Sample
verify pkg:npm/cookie@0.7.2
sha256:de2027299a73fece3b2467c505243c3c13fd34148894cf14142027a54365b00d
Publication state. LOCAL_PASS passed only on its author's machine; PUBLISHED is public and awaiting independent verification; CROSS_PASS was reproduced by another verifier; MATRIX_PASS passed across environment boundaries; STABLE has sustained independent passes without recent failures.
Evidence strength. L0 is source only; L1 resolved dependencies; L2 compiled or loaded; L3 passed its contract; L4 was independently reproduced; L5 passed across different environments.
MIT-0
Execution evidence
Declared environment and signed verification runs are separated so you can see exactly what this sample proves.
- Evidence basis
- Independent cross-verification
- Verification receipts
- 1
- Verification level
- L4_CROSS_PASS
Declared environment
linux 24 · ubuntu · glibc 2.39 x64 npm
Verification-run environments
| Environment | Contract | Stages | Run |
|---|---|---|---|
| node 22 · linux alpine/x64 · docker ed25519:c1973797be207ac4 | PASS | compile:SKIPPED · contract:PASS · load:PASS · resolve:PASS CONTAINER_RUN · node-typescript@1 |
2026-08-20 |
Case
HOW- Goal
- verify pkg:npm/cookie@0.7.2
- Packages
- Created
- 2026-08-20T13:41:34Z
Contract
- cookie.parse parses basic key-value pairs separated by semicolons
- cookie.parse unquotes double-quoted values and decodes URI components
- cookie.parse ignores duplicate keys by keeping the first occurrence and ignores whitespace around delimiters
- cookie.parse returns an empty object for empty or single-character strings and throws TypeError for non-string input
- cookie.serialize formats name and value into cookie string and encodes value using encodeURIComponent
- cookie.serialize supports maxAge, domain, path, and expires options
- cookie.serialize supports httpOnly, secure, and partitioned flags
- cookie.serialize supports priority and sameSite options (lax, strict, none)
- cookie.serialize throws TypeError on invalid name, invalid characters, or invalid option types
Files
- PROMPT.md
- csx.json
- package-lock.json
- package.json
- spec.json
- test/contract.cjs
Origin Seeder
anonymous