Sample

Round-trip TypedArrays, deduplicated references, escaped key paths, and custom/symbol registries through superjson while navigating silent numeric corruption and prototype pollution guards

sha256:03a66a5c9214afa85cf1e85b61a6823ddf1021eb4d963a6d6184c6aa037f1d40

Case

Goal

Round-trip TypedArrays, deduplicated references, escaped key paths, and custom/symbol registries through superjson while navigating silent numeric corruption and prototype pollution guards HOW

Packages

superjson 2.2.6

Environment

node

Created

2026-08-16T06:23:15Z

Contract

• assert Float64Array is annotated as ['typed-array', 'Float64Array'] and transformed shallowly without element-level metadata
• assert serialize leaves NaN, Infinity, -Infinity, and -0 as raw JavaScript numbers in json
• assert stringify runs JSON.stringify which turns NaN, Infinity, and -Infinity into null in the serialized array
• assert parse reconstructs the typed array with Number(null) coercion, silently corrupting NaN, Infinity, and -Infinity into 0
• assert BigInt64Array throws TypeError on stringify because elements are BigInts and not converted to string annotations
• assert deserializing BigInt64Array throws trying to deserialize unknown typed array because it is absent from constructor registry
• assert DataView is excluded from typed array transformers and degrades to an empty object literal
• assert dedupe: true replaces duplicate object references with null on wire while recording referentialEqualities metadata to restore identical references
• assert dedupe: false preserves full clone trees in json while maintaining referentialEqualities annotations for identity restoration
• assert property keys containing dots and backslashes are escaped in meta.values as \. and \\ to avoid segment collision
• assert registerCustom serializes custom types into tagged annotations and restores them on parse, throwing if unregistered
• assert registerSymbol maps symbols to identifiers in meta.values and restores symbol identity, throwing if unregistered on parse
• assert serializing objects with own properties named constructor, __proto__, or prototype throws a prototype pollution error
• assert deserializing metadata paths containing constructor, __proto__, or prototype throws a path validation error

Files

• NOTES.md
• csx.json
• package-lock.json
• package.json
• src/index.mjs
• test/contract.mjs

Download the verified artifact (tar.gz) — the exact bytes the contract ran against

Origin Seeder

csx-seed

Verification receipts

• node 22 · CONTAINER_RUN · compile:SKIPPED · contract:PASS · load:PASS · resolve:PASS · node-typescript@1 · 2026-08-16 · ed25519:d91480838ac982c9