← Package details

Runtime evidence / smoke tested

zod4.6.7

Observed 2026-10-12 21:26 UTC · Linux amd64 / glibc

Classified 2026-10-12 21:26 UTC · classifier_v3

Download JSON

Selected import result

zod/v4/core

Passed

zod@4.6.7 · Bun 1.4.2 · ESM import

Observed 2026-10-12 21:26 UTC · Linux amd64 / glibc · Sequential subpath batch

0.03277600000000547 ms in the original load · Originally resolved to file:///workspace/node_modules/zod/v4/core/index.js

Recorded return type: object. For import, this describes the module namespace. It does not check its named exports or behavior.

Loading success does not establish functional correctness or package safety. This is one entry; the report’s overall coverage and limitations still apply.

Immutable loading evidence badge for zod
Inconclusive

Coverage is limited. Inspect the groups and omissions below.

This is loading evidence. It does not establish functional correctness or package safety.

Runtime matrix

4 pinned runtimes · production_02b156486b9cf20b1f2767cb352f56ae

Import uses ESM; require uses CommonJS. Root modes use fresh sandboxes. Subpath batches share module caches and globals. Select a result to inspect its evidence.

Does zod work in Node.js, Bun and Deno?

Coverage is limited: some exports or checks were omitted, incomplete or unavailable. A passing runtime row does not remove those gaps. The runtimes used the same installed dependency snapshot. Test environment: Linux amd64 / glibc, with install scripts and execution networking disabled. Successful import or require does not prove that package functions, native features or your application work.

Does zod work with Node.js?

zod@4.6.7 passed the applicable loading checks in Node.js 24.21.0. 20 passed · 0 failed.

zod@4.6.7 passed the applicable loading checks in Node.js 26.10.0. 20 passed · 0 failed.

Does zod work with Bun?

zod@4.6.7 passed the applicable loading checks in Bun 1.4.2. 20 passed · 0 failed.

Does zod work with Deno?

zod@4.6.7 passed the applicable loading checks in Deno 2.9.7. 20 passed · 0 failed.

Compare npm package compatibility across Node.js, Bun and Deno · Browse observed runtime loading failures

Shared preparation

Passed

1 installed packages · 0 optional dependencies omitted · lifecycle scripts disabled

The omitted count covers locked optional dependencies. Optional peers are separate and are not automatically installed.

Static manifest, native and script observations

Static indicators are context; their presence alone does not establish a prerequisite or failure.

