Home / denoland / deno
Repository Analysis

denoland/deno

A modern runtime for JavaScript and TypeScript.

1.6 Likely human-written View on GitHub
1.6
Adjusted Score
1.6
Raw Score
100%
Time Factor
2026-05-30
Last Push
106,904
Stars
Rust
Language
1,140,705
Lines of Code
7038
Files
1756
Pattern Hits
2026-05-31
Scan Date

Score History

Severity Breakdown

CRITICAL 6HIGH 19MEDIUM 12LOW 1719

Pattern Findings

1756 matches across 11 categories. Click a row to expand file-level details.

Hyper-Verbose Identifiers1026 hits · 940 pts
SeverityFileLineSnippet
LOWtools/update_types_node.ts30async function downloadAndExtractPackages() {
LOWtools/update_types_node.ts366 function assertIsVariableWithConditionalTypeOnGlobalThis() {
LOWtools/lint.js413async function ensureWorkflowYmlsUpToDate() {
LOWtools/lint.js456async function ensureNoNonPermissionCapitalLetterShortFlags() {
LOWtools/lint.js579async function ensureDisallowedMethodsEnforced() {
LOWtools/lint.js697async function ensureNoNewTopLevelEntries() {
LOWtools/release/promote_to_release.ts85async function fetchLatestCanaryBinaries(canaryVersion: string) {
LOWtools/release/04_post_publish.ts33async function forwardReleaseCommitToMain() {
LOWtools/release/00_start_release.ts67function buildDenoReleaseInstructionsDoc() {
LOWext/crypto/00_crypto.js7352function cryptoKeyExportNodeKeyMaterial(cryptoKey) {
LOWext/websocket/02_websocketstream.js450function validateCloseCodeAndReason(closeInfo) {
LOWext/net/03_quic.js62function promiseFinallyWithoutUnhandled(p, f) {
LOWext/web/03_abort_signal.js354function createDependentAbortSignal(signals, prefix) {
LOWext/web/02_event.js48function getCreateFilteredInspectProxy() {
LOWext/web/02_event.js75function getStopImmediatePropagation(event) {
LOWext/web/02_event.js117function setStopImmediatePropagation(
LOWext/web/02_event.js490function isShadowInclusiveAncestor(
LOWext/web/02_event.js727function innerInvokeEventListeners(
LOWext/web/02_event.js853function normalizeEventHandlerOptions(
LOWext/web/02_event.js939function addEventListenerOptionsConverter(V, prefix) {
LOWext/web/01_mimesniff.js406function imageTypePatternMatchingAlgorithm(input) {
LOWext/web/00_infra.js155function collectSequenceOfCodepoints(input, position, condition) {
LOWext/web/00_infra.js405function serializeJSValueToJSONString(value) {
LOWext/web/01_urlpattern.js37function getCreateFilteredInspectProxy() {
LOWext/web/01_dom_exception.js33function getCreateFilteredInspectProxy() {
LOWext/web/01_console.js377function getSharedArrayBufferByteLength(value) {
LOWext/web/01_console.js1673function getDuplicateErrorFrameRanges(frames) {
LOWext/web/01_console.js4098function createFilteredInspectProxy({ object, keys, evaluate }) {
LOWext/web/01_console.js4118 function getDescendantPropertyDescriptor(object, key) {
LOWext/web/09_file.js105function convertLineEndingsToNative(s) {
LOWext/web/internal.d.ts7 function collectSequenceOfCodepoints(
LOWext/web/internal.d.ts47 function serializeJSValueToJSONString(value: unknown): string;
LOWext/web/internal.d.ts103 function isReadableStreamDisturbed(stream: ReadableStream): boolean;
LOWext/web/13_message_port.js47function getCreateFilteredInspectProxy() {
LOWext/web/13_message_port.js144function nodeWorkerThreadMaybeInvokeCloseCb(port) {
LOWext/web/13_message_port.js531function opCreateEntangledMessagePort() {
LOWext/web/13_message_port.js546function resolveTransferableResource(type) {
LOWext/web/15_performance.js41function getCreateFilteredInspectProxy() {
