Incredibly fast JavaScript runtime, bundler, test runner, and package manager – all in one
This report presents the forensic synthetic code analysis of oven-sh/bun, a Rust project with 94,675 GitHub stars. SynthScan v2.0 examined 2,885,833 lines of code across 14225 source files, recording 11468 pattern matches distributed across 23 syntactic categories. The overall adjusted score of 6.6 places this repository in the Low AI signal band.
The scanner applied 160+ deterministic lexical heuristics, multi-line block detectors, abstract syntax tree depth profilers, and a cross-file Jaccard similarity matrix to construct a statistically normalised synthetic code estimate. All matches are individually weighted by severity coefficient and contextual multiplier before summation, and the resulting headline score is temporally discounted to account for the repository's development history relative to the commercial emergence of large language model coding tooling (November 2022 onward).
This chart maps the temporal evolution of the adjusted synthetic code score across successive scan runs. An upward trajectory indicates ongoing incorporation of AI-generated code or expanding LLM-assisted scaffolding; a stable or declining trajectory may reflect active human refactoring, code removal, or the adoption of stricter authorship policies. The dashed secondary line (right axis) independently tracks total raw pattern hit count, which can diverge from the normalised score when codebase size changes significantly between scans.
Classifies detected patterns by their diagnostic confidence and structural impact. CRITICAL patterns (coefficient 10) represent definitive synthetic signatures — hallucinated imports, explicit LLM attribution metadata — virtually never produced by human authors. HIGH (5) indicates strong structural tells such as cross-file repetition or cross-linguistic idioms. MEDIUM (2) covers recognisable conversational padding and AI-specific vocabulary. LOW (1) captures subtle indicators like tautological comments and generic boilerplate that require density to carry independent signal.
This horizontal bar chart decomposes the repository's raw synthetic code score by top-level directory, allowing you to pinpoint precisely which modules or components carry the highest AI authorship density. Directories with disproportionately high scores relative to their size warrant targeted manual review: concentrated AI signatures often trace back to mass-generated configuration layers, auto-ported test suites, LLM-scaffolded boilerplate classes, or entire subsystems authored under heavy copilot assistance. Use this view to prioritise your human code-review effort.
The scanner identified 11468 distinct pattern matches across 23 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a statistically significant AI authorship indicator. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the diagnostic confidence level (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — comment-context matches receive a ×1.5 weight because LLMs systematically over-annotate. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier as dense clusters constitute far stronger evidence of synthetic authorship than isolated hits.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | Cargo.toml | 114 | # ─── Release optimization ─────────────────────────────────────────────────── | COMMENT |
| MEDIUM | test/js/web/fetch/fetch-http3-client.test.ts | 483 | // ───── streaming uploads (pull-driven request bodies) ───── | COMMENT |
| MEDIUM | test/js/web/fetch/fetch-http3-client.test.ts | 527 | // ───── bidirectional ───── | COMMENT |
| MEDIUM | test/js/web/fetch/fetch-http2-adversarial.test.ts | 32 | // ─── raw server with full preface control ──────────────────────────────────── | COMMENT |
| MEDIUM | test/js/web/fetch/fetch-http2-adversarial.test.ts | 106 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | test/js/web/fetch/fetch-http2-adversarial.test.ts | 328 | // ─────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | test/js/web/fetch/fetch-http2-adversarial.test.ts | 330 | // ─────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | test/js/web/fetch/fetch-http2-adversarial.test.ts | 441 | // ─── session-key regressions ───────────────────────────────────────────────── | COMMENT |
| MEDIUM | test/js/bun/terminal/terminal-platform-gaps.test.ts | 71 | // ────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | test/js/bun/terminal/terminal-platform-gaps.test.ts | 73 | // ────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | test/js/bun/terminal/terminal-platform-gaps.test.ts | 123 | // ────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | test/js/bun/terminal/terminal-platform-gaps.test.ts | 125 | // ────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | test/js/bun/terminal/terminal-platform-gaps.test.ts | 149 | // ────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | test/js/bun/terminal/terminal-platform-gaps.test.ts | 151 | // ────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | test/js/bun/terminal/terminal-platform-gaps.test.ts | 198 | // ────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | test/js/bun/terminal/terminal-platform-gaps.test.ts | 200 | // ────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | test/js/bun/terminal/terminal-platform-gaps.test.ts | 250 | // ────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | test/js/bun/terminal/terminal-platform-gaps.test.ts | 252 | // ────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | test/js/bun/terminal/terminal-platform-gaps.test.ts | 300 | // ────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | test/js/bun/terminal/terminal-platform-gaps.test.ts | 302 | // ────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | test/js/bun/image/image-adversarial.test.ts | 27 | // this file should be runnable standalone) ──────────────────────────────── | COMMENT |
| MEDIUM | test/js/bun/image/image-adversarial.test.ts | 146 | // ─── 1. format confusion / lying magic bytes ───────────────────────────────── | COMMENT |
| MEDIUM | test/js/bun/image/image-adversarial.test.ts | 181 | // ─── 2. truncation at every boundary ───────────────────────────────────────── | COMMENT |
| MEDIUM | test/js/bun/image/image-adversarial.test.ts | 310 | // ─── 3. lying / overflowing header fields ──────────────────────────────────── | COMMENT |
| MEDIUM | test/js/bun/image/image-adversarial.test.ts | 389 | // ─── 4. malformed PNG chunk structure ──────────────────────────────────────── | COMMENT |
| MEDIUM | test/js/bun/image/image-adversarial.test.ts | 435 | // ─── 5. malformed JPEG / EXIF ──────────────────────────────────────────────── | COMMENT |
| MEDIUM | test/js/bun/image/image-adversarial.test.ts | 471 | // ─── 6. lossless roundtrip parity ──────────────────────────────────────────── | COMMENT |
| MEDIUM | test/js/bun/image/image-adversarial.test.ts | 535 | // ─── 7. memory hygiene under repetition ────────────────────────────────────── | COMMENT |
| MEDIUM | test/js/bun/image/image-adversarial.test.ts | 590 | // ─── 8. hostile JS option objects ──────────────────────────────────────────── | COMMENT |
| MEDIUM | test/js/bun/image/image-adversarial.test.ts | 709 | // ─── 9. concurrency / re-use ───────────────────────────────────────────────── | COMMENT |
| MEDIUM | test/js/bun/image/image-adversarial.test.ts | 744 | // ─── 10. random-byte fuzz (cheap, bounded) ─────────────────────────────────── | COMMENT |
| MEDIUM | test/js/bun/image/image-kernels.test.ts | 10 | // ─── plumbing (PNG build/read; same shape as image.test.ts) ───────────────── | COMMENT |
| MEDIUM | test/js/bun/image/image-kernels.test.ts | 110 | // ─── resize filters ───────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | test/js/bun/image/image-kernels.test.ts | 233 | // ─── Floyd–Steinberg dither ───────────────────────────────────────────────── | COMMENT |
| MEDIUM | test/js/bun/image/image-vs-sharp.test.ts | 34 | // failure modes; small so the fixture stays a few-hundred KB) ──────────── | COMMENT |
