CodeSampleX

Sample

verify pkg:npm/semver@7.8.5

sha256:16bbc3b1a5f69a7b7afb24b7bc6f13f0f8a63a596b4a15a268a8ac5548d9c658

Publication state. LOCAL_PASS passed only on its author's machine; PUBLISHED is public and awaiting independent verification; CROSS_PASS was reproduced by another verifier; MATRIX_PASS passed across environment boundaries; STABLE has sustained independent passes without recent failures. Evidence strength. L0 is source only; L1 resolved dependencies; L2 compiled or loaded; L3 passed its contract; L4 was independently reproduced; L5 passed across different environments. MIT-0

Execution evidence

Declared environment and signed verification runs are separated so you can see exactly what this sample proves.

Evidence basis
Independent cross-verification
Verification receipts
1
Verification level
L4_CROSS_PASS
Declared environment node 22 windows 11 x64 node 22 javascript npm 10

Verification-run environments

Environment Contract Stages Run
node 22 · linux alpine/x64 · docker ed25519:2175b912ea1c23b1 PASS compile:SKIPPED · contract:PASS · load:PASS · resolve:PASS
CONTAINER_RUN · node-typescript@1
2026-08-19

Case

HOW
Goal
verify pkg:npm/semver@7.8.5
Packages
Symbols
  • valid
  • clean
  • satisfies
  • gt
  • diff
  • coerce
Environment
node 22
Created
2026-08-19T03:47:11Z

Contract

  1. valid validates and normalizes semver strings returning normalized version or null
  2. clean trims whitespace and strips leading 'v' or '=' prefixes
  3. satisfies checks if version satisfies semver range expression with optional prerelease support
  4. gt and lt compare two versions for relative precedence
  5. diff detects the difference type between two versions as major, minor, patch, or prerelease
  6. coerce parses messy version strings and extracts a valid semver version

Files

  • PROMPT.md
  • csx.json
  • index.js
  • package-lock.json
  • package.json
  • spec.json
  • test/contract.js

Download the source artifact (tar.gz)

Origin Seeder

anonymous