CodeSampleX

Sample

semver 7.8.5: Check whether an installed version satisfies a semver range

Verified sample for npm semver 7.8.5: Check whether an installed version satisfies a semver range. The contract ran on node 22 · linux alpine/x64 · docker…

sha256:262ace4b18153ed203cf15c6eed9c39dcf3201e4474f6d5423b7a0f21e1d571b

This network offers one thing: a sample that builds. It ran the sample in a sandbox and kept the signed receipt. It grades nothing and warrants nothing — whether the same code builds where you are is not something it measured. How many distinct signing keys filed a passing contract receipt. One is the author alone; more than one means somebody else built it too. A key is self-generated with nothing registered behind it, so it counts keys, not people. MIT-0

Execution evidence

The declared environment and the signed runs are kept apart, so you can see exactly what this sample ran and where.

Evidence basis
Signed contract pass
Verification receipts
3
Signing keys that built it
3
Declared environment node 22 linux x64 node 22 npm

Verification-run environments

Environment Contract Stages Run
node 22 · linux alpine/x64 · docker ed25519:a2ec939a4c60e243 PASS compile:SKIPPED · contract:PASS · load:PASS · resolve:PASS
CONTAINER_RUN · node-typescript@1		 2026-08-13
node 22 · linux alpine/x64 · docker ed25519:d91480838ac982c9 PASS compile:SKIPPED · contract:PASS · load:PASS · resolve:PASS
CONTAINER_RUN · node-typescript@1		 2026-08-17
node 22 · linux alpine/x64 · docker ed25519:c1973797be207ac4 PASS compile:SKIPPED · contract:PASS · load:PASS · resolve:PASS
CONTAINER_RUN · node-typescript@1node:22-alpine@sha256:c610fcdfb1d5…		 2026-09-07

Case

HOW
Goal
Check whether an installed version satisfies a semver range
Packages
Symbols
  • semver.satisfies
  • semver.coerce
  • semver.major
Environment
node 22
Created
2026-08-13T15:20:38Z

Contract

  1. assert satisfies accepts a version inside a caret range
  2. assert satisfies rejects the next major
  3. assert a prerelease is excluded from a plain range unless allowed
  4. assert coerce turns a v-prefixed tag into a comparable version

Files

  • csx.json
  • package-lock.json
  • package.json
  • src/index.mjs
  • test/contract.mjs

Download the source artifact (tar.gz)

Source

csx.json
{"case":{"caseId":"case:sha256:d29054dfe5eda90c4c9da905f103b64a641e153d3707bdf7d2b6d99ecabee281","constraints":{"moduleSystem":"esm","runtime":"node"},"contract":["assert satisfies accepts a version inside a caret range","assert satisfies rejects the next major","assert a prerelease is excluded from a plain range unless allowed","assert coerce turns a v-prefixed tag into a comparable version"],"goal":"Check whether an installed version satisfies a semver range","kind":"HOW","packages":["pkg:npm/semver@7.8.5"],"schemaVersion":1,"symbols":["semver.satisfies","semver.coerce","semver.major"]},"contractCommand":["node","test/contract.mjs"],"environment":{"arch":"x64","ecosystem":"npm","executionContext":"node","moduleSystem":"esm","os":"linux","packageManager":"npm","runtime":"node","runtimeVersion":"22","schemaVersion":1},"license":"MIT-0","packages":["pkg:npm/semver@7.8.5"],"schemaVersion":1,"symbols":["semver.satisfies","semver.coerce","semver.major"],"verifierAdapter":"node-typescript@1"}
package-lock.json
{
  "name": "csx-sample-semver-satisfies-range",
  "version": "1.0.0",
  "lockfileVersion": 3,
  "requires": true,
  "packages": {
    "": {
      "name": "csx-sample-semver-satisfies-range",
      "version": "1.0.0",
      "license": "MIT-0",
      "dependencies": {
        "semver": "7.8.5"
      }
    },
    "node_modules/semver": {
      "version": "7.8.5",
      "resolved": "https://registry.npmjs.org/semver/-/semver-7.8.5.tgz",
      "integrity": "sha512-Y7/KDsb8LjooZpwaqGyulO6DQlksgCncchHGk+sZIY4SBvUocMBEFH5Ur1fI4dV+Jvl0w6cjvucaIi40puRioA==",
      "license": "ISC",
      "bin": {
        "semver": "bin/semver.js"
      },
      "engines": {
        "node": ">=10"
      }
    }
  }
}
package.json
{
  "name": "csx-sample-semver-satisfies-range",
  "version": "1.0.0",
  "private": true,
  "type": "module",
  "license": "MIT-0",
  "dependencies": {
    "semver": "7.8.5"
  }
}
src/index.mjs
import semver from 'semver';

// semver is CommonJS, so the default import is the whole namespace. Two
// traps live here: prereleases are excluded from ordinary ranges unless you
// pass includePrerelease, and tags like "v3.2.1" must be coerced before any
// comparison — semver.major('v3.2.1') throws on the raw string.
export function fits(version, range, includePrerelease = false) {
  return semver.satisfies(version, range, { includePrerelease });
}

export function majorOfTag(tag) {
  const coerced = semver.coerce(tag);
  return coerced ? semver.major(coerced) : null;
}
test/contract.mjs
import { strict as assert } from 'node:assert';
import { fits, majorOfTag } from '../src/index.mjs';

assert.equal(fits('1.12.0', '^1.0.0'), true);
assert.equal(fits('2.0.0', '^1.0.0'), false);

// The prerelease trap: excluded by default, included on request.
assert.equal(fits('1.13.0-beta.1', '^1.0.0'), false);
assert.equal(fits('1.13.0-beta.1', '^1.0.0', true), true);

assert.equal(majorOfTag('v3.2.1'), 3);
assert.equal(majorOfTag('not-a-version'), null);
console.log('CONTRACT PASS: semver range checks behaved as documented');

Origin Seeder

anonymous