⛅️ Home to Wrangler, the CLI for Cloudflare Workers®
This report summarizes scanner evidence for cloudflare/workers-sdk, a TypeScript project with 4,690 GitHub stars. SynthScan examined 866,275 lines of code across 4091 source files, recording 1421 pattern matches distributed across 13 syntactic categories. The legacy adjusted pattern signal is 2.0 (Low pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.
Can maintainers explain intent, assumptions, and trade-offs? 1248 finding(s).
Are imports declared and package/API names verified? 73 finding(s).
Are wrappers, guards, and repeated structures necessary? 1162 finding(s).
Which changes need focused human review? 1421 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 1421 distinct pattern matches across 13 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tools/e2e/e2eCleanup.ts | 178 | async function deleteAgentMemoryNamespaces() { | CODE |
| LOW | tools/e2e/e2eCleanup.ts | 193 | async function deleteContainerApplications() { | CODE |
| LOW | tools/deployments/changeset-version.ts | 140 | export function getNextNpmPrereleaseVersion({ | CODE |
| LOW | tools/deployments/changeset-version.ts | 236 | export function getNextMiniflarePrereleaseVersion({ | CODE |
| LOW | tools/deployments/changeset-version.ts | 251 | function getPackagesBeforeVersioning(): PreviousPackage[] { | CODE |
| LOW | tools/deployments/update-default-compat-date.ts | 58 | export function getCompatDateForWorkerdVersion(version: string): string { | CODE |
| LOW | tools/deployments/update-default-compat-date.ts | 76 | export function getPinnedWorkerdCompatDate(): string { | CODE |
| LOW | tools/deployments/update-default-compat-date.ts | 105 | export function getInstalledWorkerdVersion(): string { | CODE |
| LOW | tools/deployments/validate-package-dependencies.ts | 105 | export function getNonWorkspaceDependencies( | CODE |
| LOW | tools/deployments/validate-package-dependencies.ts | 167 | export function validatePackageDependencies( | CODE |
| LOW | tools/deployments/validate-package-dependencies.ts | 243 | export function getPackageNameFromSpecifier(spec: string): string { | CODE |
| LOW | tools/deployments/validate-package-dependencies.ts | 400 | export async function scanDistForExternalImports( | CODE |
| LOW | tools/deployments/validate-private-packages.ts | 62 | async function checkPrivatePackageScopes(): Promise<string[]> { | CODE |
| LOW | tools/deployments/deploy-non-npm-packages.ts | 83 | export function findDeployablePackageNames(): Set<string> { | CODE |
| LOW | packages/vitest-plugin/types/cloudflare-test.d.ts | 157 | export function createScheduledController( | CODE |
| LOW | packages/vitest-plugin/types/cloudflare-test.d.ts | 312 | export function introspectWorkflowInstance( | CODE |
| LOW | packages/vitest-plugin/test/helpers.ts | 15 | function checkCloudflareTestInjectTypes( | CODE |
| LOW | packages/vitest-plugin/src/worker/wait-until.ts | 91 | export function registerHandlerAndGlobalWaitUntil(promise: Promise<unknown>) { | CODE |
| LOW | packages/vitest-plugin/src/worker/workflows.ts | 39 | export async function introspectWorkflowInstance( | CODE |
| LOW | packages/vitest-plugin/src/worker/entrypoints.ts | 41 | function assertRPCPropertyAccessible( | CODE |
| LOW | packages/vitest-plugin/src/worker/entrypoints.ts | 100 | function getRPCPropertyCallableThenable( | CODE |
| LOW | packages/vitest-plugin/src/worker/entrypoints.ts | 243 | async function getWorkerEntrypointExport( | CODE |
| LOW | packages/vitest-plugin/src/worker/entrypoints.ts | 269 | async function getWorkerEntrypointRPCProperty( | CODE |
| LOW | packages/vitest-plugin/src/worker/entrypoints.ts | 306 | export function createWorkerEntrypointWrapper( | CODE |
| LOW | packages/vitest-plugin/src/worker/entrypoints.ts | 399 | async function getDurableObjectRPCProperty( | CODE |
| LOW | packages/vitest-plugin/src/worker/entrypoints.ts | 426 | export function createDurableObjectWrapper( | CODE |
| LOW | packages/vitest-plugin/src/worker/entrypoints.ts | 549 | export function createWorkflowEntrypointWrapper(entrypoint: string) { | CODE |
| LOW | packages/vitest-plugin/src/worker/events.ts | 103 | export function createScheduledController( | CODE |
| LOW | packages/vitest-plugin/src/worker/index.ts | 40 | function structuredSerializableStringify(value: unknown): string { | CODE |
| LOW | packages/vitest-plugin/src/worker/index.ts | 43 | function structuredSerializableParse(value: string): unknown { | CODE |
| LOW | packages/vitest-plugin/src/worker/index.ts | 154 | function isDifferentIOContextError(e: unknown) { | CODE |
| LOW | packages/vitest-plugin/src/pool/helpers.ts | 22 | export function getRelativeProjectConfigPath(project: TestProject): string { | CODE |
| LOW | packages/vitest-plugin/src/pool/module-fallback.ts | 110 | function isWithinTypeModuleContext(filePath: string): boolean { | CODE |
