{
  "executed_at": "2026-10-25T22:00:16.917792+00:00",
  "package": "ip",
  "original_version": "2.0.1",
  "repair_version": "2.0.2-revival.10",
  "advisory": "GHSA-2p57-rm9w-gvfp",
  "scope": "Executed local package adoption. Not a new Duo repair or live scanner result.",
  "arms": [
    {
      "id": "vulnerable",
      "exit": 1,
      "source": "real installed ip2.0.1",
      "security_pass": false,
      "legacy_pass": true,
      "gate": "hold",
      "trace": "vulnerable.tap",
      "test_sha256": "ed1493c345b07ea3123b4741096a28553759cf40fbb9c5fc451b52e86f159fd5"
    },
    {
      "id": "repaired",
      "exit": 0,
      "source": "real GitLab-registry revival-ip2.0.2-revival.10",
      "security_pass": true,
      "legacy_pass": true,
      "gate": "adopt",
      "trace": "repaired.tap",
      "test_sha256": "ed1493c345b07ea3123b4741096a28553759cf40fbb9c5fc451b52e86f159fd5"
    },
    {
      "id": "breaks-legacy",
      "exit": 1,
      "source": "deliberately overbroad local patch of real ip2.0.1; negative control",
      "security_pass": true,
      "legacy_pass": false,
      "gate": "hold",
      "trace": "breaks-legacy.tap",
      "test_sha256": "ed1493c345b07ea3123b4741096a28553759cf40fbb9c5fc451b52e86f159fd5"
    }
  ],
  "unaffected": {
    "package": "is-number",
    "version": "7.0.0",
    "source": "live api.osv.dev/v1/query",
    "vulnerability_count": 0,
    "gate": "no repair"
  },
  "fresh_chain": {
    "branch": "night/fresh-ip-20261025",
    "sha": "79ef68d9b803023069382ceb57d1633b69b8c92c",
    "pipeline": "https://gitlab.com/morklabs-group/example-shop/-/pipelines/2987223655",
    "scanner": "NOT RUN: pipeline jobs failed while waiting for matching runner",
    "duo": "not run",
    "last_observed_at": "2026-10-25T23:50:04.670417+00:00",
    "failure_reason": "stuck_pending_no_matching_runners",
    "resource_guard": "Existing runner stopped at free swap312MB below500MB; no bypass"
  }
}