{"schemaVersion":1,"status":{"id":"a7141da7-faf0-4209-a630-c2b3617ee001","scanId":"38e8e9fb-4976-4635-8499-a78d01a09fe3","invalidatedAt":null,"invalidationReason":null,"replacedBy":null,"snapshotAvailable":true,"policyAllowed":true,"createdAt":"2026-10-09T10:12:04.150Z","observationRevision":0,"previousScanId":null,"previousReportId":null,"current":true},"report":{"schemaVersion":1,"id":"a7141da7-faf0-4209-a630-c2b3617ee001","scanId":"38e8e9fb-4976-4635-8499-a78d01a09fe3","classifierRevision":"classifier_v2","observedAt":"2026-10-09T10:12:02.575Z","classifiedAt":"2026-10-09T10:12:04.154Z","artifact":{"name":"chalk","version":"6.0.1","integrity":"sha512-/Ce6KNm3vIbWdMlNna6RVIZ/ICQxnJxCicet5LBKK9ZffBkqzDw0xh9EiKSljdRtiIQ1S1z4YgcscUUGzNCWrA==","tarballUrl":"https://registry.npmjs.org/chalk/-/chalk-6.0.1.tgz"},"preparation":{"id":"1812d110-911b-4f45-a527-7ca20ca54bb8","outcome":"pass","failure":null,"profileRevision":"npm_11_19_0_linux_amd64_v2","snapshot":{"id":"51a97364-a300-4a85-a233-4b32f5597f41","generation":"8a625c02-d7ce-4149-9d9c-f7747ca6abfa","lockDigest":"870421623367357b2fcfd23bb20b47ca6a9405009bee62393d51ef3a5f16bfb7","treeDigest":"7ded781f4a760aa60a0ebb2017a77ef7e58f7c8db61eec20aaf418c0137d2a28","profileRevision":"npm_11_19_0_linux_amd64_v2","installerImage":"node:24.21.0-bookworm-slim@sha256:5cbc7caba8c2c0f0bca675d1b61b9f2857e1cf1853c6164ee9dd409501a936e7"},"installedCount":1,"omittedOptionalCount":0,"staticObservations":{"native":{"count":0,"paths":[],"buildIndicators":[],"prerequisiteProven":false},"declared":{"type":"module","engines":{"node":">=22"},"exports":{"types":"./source/index.d.ts","default":"./source/index.js"},"imports":{"#ansi-styles":"./source/vendor/ansi-styles/index.js","#supports-color":{"node":"./source/vendor/supports-color/index.js","default":"./source/vendor/supports-color/browser.js"}},"scripts":{"test":"xo && c8 ava && tsc --noEmit --types node source/index.d.ts","bench":"matcha benchmark.js"},"devDependencies":{"c8":"^12.0.0","xo":"^4.0.0","ava":"^8.0.1","execa":"^10.0.0","matcha":"^0.7.0","log-update":"^8.0.0","typescript":"^6.0.3","yoctodelay":"^2.0.0","@types/node":"^26.1.1","ansi-styles":"^6.2.3","color-convert":"^3.1.3"}},"platform":{"os":true,"cpu":true,"libc":true},"evidenceLevel":"static_only","lifecycleScripts":[]}},"matrix":{"id":"4dc87b12-9092-4ebf-a963-709a77c15297","revision":"production_ce416e976d3b4c51b252859d31c1fa7c","platform":"linux_amd64_glibc","harnessRevision":"load_v2","planRevision":"explicit_exports_v1","policyRevision":"runtime_limits_v2","images":[{"profileId":"node_24_21_0","kind":"node","version":"24.21.0","imageId":"sha256:e3a5a41a242a766e69f326b91f9ed9280c5719ad3e9ab54f0ac28bfc71d77794","builtAt":"2026-10-04T15:20:38.392Z","sourceImage":"node:24.21.0-bookworm-slim@sha256:5cbc7caba8c2c0f0bca675d1b61b9f2857e1cf1853c6164ee9dd409501a936e7","baseImage":"gcr.io/distroless/cc-debian13:nonroot@sha256:20afe6a70f2565277b704cc17289cb557f353a3619f6350f52a2317106598df4","supportImage":"node:26.10.0-bookworm-slim@sha256:0a992e1420e2d70611578f1844a6f10a9d11fe6bb535aabf72efe3007f13d79b","platform":"linux_amd64_glibc","recipeRevision":"runtime_image_v1"},{"profileId":"node_26_10_0","kind":"node","version":"26.10.0","imageId":"sha256:5d2fa297021c7db25494856bb25e2cddecbb020722ce1e0f2101385a063c0611","builtAt":"2026-10-04T15:20:47.161Z","sourceImage":"node:26.10.0-bookworm-slim@sha256:0a992e1420e2d70611578f1844a6f10a9d11fe6bb535aabf72efe3007f13d79b","baseImage":"gcr.io/distroless/cc-debian13:nonroot@sha256:20afe6a70f2565277b704cc17289cb557f353a3619f6350f52a2317106598df4","supportImage":"node:26.10.0-bookworm-slim@sha256:0a992e1420e2d70611578f1844a6f10a9d11fe6bb535aabf72efe3007f13d79b","platform":"linux_amd64_glibc","recipeRevision":"runtime_image_v1"},{"profileId":"bun_1_4_2","kind":"bun","version":"1.4.2","imageId":"sha256:fd67412f5baad0c2b1038367df9cf2d4b33237d3815e16eedae16cfd94ab3182","builtAt":"2026-10-04T15:21:07.160Z","sourceImage":"oven/bun:1.4.2-debian@sha256:53710ce0f14eef8312521c586a7ae1d9aeab4011840f09f1966073b68fc2e2ab","baseImage":"gcr.io/distroless/cc-debian13:nonroot@sha256:20afe6a70f2565277b704cc17289cb557f353a3619f6350f52a2317106598df4","supportImage":"node:26.10.0-bookworm-slim@sha256