LOWext/web/06_streams.js752function isReadableStreamDefaultReader(value) {
LOWext/web/06_streams.js761function isReadableStreamBYOBReader(value) {
LOWext/web/06_streams.js770function isReadableStreamDisturbed(stream) {
LOWext/web/06_streams.js779function extractStringErrorFromError(error) {
LOWext/web/06_streams.js1091function readableStreamIsUnrefable(stream) {
LOWext/web/06_streams.js1095function readableStreamForRidUnrefableRef(stream) {
LOWext/web/06_streams.js1105function readableStreamForRidUnrefableUnref(stream) {
LOWext/web/06_streams.js1115function getReadableStreamResourceBacking(stream) {
LOWext/web/06_streams.js1119function getReadableStreamResourceBackingUnrefable(stream) {
LOWext/web/06_streams.js1833function readableStreamDefaultControllerCanCloseOrEnqueue(controller) {
LOWext/web/06_streams.js1839function readableStreamDefaultControllerClearAlgorithms(controller) {
LOWext/web/06_streams.js1846function readableStreamDefaultControllerClose(controller) {
LOWext/web/06_streams.js2716function readableStreamGetNumReadIntoRequests(stream) {
LOWext/web/06_streams.js2725function readableStreamGetNumReadRequests(stream) {
LOWext/web/06_streams.js2734function readableStreamHasBYOBReader(stream) {
LOWext/web/06_streams.js4519function writableStreamDefaultControllerClearAlgorithms(controller) {
LOWext/web/06_streams.js4527function writableStreamDefaultControllerClose(controller) {
LOWext/web/06_streams.js4536function writableStreamDefaultControllerError(controller, error) {
LOWext/web/06_streams.js4667function writableStreamDefaultWriterAbort(writer, reason) {
LOWext/web/06_streams.js4677function writableStreamDefaultWriterClose(writer) {
LOWext/web/06_streams.js4687function writableStreamDefaultWriterCloseWithErrorPropagation(writer) {
LOWext/web/06_streams.js7438function isReadableStreamBYOBRequest(value) {
966 more matches not shown…
Over-Commented Block637 hits · 636 pts
SeverityFileLineSnippet
LOWtools/glibc_math_shim.c1// Copyright 2018-2026 the Deno authors. MIT license.
LOWtools/memfd_create_shim.c1// Copyright 2018-2026 the Deno authors. MIT license.
LOWtools/ops.d.ts1// Copyright 2018-2026 the Deno authors. MIT license.
LOWtools/lint_plugins/no_deno_api_in_polyfills.ts1// Copyright 2018-2026 the Deno authors. MIT license.
LOWtools/bsdiff_helper/main.rs1// Copyright 2018-2026 the Deno authors. MIT license.
LOWext/crypto/mldsa.rs21#[derive(Debug, thiserror::Error, deno_error::JsError)]
LOWext/crypto/decrypt.rs101 General(
LOWext/crypto/decrypt.rs121 #[class("DOMExceptionOperationError")]
LOWext/crypto/lib.rs181 #[error(transparent)]
LOWext/crypto/lib.rs201 #[class(generic)]
LOWext/crypto/lib.rs221 MissingArgumentInfo,
LOWext/crypto/encrypt.rs101 #[error(transparent)]
LOWext/crypto/shared.rs81 #[class(type)]
LOWext/websocket/lib.rs81 #[class(inherit)]
LOWext/websocket/lib.rs161 #[class(type)]
LOWext/websocket/lib.rs181 WebSocket(#[from] fastwebsockets::WebSocketError),
LOWext/net/quic.rs61 #[error("Endpoint created by 'connectQuic' cannot be used for listening")]
LOWext/net/quic.rs81 #[class(generic)]
LOWext/net/quic.rs101 ReadError(#[from] quinn::ReadError),
LOWext/net/quic.rs1061 .get::<RecvStreamResource>(rid)?;
LOWext/net/raw.rs541 #[cfg(any(target_os = "android", target_os = "linux", target_os = "macos"))]
LOWext/net/ops.rs101 #[class("Busy")]
LOWext/net/ops.rs121 AddrParse(#[from] std::net::AddrParseError),
LOWext/net/ops.rs141 #[error("Provided record type is not supported")]
LOWext/net/tcp.rs61 /// accept every connection.
