chalk
6.0.1npm / chalk / 6.0.1· requested latest
Scan ID
Scanned
Oct 12, 2026, 4:46 PM
Scan summary
chalk@latest was inspected against npm metadata, its published tarball and OSV advisories, and returned ALLOW.
Recorded evidence
- Verdict
- ALLOW
- Risk score
- 0/100
- Findings
- 0
- Signed by
- 3 local roles
Package code was never executed. Open the Threats tab for individual findings and the exact lines they matched.
SAFE
chalk@latest
Risk Score
0/ 100
Summary
Risk score 0/100 under policy d0-policy/1.0.0. No policy violation was detected in the downloaded artifact. No published advisory matches this exact version. Three locally signed scanner roles reached ALLOW at quorum 3/3. The result is anchored and confirmed on Solana Devnet.
Scanner Consensus
- 0Block
- 0Review
- 3Allow
All three scanner roles independently returned ALLOW with valid signatures.
- allowstatic_lifecyclea5c7b61d4cdb…
- allowdependency_advisory880fb0adaa2c…
- allowartifact_integrityfff189949f9a…
Three analytical modules run on one machine under one operator. Their signatures prove internal consistency and tamper-evidence, not independent verification or decentralisation.
Key Threats
No findings were reported. Every mandatory check completed against the downloaded artifact without detecting a policy violation.
On-chain Attestation
- Network
- devnet
- Mechanism
- Solana Devnet commitment anchored via Memo
- Transaction
- 4Eak…FzVh
- Slot
- 510328701
- Commitment
- b5e2e82df503…
- Status
- Confirmed on Solana Devnet
Dependency Graph
Transitive dependencies appear once a scanner resolves this package.