What the network found
Every line below is a measurement, not an opinion. Each one links to a published sample whose contract is executed in a pinned container with the network switched off, so you can re-run it and disagree with the result.
OS and runtime come from the environment recorded by the linked sample. Entries without that dimension are omitted when you select it.
597 findings across 8 ecosystems.
- cargo
- composer
- gem
- golang
- hex
- npm
- pub
- pypi
Stated by the sample, measured by its contract
Showing 26–50 of 568 measured by published samples.
-
golangSample contractgo · linux/x64github.com/mattn/go-isatty@v0.0.20
Believedisatty.IsTerminal and isatty.IsCygwinTerminal inspect terminal and shell environment variables such as TERM or CYGWIN to determine or override terminal detection for redirected descriptors
Measuredisatty.IsTerminal evaluates file descriptors via OS ioctl/syscall and returns false for files and pipes regardless of whether TERM is configured to xterm-256color or another terminal type.
-
golangSample contractgo · linux/x64github.com/jackc/pgpassfile@v1.0.0
BelievedParsePassfile returns a parsing error when encountering unescaped colons in password fields or parses them as part of the password field.
MeasuredParsePassfile silently discards lines with unescaped colons in password fields rather than returning an error or preserving colons, causing FindPassword to return an empty string.
-
golangSample contractgo · linux/x64github.com/dustin/go-humanize@v1.0.1
BelievedFormatInteger with an empty format string or "#,###" formats an integer with comma thousands grouping and no decimal places
Measuredhumanize.FormatInteger with an empty format string returns "12,345.00" rather than "12,345" because it delegates to FormatFloat with the default two-decimal template.
-
pypiSample contractpython · linux/x64joblib@1.5.3
BelievedConfiguring parallel_config with prefer='threads' and n_jobs=4 executes subsequent unparameterized Parallel calls across 4 worker threads.
MeasuredSetting prefer='threads' in parallel_config with n_jobs=4 switches to ThreadingBackend but silently resets implicit n_jobs in context to 1, while explicit backend='threading' preserves n_jobs=4.
-
golangSample contractgo · linux/x64github.com/stretchr/testify@v1.11.1
BelievedA testify suite always executes its SetupSuite and TearDownSuite hooks whenever suite.Run is called, even when the testify.m flag filters out all test methods.
MeasuredSetting the testify.m flag to a regular expression filters executed test methods and their per-test lifecycle hooks, and skips suite-level SetupSuite and TearDownSuite entirely when zero methods match.
-
golangSample contractgo · linux/x64github.com/Microsoft/go-winio@v0.6.2
Believedguid.FromString parses standard Windows registry GUID strings with braces or unhyphenated hex, and ToWindowsArray produces standard RFC 4122 big-endian byte ordering.
Measuredguid.GUID.ToWindowsArray encodes Data1, Data2, and Data3 in little-endian order while preserving Data4, differing from standard RFC 4122 big-endian layout.
-
golangSample contractgo · linux/x64golang.org/x/sys@v0.30.0
Believedexecabs.LookPath and execabs.Command resolve and execute bare command names from relative directories when PATH contains '.' or a relative path
Measuredexecabs.LookPath fails with an error and returns an empty string when PATH lookup resolves a bare command name to an executable in the current working directory, and execabs.Command immediately populates cmd.Err to prevent execution.
-
npmSample contractnode · linux/x64fast-xml-parser@5.11.0
BelievedXMLParser automatically creates an Array for repeated schema elements regardless of whether the document contains one or multiple child tags.
MeasuredXMLParser parses single-child elements into plain objects rather than 1-element arrays by default, causing array methods like map to throw TypeError, unless the isArray callback explicitly returns true for the tag or jPath.
-
npmSample contractnode · linux/x64three@0.185.1
BelievedReturning false from an Object3D.traverse callback aborts traversal or skips subtrees, and child node mutations during traversal are safely handled.
MeasuredObject3D.traverse executes a pre-order depth-first traversal across all descendants and ignores boolean return values from callbacks, continuing traversal without early abort or subtree pruning.
-
npmSample contractnode · linux/x64three@0.185.1
BelievedImageUtils.sRGBToLinear preserves alpha channel transparency untouched when converting canvas ImageData, and Lut maps color gradients bottom-up.
MeasuredImageUtils.sRGBToLinear extracts canvas pixel data via CanvasRenderingContext2D.getImageData and applies the sRGB-to-linear conversion curve across all 4 channels, transforming translucent alpha values rather than preserving alpha intact.
-
npmSample contractnode · linux/x64three@0.185.1
BelievedBufferAttribute.getX indexes raw flat array offsets, divides Int8Array values symmetrically by 128, and modifies Float32Array values when normalized is true.
MeasuredBufferAttribute.getX multiplies the passed index by itemSize to access the first component of that logical vertex, rather than accessing the flat array offset directly.
-
npmSample contractnode · linux/x64react@18.3.1
BelievedReact useId accepts a prefix string parameter to customize generated element IDs and produces unescaped CSS-compatible selector strings.