| MEDIUM | test/js/bun/image/image-vs-sharp.test.ts | 73 | // ─── PNG plumbing (same hand-roller as the other suites) ──────────────────── | COMMENT |
| MEDIUM | test/js/bun/image/image-vs-sharp.test.ts | 165 | // back, in the same iteration order the test uses. ───────────────────────── | COMMENT |
| MEDIUM | test/js/bun/image/image.test.ts | 6 | // ─── Fixture builders ─────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | test/js/bun/image/image.test.ts | 142 | // ─── Tests ────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | test/js/bun/image/image.test.ts | 1218 | // ── LZW pack ────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | test/js/bun/image/image.test.ts | 1266 | // ── container ───────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | test/js/bun/http/proxy-stress-headers.test.ts | 46 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | test/js/bun/http/proxy-stress-headers.test.ts | 48 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | test/js/bun/http/proxy-stress-headers.test.ts | 74 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | test/js/bun/http/proxy-stress-headers.test.ts | 76 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | test/js/bun/http/proxy-stress-headers.test.ts | 121 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | test/js/bun/http/proxy-stress-headers.test.ts | 123 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | test/js/bun/http/proxy-stress-headers.test.ts | 157 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | test/js/bun/http/proxy-stress-headers.test.ts | 159 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | test/js/bun/http/proxy-stress-headers.test.ts | 191 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | test/js/bun/http/proxy-stress-headers.test.ts | 194 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | test/js/bun/http/proxy-stress-headers.test.ts | 230 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | test/js/bun/http/proxy-stress-headers.test.ts | 233 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | test/js/bun/http/proxy-stress-headers.test.ts | 250 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | test/js/bun/http/proxy-stress-headers.test.ts | 252 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | test/js/bun/http/proxy-stress-headers.test.ts | 274 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | test/js/bun/http/proxy-stress-headers.test.ts | 277 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | test/js/bun/http/proxy-stress-headers.test.ts | 298 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | test/js/bun/http/proxy-stress-headers.test.ts | 301 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | test/js/bun/http/proxy-stress-lifecycle.test.ts | 65 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| 4049 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | Cargo.toml | 101 | "src/bunfig", | COMMENT |
| LOW | Cargo.toml | 181 | # back to "warn" (their priority 0 beats the group's -1) where a warning level | COMMENT |
| LOW | rustfmt.toml | 1 | # rustfmt config for the Cargo workspace. Formatting is the toolchain default | COMMENT |
| LOW | bunfig.toml | 1 | [test] | COMMENT |
| LOW | rust-toolchain.toml | 1 | [toolchain] | COMMENT |
| LOW | bench/snippets/buffer.js | 21 | // time("DataView.getBigInt64 (BE)", () => view.getBigInt64(0, false)); | COMMENT |
| LOW | bench/snippets/buffer.js | 41 | time("Buffer.readFloatLE ", () => buf.readFloatLE(0)); | COMMENT |
| LOW | bench/snippets/buffer.js | 61 | // console.log(""); | COMMENT |
| LOW | bench/snippets/buffer.js | 81 | time("Buffer.writeBigUInt64BE", () => buf.writeBigUInt64BE(BigInt(0), 0)); | COMMENT |
| LOW | bench/snippets/buffer.js | 101 | // console.log(""); | COMMENT |
| LOW | bench/snippets/deep-equals.js | 341 | // get foo() { | COMMENT |
| LOW | bench/install/next-env.d.ts | 1 | /// <reference types="next" /> | COMMENT |
| LOW | test/expectations.txt | 1 | # Format: [modifier] test-name [[ expectations ]] [# comment] | COMMENT |
| LOW | test/expectations.txt | 21 | [ WINDOWS-AARCH64 ] test/js/node/test/parallel/test-repl-close.js [ FAIL ] # EPIPE on stdin.write to closed child proces | COMMENT |
| LOW | test/expectations.txt | 41 | # alpine 3.23 x64 + x64-baseline only). | COMMENT |
| LOW | test/expectations.txt | 101 | # Windows-only gaps in named-pipe / socket teardown for ported Node net tests | COMMENT |
| LOW | test/expectations.txt | 121 | # AddressSanitizer and exceeds the per-test timeout; it passes on regular builds. | COMMENT |
| LOW | test/expectations.txt | 141 | [ WINDOWS ] test/js/web/fetch/fetch-http2-client.test.ts [ FAIL ] # pooled-h2 teardown surfaces WSAECONNRESET between te | COMMENT |
| LOW | test/v8/v8-module/main.cpp | 1 | #include <node.h> | COMMENT |
| LOW | test/v8/v8-module/main.cpp | 461 | COMMENT | |
| LOW | test/snippets/lodash-regexp.js | 21 | // export function test() { | COMMENT |
| LOW | test/docker/coordinator.ts | 41 | COMMENT | |
| LOW | test/js/workerd/html-rewriter-leak.test.ts | 1 | import { heapStats } from "bun:jsc"; | COMMENT |
| LOW | test/js/workerd/html-rewriter-leak.test.ts | 41 | // still protected here. | COMMENT |
| LOW | test/js/web/structured-clone-blob-file.test.ts | 361 | }); | COMMENT |
| LOW | …/js/web/abort/abort-signal-event-listener-leak.test.ts | 1 | import { estimateShallowMemoryUsageOf } from "bun:jsc"; | COMMENT |
| LOW | …bsocket/websocket-proxy-tunnel-upgrade-leak-fixture.ts | 1 | // Repro for HTTPUpgradeClient leak on wss:// through an HTTP CONNECT proxy | COMMENT |
| LOW | …b/websocket/websocket-proxy-tunnel-client-leak.test.ts | 1 | import { expect, test } from "bun:test"; | COMMENT |
| LOW | test/js/web/websocket/websocket-utf16-headers.test.ts | 1 | // Regression test for WebSocket upgrade request crash on non-ASCII inputs. | COMMENT |
| LOW | …ebsocket/websocket-proxy-tunnel-client-leak-fixture.ts | 1 | // Repro for NewWebSocketClient(false) leak on wss:// through an HTTP CONNECT | COMMENT |
| LOW | test/js/web/websocket/websocket-close-code.test.ts | 1 | // WebSocket#close() argument validation and the close-code handling that | COMMENT |
| LOW | test/js/web/intl/intl.test.ts | 1 | // ECMA-402 Intl coverage. Doubles as the regression net for the per-item zstd | COMMENT |
| LOW | test/js/web/intl/intl.test.ts | 241 | // --------------------------------------------------------------------------- | COMMENT |
| LOW | test/js/web/timers/timers-fixture-unref.js | 81 | // See https://github.com/nodejs/node/issues/9561 | COMMENT |
| LOW | test/js/web/streams/streams-leak.test.ts | 1 | import { expect, test } from "bun:test"; | COMMENT |
| LOW | test/js/web/streams/native-source-onclose-leak.test.ts | 1 | import { heapStats } from "bun:jsc"; | COMMENT |
| LOW | test/js/web/encoding/text-decoder-cjk.test.ts | 181 | // 8F A1 starts a JIS X 0212 sequence; 0x61 aborts it. A1 A1 is then a | COMMENT |
| LOW | …t/js/web/html/FormData-multipart-serialization.test.ts | 161 | // Serializing an in-memory blob entry borrows its bytes; the only blob-sized | COMMENT |
| LOW | test/js/web/html/FormData-file-error-leak.test.ts | 1 | import { expect, test } from "bun:test"; | COMMENT |
| LOW | test/js/web/html/FormData-file-error-leak-fixture.ts | 1 | // Fixture for FormData → multipart body memory leak on readFile failure. | COMMENT |
| LOW | …/js/web/broadcastchannel/message-event-init-gc.test.ts | 1 | import { expect, test } from "bun:test"; | COMMENT |
| LOW | …b/broadcastchannel/broadcast-channel-worker-gc.test.ts | 101 | ); | COMMENT |
| LOW | …b/broadcastchannel/broadcast-channel-worker-gc.test.ts | 181 | expect(filterStderr(stderr)).toBe(""); | COMMENT |
| LOW | test/js/web/fetch/http-chunked-server.c | 1 | // Simple HTTP server that reproduces a streaming response body bug. | COMMENT |
| LOW | test/js/web/fetch/fetch-tcp-keepalive.test.ts | 1 | // Verifies that fetch() enables TCP keepalive (SO_KEEPALIVE + TCP_KEEPIDLE) | COMMENT |
| LOW | test/js/web/fetch/fetch-tcp-keepalive.test.ts | 41 | // Parse /proc/self/net/tcp: find ESTABLISHED (state 01) socket with | COMMENT |
