Incredibly fast JavaScript runtime, bundler, test runner, and package manager – all in one
11171 matches across 18 categories. Click a row to expand file-level details.
| Severity | File | Line | Snippet |
|---|---|---|---|
| MEDIUM | Cargo.toml | 118 | # ─── Release optimization ─────────────────────────────────────────────────── |
| MEDIUM | test/js/web/fetch/fetch-http3-client.test.ts | 455 | // ───── streaming uploads (pull-driven request bodies) ───── |
| MEDIUM | test/js/web/fetch/fetch-http3-client.test.ts | 499 | // ───── bidirectional ───── |
| MEDIUM | test/js/web/fetch/fetch-http2-adversarial.test.ts | 32 | // ─── raw server with full preface control ──────────────────────────────────── |
| MEDIUM | test/js/web/fetch/fetch-http2-adversarial.test.ts | 106 | // ───────────────────────────────────────────────────────────────────────────── |
| MEDIUM | test/js/web/fetch/fetch-http2-adversarial.test.ts | 328 | // ─────────────────────────────────────────────────────────────────────────── |
| MEDIUM | test/js/web/fetch/fetch-http2-adversarial.test.ts | 330 | // ─────────────────────────────────────────────────────────────────────────── |
| MEDIUM | test/js/web/fetch/fetch-http2-adversarial.test.ts | 441 | // ─── session-key regressions ───────────────────────────────────────────────── |
| MEDIUM | test/js/bun/terminal/terminal-platform-gaps.test.ts | 71 | // ────────────────────────────────────────────────────────────────────────── |
| MEDIUM | test/js/bun/terminal/terminal-platform-gaps.test.ts | 73 | // ────────────────────────────────────────────────────────────────────────── |
| MEDIUM | test/js/bun/terminal/terminal-platform-gaps.test.ts | 123 | // ────────────────────────────────────────────────────────────────────────── |
| MEDIUM | test/js/bun/terminal/terminal-platform-gaps.test.ts | 125 | // ────────────────────────────────────────────────────────────────────────── |
| MEDIUM | test/js/bun/terminal/terminal-platform-gaps.test.ts | 149 | // ────────────────────────────────────────────────────────────────────────── |
| MEDIUM | test/js/bun/terminal/terminal-platform-gaps.test.ts | 151 | // ────────────────────────────────────────────────────────────────────────── |
| MEDIUM | test/js/bun/terminal/terminal-platform-gaps.test.ts | 198 | // ────────────────────────────────────────────────────────────────────────── |
| MEDIUM | test/js/bun/terminal/terminal-platform-gaps.test.ts | 200 | // ────────────────────────────────────────────────────────────────────────── |
| MEDIUM | test/js/bun/terminal/terminal-platform-gaps.test.ts | 250 | // ────────────────────────────────────────────────────────────────────────── |
| MEDIUM | test/js/bun/terminal/terminal-platform-gaps.test.ts | 252 | // ────────────────────────────────────────────────────────────────────────── |
| MEDIUM | test/js/bun/terminal/terminal-platform-gaps.test.ts | 300 | // ────────────────────────────────────────────────────────────────────────── |
| MEDIUM | test/js/bun/terminal/terminal-platform-gaps.test.ts | 302 | // ────────────────────────────────────────────────────────────────────────── |
| MEDIUM | test/js/bun/image/image-adversarial.test.ts | 27 | // this file should be runnable standalone) ──────────────────────────────── |
| MEDIUM | test/js/bun/image/image-adversarial.test.ts | 146 | // ─── 1. format confusion / lying magic bytes ───────────────────────────────── |
| MEDIUM | test/js/bun/image/image-adversarial.test.ts | 181 | // ─── 2. truncation at every boundary ───────────────────────────────────────── |
| MEDIUM | test/js/bun/image/image-adversarial.test.ts | 310 | // ─── 3. lying / overflowing header fields ──────────────────────────────────── |
| MEDIUM | test/js/bun/image/image-adversarial.test.ts | 389 | // ─── 4. malformed PNG chunk structure ──────────────────────────────────────── |
| MEDIUM | test/js/bun/image/image-adversarial.test.ts | 435 | // ─── 5. malformed JPEG / EXIF ──────────────────────────────────────────────── |
| MEDIUM | test/js/bun/image/image-adversarial.test.ts | 471 | // ─── 6. lossless roundtrip parity ──────────────────────────────────────────── |
| MEDIUM | test/js/bun/image/image-adversarial.test.ts | 535 | // ─── 7. memory hygiene under repetition ────────────────────────────────────── |
| MEDIUM | test/js/bun/image/image-adversarial.test.ts | 590 | // ─── 8. hostile JS option objects ──────────────────────────────────────────── |
| MEDIUM | test/js/bun/image/image-adversarial.test.ts | 709 | // ─── 9. concurrency / re-use ───────────────────────────────────────────────── |
| MEDIUM | test/js/bun/image/image-adversarial.test.ts | 744 | // ─── 10. random-byte fuzz (cheap, bounded) ─────────────────────────────────── |
| MEDIUM | test/js/bun/image/image-kernels.test.ts | 10 | // ─── plumbing (PNG build/read; same shape as image.test.ts) ───────────────── |
| MEDIUM | test/js/bun/image/image-kernels.test.ts | 110 | // ─── resize filters ───────────────────────────────────────────────────────── |
| MEDIUM | test/js/bun/image/image-kernels.test.ts | 233 | // ─── Floyd–Steinberg dither ───────────────────────────────────────────────── |
| MEDIUM | test/js/bun/image/image-vs-sharp.test.ts | 34 | // failure modes; small so the fixture stays a few-hundred KB) ──────────── |
| MEDIUM | test/js/bun/image/image-vs-sharp.test.ts | 73 | // ─── PNG plumbing (same hand-roller as the other suites) ──────────────────── |
| MEDIUM | test/js/bun/image/image-vs-sharp.test.ts | 165 | // back, in the same iteration order the test uses. ───────────────────────── |
| MEDIUM | test/js/bun/image/image.test.ts | 6 | // ─── Fixture builders ─────────────────────────────────────────────────────── |
| MEDIUM | test/js/bun/image/image.test.ts | 142 | // ─── Tests ────────────────────────────────────────────────────────────────── |
| MEDIUM | test/js/bun/image/image.test.ts | 1218 | // ── LZW pack ────────────────────────────────────────────────────────── |
| MEDIUM | test/js/bun/image/image.test.ts | 1266 | // ── container ───────────────────────────────────────────────────────── |
