{"schemaVersion":1,"status":{"id":"e7403617-1170-4943-8937-9195195f1c2d","scanId":"9b833acb-3447-45a3-8fec-2e9e22a73bd4","invalidatedAt":null,"invalidationReason":null,"replacedBy":null,"snapshotAvailable":true,"policyAllowed":true,"createdAt":"2026-10-09T11:17:02.871Z","observationRevision":0,"previousScanId":null,"previousReportId":null,"current":true},"report":{"schemaVersion":1,"id":"e7403617-1170-4943-8937-9195195f1c2d","scanId":"9b833acb-3447-45a3-8fec-2e9e22a73bd4","classifierRevision":"classifier_v2","observedAt":"2026-10-09T11:16:58.583Z","classifiedAt":"2026-10-09T11:17:02.873Z","artifact":{"name":"got","version":"16.0.0","integrity":"sha512-UtzSUebtRHHAUaNB/X37X1LQgHvdSrgXUIWGUBDhLu05CYtUr9svjeN6wmG333nzdJASFUjXMOuRBjZLf8oF1w==","tarballUrl":"https://registry.npmjs.org/got/-/got-16.0.0.tgz"},"preparation":{"id":"38ffffd4-a3fe-4a14-a59a-897b3cef9c0a","outcome":"pass","failure":null,"profileRevision":"npm_11_19_0_linux_amd64_v2","snapshot":{"id":"672f0778-dc53-4d9b-9253-abd0bd4326bc","generation":"b884d192-4631-419a-9194-d3291ff8bf67","lockDigest":"8e2952df0a1909858da310cecf0b10c3f54ed4ee05a642842c8accc041092cf6","treeDigest":"cf33358770d150a034059fed27d7ff1e957e211e28b2a26021c7050f95f26b91","profileRevision":"npm_11_19_0_linux_amd64_v2","installerImage":"node:24.21.0-bookworm-slim@sha256:5cbc7caba8c2c0f0bca675d1b61b9f2857e1cf1853c6164ee9dd409501a936e7"},"installedCount":21,"omittedOptionalCount":0,"staticObservations":{"native":{"count":0,"paths":[],"buildIndicators":[],"prerequisiteProven":false},"declared":{"type":"module","engines":{"node":">=22"},"exports":{"types":"./dist/source/index.d.ts","default":"./dist/source/index.js"},"scripts":{"test":"xo && tsc --noEmit && NODE_OPTIONS='--import=tsx/esm' ava","build":"del-cli dist && tsc","prepare":"npm run build","release":"np","test:coverage":"xo && tsc --noEmit && NODE_OPTIONS='--import=tsx/esm' c8 ava"},"dependencies":{"keyv":"^5.6.0","type-fest":"^5.6.0","chunk-data":"^0.1.0","byte-counter":"^0.1.0","responselike":"^4.0.2","lowercase-keys":"^4.0.1","@sindresorhus/is":"^8.0.0","cacheable-request":"^13.0.18","uint8array-extras":"^1.5.0","decompress-response":"^10.0.0"},"devDependencies":{"c8":"^12.0.0","np":"^12.0.1","xo":"^1.2.3","ava":"^6.4.1","pem":"^1.14.8","tsx":"^4.21.0","pify":"^6.1.0","axios":"^1.15.1","delay":"^7.0.0","sinon":"^22.1.0","tempy":"^3.2.0","del-cli":"^7.0.0","express":"^5.2.1","p-event":"^7.1.0","request":"^2.88.2","bluebird":"^3.7.2","benchmark":"^2.1.4","quick-lru":"^7.3.0","@types/pem":"^1.14.4","get-stream":"^9.0.1","node-fetch":"^3.3.2","typescript":"^5.9.3","@types/node":"^26.4.0","body-parser":"^2.2.2","create-cert":"^1.0.6","expect-type":"^1.3.0","slow-stream":"0.0.4","then-busboy":"^5.2.1","@hapi/bourne":"^4.0.1","@types/sinon":"^22.0.0","tough-cookie":"^6.0.0","@types/express":"^5.0.6","@types/request":"^2.48.13","readable-stream":"^4.7.0","@types/benchmark":"^2.1.5","create-test-server":"^3.0.1","@sinonjs/fake-timers":"^15.3.2","@sindresorhus/tsconfig":"^8.1.0","@types/readable-stream":"^4.0.23","@types/sinonjs__fake-timers":"^15.0.1"}},"platform":{"os":true,"cpu":true,"libc":true},"evidenceLevel":"static_only","lifecycleScripts":["prepare"]}},"matrix":{"id":"bfab88d7-3f4a-41b5-97a9-5aafd5bda511","revision":"production_ab51508deb208994caf81cb80f14b800","platform":"linux_amd64_glibc","harnessRevision":"load_v2","planRevision":"explicit_