{
  "schema": 1,
  "pinnedOn": "2026-10-19",
  "package": {
    "name": "@mediapipe/tasks-vision",
    "version": "0.10.32",
    "tarball": "https://registry.npmjs.org/@mediapipe/tasks-vision/-/tasks-vision-0.10.32.tgz",
    "integrity": "sha512-3tiAZnmKloYnRXYoO3dKltTUGnqeCwzC4lV03uY0vCsE+aveJTyEVQyZHOlQGQNsjK+gRHzkf9q08C99Qm2K0Q==",
    "integritySource": "https://registry.npmjs.org/@mediapipe%2ftasks-vision/0.10.32",
    "sourceCommit": "8317ba78778738ba90a521e7e4580a2ba0129c81",
    "license": "Apache-2.0",
    "licenseSource": "https://raw.githubusercontent.com/google-ai-edge/mediapipe/8317ba78778738ba90a521e7e4580a2ba0129c81/LICENSE",
    "notice": "The official npm tarball has no LICENSE or NOTICE file. The complete source-repository LICENSE from the matching release tag is copied unchanged, including its supplementary notice. Upstream README and package metadata are also retained unchanged."
  },
  "model": {
    "name": "MediaPipe Pose Landmarker Lite, float16, revision 1",
    "source": "https://storage.googleapis.com/mediapipe-models/pose_landmarker/pose_landmarker_lite/float16/1/pose_landmarker_lite.task",
    "license": "Apache-2.0",
    "licenseEvidence": {
      "source": "https://storage.googleapis.com/mediapipe-assets/Model%20Card%20BlazePose%20GHUM%203D.pdf",
      "page": 2,
      "statement": "The official BlazePose GHUM 3D model card identifies the Lite/Full/Heavy models as Apache License, Version 2.0."
    },
    "guide": "https://developers.google.com/edge/mediapipe/solutions/vision/pose_landmarker/index#models",
    "limitation": "Pose estimation is approximate. Lighting, visibility, overlap, framing, device performance and pose affect tracking. The historical 2021 model card describes single-person usage; current task configuration exposes numPoses, so multi-person gameplay requires actual validation and must not imply identity recognition."
  },
  "files": [
    {
      "path": "/tools/hockey/vendor/mediapipe/vision_bundle.mjs",
      "bytes": 137160,
      "sha256": "de83c48ff329717a27aeb528d5ef5f47f077c628a5302dc483aca5b513e7464b",
      "source": "https://registry.npmjs.org/@mediapipe/tasks-vision/-/tasks-vision-0.10.32.tgz",
      "archivePath": "package/vision_bundle.mjs",
      "modification": "None; upstream file copied byte-for-byte."
    },
    {
      "path": "/tools/hockey/vendor/mediapipe/vision_bundle.mjs.map",
      "bytes": 345093,
      "sha256": "76467fabff9877bd074b6d2bfc081fa544f58057bfea656300080cada59ede07",
      "source": "https://registry.npmjs.org/@mediapipe/tasks-vision/-/tasks-vision-0.10.32.tgz",
      "archivePath": "package/vision_bundle.mjs.map",
      "modification": "None; upstream file copied byte-for-byte."
    },
    {
      "path": "/tools/hockey/vendor/mediapipe/wasm/vision_wasm_internal.js",
      "bytes": 204816,
      "sha256": "6f6b86509cf9e163ea1cfec7edc8cf53732699c04781e4c21c557c1ba402310e",
      "source": "https://registry.npmjs.org/@mediapipe/tasks-vision/-/tasks-vision-0.10.32.tgz",
      "archivePath": "package/wasm/vision_wasm_internal.js",
      "modification": "None; upstream file copied byte-for-byte."
    },
    {
      "path": "/tools/hockey/vendor/mediapipe/wasm/vision_wasm_internal.wasm",
      "bytes": 11453626,
      "sha256": "cb3ec20026a9aecc2a81a93c25630ceb5389297ddb7a5f0bd61dd09cde606b9b",
      "source": "https://registry.npmjs.org/@mediapipe/tasks-vision/-/tasks-vision-0.10.32.tgz",
      "archivePath": "package/wasm/vision_wasm_internal.wasm",
      "modification": "None; upstream file copied byte-for-byte."
