Files
NODEDC_MISSION_CORE/docs/audits/2026-09-05-rerun-upstream-evidence.json

68 lines
3.1 KiB
JSON

{
"npm": {
"version": "0.36.3",
"tarball": "https://registry.npmjs.org/@rerun-io/web-viewer/-/web-viewer-0.36.3.tgz",
"integrity": "sha512-LMGnsxRmY5UwiGras2dZrMnEYkow5Xr4v+1hAUSspXWPPiilMqoz9G77jo8Ps/deAaX81TnOq123DFO8iX/Ulw==",
"git_head": "6ded109d33c549e98185f7c95fa8009d44e4adef",
"compared_file_count": 12,
"mismatches": [],
"hashes": {
"index.js": "009aa5f66c8674ea268a91926c00e2f82cc7a7b7e5535056d93bd4656d6f6812",
"re_viewer.js": "d2a94836dd0e6de40538c4d657cfb423b1803e354e6ee0cd550735eb5aaab09b",
"index.d.ts": "649637dad4e50ef4f2310fc1920b580d16832226a0dda5238355059bf167efba",
"index.ts": "087b25170f720a28aa69c411903133286238900050ac775d2cc511b919846696",
"re_viewer_bg.wasm": "02d6d9c3a569d3faceb01cf89104342d970fc85e7c31a08dedd357b6c7104d2f"
}
},
"upstream_tag_commit": "6ded109d33c549e98185f7c95fa8009d44e4adef",
"sources": [
{
"path": "rerun_js/web-viewer/index.ts",
"sha256": "087b25170f720a28aa69c411903133286238900050ac775d2cc511b919846696"
},
{
"path": "crates/viewer/re_view_spatial/src/eye.rs",
"sha256": "491cf8143630ce7d955689d39bfe02b306172a30005135a1f86cdf348424fe68"
},
{
"path": "crates/viewer/re_view_spatial/src/ui_3d.rs",
"sha256": "b552f343dd5eb2970827d0b55d3f2febd2d9cfc663d1d5fcc44b5477b33a8ed8"
},
{
"path": "rerun_py/rerun_sdk/rerun/blueprint/api.py",
"sha256": "00db63587a2daca04d50a38eadef4852b2aaba70e45aa044597189a3f3ea5c1f"
}
],
"python": {
"version": "0.36.3",
"official_wheel": "https://files.pythonhosted.org/packages/43/ff/e8ce81a4fa451f232abb10f0737c5fa8c812a4b2979bda2f655c58c478eb/rerun_sdk-0.36.3-cp310-abi3-macosx_11_0_arm64.whl",
"wheel_sha256": "804067d6e71747f8461104988be82543b318b583a2837935558a5e79a5e9befd",
"compared_package_files": 507,
"mismatches": []
},
"built_wasm": [
{
"path": "apps/control-station/dist/assets/re_viewer_bg-BO4B44yr.wasm",
"sha256": "02d6d9c3a569d3faceb01cf89104342d970fc85e7c31a08dedd357b6c7104d2f"
}
],
"audit_date": "2026-09-05",
"application_code_commit": "b2a1b23131642ac496829e467c20c8c069915be9",
"methodology": {
"npm": "Official registry tarball integrity matched registry and lockfile; all published package files byte-compared with installed node_modules package.",
"python": "Official PyPI macOS ARM64 wheel SHA-256 matched PyPI and uv.lock; rerun_sdk and rerun_bindings package files byte-compared with installed .venv.",
"built_wasm": "SHA-256 of production dist WASM compared with the verified npm WASM.",
"upstream_sources": "Pinned tag source files downloaded from the official rerun-io/rerun repository; tag commit compared with npm gitHead.",
"scope": "Documentation-only audit; no SDK, viewer or runtime source changes."
},
"legacy": {
"version": "0.34.1",
"active": false,
"upstream_commit": "4efb18f17f6f0e41985cda99a2bdcd012febc8d5",
"hashes_verified": {
"re_viewer_bg.nodedc.wasm": "ffe7543d28bb3394f289f6299de43d038767eef83d781c2b7f8f5683308a0469",
"re_viewer.nodedc.js": "0f7b76c9f24cbd8437021b5d37499894aeadc586183e422ebc82ef556d7b8339"
}
}
}