{
  "npm": {
    "version": "0.36.3",
    "tarball": "https://registry.npmjs.org/@rerun-io/web-viewer/-/web-viewer-0.36.3.tgz",
    "integrity": "sha512-LMGnsxRmY5UwiGras2dZrMnEYkow5Xr4v+1hAUSspXWPPiilMqoz9G77jo8Ps/deAaX81TnOq123DFO8iX/Ulw==",
    "git_head": "6ded109d33c549e98185f7c95fa8009d44e4adef",
    "compared_file_count": 12,
    "mismatches": [],
    "hashes": {
      "index.js": "009aa5f66c8674ea268a91926c00e2f82cc7a7b7e5535056d93bd4656d6f6812",
      "re_viewer.js": "d2a94836dd0e6de40538c4d657cfb423b1803e354e6ee0cd550735eb5aaab09b",
      "index.d.ts": "649637dad4e50ef4f2310fc1920b580d16832226a0dda5238355059bf167efba",
      "index.ts": "087b25170f720a28aa69c411903133286238900050ac775d2cc511b919846696",
      "re_viewer_bg.wasm": "02d6d9c3a569d3faceb01cf89104342d970fc85e7c31a08dedd357b6c7104d2f"
    }
  },
  "upstream_tag_commit": "6ded109d33c549e98185f7c95fa8009d44e4adef",
  "sources": [
    {
      "path": "rerun_js/web-viewer/index.ts",
      "sha256": "087b25170f720a28aa69c411903133286238900050ac775d2cc511b919846696"
    },
    {
      "path": "crates/viewer/re_view_spatial/src/eye.rs",
      "sha256": "491cf8143630ce7d955689d39bfe02b306172a30005135a1f86cdf348424fe68"
    },
    {
      "path": "crates/viewer/re_view_spatial/src/ui_3d.rs",
      "sha256": "b552f343dd5eb2970827d0b55d3f2febd2d9cfc663d1d5fcc44b5477b33a8ed8"
    },
    {
      "path": "rerun_py/rerun_sdk/rerun/blueprint/api.py",
      "sha256": "00db63587a2daca04d50a38eadef4852b2aaba70e45aa044597189a3f3ea5c1f"
    }
  ],
  "python": {
    "version": "0.36.3",
    "official_wheel": "https://files.pythonhosted.org/packages/43/ff/e8ce81a4fa451f232abb10f0737c5fa8c812a4b2979bda2f655c58c478eb/rerun_sdk-0.36.3-cp310-abi3-macosx_11_0_arm64.whl",
    "wheel_sha256": "804067d6e71747f8461104988be82543b318b583a2837935558a5e79a5e9befd",
    "compared_package_files": 507,
    "mismatches": []
  },
  "built_wasm": [
    {
      "path": "apps/control-station/dist/assets/re_viewer_bg-BO4B44yr.wasm",
      "sha256": "02d6d9c3a569d3faceb01cf89104342d970fc85e7c31a08dedd357b6c7104d2f"
    }
  ],
  "audit_date": "2026-09-05",
  "application_code_commit": "b2a1b23131642ac496829e467c20c8c069915be9",
  "methodology": {
    "npm": "Official registry tarball integrity matched registry and lockfile; all published package files byte-compared with installed node_modules package.",
    "python": "Official PyPI macOS ARM64 wheel SHA-256 matched PyPI and uv.lock; rerun_sdk and rerun_bindings package files byte-compared with installed .venv.",
    "built_wasm": "SHA-256 of production dist WASM compared with the verified npm WASM.",
    "upstream_sources": "Pinned tag source files downloaded from the official rerun-io/rerun repository; tag commit compared with npm gitHead.",
    "scope": "Documentation-only audit; no SDK, viewer or runtime source changes."
  },
  "legacy": {
    "version": "0.34.1",
    "active": false,
    "upstream_commit": "4efb18f17f6f0e41985cda99a2bdcd012febc8d5",
    "hashes_verified": {
      "re_viewer_bg.nodedc.wasm": "ffe7543d28bb3394f289f6299de43d038767eef83d781c2b7f8f5683308a0469",
      "re_viewer.nodedc.js": "0f7b76c9f24cbd8437021b5d37499894aeadc586183e422ebc82ef556d7b8339"
    }
  }
}