{"schemaVersion":1,"reportPath":"/reports/d278cf07-8d69-449b-8510-74f3f0f3a8f5","status":{"id":"d278cf07-8d69-449b-8510-74f3f0f3a8f5","scanId":"56355641-d547-454f-bd71-5b0872c4aa70","invalidatedAt":null,"invalidationReason":null,"replacedBy":null,"snapshotAvailable":true,"policyAllowed":true,"createdAt":"2026-10-09T13:55:50.874Z","observationRevision":0,"previousScanId":null,"previousReportId":null,"current":true},"summary":{"id":"d278cf07-8d69-449b-8510-74f3f0f3a8f5","scanId":"56355641-d547-454f-bd71-5b0872c4aa70","artifact":{"name":"nodemailer","version":"10.0.16","integrity":"sha512-VL9xKErxN+el77o8eBOuYKUPMyEx7F9hfnDCuiUKJRp9v3wnWMOudYgP/SWbwSHy8rUL4cylobuXtki1LpQS7A==","tarballUrl":"https://registry.npmjs.org/nodemailer/-/nodemailer-10.0.16.tgz"},"observedAt":"2026-10-09T13:55:49.246Z","classifiedAt":"2026-10-09T13:55:50.877Z","classifierRevision":"classifier_v2","matrix":{"id":"bfab88d7-3f4a-41b5-97a9-5aafd5bda511","revision":"production_ab51508deb208994caf81cb80f14b800","platform":"linux_amd64_glibc","harnessRevision":"load_v2","planRevision":"explicit_exports_v1","policyRevision":"runtime_limits_v2","images":[{"profileId":"node_24_21_0","kind":"node","version":"24.21.0","imageId":"sha256:f2fcbb4dfbd6d5f57f4e43de97e70182d9982ac7cc0cc063dfff2cf1759a411d","builtAt":"2026-10-04T15:20:38.392Z","sourceImage":"node:24.21.0-bookworm-slim@sha256:5cbc7caba8c2c0f0bca675d1b61b9f2857e1cf1853c6164ee9dd409501a936e7","baseImage":"gcr.io/distroless/cc-debian13:nonroot@sha256:20afe6a70f2565277b704cc17289cb557f353a3619f6350f52a2317106598df4","supportImage":"node:26.10.0-bookworm-slim@sha256:0a992e1420e2d70611578f1844a6f10a9d11fe6bb535aabf72efe3007f13d79b","platform":"linux_amd64_glibc","recipeRevision":"runtime_image_v1"},{"profileId":"node_26_10_0","kind":"node","version":"26.10.0","imageId":"sha256:9c1c93cc35d1408d26a61c4efccbde37c35425e362a2e723b885c3333d2be073","builtAt":"2026-10-04T15:20:47.161Z","sourceImage":"node:26.10.0-bookworm-slim@sha256:0a992e1420e2d70611578f1844a6f10a9d11fe6bb535aabf72efe3007f13d79b","baseImage":"gcr.io/distroless/cc-debian13:nonroot@sha256:20afe6a70f2565277b704cc17289cb557f353a3619f6350f52a2317106598df4","supportImage":"node:26.10.0-bookworm-slim@sha256:0a992e1420e2d70611578f1844a6f10a9d11fe6bb535aabf72efe3007f13d79b","platform":"linux_amd64_glibc","recipeRevision":"runtime_image_v1"},{"profileId":"bun_1_4_2","kind":"bun","version":"1.4.2","imageId":"sha256:2343363679fb92d59a395ff081b783b5514f06295b1bc6d61baaeef17e793789","builtAt":"2026-10-04T15:21:07.160Z","sourceImage":"oven/bun:1.4.2-debian@sha256:53710ce0f14eef8312521c586a7ae1d9aeab4011840f09f1966073b68fc2e2ab","baseImage":"gcr.io/distroless/cc-debian13:nonroot@sha256:20afe6a70f2565277b704cc17289cb557f353a3619f6350f52a2317106598df4","supportImage":"node:26.10.0-bookworm-slim@sha256:0a992e1420e2d70611578f1844a6f10a9d11fe6bb535aabf72efe3007f13d79b","platform":"linux_amd64_glibc","recipeRevision":"runtime_image_v1"},{"profileId":"deno_2_9_7","kind":"deno","version":"2.9.7","imageId":"sha256:4292bb23555f98fb9dfc30fb447daa1c301686d89264fd8643ccb86bc0d53c29","builtAt":"2026-10-04T15:21:22.570Z","sourceImage":"denoland/deno:debian-2.9.7@sha256:869d374bdaddda4fde029c492d7219199b0e821c2c53cca5357b3a6f5b9336fc","baseImage":"gcr.io/distroless/cc-debian13:nonroot@sha256:20afe6a70f2565277b704cc17289cb557f353a3619f6350f52a2317106598df4","supportImage":"node:26.10.0-bookworm-slim@sha256:0a992e1420e2d70611578f1844a6f10a9d11fe6bb535aabf72efe3007f13d79b","platform":"linux_amd64_glibc","recipeRevision":"runtime_image_v1"}]},"outcome":"inconclusive","evidenceLevel":"smoke_tested","coverageComplete":false,"limitations":["Only installation and loading were observed; functional correctness and package safety are not established.","Subpath batches share module caches and globals; root modes use separate fresh sandboxes.","Package-visible harness observations can be tampered with. They are not adversarial attestation.","Evidence applies to these exact artifacts, dependency snapshot, runtime images and Linux amd64/glibc policy.","Runtime error codes are captured observations and can also be thrown by package