Hardhat is a development environment to compile, deploy, test, and debug your Ethereum software.
This report summarizes scanner evidence for NomicFoundation/hardhat, a TypeScript project with 8,519 GitHub stars. SynthScan examined 345,591 lines of code across 2173 source files, recording 555 pattern matches distributed across 13 syntactic categories. The legacy adjusted pattern signal is 2.2 (Low pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.
Can maintainers explain intent, assumptions, and trade-offs? 496 finding(s).
Are imports declared and package/API names verified? 30 finding(s).
Are wrappers, guards, and repeated structures necessary? 470 finding(s).
Which changes need focused human review? 555 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 555 distinct pattern matches across 13 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | scripts/check-dependencies.ts | 129 | function validateOrRecordVersion( | CODE |
| LOW | scripts/check-dependencies.ts | 163 | function checkWorkspacePeerDependencies( | CODE |
| LOW | scripts/check-dependencies.ts | 222 | function validateSameVersionsSpecs(packages: Map<string, Package>): boolean { | CODE |
| LOW | scripts/check-dependencies.ts | 251 | function buildDependencyVersionMap( | CODE |
| LOW | scripts/validate-pull-request-docs.ts | 50 | function extractDocsUrlsFromPRBody(): string[] { | CODE |
| LOW | scripts/validate-pull-request-docs.ts | 72 | async function collectDocsUrlsFromChangesets(): Promise<string[]> { | CODE |
| LOW | scripts/validate-pull-request-changeset.ts | 25 | function hasNoChangesetNeededLabel() { | CODE |
| LOW | scripts/bump-peers.ts | 432 | function syncPeerToDevDependencies( | CODE |
| LOW | scripts/benchmark/helpers/runner.test.ts | 58 | function assertPeakCoversAllocation(run: MeasuredRun): void { | CODE |
| LOW | scripts/benchmark/helpers/runner.ts | 94 | function installTerminationCleanup(): void { | CODE |
| LOW | scripts/benchmark/helpers/runner.ts | 463 | export async function measureShellSpawnOverhead( | CODE |
| LOW | scripts/benchmark/helpers/peak-rss.ts | 70 | export function detectPeakRssAvailability(): PeakRssAvailability { | CODE |
| LOW | scripts/github-release/file-helpers.ts | 31 | export async function readChangelogsForPublishedPackages(publishSummary: { | CODE |
| LOW | scripts/github-release/file-helpers.ts | 50 | export function buildGitHubCliReleaseArgs( | CODE |
| LOW | scripts/end-to-end/helpers/directory.ts | 52 | export function resolveScenarioWorkingDir( | CODE |
| LOW | scripts/end-to-end/helpers/scenario-setup.ts | 16 | export async function ensureScenarioInitialized( | CODE |
| LOW | scripts/verdaccio/publish.ts | 688 | async function detectChangedSinceRelease(): Promise<PublishTarget[]> { | CODE |
| LOW | scripts/lib/changesets.ts | 54 | export function extractDocsUrlsFromFrontMatter(frontMatter: null | string) { | CODE |
| LOW | scripts/lib/packages.ts | 8 | export async function readAllReleasablePackages() { | CODE |
| LOW | scripts/lib/packages.ts | 26 | export async function getLatestPackageVersionFromNpm(name) { | CODE |
| LOW | packages/ignition-ui/src/utils/to-mermaid.ts | 67 | function recursivelyListModulesAndSubmodulesFor( | CODE |
| LOW | …helpers/clear-pending-transactions-from-memory-pool.ts | 5 | export async function clearPendingTransactionsFromMemoryPool( | CODE |
| LOW | …hat-ignition/test/test-helpers/use-ignition-project.ts | 82 | export function useEphemeralIgnitionProject(fixtureProjectName: string): void { | CODE |
| LOW | …hat-ignition/test/test-helpers/use-ignition-project.ts | 269 | function setupIgnitionHelperRiggedToThrow( | CODE |
| LOW | …rnal/ui/helpers/calculate-deployment-status-display.ts | 5 | export function calculateDeploymentStatusDisplay( | CODE |
