Export Package Preflight

Offline checks with clear limits

Checks bounded paths, required files, references and optional actual bytes, signatures and SHA-256 hashes. Metadata-only input never proves byte integrity. Heuristic product-text checks cannot guarantee secret safety, rendering, image rights or valid ZIP extraction.

No network, model calls, paid services, scheduling or automatic publication. Every result keeps release_approved false for the content or package being checked.

Validation

The two-module suite passed 174 focused tests and fresh isolated n8n 2.41.4 valid, negative and restored runs. Canonical fictional inputs matched after save and reload. Version 0.1.0 changes the top-level workflow name only; executable nodes and demonstration inputs match the tested candidate.

Review settings after import

The tested n8n imports kept default Etc/UTC and Default Save execution settings instead of the source settings. Review retention and timezone before private data. A runtime export-download attempt timed out; no full settings or saved-Code export roundtrip audit is claimed.

Separate human gates

Publication, image rights, visual quality, workflow import safety and security remain separate reviews. Structural checks and matching hashes never grant permission to publish or share supplied content. The MIT grant covers this module’s code and documentation; third-party assets and the premium commercial licence remain separate.