サンプル

semver 7.8.5: Check whether an installed version satisfies a semver range

検証済みサンプル — npm semver 7.8.5: Check whether an installed version satisfies a semver range. node 22 · linux alpine/x64 · docker で contract を実行し、成功しました.

sha256:262ace4b18153ed203cf15c6eed9c39dcf3201e4474f6d5423b7a0f21e1d571b

MIT-0

実行証拠

宣言された環境と署名済みの実行を分けてあります。このサンプルが何をどこで実行したかをそのまま確認できます。

証拠の基準: 署名済みコントラクト合格
検証レシート: 3
ビルドした署名鍵: 3

宣言された環境 node 22 linux x64 node 22 npm

検証実行環境

環境	コントラクト	ステージ	実行日
node 22 · linux alpine/x64 · docker ed25519:a2ec939a4c60e243	PASS	compile:SKIPPED · contract:PASS · load:PASS · resolve:PASS CONTAINER_RUN · node-typescript@1	2026-08-13
node 22 · linux alpine/x64 · docker ed25519:d91480838ac982c9	PASS	compile:SKIPPED · contract:PASS · load:PASS · resolve:PASS CONTAINER_RUN · node-typescript@1	2026-08-17
node 22 · linux alpine/x64 · docker ed25519:c1973797be207ac4	PASS	compile:SKIPPED · contract:PASS · load:PASS · resolve:PASS CONTAINER_RUN · node-typescript@1node:22-alpine@sha256:c610fcdfb1d5…	2026-09-07

ケース

HOW

ゴール: Check whether an installed version satisfies a semver range
パッケージ: semver 7.8.5
シンボル: semver.satisfies
semver.coerce
semver.major
環境: node 22
作成日: 2026-08-13T15:20:38Z

コントラクト

assert satisfies accepts a version inside a caret range
assert satisfies rejects the next major
assert a prerelease is excluded from a plain range unless allowed
assert coerce turns a v-prefixed tag into a comparable version

ファイル

csx.json
package-lock.json
package.json
src/index.mjs
test/contract.mjs

ソースアーティファクトをダウンロード (tar.gz)

ソース

csx.json

{"case":{"caseId":"case:sha256:d29054dfe5eda90c4c9da905f103b64a641e153d3707bdf7d2b6d99ecabee281","constraints":{"moduleSystem":"esm","runtime":"node"},"contract":["assert satisfies accepts a version inside a caret range","assert satisfies rejects the next major","assert a prerelease is excluded from a plain range unless allowed","assert coerce turns a v-prefixed tag into a comparable version"],"goal":"Check whether an installed version satisfies a semver range","kind":"HOW","packages":["pkg:npm/semver@7.8.5"],"schemaVersion":1,"symbols":["semver.satisfies","semver.coerce","semver.major"]},"contractCommand":["node","test/contract.mjs"],"environment":{"arch":"x64","ecosystem":"npm","executionContext":"node","moduleSystem":"esm","os":"linux","packageManager":"npm","runtime":"node","runtimeVersion":"22","schemaVersion":1},"license":"MIT-0","packages":["pkg:npm/semver@7.8.5"],"schemaVersion":1,"symbols":["semver.satisfies","semver.coerce","semver.major"],"verifierAdapter":"node-typescript@1"}

package-lock.json

{
  "name": "csx-sample-semver-satisfies-range",
  "version": "1.0.0",
  "lockfileVersion": 3,
  "requires": true,
  "packages": {
    "": {
      "name": "csx-sample-semver-satisfies-range",
      "version": "1.0.0",
      "license": "MIT-0",
      "dependencies": {
        "semver": "7.8.5"
      }
    },
    "node_modules/semver": {
      "version": "7.8.5",
      "resolved": "https://registry.npmjs.org/semver/-/semver-7.8.5.tgz",
      "integrity": "sha512-Y7/KDsb8LjooZpwaqGyulO6DQlksgCncchHGk+sZIY4SBvUocMBEFH5Ur1fI4dV+Jvl0w6cjvucaIi40puRioA==",
      "license": "ISC",
      "bin": {
        "semver": "bin/semver.js"
      },
      "engines": {
        "node": ">=10"
      }
    }
  }
}

package.json

{
  "name": "csx-sample-semver-satisfies-range",
  "version": "1.0.0",
  "private": true,
  "type": "module",
  "license": "MIT-0",
  "dependencies": {
    "semver": "7.8.5"
  }
}

src/index.mjs

import semver from 'semver';

// semver is CommonJS, so the default import is the whole namespace. Two
// traps live here: prereleases are excluded from ordinary ranges unless you
// pass includePrerelease, and tags like "v3.2.1" must be coerced before any
// comparison — semver.major('v3.2.1') throws on the raw string.
export function fits(version, range, includePrerelease = false) {
  return semver.satisfies(version, range, { includePrerelease });
}

export function majorOfTag(tag) {
  const coerced = semver.coerce(tag);
  return coerced ? semver.major(coerced) : null;
}

test/contract.mjs

import { strict as assert } from 'node:assert';
import { fits, majorOfTag } from '../src/index.mjs';

assert.equal(fits('1.12.0', '^1.0.0'), true);
assert.equal(fits('2.0.0', '^1.0.0'), false);

// The prerelease trap: excluded by default, included on request.
assert.equal(fits('1.13.0-beta.1', '^1.0.0'), false);
assert.equal(fits('1.13.0-beta.1', '^1.0.0', true), true);

assert.equal(majorOfTag('v3.2.1'), 3);
assert.equal(majorOfTag('not-a-version'), null);
console.log('CONTRACT PASS: semver range checks behaved as documented');

オリジンシーダー

anonymous