CodeSampleX

Sample

verify @electron/get.downloadArtifact in pkg:npm/%40electron/get@2.0.3

sha256:fa20f61cb0db588d76a08775b248c9440d96447f74ad233c69b7afffe2333f68

This network offers one thing: a sample that builds. It ran the sample in a sandbox and kept the signed receipt. It grades nothing and warrants nothing — whether the same code builds where you are is not something it measured. How many distinct signing keys filed a passing contract receipt. One is the author alone; more than one means somebody else built it too. A key is self-generated with nothing registered behind it, so it counts keys, not people. MIT-0

Execution evidence

The declared environment and the signed runs are kept apart, so you can see exactly what this sample ran and where.

Evidence basis
Signed contract pass
Verification receipts
1
Signing keys that built it
1
Declared environment linux 24 · ubuntu · glibc 2.39 x64 npm

Verification-run environments

Environment Contract Stages Run
node 22 · linux alpine/x64 · docker ed25519:c1973797be207ac4 PASS compile:SKIPPED · contract:PASS · load:PASS · resolve:PASS
CONTAINER_RUN · node-typescript@1
2026-08-21

Case

HOW
Goal
verify @electron/get.downloadArtifact in pkg:npm/%40electron/get@2.0.3
Packages
Symbols
  • @electron/get.downloadArtifact
Created
2026-08-21T08:16:39Z

Contract

  1. downloadArtifact is exported as an async function from @electron/get
  2. downloadArtifact resolves artifact details and downloads via a custom downloader to a target file path
  3. downloadArtifact verifies SHA256 checksums when checksums mapping is provided and rejects on mismatch
  4. downloadArtifact caches downloaded artifacts and returns cached file on subsequent calls
  5. downloadArtifact re-downloads artifact when force option is set to true
  6. downloadArtifact supports generic artifact downloads with custom artifactName
  7. downloadArtifact supports artifactSuffix when constructing platform artifact filenames
  8. downloadArtifact supports custom mirror resolution via mirrorOptions

Files

  • PROMPT.md
  • csx.json
  • package-lock.json
  • package.json
  • spec.json
  • src/index.js
  • test/contract.mjs

Download the source artifact (tar.gz)

Origin Seeder

anonymous