{"schemaVersion":1,"reportPath":"/reports/becb6d6a-08e4-45da-bb93-930a81df01e0","status":{"id":"becb6d6a-08e4-45da-bb93-930a81df01e0","scanId":"19d12347-7344-4eb1-b9ca-059366a33a9e","invalidatedAt":null,"invalidationReason":null,"replacedBy":null,"snapshotAvailable":true,"policyAllowed":true,"createdAt":"2026-10-09T11:11:00.505Z","observationRevision":0,"previousScanId":null,"previousReportId":null,"current":true},"summary":{"id":"becb6d6a-08e4-45da-bb93-930a81df01e0","scanId":"19d12347-7344-4eb1-b9ca-059366a33a9e","artifact":{"name":"preact","version":"11.0.1","integrity":"sha512-TNNwEq++jYNHy747LziCjPRVgEwnLSOIOAw/oYcjI3Tdnubx2EXtt76I0an8PATvUWtx/DX1kFIg1eFN+O/fkw==","tarballUrl":"https://registry.npmjs.org/preact/-/preact-11.0.1.tgz"},"observedAt":"2026-10-09T11:10:59.059Z","classifiedAt":"2026-10-09T11:11:00.511Z","classifierRevision":"classifier_v2","matrix":{"id":"bfab88d7-3f4a-41b5-97a9-5aafd5bda511","revision":"production_ab51508deb208994caf81cb80f14b800","platform":"linux_amd64_glibc","harnessRevision":"load_v2","planRevision":"explicit_exports_v1","policyRevision":"runtime_limits_v2","images":[{"profileId":"node_24_21_0","kind":"node","version":"24.21.0","imageId":"sha256:f2fcbb4dfbd6d5f57f4e43de97e70182d9982ac7cc0cc063dfff2cf1759a411d","builtAt":"2026-10-04T15:20:38.392Z","sourceImage":"node:24.21.0-bookworm-slim@sha256:5cbc7caba8c2c0f0bca675d1b61b9f2857e1cf1853c6164ee9dd409501a936e7","baseImage":"gcr.io/distroless/cc-debian13:nonroot@sha256:20afe6a70f2565277b704cc17289cb557f353a3619f6350f52a2317106598df4","supportImage":"node:26.10.0-bookworm-slim@sha256:0a992e1420e2d70611578f1844a6f10a9d11fe6bb535aabf72efe3007f13d79b","platform":"linux_amd64_glibc","recipeRevision":"runtime_image_v1"},{"profileId":"node_26_10_0","kind":"node","version":"26.10.0","imageId":"sha256:9c1c93cc35d1408d26a61c4efccbde37c35425e362a2e723b885c3333d2be073","builtAt":"2026-10-04T15:20:47.161Z","sourceImage":"node:26.10.0-bookworm-slim@sha256:0a992e1420e2d70611578f1844a6f10a9d11fe6bb535aabf72efe3007f13d79b","baseImage":"gcr.io/distroless/cc-debian13:nonroot@sha256:20afe6a70f2565277b704cc17289cb557f353a3619f6350f52a2317106598df4","supportImage":"node:26.10.0-bookworm-slim@sha256:0a992e1420e2d70611578f1844a6f10a9d11fe6bb535aabf72efe3007f13d79b","platform":"linux_amd64_glibc","recipeRevision":"runtime_image_v1"},{"profileId":"bun_1_4_2","kind":"bun","version":"1.4.2","imageId":"sha256:2343363679fb92d59a395ff081b783b5514f06295b1bc6d61baaeef17e793789","builtAt":"2026-10-04T15:21:07.160Z","sourceImage":"oven/bun:1.4.2-debian@sha256:53710ce0f14eef8312521c586a7ae1d9aeab4011840f09f1966073b68fc2e2ab","baseImage":"gcr.io/distroless/cc-debian13:nonroot@sha256:20afe6a70f2565277b704cc17289cb557f353a3619f6350f52a2317106598df4","supportImage":"node:26.10.0-bookworm-slim@sha256:0a992e1420e2d70611578f1844a6f10a9d11fe6bb535aabf72efe3007f13d79b","platform":"linux_amd64_glibc","recipeRevision":"runtime_image_v1"},{"profileId":"deno_2_9_7","kind":"deno","version":"2.9.7","imageId":"sha256:4292bb23555f98fb9dfc30fb447daa1c301686d89264fd8643ccb86bc0d53c29","builtAt":"2026-10-04T15:21:22.570Z","sourceImage":"denoland/deno:debian-2.9.7@sha256:869d374bdaddda4fde029c492d7219199b0e821c2c53cca5357b3a6f5b9336fc","baseImage":"gcr.io/distroless/cc-debian13:nonroot@sha256:20afe6a70f2565277b704cc17289cb557f353a3619f6350f52a2317106598df4","supportImage":"node:26.10.0-bookworm-slim@sha256:0a992e1420e2d70611578f1844a6f10a9d11fe6bb535aabf72efe3007f13d79b","platform":"linux_amd64_glibc","recipeRevision":"runtime_image_v1"}]},"outcome":"inconclusive","evidenceLevel":"smoke_tested","coverageComplete":true,"limitations":["Only installation and loading were observed; functional correctness and package safety are not established.","Subpath batches share module caches and globals; root modes use separate fresh sandboxes.","Package-visible harness observations can be tampered with. They are not adversarial attestation.","Evidence applies to these exact artifacts, dependency snapshot, runtime