CodeSampleX

Sample

verify pkg:npm/semver@7.8.5

sha256:5564588712cb42d8f37c911a36f1e42e6b088c978b7f5a6dad997600d5d2b96a

Publication state. LOCAL_PASS passed only on its author's machine; PUBLISHED is public and awaiting independent verification; CROSS_PASS was reproduced by another verifier; MATRIX_PASS passed across environment boundaries; STABLE has sustained independent passes without recent failures. Evidence strength. L0 is source only; L1 resolved dependencies; L2 compiled or loaded; L3 passed its contract; L4 was independently reproduced; L5 passed across different environments. MIT-0

Execution evidence

Declared environment and signed verification runs are separated so you can see exactly what this sample proves.

Evidence basis
Independent cross-verification
Verification receipts
1
Verification level
L4_CROSS_PASS
Declared environment windows 11 x64 npm

Verification-run environments

Environment Contract Stages Run
node 22 · linux alpine/x64 · docker ed25519:2175b912ea1c23b1 PASS compile:SKIPPED · contract:PASS · load:PASS · resolve:PASS
CONTAINER_RUN · node-typescript@1
2026-08-19

Case

HOW
Goal
verify pkg:npm/semver@7.8.5
Packages
Created
2026-08-19T12:02:50Z

Contract

  1. semver validates and cleans version strings with valid and clean, returning normalized versions or null
  2. semver evaluates range matching with satisfies across comparison operators, carets, and tildes
  3. semver compares version precedence with compare, gt, lt, and eq
  4. semver increments version numbers across major, minor, patch, and prerelease release types with inc
  5. semver extracts the minimum version satisfying a range with minVersion and coerces loose strings with coerce

Files

  • PROMPT.md
  • csx.json
  • index.js
  • package-lock.json
  • package.json
  • spec.json
  • test/contract.js

Download the source artifact (tar.gz)

Origin Seeder

anonymous