code."],"preparation":{"id":"e404ab6a-74b6-4d4d-b40b-b072b73bda15","outcome":"pass","failure":null,"profileRevision":"npm_11_19_0_linux_amd64_v2","snapshot":{"id":"2f262748-c35c-48c1-a8de-c4b561cff6b2","generation":"e130c1c6-82ff-4713-b86f-16a0d1e0cad3","lockDigest":"106c0dee5978c459a63fdd3e4d913d15de76a076294a8cb63243ec35a429d6bd","treeDigest":"76b92500348e6067a04e40ecf8dc25345e711b8474ba111877e8ddfd2458e353","profileRevision":"npm_11_19_0_linux_amd64_v2","installerImage":"node:24.21.0-bookworm-slim@sha256:5cbc7caba8c2c0f0bca675d1b61b9f2857e1cf1853c6164ee9dd409501a936e7"},"installedCount":1,"omittedOptionalCount":0},"cells":[{"runId":"0d5a240f-8f77-4201-b7b2-ae64ea39bd18","profileId":"node_24_21_0","group":"root","mode":"esm","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":535.0791980009526,"failure":null},{"runId":"8af86618-fbb9-40bc-b4bf-63aa1f620be9","profileId":"node_24_21_0","group":"root","mode":"commonjs","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":449.60415600053966,"failure":null},{"runId":"8ea342ab-930c-402d-aa6c-67b1517fa36a","profileId":"node_24_21_0","group":"subpaths","mode":"esm","method":"sequential_batch_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":20,"observed":20,"passed":20,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":550.0165279991925,"failure":null},{"runId":"0de78fce-5207-41c1-a4d7-467e740a79de","profileId":"node_24_21_0","group":"subpaths","mode":"commonjs","method":"sequential_batch_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":20,"observed":20,"passed":20,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":446.8561200015247,"failure":null},{"runId":"f7a20611-ffa3-4c12-be04-b3d86b680fc9","profileId":"node_26_10_0","group":"root","mode":"esm","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":461.0068709999323,"failure":null},{"runId":"a97f5dcb-7f1f-42f1-9322-1413b1e7c85c","profileId":"node_26_10_0","group":"root","mode":"commonjs","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":437.15064400061965,"failure":null},{"runId":"728d198a-675e-428f-8351-5f9494327661","profileId":"node_26_10_0","group":"subpaths","mode":"esm","method":"sequential_batch_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":20,"observed":20,"passed":20,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":468.6329529993236,"failure":null},{"runId":"5203f22b-a93f-4cd1-b5d2-2ff920007857","profileId":"node_26_10_0","group":"subpaths","mode":"commonjs","method":"sequential_batch_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":20,"observed":20,"passed":20,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":462.3210979998112,"failure":null},{"runId":"158f32c4-8851-4037-baf5-fdf050e8ff0b","profileId":"bun_1_4_2","group":"root","mode":"esm","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":428.94386100023985,"failure":null},{"runId":"9d901577-84ed-4000-ab37-6d074eeef947","profileId":"bun_1_4_2","group":"root","mode":"commonjs","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":440.4339279998094,"failure":null},{"runId":"b063f078-d444-4965-81d7-bf3f2855f775","profileId":"bun_1_4_2","group":"subpaths","mode":"esm","method":"sequential_batch_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":20,"observed":20,"passed":20,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":498.9442469999194,"failure":null},{"runId":"3a4e6ae8-ef67-445f-9c29-ca033f713720","profileId":"bun_1_4_2","group":"subpaths","mode":"commonjs","method":"sequential_batch_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":20,"observed":20,"passed":20,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":358.6716990005225,"failure":null},{"runId":"26fc21a2-7348-4e84-9d4a-0986560362c8","profileId":"deno_2_9_7","group":"root","mode":"esm","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":449.6044529993087,"failure":null},{"runId":"9474b578-a12c-4c33-98e0-c105e4a66ed2","profileId":"deno_2_9_7","group":"root","mode":"commonjs","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":567.6365339998156,"failure":null},{"runId":"b571592e-ee82-4f76-8661-932168022735","profileId":"deno_2_9_7","group":"subpaths","mode":"esm","method":"sequential_batch_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":20,"observed":20,"passed":20,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":422.1646120008081,"failure":null},{"runId":"9c44f295-7917-4d62-ab34-f613e580c6e2","profileId":"deno_2_9_7","group":"subpaths","mode":"commonjs","method":"sequential_batch_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":20,"observed":20,"passed":20,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":543.6749150007963,"failure":null}],"runtimes":[{"profileId":"node_24_21_0","outcome":"pass"},{"profileId":"node_26_10_0","outcome":"pass"},{"profileId":"bun_1_4_2","outcome":"pass"},{"profileId":"deno_2_9_7","outcome":"pass"}],"missingOptionalPeers":[],"missingOptionalPeersTruncated":false}}