MeasureduseId returns colon-delimited strings like :R0: that ignore any prefix arguments passed to the hook and cannot be used directly in unescaped CSS ID selectors.
-
npmSample contractnode · linux/x64react@18.3.1
BelievedstartTransition accepts async callbacks and returns a Promise tracking the pending transition, maintaining transition batching across await boundaries.
MeasuredstartTransition returns undefined synchronously even when passed an async callback, and restores the transition batch config to null before any post-await microtasks run.
-
cargoSample contractrust · linux/x64regex@1.13.1
BelievedRegexBuilder compiles any syntactically valid regular expression into memory without size constraints and supports standard octal escape sequences by default.
MeasuredRegexBuilder::size_limit restricts the compiled regex memory footprint, returning Error::CompiledTooBig with the configured limit when exceeded rather than panicking or truncating the pattern.
-
pypiSample contractpython · linux/x64jinja2@3.1.6
Believeda template string ending with a newline will render with that newline intact by default
MeasuredEnvironment().from_string('hello\n').render() returns 'hello' rather than 'hello\n', because the default is to strip exactly one trailing newline.
-
npmSample contractnode · linux/x64pino@9.14.0
BelievedA mixin function that returns a shared object safely adds those properties to the log record while leaving the shared object unmodified.
Measuredreturning a shared object from mixin() results in that object being mutated with the properties of the logged payload, causing subsequent log entries to inherit those properties.
-
golangSample contractgo · linux/x64github.com/spf13/cobra@v1.9.1
BelievedLocal flags declared on a parent command are parsed when specified before a subcommand name on the command line.
MeasuredBy default with TraverseChildren false, passing a parent local flag before a subcommand name fails with an unknown flag error because all preceding flags are evaluated in the child command context.
-
npmSample contractnode · linux/x64marked@13.0.2
BelievedReturning undefined from a custom marked renderer method falls back to the default renderer rather than suppressing output.
MeasuredReturning undefined from a custom renderer method produces an empty string rather than delegating to the default renderer, which requires returning explicit boolean false.
-
npmSample contractnode · linux/x64happy-dom@20.11.2
BelievedEvaluating scripts in a GlobalWindow executes in an isolated window context where bare window and document identifiers resolve to the instance.
MeasuredDOM scripts evaluated in GlobalWindow run in host globalThis without a VM context, causing unqualified window references to throw ReferenceError rather than resolving the window instance
-
npmSample contractnode · linux/x64happy-dom@20.11.2
BelievedreadAsString() and read() inspect captured virtual console logs non-destructively without clearing the internal buffer until an explicit clear() invocation.
MeasuredVirtualConsolePrinter.read() and readAsString() destructively drain the internal log buffer upon invocation, causing subsequent immediate reads to return empty results.
-
npmSample contractnode · linux/x64minimatch@10.1.1
Believedslashless glob patterns match file basenames at any directory depth when filtering path arrays
Measuredminimatch.filter generates a curried predicate function for Array.prototype.filter where slashless patterns match root paths by default and match base filenames across directories when matchBase is enabled
-
npmSample contractnode · linux/x64minimatch@10.1.1
Believedminimatch.escape prefixes backslashes before all special characters including Windows path separators and braces
Measuredminimatch.escape wraps wildcard and grouping characters in single-character classes rather than prefixing backslashes when windowsPathsNoEscape is enabled, preserving backslash directory separators while leaving braces unescaped unless magicalBraces is set
-
npmSample contractnode · linux/x64fast-glob@3.3.3
Believedfg.sync with stats: true returns string path arrays unless objectMode is explicitly requested, flat basename patterns never match nested directories, and pattern array order changes negative pattern filtering.
Measuredfg.sync with stats: true automatically produces an array of Entry objects containing fs.Stats and Dirent instances without requiring objectMode: true.
-
golangSample contractgo · linux/x64github.com/caddyserver/caddy/v2@v2.11.4
BelievedA bare numeric address like "8080" configures listening port 8080, and URI schemes like "tcp://localhost:2019" parse as standard TCP addresses.
Measuredcaddy.ParseNetworkAddress("8080") parses 8080 as the hostname with StartPort 0, while ":8080" is required to configure port 8080.
-
pypiSample contractpython · linux/x64requests@2.34.2
BelievedCustom transport adapters receive allow_redirects directly in send() kwargs and must handle redirect following themselves.
MeasuredBaseAdapter.send is an unimplemented interface method that raises NotImplementedError, requiring custom adapters to supply transport execution.
How to check any line here
Open the sample, read its contract, run it. The contract is the sample's own test: it runs offline in a pinned container, and the signed receipt of that run is what the network stores. Nothing here rests on our reading of a library — only on what the library did.
Some published samples are not on this page. Their contract passed and the sample is live — but no line of it reads as a sentence, and an assertion like expect(x).toBe(1) tells a reader nothing beside the belief it checks. Those are left out rather than printed as evidence nobody can read.