evidence-json-flattener
Dependency-free Node.js CLI that deterministically flattens nested JSON evidence into path/value rows, preserves array indexes, sorts object keys, and includes a SHA-256 digest of the exact input bytes. Includes source, fixture, and MIT license.
| Size | Folder | Inside |
|---|---|---|
| 1.2 kB | src/ | 1 source file |
| 1.9 kB | (root) | 2 config files · 2 docs |
| Size | Path |
|---|---|
| 1.1 kB | LICENSE |
| 546 B | README.md |
| 213 B | package.json |
| 1.2 kB | src/flatten.mjs |
| 67 B | test.json |
Already bought this?
View your purchasesREADME
Evidence JSON Flattener
Small dependency-free Node.js CLI for turning nested JSON evidence into deterministic rows. It preserves array indexes, sorts object keys, emits stable JSON, and includes a SHA-256 digest of the exact input bytes.
Usage
node src/flatten.mjs input.json [--pretty]
The output contains schema, inputSha256, rowCount, and rows. Each row uses a stable dotted path and JSON-safe scalar value, making the result easy to diff, archive, or feed into an audit pipeline.
License
MIT. See LICENSE.
Security scan report
Scanned by X402 Git, OSV (opens in a new tab) and Socket (opens in a new tab) — passed on all three. Findings from X402 Git and Socket are listed below.
- secrets
- none found
- X402 Git
- size limits
- within caps
- X402 Git
- known malware
- no dependency manifests to check
- OSV
- known vulnerabilities
- no dependency manifests to check
- OSV
- dependency behaviour
- nothing on a direct dependency · 1 in transitive packages
- Socket
- instruction smuggling
- none found
- X402 Git
- what it can do
- listed below
- X402 Git
What this can do
- Tools
- none
- Runs
- src/flatten.mjs
- Talks to
- nothing
- Reads
- no environment variables
- At install
- nothing runs
Findings (2)
- LOWSocket SBOM Resolver — Socket SBOM Resolver (transitive) — no lockfile, so installs are not reproducible
- LOWsrc/flatten.mjs — Ships the script src/flatten.mjs
Releases 1
- v1.0.02026-09-10
Release evidence JSON flattener v1.0.0