Runtime evidence / smoke tested

undici8.11.2

Observed 2026-10-09 10:07 UTC · Linux amd64 / glibc

Download JSON

Version summary · Observation 0 · Report history · Maintainer tools (coming soon)

Passed

All applicable planned loading observations completed.

This is loading evidence. It does not establish functional correctness or package safety.

Runtime matrix

4 pinned runtimes · production_ce416e976d3b4c51b252859d31c1fa7c

Loading outcomes by runtime and consumer mode
Runtime	Root import	Root require	Subpath imports	Subpath requires
Node.js24.21.0	Passed	Passed	Not applicable0 passed · 0 failed	Not applicable0 passed · 0 failed
Node.js26.10.0	Passed	Passed	Not applicable0 passed · 0 failed	Not applicable0 passed · 0 failed
Bun1.4.2	Passed	Passed	Not applicable0 passed · 0 failed	Not applicable0 passed · 0 failed
Deno2.9.7	Passed	Passed	Not applicable0 passed · 0 failed	Not applicable0 passed · 0 failed

Node.js 24.21.0

Root importPassed

Root requirePassed

Subpath importsNot applicable0 passed · 0 failed

Subpath requiresNot applicable0 passed · 0 failed

Node.js 26.10.0

Root importPassed

Root requirePassed

Subpath importsNot applicable0 passed · 0 failed

Subpath requiresNot applicable0 passed · 0 failed

Bun 1.4.2

Root importPassed

Root requirePassed

Subpath importsNot applicable0 passed · 0 failed

Subpath requiresNot applicable0 passed · 0 failed

Deno 2.9.7

Root importPassed

Root requirePassed

Subpath importsNot applicable0 passed · 0 failed

Subpath requiresNot applicable0 passed · 0 failed

Import uses ESM; require uses CommonJS. Root modes use fresh sandboxes. Subpath batches share module caches and globals. Select a result to inspect its evidence.

Does undici work in Node.js, Bun and Deno?

All applicable planned loading checks completed. The runtimes used the same installed dependency snapshot. Test environment: Linux amd64 / glibc, with install scripts and execution networking disabled. Successful import or require does not prove that package functions, native features or your application work.

Does undici work with Node.js?

undici@8.11.2 passed the applicable loading checks in Node.js 24.21.0. 2 passed · 0 failed.

undici@8.11.2 passed the applicable loading checks in Node.js 26.10.0. 2 passed · 0 failed.

Does undici work with Bun?

undici@8.11.2 passed the applicable loading checks in Bun 1.4.2. 2 passed · 0 failed.

Does undici work with Deno?

undici@8.11.2 passed the applicable loading checks in Deno 2.9.7. 2 passed · 0 failed.

Compare npm package compatibility across Node.js, Bun and Deno · Browse observed runtime loading failures

Shared preparation

Passed

1 installed packages · 0 optional dependencies omitted · lifecycle scripts disabled

The omitted count covers locked optional dependencies. Optional peers are separate and are not automatically installed.

Static manifest, native and script observations

Static indicators are context; their presence alone does not establish a prerequisite or failure.