| MEDIUM | test/js/bun/yaml/yaml.test.ts | 1670 | // ── Nesting depth / structural variation ────────────────────────── |
| MEDIUM | test/cli/run/multi-run.test.ts | 46 | // ─── PARALLEL: BASIC ────────────────────────────────────────────────────────── |
| MEDIUM | test/cli/run/multi-run.test.ts | 110 | // ─── PARALLEL: FILE SCRIPTS ─────────────────────────────────────────────────── |
| MEDIUM | test/cli/run/multi-run.test.ts | 158 | // ─── PARALLEL: ERROR HANDLING ───────────────────────────────────────────────── |
| MEDIUM | test/cli/run/multi-run.test.ts | 243 | // ─── PARALLEL: OUTPUT FORMATTING ────────────────────────────────────────────── |
| MEDIUM | test/cli/run/multi-run.test.ts | 406 | // ─── STDOUT / STDERR SEPARATION ────────────────────────────────────────────── |
| MEDIUM | test/cli/run/multi-run.test.ts | 467 | // ─── SEQUENTIAL: BASIC ─────────────────────────────────────────────────────── |
| MEDIUM | test/cli/run/multi-run.test.ts | 566 | // ─── PRE/POST SCRIPTS ──────────────────────────────────────────────────────── |
| MEDIUM | test/cli/run/multi-run.test.ts | 742 | // ─── VALIDATION & ERROR MESSAGES ────────────────────────────────────────────── |
| MEDIUM | test/cli/run/multi-run.test.ts | 780 | // ─── MIXED STDOUT / STDERR ──────────────────────────────────────────────────── |
| MEDIUM | test/cli/run/multi-run.test.ts | 813 | // ─── SCRIPTS WITH SHELL FEATURES ────────────────────────────────────────────── |
| MEDIUM | test/cli/run/multi-run.test.ts | 871 | // ─── SCRIPT NAMES WITH SPECIAL CHARACTERS ───────────────────────────────────── |
| MEDIUM | test/cli/run/multi-run.test.ts | 920 | // ─── RAPID EXIT / TIMING ───────────────────────────────────────────────────── |
| MEDIUM | test/cli/run/multi-run.test.ts | 963 | // ─── EXIT CODE PROPAGATION ─────────────────────────────────────────────────── |
| MEDIUM | test/cli/run/multi-run.test.ts | 1012 | // ─── CWD / WORKING DIRECTORY ──────────────────────────────────────────────── |
| MEDIUM | test/cli/run/multi-run.test.ts | 1034 | // ─── EXPLICIT RUN COMMAND ─────────────────────────────────────────────────── |
| MEDIUM | test/cli/run/multi-run.test.ts | 1053 | // ─── LARGE OUTPUT / STRESS ────────────────────────────────────────────────── |
| MEDIUM | test/cli/run/multi-run.test.ts | 1087 | // ─── RAW COMMANDS (NOT IN PACKAGE.JSON) ───────────────────────────────────── |
| MEDIUM | test/cli/run/multi-run.test.ts | 1124 | // ─── SEQUENTIAL: SIDE EFFECTS ORDERING ────────────────────────────────────── |
| 3997 more matches not shown… | |||
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | Cargo.toml | 121 | # CGUs ≈ 1680 separately-optimized units with NO cross-crate inlining beyond |
| LOW | Cargo.toml | 161 | strip = "none" |
| LOW | Cargo.toml | 181 | strip = "symbols" |
| LOW | rustfmt.toml | 1 | # rustfmt config for the Cargo workspace. Formatting is the toolchain default |
| LOW | bunfig.toml | 1 | [test] |
| LOW | rust-toolchain.toml | 1 | [toolchain] |
| LOW | bench/snippets/buffer.js | 21 | // time("DataView.getBigInt64 (BE)", () => view.getBigInt64(0, false)); |
| LOW | bench/snippets/buffer.js | 41 | time("Buffer.readFloatLE ", () => buf.readFloatLE(0)); |
| LOW | bench/snippets/buffer.js | 61 | // console.log(""); |
| LOW | bench/snippets/buffer.js | 81 | time("Buffer.writeBigUInt64BE", () => buf.writeBigUInt64BE(BigInt(0), 0)); |
| LOW | bench/snippets/buffer.js | 101 | // console.log(""); |
| LOW | bench/snippets/deep-equals.js | 341 | // get foo() { |
| LOW | bench/install/next-env.d.ts | 1 | /// <reference types="next" /> |
| LOW | test/v8/v8-module/main.cpp | 1 | #include <node.h> |
| LOW | test/v8/v8-module/main.cpp | 441 | } |
| LOW | test/snippets/lodash-regexp.js | 21 | // export function test() { |
| LOW | test/js/workerd/html-rewriter-leak.test.ts | 1 | import { expect, test } from "bun:test"; |
| LOW | test/js/web/structured-clone-blob-file.test.ts | 361 | }); |
| LOW | …/js/web/abort/abort-signal-event-listener-leak.test.ts | 1 | import { estimateShallowMemoryUsageOf } from "bun:jsc"; |
| LOW | …bsocket/websocket-proxy-tunnel-upgrade-leak-fixture.ts | 1 | // Repro for HTTPUpgradeClient leak on wss:// through an HTTP CONNECT proxy |
| LOW | …b/websocket/websocket-proxy-tunnel-client-leak.test.ts | 1 | import { expect, test } from "bun:test"; |
| LOW | test/js/web/websocket/websocket-utf16-headers.test.ts | 1 | // Regression test for WebSocket upgrade request crash on non-ASCII inputs. |
| LOW | …ebsocket/websocket-proxy-tunnel-client-leak-fixture.ts | 1 | // Repro for NewWebSocketClient(false) leak on wss:// through an HTTP CONNECT |
| LOW | test/js/web/intl/intl.test.ts | 1 | // ECMA-402 Intl coverage. Doubles as the regression net for the per-item zstd |
| LOW | test/js/web/intl/intl.test.ts | 241 | // --------------------------------------------------------------------------- |
| LOW | test/js/web/timers/timers-fixture-unref.js | 81 | // See https://github.com/nodejs/node/issues/9561 |
| LOW | …t/js/web/html/FormData-multipart-serialization.test.ts | 101 | expect(new Uint8Array(await payload.arrayBuffer())).toEqual(bytes); |
| LOW | test/js/web/html/FormData-file-error-leak.test.ts | 1 | import { expect, test } from "bun:test"; |
| LOW | test/js/web/html/FormData-file-error-leak-fixture.ts | 1 | // Fixture for FormData → multipart body memory leak on readFile failure. |
| LOW | …/js/web/broadcastchannel/message-event-init-gc.test.ts | 1 | import { expect, test } from "bun:test"; |
| LOW | …b/broadcastchannel/broadcast-channel-worker-gc.test.ts | 101 | ); |
| LOW | test/js/web/fetch/http-chunked-server.c | 1 | // Simple HTTP server that reproduces a streaming response body bug. |
| LOW | test/js/web/fetch/fetch-tcp-keepalive.test.ts | 1 | // Verifies that fetch() enables TCP keepalive (SO_KEEPALIVE + TCP_KEEPIDLE) |
| LOW | test/js/web/fetch/fetch-tcp-keepalive.test.ts | 41 | // Parse /proc/self/net/tcp: find ESTABLISHED (state 01) socket with |
| LOW | …st/js/web/fetch/fetch-proxy-tls-intern-race-fixture.ts | 1 | // Subprocess fixture for fetch-proxy-tls-intern-race.test.ts. |
