Incredibly fast JavaScript runtime, bundler, test runner, and package manager – all in one
This report presents the forensic synthetic code analysis of oven-sh/bun, a Rust project with 95,765 GitHub stars. SynthScan v2.0 examined 3,201,976 lines of code across 15313 source files, recording 11113 pattern matches distributed across 23 syntactic categories. The overall adjusted score of 5.9 places this repository in the Low AI signal band.
The scanner applied 160+ deterministic lexical heuristics, multi-line block detectors, abstract syntax tree depth profilers, and a cross-file Jaccard similarity matrix to construct a statistically normalised synthetic code estimate. All matches are individually weighted by severity coefficient and contextual multiplier before summation, and the resulting headline score is temporally discounted to account for the repository's development history relative to the commercial emergence of large language model coding tooling (November 2022 onward).
This chart maps the temporal evolution of the adjusted synthetic code score across successive scan runs. An upward trajectory indicates ongoing incorporation of AI-generated code or expanding LLM-assisted scaffolding; a stable or declining trajectory may reflect active human refactoring, code removal, or the adoption of stricter authorship policies. The dashed secondary line (right axis) independently tracks total raw pattern hit count, which can diverge from the normalised score when codebase size changes significantly between scans.
Classifies detected patterns by their diagnostic confidence and structural impact. CRITICAL patterns (coefficient 10) represent definitive synthetic signatures — hallucinated imports, explicit LLM attribution metadata — virtually never produced by human authors. HIGH (5) indicates strong structural tells such as cross-file repetition or cross-linguistic idioms. MEDIUM (2) covers recognisable conversational padding and AI-specific vocabulary. LOW (1) captures subtle indicators like tautological comments and generic boilerplate that require density to carry independent signal.
This horizontal bar chart decomposes the repository's raw synthetic code score by top-level directory, allowing you to pinpoint precisely which modules or components carry the highest AI authorship density. Directories with disproportionately high scores relative to their size warrant targeted manual review: concentrated AI signatures often trace back to mass-generated configuration layers, auto-ported test suites, LLM-scaffolded boilerplate classes, or entire subsystems authored under heavy copilot assistance. Use this view to prioritise your human code-review effort.
The scanner identified 11113 distinct pattern matches across 23 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a statistically significant AI authorship indicator. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the diagnostic confidence level (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — comment-context matches receive a ×1.5 weight because LLMs systematically over-annotate. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier as dense clusters constitute far stronger evidence of synthetic authorship than isolated hits.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | Cargo.toml | 123 | # ─── Release optimization ─────────────────────────────────────────────────── | COMMENT |
| MEDIUM | test/js/web/fetch/fetch-http3-client.test.ts | 497 | // ───── streaming uploads (pull-driven request bodies) ───── | COMMENT |
| MEDIUM | test/js/web/fetch/fetch-http3-client.test.ts | 541 | // ───── bidirectional ───── | COMMENT |
| MEDIUM | test/js/web/fetch/fetch-http2-adversarial.test.ts | 34 | // ─── raw server with full preface control ──────────────────────────────────── | COMMENT |
| MEDIUM | test/js/web/fetch/fetch-http2-adversarial.test.ts | 108 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | test/js/web/fetch/fetch-http2-adversarial.test.ts | 471 | // ─────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | test/js/web/fetch/fetch-http2-adversarial.test.ts | 473 | // ─────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | test/js/web/fetch/fetch-http2-adversarial.test.ts | 584 | // ─── session-key regressions ───────────────────────────────────────────────── | COMMENT |
| MEDIUM | test/js/web/workers/worker-late-completion.test.ts | 45 | // ── thread pool: bun_jsc::Job ──────────────────────────────────────────── | COMMENT |
| MEDIUM | test/js/web/workers/worker-late-completion.test.ts | 164 | // ── thread pool: storage inside a JS-owned object ──────────────────────── | COMMENT |
| MEDIUM⚡ | test/js/web/workers/worker-late-completion.test.ts | 178 | // ── HTTP thread ────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | test/js/web/workers/worker-late-completion.test.ts | 188 | // ── bundle thread ──────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | test/js/web/workers/worker-late-completion.test.ts | 195 | // ── weak posters (no ticket): delivered while draining, or refused ─────── | COMMENT |
| MEDIUM | test/js/bun/terminal/terminal-platform-gaps.test.ts | 71 | // ────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | test/js/bun/terminal/terminal-platform-gaps.test.ts | 73 | // ────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | test/js/bun/terminal/terminal-platform-gaps.test.ts | 123 | // ────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | test/js/bun/terminal/terminal-platform-gaps.test.ts | 125 | // ────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | test/js/bun/terminal/terminal-platform-gaps.test.ts | 149 | // ────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | test/js/bun/terminal/terminal-platform-gaps.test.ts | 151 | // ────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | test/js/bun/terminal/terminal-platform-gaps.test.ts | 198 | // ────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | test/js/bun/terminal/terminal-platform-gaps.test.ts | 200 | // ────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | test/js/bun/terminal/terminal-platform-gaps.test.ts | 253 | // ────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | test/js/bun/terminal/terminal-platform-gaps.test.ts | 255 | // ────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | test/js/bun/terminal/terminal-platform-gaps.test.ts | 303 | // ────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | test/js/bun/terminal/terminal-platform-gaps.test.ts | 305 | // ────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | test/js/bun/image/image-adversarial.test.ts | 27 | // this file should be runnable standalone) ──────────────────────────────── | COMMENT |
| MEDIUM | test/js/bun/image/image-adversarial.test.ts | 146 | // ─── 1. format confusion / lying magic bytes ───────────────────────────────── | COMMENT |
| MEDIUM | test/js/bun/image/image-adversarial.test.ts | 181 | // ─── 2. truncation at every boundary ───────────────────────────────────────── | COMMENT |
| MEDIUM | test/js/bun/image/image-adversarial.test.ts | 310 | // ─── 3. lying / overflowing header fields ──────────────────────────────────── | COMMENT |
| MEDIUM | test/js/bun/image/image-adversarial.test.ts | 389 | // ─── 4. malformed PNG chunk structure ──────────────────────────────────────── | COMMENT |
| MEDIUM | test/js/bun/image/image-adversarial.test.ts | 435 | // ─── 5. malformed JPEG / EXIF ──────────────────────────────────────────────── | COMMENT |
| MEDIUM | test/js/bun/image/image-adversarial.test.ts | 471 | // ─── 6. lossless roundtrip parity ──────────────────────────────────────────── | COMMENT |
| MEDIUM | test/js/bun/image/image-adversarial.test.ts | 535 | // ─── 7. memory hygiene under repetition ────────────────────────────────────── | COMMENT |
| MEDIUM | test/js/bun/image/image-adversarial.test.ts | 590 | // ─── 8. hostile JS option objects ──────────────────────────────────────────── | COMMENT |
| MEDIUM | test/js/bun/image/image-adversarial.test.ts | 709 | // ─── 9. concurrency / re-use ───────────────────────────────────────────────── | COMMENT |
| MEDIUM | test/js/bun/image/image-adversarial.test.ts | 744 | // ─── 10. random-byte fuzz (cheap, bounded) ─────────────────────────────────── | COMMENT |
| MEDIUM | test/js/bun/image/image-kernels.test.ts | 10 | // ─── plumbing (PNG build/read; same shape as image.test.ts) ───────────────── | COMMENT |
| MEDIUM | test/js/bun/image/image-kernels.test.ts | 110 | // ─── resize filters ───────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | test/js/bun/image/image-kernels.test.ts | 233 | // ─── Floyd–Steinberg dither ───────────────────────────────────────────────── | COMMENT |
| MEDIUM | test/js/bun/image/image-vs-sharp.test.ts | 34 | // failure modes; small so the fixture stays a few-hundred KB) ──────────── | COMMENT |
| MEDIUM | test/js/bun/image/image-vs-sharp.test.ts | 73 | // ─── PNG plumbing (same hand-roller as the other suites) ──────────────────── | COMMENT |
| MEDIUM | test/js/bun/image/image-vs-sharp.test.ts | 165 | // back, in the same iteration order the test uses. ───────────────────────── | COMMENT |
| MEDIUM | test/js/bun/image/image.test.ts | 7 | // ─── Fixture builders ─────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | test/js/bun/image/image.test.ts | 143 | // ─── Tests ────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | test/js/bun/image/image.test.ts | 1300 | // ── LZW pack ────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | test/js/bun/image/image.test.ts | 1348 | // ── container ───────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | test/js/bun/http/proxy-stress-headers.test.ts | 46 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | test/js/bun/http/proxy-stress-headers.test.ts | 48 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | test/js/bun/http/proxy-stress-headers.test.ts | 74 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | test/js/bun/http/proxy-stress-headers.test.ts | 76 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | test/js/bun/http/proxy-stress-headers.test.ts | 121 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | test/js/bun/http/proxy-stress-headers.test.ts | 123 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | test/js/bun/http/proxy-stress-headers.test.ts | 157 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | test/js/bun/http/proxy-stress-headers.test.ts | 159 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | test/js/bun/http/proxy-stress-headers.test.ts | 191 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | test/js/bun/http/proxy-stress-headers.test.ts | 194 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | test/js/bun/http/proxy-stress-headers.test.ts | 230 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | test/js/bun/http/proxy-stress-headers.test.ts | 233 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | test/js/bun/http/proxy-stress-headers.test.ts | 250 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | test/js/bun/http/proxy-stress-headers.test.ts | 252 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| 4006 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | Cargo.toml | 121 | edition = "2024" | COMMENT |
| LOW | Cargo.toml | 141 | debug = "line-tables-only" | COMMENT |
| LOW | Cargo.toml | 161 | inherits = "release" | COMMENT |
| LOW | Cargo.toml | 201 | # is intentional. | COMMENT |
| LOW | rustfmt.toml | 1 | # rustfmt config for the Cargo workspace. Formatting is the toolchain default | COMMENT |
| LOW | bunfig.toml | 1 | [test] | COMMENT |
| LOW | rust-toolchain.toml | 1 | [toolchain] | COMMENT |
| LOW | dylint.toml | 1 | [mordant] | COMMENT |
| LOW | bench/snippets/buffer.js | 21 | // time("DataView.getBigInt64 (BE)", () => view.getBigInt64(0, false)); | COMMENT |
| LOW | bench/snippets/buffer.js | 41 | time("Buffer.readFloatLE ", () => buf.readFloatLE(0)); | COMMENT |
| LOW | bench/snippets/buffer.js | 61 | // console.log(""); | COMMENT |
| LOW | bench/snippets/buffer.js | 81 | time("Buffer.writeBigUInt64BE", () => buf.writeBigUInt64BE(BigInt(0), 0)); | COMMENT |
| LOW | bench/snippets/buffer.js | 101 | // console.log(""); | COMMENT |
| LOW | bench/snippets/deep-equals.js | 341 | // get foo() { | COMMENT |
| LOW | bench/install/next-env.d.ts | 1 | /// <reference types="next" /> | COMMENT |
| LOW | test/expectations.txt | 1 | # Format: [modifier] test-name [[ expectations ]] [# comment] | COMMENT |
| LOW | test/expectations.txt | 21 | # agents have no ClangCL toolset ("MSB8020: The build tools for ClangCL cannot | COMMENT |
| LOW | test/v8/v8-module/main.cpp | 1 | #include <node.h> | COMMENT |
| LOW | test/snippets/lodash-regexp.js | 21 | // export function test() { | COMMENT |
| LOW | test/docker/coordinator.ts | 41 | COMMENT | |
| LOW | test/js/workerd/html-rewriter-leak.test.ts | 121 | expect(exitCode).toBe(0); | COMMENT |
| LOW | test/js/workerd/html-rewriter-leak.test.ts | 161 | expect(after - before).toBe(0); | COMMENT |
| LOW | test/js/web/structured-clone-blob-file.test.ts | 361 | }); | COMMENT |
| LOW | …/js/web/abort/abort-signal-event-listener-leak.test.ts | 1 | import { estimateShallowMemoryUsageOf } from "bun:jsc"; | COMMENT |
| LOW | …bsocket/websocket-proxy-tunnel-upgrade-leak-fixture.ts | 1 | // Repro for HTTPUpgradeClient leak on wss:// through an HTTP CONNECT proxy | COMMENT |
| LOW | …b/websocket/websocket-proxy-tunnel-client-leak.test.ts | 1 | import { expect, test } from "bun:test"; | COMMENT |
| LOW | test/js/web/websocket/websocket-utf16-headers.test.ts | 1 | // Regression test for WebSocket upgrade request crash on non-ASCII inputs. | COMMENT |
| LOW | test/js/web/websocket/websocket-proxy.test.ts | 361 | // grows past 64 KiB, then the proxy holds the burst and releases it in one | COMMENT |
| LOW | …ebsocket/websocket-proxy-tunnel-client-leak-fixture.ts | 1 | // Repro for NewWebSocketClient(false) leak on wss:// through an HTTP CONNECT | COMMENT |
| LOW | test/js/web/websocket/websocket-close-code.test.ts | 1 | // WebSocket#close() argument validation and the close-code handling that | COMMENT |
| LOW | test/js/web/intl/intl.test.ts | 1 | // ECMA-402 Intl coverage. Doubles as the regression net for the per-item zstd | COMMENT |
| LOW | test/js/web/timers/timers-fixture-unref.js | 81 | // See https://github.com/nodejs/node/issues/9561 | COMMENT |
| LOW | test/js/web/streams/streams-leak.test.ts | 1 | import { expect, test } from "bun:test"; | COMMENT |
| LOW | test/js/web/streams/native-source-onclose-leak.test.ts | 1 | import { heapStats } from "bun:jsc"; | COMMENT |
| LOW | test/js/web/encoding/text-decoder-cjk.test.ts | 281 | // 8F A1 starts a JIS X 0212 sequence; 0x61 aborts it. A1 A1 is then a | COMMENT |
| LOW | test/js/web/encoding/text-encoder-stream.test.ts | 301 | latin1: () => Buffer.alloc(${2 * CAP_MB} * MiB, "a").toString("latin1"), | COMMENT |
| LOW | …t/js/web/html/FormData-multipart-serialization.test.ts | 161 | // Serializing an in-memory blob entry borrows its bytes; the only blob-sized | COMMENT |
| LOW | test/js/web/html/FormData-file-error-leak.test.ts | 1 | import { expect, test } from "bun:test"; | COMMENT |
| LOW | test/js/web/html/FormData-file-error-leak-fixture.ts | 1 | // Fixture for FormData → multipart body memory leak on readFile failure. | COMMENT |
| LOW | …/js/web/broadcastchannel/message-event-init-gc.test.ts | 1 | import { expect, test } from "bun:test"; | COMMENT |
| LOW | …b/broadcastchannel/broadcast-channel-worker-gc.test.ts | 101 | ); | COMMENT |
| LOW | …b/broadcastchannel/broadcast-channel-worker-gc.test.ts | 181 | expect(filterStderr(stderr)).toBe(""); | COMMENT |
| LOW | test/js/web/fetch/http-chunked-server.c | 1 | // Simple HTTP server that reproduces a streaming response body bug. | COMMENT |
| LOW | test/js/web/fetch/fetch-tcp-keepalive.test.ts | 1 | // Verifies that fetch() enables TCP keepalive (SO_KEEPALIVE + TCP_KEEPIDLE) | COMMENT |
| LOW | test/js/web/fetch/fetch-tcp-keepalive.test.ts | 161 | // --------------------------------------------------------------------------- | COMMENT |
| LOW | test/js/web/fetch/fetch-buffer-peak-fixture.ts | 1 | // Measures the client-side resident set across a single large buffered | COMMENT |
| LOW | …st/js/web/fetch/fetch-proxy-tls-intern-race-fixture.ts | 1 | // Subprocess fixture for fetch-proxy-tls-intern-race.test.ts. | COMMENT |
| LOW | test/js/web/fetch/fetch-abort-queued.test.ts | 1 | // When `active_requests_count >= max_simultaneous_requests`, new fetch() | COMMENT |
| LOW | test/js/web/fetch/blob.test.ts | 321 | // Regression: #23015 refactored Blob to be ref-counted and moved | COMMENT |
| LOW | test/js/web/fetch/fetch-http3-client.test.ts | 381 | expect(res.headers.get("x-recv-len")).toBe("1"); | COMMENT |
| LOW | test/js/web/fetch/headers.test.ts | 601 | COMMENT | |
| LOW | …js/web/fetch/fetch-stream-body-ended-inline-fixture.ts | 1 | // Regression: fetch() with a native ByteStream request body (an upstream | COMMENT |
| LOW | test/js/web/fetch/body.test.ts | 1221 | // as its result, and discarded large JS strings are currently not reclaimed | COMMENT |
| LOW | …/js/web/fetch/fetch.tls.cert-mismatch-churn.fixture.ts | 1 | // Fixture for "rejects a trusted cert with a mismatched hostname cleanly under churn". | COMMENT |
| LOW | test/js/web/fetch/blob-oom.test.ts | 221 | ]); | COMMENT |
| LOW | test/js/web/fetch/body-clone.test.ts | 901 | COMMENT | |
| LOW | test/js/web/fetch/blob-file-name-ownership.test.ts | 1 | import { expect, test } from "bun:test"; | COMMENT |
| LOW | test/js/web/fetch/fetch-http3-adversarial.test.ts | 221 | } | COMMENT |
| LOW | test/js/web/fetch/bytestream-cancel-on-drain-fixture.ts | 1 | // Deterministic repro for the ByteStream::on_data re-entrancy panic: park a | COMMENT |
| LOW | test/js/web/fetch/fetch-http3-cold-post-fixture.ts | 1 | // A large POST over HTTP/3 as the very first request on the connection, so | COMMENT |
| 5600 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | test/harness.ts | 152 | async function findOrDownloadAbiMatchingNode(): Promise<string> { | CODE |
| LOW | test/harness.ts | 437 | export function makeTreeSyncFromDirectoryTree(base: string, tree: DirectoryTree) { | CODE |
| LOW | test/harness.ts | 608 | export function randomInvalidSurrogatePair() { | CODE |
| LOW | test/harness.ts | 1308 | function failTestsOnBlockingWriteCall() { | CODE |
| LOW | test/harness.ts | 1777 | export function fileDescriptorLeakChecker() { | CODE |
| LOW | test/_util/numeric.ts | 93 | export function computePearsonCorrelation(xs: number[], ys: number[]): number { | CODE |
| LOW | test/_util/numeric.ts | 160 | export function computeAverageAbsoluteDeviation(xs: number[]): number { | CODE |
| LOW | test/js/deno/crypto/random.test.ts | 51 | test(function getRandomValuesReturnValue() { | CODE |
| LOW | test/js/deno/crypto/webcrypto.test.ts | 506 | test(async function subtleCryptoHmacImportExport() { | CODE |
| LOW | test/js/deno/crypto/webcrypto.test.ts | 755 | test(async function testHkdfDeriveBitsWithLargeKeySize() { | CODE |
| LOW | test/js/deno/crypto/webcrypto.test.ts | 768 | test(async function testEcdhDeriveBitsWithShorterLength() { | CODE |
| LOW | test/js/deno/crypto/webcrypto.test.ts | 782 | test(async function testEcdhDeriveBitsWithLongerLength() { | CODE |
| LOW | test/js/deno/crypto/webcrypto.test.ts | 795 | test(async function testEcdhDeriveBitsWithNullLength() { | CODE |
| LOW | test/js/deno/crypto/webcrypto.test.ts | 1063 | test(async function testDecryptWithInvalidIntializationVector() { | CODE |
| LOW | test/js/deno/crypto/webcrypto.test.ts | 2559 | test(async function ecPrivateKeyMaterialExportSpki() { | CODE |
| LOW | test/js/deno/crypto/webcrypto.test.ts | 2603 | test(async function testImportLeadingZeroesKey() { | CODE |
| LOW | test/js/deno/abort/abort-controller.test.ts | 52 | test(function controllerHasProperToString() { | CODE |
| LOW | test/js/deno/encoding/encoding.test.ts | 285 | test(function toStringShouldBeWebCompatibility() { | CODE |
| LOW | test/js/deno/encoding/encoding.test.ts | 291 | test(function textEncoderShouldCoerceToString() { | CODE |
| LOW⚡ | test/js/deno/url/urlsearchparams.test.ts | 6 | test(function urlSearchParamsWithMultipleSpaces() { | CODE |
| LOW⚡ | test/js/deno/url/urlsearchparams.test.ts | 13 | test(function urlSearchParamsWithExclamation() { | CODE |
| LOW⚡ | test/js/deno/url/urlsearchparams.test.ts | 23 | test(function urlSearchParamsWithQuotes() { | CODE |
| LOW⚡ | test/js/deno/url/urlsearchparams.test.ts | 33 | test(function urlSearchParamsWithBraket() { | CODE |
| LOW⚡ | test/js/deno/url/urlsearchparams.test.ts | 53 | test(function urlSearchParamsInitString() { | CODE |
| LOW⚡ | test/js/deno/url/urlsearchparams.test.ts | 58 | test(function urlSearchParamsInitStringWithPlusCharacter() { | CODE |
| LOW⚡ | test/js/deno/url/urlsearchparams.test.ts | 66 | test(function urlSearchParamsInitStringWithMalformedParams() { | CODE |
| LOW⚡ | test/js/deno/url/urlsearchparams.test.ts | 114 | test(function urlSearchParamsAppendSuccess() { | CODE |
| LOW⚡ | test/js/deno/url/urlsearchparams.test.ts | 119 | test(function urlSearchParamsDeleteSuccess() { | CODE |
| LOW⚡ | test/js/deno/url/urlsearchparams.test.ts | 125 | test(function urlSearchParamsGetAllSuccess() { | CODE |
| LOW⚡ | test/js/deno/url/urlsearchparams.test.ts | 137 | test(function urlSearchParamsGetSuccess() { | CODE |
| LOW⚡ | test/js/deno/url/urlsearchparams.test.ts | 144 | test(function urlSearchParamsHasSuccess() { | CODE |
| LOW⚡ | test/js/deno/url/urlsearchparams.test.ts | 151 | test(function urlSearchParamsSetReplaceFirstAndRemoveOthers() { | CODE |
| LOW⚡ | test/js/deno/url/urlsearchparams.test.ts | 157 | test(function urlSearchParamsSetAppendNew() { | CODE |
| LOW⚡ | test/js/deno/url/urlsearchparams.test.ts | 163 | test(function urlSearchParamsSortSuccess() { | CODE |
| LOW⚡ | test/js/deno/url/urlsearchparams.test.ts | 169 | test(function urlSearchParamsForEachSuccess() { | CODE |
| LOW⚡ | test/js/deno/url/urlsearchparams.test.ts | 190 | test(function urlSearchParamsMissingName() { | CODE |
| LOW⚡ | test/js/deno/url/urlsearchparams.test.ts | 196 | test(function urlSearchParamsMissingValue() { | CODE |
| LOW⚡ | test/js/deno/url/urlsearchparams.test.ts | 202 | test(function urlSearchParamsMissingEqualSign() { | CODE |
| LOW⚡ | test/js/deno/url/urlsearchparams.test.ts | 208 | test(function urlSearchParamsMissingPair() { | CODE |
| LOW⚡ | test/js/deno/url/urlsearchparams.test.ts | 213 | test(function urlSearchParamsForShortEncodedChar() { | CODE |
| LOW⚡ | test/js/deno/url/urlsearchparams.test.ts | 221 | test(function urlSearchParamsShouldThrowTypeError() { | CODE |
| LOW | test/js/deno/url/urlsearchparams.test.ts | 86 | test(function urlSearchParamsInitIterable() { | CODE |
| LOW | test/js/deno/url/urlsearchparams.test.ts | 100 | test(function urlSearchParamsInitRecord() { | CODE |
| LOW | test/js/deno/url/urlsearchparams.test.ts | 256 | test(function urlSearchParamsAppendArgumentsCheck() { | CODE |
| LOW | test/js/deno/url/urlsearchparams.test.ts | 299 | test(function urlSearchParamsDeletingAppendedMultiple() { | CODE |
| LOW | test/js/deno/url/urlsearchparams.test.ts | 311 | test(function urlSearchParamsCustomSymbolIterator() { | CODE |
| LOW | test/js/deno/url/urlsearchparams.test.ts | 322 | test(function urlSearchParamsCustomSymbolIteratorWithNonStringParams() { | CODE |
| LOW | test/js/deno/url/urlsearchparams.test.ts | 333 | test(function urlSearchParamsOverridingAppendNotChangeConstructorAndSet() { | CODE |
| LOW | test/js/deno/url/urlsearchparams.test.ts | 354 | test(function urlSearchParamsOverridingEntriesNotChangeForEach() { | CODE |
| LOW⚡ | test/js/deno/url/url.test.ts | 266 | test(function deletingAllParamsRemovesQuestionMarkFromURL() { | CODE |
| LOW⚡ | test/js/deno/url/url.test.ts | 273 | test(function removingNonExistentParamRemovesQuestionMarkFromURL() { | CODE |
| LOW⚡ | test/js/deno/url/url.test.ts | 280 | test(function sortingNonExistentParamRemovesQuestionMarkFromURL() { | CODE |
| LOW | test/js/deno/url/url.test.ts | 293 | test(function throwForInvalidPortConstructor() { | CODE |
| LOW | test/js/deno/url/url.test.ts | 307 | test(function doNotOverridePortIfInvalid() { | CODE |
| LOW | test/js/deno/url/url.test.ts | 313 | test(function emptyPortForSchemeDefaultPort() { | CODE |
| LOW⚡ | test/js/deno/url/url.test.ts | 332 | test(function assigningPortPropertyAffectsReceiverOnly() { | CODE |
| LOW⚡ | test/js/deno/url/url.test.ts | 339 | test(function urlSearchParamsIdentityPreserved() { | CODE |
| LOW⚡ | test/js/deno/url/url.test.ts | 346 | test(function urlTakeURLObjectAsParameter() { | CODE |
| LOW | test/js/deno/fetch/blob.test.ts | 111 | test(function blobConstructorNameIsBlob() { | CODE |
| LOW | test/js/deno/fetch/blob.test.ts | 115 | test.ignore(function blobCustomInspectFunction() { | CODE |
| 826 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH⚡ | test/js/bun/test/printing/diffexample.fixture.ts | 228 | print("Hello, world!"); | CODE |
| HIGH⚡ | test/js/bun/test/printing/diffexample.fixture.ts | 229 | print("Goodbye, world!"); | CODE |
| HIGH⚡ | test/js/bun/test/printing/diffexample.fixture.ts | 233 | print("Hello, world!"); | CODE |
| HIGH⚡ | test/js/bun/test/printing/diffexample.fixture.ts | 234 | print("Goodbye, world!"); | CODE |
| HIGH | test/js/bun/resolve/builtin-esm-lazy-exports.test.ts | 116 | print({ defaultIsExportsObject: ns.default === fs, readFileSync: typeof readFileSync, kinds: kinds() }); | CODE |
| HIGH | test/js/bun/resolve/builtin-esm-lazy-exports.test.ts | 125 | print({ kinds: kinds(), isTheClass: typeof ReadStream === "function" && ReadStream === fs.ReadStream }); | CODE |
| HIGH | test/js/bun/resolve/builtin-esm-lazy-exports.test.ts | 139 | print({ | CODE |
| HIGH | test/js/bun/resolve/builtin-esm-lazy-exports.test.ts | 164 | print({ | CODE |
| HIGH | test/js/bun/resolve/builtin-esm-lazy-exports.test.ts | 182 | print({ | CODE |
| HIGH | test/js/bun/resolve/builtin-esm-lazy-exports.test.ts | 220 | print({ | CODE |
| HIGH | test/js/bun/resolve/builtin-esm-lazy-exports.test.ts | 266 | print({ | CODE |
| HIGH | test/js/bun/resolve/builtin-esm-lazy-exports.test.ts | 300 | print({ | CODE |
| HIGH | test/js/bun/resolve/builtin-esm-lazy-exports.test.ts | 355 | print({ | CODE |
| HIGH | test/js/bun/resolve/builtin-esm-lazy-exports.test.ts | 395 | print({ | CODE |
| HIGH | test/js/bun/resolve/builtin-esm-lazy-exports.test.ts | 436 | print({ | CODE |
| HIGH | test/js/bun/resolve/builtin-esm-lazy-exports.test.ts | 498 | print({ | CODE |
| HIGH | test/js/bun/resolve/builtin-esm-lazy-exports.test.ts | 531 | print({ addedBeforeLoad: ns.addedBeforeLoad, exportsAddedAfterLoad: "addedAfterLoad" in ns }); | CODE |
| HIGH | test/js/bun/resolve/builtin-esm-lazy-exports.test.ts | 547 | print({ | CODE |
| HIGH | test/js/bun/resolve/builtin-esm-lazy-exports.test.ts | 583 | print({ | CODE |
| HIGH | test/js/bun/resolve/builtin-esm-lazy-exports.test.ts | 631 | print({ log, e, x }); | CODE |
| HIGH | test/js/bun/shell/bunshell.test.ts | 2354 | elif echo baz;then echo qux;fi` | CODE |
| HIGH | test/js/bun/webview/webview-chrome-pipe.test.ts | 66 | print({ url: view.url, title: view.title, value, undef }); | CODE |
| HIGH | test/js/bun/webview/webview-chrome-pipe.test.ts | 82 | print({ length: value.length, equal: value === big }); | CODE |
| HIGH | test/js/bun/webview/webview-chrome-pipe.test.ts | 93 | print(await view.evaluate(JSON.stringify(big) + " === " + ${JSON.stringify(BIG)})); | CODE |
| HIGH | test/js/bun/webview/webview-chrome-pipe.test.ts | 105 | print({ type: blob.type, size: bytes.length, hash: String(Bun.hash(bytes)) }); | CODE |
| HIGH | test/js/bun/webview/webview-chrome-pipe.test.ts | 120 | print({ urls: views.map(view => view.url), values }); | CODE |
| HIGH | test/js/bun/webview/webview-chrome-pipe.test.ts | 133 | print(await outcome(view.evaluate("(() => { throw new Error('inside the fake'); })()"))); | CODE |
| HIGH | test/js/bun/webview/webview-chrome-pipe.test.ts | 156 | print({ death, second: await second.evaluate("'alive again'") }); | CODE |
| HIGH | test/js/bun/webview/webview-chrome-pipe.test.ts | 223 | print(await outcome(view.evaluate("__fake_close_replies()"))); | CODE |
| HIGH | test/js/bun/webview/webview-chrome-pipe.test.ts | 234 | print({ closing, next }); | CODE |
| HIGH | test/bundler/bundler_jsx.test.ts | 151 | print(<div>Hello World</div>) | CODE |
| HIGH | test/bundler/bundler_jsx.test.ts | 152 | print(<div className="container"><Component prop={2}><h1 onClick={() => 1}>hello</h1></Component></div>) | CODE |
| HIGH⚡ | test/bundler/bundler_jsx.test.ts | 173 | print(<div>Hello World</div>) | CODE |
| HIGH⚡ | test/bundler/bundler_jsx.test.ts | 174 | print(<div className="container"><Component prop={2}><h1 onClick={() => 1}>hello</h1></Component></div>) | CODE |
| HIGH⚡ | test/bundler/bundler_jsx.test.ts | 175 | print(<>Fragment</>) | CODE |
| HIGH | test/bundler/bundler_jsx.test.ts | 196 | print([typeof F, typeof el]) | CODE |
| HIGH | test/bundler/bundler_jsx.test.ts | 219 | print([el, a, b, c]) | CODE |
| HIGH | test/bundler/bundler_jsx.test.ts | 304 | print([<div props={123}>Hello World</div>, <>Fragment</>]) | CODE |
| HIGH | test/bundler/bundler_jsx.test.ts | 325 | print([<div props={123}>Hello World</div>, <>Fragment</>]) | CODE |
| HIGH | test/bundler/bundler_jsx.test.ts | 347 | print([<div props={123}>Hello World</div>, <>Fragment</>]) | CODE |
| HIGH⚡ | test/bundler/bundler_jsx.test.ts | 376 | print(['classic.jsx',<div props={123}>Hello World</div>, <>Fragment</>]) | CODE |
| HIGH⚡ | test/bundler/bundler_jsx.test.ts | 384 | print(['classic-renamed.jsx',<div props={123}>Hello World</div>, <>Fragment</>]) | CODE |
| HIGH⚡ | test/bundler/bundler_jsx.test.ts | 388 | print(['automatic.jsx',<div props={123}>Hello World</div>, process.env.NODE_ENV === 'production' ? '' : <>Fragme | CODE |
| HIGH⚡ | test/bundler/bundler_jsx.test.ts | 393 | print(['automatic-source2.jsx',<div props={123}>Hello World</div>, <>Fragment</>]) | CODE |
| HIGH | test/bundler/bundler_jsx.test.ts | 419 | print([<div props={123}>Hello World</div>, <>Fragment</>]) | CODE |
| HIGH | test/bundler/bundler_jsx.test.ts | 441 | print([<div props={123}>Hello World</div>, <>Fragment</>]) | CODE |
| HIGH | test/bundler/bundler_jsx.test.ts | 469 | print([<div props={123}>Hello World</div>, <>Fragment</>]) | CODE |
| HIGH | test/bundler/bundler_jsx.test.ts | 489 | print([<div props={123}>Hello World</div>, <>Fragment</>]) | CODE |
| HIGH | …-compiler-fixtures/hoisting-nested-block-statements.js | 6 | print(x); | CODE |
| HIGH | …-compiler-fixtures/hoisting-nested-block-statements.js | 10 | print(x); | CODE |
| HIGH⚡ | …eact-compiler-fixtures/flag-enable-emit-hook-guards.ts | 13 | print(identity(CONST_STRING0)); | CODE |
| HIGH⚡ | …eact-compiler-fixtures/flag-enable-emit-hook-guards.ts | 15 | print(value, state); | CODE |
| HIGH⚡ | …eact-compiler-fixtures/flag-enable-emit-hook-guards.ts | 21 | print(identity(value + state)); | CODE |
| HIGH | …nspiler/react-compiler-fixtures/codegen-inline-iife.ts | 5 | print(1), | CODE |
| HIGH | …nspiler/react-compiler-fixtures/codegen-inline-iife.ts | 7 | print(2); | CODE |
| HIGH | scripts/glob-sources.ts | 192 | print(sources[arg as keyof Sources]); | CODE |
| HIGH | src/js/internal/repl/utils.js | 550 | print(repl.line, `${labels[dir]}_`); | CODE |
| HIGH | src/js/internal/repl/utils.js | 590 | print(entry, `${labels[dir]}${input}_`, cursor); | CODE |
| HIGH | src/js/internal/repl/utils.js | 601 | print(repl.line, `failed-${labels[dir]}${input}_`); | CODE |
| HIGH | src/js/internal/repl/utils.js | 701 | print(repl.line, `${labels[dir]}_`); | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL | …mpiler-fixtures/readonly-object-method-calls.expect.md | 16 | const posts = user.timeline.posts.edges.nodes.map(node => ( | CODE |
| CRITICAL | …mpiler-fixtures/readonly-object-method-calls.expect.md | 45 | posts = user.timeline.posts.edges.nodes.map(_temp); | CODE |
| CRITICAL | …/readonly-object-method-calls-mutable-lambda.expect.md | 17 | const posts = user.timeline.posts.edges.nodes.map(node => { | CODE |
| CRITICAL | …/readonly-object-method-calls-mutable-lambda.expect.md | 46 | const posts = user.timeline.posts.edges.nodes.map((node) => { | CODE |
| CRITICAL | …ixtures/readonly-object-method-calls-mutable-lambda.js | 13 | const posts = user.timeline.posts.edges.nodes.map(node => { | CODE |
| CRITICAL | …eact-compiler-fixtures/readonly-object-method-calls.js | 12 | const posts = user.timeline.posts.edges.nodes.map(node => ( | CODE |
| CRITICAL | src/install/PackageManager/runTasks.rs | 1200 | task.request.local_tarball.tarball.url.slice() | CODE |
| CRITICAL | src/install/PackageManager/security_scanner.rs | 163 | let string_buf = self.manager.lockfile.buffers.string_bytes.as_slice(); | CODE |
| CRITICAL | src/install/PackageManager/security_scanner.rs | 194 | let string_buf = self.manager.lockfile.buffers.string_bytes.as_slice(); | CODE |
| CRITICAL | src/install/PackageManager/security_scanner.rs | 618 | let resolutions = self.manager.lockfile.buffers.resolutions.as_slice(); | CODE |
| CRITICAL | src/install/PackageManager/security_scanner.rs | 722 | let string_buf = self.manager.lockfile.buffers.string_bytes.as_slice(); | CODE |
| CRITICAL | src/runtime/cli/pack_command.rs | 2046 | if ctx.manager.options.publish_config.tag.is_empty() { | CODE |
| CRITICAL | src/runtime/cli/pack_command.rs | 2051 | if ctx.manager.options.publish_config.access.is_none() { | CODE |
| CRITICAL | src/runtime/cli/test_command.rs | 1355 | let report = this.jest.test_options.reporters.junit.then(|| { | CODE |
| CRITICAL | src/runtime/cli/publish_command.rs | 880 | bstr::BStr::new(if !ctx.manager.options.publish_config.tag.is_empty() { | CODE |
| CRITICAL | src/runtime/cli/publish_command.rs | 912 | if !ctx.manager.options.publish_config.otp.is_empty() { | CODE |
| CRITICAL | src/runtime/cli/publish_command.rs | 1997 | let tag: &[u8] = if !ctx.manager.options.publish_config.tag.is_empty() { | CODE |
| CRITICAL | src/runtime/api/JSTranspiler.rs | 357 | let Ok(Some(json)) = vm.transpiler.resolver.caches.json.parse_json( | CODE |
| CRITICAL | src/js_parser/visit/visit_stmt.rs | 1135 | let new_len = if !(data.is_export && p.options.features.replace_exports.entries.len() > 0) { | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | bench/snippets/buffer-includes.js | 2 | "Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna a | CODE |
| LOW | bench/snippets/buffer-includes.js | 2 | "Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna a | CODE |
| LOW | bench/snippets/_fixture.txt | 1191 | <td id="LC98" class="blob-code blob-code-inner js-file-line"><span class="pl-s"> Lorem ipsum dolor sit amet, | CODE |
| LOW | bench/snippets/_fixture.txt | 1191 | <td id="LC98" class="blob-code blob-code-inner js-file-line"><span class="pl-s"> Lorem ipsum dolor sit amet, | CODE |
| LOW⚡ | bench/snippets/_fixture.txt | 1339 | <td id="LC135" class="blob-code blob-code-inner js-file-line"> let string_long_escaped = "\n Lorem ip | CODE |
| LOW⚡ | bench/snippets/_fixture.txt | 1339 | <td id="LC135" class="blob-code blob-code-inner js-file-line"> let string_long_escaped = "\n Lorem ip | CODE |
| LOW⚡ | bench/snippets/_fixture.txt | 1343 | <td id="LC136" class="blob-code blob-code-inner js-file-line"> <span class="pl-k">let</span> string_short <sp | CODE |
| LOW⚡ | bench/snippets/_fixture.txt | 1343 | <td id="LC136" class="blob-code blob-code-inner js-file-line"> <span class="pl-k">let</span> string_short <sp | CODE |
| LOW⚡ | bench/snippets/_fixture.txt | 1351 | <td id="LC138" class="blob-code blob-code-inner js-file-line"> <span class="pl-s">"Lorem ipsum dolor | CODE |
| LOW⚡ | bench/snippets/_fixture.txt | 1351 | <td id="LC138" class="blob-code blob-code-inner js-file-line"> <span class="pl-s">"Lorem ipsum dolor | CODE |
| LOW⚡ | bench/snippets/_fixture.txt | 1355 | <td id="LC139" class="blob-code blob-code-inner js-file-line"> <span class="pl-k">let</span> no_escape <span | CODE |
| LOW⚡ | bench/snippets/_fixture.txt | 1355 | <td id="LC139" class="blob-code blob-code-inner js-file-line"> <span class="pl-k">let</span> no_escape <span | CODE |
| LOW⚡ | bench/snippets/_fixture.txt | 1363 | <td id="LC141" class="blob-code blob-code-inner js-file-line"><span class="pl-s">Lorem ipsum dolor sit amet, con | CODE |
| LOW⚡ | bench/snippets/_fixture.txt | 1363 | <td id="LC141" class="blob-code blob-code-inner js-file-line"><span class="pl-s">Lorem ipsum dolor sit amet, con | CODE |
| LOW | test/js/workerd/html-rewriter.test.js | 1724 | .transform(new Response("<p>Lorem ipsum!</p>")) | CODE |
| LOW | test/js/workerd/html-rewriter.test.js | 1739 | .transform(new Response("<p>Lorem ipsum!<br></p><div />")) | CODE |
| LOW | test/js/workerd/html-rewriter.test.js | 1757 | .transform(new Response("<p>Lorem ipsum!<br></p><div /><svg><circle /></svg>")) | CODE |
| LOW | test/js/valkey/integration/complex-operations.test.ts | 191 | await ctx.redis.set(`${baseKey}:name`, "John Doe"); | CODE |
| LOW | test/js/valkey/integration/complex-operations.test.ts | 219 | expect(nameValue).toBe("John Doe"); | CODE |
| LOW⚡ | test/js/bun/test/expect.test.js | 3984 | expect(`Lorem ipsum dolor sit amet, consectetur adipiscing elit. Donec nec posuere felis. Aliquam tincidunt elit a n | CODE |
| LOW⚡ | test/js/bun/test/expect.test.js | 3984 | expect(`Lorem ipsum dolor sit amet, consectetur adipiscing elit. Donec nec posuere felis. Aliquam tincidunt elit a n | CODE |
| LOW⚡ | test/js/bun/test/expect.test.js | 3986 | `Lorem ipsum dolor sit amet, consectetur adipiscing elit. Donec nec posuere felis. Aliquam tincidunt elit a nunc h | CODE |
| LOW⚡ | test/js/bun/test/expect.test.js | 3986 | `Lorem ipsum dolor sit amet, consectetur adipiscing elit. Donec nec posuere felis. Aliquam tincidunt elit a nunc h | CODE |
| LOW⚡ | test/js/bun/test/jest-extended.test.js | 654 | expect(`Lorem ipsum dolor sit amet, consectetur adipiscing elit. Donec nec posuere felis. Aliquam tincidunt elit a n | CODE |
| LOW⚡ | test/js/bun/test/jest-extended.test.js | 654 | expect(`Lorem ipsum dolor sit amet, consectetur adipiscing elit. Donec nec posuere felis. Aliquam tincidunt elit a n | CODE |
| LOW⚡ | test/js/bun/test/jest-extended.test.js | 656 | `Lorem ipsum dolor sit amet, consectetur adipiscing elit. Donec nec posuere felis. Aliquam tincidunt elit a nunc h | CODE |
| LOW⚡ | test/js/bun/test/jest-extended.test.js | 656 | `Lorem ipsum dolor sit amet, consectetur adipiscing elit. Donec nec posuere felis. Aliquam tincidunt elit a nunc h | CODE |
| LOW | test/js/bun/test/fake-timers/sinonjs/issue-437.test.ts | 17 | return "Lorem ipsum"; | CODE |
| LOW | test/js/bun/test/fake-timers/sinonjs/issue-437.test.ts | 24 | assert.equals(dateTime.foo(), "Lorem ipsum"); | CODE |
| LOW | test/js/bun/http/bun-serve-routes.test.ts | 60 | id: "user@example.com", | CODE |
| LOW | test/js/bun/http/decodeURIComponentSIMD.test.ts | 21 | "user@example.com", | CODE |
| LOW | test/js/bun/http/serve-http3.test.ts | 1418 | "user@example.com", | CODE |
| LOW | test/js/bun/http/serve-http3.test.ts | 1434 | "user@example.com": "200 /index", | CODE |
| LOW | test/js/bun/http/request-smuggling.test.ts | 1708 | ["user@example.com"], | CODE |
| LOW⚡ | test/js/bun/md/spec-tables.txt | 142 | Lorem ipsum dolor sit amet. | CODE |
| LOW⚡ | test/js/bun/md/spec-tables.txt | 142 | Lorem ipsum dolor sit amet. | CODE |
| LOW⚡ | test/js/bun/md/spec-tables.txt | 149 | <p>Lorem ipsum dolor sit amet.</p> | CODE |
| LOW⚡ | test/js/bun/md/spec-tables.txt | 149 | <p>Lorem ipsum dolor sit amet.</p> | CODE |
| LOW⚡ | test/js/bun/md/spec-tables.txt | 170 | Lorem ipsum dolor sit amet. | CODE |
| LOW⚡ | test/js/bun/md/spec-tables.txt | 170 | Lorem ipsum dolor sit amet. | CODE |
| LOW⚡ | test/js/bun/md/spec-tables.txt | 180 | <tr><td>Lorem ipsum dolor sit amet.</td><td></td></tr> | CODE |
| LOW⚡ | test/js/bun/md/spec-tables.txt | 180 | <tr><td>Lorem ipsum dolor sit amet.</td><td></td></tr> | CODE |
| LOW | test/js/bun/md/spec.txt | 9453 | "Lorem ipsum dolor\nsit amet." | CODE |
| LOW | test/js/bun/md/spec.txt | 9512 | > Lorem ipsum dolor | CODE |
| LOW | test/js/bun/md/spec.txt | 9527 | > Lorem ipsum dolor | CODE |
| LOW | test/js/bun/md/spec.txt | 9539 | "Lorem ipsum dolor" | CODE |
| LOW | test/js/bun/md/spec.txt | 9555 | "Lorem ipsum dolor\nsit amet." | CODE |
| LOW | test/js/bun/md/spec.txt | 9573 | "Lorem ipsum dolor\nsit amet." | CODE |
| LOW | test/js/bun/md/spec.txt | 9595 | "Lorem ipsum dolor\nsit amet." | CODE |
| LOW | test/js/bun/md/spec.txt | 9618 | str "Lorem ipsum dolor" | CODE |
| LOW | test/js/third_party/next-auth/fixture/src/auth.ts | 44 | if (credentials?.email === "user@example.com" && credentials?.password === "password") { | CODE |
| LOW | test/js/third_party/next-auth/fixture/src/auth.ts | 47 | email: "user@example.com", | CODE |
| LOW | …ird_party/body-parser/express-body-parser-test.test.ts | 82 | expect(req.body).toEqual({ "name": "John Doe", "email": "john.doe@example.com" }); | CODE |
| LOW | …ird_party/body-parser/express-body-parser-test.test.ts | 89 | const payload = Buffer.from(JSON.stringify({ "name": "John Doe", "email": "john.doe@example.com" })); | CODE |
| LOW | test/js/third_party/astro/astro-post.test.js | 74 | formData.append("name", "John Doe"); | CODE |
| LOW | test/js/third_party/astro/astro-post.test.js | 87 | name: "John Doe", | CODE |
| LOW⚡ | test/js/node/test/parallel/test-zlib-zstd-dictionary.js | 8 | `Lorem ipsum dolor sit amet, consectetur adipiscing elit. | CODE |
| LOW⚡ | test/js/node/test/parallel/test-zlib-zstd-dictionary.js | 8 | `Lorem ipsum dolor sit amet, consectetur adipiscing elit. | CODE |
| LOW⚡ | test/js/node/test/parallel/test-zlib-zstd-dictionary.js | 14 | `Lorem ipsum dolor sit amet, consectetur adipiscing elit. | CODE |
| LOW⚡ | test/js/node/test/parallel/test-zlib-zstd-dictionary.js | 14 | `Lorem ipsum dolor sit amet, consectetur adipiscing elit. | CODE |
| 91 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | …t/js/node/test/common/nodeinternals/internal/webidl.js | 417 | // Step 4: convert V with ECMA-262 ToNumber. | COMMENT |
| LOW⚡ | …t/js/node/test/common/nodeinternals/internal/webidl.js | 420 | // Step 5: normalize -0 to +0. | COMMENT |
| LOW⚡ | …t/js/node/test/common/nodeinternals/internal/webidl.js | 425 | // Step 6: [EnforceRange] rejects non-finite and out-of-range values. | COMMENT |
| LOW⚡ | …t/js/node/test/common/nodeinternals/internal/webidl.js | 447 | // Step 7: [Clamp] clamps, rounds, and returns non-NaN values. | COMMENT |
| LOW⚡ | …t/js/node/test/common/nodeinternals/internal/webidl.js | 455 | // Step 8: NaN, +0, -0, and infinities become +0. | COMMENT |
| LOW⚡ | …t/js/node/test/common/nodeinternals/internal/webidl.js | 460 | // Step 9: truncate to IntegerPart(x). | COMMENT |
| LOW⚡ | …t/js/node/test/common/nodeinternals/internal/webidl.js | 483 | // Step 11: wrap into the signed range when the high bit is set. | COMMENT |
| LOW⚡ | …t/js/node/test/common/nodeinternals/internal/webidl.js | 488 | // Step 12: return the unsigned value. | COMMENT |
| LOW⚡ | …t/js/node/test/common/nodeinternals/internal/webidl.js | 505 | // Step 10: reduce modulo 2^bitLength. | COMMENT |
| LOW⚡ | …t/js/node/test/common/nodeinternals/internal/webidl.js | 509 | // Step 11: wrap into the signed range when the high bit is set. | COMMENT |
| LOW⚡ | …t/js/node/test/common/nodeinternals/internal/webidl.js | 514 | // Step 12: return the unsigned value. | COMMENT |
| LOW⚡ | …t/js/node/test/common/nodeinternals/internal/webidl.js | 636 | // Step 2: throw unless S is one of the enumeration values. | COMMENT |
| LOW⚡ | …t/js/node/test/common/nodeinternals/internal/webidl.js | 643 | // Step 3: return the matching enumeration value. | COMMENT |
| LOW⚡ | …t/js/node/test/common/nodeinternals/internal/webidl.js | 713 | // Step 1: reject non-object, non-null, non-undefined values. | COMMENT |
| LOW⚡ | …t/js/node/test/common/nodeinternals/internal/webidl.js | 721 | // Step 2: create the IDL dictionary value. | COMMENT |
| LOW⚡ | …t/js/node/test/common/nodeinternals/internal/webidl.js | 782 | // Step 2: GetMethod(V, %Symbol.iterator%). | COMMENT |
| LOW⚡ | …t/js/node/test/common/nodeinternals/internal/webidl.js | 784 | // Step 3: throw if the iterator method is undefined, null, or not callable. | COMMENT |
| LOW | …t/js/node/test/common/nodeinternals/internal/webidl.js | 559 | // Step 2: return a reference to the same object. | COMMENT |
| LOW | …t/js/node/test/common/nodeinternals/internal/webidl.js | 762 | // Step 5: return the IDL dictionary. | COMMENT |
| LOW | …t/js/node/test/common/nodeinternals/internal/webidl.js | 839 | // Step 2: otherwise throw. | COMMENT |
| LOW | …t/js/node/test/common/nodeinternals/internal/webidl.js | 881 | // Step 3: reject non-fixed SharedArrayBuffer backing stores unless | COMMENT |
| LOW | …t/js/node/test/common/nodeinternals/internal/webidl.js | 950 | // Step 5: return a reference to the same object. | COMMENT |
| LOW | …t/js/node/test/common/nodeinternals/internal/webidl.js | 1016 | // Step 4: return a reference to the same ArrayBuffer. | COMMENT |
| LOW⚡ | test/js/sql/sql.test.ts | 674 | // Step 1: Insert a row (succeeds) | COMMENT |
| LOW⚡ | test/js/sql/sql.test.ts | 680 | // Step 2: Try to insert conflicting row (throws expected error) | COMMENT |
| LOW⚡ | test/js/sql/sql.test.ts | 689 | // Step 3: Try another query - THIS WILL HANG | COMMENT |
| LOW⚡ | test/regression/issue/tui-app-tty-pattern.test.ts | 25 | // Step 1: Check if stdin is piped | COMMENT |
| LOW⚡ | test/regression/issue/tui-app-tty-pattern.test.ts | 34 | // Step 2: After stdin EOF, try to reopen /dev/tty | COMMENT |
| LOW | test/bundler/bundler_compile.test.ts | 1293 | // Step 2: Run bun build with compile, minify, sourcemap, and bytecode | COMMENT |
| LOW⚡ | scripts/packer/windows-x64.pkr.hcl | 98 | // Step 1: Run bootstrap — installs all build dependencies | COMMENT |
| LOW⚡ | scripts/packer/windows-x64.pkr.hcl | 105 | // Step 2: Upload agent.mjs | COMMENT |
| LOW⚡ | scripts/packer/windows-x64.pkr.hcl | 111 | // Step 3: Install agent service via nssm | COMMENT |
| LOW⚡ | scripts/packer/windows-x64.pkr.hcl | 119 | // Step 4: Reboot to clear pending updates (VS Build Tools, Windows Updates) | COMMENT |
| LOW⚡ | scripts/packer/windows-x64.pkr.hcl | 124 | // Step 5: Sysprep — MUST be last provisioner | COMMENT |
| LOW⚡ | scripts/packer/windows-arm64.pkr.hcl | 93 | // Step 1: Run bootstrap — installs all build dependencies | COMMENT |
| LOW⚡ | scripts/packer/windows-arm64.pkr.hcl | 100 | // Step 2: Upload agent.mjs | COMMENT |
| LOW⚡ | scripts/packer/windows-arm64.pkr.hcl | 106 | // Step 3: Install agent service via nssm | COMMENT |
| LOW⚡ | scripts/packer/windows-arm64.pkr.hcl | 114 | // Step 4: Reboot to clear pending updates (VS Build Tools, Windows Updates) | COMMENT |
| LOW⚡ | scripts/packer/windows-arm64.pkr.hcl | 119 | // Step 5: Sysprep — MUST be last provisioner | COMMENT |
| LOW | packages/bun-uws/src/HttpContext.h | 529 | /* First of all we need to check if this socket was deleted due to upgrade */ | COMMENT |
| LOW | packages/bun-uws/src/HttpContext.h | 696 | /* We need to check if we should close this socket here now */ | COMMENT |
| LOW | packages/bun-uws/src/HttpResponse.h | 215 | /* We need to check if we should close this socket here now */ | COMMENT |
| LOW | packages/bun-uws/src/HttpResponse.h | 291 | /* We need to check if we should close this socket here now */ | COMMENT |
| LOW | src/install/npm.rs | 1610 | // stability check - if the previous package is blocked from age, we need to check if the current packag | COMMENT |
| LOW | src/install/npm.rs | 1777 | // stability check - if the previous package is blocked from age, we need to check if the current package wa | COMMENT |
| LOW | src/js/internal/streams/readable.ts | 1076 | // We need to check if there is someone still listening to | COMMENT |
| LOW | src/js/internal/streams/readable.ts | 1095 | // We need to check if there is someone still listening to | COMMENT |
| LOW | src/js/internal/repl/completion.js | 725 | // If a getter/proxy hasn't been found by the recursion call we need to check if maybe a getter/proxy | COMMENT |
| LOW⚡ | src/js/internal/sql/shared.ts | 1673 | // Step 1: Determine the options object and initial URL | COMMENT |
| LOW | src/js/internal/sql/shared.ts | 1726 | // Step 3: Parse protocol and ensure URL format for non-SQLite databases | COMMENT |
| LOW⚡ | src/js/internal/sql/shared.ts | 1757 | // Step 4: Set adapter from environment if not already set, but ONLY if not | COMMENT |
| LOW⚡ | src/js/internal/sql/shared.ts | 1763 | // Step 5: Return early if adapter is explicitly specified | COMMENT |
| LOW | src/js/internal/sql/shared.ts | 1776 | // Step 6: Infer adapter from protocol | COMMENT |
| LOW | …react_compiler/inference/align_object_method_scopes.rs | 101 | // Step 1: Merge affected scopes to their canonical root. | COMMENT |
| LOW | …react_compiler/inference/align_object_method_scopes.rs | 148 | // Step 2: Repoint identifiers whose scopes were merged | COMMENT |
| LOW⚡ | …mpiler/inference/build_reactive_scope_terminals_hir.rs | 266 | // Step 1: Collect rewrites | COMMENT |
| LOW⚡ | …mpiler/inference/build_reactive_scope_terminals_hir.rs | 269 | // Step 2: Apply rewrites by splitting blocks | COMMENT |
| LOW | …mpiler/inference/build_reactive_scope_terminals_hir.rs | 333 | // Step 3: Repoint phis when they refer to a rewritten block | COMMENT |
| LOW⚡ | …mpiler/inference/build_reactive_scope_terminals_hir.rs | 353 | // Step 4: Fixup HIR to restore RPO, correct predecessors, renumber instructions | COMMENT |
| LOW⚡ | …mpiler/inference/build_reactive_scope_terminals_hir.rs | 358 | // Step 5: Fix scope and identifier ranges to account for renumbered instructions | COMMENT |
| 25 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | …t/js/node/test/common/nodeinternals/internal/webidl.js | 417 | // Step 4: convert V with ECMA-262 ToNumber. | COMMENT |
| LOW⚡ | …t/js/node/test/common/nodeinternals/internal/webidl.js | 420 | // Step 5: normalize -0 to +0. | COMMENT |
| LOW⚡ | …t/js/node/test/common/nodeinternals/internal/webidl.js | 455 | // Step 8: NaN, +0, -0, and infinities become +0. | COMMENT |
| LOW⚡ | …t/js/node/test/common/nodeinternals/internal/webidl.js | 460 | // Step 9: truncate to IntegerPart(x). | COMMENT |
| LOW⚡ | …t/js/node/test/common/nodeinternals/internal/webidl.js | 483 | // Step 11: wrap into the signed range when the high bit is set. | COMMENT |
| LOW⚡ | …t/js/node/test/common/nodeinternals/internal/webidl.js | 488 | // Step 12: return the unsigned value. | COMMENT |
| LOW⚡ | …t/js/node/test/common/nodeinternals/internal/webidl.js | 505 | // Step 10: reduce modulo 2^bitLength. | COMMENT |
| LOW⚡ | …t/js/node/test/common/nodeinternals/internal/webidl.js | 509 | // Step 11: wrap into the signed range when the high bit is set. | COMMENT |
| LOW⚡ | …t/js/node/test/common/nodeinternals/internal/webidl.js | 514 | // Step 12: return the unsigned value. | COMMENT |
| LOW⚡ | …t/js/node/test/common/nodeinternals/internal/webidl.js | 636 | // Step 2: throw unless S is one of the enumeration values. | COMMENT |
| LOW⚡ | …t/js/node/test/common/nodeinternals/internal/webidl.js | 643 | // Step 3: return the matching enumeration value. | COMMENT |
| LOW⚡ | …t/js/node/test/common/nodeinternals/internal/webidl.js | 713 | // Step 1: reject non-object, non-null, non-undefined values. | COMMENT |
| LOW⚡ | …t/js/node/test/common/nodeinternals/internal/webidl.js | 721 | // Step 2: create the IDL dictionary value. | COMMENT |
| LOW⚡ | …t/js/node/test/common/nodeinternals/internal/webidl.js | 782 | // Step 2: GetMethod(V, %Symbol.iterator%). | COMMENT |
| LOW⚡ | …t/js/node/test/common/nodeinternals/internal/webidl.js | 784 | // Step 3: throw if the iterator method is undefined, null, or not callable. | COMMENT |
| LOW | …t/js/node/test/common/nodeinternals/internal/webidl.js | 559 | // Step 2: return a reference to the same object. | COMMENT |
| LOW | …t/js/node/test/common/nodeinternals/internal/webidl.js | 762 | // Step 5: return the IDL dictionary. | COMMENT |
| LOW | …t/js/node/test/common/nodeinternals/internal/webidl.js | 839 | // Step 2: otherwise throw. | COMMENT |
| LOW | …t/js/node/test/common/nodeinternals/internal/webidl.js | 881 | // Step 3: reject non-fixed SharedArrayBuffer backing stores unless | COMMENT |
| LOW | …t/js/node/test/common/nodeinternals/internal/webidl.js | 950 | // Step 5: return a reference to the same object. | COMMENT |
| LOW | …t/js/node/test/common/nodeinternals/internal/webidl.js | 1016 | // Step 4: return a reference to the same ArrayBuffer. | COMMENT |
| LOW⚡ | test/js/sql/sql.test.ts | 674 | // Step 1: Insert a row (succeeds) | COMMENT |
| LOW⚡ | test/js/sql/sql.test.ts | 680 | // Step 2: Try to insert conflicting row (throws expected error) | COMMENT |
| LOW⚡ | test/js/sql/sql.test.ts | 689 | // Step 3: Try another query - THIS WILL HANG | COMMENT |
| LOW⚡ | test/regression/issue/tui-app-tty-pattern.test.ts | 25 | // Step 1: Check if stdin is piped | COMMENT |
| LOW⚡ | test/regression/issue/tui-app-tty-pattern.test.ts | 34 | // Step 2: After stdin EOF, try to reopen /dev/tty | COMMENT |
| LOW | test/bundler/bundler_compile.test.ts | 1293 | // Step 2: Run bun build with compile, minify, sourcemap, and bytecode | COMMENT |
| LOW⚡ | scripts/packer/windows-x64.pkr.hcl | 98 | // Step 1: Run bootstrap — installs all build dependencies | COMMENT |
| LOW⚡ | scripts/packer/windows-x64.pkr.hcl | 105 | // Step 2: Upload agent.mjs | COMMENT |
| LOW⚡ | scripts/packer/windows-x64.pkr.hcl | 111 | // Step 3: Install agent service via nssm | COMMENT |
| LOW⚡ | scripts/packer/windows-x64.pkr.hcl | 119 | // Step 4: Reboot to clear pending updates (VS Build Tools, Windows Updates) | COMMENT |
| LOW⚡ | scripts/packer/windows-x64.pkr.hcl | 124 | // Step 5: Sysprep — MUST be last provisioner | COMMENT |
| LOW⚡ | scripts/packer/windows-arm64.pkr.hcl | 93 | // Step 1: Run bootstrap — installs all build dependencies | COMMENT |
| LOW⚡ | scripts/packer/windows-arm64.pkr.hcl | 100 | // Step 2: Upload agent.mjs | COMMENT |
| LOW⚡ | scripts/packer/windows-arm64.pkr.hcl | 106 | // Step 3: Install agent service via nssm | COMMENT |
| LOW⚡ | scripts/packer/windows-arm64.pkr.hcl | 114 | // Step 4: Reboot to clear pending updates (VS Build Tools, Windows Updates) | COMMENT |
| LOW⚡ | scripts/packer/windows-arm64.pkr.hcl | 119 | // