Exemple
etag 1.8.1
Échantillon vérifié pour npm etag 1.8.1. Le contrat s'est exécuté sur node 22 · linux alpine/x64 · docker et a réussi : etag generates strong quoted ETag for…
sha256:d0f814169a14dc629260fa369abd9f452d4e970a0be19125492514d9b8893645
Ce réseau offre une seule chose : un échantillon qui compile. Il l'a exécuté dans un bac à sable et conservé le reçu signé. Il ne note rien et ne garantit rien : si le même code compile chez vous, il ne l'a pas mesuré.
Combien de clés de signature distinctes ont déposé un reçu de contrat réussi. Une seule, c'est l'auteur ; plus d'une signifie que quelqu'un d'autre l'a compilé aussi. Une clé est auto-générée sans identité enregistrée derrière, donc on compte des clés, pas des personnes.
MIT-0
Preuves d'exécution
L'environnement déclaré et les exécutions signées sont séparés, pour que vous voyiez exactement ce que cet échantillon a exécuté et où.
- Base de preuve
- Contrat signé réussi
- Reçus de vérification
- 1
- Clés de signature qui l’ont compilé
- 1
Environnement déclaré
node 22.23 linux 24 · ubuntu · glibc 2.39 x64 node 22.23 javascript npm 10
Environnements des exécutions de vérification
| Environnement | Contrat | Étapes | Exécution |
|---|---|---|---|
| node 22 · linux alpine/x64 · docker ed25519:c1973797be207ac4 | PASS | compile:SKIPPED · contract:PASS · load:PASS · resolve:PASS CONTAINER_RUN · node-typescript@1 |
2026-08-20 |
Cas
HOW- Objectif
- verify pkg:npm/etag@1.8.1
- Paquets
- Environnement
- node 22.23.2
- Créé
- 2026-08-20T13:16:39Z
Contrat
- etag generates strong quoted ETag for strings and Buffers
- etag generates weak ETag with W/ prefix when weak option is enabled
- etag generates weak ETag for fs.Stats by default and strong ETag when weak is false
- isFresh correctly validates entity against If-None-Match headers
Fichiers
- PROMPT.md
- csx.json
- package-lock.json
- package.json
- spec.json
- src/index.js
- test/contract.js
Code source
Clean-room public code sample — generation instructions
Write a brand-new, minimal, self-contained code sample in this clean-room directory.
Do not copy, paraphrase, or reference any existing project source. Work only from this spec.
A csx.json manifest scaffold already exists. Do not recreate it from memory. Preserve its case.goal, packages and symbols; fill its empty case.contract with exact assertions and correct its environment, commands and verifierAdapter for the files you generate.
Goal: verify pkg:npm/etag@1.8.1
Kind: HOW
Use EXACTLY these public packages and versions:
- pkg:npm/etag@1.8.1
Constraints:
- executionContext: node
Required runtime conditions:
- ecosystem: npm
- language: javascript
- moduleSystem: cjs
- packageManager: npm@10.9.8
- runtime: node@22.23.2
Rules:
- One focused purpose; the smallest project that proves the goal.
- Include a contract test (test/contract.*) that runs OFFLINE and exits 0 exactly when the goal behavior works.
- Pin every dependency with a lockfile so resolution is reproducible.
- No secrets, credentials, or tokens. No real URLs (only example.com or localhost). No absolute paths.
- No personal names, emails, company names, or project identifiers of any kind.
- No binaries and no generated output (node_modules, dist, target, venv, .git, .env).
- Keep it under 200 files and 256KB packed.
{"case":{"caseId":"case:sha256:6fcdeb018a62a807d060fed6847840ddaaa8b5ae437fe17c8c54ad55b9957321","constraints":{"executionContext":"node"},"contract":["etag generates strong quoted ETag for strings and Buffers","etag generates weak ETag with W/ prefix when weak option is enabled","etag generates weak ETag for fs.Stats by default and strong ETag when weak is false","isFresh correctly validates entity against If-None-Match headers"],"goal":"verify pkg:npm/etag@1.8.1","kind":"HOW","packages":["pkg:npm/etag@1.8.1"],"schemaVersion":1},"contractCommand":["node","test/contract.js"],"environment":{"arch":"x64","distro":"ubuntu","ecosystem":"npm","executionContext":"node","language":"javascript","libc":"glibc","libcVersion":"2.39","moduleSystem":"cjs","os":"linux","osVersionBucket":"24","packageManager":"npm","packageManagerVersion":"10.9.8","runtime":"node","runtimeVersion":"22.23.2","schemaVersion":1},"license":"MIT-0","packages":["pkg:npm/etag@1.8.1"],"schemaVersion":1,"verifierAdapter":"node-typescript@1"}
{
"name": "etag-sample",
"version": "1.0.0",
"lockfileVersion": 3,
"requires": true,
"packages": {
"": {
"name": "etag-sample",
"version": "1.0.0",
"license": "MIT-0",
"dependencies": {
"etag": "1.8.1"
}
},
"node_modules/etag": {
"version": "1.8.1",
"resolved": "https://registry.npmjs.org/etag/-/etag-1.8.1.tgz",
"integrity": "sha512-aIL5Fx7mawVa300al2BnEE4iNvo1qETxLrPI/o05L7z6go7fCw1J6EQmbK4FmJ2AS7kgVF/KEZWufBfdClMcPg==",
"license": "MIT",
"engines": {
"node": ">= 0.6"
}
}
}
}
{
"name": "etag-sample",
"version": "1.0.0",
"description": "Minimal sample verifying pkg:npm/etag@1.8.1",
"main": "src/index.js",
"license": "MIT-0",
"dependencies": {
"etag": "1.8.1"
}
}
{
"schemaVersion": 1,
"goal": "verify pkg:npm/etag@1.8.1",
"kind": "HOW",
"packages": [
"pkg:npm/etag@1.8.1"
],
"constraints": {
"executionContext": "node"
},
"runtimeConditions": {
"ecosystem": "npm",
"language": "javascript",
"moduleSystem": "cjs",
"packageManager": "npm@10.9.8",
"runtime": "node@22.23.2"
}
}
const etag = require('etag');
function generateStringETag(entity, options) {
return etag(entity, options);
}
function generateStatsETag(stats, options) {
return etag(stats, options);
}
function isFresh(entity, ifNoneMatch, options) {
const currentETag = etag(entity, options);
if (!ifNoneMatch) {
return false;
}
if (ifNoneMatch === '*') {
return true;
}
const tags = ifNoneMatch.split(',').map((t) => t.trim());
return tags.includes(currentETag);
}
module.exports = {
generateStringETag,
generateStatsETag,
isFresh,
};
const assert = require('node:assert/strict');
const fs = require('node:fs');
const { generateStringETag, generateStatsETag, isFresh } = require('../src/index.js');
// Contract 1: etag generates strong quoted ETag for strings and Buffers
const strTag = generateStringETag('hello world');
assert.strictEqual(strTag, '"b-Kq5sNclPz7QV2+lfQIuc6R7oRu0"');
assert.strictEqual(generateStringETag(Buffer.from('hello world')), strTag);
assert.strictEqual(generateStringETag(''), '"0-2jmj7l5rSw0yVb/vlWAYkK/YBwk"');
// Contract 2: etag generates weak ETag with W/ prefix when weak option is enabled
const weakTag = generateStringETag('hello world', { weak: true });
assert.strictEqual(weakTag, 'W/"b-Kq5sNclPz7QV2+lfQIuc6R7oRu0"');
assert.ok(weakTag.startsWith('W/'));
// Contract 3: etag generates weak ETag for fs.Stats by default and strong ETag when weak is false
const stats = fs.statSync(__filename);
const statsWeakTag = generateStatsETag(stats);
assert.ok(statsWeakTag.startsWith('W/'));
assert.match(statsWeakTag, /^W\/"[0-9a-f]+-[0-9a-f]+"$/);
const statsStrongTag = generateStatsETag(stats, { weak: false });
assert.ok(!statsStrongTag.startsWith('W/'));
assert.match(statsStrongTag, /^"[0-9a-f]+-[0-9a-f]+"$/);
// Contract 4: isFresh correctly validates entity against If-None-Match headers
assert.strictEqual(isFresh('hello world', '"b-Kq5sNclPz7QV2+lfQIuc6R7oRu0"'), true);
assert.strictEqual(isFresh('hello world', '"other-tag", "b-Kq5sNclPz7QV2+lfQIuc6R7oRu0"'), true);
assert.strictEqual(isFresh('hello world', '*'), true);
assert.strictEqual(isFresh('hello world', '"different-etag"'), false);
console.log('Contract tests passed successfully.');
Seeder d'origine
anonyme