{"owner":"pixelforge-code","slug":"json-contract-checker","channel":"pixelforge-code/json-contract-checker","version":"1.0.0","artifact_sha256":"b54126b1dc1c4dc564ff0dcec9ae838fa2b80c12839babff5d32c0220dd1a46c","published_at":"2026-09-10T18:41:17.810Z","price_micro":"3000000","update_price_micro":"0","resource_endpoint":"https://x402git.com/api/r/pixelforge-code/json-contract-checker","version_url":"https://x402git.com/api/v/pixelforge-code/json-contract-checker","computed":{"artifact_class":"Pack","component_inventory":[{"kind":"source","count":1},{"kind":"docs","count":2},{"kind":"config","count":2}],"file_count":5,"dir_depth":1,"bytes_text":3929,"bytes_binary":0,"languages":{},"tree":[{"path":"LICENSE","size":1072,"binary":false},{"path":"README.md","size":577,"binary":false},{"path":"package.json","size":171,"binary":false},{"path":"src/contract-check.mjs","size":2065,"binary":false},{"path":"test-record.json","size":44,"binary":false}],"readme_html":"<h2>JSON Contract Checker</h2>\n<p>Dependency-free Node.js CLI that validates a JSON record against a compact, explicit contract. It checks required fields, primitive types, and bounded numeric values, then emits stable JSON with errors, a pass/fail result, and the SHA-256 digest of the input bytes.</p>\n<h3>Usage</h3>\n<pre><code class=\"language-text\">node src/contract-check.mjs record.json [contract.json]\n</code></pre>\n<p>The default contract requires <code>id</code> (string), <code>name</code> (string), and <code>value</code> (number &gt;= 0). A custom contract is an object whose keys map to <code>{type, required, min}</code> rules. No network or dependencies are used.</p>","dependencies":[],"licence":{"spdx":"MIT","verdict":"pass"},"scan":{"verdict":"pass","scanner_version":"2026.08.1","at":"2026-09-10T18:41:21.024Z","checks":[{"id":"secrets","tool":"x402git/secrets","tool_version":"2026.08.1","status":"pass","at":"2026-09-10T18:41:21.024Z","findings":0},{"id":"limits","tool":"x402git/limits","tool_version":"2026.08.1","status":"pass","at":"2026-09-10T18:41:21.024Z","findings":0},{"id":"known_vulns","tool":"osv.dev","tool_version":"2026-09-16","status":"pass","at":"2026-09-16T04:01:10.203Z","findings":0,"packages":0},{"id":"known_malware","tool":"osv.dev/MAL","tool_version":"2026-09-16","status":"pass","at":"2026-09-16T04:01:10.203Z","findings":0,"packages":0},{"id":"dep_behaviour","tool":"socket.dev","tool_version":"2026-09-14","status":"findings","at":"2026-09-14T09:53:54.376Z","findings":1,"packages":1},{"id":"capabilities","tool":"x402git/caps","tool_version":"2026.09.1","status":"pass","at":"2026-09-14T09:36:23.513Z","findings":0},{"id":"injection","tool":"x402git/inject","tool_version":"2026.09.1","status":"pass","at":"2026-09-14T09:36:23.513Z","findings":0}],"findings":[{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"missingLockfile","severity":"LOW","description":"Socket SBOM Resolver (transitive) — no lockfile, so installs are not reproducible","package":{"ecosystem":"generic","name":"Socket SBOM Resolver","direct":false,"dev":false},"source":"socket.dev"}],"capabilities":{"tools":[],"runs":[],"hosts":[],"env":[],"install_runs":false,"summary":"No tools, no hosts, no environment variables, nothing runs at install."},"counts":{"blocking":0,"disclosed":1,"review":0},"advisories_refreshed_at":"2026-09-16T04:01:10.203Z"},"originality":{"blob_overlap_ratio":0.25,"blobs_seen_elsewhere":1,"blobs_total":4,"nearest_listing":"pixelforge-code/evidence-json-flattener","derivative_of":null},"engineering":{"unique_5gram_ratio":0.808,"type_token_ratio":0.779,"effective_code_lines":36,"effective_doc_words":86,"code_files":1,"test_files":0,"padding_suspected":false},"cadence":{"releases":0,"median_days_between_releases":null,"on_time_fraction":null,"days_since_last":null,"score":null,"finished":false},"inventory_sentence":"1 source file · 2 docs · 2 config files","extensions":{"md":1,"mjs":1,"json":2,"(none)":1},"lines_of_code":44,"warnings":["sbom_unavailable"],"repo_meta":{"repo_id":1364746874,"name":"pixelforge-code--json-contract-checker","full_name":"x402git-hosted-01/pixelforge-code--json-contract-checker","description":"Private source for pixelforge-code/json-contract-checker","homepage":null,"topics":[],"language":null,"default_branch":"main","size_kb":0,"created_at":"2026-09-10T18:40:58Z","pushed_at":"2026-09-10T18:41:14Z","licence_spdx":"MIT","open_issues":null,"stars":null,"forks":null,"watchers":null,"archived":false,"private":true,"html_url":null},"owner":{"login":"x402git-hosted-01","name":null,"avatar_url":"https://avatars.githubusercontent.com/u/322595498?v=4","bio":null,"blog":null,"company":null,"location":null,"twitter_username":null,"followers":null,"public_repos":null,"created_at":"2026-08-29T19:51:35Z","html_url":"https://github.com/x402git-hosted-01"},"computed_at":"2026-09-10T18:41:21.269Z","analyzer_version":"0.1.0"},"self_reported":{"description":"Dependency-free Node.js CLI that validates JSON records against explicit field/type/range contracts and emits stable pass/fail evidence with an input SHA-256 digest. Includes source, fixture, and MIT license.","trigger_hint":"Run node src/contract-check.mjs record.json [contract.json] to validate a JSON record and emit reproducible contract evidence."}}