| LOW | …st/js/web/fetch/fetch-proxy-tls-intern-race-fixture.ts | 1 | // Subprocess fixture for fetch-proxy-tls-intern-race.test.ts. | COMMENT |
| LOW | test/js/web/fetch/fetch-abort-queued.test.ts | 1 | // When `active_requests_count >= max_simultaneous_requests`, new fetch() | COMMENT |
| LOW | test/js/web/fetch/headers.test.ts | 601 | COMMENT | |
| LOW | test/js/web/fetch/body-clone.test.ts | 901 | // Each body type hits a different internal representation at clone() time: | COMMENT |
| LOW | test/js/web/fetch/blob-file-name-ownership.test.ts | 1 | import { expect, test } from "bun:test"; | COMMENT |
| LOW | test/js/web/fetch/fetch-http3-adversarial.test.ts | 221 | } | COMMENT |
| LOW | test/js/web/fetch/wasm-streaming.test.ts | 21 | // (module | COMMENT |
| LOW | test/js/web/fetch/fetch-stream-cancel-leak.test.ts | 1 | import { heapStats } from "bun:jsc"; | COMMENT |
| LOW | …st/js/web/fetch/fetch-response-finalizer-sweep.test.ts | 1 | // fetch(): the JSResponse Weak finalizer (WeakBlock::sweep) reaches | COMMENT |
| LOW | test/js/web/fetch/fetch-leak.test.ts | 421 | COMMENT | |
| LOW | test/js/web/fetch/fetch-leak.test.ts | 501 | // fetch.rs url_type != Remote: url_string carries a +1 WTFStringImpl ref | COMMENT |
| LOW | test/js/web/fetch/fetch-leak.test.ts | 641 | // Regression: src/collections/hive_array.zig:65-76 (HiveArray.put) + src/bun.zig HiveRef.unref. | COMMENT |
| LOW | test/js/web/fetch/fetch-proxy-tls-intern-race.test.ts | 1 | // Regression test: SSLConfig intern/deref race (UAF) — see PR #27838, #27863 | COMMENT |
| LOW | …etch/fetch-proxy-connect-tunnel-split-envelope.test.ts | 1 | // Regression test for https://github.com/oven-sh/bun/issues/30381 | COMMENT |
| 6061 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | test/harness.ts | 144 | async function findOrDownloadAbiMatchingNode(): Promise<string> { | CODE |
| LOW | test/harness.ts | 373 | export function makeTreeSyncFromDirectoryTree(base: string, tree: DirectoryTree) { | CODE |
| LOW | test/harness.ts | 527 | export function randomInvalidSurrogatePair() { | CODE |
| LOW | test/harness.ts | 1216 | function failTestsOnBlockingWriteCall() { | CODE |
| LOW | test/harness.ts | 1690 | export function fileDescriptorLeakChecker() { | CODE |
| LOW | test/_util/numeric.ts | 93 | export function computePearsonCorrelation(xs: number[], ys: number[]): number { | CODE |
| LOW | test/_util/numeric.ts | 160 | export function computeAverageAbsoluteDeviation(xs: number[]): number { | CODE |
| LOW | test/js/deno/crypto/random.test.ts | 51 | test(function getRandomValuesReturnValue() { | CODE |
| LOW | test/js/deno/crypto/webcrypto.test.ts | 506 | test(async function subtleCryptoHmacImportExport() { | CODE |
| LOW | test/js/deno/crypto/webcrypto.test.ts | 755 | test(async function testHkdfDeriveBitsWithLargeKeySize() { | CODE |
| LOW | test/js/deno/crypto/webcrypto.test.ts | 768 | test(async function testEcdhDeriveBitsWithShorterLength() { | CODE |
| LOW | test/js/deno/crypto/webcrypto.test.ts | 782 | test(async function testEcdhDeriveBitsWithLongerLength() { | CODE |
| LOW | test/js/deno/crypto/webcrypto.test.ts | 795 | test(async function testEcdhDeriveBitsWithNullLength() { | CODE |
| LOW | test/js/deno/crypto/webcrypto.test.ts | 1063 | test(async function testDecryptWithInvalidIntializationVector() { | CODE |
| LOW | test/js/deno/crypto/webcrypto.test.ts | 2559 | test(async function ecPrivateKeyMaterialExportSpki() { | CODE |
| LOW | test/js/deno/crypto/webcrypto.test.ts | 2603 | test(async function testImportLeadingZeroesKey() { | CODE |
| LOW | test/js/deno/abort/abort-controller.test.ts | 52 | test(function controllerHasProperToString() { | CODE |
| LOW | test/js/deno/encoding/encoding.test.ts | 285 | test(function toStringShouldBeWebCompatibility() { | CODE |
| LOW | test/js/deno/encoding/encoding.test.ts | 291 | test(function textEncoderShouldCoerceToString() { | CODE |
| LOW⚡ | test/js/deno/url/urlsearchparams.test.ts | 6 | test(function urlSearchParamsWithMultipleSpaces() { | CODE |
| LOW⚡ | test/js/deno/url/urlsearchparams.test.ts | 13 | test(function urlSearchParamsWithExclamation() { | CODE |
| LOW⚡ | test/js/deno/url/urlsearchparams.test.ts | 23 | test(function urlSearchParamsWithQuotes() { | CODE |
| LOW⚡ | test/js/deno/url/urlsearchparams.test.ts | 33 | test(function urlSearchParamsWithBraket() { | CODE |
| LOW⚡ | test/js/deno/url/urlsearchparams.test.ts | 53 | test(function urlSearchParamsInitString() { | CODE |
| LOW⚡ | test/js/deno/url/urlsearchparams.test.ts | 58 | test(function urlSearchParamsInitStringWithPlusCharacter() { | CODE |
| LOW⚡ | test/js/deno/url/urlsearchparams.test.ts | 66 | test(function urlSearchParamsInitStringWithMalformedParams() { | CODE |
| LOW⚡ | test/js/deno/url/urlsearchparams.test.ts | 114 | test(function urlSearchParamsAppendSuccess() { | CODE |
| LOW⚡ | test/js/deno/url/urlsearchparams.test.ts | 119 | test(function urlSearchParamsDeleteSuccess() { | CODE |
| LOW⚡ | test/js/deno/url/urlsearchparams.test.ts | 125 | test(function urlSearchParamsGetAllSuccess() { | CODE |
| LOW⚡ | test/js/deno/url/urlsearchparams.test.ts | 137 | test(function urlSearchParamsGetSuccess() { | CODE |
| LOW⚡ | test/js/deno/url/urlsearchparams.test.ts | 144 | test(function urlSearchParamsHasSuccess() { | CODE |
| LOW⚡ | test/js/deno/url/urlsearchparams.test.ts | 151 | test(function urlSearchParamsSetReplaceFirstAndRemoveOthers() { | CODE |
| LOW⚡ | test/js/deno/url/urlsearchparams.test.ts | 157 | test(function urlSearchParamsSetAppendNew() { | CODE |
| LOW⚡ | test/js/deno/url/urlsearchparams.test.ts | 163 | test(function urlSearchParamsSortSuccess() { | CODE |
| LOW⚡ | test/js/deno/url/urlsearchparams.test.ts | 169 | test(function urlSearchParamsForEachSuccess() { | CODE |
| LOW⚡ | test/js/deno/url/urlsearchparams.test.ts | 190 | test(function urlSearchParamsMissingName() { | CODE |
| LOW⚡ | test/js/deno/url/urlsearchparams.test.ts | 196 | test(function urlSearchParamsMissingValue() { | CODE |
| LOW⚡ | test/js/deno/url/urlsearchparams.test.ts | 202 | test(function urlSearchParamsMissingEqualSign() { | CODE |
| LOW⚡ | test/js/deno/url/urlsearchparams.test.ts | 208 | test(function urlSearchParamsMissingPair() { | CODE |
| LOW⚡ | test/js/deno/url/urlsearchparams.test.ts | 213 | test(function urlSearchParamsForShortEncodedChar() { | CODE |
| LOW⚡ | test/js/deno/url/urlsearchparams.test.ts | 221 | test(function urlSearchParamsShouldThrowTypeError() { | CODE |
| LOW | test/js/deno/url/urlsearchparams.test.ts | 86 | test(function urlSearchParamsInitIterable() { | CODE |
| LOW | test/js/deno/url/urlsearchparams.test.ts | 100 | test(function urlSearchParamsInitRecord() { | CODE |
| LOW | test/js/deno/url/urlsearchparams.test.ts | 256 | test(function urlSearchParamsAppendArgumentsCheck() { | CODE |
| LOW | test/js/deno/url/urlsearchparams.test.ts | 299 | test(function urlSearchParamsDeletingAppendedMultiple() { | CODE |
| LOW | test/js/deno/url/urlsearchparams.test.ts | 311 | test(function urlSearchParamsCustomSymbolIterator() { | CODE |
| LOW | test/js/deno/url/urlsearchparams.test.ts | 322 | test(function urlSearchParamsCustomSymbolIteratorWithNonStringParams() { | CODE |
| LOW | test/js/deno/url/urlsearchparams.test.ts | 333 | test(function urlSearchParamsOverridingAppendNotChangeConstructorAndSet() { | CODE |
| LOW | test/js/deno/url/urlsearchparams.test.ts | 354 | test(function urlSearchParamsOverridingEntriesNotChangeForEach() { | CODE |
| LOW⚡ | test/js/deno/url/url.test.ts | 267 | test(function deletingAllParamsRemovesQuestionMarkFromURL() { | CODE |
| LOW⚡ | test/js/deno/url/url.test.ts | 274 | test(function removingNonExistentParamRemovesQuestionMarkFromURL() { | CODE |
| LOW⚡ | test/js/deno/url/url.test.ts | 281 | test(function sortingNonExistentParamRemovesQuestionMarkFromURL() { | CODE |
| LOW | test/js/deno/url/url.test.ts | 294 | test(function throwForInvalidPortConstructor() { | CODE |
| LOW | test/js/deno/url/url.test.ts | 308 | test(function doNotOverridePortIfInvalid() { | CODE |
| LOW | test/js/deno/url/url.test.ts | 314 | test(function emptyPortForSchemeDefaultPort() { | CODE |
