ネットワークが見つけたもの
以下の各行は意見ではなく測定です。いずれも公開サンプルにリンクしており、その contract はネットワークを切った固定コンテナで実行されるので、自分で再実行して結果に反論できます。
OS とランタイムはリンク先サンプルに記録された環境です。その項目がない記録は選択時に除外されます。
597 件の発見、8 個のエコシステム。
- cargo
- composer
- gem
- golang
- hex
- npm
- pub
- pypi
サンプルが述べ、その契約が測ったこと
公開サンプルが測定した結果の 426–450 件目(全 568 件)。
-
npmサンプル契約node · linux/x64commander@15.0.0
信じられていることSpawning git-style executable subcommands with Commander cleans up all process-level event listeners once the subcommand process exits.
測定結果Spawning executable subcommands in commander registers signal event listeners on the global process object that are never unregistered upon process termination, accumulating memory leaks on subsequent command invocations.
-
npmサンプル契約node · linux/x64commander@10.0.1
信じられていることPassing a string option name to Option.implies() sets that option to true when the triggering option is parsed.
測定結果Option.implies('quiet') on an option implicitly sets the boolean quiet option to true when the parent flag is present in Commander 10.0.1 instead of decomposing the string into numeric character properties as in 10.0.0
-
npmサンプル契約node · linux/x64bun@1.2.17
信じられていることThe bun npm package package.json maps the bunx binary entry to bin/bun.exe rather than a dedicated bin/bunx.exe target.
測定結果assert bun package.json bin field maps bunx to bin/bunx.exe rather than bin/bun.exe in version 1.2.17
-
gemサンプル契約ruby · linux/x64rack-test@2.2.0
信じられていることPassing an HTTP header dictionary as the third argument to Rack::Test request methods translates header names into Rack environment keys for that single request.
測定結果assert passing raw HTTP header names in the third argument leaves them un-prefixed in env rather than transforming to HTTP_ CGI keys
-
gemサンプル契約ruby · linux/x64rack-protection@4.2.1
信じられていることRack::Protection::CookieTossing evaluates each request independently so that a subsequent valid request with no duplicate cookies succeeds after an earlier attack request was rejected.
測定結果Calling Rack::Protection::CookieTossing with a subsequent valid request returns HTTP status 403 Forbidden rather than 200 OK because detected malicious cookie names are retained on the middleware instance in @bad_cookies across requests.
-
gemサンプル契約ruby · linux/x64rack-protection@4.2.1
信じられていることParameter values with non-string leaf types should survive a round trip through `EscapedParams` unchanged.
測定結果When a pre-seeded `rack.request.query_hash` with mixed values passes through `Rack::Protection::EscapedParams`, integer and symbol leaves become `nil` before the request body reaches the app, while string leaves are HTML-escaped.
-
composerサンプル契約php · linux/x64symfony/console@8.1.1
信じられていることA developer expects the default ChoiceQuestion label to be escaped, so `<comment>...` appears in the prompt brackets.
測定結果In 8.1.1, running a ChoiceQuestion with default `<comment>Add new tag</comment>` must print the prompt with `Select a tag [Add new tag]:` and must not print `[<comment>Add new tag</comment>]`.
-
gemサンプル契約ruby · linux/x64json@2.9.1
信じられていることJSON.parse with symbolize_names: true and create_additions: true deserializes custom domain objects while symbolizing remaining hash keys, and JSON.generate serializes objects that implement as_json.
測定結果assert JSON.parse raises ArgumentError when :symbolize_names and :create_additions are combined, making addition deserialization mutually exclusive with key symbolization
-
gemサンプル契約ruby · linux/x64json@2.9.1
信じられていることPassing nil to JSON.parse should raise JSON::ParserError because it is invalid JSON text.
測定結果JSON.load(nil) returns nil, so the two APIs are not behaviorally equivalent on nil input.
-
gemサンプル契約ruby · linux/x64faraday-net_http@3.4.4
信じられていることAll Ruby Net::HTTP timeout exceptions inherit from Timeout::Error and are expected to be caught under Faraday::TimeoutError.
測定結果Net::OpenTimeout is mapped to Faraday::ConnectionFailed rather than Faraday::TimeoutError because faraday-net_http routes socket open failures through its connection failure handler.
-
npmサンプル契約node · linux/x64@babel/preset-env@7.29.7
信じられていることModifying .browserslistrc on disk causes @babel/preset-env to automatically pick up the updated target environment on subsequent transformSync calls in a long-running process.
測定結果When .browserslistrc is modified on disk during a process lifetime, @babel/preset-env continues to emit transpiled code matching the stale cached targets until browserslist.clearCaches() is explicitly invoked.
-
npmサンプル契約node · linux/x64@babel/preset-env@8.0.2
信じられていることSetting targets to an empty array [] behaves identically to an empty object {} by defaulting to the standard baseline and leaving modern syntax untranspiled.
測定結果Passing targets: [] resolves to an empty environment matching zero engines and forces full ES5 transpilation of modern arrow functions and const declarations, whereas targets: {} defaults to the modern baseline.
-
gemサンプル契約ruby · linux/x64faraday-net_http@3.4.4
信じられていることall Net::HTTP timeout conditions including connection open timeouts raise Faraday::TimeoutError
測定結果assert Net::OpenTimeout raises Faraday::ConnectionFailed rather than Faraday::TimeoutError
-
gemサンプル契約ruby · linux/x64faraday@2.14.3
信じられていることPassing a nil parameter value in a Faraday query hash omits the key from the serialized URL or encodes it with an empty string equals sign, while parsing a valueless query flag always returns nil across all encoders.
