Ejemplo
read-package-json-fast 4.0.0: normalize
Muestra verificada para npm read-package-json-fast 4.0.0: normalize. El contrato se ejecutó en node 22 · linux debian/x64 · docker y pasó.
sha256:96be1477077583b0fc67ae266a5b6a703e737c3a132f7553f1e6ff747831570e
Esta red ofrece una sola cosa: una muestra que compila. La ejecutó en un sandbox y guardó el recibo firmado. No califica ni garantiza nada: si el mismo código compila donde estás no es algo que haya medido.
Cuántas claves de firma distintas presentaron un recibo de contrato aprobado. Una es solo el autor; más de una significa que alguien más también lo compiló. Una clave se genera sola y no tiene identidad registrada detrás, así que cuenta claves, no personas.
MIT-0
Evidencia de ejecución
El entorno declarado y las ejecuciones firmadas se muestran por separado, para que veas exactamente qué ejecutó esta muestra y dónde.
- Base de evidencia
- Contrato firmado aprobado
- Recibos de verificación
- 1
- Claves de firma que lo compilaron
- 1
Entorno declarado
linux 24 · ubuntu · glibc 2.39 x64 npm
Entornos de las ejecuciones de verificación
| Entorno | Contrato | Etapas | Ejecución |
|---|---|---|---|
| node 22 · linux debian/x64 · docker ed25519:c1973797be207ac4 | PASS | compile:SKIPPED · contract:PASS · load:PASS · resolve:PASS CONTAINER_RUN · node-typescript@1node:22@sha256:8a34c4ab3ea2… |
2026-10-18 |
Caso
HOW- Objetivo
- verify read-package-json-fast.normalize in pkg:npm/read-package-json-fast@4.0.0
- Paquetes
- Símbolos
-
- read-package-json-fast.normalize
- Creado
- 2026-10-18T12:56:12Z
Contrato
- read-package-json-fast.normalize(data) mutates data in place and returns it, setting _id to name@version when both name and version are present, expanding bundledDependencies: true to all keys of dependencies before pruning optionalDependencies, converting funding string to { url }, filtering non-string scripts, and normalizing bin string via npm-normalize-package-bin
- read-package-json-fast.normalize(data) converts a non-array object bundleDependencies to an array of its keys, deletes dependencies when all entries are removed by optionalDependencies deduplication, and deletes non-object scripts
- read-package-json-fast.normalize(data) sets bundleDependencies to [] when bundleDependencies is false and omits _id when version is absent
Archivos
- PROMPT.md
- csx.json
- package-lock.json
- package.json
- spec.json
- test/contract.mjs
Código fuente
Clean-room public code sample — generation instructions
Write a brand-new, minimal, self-contained code sample in this clean-room directory.
Do not copy, paraphrase, or reference any existing project source. Work only from this spec.
A csx.json manifest scaffold already exists. Do not recreate it from memory. Preserve its case.goal, packages and symbols; fill its empty case.contract with exact assertions and correct its environment, commands and verifierAdapter for the files you generate.
Goal: verify read-package-json-fast.normalize in pkg:npm/read-package-json-fast@4.0.0
Kind: HOW
Use EXACTLY these public packages and versions:
- pkg:npm/read-package-json-fast@4.0.0
Demonstrate these symbols/APIs:
- read-package-json-fast.normalize
Rules:
- One focused purpose; the smallest project that proves the goal.
- Include a contract test (test/contract.*) that runs OFFLINE and exits 0 exactly when the goal behavior works.
- Pin every dependency with a lockfile so resolution is reproducible.
- No secrets, credentials, or tokens. No real URLs (only example.com or localhost). No absolute paths.
- No personal names, emails, company names, or project identifiers of any kind.
- No binaries and no generated output (node_modules, dist, target, venv, .git, .env).
- Keep it under 200 files and 256KB packed.
