CodeSampleX

Sample

verify pkg:npm/fresh@2.0.0

sha256:a13513787b8f06f4ff588920fa652e8e8d861f2bb13222af32c831056298e691

Publication state. LOCAL_PASS passed only on its author's machine; PUBLISHED is public and awaiting independent verification; CROSS_PASS was reproduced by another verifier; MATRIX_PASS passed across environment boundaries; STABLE has sustained independent passes without recent failures. Evidence strength. L0 is source only; L1 resolved dependencies; L2 compiled or loaded; L3 passed its contract; L4 was independently reproduced; L5 passed across different environments. MIT-0

Execution evidence

Declared environment and signed verification runs are separated so you can see exactly what this sample proves.

Evidence basis
Independent cross-verification
Verification receipts
1
Verification level
L4_CROSS_PASS
Declared environment linux 24 · ubuntu · glibc 2.39 x64 npm

Verification-run environments

Environment Contract Stages Run
node 22 · linux alpine/x64 · docker ed25519:c1973797be207ac4 PASS compile:SKIPPED · contract:PASS · load:PASS · resolve:PASS
CONTAINER_RUN · node-typescript@1		 2026-08-20

Case

HOW
Goal
verify pkg:npm/fresh@2.0.0
Packages
Created
2026-08-20T13:52:02Z

Contract

  1. fresh(reqHeaders, resHeaders) returns false for unconditional requests without if-modified-since or if-none-match
  2. fresh(reqHeaders, resHeaders) returns false when Cache-Control header contains no-cache even if ETags match
  3. fresh(reqHeaders, resHeaders) returns true when if-none-match exactly matches the response etag
  4. fresh(reqHeaders, resHeaders) returns true when matching weak ETags like W/"123" and "123"
  5. fresh(reqHeaders, resHeaders) returns true when if-none-match is wildcard *
  6. fresh(reqHeaders, resHeaders) returns true when if-modified-since is at or after response last-modified date
  7. fresh(reqHeaders, resHeaders) prioritizes if-none-match over if-modified-since when both are present

Files

  • PROMPT.md
  • csx.json
  • index.mjs
  • package-lock.json
  • package.json
  • spec.json
  • test/contract.mjs

Download the source artifact (tar.gz)

Origin Seeder

anonymous