測定結果Faraday::NestedParamsEncoder and Faraday::FlatParamsEncoder serialize a nil value as a valueless query key without an equals sign rather than omitting it or appending an equals sign, while FlatParamsEncoder decodes valueless query keys as the boolean true rather than nil.
-
npmサンプル契約node · linux/x64@babel/preset-env@8.0.2
信じられていることTranspiling object rest destructuring and object spread with @babel/preset-env preserves accessor descriptors like getters and copies inherited prototype properties onto the resulting object.
測定結果Transpiling object rest destructuring and object spread with @babel/preset-env evaluates getters into plain data properties, drops inherited prototype properties and non-enumerable properties, but preserves own enumerable Symbol keys.
-
gemサンプル契約ruby · linux/x64zeitwerk@2.8.3
信じられていることZeitwerk autovivifies a namespace module for every subdirectory in a managed root directory, treating empty folders and non-Ruby asset directories as constant namespaces.
測定結果assert empty directories and directories containing only non-Ruby assets or hidden dotfiles do not autovivify namespace modules and raise NameError on constant access rather than resolving to Module instances
-
gemサンプル契約ruby · linux/x64faraday@2.14.3
信じられていることFaraday::NestedParamsEncoder.decode raises Faraday::ParsingError when query parameters conflict, and client timeouts inherit from Faraday::ClientError rather than Faraday::ServerError.
測定結果Faraday::NestedParamsEncoder.decode raises Ruby core TypeError instead of Faraday::ParsingError when a scalar parameter precedes a nested key, but silently overwrites and returns the scalar when the nested key comes first.
-
gemサンプル契約ruby · linux/x64zeitwerk@2.8.3
信じられていることDefining a non-module object in an explicit namespace file raises Ruby's standard TypeError on nested constant access or Zeitwerk::NameError during autoloading.
測定結果assert assigning a non-module object in an explicit namespace file immediately raises Zeitwerk::Error from const_added during autoload, escaping rescue NameError and rescue TypeError
-
npmサンプル契約node · linux/x64@babel/core@8.0.1
信じられていることDynamic import expressions are parsed as CallExpression AST nodes with an Import callee property.
測定結果parseSync parses dynamic import('./mod') as an ImportExpression node with a source property rather than a CallExpression with callee Import
-
gemサンプル契約ruby · linux/x64sorbet-runtime@0.6.13426
信じられていることA `checked(:never)` method in a class with duplicate `method_added` hooks still incurs wrapper allocations on every call.
測定結果A method annotated with `sig { returns(Integer).checked(:never) }` after a duplicated `method_added` chain runs with 1 allocation on first call and 0 on second call.
-
gemサンプル契約ruby · linux/x64sorbet-runtime@0.6.13427
信じられていることA sig block failing on first invocation can be retried once its dependencies resolve, sig binds to the next lexically defined method across threads, and re-entering a method during sig evaluation executes the underlying method body.
測定結果Retrying a method whose lazy sig block previously raised an exception fails with RuntimeError: 'A previous invocation... raised, and the current one succeeded' rather than recovering when the sig block now succeeds.
-
gemサンプル契約ruby · linux/x64sorbet-runtime@0.6.13427
信じられていることInitializing a T::Struct with an undeclared attribute is silently ignored at runtime
測定結果Initializing a T::Struct with an unknown attribute raises ArgumentError
-
gemサンプル契約ruby · linux/x64sorbet-runtime@0.6.13427
信じられていることT::Struct.from_hash rejects unknown payload keys by default with an error, matching T::Struct.new constructor validation.
測定結果assert from_hash! and from_hash with strict: true raise RuntimeError when unknown keys are provided
-
gemサンプル契約ruby · linux/x64sorbet-runtime@0.6.13427
信じられていることA method signed with T::Array[Integer] raises TypeError at the call site when the caller passes an array whose elements are not Integers, because the annotation explicitly names the element type.
測定結果Calling a sig-annotated method with T::Array[Integer] and an array of strings does not raise TypeError; the runtime erases the Integer type parameter and accepts any Array without inspecting its elements.
-
gemサンプル契約ruby · linux/x64sorbet-runtime@0.6.13427
信じられていることSetting T::Configuration.default_checked_level = :never anywhere before application code runs disables runtime type checking globally, even if class definitions have already been loaded.
測定結果Calling T::Configuration.default_checked_level= after any sig-annotated method has been invoked raises RuntimeError with 'Set the default checked level earlier', because sorbet-runtime evaluates sig blocks lazily on first call — meaning class loading alone does not trigger evaluation, but one call does.
ここの行を確かめる方法
サンプルを開き、contract を読み、実行してください。contract はそのサンプル自身のテストです。ネットワークを切った固定コンテナで実行され、その実行の署名済みレシートがネットワークに保存されます。ここに書かれていることはライブラリについての解釈ではなく、ライブラリが実際に行ったことだけに基づいています。
公開済みのサンプルのうち、このページにないものがあります。契約は通過しておりサンプルも生きていますが、その契約に文として読める行がないからです。expect(x).toBe(1) のような断言は、検査している思い込みの隣に置いても読者に何も伝えません。読めない証拠を載せるより、空けておくことを選びました。