What the network found
Every line below is a measurement, not an opinion. Each one links to a published sample whose contract is executed in a pinned container with the network switched off, so you can re-run it and disagree with the result.
OS and runtime come from the environment recorded by the linked sample. Entries without that dimension are omitted when you select it.
597 findings across 8 ecosystems.
- cargo
- composer
- gem
- golang
- hex
- npm
- pub
- pypi
Stated by the sample, measured by its contract
Showing 226–250 of 568 measured by published samples.
-
golangSample contractgo · linux/x64gorm.io/gorm@v1.31.2
BelievedA conditional Preload filters root parent records and Joins can load a HasMany slice association in GORM 1.31.2.
Measuredassert Preload with a condition returns both parent records and leaves the nonmatching parent's child slice empty
-
pypiSample contractpython · linux/x64joblib@1.5.3
BelievedPassing mmap_mode='r' to joblib.load guarantees a numpy.memmap for compatible arrays, regardless of how the file was serialized.
Measuredjoblib 1.5.3 loading a NumPy 2.5.2 array saved with compress=3 and mmap_mode='r' warns that memory mapping is incompatible with compression and returns an in-memory ndarray.
-
pypiSample contractpython 3.12 · linux/x64requests@2.34.2
BelievedPreparing a Request directly and sending it through a Session automatically applies that Session's headers, cookies, and REQUESTS_CA_BUNDLE setting.
Measuredassert Request.prepare omits Session default headers and cookies while Session.prepare_request applies both
-
pubSample contractdart · linux/x64shelf@1.4.2
BelievedMounting with `'/api'` only handles `/api/...` and should not match a request to `/api` itself.
MeasuredA GET request to /api after app.mount('/api', subRouter.call) reaches the mounted sub-router root.
-
pubSample contractdart · linux/x64equatable@2.1.0
BelievedTwo generic Equatable instances with identical values are equal when one type argument is a subtype of the other, such as Box<num>(42) and Box<int>(42).
MeasuredTwo generic Equatable instances with identical values are not equal when type arguments differ across subtype boundaries, and their runtimeType-dependent hashCodes differ.
-
pubSample contractdart · linux/x64collection@1.19.1
BelievedHeapPriorityQueue's unorderedElements property yields elements in priority-sorted order and PriorityQueue implements Iterable.
MeasuredPriorityQueue does not implement Iterable, and HeapPriorityQueue.unorderedElements yields elements in internal binary heap storage order rather than priority-sorted order.
-
pubSample contractdart · linux/x64args@2.7.0
BelievedArgParser.addMultiOption treats each command-line argument value as a single list entry without splitting on internal commas.
MeasuredaddMultiOption splits comma-separated values into multiple entries by default, requiring splitCommas: false to preserve a single argument such as '--define env=prod,region=us-east' as ['env=prod,region=us-east'].
-
npmSample contractnode · linux/x64puppeteer@24.43.1
BelievedA developer might assume Puppeteer simply inherits the browsers-layer version value and prints the `@puppeteer/browsers` package version.
MeasuredRunning `node_modules/puppeteer/lib/cjs/puppeteer/node/cli.js --version` reports the Puppeteer package version and does not report `@puppeteer/browsers` version.
-
npmSample contractnode · linux/x64vitest@4.0.0
BelievedA mock created with vi.fn records zero-based invocation order values, so its first two calls are numbered 0 and 1.
Measuredassert two calls to one vi.fn mock produce mock.invocationCallOrder equal to [1, 2]
-
pubSample contractdart · linux/x64args@2.7.0
BelievedArgParser stops matching options at the first positional argument unless allowTrailingOptions is set to true.
MeasuredArgParser().parse(["data.bin", "--force"]) sets force to true and keeps only data.bin in rest because trailing options are enabled by default.
-
npmSample contractnode · linux/x64@rollup/plugin-commonjs@28.0.7
BelievedA strict plugin pass can still eagerly hoist conditional `node:` builtin requires into initialization code.
MeasuredBundling `if (false) { require('node:sqlite'); }` with `@rollup/plugin-commonjs` and `strictRequires: true` does not include `node:sqlite` in the generated CommonJS bundle.
-
npmSample contractnode · linux/x64puppeteer@24.4.0
BelievedPuppeteer's device and network presets are properties on the default export, device descriptors use mobile/touch keys, and network throughput values are kilobits per second.
MeasuredPuppeteer 24.4.0 exposes KnownDevices and PredefinedNetworkConditions as named exports, not properties on its default export.
-
npmSample contractnode · linux/x64puppeteer@25.7.0
BelievedOn current Puppeteer, page.screenshot() returns a Node.js Buffer, so calling result.toString('base64') uses Buffer's encoding overload.
MeasuredTypeScript 5.9 accepts Puppeteer 25.7.0 page.screenshot() with default options as Uint8Array and rejects an encoding argument passed to Uint8Array.toString.
-
golangSample contractgo · linux/x64github.com/spf13/viper@v1.21.0
Believedviper.GetStringSlice parses a comma-separated environment value into the same multi-element slice as viper.Unmarshal.
Measuredassert Unmarshal returns two elements for that same comma-separated environment value
-
npmSample contractnode · linux/x64bun@1.3.14
BelievedBun.deepEquals treats a plain object with matching numeric indices and length as structurally equal to a TypedArray containing the same elements.
MeasuredBun.deepEquals returns false when comparing a numeric-keyed plain object to a Uint8Array with matching elements and length, verifying internal typed-array slots rather than only enumerable index properties
-
npmSample contractnode · linux/x64@babel/core@7.29.7
BelievedLoading @babel/core through createRequire from an ES module throws instead of returning the CommonJS API object.
Measuredassert createRequire can load @babel/core 7.29.7 from the ES module contract
-
golangSample contractgo · linux/x64sigs.k8s.io/yaml@v1.5.0
BelievedA scalar type mismatch reported by sigs.k8s.io/yaml.Unmarshal is opaque text that cannot be matched as json.UnmarshalTypeError with errors.As.
Measuredassert unmarshaling a: not_a_number into an int field returns a non-nil error
-
pypiSample contractpython 3.12 · linux/x64pydantic-settings@2.15.0
BelievedPydantic BaseSettings reads nested environment variables using '__' as a delimiter by default.
Measuredassert a DATABASE__HOST environment variable is ignored for a nested model when env_nested_delimiter is not configured
-
pypiSample contractpython · linux/x64jinja2@3.1.6
BelievedUnder StrictUndefined, undefined variables evaluate to falsy in boolean conditionals and fall back cleanly through the default filter on nested attributes.
MeasuredBoolean evaluation of an undefined variable in an if condition raises UndefinedError under StrictUndefined instead of evaluating as falsy
-
npmSample contractnode · linux/x64jsdom@26.1.0
BelievedTwo setState calls using the current state value will both increment the counter, resulting in a final state of 2
Measuredassert two sequential setCount(count + 1) calls in one React 18 concurrent-root update produce a final rendered state of 1
-
pubSample contractdart · linux/x64crypto@3.0.6
BelievedInternal constructor invariants in package:crypto throw an ArgumentError or StateError on invalid configurations regardless of Dart runtime flags.
MeasuredInstantiating HashSink with signatureBytes less than 8 bypasses checks and produces a digest in default mode, but throws AssertionError only when Dart is run with the --enable-asserts flag.
-
pubSample contractdart · linux/x64args@2.7.0
BelievedArgParser.parse() throws an exception immediately when a mandatory option is omitted from the provided arguments.
MeasuredArgParser.parse() completes successfully when a mandatory option is omitted, and the validation exception is only thrown later when the missing option is retrieved from the ArgResults object.
-
npmSample contractnode · linux/x64react@19.2.8
BelievedRendering an element with an empty string attribute such as `<img src="">` keeps that attribute in `react-dom` server output.
Measuredassert `renderToString` removes an empty `src` attribute from `<img>` output
-
npmSample contractnode · linux/x64marked@18.0.9
BelievedAs long as a `walkTokens` hook is declared `async`, Marked will apply its token mutations to output even when `async` is not enabled.
MeasuredWith a `walkTokens` function that mutates heading depth after awaiting, Marked renders `<h1>Heading</h1>` with `async` false, and `<h6>Heading</h6>` only when `async: true` is set.
-
npmSample contractnode · linux/x64luxon@3.7.2
BelievedA caller can create a local calendar date with `DateTime.local({ year, month, day })` because the signature appears to accept an object-based constructor form.
MeasuredWith `Settings.now` fixed, `DateTime.local({ year: 2024, month: 2, day: 14 })` returns a valid DateTime at the fixed current instant, showing that the object is treated as options and its unit fields are ignored.
How to check any line here
Open the sample, read its contract, run it. The contract is the sample's own test: it runs offline in a pinned container, and the signed receipt of that run is what the network stores. Nothing here rests on our reading of a library — only on what the library did.
Some published samples are not on this page. Their contract passed and the sample is live — but no line of it reads as a sentence, and an assertion like expect(x).toBe(1) tells a reader nothing beside the belief it checks. Those are left out rather than printed as evidence nobody can read.