LOWext/kv/lib.rs121}
LOWext/kv/lib.rs141 #[error("Too many checks (max {0})")]
LOWext/kv/lib.rs161 #[class(type)]
LOWext/kv/lib.rs181 EndKeyNotInKeyspace,
LOWext/cache/lib.rs41 EmptyName,
LOWext/cache/lib.rs61 #[error(transparent)]
LOWext/node_sqlite/lib.rs41 #[error("{message}")]
LOWext/node_sqlite/lib.rs61 FailedBind(&'static str),
LOWext/node_sqlite/lib.rs81 #[error("unknown column type")]
LOWext/node_sqlite/lib.rs101 #[error("failed to retrieve changeset")]
LOWext/node_sqlite/lib.rs121 #[error("Invalid callback: {0}")]
LOWext/web/urlpattern.rs61 port: pattern.port.into(),
LOWext/web/webtransport.js161 #headerUni;
LOWext/web/webtransport.js661
LOWext/web/02_event.js1361 const source = eventInitDict?.source;
LOWext/web/lib.rs181 #[class("DOMExceptionInvalidCharacterError")]
LOWext/web/lib.rs341
LOWext/web/01_console.js1441 if (symbols.length !== 0) {
LOWext/web/01_console.js2461 recurseTimes,
LOWext/web/geometry.rs81
LOWext/web/geometry.rs821#[derive(WebIDL, Debug)]
LOWext/web/13_message_port.js741 ],
LOWext/web/13_message_port.js821 }
LOWext/web/url.rs41
LOWext/web/url.rs61/// If the serialized URL is different from the input URL, then `UrlSerialization` is
LOWext/node_crypto/keys.rs541 }
LOWext/node_crypto/keys.rs561 #[class(type)]
LOWext/node_crypto/keys.rs581#[derive(Debug, thiserror::Error, deno_error::JsError)]
LOWext/node_crypto/keys.rs601 UnsupportedCurve(String),
LOWext/node_crypto/keys.rs621}
LOWext/node_crypto/keys.rs641 InvalidPemPrivateKey,
LOWext/node_crypto/keys.rs701 #[error(transparent)]
LOWext/node_crypto/keys.rs721 #[error(transparent)]
LOWext/node_crypto/keys.rs741 #[error("unsupported PEM label: {0}")]
LOWext/node_crypto/keys.rs761 #[from]
577 more matches not shown…
Cross-File Repetition18 hits · 90 pts
SeverityFileLineSnippet
HIGH.github/workflows/ci.generated.yml0' }}' ci_shard_total: '${{ github.event_name == ''pull_request'' && matrix.shard_total ||
HIGH.github/workflows/ci.generated.yml0' }}' ci_shard_total: '${{ github.event_name == ''pull_request'' && matrix.shard_total ||
HIGH.github/workflows/ci.generated.yml0' }}' ci_shard_total: '${{ github.event_name == ''pull_request'' && matrix.shard_total ||
HIGH.github/workflows/ci.generated.yml0' }}' ci_shard_total: '${{ github.event_name == ''pull_request'' && matrix.shard_total ||
HIGH.github/workflows/ci.generated.yml0' }}' ci_shard_total: '${{ github.event_name == ''pull_request'' && matrix.shard_total ||
HIGH.github/workflows/ci.generated.yml0' }}' ci_shard_total: '${{ github.event_name == ''pull_request'' && matrix.shard_total ||
HIGH.github/workflows/ci.generated.yml0' }}' run: 'cargo test -p ${{ matrix.test_package }} --test ${{ matrix.test_crate }} --release' - name: ensure no git ch
HIGH.github/workflows/ci.generated.yml0' }}' run: 'cargo test -p ${{ matrix.test_package }} --test ${{ matrix.test_crate }} --release' - name: ensure no git ch
HIGH.github/workflows/ci.generated.yml0' }}' run: 'cargo test -p ${{ matrix.test_package }} --test ${{ matrix.test_crate }} --release' - name: ensure no git ch
HIGH.github/workflows/ci.generated.yml0run: cargo build -p test_ffi - name: test (debug) if: '!startswith(github.ref, ''refs/tags/'') && (matrix.shard_index ==