| LOW⚡ | test/js/deno/url/url.test.ts | 333 | test(function assigningPortPropertyAffectsReceiverOnly() { | CODE |
| LOW⚡ | test/js/deno/url/url.test.ts | 340 | test(function urlSearchParamsIdentityPreserved() { | CODE |
| LOW⚡ | test/js/deno/url/url.test.ts | 347 | test(function urlTakeURLObjectAsParameter() { | CODE |
| LOW | test/js/deno/fetch/blob.test.ts | 111 | test(function blobConstructorNameIsBlob() { | CODE |
| LOW | test/js/deno/fetch/blob.test.ts | 115 | test.ignore(function blobCustomInspectFunction() { | CODE |
| 786 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH⚡ | test/js/bun/test/printing/diffexample.fixture.ts | 228 | print("Hello, world!"); | CODE |
| HIGH⚡ | test/js/bun/test/printing/diffexample.fixture.ts | 229 | print("Goodbye, world!"); | CODE |
| HIGH⚡ | test/js/bun/test/printing/diffexample.fixture.ts | 233 | print("Hello, world!"); | CODE |
| HIGH⚡ | test/js/bun/test/printing/diffexample.fixture.ts | 234 | print("Goodbye, world!"); | CODE |
| HIGH | test/js/bun/shell/bunshell.test.ts | 2128 | elif echo baz;then echo qux;fi` | CODE |
| HIGH | test/bundler/bundler_jsx.test.ts | 151 | print(<div>Hello World</div>) | CODE |
| HIGH | test/bundler/bundler_jsx.test.ts | 152 | print(<div className="container"><Component prop={2}><h1 onClick={() => 1}>hello</h1></Component></div>) | CODE |
| HIGH⚡ | test/bundler/bundler_jsx.test.ts | 173 | print(<div>Hello World</div>) | CODE |
| HIGH⚡ | test/bundler/bundler_jsx.test.ts | 174 | print(<div className="container"><Component prop={2}><h1 onClick={() => 1}>hello</h1></Component></div>) | CODE |
| HIGH⚡ | test/bundler/bundler_jsx.test.ts | 175 | print(<>Fragment</>) | CODE |
| HIGH | test/bundler/bundler_jsx.test.ts | 196 | print([typeof F, typeof el]) | CODE |
| HIGH | test/bundler/bundler_jsx.test.ts | 219 | print([el, a, b, c]) | CODE |
| HIGH | test/bundler/bundler_jsx.test.ts | 304 | print([<div props={123}>Hello World</div>, <>Fragment</>]) | CODE |
| HIGH | test/bundler/bundler_jsx.test.ts | 325 | print([<div props={123}>Hello World</div>, <>Fragment</>]) | CODE |
| HIGH | test/bundler/bundler_jsx.test.ts | 347 | print([<div props={123}>Hello World</div>, <>Fragment</>]) | CODE |
| HIGH⚡ | test/bundler/bundler_jsx.test.ts | 376 | print(['classic.jsx',<div props={123}>Hello World</div>, <>Fragment</>]) | CODE |
| HIGH⚡ | test/bundler/bundler_jsx.test.ts | 384 | print(['classic-renamed.jsx',<div props={123}>Hello World</div>, <>Fragment</>]) | CODE |
| HIGH⚡ | test/bundler/bundler_jsx.test.ts | 388 | print(['automatic.jsx',<div props={123}>Hello World</div>, process.env.NODE_ENV === 'production' ? '' : <>Fragme | CODE |
| HIGH⚡ | test/bundler/bundler_jsx.test.ts | 393 | print(['automatic-source2.jsx',<div props={123}>Hello World</div>, <>Fragment</>]) | CODE |
| HIGH | test/bundler/bundler_jsx.test.ts | 419 | print([<div props={123}>Hello World</div>, <>Fragment</>]) | CODE |
| HIGH | test/bundler/bundler_jsx.test.ts | 441 | print([<div props={123}>Hello World</div>, <>Fragment</>]) | CODE |
| HIGH | test/bundler/bundler_jsx.test.ts | 469 | print([<div props={123}>Hello World</div>, <>Fragment</>]) | CODE |
| HIGH | test/bundler/bundler_jsx.test.ts | 489 | print([<div props={123}>Hello World</div>, <>Fragment</>]) | CODE |
| HIGH | …-compiler-fixtures/hoisting-nested-block-statements.js | 6 | print(x); | CODE |
| HIGH | …-compiler-fixtures/hoisting-nested-block-statements.js | 10 | print(x); | CODE |
| HIGH⚡ | …eact-compiler-fixtures/flag-enable-emit-hook-guards.ts | 13 | print(identity(CONST_STRING0)); | CODE |
| HIGH⚡ | …eact-compiler-fixtures/flag-enable-emit-hook-guards.ts | 15 | print(value, state); | CODE |
| HIGH⚡ | …eact-compiler-fixtures/flag-enable-emit-hook-guards.ts | 21 | print(identity(value + state)); | CODE |
| HIGH | …nspiler/react-compiler-fixtures/codegen-inline-iife.ts | 5 | print(1), | CODE |
| HIGH | …nspiler/react-compiler-fixtures/codegen-inline-iife.ts | 7 | print(2); | CODE |
| HIGH | scripts/glob-sources.ts | 186 | print(sources[arg as keyof Sources]); | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | bench/snippets/buffer-includes.js | 2 | "Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna a | CODE |
| LOW | bench/snippets/buffer-includes.js | 2 | "Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna a | CODE |
| LOW | bench/snippets/_fixture.txt | 1191 | <td id="LC98" class="blob-code blob-code-inner js-file-line"><span class="pl-s"> Lorem ipsum dolor sit amet, | CODE |
| LOW | bench/snippets/_fixture.txt | 1191 | <td id="LC98" class="blob-code blob-code-inner js-file-line"><span class="pl-s"> Lorem ipsum dolor sit amet, | CODE |
| LOW⚡ | bench/snippets/_fixture.txt | 1339 | <td id="LC135" class="blob-code blob-code-inner js-file-line"> let string_long_escaped = "\n Lorem ip | CODE |
| LOW⚡ | bench/snippets/_fixture.txt | 1339 | <td id="LC135" class="blob-code blob-code-inner js-file-line"> let string_long_escaped = "\n Lorem ip | CODE |
| LOW⚡ | bench/snippets/_fixture.txt | 1343 | <td id="LC136" class="blob-code blob-code-inner js-file-line"> <span class="pl-k">let</span> string_short <sp | CODE |
| LOW⚡ | bench/snippets/_fixture.txt | 1343 | <td id="LC136" class="blob-code blob-code-inner js-file-line"> <span class="pl-k">let</span> string_short <sp | CODE |
| LOW⚡ | bench/snippets/_fixture.txt | 1351 | <td id="LC138" class="blob-code blob-code-inner js-file-line"> <span class="pl-s">"Lorem ipsum dolor | CODE |
| LOW⚡ | bench/snippets/_fixture.txt | 1351 | <td id="LC138" class="blob-code blob-code-inner js-file-line"> <span class="pl-s">"Lorem ipsum dolor | CODE |
| LOW⚡ | bench/snippets/_fixture.txt | 1355 | <td id="LC139" class="blob-code blob-code-inner js-file-line"> <span class="pl-k">let</span> no_escape <span | CODE |
| LOW⚡ | bench/snippets/_fixture.txt | 1355 | <td id="LC139" class="blob-code blob-code-inner js-file-line"> <span class="pl-k">let</span> no_escape <span | CODE |
| LOW⚡ | bench/snippets/_fixture.txt | 1363 | <td id="LC141" class="blob-code blob-code-inner js-file-line"><span class="pl-s">Lorem ipsum dolor sit amet, con | CODE |
| LOW⚡ | bench/snippets/_fixture.txt | 1363 | <td id="LC141" class="blob-code blob-code-inner js-file-line"><span class="pl-s">Lorem ipsum dolor sit amet, con | CODE |
| LOW | test/js/workerd/html-rewriter.test.js | 723 | .transform(new Response("<p>Lorem ipsum!</p>")) | CODE |
| LOW | test/js/workerd/html-rewriter.test.js | 738 | .transform(new Response("<p>Lorem ipsum!<br></p><div />")) | CODE |
| LOW | test/js/workerd/html-rewriter.test.js | 756 | .transform(new Response("<p>Lorem ipsum!<br></p><div /><svg><circle /></svg>")) | CODE |
| LOW | test/js/valkey/integration/complex-operations.test.ts | 191 | await ctx.redis.set(`${baseKey}:name`, "John Doe"); | CODE |
| LOW | test/js/valkey/integration/complex-operations.test.ts | 219 | expect(nameValue).toBe("John Doe"); | CODE |
| LOW⚡ | test/js/bun/test/expect.test.js | 3957 | expect(`Lorem ipsum dolor sit amet, consectetur adipiscing elit. Donec nec posuere felis. Aliquam tincidunt elit a n | CODE |
| LOW⚡ | test/js/bun/test/expect.test.js | 3957 | expect(`Lorem ipsum dolor sit amet, consectetur adipiscing elit. Donec nec posuere felis. Aliquam tincidunt elit a n | CODE |
| LOW⚡ | test/js/bun/test/expect.test.js | 3959 | `Lorem ipsum dolor sit amet, consectetur adipiscing elit. Donec nec posuere felis. Aliquam tincidunt elit a nunc h | CODE |
| LOW⚡ | test/js/bun/test/expect.test.js | 3959 | `Lorem ipsum dolor sit amet, consectetur adipiscing elit. Donec nec posuere felis. Aliquam tincidunt elit a nunc h | CODE |
| LOW⚡ | test/js/bun/test/jest-extended.test.js | 650 | expect(`Lorem ipsum dolor sit amet, consectetur adipiscing elit. Donec nec posuere felis. Aliquam tincidunt elit a n | CODE |
| LOW⚡ | test/js/bun/test/jest-extended.test.js | 650 | expect(`Lorem ipsum dolor sit amet, consectetur adipiscing elit. Donec nec posuere felis. Aliquam tincidunt elit a n | CODE |
| LOW⚡ | test/js/bun/test/jest-extended.test.js | 652 | `Lorem ipsum dolor sit amet, consectetur adipiscing elit. Donec nec posuere felis. Aliquam tincidunt elit a nunc h | CODE |
