the readme says the 40 checks split into "32 need nothing but the browser (--offline), 8 compare the JS story against what the wire actually carried", and then the embed section suggests scoring your own site's samples with:
const verdict = computeVerdict(sample, { ...emptyServerData(), ip, ipTimezone });from a plain express handler i have ip and maybe ipTimezone, but nothing about ja3/tls version/http2/asn, so 7 of those 8 wire checks have no input. what does computeVerdict do with them — skip them and renormalise out of 100, or leave them in the denominator so every visitor i score is capped below what the same browser gets from npx liarjs?
asking because the readme also claims "a score there and a score in your pipeline mean the same thing", and if the missing-server-data path just silently drops points then a 74 from my site and a 74 from the cli aren't the same number. also unclear whether emptyServerData() is the same code path as --offline, or whether the offline flag additionally suppresses the header line (Unverified · driver unchecked). packages/checks/README doesn't cover it and verdict.ts isn't documented for this case.
the readme says the 40 checks split into "32 need nothing but the browser (
--offline), 8 compare the JS story against what the wire actually carried", and then the embed section suggests scoring your own site's samples with:from a plain express handler i have
ipand maybeipTimezone, but nothing about ja3/tls version/http2/asn, so 7 of those 8 wire checks have no input. what doescomputeVerdictdo with them — skip them and renormalise out of 100, or leave them in the denominator so every visitor i score is capped below what the same browser gets fromnpx liarjs?asking because the readme also claims "a score there and a score in your pipeline mean the same thing", and if the missing-server-data path just silently drops points then a 74 from my site and a 74 from the cli aren't the same number. also unclear whether
emptyServerData()is the same code path as--offline, or whether the offline flag additionally suppresses the header line (Unverified · driver unchecked). packages/checks/README doesn't cover it and verdict.ts isn't documented for this case.