HIGH.github/workflows/ci.generated.yml0run: cargo build -p test_ffi - name: test (debug) if: '!startswith(github.ref, ''refs/tags/'') && (matrix.shard_index ==
HIGH.github/workflows/ci.generated.yml0run: cargo build -p test_ffi - name: test (debug) if: '!startswith(github.ref, ''refs/tags/'') && (matrix.shard_index ==
HIGH.github/workflows/ci.generated.yml0' }}' run: 'cargo test -p ${{ matrix.test_package }} --test ${{ matrix.test_crate }}' - name: ensure no git changes if:
HIGH.github/workflows/ci.generated.yml0' }}' run: 'cargo test -p ${{ matrix.test_package }} --test ${{ matrix.test_crate }}' - name: ensure no git changes if:
HIGH.github/workflows/ci.generated.yml0' }}' run: 'cargo test -p ${{ matrix.test_package }} --test ${{ matrix.test_crate }}' - name: ensure no git changes if:
HIGH.github/workflows/ci.generated.yml0' }}.json' path: 'target/test_results_${{ matrix.test_crate }}.json' - name: cache cargo home uses: actions/cache/save@0
HIGH.github/workflows/ci.generated.yml0' }}.json' path: 'target/test_results_${{ matrix.test_crate }}.json' - name: cache cargo home uses: actions/cache/save@0
HIGH.github/workflows/ci.generated.yml0' }}.json' path: 'target/test_results_${{ matrix.test_crate }}.json' - name: cache cargo home uses: actions/cache/save@0
Hallucination Indicators6 hits · 60 pts
SeverityFileLineSnippet
CRITICALlibs/core/runtime/jsruntime.rs168 self.main_realm.0.context_state.pending_ops.shutdown();
CRITICALlibs/core/runtime/jsruntime.rs182 self.main_realm.0.context_state.pending_ops.shutdown();
CRITICALlibs/core/runtime/jsruntime.rs1316 context_state: self.inner.main_realm.0.context_state.clone(),
CRITICALlibs/core/runtime/jsruntime.rs1808 self.inner.main_realm.0.context_state.uv_loop_ptr.get()
CRITICALlibs/core/runtime/jsruntime.rs2991 self.inner.main_realm.0.module_map.mod_evaluate(scope, id)
CRITICALlibs/npm_installer/lifecycle_scripts.rs446 .map(|p| p.package.id.nv.name.to_string())
Fake / Example Data38 hits · 40 pts
SeverityFileLineSnippet
LOWext/node/polyfills/_readline.d.ts59 * const values = ['lorem ipsum', 'dolor sit amet'];
LOWext/node/polyfills/_readline.d.ts59 * const values = ['lorem ipsum', 'dolor sit amet'];
LOWtests/testdata/run/066_prompt.ts1const name1 = prompt("What is your name?", "Jane Doe"); // Answer with default
LOWtests/testdata/run/permission_broker/scratch.txt1Lorem ipsum dolor sit amet
LOWtests/testdata/run/permission_broker/scratch.txt1Lorem ipsum dolor sit amet
LOWtests/testdata/run/permission_broker/log.txt1Lorem ipsum dolor sit amet
LOWtests/testdata/run/permission_broker/log.txt1Lorem ipsum dolor sit amet
LOWtests/testdata/run/permission_broker/test1.ts6 "Lorem ipsum dolor sit amet",
LOWtests/testdata/run/permission_broker/test1.ts6 "Lorem ipsum dolor sit amet",
LOWtests/bench/cache_api.js30 `Lorem ipsum dolor sit amet, consectetur adipiscing…es ligula in libero. Sed dignissim lacinia nunc. `;
LOWtests/bench/cache_api.js30 `Lorem ipsum dolor sit amet, consectetur adipiscing…es ligula in libero. Sed dignissim lacinia nunc. `;
LOWtests/unit/streams_test.ts60// Long stream with Lorem Ipsum text.
