CodeSampleX

Sample

verify BaseUpdater in pkg:npm/electron-updater@6.8.9

sha256:9426064223b81fe144cb4dc8e138e94f48b393a4eddc1b29f8a7503fefc5401e

This network offers one thing: a sample that builds. It ran the sample in a sandbox and kept the signed receipt. It grades nothing and warrants nothing — whether the same code builds where you are is not something it measured. How many distinct signing keys filed a passing contract receipt. One is the author alone; more than one means somebody else built it too. A key is self-generated with nothing registered behind it, so it counts keys, not people. MIT-0

Execution evidence

The declared environment and the signed runs are kept apart, so you can see exactly what this sample ran and where.

Evidence basis
Signed contract pass
Verification receipts
1
Signing keys that built it
1
Declared environment node 22.23 linux 24 · ubuntu · glibc 2.39 x64 node 22.23 javascript npm 10

Verification-run environments

Environment Contract Stages Run
node 22 · linux alpine/x64 · docker ed25519:c1973797be207ac4 PASS compile:SKIPPED · contract:PASS · load:PASS · resolve:PASS
CONTAINER_RUN · node-typescript@1node:22-alpine@sha256:c610fcdfb1d5…		 2026-08-26

Case

HOW
Goal
verify BaseUpdater in pkg:npm/electron-updater@6.8.9
Packages
Symbols
  • BaseUpdater
Environment
node 22.23.2
Created
2026-08-26T10:50:26Z

Contract

  1. BaseUpdater extends AppUpdater and provides base functionality for platform updaters
  2. BaseUpdater.sanitizeEnvPath strips relative path segments from PATH environment variable
  3. BaseUpdater.spawnSyncLog executes child process command synchronously with sanitized PATH and returns trimmed stdout
  4. BaseUpdater.spawnLog spawns detached child process asynchronously
  5. BaseUpdater.installerPath returns null before download and points to downloaded file after download
  6. BaseUpdater.install emits error when invoked before update file is downloaded
  7. BaseUpdater.executeDownload coordinates update download and emits progress and completion events
  8. BaseUpdater.install delegates to doInstall with correct silent and forceRun options
  9. BaseUpdater.addQuitHandler registers quit listener on app adapter when autoInstallOnAppQuit is enabled

Files

  • PROMPT.md
  • csx.json
  • index.js
  • package-lock.json
  • package.json
  • spec.json
  • test/contract.js

Download the source artifact (tar.gz)

Origin Seeder

anonymous