NUCLEUS VERIFY

CERTIFICATE VERIFICATION
✗ CERTIFICATE NOT VALID
UNVERIFIED 90 / 100   Grade A
ⓘ Build gate failed — verdict is UNVERIFIED regardless of score
VERIFIED — passed all critical gates PARTIAL — minor issues found UNVERIFIED — could not be certified
Repository expressjs/express.git
Scanned At 2026-03-14 22:58 UTC
Issued By Nucleus Verify v1.1.1
Issuer Alter Menta Technologies Ltd
Gate Results
✓
Structure
Source tree conforms to language conventions
✓
Determinism
Build output is reproducible across environments
✓
Contract
Public API contracts are internally consistent
✗
Build
Project compiles / installs without errors
✓
Structural Integrity
No circular dependencies or dead code detected
—
External Scanners
Semgrep, Bandit, Gitleaks, OSV-Scanner report no errors
—
Sandboxed Execution
Code compiles and tests pass in bubblewrap sandbox
Security Scan
0
Critical
1
High
1
Medium
37
Info
Cryptographic Proof
Proof Pack Hash (SHA-256)
6e1d35a3951a873a6ddad3b7ed6a159844a2b65fd34a0c1287f2d4e9513dc433
Deterministic Hash (SHA-256)
0f439565165e639cbaa2d6accd2f033157329aa2d492c96050d6459407fcdd27
Specification Hash (SHA-256)
e8761f647aa9bacecd5e7fa6b20dc4c14885ab66a796f78b24bccb33324fccac
Artifact Tree Hash (SHA-256)
d3e01b08e5fb66b82d69ed9e55239887b4eabe7527a82806c4f211ec84f89afd
Not Verified Scope
  • semantic correctness of business logic
  • runtime behavior under production load
  • dynamic security testing (fuzzing, DAST, penetration testing)
  • runtime performance benchmarking
  • concurrency correctness validation
  • data integrity under concurrent writes
EXAMPLE CERTIFICATE — This is a demonstration of a real Nucleus Verify certificate. Verify your own repository →
Share this certificate
Anyone with this URL can independently verify this certificate without an account.
This certificate was issued by Nucleus Verify and is cryptographically anchored to the repository state at time of verification. Independent verification confirms the proof hashes match the original scan record.