LOWtests/unit/streams_test.ts76// Long stream with Lorem Ipsum text.
LOWtests/unit/streams_test.ts20 "Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna a
LOWtests/unit/streams_test.ts20 "Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna a
LOWtests/unit/kv_test.ts2417 .enqueue({ type: "email", to: "user@example.com" })
LOWtests/unit/kv_test.ts2435 inspected.includes('enqueue({ type: "email", to: "user@example.com" })'),
LOWtests/specs/fmt/yaml/ignore_file3.yaml1# Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor
LOWtests/specs/fmt/yaml/ignore_file3.yaml1# Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor
LOWtests/specs/fmt/sql/ignore_file3.sql1-- Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor
LOWtests/specs/fmt/sql/ignore_file3.sql1-- Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor
LOWtests/specs/bundle/data_url_css/test.css3 --test-text: url("data:text/plain;charset=utf-8,Lorem ipsum dolor sit amet");
LOWtests/specs/bundle/data_url_css/test.css3 --test-text: url("data:text/plain;charset=utf-8,Lorem ipsum dolor sit amet");
LOW…s/specs/bump_version/workspace_manual_version/setup.ts20await run(["git", "config", "user.email", "test@test.com"]);
LOWtests/unit_node/sqlite_test.ts434 insertStmt.run("John Doe", "john@example.com");
LOWtests/unit_node/sqlite_test.ts448 assertEquals(backupUsers[0].name, "John Doe");
LOWtests/unit_node/zlib_test.ts88 assert(content.startsWith("Lorem ipsum dolor sit amet"), content);
LOWtests/unit_node/zlib_test.ts88 assert(content.startsWith("Lorem ipsum dolor sit amet"), content);
LOWtests/unit_node/stream_test.ts27 assert(content.startsWith("Lorem ipsum dolor sit amet"));
LOWtests/unit_node/stream_test.ts27 assert(content.startsWith("Lorem ipsum dolor sit amet"));
LOWtests/unit_node/testdata/lorem_ipsum_512kb.txt1Lorem ipsum dolor sit amet, consectetur adipiscing elit. Lorem ipsum dolor sit amet, consectetur adipiscing elit. Lorem
LOWtests/unit_node/testdata/lorem_ipsum_512kb.txt1Lorem ipsum dolor sit amet, consectetur adipiscing elit. Lorem ipsum dolor sit amet, consectetur adipiscing elit. Lorem
LOWtests/unit_node/testdata/lorem_ipsum.txt1Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliq
LOWtests/unit_node/testdata/lorem_ipsum.txt1Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliq
LOWtests/unit_node/_fs/_fs_handle_test.ts149 const buffer3 = Buffer.from("lorem ipsum");
LOWtests/unit_node/_fs/_fs_handle_test.ts156 assertEquals(decoder.decode(data), "hello lorem ipsum");
LOWlibs/core/benches/snapshot/file.js5 return "Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore
LOWlibs/core/benches/snapshot/file.js5 return "Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore
AI Slop Vocabulary11 hits · 37 pts
SeverityFileLineSnippet
MEDIUMext/node/polyfills/http2.ts2485 // seamless compatibility with http1.
