{
  "publication": "Selected fields, not complete or canonical re-importable Evidence.",
  "evidence_id": "ev_20357a34c1367569636222a57c5e2b602fc3762b5fa2fa1f3a8578241075b49a",
  "subject": {
    "name": "app.asar",
    "digest": {
      "sha256": "9f793336c679ea3214542587ca42abc77e82184327e3f7677f22d47d8ae23506"
    },
    "local_path": "[Joplin resources]\\app.asar",
    "format": "asar",
    "architecture": null
  },
  "provider": {
    "id": "rea-javascript-application",
    "name": "REA JavaScript application analyzer",
    "version": "1"
  },
  "parameters": {
    "format": "auto",
    "integrity_policy": "fail",
    "source_paths": [
      "InteropServiceHelper.js",
      "commands/exportNotes.js",
      "commands/exportFolders.js"
    ],
    "max_heap_mb": 2048
  },
  "source_selection": {
    "requested_paths": [
      "InteropServiceHelper.js",
      "commands/exportNotes.js",
      "commands/exportFolders.js"
    ],
    "unselected_files": 5377
  },
  "statistics": {
    "relevant_files": 5380,
    "nested_asar_containers": 0,
    "text_bytes_read": 15498,
    "invalid_utf8_files": 0,
    "parsed_javascript_files": 3,
    "skipped_javascript_files": 0,
    "visited_ast_nodes": 1496,
    "findings": 49,
    "modules": 0,
    "parse_failures": 0
  },
  "integrity_contradictions": [],
  "functions": [
    {
      "kind": "function",
      "identity": {
        "artifact_sha256": "25092dc98681bcf2bba0f2f039edf0f53a4d96b9b8b5792572ca439f847de9c5",
        "module_path": "InteropServiceHelper.js",
        "source_range": {
          "start": {
            "line": 196,
            "column": 4
          },
          "end": {
            "line": 241,
            "column": 5
          }
        },
        "role_key": "callable:callable:method:10634:12822"
      },
      "function_node_id": null,
      "application_node_ids": [],
      "label": "export",
      "properties": {
        "name": "export"
      },
      "evidence": {
        "context_id": "jsrg_evidence_2a2adb88aef4443ec610574087db26dbf5ea9ee0ac2e56751c03ae29fe645e72",
        "location": {
          "available": true,
          "value": {
            "kind": "source-range",
            "source": "InteropServiceHelper.js",
            "start": {
              "line": 196,
              "column": 4
            },
            "end": {
              "line": 241,
              "column": 5
            }
          }
        }
      },
      "node_id": "jsrg_node_bd9d02a3ad12cf34c5a66c2357a828172e7a006369388e59208baef0bfc442e0"
    }
  ],
  "semantic_coverage": {
    "status": "partial",
    "truncated": false,
    "omitted_nodes": null,
    "omitted_relations": null,
    "limits": []
  },
  "limitations": [
    "Boundary extraction covers unshadowed JSON/global coercions plus parse and validation method candidates.",
    "Child-process extraction covers asynchronous node:child_process creation, literal argv/env/stdio options, exit/error listeners, and kill signals.",
    "Configuration extraction covers process.env, process.argv, node:fs reads, and direct logical defaults.",
    "Event extraction covers EventEmitter-style literal registrations, removals, and dispatch candidates; dynamic names remain unknown.",
    "Function fingerprints are static candidates; equal digests can remain ambiguous and do not prove behavioral equivalence.",
    "Local data flow does not claim control-flow-sensitive reaching definitions or arbitrary dynamic property resolution.",
    "Promise ownership covers explicit unshadowed Promise construction, static factories, aggregation, chaining, and await syntax only.",
    "Request extraction covers fetch, WebSocket, node:http/node:https construction, direct option fields, and exact local response consumers.",
    "Resource extraction covers built-in filesystem/network acquisition and exact local close/destroy/end handles.",
    "The semantic graph contains static syntax observations and conservative relationship candidates; it does not claim runtime execution.",
    "Timer extraction covers global or node:timers scheduling and exact local-handle cancellation."
  ]
}