| LOW⚡ | test/js/bun/test/jest-extended.test.js | 652 | `Lorem ipsum dolor sit amet, consectetur adipiscing elit. Donec nec posuere felis. Aliquam tincidunt elit a nunc h | CODE |
| LOW | test/js/bun/test/fake-timers/sinonjs/issue-437.test.ts | 17 | return "Lorem ipsum"; | CODE |
| LOW | test/js/bun/test/fake-timers/sinonjs/issue-437.test.ts | 24 | assert.equals(dateTime.foo(), "Lorem ipsum"); | CODE |
| LOW | test/js/bun/http/bun-serve-routes.test.ts | 59 | id: "user@example.com", | CODE |
| LOW | test/js/bun/http/decodeURIComponentSIMD.test.ts | 21 | "user@example.com", | CODE |
| LOW | test/js/bun/http/request-smuggling.test.ts | 1427 | ["user@example.com"], | CODE |
| LOW⚡ | test/js/bun/md/spec-tables.txt | 142 | Lorem ipsum dolor sit amet. | CODE |
| LOW⚡ | test/js/bun/md/spec-tables.txt | 142 | Lorem ipsum dolor sit amet. | CODE |
| LOW⚡ | test/js/bun/md/spec-tables.txt | 149 | <p>Lorem ipsum dolor sit amet.</p> | CODE |
| LOW⚡ | test/js/bun/md/spec-tables.txt | 149 | <p>Lorem ipsum dolor sit amet.</p> | CODE |
| LOW⚡ | test/js/bun/md/spec-tables.txt | 170 | Lorem ipsum dolor sit amet. | CODE |
| LOW⚡ | test/js/bun/md/spec-tables.txt | 170 | Lorem ipsum dolor sit amet. | CODE |
| LOW⚡ | test/js/bun/md/spec-tables.txt | 180 | <tr><td>Lorem ipsum dolor sit amet.</td><td></td></tr> | CODE |
| LOW⚡ | test/js/bun/md/spec-tables.txt | 180 | <tr><td>Lorem ipsum dolor sit amet.</td><td></td></tr> | CODE |
| LOW | test/js/bun/md/spec.txt | 9453 | "Lorem ipsum dolor\nsit amet." | CODE |
| LOW | test/js/bun/md/spec.txt | 9512 | > Lorem ipsum dolor | CODE |
| LOW | test/js/bun/md/spec.txt | 9527 | > Lorem ipsum dolor | CODE |
| LOW | test/js/bun/md/spec.txt | 9539 | "Lorem ipsum dolor" | CODE |
| LOW | test/js/bun/md/spec.txt | 9555 | "Lorem ipsum dolor\nsit amet." | CODE |
| LOW | test/js/bun/md/spec.txt | 9573 | "Lorem ipsum dolor\nsit amet." | CODE |
| LOW | test/js/bun/md/spec.txt | 9595 | "Lorem ipsum dolor\nsit amet." | CODE |
| LOW | test/js/bun/md/spec.txt | 9618 | str "Lorem ipsum dolor" | CODE |
| LOW | test/js/third_party/next-auth/fixture/src/auth.ts | 44 | if (credentials?.email === "user@example.com" && credentials?.password === "password") { | CODE |
| LOW | test/js/third_party/next-auth/fixture/src/auth.ts | 47 | email: "user@example.com", | CODE |
| LOW | …ird_party/body-parser/express-body-parser-test.test.ts | 82 | expect(req.body).toEqual({ "name": "John Doe", "email": "john.doe@example.com" }); | CODE |
| LOW | …ird_party/body-parser/express-body-parser-test.test.ts | 89 | const payload = Buffer.from(JSON.stringify({ "name": "John Doe", "email": "john.doe@example.com" })); | CODE |
| LOW | test/js/third_party/astro/astro-post.test.js | 74 | formData.append("name", "John Doe"); | CODE |
| LOW | test/js/third_party/astro/astro-post.test.js | 87 | name: "John Doe", | CODE |
| LOW | …/js/node/test/parallel/test-zlib-brotli-from-string.js | 8 | const inputString = 'ΩΩLorem ipsum dolor sit amet, consectetur adipiscing eli' + | CODE |
| LOW | …/js/node/test/parallel/test-zlib-brotli-from-string.js | 8 | const inputString = 'ΩΩLorem ipsum dolor sit amet, consectetur adipiscing eli' + | CODE |
| LOW | test/js/node/test/parallel/test-zlib-truncated.js | 8 | const inputString = 'ΩΩLorem ipsum dolor sit amet, consectetur adipiscing eli' + | CODE |
| LOW | test/js/node/test/parallel/test-zlib-truncated.js | 8 | const inputString = 'ΩΩLorem ipsum dolor sit amet, consectetur adipiscing eli' + | CODE |
| LOW | test/js/node/test/parallel/test-zlib-from-string.js | 29 | const inputString = 'ΩΩLorem ipsum dolor sit amet, consectetur adipiscing eli' + | CODE |
| LOW | test/js/node/test/parallel/test-zlib-from-string.js | 29 | const inputString = 'ΩΩLorem ipsum dolor sit amet, consectetur adipiscing eli' + | CODE |
| 77 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL | …mpiler-fixtures/readonly-object-method-calls.expect.md | 16 | const posts = user.timeline.posts.edges.nodes.map(node => ( | CODE |
| CRITICAL | …mpiler-fixtures/readonly-object-method-calls.expect.md | 45 | posts = user.timeline.posts.edges.nodes.map(_temp); | CODE |
| CRITICAL | …/readonly-object-method-calls-mutable-lambda.expect.md | 17 | const posts = user.timeline.posts.edges.nodes.map(node => { | CODE |
| CRITICAL | …/readonly-object-method-calls-mutable-lambda.expect.md | 46 | const posts = user.timeline.posts.edges.nodes.map((node) => { | CODE |
| CRITICAL | …ixtures/readonly-object-method-calls-mutable-lambda.js | 13 | const posts = user.timeline.posts.edges.nodes.map(node => { | CODE |
| CRITICAL | …eact-compiler-fixtures/readonly-object-method-calls.js | 12 | const posts = user.timeline.posts.edges.nodes.map(node => ( | CODE |
| CRITICAL | src/install/PackageManager/runTasks.rs | 1098 | task.request.local_tarball.tarball.url.slice() | CODE |
| CRITICAL | src/install/PackageManager/security_scanner.rs | 176 | let string_buf = self.manager.lockfile.buffers.string_bytes.as_slice(); | CODE |
| CRITICAL | src/install/PackageManager/security_scanner.rs | 207 | let string_buf = self.manager.lockfile.buffers.string_bytes.as_slice(); | CODE |
| CRITICAL | src/install/PackageManager/security_scanner.rs | 707 | let string_buf = self.manager.lockfile.buffers.string_bytes.as_slice(); | CODE |
| CRITICAL | src/runtime/cli/publish_command.rs | 910 | bstr::BStr::new(if !ctx.manager.options.publish_config.tag.is_empty() { | CODE |
| CRITICAL | src/runtime/cli/publish_command.rs | 942 | if !ctx.manager.options.publish_config.otp.is_empty() { | CODE |
| CRITICAL | src/runtime/cli/publish_command.rs | 2023 | let tag: &[u8] = if !ctx.manager.options.publish_config.tag.is_empty() { | CODE |
| CRITICAL | src/runtime/api/JSTranspiler.rs | 377 | let Ok(Some(json)) = vm.transpiler.resolver.caches.json.parse_json( | CODE |
| CRITICAL | src/js_parser/visit/visit_stmt.rs | 1138 | let new_len = if !(data.is_export && p.options.features.replace_exports.entries.len() > 0) { | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | test/js/sql/sql.test.ts | 667 | // Step 1: Insert a row (succeeds) | COMMENT |
| LOW⚡ | test/js/sql/sql.test.ts | 673 | // Step 2: Try to insert conflicting row (throws expected error) | COMMENT |
| LOW⚡ | test/js/sql/sql.test.ts | 682 | // Step 3: Try another query - THIS WILL HANG | COMMENT |
| LOW⚡ | test/regression/issue/tui-app-tty-pattern.test.ts | 25 | // Step 1: Check if stdin is piped | COMMENT |
| LOW⚡ | test/regression/issue/tui-app-tty-pattern.test.ts | 34 | // Step 2: After stdin EOF, try to reopen /dev/tty | COMMENT |
| LOW | test/bundler/bundler_compile.test.ts | 1018 | // Step 2: Run bun build with compile, minify, sourcemap, and bytecode | COMMENT |
| LOW⚡ | scripts/packer/windows-x64.pkr.hcl | 98 | // Step 1: Run bootstrap — installs all build dependencies | COMMENT |
| LOW⚡ | scripts/packer/windows-x64.pkr.hcl | 105 | // Step 2: Upload agent.mjs | COMMENT |
| LOW⚡ | scripts/packer/windows-x64.pkr.hcl | 111 | // Step 3: Install agent service via nssm | COMMENT |
| LOW⚡ | scripts/packer/windows-x64.pkr.hcl | 119 | // Step 4: Reboot to clear pending updates (VS Build Tools, Windows Updates) | COMMENT |
| LOW⚡ | scripts/packer/windows-x64.pkr.hcl | 124 | // Step 5: Sysprep — MUST be last provisioner | COMMENT |
| LOW⚡ | scripts/packer/windows-arm64.pkr.hcl | 93 | // Step 1: Run bootstrap — installs all build dependencies | COMMENT |
| LOW⚡ | scripts/packer/windows-arm64.pkr.hcl | 100 | // Step 2: Upload agent.mjs | COMMENT |
| LOW⚡ | scripts/packer/windows-arm64.pkr.hcl | 106 | // Step 3: Install agent service via nssm | COMMENT |
| LOW⚡ | scripts/packer/windows-arm64.pkr.hcl | 114 | // Step 4: Reboot to clear pending updates (VS Build Tools, Windows Updates) | COMMENT |
| LOW⚡ | scripts/packer/windows-arm64.pkr.hcl | 119 | // Step 5: Sysprep — MUST be last provisioner | COMMENT |
| LOW | packages/bun-uws/src/HttpContext.h | 335 | /* First of all we need to check if this socket was deleted due to upgrade */ | COMMENT |
| LOW | packages/bun-uws/src/HttpContext.h | 440 | /* We need to check if we should close this socket here now */ | COMMENT |