exports_v1","policyRevision":"runtime_limits_v2","images":[{"profileId":"node_24_21_0","kind":"node","version":"24.21.0","imageId":"sha256:f2fcbb4dfbd6d5f57f4e43de97e70182d9982ac7cc0cc063dfff2cf1759a411d","builtAt":"2026-10-04T15:20:38.392Z","sourceImage":"node:24.21.0-bookworm-slim@sha256:5cbc7caba8c2c0f0bca675d1b61b9f2857e1cf1853c6164ee9dd409501a936e7","baseImage":"gcr.io/distroless/cc-debian13:nonroot@sha256:20afe6a70f2565277b704cc17289cb557f353a3619f6350f52a2317106598df4","supportImage":"node:26.10.0-bookworm-slim@sha256:0a992e1420e2d70611578f1844a6f10a9d11fe6bb535aabf72efe3007f13d79b","platform":"linux_amd64_glibc","recipeRevision":"runtime_image_v1"},{"profileId":"node_26_10_0","kind":"node","version":"26.10.0","imageId":"sha256:9c1c93cc35d1408d26a61c4efccbde37c35425e362a2e723b885c3333d2be073","builtAt":"2026-10-04T15:20:47.161Z","sourceImage":"node:26.10.0-bookworm-slim@sha256:0a992e1420e2d70611578f1844a6f10a9d11fe6bb535aabf72efe3007f13d79b","baseImage":"gcr.io/distroless/cc-debian13:nonroot@sha256:20afe6a70f2565277b704cc17289cb557f353a3619f6350f52a2317106598df4","supportImage":"node:26.10.0-bookworm-slim@sha256:0a992e1420e2d70611578f1844a6f10a9d11fe6bb535aabf72efe3007f13d79b","platform":"linux_amd64_glibc","recipeRevision":"runtime_image_v1"},{"profileId":"bun_1_4_2","kind":"bun","version":"1.4.2","imageId":"sha256:2343363679fb92d59a395ff081b783b5514f06295b1bc6d61baaeef17e793789","builtAt":"2026-10-04T15:21:07.160Z","sourceImage":"oven/bun:1.4.2-debian@sha256:53710ce0f14eef8312521c586a7ae1d9aeab4011840f09f1966073b68fc2e2ab","baseImage":"gcr.io/distroless/cc-debian13:nonroot@sha256:20afe6a70f2565277b704cc17289cb557f353a3619f6350f52a2317106598df4","supportImage":"node:26.10.0-bookworm-slim@sha256:0a992e1420e2d70611578f1844a6f10a9d11fe6bb535aabf72efe3007f13d79b","platform":"linux_amd64_glibc","recipeRevision":"runtime_image_v1"},{"profileId":"deno_2_9_7","kind":"deno","version":"2.9.7","imageId":"sha256:4292bb23555f98fb9dfc30fb447daa1c301686d89264fd8643ccb86bc0d53c29","builtAt":"2026-10-04T15:21:22.570Z","sourceImage":"denoland/deno:debian-2.9.7@sha256:869d374bdaddda4fde029c492d7219199b0e821c2c53cca5357b3a6f5b9336fc","baseImage":"gcr.io/distroless/cc-debian13:nonroot@sha256:20afe6a70f2565277b704cc17289cb557f353a3619f6350f52a2317106598df4","supportImage":"node:26.10.0-bookworm-slim@sha256:0a992e1420e2d70611578f1844a6f10a9d11fe6bb535aabf72efe3007f13d79b","platform":"linux_amd64_glibc","recipeRevision":"runtime_image_v1"}]},"omissions":{"counts":{"pattern":0,"non_executable":0,"not_exported":0,"invalid_subpath":0,"coverage_limit":0},"samples":[]},"outcome":"pass","evidenceLevel":"smoke_tested","coverageComplete":true,"cells":[{"runId":"702e136c-7447-4596-8284-b88eb0a68215","profileId":"node_24_21_0","group":"root","mode":"esm","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":419.51638499996625,"failure":null,"entries":[{"index":0,"specifier":"got","displaySpecifier":"got","outcome":"pass","durationMs":114.60903200000001,"resolvedTo":"file:///workspace/node_modules/got/dist/source/index.js","failure":null}],"sessions":[{"probeId":"45e01720-0aa5-4b2b-893d-d335aadc2b8f","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":419.51638499996625}]},{"runId":"198d4b69-308e-42b2-a877-acfdd6db2006","profileId":"node_24_21_0","group":"root","mode":"commonjs","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":518.5433060000