| LOW | …rnal/ui/helpers/calculate-list-transactions-display.ts | 6 | export async function calculateListTransactionsDisplay( | CODE |
| LOW | …rnal/ui/helpers/calculate-list-transactions-display.ts | 54 | function transactionTypeToDisplayType(type: string): string { | CODE |
| LOW | …rnal/ui/helpers/calculate-list-transactions-display.ts | 70 | export function transactionDisplaySerializeReplacer( | CODE |
| LOW | …al/ui/helpers/calculate-deployment-complete-display.ts | 18 | export function calculateDeploymentCompleteDisplay( | CODE |
| LOW | …nternal/ui/helpers/calculate-deploying-module-panel.ts | 9 | export function calculateDeployingModulePanel(state: UiState): string { | CODE |
| LOW | packages/hardhat-ignition/src/internal/tasks/deploy.ts | 268 | async function resolveParametersFromModuleName( | CODE |
| LOW | packages/hardhat-ignition/src/internal/tasks/deploy.ts | 280 | async function resolveParametersFromFileName( | CODE |
| LOW | …ition/src/internal/hook-handlers/user-interruptions.ts | 25 | export function getUserInterruptionsHandlers(): UserInterruptionHooks { | CODE |
| LOW | …elpers/error-deployment-result-to-exception-message.ts | 18 | export function errorDeploymentResultToExceptionMessage( | CODE |
| LOW | …kages/ignition-core/test/ignition-module-serializer.ts | 666 | function assertSerializableModuleIn( | CODE |
| LOW | …kages/ignition-core/test/ignition-module-serializer.ts | 770 | function noFutureTokensInLibraries(libs: { [key: string]: any }): boolean { | CODE |
| LOW | …kages/ignition-core/test/ignition-module-serializer.ts | 776 | function hasFutureInModuleOrSubmoduleOf( | CODE |
| LOW | …kages/ignition-core/test/ignition-module-serializer.ts | 806 | function sortedKeysJsonStringifyReplacer(_key: string, value: any) { | CODE |
| LOW | packages/ignition-core/test/helpers.ts | 43 | export function setupMockArtifactResolver(artifacts?: { | CODE |
| LOW | packages/ignition-core/test/helpers.ts | 71 | export function setupMockDeploymentLoader( | CODE |
| LOW | packages/ignition-core/test/reconciliation/helpers.ts | 177 | export async function assertSuccessReconciliation( | CODE |
| LOW | packages/ignition-core/test/utils/replace-within-arg.ts | 309 | function assertEqualBeforeAndAfterResolution( | CODE |
| LOW | …/execution/nonce-management/get-nonce-sync-messages.ts | 767 | async function assertNoSyncMessageNeeded(ctx: { | CODE |
| LOW | …/execution/nonce-management/get-nonce-sync-messages.ts | 876 | function setupDeploymentStateBasedOnExampleModuleWithOneTranWith( | CODE |
| LOW | packages/ignition-core/src/verify.ts | 71 | async function convertExStateToVerifyInfo( | CODE |
| LOW | packages/ignition-core/src/type-guards.ts | 134 | export function isAddressResolvableFuture( | CODE |
| LOW | packages/ignition-core/src/type-guards.ts | 174 | export function isEncodeFunctionCallFuture( | CODE |
| LOW | packages/ignition-core/src/type-guards.ts | 187 | export function isReadEventArgumentFuture( | CODE |
| LOW | packages/ignition-core/src/type-guards.ts | 198 | export function isNamedContractDeploymentFuture( | CODE |
| LOW | packages/ignition-core/src/type-guards.ts | 209 | export function isArtifactContractDeploymentFuture( | CODE |
| LOW | packages/ignition-core/src/type-guards.ts | 220 | export function isNamedLibraryDeploymentFuture( | CODE |
| LOW | packages/ignition-core/src/type-guards.ts | 231 | export function isArtifactLibraryDeploymentFuture( | CODE |
| LOW | packages/ignition-core/src/type-guards.ts | 253 | export function isArtifactContractAtFuture( | CODE |
| LOW | packages/ignition-core/src/type-guards.ts | 296 | export function isFutureThatSubmitsOnchainTransaction( | CODE |