    },
    {
      "path": "/tools/hockey/vendor/mediapipe/wasm/vision_wasm_nosimd_internal.js",
      "bytes": 204669,
      "sha256": "9f8fc960e363f0fb2f42f7937b97ae9cf9a5630490f71031fa90caa9bb121938",
      "source": "https://registry.npmjs.org/@mediapipe/tasks-vision/-/tasks-vision-0.10.32.tgz",
      "archivePath": "package/wasm/vision_wasm_nosimd_internal.js",
      "modification": "None; upstream file copied byte-for-byte."
    },
    {
      "path": "/tools/hockey/vendor/mediapipe/wasm/vision_wasm_nosimd_internal.wasm",
      "bytes": 10647962,
      "sha256": "924274fcd5ac8985f6570a8573e7971b7bd2d580ba1b8f3beb0ba8f95db6347c",
      "source": "https://registry.npmjs.org/@mediapipe/tasks-vision/-/tasks-vision-0.10.32.tgz",
      "archivePath": "package/wasm/vision_wasm_nosimd_internal.wasm",
      "modification": "None; upstream file copied byte-for-byte."
    },
    {
      "path": "/tools/hockey/vendor/mediapipe/package.json",
      "bytes": 592,
      "sha256": "7e2b35c27840238235ae47abad63b5875fb1f8bf013ff4101a3595acea6f8682",
      "source": "https://registry.npmjs.org/@mediapipe/tasks-vision/-/tasks-vision-0.10.32.tgz",
      "archivePath": "package/package.json",
      "modification": "None; upstream file copied byte-for-byte."
    },
    {
      "path": "/tools/hockey/vendor/mediapipe/UPSTREAM-README.md",
      "bytes": 8403,
      "sha256": "aadce68d35bfc0dc75fd191bbf9e6285816e907eb43a6301b43bd9a29768f7c5",
      "source": "https://registry.npmjs.org/@mediapipe/tasks-vision/-/tasks-vision-0.10.32.tgz",
      "archivePath": "package/README.md",
      "modification": "None; upstream file copied byte-for-byte."
    },
    {
      "path": "/tools/hockey/vendor/mediapipe/LICENSE",
      "bytes": 12331,
      "sha256": "8707eef0533987efc5b155d64761eeb6e20793f50b9bd1a68dad1cf4719d0ed8",
      "source": "https://raw.githubusercontent.com/google-ai-edge/mediapipe/8317ba78778738ba90a521e7e4580a2ba0129c81/LICENSE",
      "modification": "None; upstream file copied byte-for-byte."
    },
    {
      "path": "/tools/hockey/models/pose_landmarker_lite.task",
      "bytes": 5777746,
      "sha256": "59929e1d1ee95287735ddd833b19cf4ac46d29bc7afddbbf6753c459690d574a",
      "source": "https://storage.googleapis.com/mediapipe-models/pose_landmarker/pose_landmarker_lite/float16/1/pose_landmarker_lite.task",
      "modification": "None; upstream file copied byte-for-byte."
    }
  ],
  "runtimeNetworkAudit": {
    "checked": [
      "vendor/mediapipe/vision_bundle.mjs",
      "vendor/mediapipe/wasm/vision_wasm_internal.js",
      "vendor/mediapipe/wasm/vision_wasm_nosimd_internal.js"
    ],
    "result": "No HTTP endpoints, sendBeacon, WebSocket, telemetry, or analytics markers in shipped runtime JavaScript.",
    "allowed": "Upstream uses fetch/importScripts for caller-supplied model and WASM locations; WASM loader also implements GET XMLHttpRequest for worker resource loading.",
    "localMetrics": "Emscripten glue includes WEBGL_SHADER_CALC_METRICS for local GPU query timing. This is not an endpoint or upload mechanism; no network metrics endpoint is embedded in the pinned JavaScript.",
    "scope": "Static audit of pinned JavaScript only; application must supply same-origin asset paths and enforce its own network/privacy policy. Not a proof concerning arbitrary future upstream versions."
  },
  "downloadStrategy": "The game should load the model and selected WASM variant only after user action; large ML assets are not appropriate for eager shell precaching."
}