| LOW | packages/bun-uws/src/HttpResponse.h | 156 | /* We need to check if we should close this socket here now */ | COMMENT |
| LOW | packages/bun-uws/src/HttpResponse.h | 222 | /* We need to check if we should close this socket here now */ | COMMENT |
| LOW | src/install/npm.rs | 1596 | // stability check - if the previous package is blocked from age, we need to check if the current packag | COMMENT |
| LOW | src/install/npm.rs | 1763 | // stability check - if the previous package is blocked from age, we need to check if the current package wa | COMMENT |
| LOW | src/js/internal/streams/readable.ts | 1076 | // We need to check if there is someone still listening to | COMMENT |
| LOW | src/js/internal/streams/readable.ts | 1095 | // We need to check if there is someone still listening to | COMMENT |
| LOW⚡ | src/js/internal/sql/shared.ts | 1609 | // Step 1: Determine the options object and initial URL | COMMENT |
| LOW | src/js/internal/sql/shared.ts | 1662 | // Step 3: Parse protocol and ensure URL format for non-SQLite databases | COMMENT |
| LOW⚡ | src/js/internal/sql/shared.ts | 1693 | // Step 4: Set adapter from environment if not already set, but ONLY if not | COMMENT |
| LOW⚡ | src/js/internal/sql/shared.ts | 1699 | // Step 5: Return early if adapter is explicitly specified | COMMENT |
| LOW | src/js/internal/sql/shared.ts | 1712 | // Step 6: Infer adapter from protocol | COMMENT |
| LOW | …react_compiler/inference/align_object_method_scopes.rs | 101 | // Step 1: Merge affected scopes to their canonical root. | COMMENT |
| LOW | …react_compiler/inference/align_object_method_scopes.rs | 148 | // Step 2: Repoint identifiers whose scopes were merged | COMMENT |
| LOW⚡ | …mpiler/inference/build_reactive_scope_terminals_hir.rs | 266 | // Step 1: Collect rewrites | COMMENT |
| LOW⚡ | …mpiler/inference/build_reactive_scope_terminals_hir.rs | 269 | // Step 2: Apply rewrites by splitting blocks | COMMENT |
| LOW | …mpiler/inference/build_reactive_scope_terminals_hir.rs | 333 | // Step 3: Repoint phis when they refer to a rewritten block | COMMENT |
| LOW⚡ | …mpiler/inference/build_reactive_scope_terminals_hir.rs | 353 | // Step 4: Fixup HIR to restore RPO, correct predecessors, renumber instructions | COMMENT |
| LOW⚡ | …mpiler/inference/build_reactive_scope_terminals_hir.rs | 358 | // Step 5: Fix scope and identifier ranges to account for renumbered instructions | COMMENT |
| LOW⚡ | …compiler/inference/propagate_scope_dependencies_hir.rs | 92 | // Step 2: Calculate hoistable dependencies using the tree. | COMMENT |
| LOW⚡ | …compiler/inference/propagate_scope_dependencies_hir.rs | 98 | // Step 3: Reduce dependencies to a minimal set. | COMMENT |
| LOW | …compiler/inference/propagate_scope_dependencies_hir.rs | 1028 | // Step 1: Collect identifier to function expression mappings | COMMENT |
| LOW | …compiler/inference/propagate_scope_dependencies_hir.rs | 1056 | // Step 2: Forward pass to analyze assumed function calls | COMMENT |
| LOW | …compiler/inference/propagate_scope_dependencies_hir.rs | 1129 | // Step 3: Propagate assumed-invoked status through mayInvoke chains | COMMENT |
| LOW | src/runtime/api/bun/js_bun_spawn_bindings.rs | 355 | // Since the event loop is recursively called, we need to check if it's safe to recurse. | COMMENT |
| LOW | src/runtime/valkey_jsc/js_valkey.rs | 1830 | // If we're disconnected, we need to check if we have any pending activity. | COMMENT |
| LOW | src/threading/channel.rs | 196 | // we need to check if the buffer is empty before trying to read an item. | COMMENT |
| LOW | src/jsc/bindings/NodeVM.cpp | 1473 | // Step 1: Argument validation | COMMENT |
| LOW | src/jsc/bindings/NodeVM.cpp | 1514 | // Step 3: Create a new function | COMMENT |
| LOW | src/jsc/bindings/BunHeapProfiler.cpp | 281 | // Step 1: Build post-order indexes via DFS from root (node 0) | COMMENT |
| LOW | src/jsc/bindings/BunHeapProfiler.cpp | 363 | // Step 2: Build dominator tree using Cooper-Harvey-Kennedy algorithm | COMMENT |
| LOW | src/jsc/bindings/BunHeapProfiler.cpp | 481 | // Step 3: Calculate retained sizes by attributing size up the dominator tree | COMMENT |
| LOW | src/bundler/linker_context/scanImportsAndExports.rs | 131 | // Step 1: Figure out what modules must be CommonJS | COMMENT |
| LOW | src/bundler/linker_context/scanImportsAndExports.rs | 291 | // Step 2: Propagate dynamic export status for export star statements that | COMMENT |
| LOW | src/bundler/linker_context/scanImportsAndExports.rs | 351 | // Step 3: Resolve "export * from" statements. This must be done after we | COMMENT |
| LOW | src/bundler/linker_context/scanImportsAndExports.rs | 405 | // Step 4: Match imports with exports. This must be done after we process all | COMMENT |
| LOW | src/bundler/linker_context/scanImportsAndExports.rs | 477 | // Step 5: Create namespace exports for every file. This is always necessary | COMMENT |
| LOW | src/bundler/linker_context/scanImportsAndExports.rs | 527 | // Step 6: Bind imports to exports. This adds non-local dependencies on the | COMMENT |
| LOW | src/bundler/linker_context/doStep5.rs | 30 | /// Step 5: Create namespace exports for every file. This is always necessary | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | test/js/sql/sql.test.ts | 667 | // Step 1: Insert a row (succeeds) | COMMENT |
| LOW⚡ | test/js/sql/sql.test.ts | 673 | // Step 2: Try to insert conflicting row (throws expected error) | COMMENT |
| LOW⚡ | test/js/sql/sql.test.ts | 682 | // Step 3: Try another query - THIS WILL HANG | COMMENT |
| LOW⚡ | test/regression/issue/tui-app-tty-pattern.test.ts | 25 | // Step 1: Check if stdin is piped | COMMENT |
| LOW⚡ | test/regression/issue/tui-app-tty-pattern.test.ts | 34 | // Step 2: After stdin EOF, try to reopen /dev/tty | COMMENT |
| LOW | test/bundler/bundler_compile.test.ts | 1018 | // Step 2: Run bun build with compile, minify, sourcemap, and bytecode | COMMENT |
| LOW⚡ | scripts/packer/windows-x64.pkr.hcl | 98 | // Step 1: Run bootstrap — installs all build dependencies | COMMENT |
| LOW⚡ | scripts/packer/windows-x64.pkr.hcl | 105 | // Step 2: Upload agent.mjs | COMMENT |
| LOW⚡ | scripts/packer/windows-x64.pkr.hcl | 111 | // Step 3: Install agent service via nssm | COMMENT |
| LOW⚡ | scripts/packer/windows-x64.pkr.hcl | 119 | // Step 4: Reboot to clear pending updates (VS Build Tools, Windows Updates) | COMMENT |
| LOW⚡ | scripts/packer/windows-x64.pkr.hcl | 124 | // Step 5: Sysprep — MUST be last provisioner | COMMENT |
| LOW⚡ | scripts/packer/windows-arm64.pkr.hcl | 93 | // Step 1: Run bootstrap — installs all build dependencies | COMMENT |
| LOW⚡ | scripts/packer/windows-arm64.pkr.hcl | 100 | // Step 2: Upload agent.mjs | COMMENT |
| LOW⚡ | scripts/packer/windows-arm64.pkr.hcl | 106 | // Step 3: Install agent service via nssm | COMMENT |
| LOW⚡ | scripts/packer/windows-arm64.pkr.hcl | 114 | // Step 4: Reboot to clear pending updates (VS Build Tools, Windows Updates) | COMMENT |
| LOW⚡ | scripts/packer/windows-arm64.pkr.hcl | 119 | // Step 5: Sysprep — MUST be last provisioner | COMMENT |
| LOW | packages/bun-lambda/README.md | 21 | ### Step 1: Create a Bun Lambda handler function | COMMENT |
| LOW | packages/bun-lambda/README.md | 58 | ### Step 2: Build the Bun handler | COMMENT |
| LOW | packages/bun-lambda/README.md | 65 | ### Step 3: Create the Lambda function on AWS | COMMENT |
| LOW⚡ | src/js/internal/sql/shared.ts | 1609 | // Step 1: Determine the options object and initial URL | COMMENT |
| LOW | src/js/internal/sql/shared.ts | 1662 | // Step 3: Parse protocol and ensure URL format for non-SQLite databases | COMMENT |
| LOW⚡ | src/js/internal/sql/shared.ts | 1693 | // Step 4: Set adapter from environment if not already set, but ONLY if not | COMMENT |
| LOW⚡ | src/js/internal/sql/shared.ts | 1699 | // Step 5: Return early if adapter is explicitly specified | COMMENT |
| LOW | src/js/internal/sql/shared.ts | 1712 | // Step 6: Infer adapter from protocol | COMMENT |
| LOW | …react_compiler/inference/align_object_method_scopes.rs | 101 | // Step 1: Merge affected scopes to their canonical root. | COMMENT |