| LOW | test/js/web/fetch/fetch-abort-queued.test.ts | 1 | // When `active_requests_count >= max_simultaneous_requests`, new fetch() |
| LOW | test/js/web/fetch/blob.test.ts | 261 | }); |
| LOW | test/js/web/fetch/fetch-http3-client.test.ts | 341 | |
| LOW | test/js/web/fetch/headers.test.ts | 581 | |
| LOW | test/js/web/fetch/fetch-http3-adversarial.test.ts | 221 | } |
| LOW | test/js/web/fetch/wasm-streaming.test.ts | 21 | // (module |
| LOW | test/js/web/fetch/fetch-stream-cancel-leak.test.ts | 1 | import { heapStats } from "bun:jsc"; |
| LOW | test/js/web/fetch/fetch-redirect.test.ts | 101 | // (~21 MiB each). Without it, allocator growth plateaus after warmup so |
| LOW | test/js/web/fetch/fetch-leak.test.ts | 301 | }); |
| LOW | test/js/web/fetch/fetch-proxy-tls-intern-race.test.ts | 1 | // Regression test: SSLConfig intern/deref race (UAF) — see PR #27838, #27863 |
| LOW | test/js/web/fetch/fetch.test.ts | 2181 | |
| LOW | test/js/web/fetch/cookies.test.ts | 61 | // "content-type": "text/plain; charset=utf-8", |
| LOW | test/js/web/fetch/cookies.test.ts | 81 | // dispatcher: client, |
| LOW | test/js/web/workers/worker-postmessage-transfer.test.ts | 1 | // Worker-side self.postMessage(message, transfer) overload resolution. |
| LOW | test/js/web/workers/performance-observer-leak.test.ts | 1 | import { expect, test } from "bun:test"; |
| LOW | …/web/workers/message-port-context-destroy-leak.test.ts | 1 | import { expect, test } from "bun:test"; |
| LOW | test/js/valkey/test-utils.ts | 401 | |
| LOW | test/js/valkey/test-utils.ts | 421 | // await context.redisReadOnly.send("PING", []); |
| LOW | test/js/valkey/reliability/recovery.test.ts | 1 | import { RedisClient } from "bun"; |
| LOW | test/js/valkey/reliability/recovery.test.ts | 41 | // closes, the client moves to disconnected, and `flags.failed` is |
| LOW | test/js/first_party/undici/undici.test.ts | 141 | const json = (await body.json()) as { headers: { "x-foo": string } }; |
| LOW | test/js/bun/symbols.test.ts | 81 | To fix this, figure out which C math symbol is being used that causes it, and wrap it in workaround-missing-symbols.cpp. |
| LOW | test/js/bun/empty-file.test.ts | 1 | // See https://github.com/oven-sh/bun/pull/7695 |
| LOW | test/js/bun/crypto/wpt-webcrypto.generateKey.test.ts | 21 | run_test_failure([name]); |
| LOW | test/js/bun/crypto/cipheriv-decipheriv.test.ts | 141 | ciphertext: "8497dba3f7f3252e7f5f3cf2c49c5e16cd83da98a942532537a77283afb875ec5a865020ced4242615edb7ec2eaf7e6c", |
| 6198 more matches not shown… | |||
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | test/harness.ts | 215 | export function makeTreeSyncFromDirectoryTree(base: string, tree: DirectoryTree) { |
| LOW | test/harness.ts | 369 | export function randomInvalidSurrogatePair() { |
| LOW | test/harness.ts | 1049 | function failTestsOnBlockingWriteCall() { |
| LOW | test/harness.ts | 1523 | export function fileDescriptorLeakChecker() { |
| LOW | test/_util/numeric.ts | 93 | export function computePearsonCorrelation(xs: number[], ys: number[]): number { |
| LOW | test/_util/numeric.ts | 160 | export function computeAverageAbsoluteDeviation(xs: number[]): number { |
| LOW | test/js/deno/crypto/random.test.ts | 51 | test(function getRandomValuesReturnValue() { |
| LOW | test/js/deno/crypto/webcrypto.test.ts | 506 | test(async function subtleCryptoHmacImportExport() { |
| LOW | test/js/deno/crypto/webcrypto.test.ts | 755 | test(async function testHkdfDeriveBitsWithLargeKeySize() { |
| LOW | test/js/deno/crypto/webcrypto.test.ts | 768 | test(async function testEcdhDeriveBitsWithShorterLength() { |
| LOW | test/js/deno/crypto/webcrypto.test.ts | 782 | test(async function testEcdhDeriveBitsWithLongerLength() { |
| LOW | test/js/deno/crypto/webcrypto.test.ts | 795 | test(async function testEcdhDeriveBitsWithNullLength() { |
| LOW | test/js/deno/crypto/webcrypto.test.ts | 1063 | test(async function testDecryptWithInvalidIntializationVector() { |
| LOW | test/js/deno/crypto/webcrypto.test.ts | 2559 | test(async function ecPrivateKeyMaterialExportSpki() { |
| LOW | test/js/deno/crypto/webcrypto.test.ts | 2603 | test(async function testImportLeadingZeroesKey() { |
| LOW | test/js/deno/abort/abort-controller.test.ts | 52 | test(function controllerHasProperToString() { |
| LOW | test/js/deno/encoding/encoding.test.ts | 285 | test(function toStringShouldBeWebCompatibility() { |
| LOW | test/js/deno/encoding/encoding.test.ts | 291 | test(function textEncoderShouldCoerceToString() { |
| LOW | test/js/deno/url/urlsearchparams.test.ts | 6 | test(function urlSearchParamsWithMultipleSpaces() { |
| LOW | test/js/deno/url/urlsearchparams.test.ts | 13 | test(function urlSearchParamsWithExclamation() { |
| LOW | test/js/deno/url/urlsearchparams.test.ts | 23 | test(function urlSearchParamsWithQuotes() { |
| LOW | test/js/deno/url/urlsearchparams.test.ts | 33 | test(function urlSearchParamsWithBraket() { |
| LOW | test/js/deno/url/urlsearchparams.test.ts | 53 | test(function urlSearchParamsInitString() { |
| LOW | test/js/deno/url/urlsearchparams.test.ts | 58 | test(function urlSearchParamsInitStringWithPlusCharacter() { |
| LOW | test/js/deno/url/urlsearchparams.test.ts | 66 | test(function urlSearchParamsInitStringWithMalformedParams() { |
| LOW | test/js/deno/url/urlsearchparams.test.ts | 114 | test(function urlSearchParamsAppendSuccess() { |
| LOW | test/js/deno/url/urlsearchparams.test.ts | 119 | test(function urlSearchParamsDeleteSuccess() { |
| LOW | test/js/deno/url/urlsearchparams.test.ts | 125 | test(function urlSearchParamsGetAllSuccess() { |
| LOW | test/js/deno/url/urlsearchparams.test.ts | 137 | test(function urlSearchParamsGetSuccess() { |
| LOW | test/js/deno/url/urlsearchparams.test.ts | 144 | test(function urlSearchParamsHasSuccess() { |
| LOW | test/js/deno/url/urlsearchparams.test.ts | 151 | test(function urlSearchParamsSetReplaceFirstAndRemoveOthers() { |
| LOW | test/js/deno/url/urlsearchparams.test.ts | 157 | test(function urlSearchParamsSetAppendNew() { |
| LOW | test/js/deno/url/urlsearchparams.test.ts | 163 | test(function urlSearchParamsSortSuccess() { |