Coverage and evidence

Node.js 24.21.0 · Root · ESM importPassed

1 passed · 0 failed · 1 observed of 1 planned

Evidence JSON
Node.js 24.21.0 · Root · CommonJS requirePassed

1 passed · 0 failed · 1 observed of 1 planned

Evidence JSON
Node.js 24.21.0 · Subpaths · ESM importPassed

9 passed · 0 failed · 9 observed of 9 planned

Evidence JSON
Node.js 24.21.0 · Subpaths · CommonJS requirePassed

9 passed · 0 failed · 9 observed of 9 planned

Evidence JSON
Node.js 26.10.0 · Root · ESM importPassed

1 passed · 0 failed · 1 observed of 1 planned

Evidence JSON
Node.js 26.10.0 · Root · CommonJS requirePassed

1 passed · 0 failed · 1 observed of 1 planned

Evidence JSON
Node.js 26.10.0 · Subpaths · ESM importPassed

9 passed · 0 failed · 9 observed of 9 planned

Evidence JSON
Node.js 26.10.0 · Subpaths · CommonJS requirePassed

9 passed · 0 failed · 9 observed of 9 planned

Evidence JSON
Bun 1.4.2 · Root · ESM importPassed

1 passed · 0 failed · 1 observed of 1 planned

Evidence JSON
Bun 1.4.2 · Root · CommonJS requirePassed

1 passed · 0 failed · 1 observed of 1 planned

Evidence JSON
Bun 1.4.2 · Subpaths · ESM importPassed

9 passed · 0 failed · 9 observed of 9 planned

Evidence JSON
Bun 1.4.2 · Subpaths · CommonJS requirePassed

9 passed · 0 failed · 9 observed of 9 planned

Evidence JSON
Deno 2.9.7 · Root · ESM importPassed

1 passed · 0 failed · 1 observed of 1 planned

Evidence JSON
Deno 2.9.7 · Root · CommonJS requirePassed

1 passed · 0 failed · 1 observed of 1 planned

Evidence JSON
Deno 2.9.7 · Subpaths · ESM importPassed

9 passed · 0 failed · 9 observed of 9 planned

Evidence JSON
Deno 2.9.7 · Subpaths · CommonJS requirePassed

9 passed · 0 failed · 9 observed of 9 planned

Evidence JSON
Planner omissions
pattern
1
non executable
1
not exported
0
invalid subpath
0
coverage limit
0
  • ./package.json — non executable
  • ./v4/locales/* — pattern

Reproduce these inputs

Download the recorded inputs and exact dependency lock. These files do not include the CLI, runtime images or installed packages.

Local replay requires setup. The CLI currently runs from the CompatLab source repository on a qualified Linux amd64/runsc host. Hosted runtime images are not yet distributed for public download; an operator must supply the exact images named in this report. A fresh image build does not substitute for them. CLI setup and replay requirements

Command for a configured host

Run from the built CompatLab repository with both downloads in that directory and the exact runtime images loaded. Rebuilding creates a new snapshot generation.

sudo "$(command -v node)" apps/cli/dist/bin.js reproduce ./98dbec06-fdb3-4718-b60f-43f42171ad6c-reproduction.json --rebuild --lockfile ./package-lock.json --json

The original worker last reported its sealed snapshot as available. Verified reuse requires those actual bytes in your local state directory.

Exact provenance
artifact
zod@4.6.7
integrity
sha512-g8W2D2kU6a8untc053fX1uVBKzM7yqAxW/3zwk83+6RyF2+SKOuV+c0wBDhUwzV1PaGapmZH+rmcUzPf+3CGwg==
tarball
https://registry.npmjs.org/zod/-/zod-4.6.7.tgz
snapshot
80c99bc8-f3a3-4c96-b6c3-de16b0724e02
generation
e7d3a2d8-9294-4f35-864f-5db99fde363b
lockDigest
4335ee96b8de4111acec97b04a389450b9b2cdd170abdc12d13fa467aa6d2ba3
treeDigest
a21a76a5f19fc5daa2abc51a3bdc629ae3874a9c295ac6e79a26fc11890a65fd
installerImage
node:24.21.0-bookworm-slim@sha256:5cbc7caba8c2c0f0bca675d1b61b9f2857e1cf1853c6164ee9dd409501a936e7
preparationProfile
npm_11_19_0_linux_amd64_v2
harness
load_v2
planner
explicit_exports_v1
policy
runtime_limits_v2
classifier
classifier_v3
classifiedAt
2026-10-12T21:26:35.722Z

node_24_21_0

sha256:f31ac1e8c66280786d1fd7928b1ed4182e169f85df52ee5a68bf88fe0f4b332b

Built 2026-10-04 15:20 UTC · runtime_image_v1

node_26_10_0

sha256:7d3efef66c306f00b5d22e99fb57ed563736b68b04753ec48a4f0a8091c6611f

Built 2026-10-04 15:20 UTC · runtime_image_v1

bun_1_4_2

sha256:06805a74d637d1f6e4946f83cc6286c7040d15875a5cba9c85cb18f91dce84c6

Built 2026-10-04 15:21 UTC · runtime_image_v1

deno_2_9_7

sha256:8da1e234c4c77a850794c204fb5827f54f89ff4059d3f1dcf363b0a4b77af61b

Built 2026-10-04 15:21 UTC · runtime_image_v1

Evidence limitations

  • Only installation and loading were observed; functional correctness and package safety are not established.
  • Subpath batches share module caches and globals; root modes use separate fresh sandboxes.
  • Package-visible harness observations can be tampered with. They are not adversarial attestation.
  • Evidence applies to these exact artifacts, dependency snapshot, runtime images and Linux amd64/glibc policy.
  • Runtime error codes are captured observations and can also be thrown by package code.