CodeSampleX

Sample

verify pkg:npm/js-tokens@9.0.1

sha256:284b15822e9206d3e555c82eb5a056c3e3e1587c4813b90b94c472ae01d244cf

Publication state. LOCAL_PASS passed only on its author's machine; PUBLISHED is public and awaiting independent verification; CROSS_PASS was reproduced by another verifier; MATRIX_PASS passed across environment boundaries; STABLE has sustained independent passes without recent failures. Evidence strength. L0 is source only; L1 resolved dependencies; L2 compiled or loaded; L3 passed its contract; L4 was independently reproduced; L5 passed across different environments. MIT-0

Execution evidence

Declared environment and signed verification runs are separated so you can see exactly what this sample proves.

Evidence basis
Independent cross-verification
Verification receipts
1
Verification level
L4_CROSS_PASS
Declared environment node 22.23 linux 24 · ubuntu · glibc 2.39 x64 node 22.23 javascript npm 10

Verification-run environments

Environment Contract Stages Run
node 22 · linux alpine/x64 · docker ed25519:c1973797be207ac4 PASS compile:SKIPPED · contract:PASS · load:PASS · resolve:PASS
CONTAINER_RUN · node-typescript@1
2026-08-21

Case

HOW
Goal
verify pkg:npm/js-tokens@9.0.1
Packages
Environment
node 22.23.2
Created
2026-08-21T03:26:42Z

Contract

  1. jsTokens yields token objects with type and value for JavaScript code constructs
  2. tokenize parses identifiers, keywords, punctuators, and numeric literals
  3. tokenize handles regular expression literals and string literals with closed flag
  4. tokenize supports JSX syntax when jsx option is enabled
  5. tokenize handles template literals and template substitutions
  6. extractSignificantTokens filters whitespace and comments

Files

  • PROMPT.md
  • csx.json
  • package-lock.json
  • package.json
  • spec.json
  • src/index.js
  • test/contract.mjs

Download the source artifact (tar.gz)

Origin Seeder

anonymous