:0a992e1420e2d70611578f1844a6f10a9d11fe6bb535aabf72efe3007f13d79b","platform":"linux_amd64_glibc","recipeRevision":"runtime_image_v1"},{"profileId":"deno_2_9_7","kind":"deno","version":"2.9.7","imageId":"sha256:3b0f993e5ec0b1d4e8e09bc50ae53f142f7347d0baf96cefe7a8cfe7a00f7958","builtAt":"2026-10-04T15:21:22.570Z","sourceImage":"denoland/deno:debian-2.9.7@sha256:869d374bdaddda4fde029c492d7219199b0e821c2c53cca5357b3a6f5b9336fc","baseImage":"gcr.io/distroless/cc-debian13:nonroot@sha256:20afe6a70f2565277b704cc17289cb557f353a3619f6350f52a2317106598df4","supportImage":"node:26.10.0-bookworm-slim@sha256:0a992e1420e2d70611578f1844a6f10a9d11fe6bb535aabf72efe3007f13d79b","platform":"linux_amd64_glibc","recipeRevision":"runtime_image_v1"}]},"omissions":{"counts":{"pattern":0,"non_executable":0,"not_exported":0,"invalid_subpath":0,"coverage_limit":0},"samples":[]},"outcome":"pass","evidenceLevel":"smoke_tested","coverageComplete":true,"cells":[{"runId":"306966ee-31ca-41b6-bedd-b11d8e8d9d6e","profileId":"node_24_21_0","group":"root","mode":"esm","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":343.7670419999631,"failure":null,"entries":[{"index":0,"specifier":"chalk","displaySpecifier":"chalk","outcome":"pass","durationMs":17.546516000000004,"resolvedTo":"file:///workspace/node_modules/chalk/source/index.js","failure":null}],"sessions":[{"probeId":"b1ebdbad-8b3e-47c2-9d43-d74f8c04feea","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":343.7670419999631}]},{"runId":"bb783837-990c-43eb-9c9b-55a2f5490dc8","profileId":"node_24_21_0","group":"root","mode":"commonjs","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":347.1347609999939,"failure":null,"entries":[{"index":0,"specifier":"chalk","displaySpecifier":"chalk","outcome":"pass","durationMs":8.002122,"resolvedTo":"/workspace/node_modules/chalk/source/index.js","failure":null}],"sessions":[{"probeId":"2fd43f29-1c09-49a2-bee7-7e820a2ac38c","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":347.1347609999939}]},{"runId":"49a6e26b-2f0d-4ad2-9168-82b0c7b33c36","profileId":"node_24_21_0","group":"subpaths","mode":"esm","method":"sequential_batch_v2","outcome":"not_applicable","evidenceLevel":"static_only","coverage":{"planned":0,"observed":0,"passed":0,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":0,"failure":null,"entries":[],"sessions":[]},{"runId":"8ab05ef8-fc75-4ee9-9d31-e96dd4bd28b0","profileId":"node_24_21_0","group":"subpaths","mode":"commonjs","method":"sequential_batch_v2","outcome":"not_applicable","evidenceLevel":"static_only","coverage":{"planned":0,"observed":0,"passed":0,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":0,"failure":null,"entries":[],"sessions":[]},{"runId":"c9c21441-34c8-442d-815b-98976a8ea48f","profileId":"node_26_10_0","group":"root","mode":"esm","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":334.01453799998853,"failure":null,"entries":[{"index":0,"specifier":"chalk","displaySpecifier":"chalk","outcome":"pass","durationMs":13.627185,"resolvedTo":"file:///workspace/node_modules/chalk/source/index.js","failure":null}],"sessions":[{"probeId":"275fc282-ebd1-42b3-8dda-cea113a54ec2","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":334.01453799998853}]},{"runId":"7c58a5ff-9577-48ba-aa6a-d13916d31eb5","profileId":"node_26_10_0","group":"root","mode":"commonjs","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":324.33264399995096,"failure":null,"entries":[{"index":0,"specifier":"chalk","displaySpecifier":"chalk","outcome":"pass","durationMs":10.720969999999998,"resolvedTo":"/workspace/node_modules/chalk/source/index.js","failure":null}],"sessions":[{"probeId":"48168780-7bff-49b9-bd95-224b9c585bb9","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":324.33264399995096}]},{"runId":"d7b9e4af-8171-458e-9b65-51a51deb3164","profileId":"node_26_10_0","group":"subpaths","mode":"esm","method":"sequential_batch_v2","outcome":"not_applicable","evidenceLevel":"static_only","coverage":{"planned":0,"observed":0,"passed":0,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":0,"failure":null,"entries":[],"sessions":[]},{"runId":"bfd9542b-031a-4d9d-b679-6ca96e61852c","profileId":"node_26_10_0","group":"subpaths","mode":"commonjs","method":"sequential