| LOW | packages/ignition-core/src/type-guards.ts | 366 | export function isModuleParameterRuntimeValue( | CODE |
| LOW | packages/ignition-core/src/internal/formatters.ts | 50 | export function formatFailedEvmExecutionResult( | CODE |
| LOW | …-core/src/internal/journal/utils/emitExecutionEvent.ts | 206 | function convertExecutionResultToEventResult( | CODE |
| LOW | …-core/src/internal/journal/utils/emitExecutionEvent.ts | 247 | function convertStaticCallResultToExecutionEventResult( | CODE |
| LOW | …al/utils/failedEvmExecutionResultToErrorDescription.ts | 5 | export function failedEvmExecutionResultToErrorDescription( | CODE |
| LOW | …ges/ignition-core/src/internal/reconciliation/utils.ts | 37 | export function getBytecodeWithoutMetadata(bytecode: string): string { | CODE |
| 381 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH⚡ | …-plugins/network-manager/edr/utils/trace-formatters.ts | 37 | it("should return None for verbosity 0", () => { | CODE |
| HIGH⚡ | …-plugins/network-manager/edr/utils/trace-formatters.ts | 41 | it("should return None for verbosity 1", () => { | CODE |
| HIGH⚡ | …-plugins/network-manager/edr/utils/trace-formatters.ts | 45 | it("should return None for verbosity 2", () => { | CODE |
| HIGH | packages/hardhat/src/internal/cli/main.ts | 250 | print(globalHelp); | CODE |
| HIGH | packages/hardhat/src/internal/cli/main.ts | 277 | print(taskHelp); | CODE |
| HIGH | packages/hardhat/src/internal/cli/main.ts | 392 | print(`Hardhat only supports ESM projects. | CODE |
| HIGH | packages/hardhat/src/internal/cli/hhu.ts | 97 | print(globalHelp); | CODE |
| HIGH | packages/hardhat/src/internal/cli/hhu.ts | 126 | print(taskHelp); | CODE |
| HIGH | packages/hardhat/src/internal/cli/hhu.ts | 232 | print(await getHardhatVersion()); | CODE |
| HIGH | packages/hardhat/src/internal/cli/version.ts | 6 | print(await getHardhatVersion()); | CODE |
| HIGH | packages/hardhat/src/internal/cli/init/init.ts | 391 | print(`Available templates:\n${lines}`); | CODE |
| HIGH⚡ | …rdhat/src/internal/cli/error-handling/error-handler.ts | 134 | print(formattedErrorMessage); | CODE |
| HIGH⚡ | …rdhat/src/internal/cli/error-handling/error-handler.ts | 136 | print(""); | CODE |
| HIGH⚡ | …rdhat/src/internal/cli/error-handling/error-handler.ts | 139 | print(error); | CODE |
| HIGH⚡ | …rdhat/src/internal/cli/error-handling/error-handler.ts | 141 | print(""); | CODE |
| HIGH⚡ | …rdhat/src/internal/cli/error-handling/error-handler.ts | 142 | print(postErrorStackTraceMessage); | CODE |
| HIGH⚡ | …rdhat/src/internal/cli/error-handling/error-handler.ts | 145 | print(showMoreInfoMessage); | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | .claude/skills/benchmark-run-sizing/scripts/analyze.py | 25 | # -------------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | packages/hardhat-utils/src/format.ts | 65 | * // ╔═══════════════════╗ | COMMENT |
| MEDIUM⚡ | packages/hardhat-utils/src/format.ts | 67 | * // ╚═══════════════════╝ | COMMENT |
| MEDIUM⚡ | packages/hardhat-utils/src/format.ts | 68 | * // ╔═══════════════════╗ | COMMENT |
| MEDIUM⚡ | packages/hardhat-utils/src/format.ts | 70 | * // ╟───────┬─────┬─────╢ | COMMENT |
| MEDIUM⚡ | packages/hardhat-utils/src/format.ts | 72 | * // ╟───────┼─────┼─────╢ | COMMENT |
| MEDIUM⚡ | packages/hardhat-utils/src/format.ts | 74 | * // ╟───────┼─────┼─────╢ | COMMENT |
| MEDIUM⚡ | packages/hardhat-utils/src/format.ts | 76 | * // ╚═══════╧═════╧═════╝ | COMMENT |
| MEDIUM⚡ | packages/hardhat-utils/src/format.ts | 77 | * // ╔═══════════════════╗ | COMMENT |
| MEDIUM⚡ | packages/hardhat-utils/src/format.ts | 79 | * // ╟───────┬───────────╢ | COMMENT |
| MEDIUM⚡ | packages/hardhat-utils/src/format.ts | 81 | * // ╟───────┼───────────╢ | COMMENT |