| LOW | packages/vitest-plugin/src/pool/module-fallback.ts | 521 | function maybeGetForceTypeModuleContents( | CODE |
| LOW | packages/vitest-plugin/src/pool/module-fallback.ts | 564 | function loadJavaScriptOrJsonModule( | CODE |
| LOW | packages/vitest-plugin/src/pool/module-fallback.ts | 738 | export async function handleModuleFallbackRequest( | CODE |
| LOW | packages/vitest-plugin/src/pool/module-fallback.ts | 935 | function moduleUrlToResolutionTarget(specifier: string): V2ModulePath { | CODE |
| LOW | packages/vitest-plugin/src/pool/index.ts | 50 | export function structuredSerializableStringify(value: unknown): string { | CODE |
| LOW | packages/vitest-plugin/src/pool/index.ts | 70 | export function structuredSerializableParse(value: string): unknown { | CODE |
| LOW | packages/vitest-plugin/src/pool/index.ts | 129 | function isDurableObjectDesignatorToSelf( | CODE |
| LOW | packages/vitest-plugin/src/pool/index.ts | 148 | function isWorkflowDesignatorToSelf( | CODE |
| LOW | packages/vitest-plugin/src/pool/index.ts | 172 | export function getDurableObjectDesignators( | CODE |
| LOW | packages/vitest-plugin/src/pool/index.ts | 278 | function rewriteStreamingTailSelfReferences( | CODE |
| LOW | packages/vitest-plugin/src/pool/index.ts | 299 | async function buildProjectWorkerOptions( | CODE |
| LOW | packages/vitest-plugin/src/pool/index.ts | 707 | async function buildProjectMiniflareOptions( | CODE |
| LOW | packages/vitest-plugin/src/pool/index.ts | 887 | export function assertCompatibleVitestVersion(ctx: Vitest) { | CODE |
| LOW | packages/vitest-plugin/src/pool/config.ts | 158 | function normalizeMiniflareWorkerOptions(value: Record<string, unknown>): void { | CODE |
| LOW | packages/vitest-plugin/src/pool/config.ts | 253 | // function warnDeprecatedModuleRules(): void { | COMMENT |
| LOW | packages/vitest-plugin/src/pool/config.ts | 305 | export async function disposeAllRemoteProxySessions(): Promise<void> { | CODE |
| LOW | packages/devprod-status-bot/src/index.ts | 292 | function isRepositoryAdvisoryEvent( | CODE |
| LOW | packages/devprod-status-bot/src/index.ts | 347 | function isVersionPackagesPRCheckRun(message: WebhookEvent): { | CODE |
| LOW | packages/devprod-status-bot/src/index.ts | 459 | async function sendRepositoryAdvisoryAlert( | CODE |
| LOW | packages/devprod-status-bot/src/index.ts | 576 | async function sendVersionPackagesCIFailureAlert( | CODE |
| LOW | packages/devprod-status-bot/src/index.ts | 647 | async function sendUpcomingMeetingMessage(webhookUrl: string, ai: Ai) { | CODE |
| LOW | …ckages/local-explorer-ui/src/drivers/sqlite/parsers.ts | 832 | export function parseSQLiteCreateTableScript( | CODE |
| LOW | …kages/local-explorer-ui/src/drivers/sqlite/generate.ts | 197 | export function buildSQLiteSchemaDiffStatement( | CODE |
| LOW | packages/local-explorer-ui/src/utils/agent-prompt.ts | 8 | export function getLocalExplorerApiEndpoint( | CODE |
| LOW | packages/local-explorer-ui/src/utils/agent-prompt.ts | 18 | export function createLocalExplorerPrompt(apiEndpoint: string): string { | CODE |
| LOW | packages/local-explorer-ui/src/utils/observability.ts | 104 | export function isObservabilityDisabledError(error: unknown): boolean { | CODE |
| LOW | packages/local-explorer-ui/src/utils/observability.ts | 823 | function hasRunnerDispatchSignature(spans: Span[]): boolean { | CODE |
| 1002 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM⚡ | pnpm-workspace.yaml | 18 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | pnpm-workspace.yaml | 20 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | pnpm-workspace.yaml | 24 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | pnpm-workspace.yaml | 27 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | pnpm-workspace.yaml | 52 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | pnpm-workspace.yaml | 56 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | pnpm-workspace.yaml | 76 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | pnpm-workspace.yaml | 78 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | pnpm-workspace.yaml | 103 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | pnpm-workspace.yaml | 105 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | packages/miniflare/test/plugins/assets/index.spec.ts | 237 | // ─── Watch / reload behaviour ──────────────────────────────────────────────── | COMMENT |