MEDIUMext/node/polyfills/internal/errors.ts3317// Non-robust path join
MEDIUMtests/bench/testdata/react-dom.js18 */var r=e;function a(e){for(var t="https://reactjs.org/docs/error-decoder.html?invariant="+e,n=1;n<arguments.length;n+
MEDIUMtests/bench/testdata/react-dom.js18 */var r=e;function a(e){for(var t="https://reactjs.org/docs/error-decoder.html?invariant="+e,n=1;n<arguments.length;n+
MEDIUMtests/bench/testdata/react-dom.js27 */var xt=e;function kt(e){for(var t="https://reactjs.org/docs/error-decoder.html?invariant="+e,n=1;n<arguments.length;
MEDIUMtests/bench/testdata/react-dom.js27 */var xt=e;function kt(e){for(var t="https://reactjs.org/docs/error-decoder.html?invariant="+e,n=1;n<arguments.length;
LOWtests/registry/npm/imurmurhash/registry.json37 "readme": "iMurmurHash.js\n==============\n\nAn incremental implementation of the MurmurHash3 (32-bit) hashing alg
MEDIUMlibs/core/runtime/ops_rust_to_v8.rs23//! efficiency. Furthermore, `#[op2]` strives to leverage `v8::ReturnValue` setters when possible, eliminating
MEDIUMlibs/core/runtime/ops_rust_to_v8.rs23//! efficiency. Furthermore, `#[op2]` strives to leverage `v8::ReturnValue` setters when possible, eliminating
MEDIUMlibs/npm_cache/tarball_extract.rs64 /// This is more robust than `Overwrite` as it better handles multiple
MEDIUMlibs/npm/resolution/graph.rs7157 // This was an attempt at reducing duplicate dependencies. Essentially, if we previously
Verbosity Indicators14 hits · 21 pts
SeverityFileLineSnippet
LOWext/node_crypto/keys.rs4306 // Step 1: D = id repeated v bytes.
LOWext/node_crypto/keys.rs4330 // Step 4: I = S || P.
LOWext/node_crypto/keys.rs4334 // Step 5: c = ceil(size / u).
LOWext/node_crypto/keys.rs4365 // Step 8: take the first `size` bytes of A.
LOWext/node/polyfills/internal/streams/readable.js1255 // We need to check if there is someone still listening to
LOWext/node/polyfills/internal/streams/readable.js1274 // We need to check if there is someone still listening to
LOWlibs/npm/resolution/graph.rs539 // Step 1: Build per-node peer info and NV-level adjacency graph.
LOWlibs/npm/resolution/graph.rs576 // Step 2: Detect cycles at the NV level using Tarjan's algorithm.
LOWlibs/npm/resolution/graph.rs626 // Step 3: Run Tarjan's at the node level for computation ordering.
LOWlibs/npm/resolution/graph.rs630 // Step 4: Compute NpmPackageIds in topological order.
LOWlibs/npm/resolution/graph.rs1930 // Step 1: Resolve this node's own peer deps from parent_pkgs FIRST,
LOWlibs/npm/resolution/graph.rs1991 // Step 2: Add resolved peers to scope so children can see them.
LOWlibs/npm/resolution/graph.rs2001 // Step 3: Recurse into regular children AND resolved peer dep nodes.
LOWlibs/npm/resolution/graph.rs2187 // Step 5: Fix circular parent references. When children have
Cross-Language Confusion (JS/TS)1 hit · 5 pts
SeverityFileLineSnippet
HIGHcli/tsc/compiler.d.ts51 print(msg: string, stderr: boolean): void;
Slop Phrases2 hits · 3 pts
SeverityFileLineSnippet
LOWtests/registry/npm/csstype/registry.json58 "readme": "# CSSType\r\n\r\n[![npm](https://img.shields.io/npm/v/csstype.svg)](https://www.npmjs.com/package/cssty
MEDIUMtests/registry/npm/imurmurhash/registry.json37 "readme": "iMurmurHash.js\n==============\n\nAn incremental implementation of the MurmurHash3 (32-bit) hashing alg
Overly Generic Function Names2 hits · 3 pts
SeverityFileLineSnippet
LOWcli/tsc/dts/lib.deno_url.d.ts710 * function handleRequest(req: Request) {
LOWcli/tsc/dts/lib.deno.worker.d.ts184 * function processData(data) {
Decorative Section Separators1 hit · 3 pts
SeverityFileLineSnippet
MEDIUMlibs/core/uv_compat/tty.rs121/// fake_fd (fds[0]) <──────────> int_fd (fds[1])