| LOW | test/js/deno/url/urlsearchparams.test.ts | 169 | test(function urlSearchParamsForEachSuccess() { |
| LOW | test/js/deno/url/urlsearchparams.test.ts | 190 | test(function urlSearchParamsMissingName() { |
| LOW | test/js/deno/url/urlsearchparams.test.ts | 196 | test(function urlSearchParamsMissingValue() { |
| LOW | test/js/deno/url/urlsearchparams.test.ts | 202 | test(function urlSearchParamsMissingEqualSign() { |
| LOW | test/js/deno/url/urlsearchparams.test.ts | 208 | test(function urlSearchParamsMissingPair() { |
| LOW | test/js/deno/url/urlsearchparams.test.ts | 213 | test(function urlSearchParamsForShortEncodedChar() { |
| LOW | test/js/deno/url/urlsearchparams.test.ts | 221 | test(function urlSearchParamsShouldThrowTypeError() { |
| LOW | test/js/deno/url/urlsearchparams.test.ts | 86 | test(function urlSearchParamsInitIterable() { |
| LOW | test/js/deno/url/urlsearchparams.test.ts | 100 | test(function urlSearchParamsInitRecord() { |
| LOW | test/js/deno/url/urlsearchparams.test.ts | 256 | test(function urlSearchParamsAppendArgumentsCheck() { |
| LOW | test/js/deno/url/urlsearchparams.test.ts | 299 | test(function urlSearchParamsDeletingAppendedMultiple() { |
| LOW | test/js/deno/url/urlsearchparams.test.ts | 311 | test(function urlSearchParamsCustomSymbolIterator() { |
| LOW | test/js/deno/url/urlsearchparams.test.ts | 322 | test(function urlSearchParamsCustomSymbolIteratorWithNonStringParams() { |
| LOW | test/js/deno/url/urlsearchparams.test.ts | 333 | test(function urlSearchParamsOverridingAppendNotChangeConstructorAndSet() { |
| LOW | test/js/deno/url/urlsearchparams.test.ts | 354 | test(function urlSearchParamsOverridingEntriesNotChangeForEach() { |
| LOW | test/js/deno/url/url.test.ts | 267 | test(function deletingAllParamsRemovesQuestionMarkFromURL() { |
| LOW | test/js/deno/url/url.test.ts | 274 | test(function removingNonExistentParamRemovesQuestionMarkFromURL() { |
| LOW | test/js/deno/url/url.test.ts | 281 | test(function sortingNonExistentParamRemovesQuestionMarkFromURL() { |
| LOW | test/js/deno/url/url.test.ts | 294 | test(function throwForInvalidPortConstructor() { |
| LOW | test/js/deno/url/url.test.ts | 308 | test(function doNotOverridePortIfInvalid() { |
| LOW | test/js/deno/url/url.test.ts | 314 | test(function emptyPortForSchemeDefaultPort() { |
| LOW | test/js/deno/url/url.test.ts | 333 | test(function assigningPortPropertyAffectsReceiverOnly() { |
| LOW | test/js/deno/url/url.test.ts | 340 | test(function urlSearchParamsIdentityPreserved() { |
| LOW | test/js/deno/url/url.test.ts | 347 | test(function urlTakeURLObjectAsParameter() { |
| LOW | test/js/deno/fetch/blob.test.ts | 111 | test(function blobConstructorNameIsBlob() { |
| LOW | test/js/deno/fetch/blob.test.ts | 115 | test.ignore(function blobCustomInspectFunction() { |
| LOW | test/js/deno/fetch/headers.test.ts | 7 | test(function headersHasCorrectNameProp() { |
| 517 more matches not shown… | |||
| Severity | File | Line | Snippet |
|---|---|---|---|
| CRITICAL | src/install/PackageManager/runTasks.rs | 1117 | task.request.local_tarball.tarball.url.slice() |
| CRITICAL | src/install/PackageManager/security_scanner.rs | 176 | let string_buf = self.manager.lockfile.buffers.string_bytes.as_slice(); |
| CRITICAL | src/install/PackageManager/security_scanner.rs | 207 | let string_buf = self.manager.lockfile.buffers.string_bytes.as_slice(); |
| CRITICAL | src/install/PackageManager/security_scanner.rs | 731 | let string_buf = self.manager.lockfile.buffers.string_bytes.as_slice(); |
| CRITICAL | src/js_printer/lib.rs | 8482 | // TODO(port): printer.source_map_builder.source_map.ctx.data.deinit() — Drop handles. |
| CRITICAL | src/runtime/cli/publish_command.rs | 920 | bstr::BStr::new(if !ctx.manager.options.publish_config.tag.is_empty() { |
| CRITICAL | src/runtime/cli/publish_command.rs | 952 | if !ctx.manager.options.publish_config.otp.is_empty() { |
| CRITICAL | src/runtime/cli/publish_command.rs | 2046 | let tag: &[u8] = if !ctx.manager.options.publish_config.tag.is_empty() { |
| CRITICAL | src/runtime/api/JSTranspiler.rs | 385 | let Ok(Some(json)) = vm.transpiler.resolver.caches.json.parse_json( |
| CRITICAL | src/runtime/api/bun/subprocess/Writable.rs | 325 | // Zig: `pipe.writer.handle.poll.flags.insert(.socket);` |
| CRITICAL | src/sys/windows/mod.rs | 4658 | // TODO(port): comptime bun.assert(builtin.target.os.version_range.windows.min.isAtLeast(.win10_rs5)); |
| CRITICAL | src/sys/windows/mod.rs | 4704 | // TODO(port): comptime bun.assert(builtin.target.os.version_range.windows.min.isAtLeast(.win10_rs5)); |
| CRITICAL | src/js_parser/visit/visit_stmt.rs | 1174 | let new_len = if !(data.is_export && p.options.features.replace_exports.entries.len() > 0) { |
| CRITICAL | src/jsc/AsyncModule.rs | 870 | // result.version.value.npm.version.isExact()`. The Rust |
| Severity | File | Line | Snippet |
|---|---|---|---|
| HIGH | test/js/bun/test/printing/diffexample.fixture.ts | 228 | print("Hello, world!"); |
| HIGH | test/js/bun/test/printing/diffexample.fixture.ts | 229 | print("Goodbye, world!"); |
| HIGH | test/js/bun/test/printing/diffexample.fixture.ts | 233 | print("Hello, world!"); |
| HIGH | test/js/bun/test/printing/diffexample.fixture.ts | 234 | print("Goodbye, world!"); |
| HIGH | test/js/bun/shell/bunshell.test.ts | 2069 | elif echo baz;then echo qux;fi` |
| HIGH | test/bundler/bundler_jsx.test.ts | 151 | print(<div>Hello World</div>) |
| HIGH | test/bundler/bundler_jsx.test.ts | 152 | print(<div className="container"><Component prop={2}><h1 onClick={() => 1}>hello</h1></Component></div>) |
| HIGH | test/bundler/bundler_jsx.test.ts | 173 | print(<div>Hello World</div>) |
| HIGH | test/bundler/bundler_jsx.test.ts | 174 | print(<div className="container"><Component prop={2}><h1 onClick={() => 1}>hello</h1></Component></div>) |
| HIGH | test/bundler/bundler_jsx.test.ts | 175 | print(<>Fragment</>) |
| HIGH | test/bundler/bundler_jsx.test.ts | 196 | print([typeof F, typeof el]) |
| HIGH | test/bundler/bundler_jsx.test.ts | 209 | print([<div props={123}>Hello World</div>, <>Fragment</>]) |