| MEDIUM⚡ | packages/hardhat-utils/src/format.ts | 83 | * // ╚═══════╧═══════════╝ | COMMENT |
| MEDIUM | packages/example-project/scripts/demo-trace-output.ts | 23 | // ═══════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | packages/example-project/scripts/demo-trace-output.ts | 25 | // ═══════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | packages/example-project/scripts/demo-trace-output.ts | 41 | // ═══════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | packages/example-project/scripts/demo-trace-output.ts | 43 | // ═══════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM⚡ | packages/example-project/scripts/demo-trace-output.ts | 72 | // ═══════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM⚡ | packages/example-project/scripts/demo-trace-output.ts | 75 | // ═══════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM⚡ | packages/example-project/scripts/demo-trace-output.ts | 83 | // ═══════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM⚡ | packages/example-project/scripts/demo-trace-output.ts | 86 | // ═══════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | packages/example-project/scripts/demo-trace-output.ts | 100 | // ═══════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | packages/example-project/scripts/demo-trace-output.ts | 103 | // ═══════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | packages/example-project/scripts/demo-trace-output.ts | 114 | // ═══════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | packages/example-project/scripts/demo-trace-output.ts | 116 | // ═══════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | packages/example-project/scripts/demo-trace-output.ts | 151 | // ═══════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | packages/example-project/scripts/demo-trace-output.ts | 154 | // ═══════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | packages/example-project/scripts/demo-trace-output.ts | 168 | // ═══════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | packages/example-project/scripts/demo-trace-output.ts | 170 | // ═══════════════════════════════════════════════════════════════════════ | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | end-to-end/uniswap-x/preinstall-foundry.sh | 1 | # CaliburEntry.sol has `pragma solidity 0.8.29;` (exact) and requires `via_ir`, | COMMENT |
| LOW | end-to-end/aave-v4/preinstall.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | end-to-end/lidofinance-dual-governance/preinstall.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | scripts/github-release/create-releases.ts | 1 | // | COMMENT |
| LOW | scripts/end-to-end/helpers/install.ts | 81 | // dir ($RUNNER_TEMP/hardhat-e2e-clones) lives right under it. Yarn | COMMENT |
| LOW | …/execution/nonce-management/get-nonce-sync-messages.ts | 141 | // If at least one transaction for the future is still in the mempool, | COMMENT |
| LOW | …l/execution/nonce-management/json-rpc-nonce-manager.ts | 61 | ? this._maxUsedNonce[sender] + 1 | COMMENT |
| LOW | …hers/test/matchers/reverted/revertedWithCustomError.ts | 401 | COMMENT | |
| LOW | …/src/internal/hook-handlers/configuration-variables.ts | 41 | let value = await getValue(context, variable, true); | COMMENT |
| LOW | packages/hardhat-ledger/src/internal/create-tx.ts | 81 | // "maxFeePerGas should be defined", | COMMENT |
| LOW | packages/hardhat/test/internal/core/hook-manager.ts | 1261 | "config", | COMMENT |
| LOW | packages/hardhat/test/internal/core/hook-manager.ts | 1281 | // point has been reached before it triggers the race. | COMMENT |
| LOW | packages/hardhat/test/internal/cli/init/init.ts | 61 | }); | COMMENT |
| LOW | packages/hardhat/skills/hardhat/SKILL.md | 121 | // | COMMENT |
