Skip to content

Commit 10fb9fa

Browse files
thejacksheltonthejackshelton
committed
feat(coverage): T045-b1 — PROVEN 11->12: coverview 9/9 count 0 through the shipped path (--allow-git-dependencies converts the T029 defect); antd-admin's wall now named (install.closure-registry-unreachable); verdaccio acquired source-bound (revision auto-adopted, no hand-carry) then honestly refused frontend-root-declares-no-framework — it was never a react app at that pin. Four non-MIT staged apps: NO socket opened, consent scope escalated to owner. Totals {24,12,2,7,3}; matrix 6/6+4/4; composite 140ce86e; census 198
1 parent d359a1a commit 10fb9fa

22 files changed

Lines changed: 2581 additions & 137 deletions

‎evidence/ingests/react-verdaccio-v4-12-2/attempt.json‎

Lines changed: 35 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,35 @@
1+
{
2+
"schemaVersion": "versionless.official-source-attempt.v1",
3+
"candidate": {
4+
"repository": "verdaccio/verdaccio",
5+
"requestedTag": "v4.12.2"
6+
},
7+
"consentId": "VL-LEGACY-CORPUS-2026-08-10",
8+
"result": "started",
9+
"network": {
10+
"method": "GET",
11+
"credentials": "none",
12+
"requestEncoding": "identity",
13+
"redirectsAllowed": false,
14+
"alternateHostsAllowed": false
15+
},
16+
"caps": {
17+
"metadata": 16777216,
18+
"archive": 134217728,
19+
"aggregate": 314572800
20+
},
21+
"requiredArchiveStreams": 2,
22+
"publication": {
23+
"evidenceRoot": "evidence/ingests/react-verdaccio-v4-12-2",
24+
"cacheRoot": ".versionless/cache/react-verdaccio-v4-12-2-source",
25+
"baseline": ".versionless/work/react-verdaccio-v4-12-2/baseline",
26+
"transactional": true,
27+
"readinessCredit": false
28+
},
29+
"nonclaims": [
30+
"A lightweight or unsigned tag does not establish signer authenticity.",
31+
"This record states that the bytes at the recorded commit reconcile with the Git tree the repository publishes at that commit. It establishes no dependency closure, build, browser behavior, migration feasibility, pilot status, production readiness, certification, or legal approval.",
32+
"The licence reading is a reading of the file present at the pin. It is not a legal opinion and it evaluates no dependency’s terms.",
33+
"Acquiring a source is not admitting one. Whether this tree can be ingested, installed, built or migrated is not read here."
34+
]
35+
}