images and Linux amd64/glibc policy.","Runtime error codes are captured observations and can also be thrown by package code."],"preparation":{"id":"4d8cc86f-aded-45eb-897a-15d2c712605b","outcome":"pass","failure":null,"profileRevision":"npm_11_19_0_linux_amd64_v2","snapshot":{"id":"08cdadec-cc7f-4090-93ad-d5fadf4b9d98","generation":"7bd4cc77-5624-4e1b-92e8-da61d0286a96","lockDigest":"d28d01f80ab0ba789d5d29ad4f3a1ced87b05ec78b8ea8526564ca32d23c71f0","treeDigest":"5100b1a0d915a1ce6232aea5213f9c2bfc437018c979a24cf498f50944521d8d","profileRevision":"npm_11_19_0_linux_amd64_v2","installerImage":"node:24.21.0-bookworm-slim@sha256:5cbc7caba8c2c0f0bca675d1b61b9f2857e1cf1853c6164ee9dd409501a936e7"},"installedCount":1,"omittedOptionalCount":0},"cells":[{"runId":"6518d001-18c9-4c0a-aa85-518f9333a02c","profileId":"node_24_21_0","group":"root","mode":"esm","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":328.9027870001737,"failure":null},{"runId":"685d3c77-50e8-4afa-a3cd-3a147cc6f8ec","profileId":"node_24_21_0","group":"root","mode":"commonjs","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":329.44667199999094,"failure":null},{"runId":"adc5450e-df78-4175-9040-31f28ef07fb6","profileId":"node_24_21_0","group":"subpaths","mode":"esm","method":"sequential_batch_v2","outcome":"inconclusive","evidenceLevel":"smoke_tested","coverage":{"planned":14,"observed":14,"passed":12,"failed":2,"prerequisiteLimited":2,"interrupted":0,"untested":0,"complete":true},"durationMs":319.296888000099,"failure":{"classification":"optional_peer_missing","phase":"module_resolution","origin":"prerequisite","retryable":false,"source":"captured_error_code","message":"Cannot find package 'preact-render-to-string' imported from /workspace/node_modules/preact/compat/server.mjs","optionalPeer":{"name":"preact-render-to-string","range":">=6.7.0"}}},{"runId":"5c77ee1c-8cc5-478a-a792-2c57abf8decd","profileId":"node_24_21_0","group":"subpaths","mode":"commonjs","method":"sequential_batch_v2","outcome":"inconclusive","evidenceLevel":"smoke_tested","coverage":{"planned":14,"observed":14,"passed":12,"failed":2,"prerequisiteLimited":2,"interrupted":0,"untested":0,"complete":true},"durationMs":319.40476599987596,"failure":{"classification":"optional_peer_missing","phase":"module_resolution","origin":"prerequisite","retryable":false,"source":"harness_observation","message":"renderToString() error: missing \"preact-render-to-string\" dependency.","optionalPeer":{"name":"preact-render-to-string","range":">=6.7.0"}}},{"runId":"c0c275d4-d552-434d-898c-501e0e8d9f88","profileId":"node_26_10_0","group":"root","mode":"esm","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":342.822269000113,"failure":null},{"runId":"9a346021-00a0-45d3-abf5-ffa393a8e533","profileId":"node_26_10_0","group":"root","mode":"commonjs","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":338.8193229997996,"failure":null},{"runId":"9bdef3f6-dd18-4ebe-8edf-681b40151ca5","profileId":"node_26_10_0","group":"subpaths","mode":"esm","method":"sequential_batch_v2","outcome":"inconclusive","evidenceLevel":"smoke_tested","coverage":{"planned":14,"observed":14,"passed":12,"failed":2,"prerequisiteLimited":2,"interrupted":0,"untested":0,"complete":true},"durationMs":345.6524040000513,"failure":{"classification":"optional_peer_missing","phase":"module_resolution","origin":"prerequisite","retryable":false,"source":"captured_error_code","message":"Cannot find package 'preact-render-to-string' imported from /workspace/node_modules/preact/compat/server.mjs","optionalPeer":{"name":"preact-render-to-string","range":">=6.7.0"}}},{"runId":"ddb96443-7e00-4b85-b110-5dd35ba4244e","profileId":"node_26_10_0","group":"subpaths","mode":"commonjs","method":"sequential_batch_v2","outcome":"inconclusive","evidenceLevel":"smoke_tested","coverage":{"planned":14,"observed":14,"passed":12,"failed":2,"prerequisiteLimited":2,"interrupted":0,"untested":0,"complete":true},"durationMs":319.4508579999674,"failure":{"classification":"optional_peer_missing","phase":"module_resolution","origin":"prerequisite","retryable":false,"source":"harness_observation","message":"renderToString() error: missing \"preact-render-to-string\" dependency.","optionalPeer":{"name":"preact-render-to-string","range":">=6.7.0"}}},{"runId":"3d0e069e-6863-4adc-8e35-4c723ad3c886","profileId":"bun_1_4_2","group":"root","mode":"esm","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":313.8421790001448,"failure":null},{"runId":"c0128394-9dcf-4b81-844b-efb6df73174b","profileId":"bun_1_4_2","group":"root","mode":"commonjs","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":308.947906000074,"failure":null},{"runId":"a9866880-4f57-4175-a000-4e3fd71f7657","profileId":"bun_1_4_2","group":"subpaths","mode":"esm","method":"sequential_batch_v2","outcome":"partial","evidenceLevel":"smoke_tested","coverage":{"planned":14,"observed":14,"passed":12,"failed":2,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":354.792814000044,"failure":{"classification":"esm_import_failed","phase":"module_evaluation","origin":"package","retryable":false,"source":"harness_observation","message":"The runtime reported a loading failure without a captured error message. Its cause is unknown."}},{"runId":"95a908aa-988d-483b-bc8d-aaef4c7dd6cb","profileId":"bun_1_4_2","group":"subpaths","mode":"commonjs","method":"sequential_batch_v2","outcome":"inconclusive","evidenceLevel":"smoke_tested","coverage":{"planned":14,"observed":14,"passed":12,"failed":2,"prerequisiteLimited":1,"interrupted":0,"untested":0,"complete":true},"durationMs":344.4382619999815,"failure":{"classification":"optional_peer_missing","phase":"module_resolution","origin":"prerequisite","retryable":false,"source":"harness_observation","message":"renderToString() error: missing \"preact-render-to-string\" dependency.","optionalPeer":{"name":"preact-render-to-string","range":">=6.7.0"}}},{"runId":"2a79ae39-0388-4d70-8330-172bfafa33ae","profileId":"deno_2_9_7","group":"root","mode":"esm","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":408.7432999999728,"failure":null},{"runId":"b24fc2f8-d2ce-4012-9f5e-140378492e2f","profileId":"deno_2_9_7","group":"root","mode":"commonjs","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":433.9741660000291,"failure":null},{"runId":"3871fe59-8d92-4444-ad63-264508123a6d","profileId":"deno_2_9_7","group":"subpaths","mode":"esm","method":"sequential_batch_v2","outcome":"inconclusive","evidenceLevel":"smoke_tested","coverage":{"planned":14,"observed":14,"passed":12,"failed":2,"prerequisiteLimited":2,"interrupted":0,"untested":0,"complete":true},"durationMs":461.960049000103,"failure":{"classification":"optional_peer_missing","phase":"module_resolution","origin":"prerequisite","retryable":false,"source":"captured_error_code","message":"Could not find package 'preact-render-to-string' from referrer 'file:///workspace/node_modules/preact/compat/server.mjs'.","optionalPeer":{"name":"preact-render-to-string","range":">=6.7.0"}}},{"runId":"32ef1d96-5764-4133-b908-b65294fcbc65","profileId":"deno_2_9_7","group":"subpaths","mode":"commonjs","method":"sequential_batch_v2","outcome":"inconclusive","evidenceLevel":"smoke_tested","coverage":{"planned":14,"observed":14,"passed":12,"failed":2,"prerequisiteLimited":2,"interrupted":0,"untested":0,"complete":true},"durationMs":428.00270700012334,"failure":{"classification":"optional_peer_missing","phase":"module_resolution","origin":"prerequisite","retryable":false,"source":"harness_observation","message":"renderToString() error: missing \"preact-render-to-string\" dependency.","optionalPeer":{"name":"preact-render-to-string","range":">=6.7.0"}}}],"runtimes":[{"profileId":"node_24_21_0","outcome":"inconclusive"},{"profileId":"node_26_10_0","outcome":"inconclusive"},{"profileId":"bun_1_4_2","outcome":"inconclusive"},{"profileId":"deno_2_9_7","outcome":"inconclusive"}],"missingOptionalPeers":[{"name":"preact-render-to-string","range":">=6.7.0"}],"missingOptionalPeersTruncated":false}}