| LOW | packages/hardhat/src/types/hre.ts | 21 | // Hardhat's core: | COMMENT |
| LOW | …es/hardhat/src/types/builtin-plugin-type-extensions.ts | 1 | // This is an internal file that needs to be imported by every top-level type | COMMENT |
| LOW | packages/hardhat/src/types/solidity/errors.ts | 361 | /** | COMMENT |
| LOW | packages/hardhat/src/types/solidity/errors.ts | 381 | // This never includes a leading "./". | COMMENT |
| LOW | …nal/deprecated-module-imported-from-hardhat2-plugin.ts | 1 | // This is an empty module that is used to exported it with a subpath that's | COMMENT |
| LOW | packages/hardhat/src/internal/core/hook-manager.ts | 481 | hookCategory !== null && typeof hookCategory === "object", | COMMENT |
| LOW | packages/hardhat/src/internal/core/hook-manager.ts | 501 | // `undefined`, installs a fresh inner map, and rebuilds from the | COMMENT |
| LOW | …iltin-plugins/solidity/build-system/compilation-job.ts | 221 | ]), | COMMENT |
| LOW | …n-plugins/solidity/build-system/compiler/downloader.ts | 121 | } | COMMENT |
| LOW | …nal/builtin-plugins/network-manager/provider-errors.ts | 1 | import type { ProviderRpcError } from "../../../types/providers.js"; | COMMENT |
| LOW | …internal/builtin-plugins/solidity-test/eip712/index.ts | 81 | // fresh in each compilation, so the same numeric id can mean | COMMENT |
| LOW | packages/hardhat-verify/src/internal/artifacts.ts | 21 | // wrap them in a try-catch block and return undefined if an error occurs | COMMENT |
| LOW | packages/hardhat-verify/src/internal/etherscan.ts | 581 | // Other documented failures are deliberately excluded here: bytecode and | COMMENT |
| LOW | …er/integration-tests/fixture-tests/errors-test/test.ts | 21 | // throw error; | COMMENT |
| LOW | packages/hardhat-node-test-runner/test/index.ts | 81 | // Guard against the filter matching *nothing*: if `keep_alpha` were also | COMMENT |
| LOW | packages/hardhat-mocha/src/internal/merge-grep.ts | 141 | // (with a clear error) rather than silently building a wrong regex: | COMMENT |
| LOW | packages/hardhat-mocha/src/internal/merge-grep.ts | 301 | // don't affect a fresh `.test()`, so they can be dropped safely. | COMMENT |
| LOW | .github/workflows/regression-benchmark.yml | 21 | required: false | COMMENT |
| LOW | .github/workflows/regression-benchmark.yml | 121 | run: echo "E2E_CLONE_DIR=${RUNNER_TEMP:?}/hardhat-e2e-clones" >> "$GITHUB_ENV" | COMMENT |
| LOW | .github/workflows/regression-benchmark.yml | 161 | echo "HH_PRE_VER=$(node -p "require('./packages/hardhat/package.json').version")" >> "$GITHUB_ENV" | COMMENT |
| LOW | .github/workflows/regression-benchmark.yml | 221 | # apart from a failed write. This invocation only reads, so it cannot | COMMENT |
| LOW | .github/workflows/regression-benchmark.yml | 281 | # Pushing to another repository needs the cross-repo PAT. | COMMENT |
| LOW | .github/scripts/validate-local-hardhat-install.ts | 1 | // Validate that the E2E benchmark scenarios installed the hardhat build | COMMENT |
| LOW | .github/scripts/resolve-regression-trigger.ts | 1 | // Resolve the ref, authorize, and gate the regression benchmark trigger. | COMMENT |
| LOW | e2e/fixture-projects/vars/test.sh | 21 | # random key to be sure that it does not exist if this test is ran locally | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL | packages/hardhat-mocha/src/task-action.ts | 131 | hre.config.test.mocha.require.push(unhandledRejectionHook.href); | CODE |
| CRITICAL | packages/hardhat-mocha/src/task-action.ts | 142 | hre.config.test.mocha.require.push(testWorkerDone.href); | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | scripts/validate-merge-group.ts | 17 | // NOTE: This function is currently unused but it could be useful to preserve | COMMENT |
