specifier":"stripe","displaySpecifier":"stripe","outcome":"pass","durationMs":83.07699600000001,"resolvedTo":"file:///workspace/node_modules/stripe/esm/stripe.esm.worker.js","failure":null}],"sessions":[{"probeId":"7fe73c65-55ec-4869-81b9-883d5c434b4f","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":432.5433210004121}]},{"runId":"be496ff7-da1d-4231-a1f0-ef425ca8fa45","profileId":"bun_1_4_2","group":"root","mode":"commonjs","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":493.0267110001296,"failure":null,"entries":[{"index":0,"specifier":"stripe","displaySpecifier":"stripe","outcome":"pass","durationMs":76.47108,"resolvedTo":"/workspace/node_modules/stripe/cjs/stripe.cjs.worker.js","failure":null}],"sessions":[{"probeId":"37b674a2-0e1d-410f-8c43-4f9c69e6af12","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":493.0267110001296}]},{"runId":"99006086-8b40-4704-bc42-3aa04c69a14c","profileId":"bun_1_4_2","group":"subpaths","mode":"esm","method":"sequential_batch_v2","outcome":"not_applicable","evidenceLevel":"static_only","coverage":{"planned":0,"observed":0,"passed":0,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":0,"failure":null,"entries":[],"sessions":[]},{"runId":"3d36460b-c0e9-45b8-a969-13b8320f0cfd","profileId":"bun_1_4_2","group":"subpaths","mode":"commonjs","method":"sequential_batch_v2","outcome":"not_applicable","evidenceLevel":"static_only","coverage":{"planned":0,"observed":0,"passed":0,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":0,"failure":null,"entries":[],"sessions":[]},{"runId":"428fdf36-3a20-4ba1-b9a4-157ba2922729","profileId":"deno_2_9_7","group":"root","mode":"esm","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":426.6448319996707,"failure":null,"entries":[{"index":0,"specifier":"stripe","displaySpecifier":"stripe","outcome":"pass","durationMs":60.445606,"resolvedTo":"file:///workspace/node_modules/stripe/esm/stripe.esm.worker.js","failure":null}],"sessions":[{"probeId":"7a0269be-fa02-4bda-88dd-4a73d7f88615","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":426.6448319996707}]},{"runId":"4ebf34e9-7771-42c8-9f8b-85ffda736b00","profileId":"deno_2_9_7","group":"root","mode":"commonjs","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":748.5163920000196,"failure":null,"entries":[{"index":0,"specifier":"stripe","displaySpecifier":"stripe","outcome":"pass","durationMs":313.223605,"resolvedTo":"/workspace/node_modules/stripe/cjs/stripe.cjs.node.js","failure":null}],"sessions":[{"probeId":"a6c709aa-8ebd-4a3e-b018-bc0330c7a2be","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":748.5163920000196}]},{"runId":"802402e2-7292-4198-995a-d13aed0d36f4","profileId":"deno_2_9_7","group":"subpaths","mode":"esm","method":"sequential_batch_v2","outcome":"not_applicable","evidenceLevel":"static_only","coverage":{"planned":0,"observed":0,"passed":0,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":0,"failure":null,"entries":[],"sessions":[]},{"runId":"1c563ad4-69fd-46b3-a6e9-aacaea02395a","profileId":"deno_2_9_7","group":"subpaths","mode":"commonjs","method":"sequential_batch_v2","outcome":"not_applicable","evidenceLevel":"static_only","coverage":{"planned":0,"observed":0,"passed":0,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":0,"failure":null,"entries":[],"sessions":[]}],"limitations":["Only installation and loading were observed; functional correctness and package safety are not established.","Subpath batches share module caches and globals; root modes use separate fresh sandboxes.","Package-visible harness observations can be tampered with. They are not adversarial attestation.","Evidence applies to these exact artifacts, dependency snapshot, runtime images and Linux amd64/glibc policy.","Runtime error codes are captured observations and can also be thrown by package code."]}}