| HIGH | test/bundler/bundler_jsx.test.ts | 230 | print([<div props={123}>Hello World</div>, <>Fragment</>]) |
| HIGH | test/bundler/bundler_jsx.test.ts | 252 | print([<div props={123}>Hello World</div>, <>Fragment</>]) |
| HIGH | test/bundler/bundler_jsx.test.ts | 281 | print(['classic.jsx',<div props={123}>Hello World</div>, <>Fragment</>]) |
| HIGH | test/bundler/bundler_jsx.test.ts | 289 | print(['classic-renamed.jsx',<div props={123}>Hello World</div>, <>Fragment</>]) |
| HIGH | test/bundler/bundler_jsx.test.ts | 293 | print(['automatic.jsx',<div props={123}>Hello World</div>, process.env.NODE_ENV === 'production' ? '' : <>Fragme |
| HIGH | test/bundler/bundler_jsx.test.ts | 298 | print(['automatic-source2.jsx',<div props={123}>Hello World</div>, <>Fragment</>]) |
| HIGH | test/bundler/bundler_jsx.test.ts | 324 | print([<div props={123}>Hello World</div>, <>Fragment</>]) |
| HIGH | test/bundler/bundler_jsx.test.ts | 346 | print([<div props={123}>Hello World</div>, <>Fragment</>]) |
| HIGH | test/bundler/bundler_jsx.test.ts | 374 | print([<div props={123}>Hello World</div>, <>Fragment</>]) |
| HIGH | test/bundler/bundler_jsx.test.ts | 394 | print([<div props={123}>Hello World</div>, <>Fragment</>]) |
| HIGH | scripts/glob-sources.ts | 196 | print(sources[arg as keyof Sources]); |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | bench/snippets/buffer-includes.js | 2 | "Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna a |
| LOW | bench/snippets/buffer-includes.js | 2 | "Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna a |
| LOW | bench/snippets/_fixture.txt | 1191 | <td id="LC98" class="blob-code blob-code-inner js-file-line"><span class="pl-s"> Lorem ipsum dolor sit amet, |
| LOW | bench/snippets/_fixture.txt | 1191 | <td id="LC98" class="blob-code blob-code-inner js-file-line"><span class="pl-s"> Lorem ipsum dolor sit amet, |
| LOW | bench/snippets/_fixture.txt | 1339 | <td id="LC135" class="blob-code blob-code-inner js-file-line"> let string_long_escaped = "\n Lorem ip |
| LOW | bench/snippets/_fixture.txt | 1339 | <td id="LC135" class="blob-code blob-code-inner js-file-line"> let string_long_escaped = "\n Lorem ip |
| LOW | bench/snippets/_fixture.txt | 1343 | <td id="LC136" class="blob-code blob-code-inner js-file-line"> <span class="pl-k">let</span> string_short <sp |
| LOW | bench/snippets/_fixture.txt | 1343 | <td id="LC136" class="blob-code blob-code-inner js-file-line"> <span class="pl-k">let</span> string_short <sp |
| LOW | bench/snippets/_fixture.txt | 1351 | <td id="LC138" class="blob-code blob-code-inner js-file-line"> <span class="pl-s">"Lorem ipsum dolor |
| LOW | bench/snippets/_fixture.txt | 1351 | <td id="LC138" class="blob-code blob-code-inner js-file-line"> <span class="pl-s">"Lorem ipsum dolor |
| LOW | bench/snippets/_fixture.txt | 1355 | <td id="LC139" class="blob-code blob-code-inner js-file-line"> <span class="pl-k">let</span> no_escape <span |
| LOW | bench/snippets/_fixture.txt | 1355 | <td id="LC139" class="blob-code blob-code-inner js-file-line"> <span class="pl-k">let</span> no_escape <span |
| LOW | bench/snippets/_fixture.txt | 1363 | <td id="LC141" class="blob-code blob-code-inner js-file-line"><span class="pl-s">Lorem ipsum dolor sit amet, con |
| LOW | bench/snippets/_fixture.txt | 1363 | <td id="LC141" class="blob-code blob-code-inner js-file-line"><span class="pl-s">Lorem ipsum dolor sit amet, con |
| LOW | test/js/workerd/html-rewriter.test.js | 490 | .transform(new Response("<p>Lorem ipsum!</p>")) |
| LOW | test/js/workerd/html-rewriter.test.js | 505 | .transform(new Response("<p>Lorem ipsum!<br></p><div />")) |
| LOW | test/js/workerd/html-rewriter.test.js | 523 | .transform(new Response("<p>Lorem ipsum!<br></p><div /><svg><circle /></svg>")) |
| LOW | test/js/valkey/integration/complex-operations.test.ts | 191 | await ctx.redis.set(`${baseKey}:name`, "John Doe"); |
| LOW | test/js/valkey/integration/complex-operations.test.ts | 219 | expect(nameValue).toBe("John Doe"); |
| LOW | test/js/bun/test/expect.test.js | 3939 | expect(`Lorem ipsum dolor sit amet, consectetur adipiscing elit. Donec nec posuere felis. Aliquam tincidunt elit a n |
| LOW | test/js/bun/test/expect.test.js | 3939 | expect(`Lorem ipsum dolor sit amet, consectetur adipiscing elit. Donec nec posuere felis. Aliquam tincidunt elit a n |
| LOW | test/js/bun/test/expect.test.js | 3941 | `Lorem ipsum dolor sit amet, consectetur adipiscing elit. Donec nec posuere felis. Aliquam tincidunt elit a nunc h |
| LOW | test/js/bun/test/expect.test.js | 3941 | `Lorem ipsum dolor sit amet, consectetur adipiscing elit. Donec nec posuere felis. Aliquam tincidunt elit a nunc h |
| LOW | test/js/bun/test/jest-extended.test.js | 650 | expect(`Lorem ipsum dolor sit amet, consectetur adipiscing elit. Donec nec posuere felis. Aliquam tincidunt elit a n |
| LOW | test/js/bun/test/jest-extended.test.js | 650 | expect(`Lorem ipsum dolor sit amet, consectetur adipiscing elit. Donec nec posuere felis. Aliquam tincidunt elit a n |
| LOW | test/js/bun/test/jest-extended.test.js | 652 | `Lorem ipsum dolor sit amet, consectetur adipiscing elit. Donec nec posuere felis. Aliquam tincidunt elit a nunc h |
| LOW | test/js/bun/test/jest-extended.test.js | 652 | `Lorem ipsum dolor sit amet, consectetur adipiscing elit. Donec nec posuere felis. Aliquam tincidunt elit a nunc h |
| LOW | test/js/bun/test/fake-timers/sinonjs/issue-437.test.ts | 17 | return "Lorem ipsum"; |
| LOW | test/js/bun/test/fake-timers/sinonjs/issue-437.test.ts | 24 | assert.equals(dateTime.foo(), "Lorem ipsum"); |
| LOW | test/js/bun/http/bun-serve-routes.test.ts | 58 | id: "user@example.com", |
| LOW | test/js/bun/http/decodeURIComponentSIMD.test.ts | 21 | "user@example.com", |
| LOW | test/js/bun/md/spec-tables.txt | 142 | Lorem ipsum dolor sit amet. |
| LOW | test/js/bun/md/spec-tables.txt | 142 | Lorem ipsum dolor sit amet. |
| LOW | test/js/bun/md/spec-tables.txt | 149 | <p>Lorem ipsum dolor sit amet.</p> |
| LOW | test/js/bun/md/spec-tables.txt | 149 | <p>Lorem ipsum dolor sit amet.</p> |
