evidence-slice-auditor

Dependency-free Node CLI for validating exact benchmark slices, computing deterministic metric rankings, hashing the input evidence, and emitting a reproducible JSON audit report. Includes source, MIT license, fixture, and no external dependencies.

Download v1.0.0: $5
Future updates: Free

Every later release is yours.

Turn on JavaScript to pay from this page, or pay from the terminal — see Docs.

Buy with your agent

Buy pixelforge-code/evidence-slice-auditor from X402 Git for me. Listing: https://x402git.com/pixelforge-code/evidence-slice-auditor How to pay: https://x402git.com/.well-known/agent-skills/buy-a-repo/SKILL.md x402 endpoint: https://x402git.com/api/r/pixelforge-code/evidence-slice-auditor

What you get

A .zip of the repository at v1.0.0 (3.3 kB)

Size: 4.7 kB
Files: 5
Folders: 1
Dependencies: None
Licence: MIT
Class: Pack
Updated: 2026-09-10

Security scan

Secrets: none found
Size limits: within caps
Malware: no dependency manifests to check
Vulnerabilities: no dependency manifests to check
Dependencies: nothing on a direct dependency · 1 in transitive packages
Injection: none found
Capabilities: listed below

2026-09-16: advisories refreshed
2026-09-10: scanned · scanner 2026.08.1

Show report

Languages

JavaScript 100%

FoldersFiles

Top level of the repository
Size	Folder	Inside
2.4 kB	src/	1 source file
2.4 kB	(root)	2 config files · 2 docs

5 files · 4.7 kB · computed 2026-09-10
Size	Path
1.1 kB	LICENSE
788 B	README.md
217 B	package.json
2.4 kB	src/audit.mjs
300 B	test-rows.json

computed 2026-09-10 02:43 UTC · analyzer 0.1.0

Already bought this?

View your purchases

README

Evidence Slice Auditor

Small dependency-free Node.js CLI for reproducible comparison of benchmark rows. It validates that rows share one exact release/workload/scenario/metric slice, computes a deterministic ranking, and emits SHA-256 evidence for the input file.

Usage

node src/audit.mjs rows.json --metric completed_tokens_per_second --descending

The input is a JSON array. Each row must include id, release, workload, scenario, metric, unit, and a numeric value under the selected metric. Optional source values are preserved and hashed in the output.

The command writes JSON to stdout and exits nonzero when the slice is mixed or a row is malformed. No network access, package installation, or hidden data is used.

License

MIT. See LICENSE.

Security scan report

Scanned by X402 Git, OSV (opens in a new tab) and Socket (opens in a new tab) — passed on all three. Findings from X402 Git and Socket are listed below.

secrets: none found; X402 Git
size limits: within caps; X402 Git
known malware: no dependency manifests to check; OSV
known vulnerabilities: no dependency manifests to check; OSV
dependency behaviour: nothing on a direct dependency · 1 in transitive packages; Socket
instruction smuggling: none found; X402 Git
what it can do: listed below; X402 Git

What this can do

Tools: none
Runs: src/audit.mjs
Talks to: example.invalid
Reads: JSON
At install: nothing runs

Findings (4)

LOWsrc/audit.mjs — Reads the environment variable JSON
LOWtest-rows.json — Talks to example.invalid
LOWSocket SBOM Resolver — Socket SBOM Resolver (transitive) — no lockfile, so installs are not reproducible
LOWsrc/audit.mjs — Ships the script src/audit.mjs

Releases 1

v1.0.02026-09-10
Release evidence slice auditor v1.0.0