_batch_v2","outcome":"not_applicable","evidenceLevel":"static_only","coverage":{"planned":0,"observed":0,"passed":0,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":0,"failure":null,"entries":[],"sessions":[]},{"runId":"62f7a823-a405-42c4-8738-5ac8378b58dd","profileId":"bun_1_4_2","group":"root","mode":"esm","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":321.62326100002974,"failure":null,"entries":[{"index":0,"specifier":"chalk","displaySpecifier":"chalk","outcome":"pass","durationMs":10.524728999999999,"resolvedTo":"file:///workspace/node_modules/chalk/source/index.js","failure":null}],"sessions":[{"probeId":"b07d6f41-677f-4e19-bd44-ce0220d5b591","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":321.62326100002974}]},{"runId":"1ce1882b-08ea-4b50-8c58-d8ed84b2488e","profileId":"bun_1_4_2","group":"root","mode":"commonjs","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":369.10765199997695,"failure":null,"entries":[{"index":0,"specifier":"chalk","displaySpecifier":"chalk","outcome":"pass","durationMs":8.820532,"resolvedTo":"/workspace/node_modules/chalk/source/index.js","failure":null}],"sessions":[{"probeId":"b69a9e6c-625b-485e-b0fc-d3971c730b65","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":369.10765199997695}]},{"runId":"ec8d3d9b-5d66-47f4-9680-3334e6148265","profileId":"bun_1_4_2","group":"subpaths","mode":"esm","method":"sequential_batch_v2","outcome":"not_applicable","evidenceLevel":"static_only","coverage":{"planned":0,"observed":0,"passed":0,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":0,"failure":null,"entries":[],"sessions":[]},{"runId":"9738aa0e-cf92-4d8f-81b9-6c66403dc5c5","profileId":"bun_1_4_2","group":"subpaths","mode":"commonjs","method":"sequential_batch_v2","outcome":"not_applicable","evidenceLevel":"static_only","coverage":{"planned":0,"observed":0,"passed":0,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":0,"failure":null,"entries":[],"sessions":[]},{"runId":"f708ab4e-85d9-410b-b794-6dd840dc42f4","profileId":"deno_2_9_7","group":"root","mode":"esm","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":465.32800300000235,"failure":null,"entries":[{"index":0,"specifier":"chalk","displaySpecifier":"chalk","outcome":"pass","durationMs":10.016857000000002,"resolvedTo":"file:///workspace/node_modules/chalk/source/index.js","failure":null}],"sessions":[{"probeId":"cbdccdf7-b690-46d6-9303-c5bda04e94a0","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":465.32800300000235}]},{"runId":"7f5b9944-7d66-4800-9249-15cf6f3b845c","profileId":"deno_2_9_7","group":"root","mode":"commonjs","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":454.05956900003366,"failure":null,"entries":[{"index":0,"specifier":"chalk","displaySpecifier":"chalk","outcome":"pass","durationMs":12.652021000000005,"resolvedTo":"/workspace/node_modules/chalk/source/index.js","failure":null}],"sessions":[{"probeId":"6d6d26c2-8b31-443f-99d5-dfcb2feb8f76","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":454.05956900003366}]},{"runId":"a3f93c3d-4b95-4ef6-9ff9-2226d6d52025","profileId":"deno_2_9_7","group":"subpaths","mode":"esm","method":"sequential_batch_v2","outcome":"not_applicable","evidenceLevel":"static_only","coverage":{"planned":0,"observed":0,"passed":0,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":0,"failure":null,"entries":[],"sessions":[]},{"runId":"e9a7acf2-69c0-427c-abd2-31a25039ac96","profileId":"deno_2_9_7","group":"subpaths","mode":"commonjs","method":"sequential_batch_v2","outcome":"not_applicable","evidenceLevel":"static_only","coverage":{"planned":0,"observed":0,"passed":0,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":0,"failure":null,"entries":[],"sessions":[]}],"limitations":["Only installation and loading were observed; functional correctness and package safety are not established.","Subpath batches share module caches and globals; root modes use separate fresh sandboxes.","Package-visible harness observations can be tampered with. They are not adversarial attestation.","Evidence applies to these exact artifacts, dependency snapshot, runtime images and Linux amd64/glibc policy.","Runtime error codes are captured observations and can also be thrown by package code."]}}