| LOW | test/js/bun/md/spec-tables.txt | 170 | Lorem ipsum dolor sit amet. |
| LOW | test/js/bun/md/spec-tables.txt | 170 | Lorem ipsum dolor sit amet. |
| LOW | test/js/bun/md/spec-tables.txt | 180 | <tr><td>Lorem ipsum dolor sit amet.</td><td></td></tr> |
| LOW | test/js/bun/md/spec-tables.txt | 180 | <tr><td>Lorem ipsum dolor sit amet.</td><td></td></tr> |
| LOW | test/js/bun/md/spec.txt | 9453 | "Lorem ipsum dolor\nsit amet." |
| LOW | test/js/bun/md/spec.txt | 9512 | > Lorem ipsum dolor |
| LOW | test/js/bun/md/spec.txt | 9527 | > Lorem ipsum dolor |
| LOW | test/js/bun/md/spec.txt | 9539 | "Lorem ipsum dolor" |
| LOW | test/js/bun/md/spec.txt | 9555 | "Lorem ipsum dolor\nsit amet." |
| LOW | test/js/bun/md/spec.txt | 9573 | "Lorem ipsum dolor\nsit amet." |
| LOW | test/js/bun/md/spec.txt | 9595 | "Lorem ipsum dolor\nsit amet." |
| LOW | test/js/bun/md/spec.txt | 9618 | str "Lorem ipsum dolor" |
| LOW | test/js/third_party/next-auth/fixture/src/auth.ts | 44 | if (credentials?.email === "user@example.com" && credentials?.password === "password") { |
| LOW | test/js/third_party/next-auth/fixture/src/auth.ts | 47 | email: "user@example.com", |
| LOW | …ird_party/body-parser/express-body-parser-test.test.ts | 82 | expect(req.body).toEqual({ "name": "John Doe", "email": "john.doe@example.com" }); |
| LOW | …ird_party/body-parser/express-body-parser-test.test.ts | 89 | const payload = Buffer.from(JSON.stringify({ "name": "John Doe", "email": "john.doe@example.com" })); |
| LOW | test/js/third_party/astro/astro-post.test.js | 74 | formData.append("name", "John Doe"); |
| LOW | test/js/third_party/astro/astro-post.test.js | 87 | name: "John Doe", |
| LOW | …/js/node/test/parallel/test-zlib-brotli-from-string.js | 8 | const inputString = 'ΩΩLorem ipsum dolor sit amet, consectetur adipiscing eli' + |
| LOW | …/js/node/test/parallel/test-zlib-brotli-from-string.js | 8 | const inputString = 'ΩΩLorem ipsum dolor sit amet, consectetur adipiscing eli' + |
| LOW | test/js/node/test/parallel/test-zlib-truncated.js | 8 | const inputString = 'ΩΩLorem ipsum dolor sit amet, consectetur adipiscing eli' + |
| LOW | test/js/node/test/parallel/test-zlib-truncated.js | 8 | const inputString = 'ΩΩLorem ipsum dolor sit amet, consectetur adipiscing eli' + |
| LOW | test/js/node/test/parallel/test-zlib-from-string.js | 29 | const inputString = 'ΩΩLorem ipsum dolor sit amet, consectetur adipiscing eli' + |
| LOW | test/js/node/test/parallel/test-zlib-from-string.js | 29 | const inputString = 'ΩΩLorem ipsum dolor sit amet, consectetur adipiscing eli' + |
| LOW | …st/js/node/test/parallel/test-zlib-zstd-from-string.js | 8 | const inputString = 'ΩΩLorem ipsum dolor sit amet, consectetur adipiscing eli' + |
| 49 more matches not shown… | |||
| Severity | File | Line | Snippet |
|---|---|---|---|
| MEDIUM | bench/react-hello-world/react-hello-world.workerd.js | 16 | var iC=Object.create;var{getPrototypeOf:tC,defineProperty:XE,getOwnPropertyNames:JC}=Object;var VC=Object.prototype.hasO |
| MEDIUM | bench/react-hello-world/react-hello-world.workerd.js | 16 | var iC=Object.create;var{getPrototypeOf:tC,defineProperty:XE,getOwnPropertyNames:JC}=Object;var VC=Object.prototype.hasO |
| MEDIUM | bench/react-hello-world/react-hello-world.workerd.js | 42 | $RC=function(a,b){if(b=document.getElementById(b))(a=document.getElementById(a))?(a.previousSibling.data="$~",$RB.push(a |
| MEDIUM | bench/react-hello-world/react-hello-world.workerd.js | 42 | $RC=function(a,b){if(b=document.getElementById(b))(a=document.getElementById(a))?(a.previousSibling.data="$~",$RB.push(a |
| MEDIUM | test/js/web/structured-clone-blob-file.test.ts | 379 | // payload; keeps the test robust against wire-format header changes. |
| MEDIUM | test/js/web/structured-clone-blob-file.test.ts | 526 | // test stays robust against outer serializer framing changes. |
| MEDIUM | …/node/test/parallel/test-timers-unrefed-in-callback.js | 14 | // robust is that: |
| MEDIUM | …st/js/node/test/parallel/test-http2-session-timeout.js | 50 | // connection as the timeout should be robust. Double it anyway for good |
| MEDIUM | test/cli/install/registry/verdaccio.yaml | 3 | # please read carefully the documentation and best practices to |
| MEDIUM | test/cli/install/registry/verdaccio.yaml | 9 | # Read about the best practices |
| MEDIUM | packages/h3blast/src/h3blast.c | 790 | // Rewind and erase the previous frame in one shot — robust to wrapped lines. |
| MEDIUM | src/js/internal/http.ts | 149 | // TODO: make this more robust. |
| MEDIUM | src/js/node/http2.ts | 2186 | // seamless compatibility with http1 |
| MEDIUM | src/bun_core/env_var.rs | 13 | //! but environment variables are not meant to be a robust configuration mechanism. If you do think |
| MEDIUM | src/bun_core/env_var.rs | 462 | /// Note that deserialization errors cannot panic. If you need more robust means of |
| MEDIUM | src/runtime/shell/interpreter.rs | 7 | //! performance reasons and also to leverage Bun's existing IO/FS code |
| MEDIUM | src/runtime/allocators/LinuxMemFdAllocator.rs | 2 | //! leverage copy-on-write memory to avoid actually copying the data. To do that |
| MEDIUM | src/runtime/bake/FrameworkRouter.rs | 1288 | /// Fast enough for development to be seamless, but avoids building a |
| MEDIUM | src/runtime/bake/dev_server/source_map_store.rs | 396 | /// utilize the bottom 32 bits of their keys. This is because the bottom |
| MEDIUM | src/runtime/bake/bun-framework-react/server.tsx | 194 | // The RSC payload is provided so client-side can use this file for seamless |
| MEDIUM | src/runtime/socket/WindowsNamedPipe.rs | 6 | //! and Windows Named Pipe operations, enabling seamless cross-platform |
| MEDIUM | src/sys/windows/mod.rs | 1975 | /// The Kerberos protocol encountered an error while attempting to utilize the smartcard subsystem. |
| MEDIUM | src/ast/expr.rs | 2903 | break 'brk left; // Definitely not null or undefined |
| MEDIUM | src/ast/expr.rs | 2907 | break 'brk PrimitiveType::Mixed; // Definitely some kind of primitive |
| MEDIUM | src/crash_handler/lib.rs | 2053 | // https://github.com/go-delve/delve/pull/1384 |
