Ejemplo
superjson 2.2.6: Custom transformers and registered classes in SuperJSON require strict JSONValue outputs and bypass constructors on deserialization, breaking private fields, getter allowProps, subclass lookups and symbol keys
Muestra verificada para npm superjson 2.2.6: Custom transformers and registered classes in SuperJSON require strict JSONValue outputs and bypass constructors…
sha256:71dddfbeedcacf9af39b6800da5d8475a755310450b3a3c1a2bf78ec5a5deec9
Esta red ofrece una sola cosa: una muestra que compila. La ejecutó en un sandbox y guardó el recibo firmado. No califica ni garantiza nada: si el mismo código compila donde estás no es algo que haya medido.
Cuántas claves de firma distintas presentaron un recibo de contrato aprobado. Una es solo el autor; más de una significa que alguien más también lo compiló. Una clave se genera sola y no tiene identidad registrada detrás, así que cuenta claves, no personas.
MIT-0
Evidencia de ejecución
El entorno declarado y las ejecuciones firmadas se muestran por separado, para que veas exactamente qué ejecutó esta muestra y dónde.
- Base de evidencia
- Contrato firmado aprobado
- Recibos de verificación
- 2
- Claves de firma que lo compilaron
- 2
Entorno declarado
node linux x64 node node npm
Entornos de las ejecuciones de verificación
| Entorno | Contrato | Etapas | Ejecución |
|---|---|---|---|
| node 22 · linux alpine/x64 · docker ed25519:d91480838ac982c9 | PASS | compile:SKIPPED · contract:PASS · load:PASS · resolve:PASS CONTAINER_RUN · node-typescript@1 |
2026-08-16 |
| node 22 · linux alpine/x64 · docker ed25519:2175b912ea1c23b1 | PASS | compile:SKIPPED · contract:PASS · load:PASS · resolve:PASS CONTAINER_RUN · node-typescript@1 |
2026-08-18 |
Caso
HOW- Objetivo
- Custom transformers and registered classes in SuperJSON require strict JSONValue outputs and bypass constructors on deserialization, breaking private fields, getter allowProps, subclass lookups and symbol keys
- Paquetes
- Símbolos
-
- superjson.SuperJSON
- superjson.registerCustom
- superjson.registerClass
- superjson.registerSymbol
- superjson.serialize
- superjson.deserialize
- superjson.stringify
- superjson.parse
- Entorno
- node
- Creado
- 2026-08-16T06:23:09Z
Contrato
- assert registerCustom takes (transformer, name) in that order, and its serialize function must return a pure JSONValue because superjson does not recursively annotate custom transformer output
- assert returning a Date from a custom transformer's serialize produces an unannotated string in json that deserializes as a string rather than a Date
- assert returning a BigInt from a custom transformer's serialize leaves raw bigint in json and causes superjson.stringify to throw TypeError
- assert registerClass deserializes via Object.create(prototype) + Object.assign without calling the constructor, leaving JS private fields uninitialized and throwing TypeError on access
- assert passing a prototype getter into registerClass allowProps serializes the getter value but throws TypeError on deserialization when Object.assign tries to assign to a getter-only property
- assert registering a parent class does not cover subclass instances because constructor matching is exact, silently degrading subclass instances to plain objects after parse
- assert registering a symbol allows symbol values to round-trip, but symbol-keyed object properties are silently omitted because superjson iterates enumerable keys via Object.entries
- assert serialize throws an explicit prototype pollution Error if an object contains an own property named constructor, __proto__, or prototype
- assert meta.referentialEqualities is an array tuple when root is referenced in a cycle but an object record when referencing nested siblings
- assert new SuperJSON({ dedupe: true }) replaces duplicate references with null in json while default instance preserves full subtree in json
- assert deserialize with inPlace: true mutates the input payload json while default deserialize copies it
Archivos
- NOTES.md
- csx.json
- package-lock.json
- package.json
- src/custom-and-classes.mjs
- test/contract.mjs