| LOW | …dhat-slang-solx/src/internal/hook-handlers/solidity.ts | 24 | // NOTE: This function is exported for testing purposes | COMMENT |
| LOW | …s/hardhat/src/internal/builtin-plugins/node/helpers.ts | 138 | // NOTE: This function is exported for testing purposes only | COMMENT |
| LOW | packages/hardhat/src/internal/cli/init/init.ts | 236 | // NOTE: This function is exported for testing purposes | COMMENT |
| LOW | packages/hardhat/src/internal/cli/init/init.ts | 572 | // NOTE: This function is exported for testing purposes | COMMENT |
| LOW | packages/hardhat/src/internal/cli/init/init.ts | 608 | // NOTE: This function is exported for testing purposes | COMMENT |
| LOW | packages/hardhat/src/internal/cli/init/init.ts | 950 | // NOTE: This function is exported for testing purposes only. | COMMENT |
| LOW | …s/hardhat-slang/src/internal/hook-handlers/solidity.ts | 27 | // NOTE: This function is exported for testing purposes | COMMENT |
| LOW | …s/hardhat-slang/src/internal/hook-handlers/solidity.ts | 32 | // NOTE: This function is exported for testing purposes | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …ture-processor/helpers/build-initialize-message-for.ts | 294 | "fake-data", | CODE |
| LOW | …ture-processor/helpers/build-initialize-message-for.ts | 1083 | data: "fake-data", | CODE |
| LOW | …/execution/reducers/running-a-named-contract-deploy.ts | 63 | data: "fake-data", | CODE |
| LOW | …/execution/reducers/running-a-named-contract-deploy.ts | 76 | data: "fake-data", | CODE |
| LOW | …t/execution/reducers/running-a-named-library-deploy.ts | 56 | data: "fake-data", | CODE |
| LOW | …tion-core/test/execution/reducers/running-send-data.ts | 46 | data: "fake-data", | CODE |
| LOW | …tion-core/test/execution/reducers/running-send-data.ts | 58 | data: "fake-data", | CODE |
| LOW | …gnition-core/test/execution/reducers/running-a-call.ts | 61 | data: "fake-data", | CODE |
| LOW | …gnition-core/test/execution/reducers/running-a-call.ts | 74 | data: "fake-data", | CODE |
| LOW | …-core/test/execution/reducers/running-a-static-call.ts | 55 | data: "fake-data", | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | packages/hardhat-utils/CHANGELOG.md | 107 | - [#8262](https://github.com/NomicFoundation/hardhat/pull/8262) [`d3ba170`](https://github.com/NomicFoundation/hardhat/c | CODE |
| MEDIUM | packages/hardhat-utils/CHANGELOG.md | 107 | - [#8262](https://github.com/NomicFoundation/hardhat/pull/8262) [`d3ba170`](https://github.com/NomicFoundation/hardhat/c | CODE |
| MEDIUM | packages/hardhat/CHANGELOG.md | 427 | - [#8262](https://github.com/NomicFoundation/hardhat/pull/8262) [`d3ba170`](https://github.com/NomicFoundation/hardhat/c | CODE |
| MEDIUM | packages/hardhat/CHANGELOG.md | 427 | - [#8262](https://github.com/NomicFoundation/hardhat/pull/8262) [`d3ba170`](https://github.com/NomicFoundation/hardhat/c | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …ckages/hardhat-verify/test/tasks/verify/task-action.ts | 35 | apiKey: "your-api-key", | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …dhat-node-test-reporter/scripts/regenerate-fixtures.sh | 35 | # we should either add a more robust way of detecting such tests or version | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …/src/internal/builtin-plugins/node/json-rpc/handler.ts | 53 | // the following code block could be safely removed. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …dhat-node-test-reporter/scripts/regenerate-fixtures.sh | 10 | # Check if aha and wkhtmltoimage are installed | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | .claude/skills/benchmark-run-sizing/scripts/analyze.py | 76 | except Exception: | CODE |