{
  "native": {
    "count": 0,
    "paths": [],
    "buildIndicators": [],
    "prerequisiteProven": false
  },
  "declared": {
    "main": "index.js",
    "engines": {
      "node": ">=22.19.0"
    },
    "scripts": {
      "lint": "eslint --cache",
      "test": "npm run test:javascript && cross-env NODE_V8_COVERAGE= npm run test:typescript",
      "bench": "echo \"Error: Benchmarks have been moved to '/benchmarks'\" && exit 1",
      "prepare": "husky && node ./scripts/platform-shell.js",
      "test:h2": "npm run test:h2:core && npm run test:h2:fetch",
      "coverage": "npm run coverage:clean && cross-env NODE_V8_COVERAGE=./coverage/tmp npm run test:javascript && npm run coverage:report",
      "lint:fix": "eslint --fix --cache",
      "test:tdd": "borp --timeout 180000 --expose-gc -p \"test/*.js\"",
      "test:wpt": "npm run test:wpt:setup && node test/web-platform-tests/wpt-runner.mjs run /fetch /mimesniff /xhr /websockets /eventsource",
      "test:jest": "cross-env NODE_V8_COVERAGE= jest",
      "test:unit": "borp --timeout 180000 --expose-gc -p \"test/*.js\"",
      "build:node": "esbuild index-fetch.js --bundle --platform=node --outfile=undici-fetch.js --define:esbuildDetection=1 --keep-names && node scripts/strip-comments.js",
      "build:wasm": "node build/wasm.js --docker",
      "test:cache": "borp --timeout 180000 -p \"test/cache/*.js\"",
      "test:fetch": "npm run build:node && borp --timeout 180000 --expose-gc --concurrency 1 -p \"test/fetch/*.js\" && npm run test:webidl && npm run test:busboy",
      "test:infra": "borp --timeout 180000 -p \"test/infra/*.js\"",
      "coverage:ci": "npm run coverage:clean && cross-env NODE_V8_COVERAGE=./coverage/tmp npm run test:javascript && npm run coverage:report:ci",
      "test:busboy": "borp --timeout 180000 -p \"test/busboy/*.js\"",
      "test:webidl": "borp --timeout 180000 -p \"test/webidl/*.js\"",
      "generate-pem": "node scripts/generate-pem.js",
      "test:cookies": "borp --timeout 180000 -p \"test/cookie/*.js\"",
      "test:fuzzing": "node test/fuzzing/fuzzing.test.js",
      "test:h2:core": "borp --timeout 180000 -p \"test/+(http2|h2)*.js\"",
      "serve:website": "echo \"Error: Documentation has been moved to '/docs'\" && exit 1",
      "test:h2:fetch": "npm run build:node && borp --timeout 180000 -p \"test/fetch/http2*.js\"",
      "coverage:clean": "node ./scripts/clean-coverage.js",
      "test:node-test": "borp --timeout 180000 -p \"test/node-test/**/*.js\"",
      "test:websocket": "borp --timeout 180000 -p \"test/websocket/**/*.js\"",
      "test:wpt:setup": "node test/web-platform-tests/wpt-runner.mjs setup",
      "coverage:report": "cross-env NODE_V8_COVERAGE= c8 report",
      "test:javascript": "npm run test:javascript:no-jest && npm run test:jest",
      "test:node-fetch": "borp --timeout 180000 -p \"test/node-fetch/**/*.js\"",
      "test:typescript": "tsd && tsc test/imports/undici-import.ts --typeRoots ./types --noEmit && tsc ./types/*.d.ts --noEmit --typeRoots ./types",
      "test:cache-tests": "node test/cache-interceptor/cache-tests.mjs --ci",
      "test:eventsource": "npm run build:node && borp --timeout 180000 --expose-gc -p \"test/eventsource/*.js\"",
      "test:interceptors": "borp --timeout 180000 -p \"test/interceptors/*.js\"",
      "coverage:report:ci": "c8 report",
      "test:tdd:node-test": "borp --timeout 180000 -p \"test/node-test/**/*.js\" -w",
      "test:cache-interceptor": "borp --timeout 180000 -p \"test/cache-interceptor/*.js\"",
      "test:javascript:no-jest": "npm run generate-pem && npm run test:unit && npm run test:fetch && npm run test:node-fetch && npm run test:infra && npm run test:cache && npm run test:cache-interceptor && npm run test:interceptors && npm run test:cookies && npm run test:eventsource && npm run test:subresource-integrity && npm run test:wpt && npm run test:websocket && npm run test:node-test && npm run test:cache-tests",
      "test:websocket:autobahn": "node test/autobahn/client.js",
      "test:subresource-integrity": "borp --timeout 180000 -p \"test/subresource-integrity/*.js\"",
      "test:javascript:without-intl": "npm run test:javascript:no-jest",
      "test:cache-interceptor:sqlite": "cross-env NODE_OPTIONS=--experimental-sqlite npm run test:cache-interceptor",
      "test:websocket:autobahn:report": "node test/autobahn/report.js"
    },
    "devDependencies": {
      "c8": "^12.0.0",
      "ws": "^8.11.0",
      "tsd": "^0.33.0",
      "borp": "^1.0.0",
      "jest": "^30.0.5",
      "husky": "^9.0.7",
      "proxy": "^4.0.0",
      "eslint": "^9.9.0",
      "esbuild": "^0.28.0",
      "cross-env": "^10.0.0",
      "dns-packet": "^5.4.0",
      "fast-check": "^4.1.1",
      "node-forge": "^1.3.1",
      "typescript": "^6.0.2",
      "@types/node": "^22.0.0",
      "neostandard": "^0.13.0",
      "jsondiffpatch": "^0.7.3",
      "@fastify/busboy": "3.2.2",
      "abort-controller": "^3.0.0",
      "@matteo.collina/tspl": "^0.2.0",
      "@sinonjs/fake-timers": "^12.0.0",
      "@metcoder95/https-pem": "^1.0.0"
    }
  },
  "platform": {
    "os": true,
    "cpu": true,
    "libc": true
  },
  "evidenceLevel": "static_only",
  "lifecycleScripts": [
    "prepare"
  ]
}