{"case":{"caseId":"case:sha256:c8f49fc2287558a8d7775a2f9054cf6cb56810beadbcd9a9cabd8ed34a3c4e04","contract":["read-package-json-fast.normalize(data) mutates data in place and returns it, setting _id to name@version when both name and version are present, expanding bundledDependencies: true to all keys of dependencies before pruning optionalDependencies, converting funding string to { url }, filtering non-string scripts, and normalizing bin string via npm-normalize-package-bin","read-package-json-fast.normalize(data) converts a non-array object bundleDependencies to an array of its keys, deletes dependencies when all entries are removed by optionalDependencies deduplication, and deletes non-object scripts","read-package-json-fast.normalize(data) sets bundleDependencies to [] when bundleDependencies is false and omits _id when version is absent"],"goal":"verify read-package-json-fast.normalize in pkg:npm/read-package-json-fast@4.0.0","kind":"HOW","packages":["pkg:npm/read-package-json-fast@4.0.0"],"schemaVersion":1,"symbols":["read-package-json-fast.normalize"]},"contractCommand":["node","test/contract.mjs"],"environment":{"arch":"x64","distro":"ubuntu","ecosystem":"npm","libc":"glibc","libcVersion":"2.39","os":"linux","osVersionBucket":"24","packageManager":"npm","schemaVersion":1},"license":"MIT-0","packages":["pkg:npm/read-package-json-fast@4.0.0"],"schemaVersion":1,"subject":"pkg:npm/read-package-json-fast@4.0.0","symbols":["read-package-json-fast.normalize"],"verifierAdapter":"node-typescript@1"}
{
"name": "verify-rpj-normalize",
"version": "1.0.0",
"lockfileVersion": 3,
"requires": true,
"packages": {
"": {
"name": "verify-rpj-normalize",
"version": "1.0.0",
"dependencies": {
"read-package-json-fast": "4.0.0"
}
},
"node_modules/json-parse-even-better-errors": {
"version": "4.0.0",
"resolved": "https://registry.npmjs.org/json-parse-even-better-errors/-/json-parse-even-better-errors-4.0.0.tgz",
"integrity": "sha512-lR4MXjGNgkJc7tkQ97kb2nuEMnNCyU//XYVH0MKTGcXEiSudQ5MKGKen3C5QubYy0vmq+JGitUg92uuywGEwIA==",
"license": "MIT",
"engines": {
"node": "^18.17.0 || >=20.5.0"
}
},
"node_modules/npm-normalize-package-bin": {
"version": "4.0.0",
"resolved": "https://registry.npmjs.org/npm-normalize-package-bin/-/npm-normalize-package-bin-4.0.0.tgz",
"integrity": "sha512-TZKxPvItzai9kN9H/TkmCtx/ZN/hvr3vUycjlfmH0ootY9yFBzNOpiXAdIn1Iteqsvk4lQn6B5PTrt+n6h8k/w==",
"license": "ISC",
"engines": {
"node": "^18.17.0 || >=20.5.0"
}
},
"node_modules/read-package-json-fast": {
"version": "4.0.0",
"resolved": "https://registry.npmjs.org/read-package-json-fast/-/read-package-json-fast-4.0.0.tgz",
"integrity": "sha512-qpt8EwugBWDw2cgE2W+/3oxC+KTez2uSVR8JU9Q36TXPAGCaozfQUs59v4j4GFpWTaw0i6hAZSvOmu1J0uOEUg==",
"license": "ISC",
"dependencies": {
"json-parse-even-better-errors": "^4.0.0",
"npm-normalize-package-bin": "^4.0.0"
},
"engines": {
"node": "^18.17.0 || >=20.5.0"
}
}
}
}
{
"name": "verify-rpj-normalize",
"version": "1.0.0",
"private": true,
"type": "module",
"dependencies": {
"read-package-json-fast": "4.0.0"
},
"scripts": {
"test": "node test/contract.mjs"
}
}
{
"schemaVersion": 1,
"goal": "verify read-package-json-fast.normalize in pkg:npm/read-package-json-fast@4.0.0",
"kind": "HOW",
"packages": [
"pkg:npm/read-package-json-fast@4.0.0"
],
"symbols": [
"read-package-json-fast.normalize"
]
}
import assert from 'node:assert/strict'
import rpj from 'read-package-json-fast'
// 1. Mutates in-place, sets _id, expands bundledDependencies: true before pruning
// repeated optionalDependencies from dependencies, normalizes funding string,
// filters non-string scripts, and normalizes bin string.
const manifest = {
name: 'widget-core',
version: '3.2.1',
bin: './cli/index.js',
dependencies: {
'core-util': '^1.0.0',
'opt-driver': '^2.0.0'
},
optionalDependencies: {
'opt-driver': '^2.0.0'
},
bundledDependencies: true,
funding: 'https://example.com/funding',
scripts: {
build: 'node build.js',
badNumber: 42,
badNull: null
}
}
const result = rpj.normalize(manifest)
assert.equal(result, manifest)
assert.equal(result._id, 'widget-core@3.2.1')
assert.deepEqual(result.bin, { 'widget-core': 'cli/index.js' })
assert.deepEqual(result.bundleDependencies, ['core-util', 'opt-driver'])
assert.equal('bundledDependencies' in result, false)
assert.deepEqual(result.dependencies, { 'core-util': '^1.0.0' })
assert.deepEqual(result.funding, { url: 'https://example.com/funding' })
assert.deepEqual(result.scripts, { build: 'node build.js' })
// 2. Converts object bundleDependencies to key array, deletes dependencies when all
// entries are duplicated in optionalDependencies, and deletes non-object scripts.
const manifestObjBundle = {
name: 'solo-pkg',
version: '0.1.0',
dependencies: {
'only-opt': '^1.0.0'
},
optionalDependencies: {
'only-opt': '^1.0.0'
},
bundleDependencies: {
alpha: '1.0.0',
beta: '2.0.0'
},
scripts: 'invalid-scripts-field'
}
rpj.normalize(manifestObjBundle)
assert.equal(manifestObjBundle._id, 'solo-pkg@0.1.0')
assert.deepEqual(manifestObjBundle.bundleDependencies, ['alpha', 'beta'])
assert.equal('dependencies' in manifestObjBundle, false)
assert.equal('scripts' in manifestObjBundle, false)
// 3. Converts bundleDependencies: false to [], omits _id when name or version is missing.
const partialManifest = {
name: 'missing-version',
bundleDependencies: false
}
rpj.normalize(partialManifest)
assert.equal('_id' in partialManifest, false)
assert.deepEqual(partialManifest.bundleDependencies, [])
Seeder de origen
anónimo