| MEDIUM | src/jsc/bindings/js_classes.ts | 3 | // tests if a value is an instanceof a native class in a robust cross-realm manner |
| MEDIUM | src/jsc/bindings/ScriptExecutionContext.h | 85 | // used for things that utilize the same structure clone algorithm, for example, message passing between |
| MEDIUM | src/router/Cargo.toml | 37 | # Test harness (Test::make / Test::make_routes) needs the AST stores. |
| MEDIUM | src/router/lib.rs | 2499 | #[ignore = "TODO(port): depends on Test::make filesystem fixture harness"] |
| MEDIUM | src/router/lib.rs | 2505 | #[ignore = "TODO(port): depends on Test::make filesystem fixture harness"] |
| MEDIUM | src/router/lib.rs | 2511 | #[ignore = "TODO(port): depends on Test::make filesystem fixture harness"] |
| MEDIUM | src/router/lib.rs | 2517 | #[ignore = "TODO(port): depends on Test::make filesystem fixture harness"] |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | test/js/sql/sql.test.ts | 667 | // Step 1: Insert a row (succeeds) |
| LOW | test/js/sql/sql.test.ts | 673 | // Step 2: Try to insert conflicting row (throws expected error) |
| LOW | test/js/sql/sql.test.ts | 682 | // Step 3: Try another query - THIS WILL HANG |
| LOW | test/regression/issue/tui-app-tty-pattern.test.ts | 25 | // Step 1: Check if stdin is piped |
| LOW | test/regression/issue/tui-app-tty-pattern.test.ts | 34 | // Step 2: After stdin EOF, try to reopen /dev/tty |
| LOW | test/bundler/bundler_compile.test.ts | 946 | // Step 2: Run bun build with compile, minify, sourcemap, and bytecode |
| LOW | scripts/packer/windows-x64.pkr.hcl | 94 | // Step 1: Run bootstrap — installs all build dependencies |
| LOW | scripts/packer/windows-x64.pkr.hcl | 101 | // Step 2: Upload agent.mjs |
| LOW | scripts/packer/windows-x64.pkr.hcl | 107 | // Step 3: Install agent service via nssm |
| LOW | scripts/packer/windows-x64.pkr.hcl | 115 | // Step 4: Reboot to clear pending updates (VS Build Tools, Windows Updates) |
| LOW | scripts/packer/windows-x64.pkr.hcl | 120 | // Step 5: Sysprep — MUST be last provisioner |
| LOW | scripts/packer/windows-arm64.pkr.hcl | 93 | // Step 1: Run bootstrap — installs all build dependencies |
| LOW | scripts/packer/windows-arm64.pkr.hcl | 100 | // Step 2: Upload agent.mjs |
| LOW | scripts/packer/windows-arm64.pkr.hcl | 106 | // Step 3: Install agent service via nssm |
| LOW | scripts/packer/windows-arm64.pkr.hcl | 114 | // Step 4: Reboot to clear pending updates (VS Build Tools, Windows Updates) |
| LOW | scripts/packer/windows-arm64.pkr.hcl | 119 | // Step 5: Sysprep — MUST be last provisioner |
| LOW | packages/bun-uws/src/HttpContext.h | 328 | /* First of all we need to check if this socket was deleted due to upgrade */ |
| LOW | packages/bun-uws/src/HttpContext.h | 433 | /* We need to check if we should close this socket here now */ |
| LOW | packages/bun-uws/src/HttpResponse.h | 147 | /* We need to check if we should close this socket here now */ |
| LOW | packages/bun-uws/src/HttpResponse.h | 213 | /* We need to check if we should close this socket here now */ |
| LOW | src/install/npm.rs | 1584 | // stability check - if the previous package is blocked from age, we need to check if the current packag |
| LOW | src/install/npm.rs | 1751 | // stability check - if the previous package is blocked from age, we need to check if the current package wa |
| LOW | src/js/internal/streams/readable.ts | 1069 | // We need to check if there is someone still listening to |
| LOW | src/js/internal/streams/readable.ts | 1088 | // We need to check if there is someone still listening to |
| LOW | src/js/internal/sql/shared.ts | 436 | // Step 1: Determine the options object and initial URL |
| LOW | src/js/internal/sql/shared.ts | 487 | // Step 3: Parse protocol and ensure URL format for non-SQLite databases |
| LOW | src/js/internal/sql/shared.ts | 517 | // Step 4: Set adapter from environment if not already set, but ONLY if not |
| LOW | src/js/internal/sql/shared.ts | 523 | // Step 5: Return early if adapter is explicitly specified |
| LOW | src/js/internal/sql/shared.ts | 535 | // Step 6: Infer adapter from protocol |
| LOW | src/runtime/api/bun/js_bun_spawn_bindings.rs | 356 | // Since the event loop is recursively called, we need to check if it's safe to recurse. |
| LOW | src/runtime/valkey_jsc/js_valkey.rs | 1832 | // If we're disconnected, we need to check if we have any pending activity. |
| LOW | src/threading/channel.rs | 219 | // we need to check if the buffer is empty before trying to read an item. |
| LOW | src/jsc/bindings/NodeVM.cpp | 1242 | // Step 1: Argument validation |
| LOW | src/jsc/bindings/NodeVM.cpp | 1283 | // Step 3: Create a new function |
| LOW | src/jsc/bindings/BunHeapProfiler.cpp | 281 | // Step 1: Build post-order indexes via DFS from root (node 0) |
| LOW | src/jsc/bindings/BunHeapProfiler.cpp | 363 | // Step 2: Build dominator tree using Cooper-Harvey-Kennedy algorithm |
| LOW | src/jsc/bindings/BunHeapProfiler.cpp | 481 | // Step 3: Calculate retained sizes by attributing size up the dominator tree |
| LOW | src/bundler/linker_context/scanImportsAndExports.rs | 138 | // Step 1: Figure out what modules must be CommonJS |
| LOW | src/bundler/linker_context/scanImportsAndExports.rs | 298 | // Step 2: Propagate dynamic export status for export star statements that |
| LOW | src/bundler/linker_context/scanImportsAndExports.rs | 360 | // Step 3: Resolve "export * from" statements. This must be done after we |
| LOW | src/bundler/linker_context/scanImportsAndExports.rs | 417 | // Step 4: Match imports with exports. This must be done after we process all |
| LOW | src/bundler/linker_context/scanImportsAndExports.rs | 489 | // Step 5: Create namespace exports for every file. This is always necessary |
| LOW | src/bundler/linker_context/scanImportsAndExports.rs | 542 | // Step 6: Bind imports to exports. This adds non-local dependencies on the |
| LOW | src/bundler/linker_context/doStep5.rs | 32 | /// Step 5: Create namespace exports for every file. This is always necessary |
| Severity | File | Line | Snippet |