| MEDIUM | packages/config/src/inference.ts | 15 | // ═══════════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | packages/config/src/inference.ts | 17 | // ═══════════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | packages/config/src/inference.ts | 54 | // ═══════════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | packages/config/src/inference.ts | 57 | // ═══════════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | packages/config/src/inference.ts | 206 | // ═══════════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | packages/config/src/inference.ts | 209 | // ═══════════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | packages/config/src/inference.ts | 241 | // ═══════════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | packages/config/src/inference.ts | 244 | // ═══════════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | packages/config/src/bindings.ts | 13 | // ═══════════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | packages/config/src/bindings.ts | 15 | // ═══════════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | packages/config/src/bindings.ts | 709 | // ═══════════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | packages/config/src/bindings.ts | 711 | // ═══════════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | packages/config/src/convert.ts | 213 | // ═══════════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | packages/config/src/convert.ts | 215 | // ═══════════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | packages/config/src/convert.ts | 359 | // ═══════════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | packages/config/src/convert.ts | 361 | // ═══════════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | packages/config/src/convert.ts | 877 | // ═══════════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | packages/config/src/convert.ts | 879 | // ═══════════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | packages/config/src/convert.ts | 983 | // ═══════════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | packages/config/src/convert.ts | 985 | // ═══════════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | packages/config/src/convert.ts | 1081 | // ═══════════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | packages/config/src/convert.ts | 1083 | // ═══════════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | packages/config/src/convert.ts | 1110 | // ═══════════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | packages/config/src/convert.ts | 1112 | // ═══════════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | packages/config/src/convert.ts | 1139 | // ═══════════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | packages/config/src/convert.ts | 1141 | // ═══════════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | packages/config/src/triggers.ts | 1 | // ═══════════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | packages/config/src/triggers.ts | 4 | // ═══════════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | packages/config/src/exports.ts | 1 | // ═══════════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | packages/config/src/exports.ts | 13 | // ═══════════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | packages/wrangler/src/experimental-config/load.ts | 89 | // ── Cloudflare config ─────────────────────────────────────────────── | COMMENT |
| MEDIUM | packages/wrangler/src/experimental-config/load.ts | 114 | // ── Wrangler (tooling) config ─────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | packages/wrangler/src/experimental-config/load.ts | 136 | // ── Conversion + merge ────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | packages/wrangler/src/experimental-config/load.ts | 145 | // ── Normalised types ──────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | packages/wrangler/src/experimental-config/load.ts | 151 | // ── Dependencies (union of both files) ────────────────────────────── | COMMENT |
| MEDIUM | packages/wrangler/src/__tests__/ai-search.test.ts | 18 | // ── Shared test data ────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | packages/wrangler/src/__tests__/ai-search.test.ts | 123 | // ── Help / Namespace ────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | packages/wrangler/src/__tests__/ai-search.test.ts | 185 | // ── Command tests ───────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | packages/wrangler/src/__tests__/ai-search.test.ts | 202 | // ── list ──────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | packages/wrangler/src/__tests__/ai-search.test.ts | 336 | // ── create ────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | packages/wrangler/src/__tests__/ai-search.test.ts | 1397 | // ── custom_metadata ───────────────────────────────────────────────────── | COMMENT |