| LOW | …react_compiler/inference/align_object_method_scopes.rs | 148 | // Step 2: Repoint identifiers whose scopes were merged | COMMENT |
| LOW⚡ | …mpiler/inference/build_reactive_scope_terminals_hir.rs | 266 | // Step 1: Collect rewrites | COMMENT |
| LOW⚡ | …mpiler/inference/build_reactive_scope_terminals_hir.rs | 269 | // Step 2: Apply rewrites by splitting blocks | COMMENT |
| LOW | …mpiler/inference/build_reactive_scope_terminals_hir.rs | 333 | // Step 3: Repoint phis when they refer to a rewritten block | COMMENT |
| LOW⚡ | …mpiler/inference/build_reactive_scope_terminals_hir.rs | 353 | // Step 4: Fixup HIR to restore RPO, correct predecessors, renumber instructions | COMMENT |
| LOW⚡ | …mpiler/inference/build_reactive_scope_terminals_hir.rs | 358 | // Step 5: Fix scope and identifier ranges to account for renumbered instructions | COMMENT |
| LOW⚡ | …compiler/inference/propagate_scope_dependencies_hir.rs | 92 | // Step 2: Calculate hoistable dependencies using the tree. | COMMENT |
| LOW⚡ | …compiler/inference/propagate_scope_dependencies_hir.rs | 98 | // Step 3: Reduce dependencies to a minimal set. | COMMENT |
| LOW | …compiler/inference/propagate_scope_dependencies_hir.rs | 1028 | // Step 1: Collect identifier to function expression mappings | COMMENT |
| LOW | …compiler/inference/propagate_scope_dependencies_hir.rs | 1056 | // Step 2: Forward pass to analyze assumed function calls | COMMENT |
| LOW | …compiler/inference/propagate_scope_dependencies_hir.rs | 1129 | // Step 3: Propagate assumed-invoked status through mayInvoke chains | COMMENT |
| LOW | src/jsc/bindings/NodeVM.cpp | 1473 | // Step 1: Argument validation | COMMENT |
| LOW | src/jsc/bindings/NodeVM.cpp | 1514 | // Step 3: Create a new function | COMMENT |
| LOW | src/jsc/bindings/BunHeapProfiler.cpp | 281 | // Step 1: Build post-order indexes via DFS from root (node 0) | COMMENT |
| LOW | src/jsc/bindings/BunHeapProfiler.cpp | 363 | // Step 2: Build dominator tree using Cooper-Harvey-Kennedy algorithm | COMMENT |
| LOW | src/jsc/bindings/BunHeapProfiler.cpp | 481 | // Step 3: Calculate retained sizes by attributing size up the dominator tree | COMMENT |
| LOW | src/bundler/linker_context/scanImportsAndExports.rs | 131 | // Step 1: Figure out what modules must be CommonJS | COMMENT |
| LOW | src/bundler/linker_context/scanImportsAndExports.rs | 291 | // Step 2: Propagate dynamic export status for export star statements that | COMMENT |
| LOW | src/bundler/linker_context/scanImportsAndExports.rs | 351 | // Step 3: Resolve "export * from" statements. This must be done after we | COMMENT |
| LOW | src/bundler/linker_context/scanImportsAndExports.rs | 405 | // Step 4: Match imports with exports. This must be done after we process all | COMMENT |
| LOW | src/bundler/linker_context/scanImportsAndExports.rs | 477 | // Step 5: Create namespace exports for every file. This is always necessary | COMMENT |
| LOW | src/bundler/linker_context/scanImportsAndExports.rs | 527 | // Step 6: Bind imports to exports. This adds non-local dependencies on the | COMMENT |
| LOW | src/bundler/linker_context/doStep5.rs | 30 | /// Step 5: Create namespace exports for every file. This is always necessary | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | bench/react-hello-world/react-hello-world.workerd.js | 16 | var iC=Object.create;var{getPrototypeOf:tC,defineProperty:XE,getOwnPropertyNames:JC}=Object;var VC=Object.prototype.hasO | CODE |
| MEDIUM | bench/react-hello-world/react-hello-world.workerd.js | 16 | var iC=Object.create;var{getPrototypeOf:tC,defineProperty:XE,getOwnPropertyNames:JC}=Object;var VC=Object.prototype.hasO | CODE |
| MEDIUM | bench/react-hello-world/react-hello-world.workerd.js | 42 | $RC=function(a,b){if(b=document.getElementById(b))(a=document.getElementById(a))?(a.previousSibling.data="$~",$RB.push(a | CODE |
| MEDIUM | bench/react-hello-world/react-hello-world.workerd.js | 42 | $RC=function(a,b){if(b=document.getElementById(b))(a=document.getElementById(a))?(a.previousSibling.data="$~",$RB.push(a | CODE |
| MEDIUM | test/js/web/structured-clone-blob-file.test.ts | 379 | // payload; keeps the test robust against wire-format header changes. | COMMENT |
| MEDIUM | test/js/web/structured-clone-blob-file.test.ts | 663 | // test stays robust against outer serializer framing changes. | COMMENT |
| MEDIUM | …/node/test/parallel/test-timers-unrefed-in-callback.js | 14 | // robust is that: | COMMENT |
| MEDIUM | …st/js/node/test/parallel/test-http2-session-timeout.js | 50 | // connection as the timeout should be robust. Double it anyway for good | COMMENT |
| MEDIUM | test/cli/install/registry/verdaccio.yaml | 3 | # please read carefully the documentation and best practices to | COMMENT |
| MEDIUM | test/cli/install/registry/verdaccio.yaml | 9 | # Read about the best practices | COMMENT |
| MEDIUM | scripts/bootstrap.sh | 1791 | # test/harness.ts getPuppeteerInstallEnv). | COMMENT |
| MEDIUM | packages/h3blast/src/h3blast.c | 790 | // Rewind and erase the previous frame in one shot — robust to wrapped lines. | COMMENT |
| MEDIUM⚡ | src/js/internal/http.ts | 149 | // TODO: make this more robust. | COMMENT |
| MEDIUM | src/js/node/http2.ts | 2375 | // seamless compatibility with http1 | COMMENT |
| MEDIUM | src/bun_core/env_var.rs | 13 | //! but environment variables are not meant to be a robust configuration mechanism. If you do think | COMMENT |
| MEDIUM | src/bun_core/env_var.rs | 460 | /// Note that deserialization errors cannot panic. If you need more robust means of | COMMENT |
| MEDIUM | src/react_compiler/Cargo.toml | 10 | # Fixture-harness support: test-only `// @pragma` parsing, the pragma-gated | COMMENT |
| MEDIUM | …c/react_compiler/optimization/dead_code_elimination.rs | 404 | // Definitely safe to prune since they are read-only | COMMENT |
| MEDIUM | src/runtime/shell/interpreter.rs | 7 | //! performance reasons and also to leverage Bun's existing IO/FS code | COMMENT |
| MEDIUM | src/runtime/allocators/LinuxMemFdAllocator.rs | 2 | //! leverage copy-on-write memory to avoid actually copying the data. To do that | COMMENT |
| MEDIUM | src/runtime/bake/FrameworkRouter.rs | 1273 | /// Fast enough for development to be seamless, but avoids building a | COMMENT |
| MEDIUM | src/runtime/bake/dev_server/source_map_store.rs | 381 | /// utilize the bottom 32 bits of their keys. This is because the bottom | COMMENT |
| MEDIUM | src/runtime/bake/bun-framework-react/server.tsx | 194 | // The RSC payload is provided so client-side can use this file for seamless | COMMENT |
| MEDIUM | src/runtime/socket/WindowsNamedPipe.rs | 6 | //! and Windows Named Pipe operations, enabling seamless cross-platform | COMMENT |
| MEDIUM | src/sys/windows/mod.rs | 1969 | /// The Kerberos protocol encountered an error while attempting to utilize the smartcard subsystem. | COMMENT |
| MEDIUM | src/ast/expr.rs | 3032 | break 'brk left; // Definitely not null or undefined | CODE |
| MEDIUM | src/ast/expr.rs | 3036 | break 'brk PrimitiveType::Mixed; // Definitely some kind of primitive | CODE |
| MEDIUM | src/crash_handler/lib.rs | 2052 | // https://github.com/go-delve/delve/pull/1384 | COMMENT |
| MEDIUM | src/jsc/bindings/js_classes.ts | 3 | // tests if a value is an instanceof a native class in a robust cross-realm manner | COMMENT |
| MEDIUM | src/jsc/bindings/ScriptExecutionContext.h | 86 | // used for things that utilize the same structure clone algorithm, for example, message passing between | COMMENT |
| MEDIUM | src/router/Cargo.toml | 40 | # Test harness (Test::make / Test::make_routes) needs the AST stores. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM⚡ | src/runtime/api.rs | 212 | // ─── shared scaffold for Bun.{TOML,JSONC,JSON5,YAML}.parse ─────────────────── | COMMENT |
| MEDIUM⚡ | src/runtime/api.rs | 217 | // (c) parse-error class + Expr→JS tail — so this helper owns ONLY the scaffold | COMMENT |
| MEDIUM | src/runtime/test_runner/expect.rs | 1728 | /// the matcher-scaffold family alongside [`Self::run_unary_predicate`] and | COMMENT |
| MEDIUM⚡ | src/runtime/test_runner/expect.rs | 1997 | // ─── unary-predicate matcher scaffold ──────────────────────────────────── | COMMENT |