‎evidence/ingests/react-verdaccio-v4-12-2/source.json‎

Lines changed: 155 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,155 @@
1+
{
2+
"schemaVersion": "versionless.official-source.v1",
3+
"consentId": "VL-LEGACY-CORPUS-2026-08-10",
4+
"attemptSha256": "25537a2ea379cd84759f20dfb45e13db50dbdcf7ae56627229778a7b4119ed53",
5+
"result": "source-bound",
6+
"startedAt": "2026-08-20T13:39:07.952Z",
7+
"completedAt": "2026-08-20T13:39:11.071Z",
8+
"repository": {
9+
"id": 56333861,
10+
"fullName": "verdaccio/verdaccio",
11+
"private": false,
12+
"archived": false,
13+
"disabled": false,
14+
"responseBytes": 6480,
15+
"responseSha256": "9518e56a5e4b6ad30a2aa422e596fa265e2063bcc925d1b4b3c4e1990cc8fbd3"
16+
},
17+
"revision": {
18+
"ref": "refs/tags/v4.12.2",
19+
"tagObjectSha": "48c9f8bca906a5b11a283c560c0fe346b03d6c23",
20+
"tagKind": "annotated",
21+
"tagDate": "2021-06-23T17:16:55Z",
22+
"tagVerification": "unsigned",
23+
"commitSha": "4fd08e63557d6bfd0e1183b60e8bc4c3a9f14bff",
24+
"commitDate": "2021-06-23T17:16:50Z",
25+
"commitVerification": "unsigned",
26+
"rootTreeSha": "55ceead217b66063d651d8f4fa26c7d539999058",
27+
"treeEntries": 750,
28+
"treeBlobs": 525,
29+
"treeDirectories": 225,
30+
"treeSymlinks": 0,
31+
"treeGitlinks": 0,
32+
"treeTruncated": false
33+
},
34+
"requests": [
35+
{
36+
"endpoint": "https://api.github.com/repos/verdaccio/verdaccio",
37+
"status": 200,
38+
"bytes": 6480,
39+
"sha256": "9518e56a5e4b6ad30a2aa422e596fa265e2063bcc925d1b4b3c4e1990cc8fbd3"
40+
},
41+
{
42+
"endpoint": "https://api.github.com/repos/verdaccio/verdaccio/git/ref/tags/v4.12.2",
43+
"status": 200,
44+
"bytes": 343,
45+
"sha256": "6057e5d705488ae89399ff2448f68c779820e0755936f82c39a7b8b88016c6ad"
46+
},
47+
{
48+
"endpoint": "https://api.github.com/repos/verdaccio/verdaccio/git/tags/48c9f8bca906a5b11a283c560c0fe346b03d6c23",
49+
"status": 200,
50+
"bytes": 685,
51+
"sha256": "afdeef8ab20691c7fb47ec7dc242b5a5f448a40f2c4a98a201b78cb4f4057ba0"
52+
},
53+
{
54+
"endpoint": "https://api.github.com/repos/verdaccio/verdaccio/git/commits/4fd08e63557d6bfd0e1183b60e8bc4c3a9f14bff",
55+
"status": 200,
56+
"bytes": 1125,
57+
"sha256": "efa6c9bd8cccc5f40e91f5bd44f092ccd737c726446426aae4ad654fa912549b"
58+
},
59+
{
60+
"endpoint": "https://api.github.com/repos/verdaccio/verdaccio/git/trees/55ceead217b66063d651d8f4fa26c7d539999058?recursive=1",
61+
"status": 200,
62+
"bytes": 185460,
63+
"sha256": "e1d29caccbec9f3b4d8d126937fe677a42511489bbe7bbd593d6a21482bd2115"
64+
},
65+
{
66+
"endpoint": "https://codeload.github.com/verdaccio/verdaccio/tar.gz/4fd08e63557d6bfd0e1183b60e8bc4c3a9f14bff",
67+
"status": 200,
68+
"bytes": 9694558,
69+
"sha256": "ad2b3c9f4599dc22a057499a7b39f0a55371bf4ea2174d23b4044c234974faee",
70+
"stream": 1
71+
},
72+
{
73+
"endpoint": "https://codeload.github.com/verdaccio/verdaccio/tar.gz/4fd08e63557d6bfd0e1183b60e8bc4c3a9f14bff",
74+
"status": 200,
75+
"bytes": 9694558,
76+
"sha256": "ad2b3c9f4599dc22a057499a7b39f0a55371bf4ea2174d23b4044c234974faee",
77+
"stream": 2
78+
}
79+
],
80+
"archiveParity": {
81+
"singleRoot": "verdaccio-4fd08e63557d6bfd0e1183b60e8bc4c3a9f14bff",
82+
"safeEntries": 751,
83+
"regularFiles": 525,
84+
"directories": 226,
85+
"specialEntries": 0,
86+
"gitBlobs": 525,
87+
"missingFiles": 0,
88+
"extraFiles": 0,
89+
"mismatchedBlobs": 0,
90+
"normalizedManifestSha256": "6c42db539f57e619f74f18a6a255277460305f21bca97cf153cdeed35c7a640a"
91+
},
92+
"transaction": {
93+
"attemptedRequests": 7,
94+
"acceptedResponses": 7,
95+
"acceptedWireBytes": 19583209,
96+
"acceptedDecodedBytes": 19583209,
97+
"redirectsObserved": 0,
98+
"setCookiesUsed": 0,
99+
"retries": 0,
100+
"archivesByteIdentical": true,
101+
"archiveMatchesGitTree": true,
102+
"publishedSource": true,
103+
"readinessCredit": false,
104+
"implementationStarted": false
105+
},
106+
"cache": {
107+
"root": ".versionless/cache/react-verdaccio-v4-12-2-source",
108+
"archive1": ".versionless/cache/react-verdaccio-v4-12-2-source/archive/archive-1.tar.gz",
109+
"archive2": ".versionless/cache/react-verdaccio-v4-12-2-source/archive/archive-2.tar.gz",
110+
"verifiedSource": ".versionless/cache/react-verdaccio-v4-12-2-source/verify/extracted",
111+
"rawMetadataPortable": false
112+
},
113+
"baseline": ".versionless/work/react-verdaccio-v4-12-2/baseline",
114+
"licence": {
115+
"identifier": "MIT",
116+
"identifierSource": "observed",
117+
"identifierRefusal": null,
118+
"copyrightNotice": "Copyright (c) 2018 Verdaccio community",
119+
"filesAtRoot": [
120+
"LICENSE"
121+
],
122+
"artifacts": [
123+
{
124+
"path": "LICENSE",
125+
"role": "repository-root-licence",
126+
"gitBlobSha": "a969d7d066f891c97c77d6f6936aa53dc39eca04",
127+
"bytes": 1076,
128+
"sha256": "df1ab2627cac741d29e886dbcaeddd87b84db38da56a3cfc37dcdc1be81c5717",
129+
"firstLine": "MIT License",
130+
"permissionGrantPresent": true,
131+
"noticeRetentionClausePresent": true,
132+
"warrantyDisclaimerPresent": true,
133+
"licenseField": null
134+
},
135+
{
136+
"path": "package.json",
137+
"role": "frontend-manifest",
138+
"gitBlobSha": "d8c764bb9700dcae8900c69919b39eb1a99c92eb",
139+
"bytes": 7042,
140+
"sha256": "eefe4345266c6ff2ec993d536fc6b058cc8a5bbfbd0e800846174856043b52fa",
141+
"firstLine": null,
142+
"permissionGrantPresent": null,
143+
"noticeRetentionClausePresent": null,
144+
"warrantyDisclaimerPresent": null,
145+
"licenseField": "MIT"
146+
}
147+
]
148+
},
149+
"nonclaims": [
150+
"A lightweight or unsigned tag does not establish signer authenticity.",
151+
"This record states that the bytes at the recorded commit reconcile with the Git tree the repository publishes at that commit. It establishes no dependency closure, build, browser behavior, migration feasibility, pilot status, production readiness, certification, or legal approval.",
152+
"The licence reading is a reading of the file present at the pin. It is not a legal opinion and it evaluates no dependency’s terms.",
153+
"Acquiring a source is not admitting one. Whether this tree can be ingested, installed, built or migrated is not read here."
154+
]
155+
}

0 commit comments

Comments
 (0)