|---|---|---|---|
| HIGH | test/js/bun/yaml/translate_yaml_test_suite_to_bun.py | 87 | # Extract the content and convert to JS array.toString() format |
| HIGH | test/js/bun/yaml/translate_yaml_test_suite_to_bun.py | 104 | # JavaScript Object.toString() returns "[object Object]" |
| HIGH | misctools/lldb/lldb_pretty_printers.py | 563 | 'null': lambda payload: '@TypeOf(null)', |
| HIGH | misctools/lldb/lldb_pretty_printers.py | 564 | 'undefined': lambda payload: '@TypeOf(undefined)', |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | test/js/bun/shell/bunshell.test.ts | 1681 | # Check if we got a non-empty, non-null version string |
| LOW | test/js/bun/yaml/translate_yaml_test_suite_to_bun.py | 83 | # Check if this is a stringified collection from yaml package |
| LOW | test/js/bun/yaml/translate_yaml_test_suite_to_bun.py | 168 | # Check if this is a simple object |
| LOW | test/js/bun/yaml/translate_yaml_test_suite_to_bun.py | 837 | # Check if it's in an array context |
| LOW | test/js/bun/yaml/translate_yaml_test_suite_to_bun.py | 841 | # Check if it's in mapping values (not keys) |
| LOW | test/js/bun/yaml/translate_yaml_test_suite_to_bun.py | 465 | # Check if this is an error test (has 'error' file) |
| LOW | test/js/bun/yaml/translate_yaml_test_suite_to_bun.py | 699 | # Check if YAML has anchors/aliases |
| LOW | test/js/bun/yaml/translate_yaml_test_suite_to_bun.py | 914 | # Check if yaml package is installed (for getting expected values) |
| LOW | test/js/bun/yaml/translate_yaml_test_suite_to_bun.py | 939 | # Check if this is a test directory (has in.yaml) |
| LOW | scripts/lldb-inline.sh | 11 | # Check if we need to rebuild |
| LOW | packages/bun-types/test.d.ts | 73 | * ## Set Date to a specific time |
| LOW | misctools/lldb/bun_pretty_printer.py | 75 | # Check if it's a pointer type and dereference if needed |
| LOW | misctools/lldb/bun_pretty_printer.py | 85 | # Check if it's 8-bit (latin1) or 16-bit (utf16) string |
| LOW | .buildkite/Dockerfile-bootstrap.sh | 4 | # Check if running as root |
| Severity | File | Line | Snippet |
|---|---|---|---|
| HIGH | test/js/node/test/sequential/test-init.js | 52 | // test-init-index is in fixtures dir as requested by ry, so go there |
| HIGH | src/jsc/bindings/DecodeEscapeSequences.h | 172 | // Strings are encoded as requested. |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | test/js/bun/yaml/translate_yaml_test_suite_to_bun.py | 12 | |
| LOW | test/js/bun/yaml/translate_yaml_test_suite_to_bun.py | 59 | |
| LOW | test/js/bun/yaml/translate_yaml_test_suite_to_bun.py | 124 | |
| LOW | test/js/bun/yaml/translate_yaml_test_suite_to_bun.py | 197 | |
| LOW | test/js/bun/yaml/translate_yaml_test_suite_to_bun.py | 437 | |
| LOW | test/js/bun/yaml/translate_yaml_test_suite_to_bun.py | 899 | |
| LOW | misctools/lldb/lldb_webkit.py | 1179 | |
| LOW | misctools/lldb/bun_pretty_printer.py | 70 | |
| LOW | misctools/lldb/bun_pretty_printer.py | 167 | |
| LOW | misctools/lldb/bun_pretty_printer.py | 247 | |
| LOW | misctools/lldb/lldb_pretty_printers.py | 507 | |
| LOW | misctools/lldb/lldb_pretty_printers.py | 436 |
| Severity | File | Line | Snippet |
|---|---|---|---|
| MEDIUM | test/js/web/fetch/fixture.html | 1115 | bun implements Node.js' module resolution algorithm, so you can use npm packages in Bun. ESM and |
| LOW | test/js/bun/css/files/tachyons.css | 692 | 2. Don't forget to clearfix your floats with .cf |
| LOW | packages/bun-usockets/src/internal/internal.h | 97 | #define POLL_TYPE_BITSIZE 5 // make sure to update epoll_kqueue.h if you change this |
| LOW | packages/bun-usockets/src/internal/loop_data.h | 35 | // IMPORTANT: When changing this, don't forget to update the zig version in uws.zig as well! |
| LOW | src/sql_jsc/postgres/PostgresSQLConnection.rs | 2427 | // explicit use switch without else so if new modes are added, we don't forget to check for duplicate fi |
| LOW | src/jsc/bindings/sqlite/JSSQLStatement.cpp | 2352 | // Don't forget to reset before releasing the exception. |
| Severity | File | Line | Snippet |
|---|---|---|---|
| MEDIUM | test/js/bun/yaml/translate_yaml_test_suite_to_bun.py | 384 | # Create a temporary JavaScript file to parse the YAML |
| MEDIUM | scripts/generate-perf-trace-events.sh | 2 | # This file is not run often, so we don't need to make it part of the build system. |
| Severity | File | Line | Snippet |
|---|---|---|---|
| MEDIUM | test/js/bun/yaml/translate_yaml_test_suite_to_bun.py | 929 | print("Error: yaml package is not installed. Please run: npm install yaml") |
| LOW | test/js/bun/yaml/translate_yaml_test_suite_to_bun.py | 431 | except Exception as e: |
| LOW | test/js/bun/yaml/translate_yaml_test_suite_to_bun.py | 1025 | except Exception as e: |
| LOW | test/js/bun/yaml/translate_yaml_test_suite_to_bun.py | 1072 | except Exception as e: |
| LOW | test/js/bun/yaml/translate_yaml_test_suite_to_bun.py | 1117 | except Exception as e: |
| LOW | misctools/lldb/bun_pretty_printer.py | 302 | except Exception as e: |
| MEDIUM | misctools/lldb/bun_pretty_printer.py | 43 | def bun_BabyList_SummaryProvider(value, _=None): |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | scripts/update-sqlite-amalgamation.sh | 8 | # Usage: |
| LOW | misctools/unicode-generator.ts | 119 | // Example usage: |
| LOW | src/codegen/generate-compact-string-table.ts | 19 | * ## Usage: |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | test/js/third_party/remix/remix-build/server/index.js | 8 | function handleRequest(request, responseStatusCode, responseHeaders, remixContext, loadContext) { |
| LOW | test/bake/dev/hot.test.ts | 70 | export function doSomething() { |
| LOW | test/bake/dev/server-sourcemap.test.ts | 124 | "lib/utils.ts": `export function doSomething() { |
| LOW | test/regression/issue/25648.test.ts | 15 | export function doSomething(fn: () => number) { |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | test/js/bun/yaml/translate_yaml_test_suite_to_bun.py | 6 | |
| LOW | test/js/node/readline/run-with-pty.py | 5 | |
| LOW | misctools/lldb/bun_pretty_printer.py | 3 |