| MEDIUM⚡ | src/runtime/test_runner/expect.rs | 2002 | /// Shared scaffold for zero-arg `expect(v).toBeX()` matchers whose pass/fail | COMMENT |
| MEDIUM | src/runtime/test_runner/expect.rs | 2030 | /// Shared scaffold for one-arg `expect(v).toStartWith/toEndWith/toInclude(expected)` | COMMENT |
| MEDIUM⚡ | src/runtime/timer/mod.rs | 34 | // Shared scaffold for `TimeoutObject` / `ImmediateObject`: both are a | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | test/js/bun/shell/bunshell.test.ts | 1740 | # Check if we got a non-empty, non-null version string | COMMENT |
| LOW | test/js/bun/yaml/translate_yaml_test_suite_to_bun.py | 83 | # Check if this is a stringified collection from yaml package | COMMENT |
| LOW | test/js/bun/yaml/translate_yaml_test_suite_to_bun.py | 168 | # Check if this is a simple object | COMMENT |
| LOW | test/js/bun/yaml/translate_yaml_test_suite_to_bun.py | 837 | # Check if it's in an array context | COMMENT |
| LOW | test/js/bun/yaml/translate_yaml_test_suite_to_bun.py | 841 | # Check if it's in mapping values (not keys) | COMMENT |
| LOW | test/js/bun/yaml/translate_yaml_test_suite_to_bun.py | 465 | # Check if this is an error test (has 'error' file) | STRING |
| LOW | test/js/bun/yaml/translate_yaml_test_suite_to_bun.py | 699 | # Check if YAML has anchors/aliases | STRING |
| LOW | test/js/bun/yaml/translate_yaml_test_suite_to_bun.py | 914 | # Check if yaml package is installed (for getting expected values) | STRING |
| LOW | test/js/bun/yaml/translate_yaml_test_suite_to_bun.py | 939 | # Check if this is a test directory (has in.yaml) | STRING |
| LOW | scripts/lldb-inline.sh | 11 | # Check if we need to rebuild | COMMENT |
| LOW | packages/bun-types/test.d.ts | 72 | * ## Set Date to a specific time | COMMENT |
| LOW | misctools/lldb/bun_pretty_printer.py | 75 | # Check if it's a pointer type and dereference if needed | COMMENT |
| LOW | misctools/lldb/bun_pretty_printer.py | 85 | # Check if it's 8-bit (latin1) or 16-bit (utf16) string | COMMENT |
| LOW | .buildkite/Dockerfile-bootstrap.sh | 4 | # Check if running as root | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | test/js/bun/yaml/translate_yaml_test_suite_to_bun.py | 87 | # Extract the content and convert to JS array.toString() format | COMMENT |
| HIGH | test/js/bun/yaml/translate_yaml_test_suite_to_bun.py | 104 | # JavaScript Object.toString() returns "[object Object]" | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | test/js/node/test/sequential/test-init.js | 52 | // test-init-index is in fixtures dir as requested by ry, so go there | COMMENT |
| HIGH | src/jsc/bindings/DecodeEscapeSequences.h | 172 | // Strings are encoded as requested. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | test/js/node/url/url-null-char.test.js | 6 | // TODO: Fix error properties | COMMENT |
| LOW | test/bake/dev/esm.test.ts | 260 | const esmImport = await import('./esm'); // TODO: implement sync ESM | CODE |
| LOW | src/js/thirdparty/ws.js | 1115 | // TODO: implement this more proper | COMMENT |
| LOW | src/runtime/cli/run_command.rs | 380 | let ipc_fd: Option<bun_sys::Fd> = None; // TODO: implement on Windows | CODE |
| LOW | src/runtime/bake/DevServer.rs | 2099 | // TODO: implement a proper solution here | COMMENT |
| LOW | src/runtime/bake/dev_server/mod.rs | 1403 | // TODO: implement that. for now it ignores (BUN-10968) | COMMENT |
| LOW | src/runtime/webcore/Blob.rs | 5191 | // TODO: implement a writev() fast path | COMMENT |
| LOW | src/codegen/replacements.ts | 111 | // TODO: implement this check. | COMMENT |
| LOW | src/ast/fold_string_addition.rs | 155 | // TODO: implement foldAdditionPreProcess to fold some more things :) | COMMENT |
| LOW | src/js_parser/lexer.rs | 2667 | // TODO: implement this | COMMENT |
| LOW | src/js_parser/parse/mod.rs | 929 | // TODO: implement saveExprCommentsHere and use using_loc here | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | test/js/bun/yaml/translate_yaml_test_suite_to_bun.py | 12 | CODE | |
| LOW | test/js/bun/yaml/translate_yaml_test_suite_to_bun.py | 59 | CODE | |
| LOW | test/js/bun/yaml/translate_yaml_test_suite_to_bun.py | 124 | CODE | |
| LOW | test/js/bun/yaml/translate_yaml_test_suite_to_bun.py | 197 | CODE | |
| LOW | test/js/bun/yaml/translate_yaml_test_suite_to_bun.py | 437 | CODE | |
| LOW | test/js/bun/yaml/translate_yaml_test_suite_to_bun.py | 899 | CODE | |
| LOW | misctools/lldb/lldb_webkit.py | 1179 | CODE | |
| LOW | misctools/lldb/bun_pretty_printer.py | 70 | CODE | |
| LOW | misctools/lldb/bun_pretty_printer.py | 167 | CODE | |
| LOW | misctools/lldb/bun_pretty_printer.py | 247 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | test/js/web/fetch/fixture.html | 1115 | bun implements Node.js' module resolution algorithm, so you can use npm packages in Bun. ESM and | CODE |
| LOW | test/js/bun/css/files/tachyons.css | 692 | 2. Don't forget to clearfix your floats with .cf | CODE |
| LOW | packages/bun-usockets/src/internal/internal.h | 101 | #define POLL_TYPE_BITSIZE 5 // make sure to update epoll_kqueue.h if you change this | COMMENT |
| LOW | packages/bun-usockets/src/internal/loop_data.h | 35 | // IMPORTANT: When changing this, don't forget to update the Rust mirror in src/uws_sys/InternalLoopData.rs as well! | COMMENT |
| LOW | src/sql_jsc/postgres/PostgresSQLConnection.rs | 2408 | // explicit use switch without else so if new modes are added, we don't forget to check for duplicate fi | COMMENT |
| LOW | src/jsc/bindings/sqlite/JSSQLStatement.cpp | 2357 | // Don't forget to reset before releasing the exception. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | src/zlib/lib.rs | 130 | /// In this implementation, inflate() always flushes as much output as possible to the output buffer, and always use | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | test/js/third_party/remix/remix-build/server/index.js | 8 | function handleRequest(request, responseStatusCode, responseHeaders, remixContext, loadContext) { | CODE |
| LOW | …st/js/node/test/parallel/test-http2-ip-address-host.js | 34 | function handleRequest(url) { | CODE |
| LOW | test/bake/dev/hot.test.ts | 70 | export function doSomething() { | CODE |
| LOW | test/bake/dev/server-sourcemap.test.ts | 125 | "lib/utils.ts": `export function doSomething() { | CODE |
| LOW | test/regression/issue/25648.test.ts | 15 | export function doSomething(fn: () => number) { | CODE |
| LOW | test/bundler/bundler_edgecase.test.ts | 2648 | export function getData() { | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | test/js/bun/yaml/translate_yaml_test_suite_to_bun.py | 929 | print("Error: yaml package is not installed. Please run: npm install yaml") | STRING |
| LOW | test/js/bun/yaml/translate_yaml_test_suite_to_bun.py | 431 | except Exception as e: | STRING |
| LOW | test/js/bun/yaml/translate_yaml_test_suite_to_bun.py | 1025 | except Exception as e: | STRING |
| LOW | test/js/bun/yaml/translate_yaml_test_suite_to_bun.py | 1072 | except Exception as e: | STRING |
| LOW | test/js/bun/yaml/translate_yaml_test_suite_to_bun.py | 1117 | except Exception as e: | STRING |
| LOW | misctools/lldb/bun_pretty_printer.py | 302 | except Exception as e: | CODE |
| MEDIUM | misctools/lldb/bun_pretty_printer.py | 43 | def bun_BabyList_SummaryProvider(value, _=None): | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | scripts/sync-react-compiler.sh | 14 | # Usage: | COMMENT |
| LOW | scripts/update-sqlite-amalgamation.sh | 8 | # Usage: | COMMENT |
| LOW | misctools/unicode-generator.ts | 119 | // Example usage: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | test/js/bun/yaml/translate_yaml_test_suite_to_bun.py | 384 | # Create a temporary JavaScript file to parse the YAML | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | test/js/bun/yaml/translate_yaml_test_suite_to_bun.py | 6 | CODE | |
| LOW | test/js/node/readline/run-with-pty.py | 5 | CODE | |
| LOW | misctools/lldb/bun_pretty_printer.py | 3 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | misctools/lldb/lldb_webkit.py | 648 | CODE |