Coverage and evidence

Node.js 24.21.0 · Root · ESM importPassed

1 passed · 0 failed · 1 observed of 1 planned

Evidence JSON

Node.js 24.21.0 · Root · CommonJS requirePassed

1 passed · 0 failed · 1 observed of 1 planned

Evidence JSON

Node.js 24.21.0 · Subpaths · ESM importNot applicable

0 passed · 0 failed · 0 observed of 0 planned

Evidence JSON

Node.js 24.21.0 · Subpaths · CommonJS requireNot applicable

0 passed · 0 failed · 0 observed of 0 planned

Evidence JSON

Node.js 26.10.0 · Root · ESM importPassed

1 passed · 0 failed · 1 observed of 1 planned

Evidence JSON

Node.js 26.10.0 · Root · CommonJS requirePassed

1 passed · 0 failed · 1 observed of 1 planned

Evidence JSON

Node.js 26.10.0 · Subpaths · ESM importNot applicable

0 passed · 0 failed · 0 observed of 0 planned

Evidence JSON

Node.js 26.10.0 · Subpaths · CommonJS requireNot applicable

0 passed · 0 failed · 0 observed of 0 planned

Evidence JSON

Bun 1.4.2 · Root · ESM importPassed

1 passed · 0 failed · 1 observed of 1 planned

Evidence JSON

Bun 1.4.2 · Root · CommonJS requirePassed

1 passed · 0 failed · 1 observed of 1 planned

Evidence JSON

Bun 1.4.2 · Subpaths · ESM importNot applicable

0 passed · 0 failed · 0 observed of 0 planned

Evidence JSON

Bun 1.4.2 · Subpaths · CommonJS requireNot applicable

0 passed · 0 failed · 0 observed of 0 planned

Evidence JSON

Deno 2.9.7 · Root · ESM importPassed

1 passed · 0 failed · 1 observed of 1 planned

Evidence JSON

Deno 2.9.7 · Root · CommonJS requirePassed

1 passed · 0 failed · 1 observed of 1 planned

Evidence JSON

Deno 2.9.7 · Subpaths · ESM importNot applicable

0 passed · 0 failed · 0 observed of 0 planned

Evidence JSON

Deno 2.9.7 · Subpaths · CommonJS requireNot applicable

0 passed · 0 failed · 0 observed of 0 planned

Evidence JSON

Planner omissions

pattern: 0
non executable: 0
not exported: 0
invalid subpath: 0
coverage limit: 0

Reproduce these inputs

Download the recorded inputs and exact dependency lock. These files do not include the CLI, runtime images or installed packages.

Reproduction inputs Exact package lock

Local replay requires setup. The CLI currently runs from the CompatLab source repository on a qualified Linux amd64/runsc host. Hosted runtime images are not yet distributed for public download; an operator must supply the exact images named in this report. A fresh image build does not substitute for them. CLI setup and replay requirements

Command for a configured host

Run from the built CompatLab repository with both downloads in that directory and the exact runtime images loaded. Rebuilding creates a new snapshot generation.

sudo "$(command -v node)" apps/cli/dist/bin.js reproduce ./4712cd49-164e-4cf0-9cc1-f6cfa70d4e8f-reproduction.json --rebuild --lockfile ./package-lock.json --json

The original worker last reported its sealed snapshot as available. Verified reuse requires those actual bytes in your local state directory.

Exact provenance

artifact: undici@8.11.2
integrity: sha512-u4UB2/IrKdU6lFxumHmmo1a3fCQO5tzQllRorfoRS63txhrB7xTpSn1PftwC4qEHkOaqP95fCWW4lJzwErwzhQ==
tarball: https://registry.npmjs.org/undici/-/undici-8.11.2.tgz
snapshot: 54f6ae96-f6cf-4de5-9b1b-1960a62ee9e2
generation: 3d3adaf8-74e9-4255-9590-b9816ff258d3
lockDigest: 80f915b6335efa6ad4eb4cac4e1badf29117ec2aaa114a015d5d1c8da9564f23
treeDigest: 9335b947c052d413245a8dcde5ec39074fac77e5cfe2567e1baf29012f5c66cc
installerImage: node:24.21.0-bookworm-slim@sha256:5cbc7caba8c2c0f0bca675d1b61b9f2857e1cf1853c6164ee9dd409501a936e7
preparationProfile: npm_11_19_0_linux_amd64_v2
harness: load_v2
planner: explicit_exports_v1
policy: runtime_limits_v2
classifier: classifier_v2
classifiedAt: 2026-10-09T10:07:02.374Z

node_24_21_0

sha256:e3a5a41a242a766e69f326b91f9ed9280c5719ad3e9ab54f0ac28bfc71d77794

Built 2026-10-04 15:20 UTC · runtime_image_v1

node_26_10_0

sha256:5d2fa297021c7db25494856bb25e2cddecbb020722ce1e0f2101385a063c0611

Built 2026-10-04 15:20 UTC · runtime_image_v1

bun_1_4_2

sha256:fd67412f5baad0c2b1038367df9cf2d4b33237d3815e16eedae16cfd94ab3182

Built 2026-10-04 15:21 UTC · runtime_image_v1

deno_2_9_7

sha256:3b0f993e5ec0b1d4e8e09bc50ae53f142f7347d0baf96cefe7a8cfe7a00f7958

Built 2026-10-04 15:21 UTC · runtime_image_v1

Evidence limitations

Only installation and loading were observed; functional correctness and package safety are not established.
Subpath batches share module caches and globals; root modes use separate fresh sandboxes.
Package-visible harness observations can be tampered with. They are not adversarial attestation.
Evidence applies to these exact artifacts, dependency snapshot, runtime images and Linux amd64/glibc policy.
Runtime error codes are captured observations and can also be thrown by package code.