651,"failure":null,"entries":[{"index":0,"specifier":"got","displaySpecifier":"got","outcome":"pass","durationMs":156.834461,"resolvedTo":"/workspace/node_modules/got/dist/source/index.js","failure":null}],"sessions":[{"probeId":"f25ce15a-d3ad-4525-8ec9-28a269cfdccc","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":518.5433060000651}]},{"runId":"ea3698dd-d8b6-46c6-98ad-b6c459b2c897","profileId":"node_24_21_0","group":"subpaths","mode":"esm","method":"sequential_batch_v2","outcome":"not_applicable","evidenceLevel":"static_only","coverage":{"planned":0,"observed":0,"passed":0,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":0,"failure":null,"entries":[],"sessions":[]},{"runId":"63c41152-e1a2-43d7-8148-947d17572ed3","profileId":"node_24_21_0","group":"subpaths","mode":"commonjs","method":"sequential_batch_v2","outcome":"not_applicable","evidenceLevel":"static_only","coverage":{"planned":0,"observed":0,"passed":0,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":0,"failure":null,"entries":[],"sessions":[]},{"runId":"56f0e37b-7b92-458d-91b7-c3686a05c97a","profileId":"node_26_10_0","group":"root","mode":"esm","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":512.957693999866,"failure":null,"entries":[{"index":0,"specifier":"got","displaySpecifier":"got","outcome":"pass","durationMs":188.067943,"resolvedTo":"file:///workspace/node_modules/got/dist/source/index.js","failure":null}],"sessions":[{"probeId":"4764b5a4-9b99-4241-8fbf-7873f1d4bfcb","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":512.957693999866}]},{"runId":"b7443e90-38f2-49aa-b190-f0f6004f89f6","profileId":"node_26_10_0","group":"root","mode":"commonjs","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":417.181733999867,"failure":null,"entries":[{"index":0,"specifier":"got","displaySpecifier":"got","outcome":"pass","durationMs":89.246639,"resolvedTo":"/workspace/node_modules/got/dist/source/index.js","failure":null}],"sessions":[{"probeId":"0e36584d-5a93-4b59-9b7d-8a9b70601cad","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":417.181733999867}]},{"runId":"61166359-ab31-4076-b8f2-6e3d3bc695ec","profileId":"node_26_10_0","group":"subpaths","mode":"esm","method":"sequential_batch_v2","outcome":"not_applicable","evidenceLevel":"static_only","coverage":{"planned":0,"observed":0,"passed":0,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":0,"failure":null,"entries":[],"sessions":[]},{"runId":"2263dad9-39a8-4c0e-8b58-39f48b068e49","profileId":"node_26_10_0","group":"subpaths","mode":"commonjs","method":"sequential_batch_v2","outcome":"not_applicable","evidenceLevel":"static_only","coverage":{"planned":0,"observed":0,"passed":0,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":0,"failure":null,"entries":[],"sessions":[]},{"runId":"a00b1bde-9315-4743-922c-1b1682280fc4","profileId":"bun_1_4_2","group":"root","mode":"esm","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":310.8095219999086,"failure":null,"entries":[{"index":0,"specifier":"got","displaySpecifier":"got","outcome":"pass","durationMs":51.301538,"resolvedTo":"file:///workspace/node_modules/got/dist/source/index.js","failure":null}],"sessions":[{"probeId":"41bda75f-bee6-452c-b71f-8be6df0f6af3","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":310.8095219999086}]},{"runId":"297dd414-ae6f-471e-80f0-a252e2d35d75","profileId":"bun_1_4_2","group":"root","mode":"commonjs","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":413.4847680001985,"failure":null,"entries":[{"index":0,"specifier":"got","displaySpecifier":"got","outcome":"pass","durationMs":78.46991299999999,"resolvedTo":"/workspace/node_modules/got/dist/source/index.js","failure":null}],"sessions":[{"probeId":"c3269c4b-78f0-45a5-8981-717e265bd60d","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":413.4847680001985}]},{"runId":"744169cd-84e9-488c-a97a-bf71789e27c6","profileId":"bun_1_4_2","group":"subpaths","mode":"esm","method":"sequential_batch_v2","outcome":"not_applicable","evidenceLevel":"static_only","coverage":{"planned":0,"observed":0,"passed":0,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":0,"failure":null,"entries":[],"sessions":[]},{"runId":"c595ac1d-9aae-474c-b82b-076a8d15d154","profileId":"bun_1_4_2","group":"subpaths","mode":"commonjs","method":"sequential_batch_v2","outcome":"not_applicable","evidenceLevel":"static_only","coverage":{"planned":0,"observed":0,"passed":0,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":0,"failure":null,"entries":[],"sessions":[]},{"runId":"633af98d-c9a4-4a90-99d3-b2869ef848bc","profileId":"deno_2_9_7","group":"root","mode":"esm","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":514.4791109999642,"failure":null,"entries":[{"index":0,"specifier":"got","displaySpecifier":"got","outcome":"pass","durationMs":91.040618,"resolvedTo":"file:///workspace/node_modules/got/dist/source/index.js","failure":null}],"sessions":[{"probeId":"978f46f7-81b2-420a-aebb-c9c7ee6b7785","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":514.4791109999642}]},{"runId":"4961cd29-ce80-4b61-b756-880fab741302","profileId":"deno_2_9_7","group":"root","mode":"commonjs","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":529.3464619999286,"failure":null,"entries":[{"index":0,"specifier":"got","displaySpecifier":"got","outcome":"pass","durationMs":100.921727,"resolvedTo":"/workspace/node_modules/got/dist/source/index.js","failure":null}],"sessions":[{"probeId":"3ed1b8f0-f6f6-4b9d-9a0e-048245f35867","startIndex":0,"stopReason":"completed","exitCode":0,"oomKilled":false,"durationMs":529.3464619999286}]},{"runId":"690224a7-2b40-4c63-a515-bb40c0c46dbf","profileId":"deno_2_9_7","group":"subpaths","mode":"esm","method":"sequential_batch_v2","outcome":"not_applicable","evidenceLevel":"static_only","coverage":{"planned":0,"observed":0,"passed":0,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":0,"failure":null,"entries":[],"sessions":[]},{"runId":"df32fe8e-ce17-41ec-849d-544b0de88596","profileId":"deno_2_9_7","group":"subpaths","mode":"commonjs","method":"sequential_batch_v2","outcome":"not_applicable","evidenceLevel":"static_only","coverage":{"planned":0,"observed":0,"passed":0,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":0,"failure":null,"entries":[],"sessions":[]}],"limitations":["Only installation and loading were observed; functional correctness and package safety are not established.","Subpath batches share module caches and globals; root modes use separate fresh sandboxes.","Package-visible harness observations can be tampered with. They are not adversarial attestation.","Evidence applies to these exact artifacts, dependency snapshot, runtime images and Linux amd64/glibc policy.","Runtime error codes are captured observations and can also be thrown by package code."]}}