CodeSampleX

샘플

read-package-json-fast 4.0.0

검증된 샘플 — npm read-package-json-fast 4.0.0. node 22 · linux debian/x64 · docker에서 contract를 실행해 통과했습니다: read-package-json-fast(path) reads a package.json file…

sha256:816a7cdb3402b0fd25ac3f564c194b7a7c56b85ee1fefebc9c01f88f1fa59159

이 네트워크가 제공하는 것은 하나입니다. 빌드되는 샘플. 샌드박스에서 돌리고 서명된 영수증을 보관합니다. 등급을 매기지 않고 무엇도 보증하지 않습니다 — 같은 코드가 당신 환경에서 빌드되는지는 측정한 적이 없습니다. 통과한 계약 영수증을 낸 서로 다른 서명 키의 수입니다. 하나면 작성자 혼자이고, 둘 이상이면 다른 사람도 빌드했다는 뜻입니다. 키는 스스로 만드는 것이고 뒤에 등록된 신원이 없으므로, 세는 것은 사람이 아니라 키입니다. MIT-0

실행 증거

선언된 환경과 서명된 실행을 분리해 두었습니다. 이 샘플이 무엇을 어디서 실행했는지 그대로 볼 수 있습니다.

증거 기준
서명된 컨트랙트 통과
검증 영수증
1
빌드한 서명 키
1
선언된 환경 linux 24 · ubuntu · glibc 2.39 x64 npm

검증 실행 환경

환경 컨트랙트 단계 실행일
node 22 · linux debian/x64 · docker ed25519:c1973797be207ac4 PASS compile:SKIPPED · contract:PASS · load:PASS · resolve:PASS
CONTAINER_RUN · node-typescript@1node:22@sha256:8a34c4ab3ea2…
2026-10-18

케이스

HOW
목표
verify pkg:npm/read-package-json-fast@4.0.0
패키지
생성일
2026-10-18T09:22:18Z

컨트랙트

  1. read-package-json-fast(path) reads a package.json file, strips leading-underscore keys, computes _id as name@version, removes optionalDependencies entries from dependencies, normalizes funding string to { url }, normalizes bundledDependencies/bundleDependencies, filters non-string scripts, and populates bin by walking directories.bin
  2. read-package-json-fast.normalize(data) normalizes an in-memory package manifest object, computing _id, normalizing bin via npm-normalize-package-bin, and converting object bundleDependencies to an array of keys

파일

  • PROMPT.md
  • csx.json
  • package-lock.json
  • package.json
  • spec.json
  • test/contract.mjs

소스 아티팩트 내려받기 (tar.gz)

소스

PROMPT.md
Clean-room public code sample — generation instructions

Write a brand-new, minimal, self-contained code sample in this clean-room directory.
Do not copy, paraphrase, or reference any existing project source. Work only from this spec.

A csx.json manifest scaffold already exists. Do not recreate it from memory. Preserve its case.goal, packages and symbols; fill its empty case.contract with exact assertions and correct its environment, commands and verifierAdapter for the files you generate.

Goal: verify pkg:npm/read-package-json-fast@4.0.0
Kind: HOW

Use EXACTLY these public packages and versions:
  - pkg:npm/read-package-json-fast@4.0.0

Rules:
  - One focused purpose; the smallest project that proves the goal.
  - Include a contract test (test/contract.*) that runs OFFLINE and exits 0 exactly when the goal behavior works.
  - Pin every dependency with a lockfile so resolution is reproducible.
  - No secrets, credentials, or tokens. No real URLs (only example.com or localhost). No absolute paths.
  - No personal names, emails, company names, or project identifiers of any kind.
  - No binaries and no generated output (node_modules, dist, target, venv, .git, .env).
  - Keep it under 200 files and 256KB packed.
csx.json
{"case":{"caseId":"case:sha256:267dea31315f3b5b4328700806eea34109208c5f3c2260d36b0dbfbefea20af3","contract":["read-package-json-fast(path) reads a package.json file, strips leading-underscore keys, computes _id as name@version, removes optionalDependencies entries from dependencies, normalizes funding string to { url }, normalizes bundledDependencies/bundleDependencies, filters non-string scripts, and populates bin by walking directories.bin","read-package-json-fast.normalize(data) normalizes an in-memory package manifest object, computing _id, normalizing bin via npm-normalize-package-bin, and converting object bundleDependencies to an array of keys"],"goal":"verify pkg:npm/read-package-json-fast@4.0.0","kind":"HOW","packages":["pkg:npm/read-package-json-fast@4.0.0"],"schemaVersion":1,"symbols":["read-package-json-fast","read-package-json-fast.normalize"]},"contractCommand":["node","test/contract.mjs"],"environment":{"arch":"x64","distro":"ubuntu","ecosystem":"npm","libc":"glibc","libcVersion":"2.39","os":"linux","osVersionBucket":"24","packageManager":"npm","schemaVersion":1},"license":"MIT-0","packages":["pkg:npm/read-package-json-fast@4.0.0"],"schemaVersion":1,"subject":"pkg:npm/read-package-json-fast@4.0.0","verifierAdapter":"node-typescript@1"}
package-lock.json
{
  "name": "sample-read-package-json-fast",
  "version": "1.0.0",
  "lockfileVersion": 3,
  "requires": true,
  "packages": {
    "": {
      "name": "sample-read-package-json-fast",
      "version": "1.0.0",
      "dependencies": {
        "read-package-json-fast": "4.0.0"
      }
    },
    "node_modules/json-parse-even-better-errors": {
      "version": "4.0.0",
      "resolved": "https://registry.npmjs.org/json-parse-even-better-errors/-/json-parse-even-better-errors-4.0.0.tgz",
      "integrity": "sha512-lR4MXjGNgkJc7tkQ97kb2nuEMnNCyU//XYVH0MKTGcXEiSudQ5MKGKen3C5QubYy0vmq+JGitUg92uuywGEwIA==",
      "license": "MIT",
      "engines": {
        "node": "^18.17.0 || >=20.5.0"
      }
    },
    "node_modules/npm-normalize-package-bin": {
      "version": "4.0.0",
      "resolved": "https://registry.npmjs.org/npm-normalize-package-bin/-/npm-normalize-package-bin-4.0.0.tgz",
      "integrity": "sha512-TZKxPvItzai9kN9H/TkmCtx/ZN/hvr3vUycjlfmH0ootY9yFBzNOpiXAdIn1Iteqsvk4lQn6B5PTrt+n6h8k/w==",
      "license": "ISC",
      "engines": {
        "node": "^18.17.0 || >=20.5.0"
      }
    },
    "node_modules/read-package-json-fast": {
      "version": "4.0.0",
      "resolved": "https://registry.npmjs.org/read-package-json-fast/-/read-package-json-fast-4.0.0.tgz",
      "integrity": "sha512-qpt8EwugBWDw2cgE2W+/3oxC+KTez2uSVR8JU9Q36TXPAGCaozfQUs59v4j4GFpWTaw0i6hAZSvOmu1J0uOEUg==",
      "license": "ISC",
      "dependencies": {
        "json-parse-even-better-errors": "^4.0.0",
        "npm-normalize-package-bin": "^4.0.0"
      },
      "engines": {
        "node": "^18.17.0 || >=20.5.0"
      }
    }
  }
}
package.json
{
  "name": "sample-read-package-json-fast",
  "version": "1.0.0",
  "private": true,
  "type": "module",
  "dependencies": {
    "read-package-json-fast": "4.0.0"
  },
  "scripts": {
    "test": "node test/contract.mjs"
  }
}
spec.json
{
  "schemaVersion": 1,
  "goal": "verify pkg:npm/read-package-json-fast@4.0.0",
  "kind": "HOW",
  "packages": [
    "pkg:npm/read-package-json-fast@4.0.0"
  ]
}
test/contract.mjs
import assert from 'node:assert/strict'
import { mkdtemp, writeFile, mkdir, rm } from 'node:fs/promises'
import { tmpdir } from 'node:os'
import { join } from 'node:path'
import rpj from 'read-package-json-fast'

const tmp = await mkdtemp(join(tmpdir(), 'rpj-test-'))
try {
  // 1. Read and normalize package.json from disk, stripping underscore fields,
  // deduplicating optionalDependencies from dependencies, normalizing funding,
  // bundleDependencies, scripts, and walking directories.bin.
  const binDir = join(tmp, 'cli-bins')
  await mkdir(binDir, { recursive: true })
  await writeFile(join(binDir, 'run-tool'), '#!/usr/bin/env node\n', 'utf8')

  const pkgPath = join(tmp, 'package.json')
  await writeFile(
    pkgPath,
    JSON.stringify({
      name: 'demo-pkg',
      version: '2.1.0',
      _secret: 'should-be-stripped',
      dependencies: {
        'keep-dep': '^1.0.0',
        'opt-dep': '^2.0.0'
      },
      optionalDependencies: {
        'opt-dep': '^2.0.0'
      },
      bundledDependencies: true,
      funding: 'https://example.com/sponsor',
      scripts: {
        start: 'node index.js',
        invalidScript: 12345
      },
      directories: {
        bin: './cli-bins'
      }
    }),
    'utf8'
  )

  const parsed = await rpj(pkgPath)
  assert.equal(parsed._id, 'demo-pkg@2.1.0')
  assert.equal('_secret' in parsed, false)
  assert.deepEqual(parsed.dependencies, { 'keep-dep': '^1.0.0' })
  assert.deepEqual(parsed.bundleDependencies, ['keep-dep', 'opt-dep'])
  assert.equal('bundledDependencies' in parsed, false)
  assert.deepEqual(parsed.funding, { url: 'https://example.com/sponsor' })
  assert.deepEqual(parsed.scripts, { start: 'node index.js' })
  assert.deepEqual(parsed.bin, { 'run-tool': 'cli-bins/run-tool' })

  // 2. Direct in-memory normalization via rpj.normalize
  const raw = {
    name: 'norm-only',
    version: '0.5.0',
    bin: './bin/cli.js',
    bundledDependencies: { a: '1.0.0', b: '2.0.0' }
  }
  const normalized = rpj.normalize(raw)
  assert.equal(normalized._id, 'norm-only@0.5.0')
  assert.deepEqual(normalized.bin, { 'norm-only': 'bin/cli.js' })
  assert.deepEqual(normalized.bundleDependencies, ['a', 'b'])
} finally {
  await rm(tmp, { recursive: true, force: true })
}

오리진 시더

익명