| MEDIUM | packages/wrangler/src/__tests__/ai-search.test.ts | 1766 | // ── get ────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | packages/wrangler/src/__tests__/ai-search.test.ts | 1812 | // ── update ────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | packages/wrangler/src/__tests__/ai-search.test.ts | 1894 | // ── delete ────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | packages/wrangler/src/__tests__/ai-search.test.ts | 1949 | // ── stats ─────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | packages/wrangler/src/__tests__/ai-search.test.ts | 1996 | // ── search ────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | packages/wrangler/src/__tests__/ai-search.test.ts | 2227 | // ── namespace ─────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | packages/wrangler/src/__tests__/ai-search.test.ts | 2457 | // ── jobs ──────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | packages/wrangler/src/__tests__/ai-search.test.ts | 2694 | // ── MSW Mock Handlers ───────────────────────────────────────────────────────── | COMMENT |
| 40 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | vitest.shared.ts | 1 | import { defineConfig } from "vitest/config"; | COMMENT |
| LOW | pnpm-workspace.yaml | 1 | packages: | COMMENT |
| LOW | pnpm-workspace.yaml | 21 | COMMENT | |
| LOW | tools/e2e/runIndividualE2EFiles.ts | 1 | import assert from "node:assert"; | COMMENT |
| LOW | tools/e2e/runIndividualE2EFiles.ts | 21 | // ```bash | COMMENT |
| LOW | packages/vitest-plugin/types/cloudflare-test.d.ts | 761 | // Permission is hereby granted, free of charge, to any person obtaining a copy | COMMENT |
| LOW | packages/vitest-plugin/src/worker/entrypoints.ts | 201 | "webSocketClose", | COMMENT |
| LOW | packages/vitest-plugin/src/pool/module-fallback.ts | 441 | } | COMMENT |
| LOW | packages/vitest-plugin/src/pool/module-fallback.ts | 761 | assert(rawSpecifierParam !== null, "Expected specifier search param"); | COMMENT |
| LOW | packages/vitest-plugin/src/pool/module-fallback.ts | 781 | // becomes the referrer workerd sends for every import statement inside that | COMMENT |
| LOW | packages/containers-shared/src/diff.ts | 1 | // Modified code from package jsdiff (https://github.com/kpdecker/jsdiff/tree/master) | COMMENT |
| LOW | packages/containers-shared/src/diff.ts | 21 | // | COMMENT |
| LOW | packages/containers-shared/src/diff.ts | 101 | // point considering moves to lower diagonals. | COMMENT |
| LOW | packages/deploy-helpers/src/triggers/deploy.ts | 101 | ); | COMMENT |
| LOW | …oy-helpers/src/deploy/helpers/validate-worker-props.ts | 341 | ); | COMMENT |
| LOW | …elpers/src/deploy/helpers/create-worker-upload-form.ts | 761 | // The above code adds the `__STATIC_CONTENT_MANIFEST` module to the root | COMMENT |
| LOW | packages/deploy-helpers/src/preview/preview.ts | 141 | throw new UserError("Build Output was not created by a Preview build.", { | COMMENT |
| LOW | packages/deploy-helpers/src/preview/preview.ts | 821 | request.placement = | COMMENT |
| LOW | packages/miniflare/types/events.d.ts | 1 | // Types adapted from https://github.com/microsoft/TypeScript/blob/main/lib/lib.webworker.d.ts | COMMENT |
| LOW | packages/miniflare/types/webassembly.d.ts | 1 | /* eslint-disable @typescript-eslint/no-unsafe-function-type -- WebAssembly API type declarations use Function as a gene | COMMENT |
| LOW | …re/test/plugins/shared/remote-bindings-connect.spec.ts | 21 | import { singleModuleManifest, useDispose } from "../../test-shared"; | COMMENT |
| LOW | …re/test/plugins/shared/remote-bindings-connect.spec.ts | 401 | }); | COMMENT |
| LOW | packages/miniflare/scripts/filter-openapi.ts | 241 | // 9. Strip all x-* extensions from the final spec (single pass) | COMMENT |
| LOW | packages/miniflare/src/index.ts | 861 | #dispatchConnectDatagramSockets = new Set<dgram.Socket>(); | COMMENT |
| LOW | packages/miniflare/src/index.ts | 881 | // Store `#init()` `Promise`, so we can propagate initialisation errors in | COMMENT |
| LOW | packages/miniflare/src/plugins/core/proxy/fetch-sync.ts | 121 | */ | COMMENT |
| LOW | packages/miniflare/src/plugins/core/proxy/client.ts | 161 | address: number; | COMMENT |
| LOW | packages/miniflare/src/plugins/core/proxy/client.ts | 681 | #createFunction(key: string) { | COMMENT |
| LOW | …ins/core/inspector-proxy/inspector-proxy-controller.ts | 201 | // want to enable this transformation when we detect hosted DevTools has | COMMENT |
| LOW | …ins/core/inspector-proxy/inspector-proxy-controller.ts | 221 | // Upgrade: websocket | COMMENT |
| LOW | packages/miniflare/src/plugins/core/errors/sourcemap.ts | 1 | import assert from "node:assert"; | COMMENT |
| LOW | packages/miniflare/src/plugins/core/errors/index.ts | 321 | // Hand the revived, source-mapped error to the embedder — the one place | COMMENT |
| LOW | …ages/miniflare/src/plugins/shared/unsafe-unique-key.ts | 1 | // Value of `unsafeUniqueKey` that forces the use of "colo local" ephemeral | COMMENT |
| LOW | packages/miniflare/src/plugins/shared/constants.ts | 121 | } catch { | COMMENT |
| LOW | …kages/miniflare/src/plugins/browser-rendering/index.ts | 241 | }, | COMMENT |
| LOW | …kages/miniflare/src/plugins/browser-rendering/index.ts | 281 | } catch (e) { | COMMENT |
| LOW | packages/miniflare/src/runtime/index.ts | 101 | } | COMMENT |
| LOW | packages/miniflare/src/shared/dev-registry.ts | 121 | // reliably. The registry directory is small, so the cost is | COMMENT |
| LOW | packages/miniflare/src/http/websocket.ts | 181 | // itself which will dispatch a close event to us, completing the closing | COMMENT |
| LOW | packages/miniflare/src/http/cert.ts | 21 | // openssl.cnf | COMMENT |
| LOW | packages/miniflare/src/http/cert.ts | 41 | // stateOrProvinceName = State or Province Name | COMMENT |
| LOW | packages/miniflare/src/http/cert.ts | 61 | // subjectAltName = @alt_names | COMMENT |
| LOW | packages/miniflare/src/workers/core/outbound.worker.ts | 1 | // General-purpose outbound interceptor for user Workers. | COMMENT |
| LOW | packages/miniflare/src/workers/core/devalue.ts | 221 | // `instanceof` checks against a specific `Headers`/`Request`/`Response` | COMMENT |
| LOW | packages/miniflare/src/workers/core/constants.ts | 161 | // request. This gives us WebSocket support, and is much more efficient, since | COMMENT |
| LOW | packages/miniflare/src/workers/shared/blob.worker.ts | 181 | // streaming reads and writes. | COMMENT |
| LOW | …ckages/miniflare/src/workers/shared/keyvalue.worker.ts | 201 | // (NOTE: `Awaitable` allows metadata to be a `Promise`, this is used by | COMMENT |
| LOW | …flare/src/workers/ratelimit/ratelimit-object.worker.ts | 21 | success: boolean; | COMMENT |
| LOW | …iniflare/src/workers/local-explorer/resources/email.ts | 501 | items.push(candidate.item); | COMMENT |
| LOW | packages/miniflare/src/workers/email/storage.ts | 1 | // Shared types for the local email store. | COMMENT |
| LOW | packages/miniflare/src/workers/r2/bucket.worker.ts | 61 | // ===== Notes on Multipart Uploads ===== | COMMENT |
| LOW | packages/miniflare/src/workers/r2/bucket.worker.ts | 81 | // deleted. This is because uploads can be aborted more than once, and even | COMMENT |
| LOW | packages/miniflare/src/workers/r2/bucket.worker.ts | 621 | // as we could hit open file descriptor limits. Similarly, we don't want to | COMMENT |
| LOW | packages/miniflare/src/workers/r2/serve.worker.ts | 81 | // Some conditional header failed, but `bucket.get()` reports the | COMMENT |
| LOW | packages/miniflare/src/workers/r2/s3/index.worker.ts | 1 | // S3-compatible API for local R2 buckets. Status codes, headers, XML bodies, | COMMENT |
| LOW | packages/miniflare/src/workers/r2/s3/index.worker.ts | 21 | // - Flexible checksums: real R2 validates, stores, and echoes | COMMENT |
| LOW | packages/miniflare/src/workers/r2/s3/index.worker.ts | 41 | // semantics deliberately do not apply: | COMMENT |
| LOW | packages/miniflare/src/workers/r2/s3/auth.worker.ts | 1 | // AWS Signature Version 4 verification for the local S3-compatible endpoint. | COMMENT |
| LOW | packages/config/src/load.ts | 101 | "cloudflare.config.ts loading requires Node.js v22.18.0 or higher." | COMMENT |
| LOW | packages/config/src/exports.ts | 1 | // ═══════════════════════════════════════════════════════════════════════════ | COMMENT |
| 75 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …s/local-explorer-ui/src/__tests__/utils/studio.test.ts | 117 | const sql = `SELECT 'Hello' FROM "t" WHERE "name" = 'John Doe'`; | CODE |
| LOW | …s/local-explorer-ui/src/__tests__/utils/studio.test.ts | 123 | { type: "STRING", value: "'John Doe'" }, | CODE |
| LOW | packages/miniflare/CHANGELOG.md | 1190 | "email": "user@example.com", | CODE |
| LOW | packages/miniflare/CHANGELOG.md | 2359 | { name: "Jane Doe", email: "jane@example.com" }, | CODE |
| LOW | packages/miniflare/test/config/v4-convert.spec.ts | 214 | identity: { email: "user@example.com" }, | CODE |
| LOW | packages/miniflare/test/config/v4-convert.spec.ts | 221 | identity: { email: "user@example.com" }, | CODE |
| LOW | packages/miniflare/test/config/v4-schema.spec.ts | 229 | destination_address: "user@example.com", | CODE |
| LOW | packages/miniflare/test/config/v4-schema.spec.ts | 230 | allowed_destination_addresses: ["user@example.com"], | CODE |
| LOW | packages/miniflare/test/plugins/core/access.spec.ts | 101 | identity: { email: "user@example.com", sub: "user-123" }, | CODE |
| LOW | packages/miniflare/test/plugins/core/access.spec.ts | 113 | identity: { email: "user@example.com", sub: "user-123" }, | CODE |
| LOW | packages/miniflare/test/plugins/email/index.spec.ts | 1722 | from: { name: "John Doe", email: "john@example.com" }, | CODE |
| LOW | packages/miniflare/test/plugins/email/index.spec.ts | 1733 | expect(message).toContain('"John Doe" <john@example.com>'); | CODE |
| LOW | packages/miniflare/test/plugins/email/index.spec.ts | 1747 | from: { name: "John Doe", email: "john@example.com" }, | CODE |
| LOW | packages/miniflare/test/plugins/email/index.spec.ts | 1788 | { name: "Jane Doe", email: "jane@example.com" }, | CODE |
| LOW | packages/miniflare/test/plugins/email/index.spec.ts | 1805 | 'To: plain@example.com, "Jane Doe" <jane@example.com>' | CODE |
| LOW | packages/miniflare/test/plugins/email/index.spec.ts | 1982 | from: '"John Doe" <john@example.com>', | CODE |
| LOW | packages/miniflare/test/plugins/email/index.spec.ts | 1995 | expect(message).toContain('From: "John Doe" <john@example.com>'); | CODE |
| LOW | packages/config/src/__tests__/schema.test.ts | 163 | identity: { email: "user@example.com" }, | CODE |
| LOW | packages/config/src/__tests__/schema.test.ts | 187 | access: { dev: { identity: { email: "user@example.com" } } }, | CODE |
| LOW | packages/config/src/__tests__/convert.test.ts | 116 | identity: { email: "user@example.com" }, | CODE |
| LOW | packages/config/src/__tests__/convert.test.ts | 126 | identity: { email: "user@example.com" }, | CODE |
| LOW | …udflare/templates/openapi/ts/src/endpoints/taskList.ts | 55 | description: "Lorem Ipsum", | CODE |
| LOW | …flare/templates/openapi/ts/src/endpoints/taskDelete.ts | 46 | description: "Lorem Ipsum", | CODE |
| LOW | packages/wrangler/src/__tests__/email-routing.test.ts | 47 | matchers: [{ type: "literal", field: "to", value: "user@example.com" }], | CODE |
| LOW | packages/wrangler/src/__tests__/email-routing.test.ts | 500 | matchers: [{ type: "literal", field: "to", value: "user@example.com" }], | CODE |
| LOW | packages/wrangler/src/__tests__/email-routing.test.ts | 1049 | "email sending send --from sender@example.com --from-name 'John Doe' --to recipient@example.com --subject 'Test' --t | CODE |
| LOW | packages/wrangler/src/__tests__/email-routing.test.ts | 1053 | from: { address: "sender@example.com", name: "John Doe" }, | CODE |
| LOW | …_tests__/unstable-get-miniflare-worker-options.test.ts | 196 | email: "user@example.com", | CODE |
| LOW | …_tests__/unstable-get-miniflare-worker-options.test.ts | 211 | email: "user@example.com", | CODE |
| LOW | packages/wrangler/src/__tests__/whoami.test.ts | 106 | email: "user@example.com", | CODE |
| LOW | packages/wrangler/src/__tests__/whoami.test.ts | 141 | email: "user@example.com", | CODE |
| LOW | packages/wrangler/src/__tests__/whoami.test.ts | 154 | vi.stubEnv("CLOUDFLARE_EMAIL", "user@example.com"); | CODE |
| LOW | packages/wrangler/src/__tests__/whoami.test.ts | 160 | email: "user@example.com", | CODE |
| LOW | packages/wrangler/src/__tests__/whoami.test.ts | 173 | vi.stubEnv("CLOUDFLARE_EMAIL", "user@example.com"); | CODE |
| LOW | packages/wrangler/src/__tests__/whoami.test.ts | 180 | email: "user@example.com", | CODE |
| LOW | packages/wrangler/src/__tests__/whoami.test.ts | 206 | email: "user@example.com", | CODE |
| LOW | packages/wrangler/src/__tests__/whoami.test.ts | 463 | email: "user@example.com", | CODE |
| LOW | packages/wrangler/src/__tests__/whoami.test.ts | 507 | expect(output.email).toBe("user@example.com"); | CODE |
| LOW | packages/wrangler/src/__tests__/whoami.test.ts | 597 | HttpResponse.json(createFetchResult({ email: "user@example.com" })) | CODE |
| LOW | …/wrangler/src/__tests__/versions/versions.view.test.ts | 292 | author_email: "test@test.com", | CODE |
| LOW | …/wrangler/src/__tests__/versions/versions.view.test.ts | 338 | author_email: "test@test.com", | CODE |
| LOW | …/wrangler/src/__tests__/versions/versions.view.test.ts | 386 | author_email: "test@test.com", | CODE |
| LOW | …/wrangler/src/__tests__/versions/versions.view.test.ts | 436 | author_email: "test@test.com", | CODE |
| LOW | …/wrangler/src/__tests__/versions/versions.view.test.ts | 492 | author_email: "test@test.com", | CODE |
| LOW | …/wrangler/src/__tests__/versions/versions.view.test.ts | 545 | author_email: "test@test.com", | CODE |
| LOW | …_tests__/versions/deployments/deployments.view.test.ts | 19 | const result = runWrangler("deployments view dummy-id"); | CODE |
| LOW | …es/wrangler/src/__tests__/helpers/msw/handlers/user.ts | 59 | email: "user@example.com", | CODE |
| LOW | …ges/wrangler/src/__tests__/vectorize/vectorize.test.ts | 1299 | [22, '{"prop_14": {"address": {"$eq": "123 Main St"}}}'], // Invalid operator | CODE |
| LOW⚡ | packages/workers-auth/tests/credentials.test.ts | 49 | vi.stubEnv("CLOUDFLARE_EMAIL", "user@example.com"); | CODE |
| LOW⚡ | packages/workers-auth/tests/credentials.test.ts | 52 | authEmail: "user@example.com", | CODE |
| LOW⚡ | packages/workers-auth/tests/credentials.test.ts | 61 | vi.stubEnv("CLOUDFLARE_EMAIL", "user@example.com"); | CODE |
| LOW | packages/workers-auth/tests/cf/index.test.ts | 121 | vi.stubEnv("CLOUDFLARE_EMAIL", "user@example.com"); | CODE |
| LOW | …cloudflare/src/__tests__/resolve-plugin-config.spec.ts | 898 | allowedMail: ["alice@example.com", "*@example.org"], | CODE |
| LOW | …cloudflare/src/__tests__/resolve-plugin-config.spec.ts | 908 | allowedMail: ["alice@example.com", "*@example.org"], | CODE |
| LOW | packages/workers-utils/tests/tunnel.test.ts | 146 | allowedMail: ["alice@example.com", "*@example.org"], | CODE |
| LOW | packages/workers-utils/tests/tunnel.test.ts | 165 | "*@example.org", | CODE |
| LOW | packages/workers-utils/tests/cloudflared.test.ts | 164 | spawnCloudflared(["tunnel", "--allowed-mail", "user@example.com"], { | CODE |
| LOW | packages/workers-utils/tests/cloudflared.test.ts | 184 | spawnCloudflared(["tunnel", flag, "user@example.com"], { | CODE |
| LOW | packages/workers-utils/tests/cloudflared.test.ts | 213 | spawnCloudflared(["tunnel", "--allowed-mail", "user@example.com"]) | CODE |
| LOW | packages/workers-utils/tests/cloudflared.test.ts | 229 | spawnCloudflared(["tunnel", "--allowed-mail", "user@example.com"]) | CODE |
| 3 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | packages/create-cloudflare/CHANGELOG.md | 87 | - [#16422](https://github.com/cloudflare/workers-sdk/pull/16422) [`559bf16`](https://github.com/cloudflare/workers-sdk/c | CODE |
| MEDIUM | packages/create-cloudflare/CHANGELOG.md | 697 | - [#14896](https://github.com/cloudflare/workers-sdk/pull/14896) [`7d4565d`](https://github.com/cloudflare/workers-sdk/c | CODE |
| MEDIUM | packages/create-cloudflare/CHANGELOG.md | 697 | - [#14896](https://github.com/cloudflare/workers-sdk/pull/14896) [`7d4565d`](https://github.com/cloudflare/workers-sdk/c | CODE |
| MEDIUM | packages/create-cloudflare/CHANGELOG.md | 1079 | - [#14653](https://github.com/cloudflare/workers-sdk/pull/14653) [`e812d2e`](https://github.com/cloudflare/workers-sdk/c | CODE |
| MEDIUM | packages/create-cloudflare/CHANGELOG.md | 1156 | - [#14544](https://github.com/cloudflare/workers-sdk/pull/14544) [`53f5a59`](https://github.com/cloudflare/workers-sdk/c | CODE |
| MEDIUM | packages/create-cloudflare/CHANGELOG.md | 1436 | - [#14113](https://github.com/cloudflare/workers-sdk/pull/14113) [`063d98e`](https://github.com/cloudflare/workers-sdk/c | CODE |
| MEDIUM | packages/create-cloudflare/CHANGELOG.md | 1436 | - [#14113](https://github.com/cloudflare/workers-sdk/pull/14113) [`063d98e`](https://github.com/cloudflare/workers-sdk/c | CODE |
| MEDIUM | packages/create-cloudflare/CHANGELOG.md | 1448 | - [#14096](https://github.com/cloudflare/workers-sdk/pull/14096) [`a5b7690`](https://github.com/cloudflare/workers-sdk/c | CODE |
| MEDIUM | packages/create-cloudflare/CHANGELOG.md | 1872 | - [#13316](https://github.com/cloudflare/workers-sdk/pull/13316) [`21d0b53`](https://github.com/cloudflare/workers-sdk/c | CODE |
| MEDIUM | packages/create-cloudflare/CHANGELOG.md | 2240 | - [#12648](https://github.com/cloudflare/workers-sdk/pull/12648) [`3d6e421`](https://github.com/cloudflare/workers-sdk/c | CODE |
| MEDIUM | packages/create-cloudflare/CHANGELOG.md | 6024 | - [#5301](https://github.com/cloudflare/workers-sdk/pull/5301) [`0abafdb`](https://github.com/cloudflare/workers-sdk/com | CODE |
| MEDIUM | packages/create-cloudflare/CHANGELOG.md | 6024 | - [#5301](https://github.com/cloudflare/workers-sdk/pull/5301) [`0abafdb`](https://github.com/cloudflare/workers-sdk/com | CODE |
| MEDIUM | packages/create-cloudflare/e2e/helpers/spawn.ts | 156 | // where they are wrong for the throwaway projects these tests scaffold. | COMMENT |
| MEDIUM | packages/create-cloudflare/e2e/helpers/spawn.ts | 173 | // These tests scaffold third-party framework projects and run their code | COMMENT |
| MEDIUM | packages/create-cloudflare/e2e/helpers/index.ts | 45 | // Remove the scaffold and its sibling package caches together. | COMMENT |
| MEDIUM | …ages/create-cloudflare/src/__tests__/templates.test.ts | 306 | // Most frameworks scaffold the application with their own CLI and only | COMMENT |
| MEDIUM | packages/wrangler/src/utils/detect-agent.ts | 7 | // is sufficient for identifying most agentic environments. | COMMENT |
| MEDIUM | packages/wrangler/src/pages/delegate-to-workers.ts | 198 | // Detect the agentic environment once and reuse the result: `isAgent` gates | COMMENT |
| MEDIUM | packages/vite-plugin-cloudflare/src/detect-agent.ts | 5 | // out in CI. Environment variables are enough to identify agentic environments. | COMMENT |
| MEDIUM | …e-plugin-cloudflare/src/__tests__/detect-agent.spec.ts | 19 | // Warp embeds agentic features but has a human at the keyboard. The | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | packages/containers-shared/src/diff.ts | 373 | print( | CODE |
| HIGH | packages/wrangler/e2e/dev.test.ts | 675 | print(f"foobar {mul(4,3)}") | CODE |
| HIGH⚡ | packages/wrangler/e2e/dev.test.ts | 757 | print(f"hello {mul(2,3)}") | CODE |
| HIGH⚡ | packages/wrangler/e2e/dev.test.ts | 760 | print("excluded_module found") | CODE |
| HIGH⚡ | packages/wrangler/e2e/dev.test.ts | 762 | print("excluded_module not found") | CODE |
| HIGH⚡ | packages/wrangler/e2e/dev.test.ts | 763 | print(f"end") | CODE |
| HIGH | packages/wrangler/src/__tests__/tail-printing.test.ts | 52 | print(Buffer.from(JSON.stringify(event))); | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL | …kages/vitest-plugin/src/pool/cloudflare-pool-worker.ts | 163 | const configPlugin = this.options.project.vite.config.plugins.find( | CODE |
| CRITICAL | packages/wrangler/src/tunnel/client.ts | 164 | const response = await sdk.zeroTrust.tunnels.cloudflared.token.get( | CODE |
| CRITICAL | packages/wrangler/src/api/test-harness.ts | 878 | void session.primaryDevEnv.proxy.ready.promise.then( | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | packages/miniflare/CONTRIBUTING.md | 66 | ### Step 1: implement the simulator | COMMENT |
| LOW | packages/miniflare/CONTRIBUTING.md | 87 | ### Step 2: define a plugin with options | COMMENT |
| LOW | packages/miniflare/CONTRIBUTING.md | 103 | ### Step 3: implement `getBindings()` | COMMENT |
| LOW⚡ | packages/miniflare/CONTRIBUTING.md | 120 | ### Step 4: implement `getNodeBindings()` | COMMENT |
| LOW⚡ | packages/miniflare/CONTRIBUTING.md | 128 | ### Step 5: implement `getServices()` | COMMENT |
| LOW⚡ | packages/miniflare/CONTRIBUTING.md | 137 | ### Step 6: register your plugin | COMMENT |
| LOW⚡ | packages/miniflare/CONTRIBUTING.md | 143 | ### Step 7: implement additional `Miniflare` APIs | COMMENT |
| LOW | …ckages/miniflare/test/plugins/hyperdrive/proxy.spec.ts | 131 | // Step 1: read the SSLRequest packet | COMMENT |
| LOW | .github/skills/issue-review.md | 20 | ### Step 1: Load Issue Details | COMMENT |
| LOW | .github/skills/issue-review.md | 38 | ### Step 2: Check for Closeable Issues | COMMENT |
| LOW | .github/skills/issue-review.md | 210 | ### Step 3: Check for Insufficient Information | COMMENT |
| LOW | .github/skills/issue-review.md | 232 | ### Step 4: Identify Component | COMMENT |
| LOW | .github/skills/issue-review.md | 258 | ### Step 5: Assess Reproducibility and Severity | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …ckages/local-explorer-ui/src/drivers/sqlite/parsers.ts | 677 | // This makes it more robust in the face of missing commas between constraint definitions, | COMMENT |
| MEDIUM | …ges/create-cloudflare/templates/common/js/src/index.js | 33 | // You can also use more robust routing | COMMENT |
| MEDIUM | …ges/create-cloudflare/templates/common/ts/src/index.ts | 36 | // You can also use more robust routing | COMMENT |
| MEDIUM | .github/workflows/test-and-check.yml | 231 | # tests; the comprehensive vitest-plugin-examples fixture still runs. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | packages/miniflare/src/plugins/artifacts/git-sidecar.ts | 219 | async function handleRequest( | CODE |
| LOW | packages/edge-preview-authenticated-proxy/src/index.ts | 176 | async function handleRequest(request: Request, env: Env) { | CODE |
| LOW | packages/wrangler/src/__tests__/type-generation.test.ts | 1650 | }); async function handleRequest(request) { return new Response('Hello worker!', {headers: { 'content-type': 'text/pl | CODE |
| LOW | packages/wrangler/src/__tests__/type-generation.test.ts | 3560 | }); async function handleRequest(request) { return new Response('Hello worker!', {headers: { 'content-type': 'text/ | CODE |
| LOW | …/wrangler/src/__tests__/deploy/durable-objects.test.ts | 859 | "# Helper module\ndef helper(): pass" | CODE |
| LOW | …/wrangler/src/__tests__/deploy/durable-objects.test.ts | 864 | "helper.py": "# Helper module\ndef helper(): pass", | CODE |
| LOW | packages/autoconfig/src/frameworks/react-router.ts | 379 | export default async function handleRequest( | CODE |
| LOW | packages/autoconfig/src/frameworks/react-router.ts | 429 | export default async function handleRequest( | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | packages/wrangler/src/dev.ts | 466 | // TODO(consider): do we need really need to do this? I've added the condition to throw to match the previous implicit | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …e/templates/hello-world-durable-object/py/src/entry.py | 53 | # Create a stub to open a communication channel with the Durable Object | COMMENT |
| MEDIUM | …hello-world-durable-object-with-assets/py/src/entry.py | 53 | # Create a stub to open a communication channel with the Durable Object | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …eploy-helpers/src/deploy/helpers/provision-bindings.ts | 665 | // ...and the user HAS specified a name in their config, so we need to check if the database_name they provided | COMMENT |
| LOW | …ckages/miniflare/test/plugins/hyperdrive/proxy.spec.ts | 131 | // Step 1: read the SSLRequest packet | COMMENT |
| LOW | packages/wrangler/src/__tests__/deploy/helpers.ts | 271 | //TODO: This is getting called multiple times in the test, we need to check if that is happening in Production --Jacob 2 | COMMENT |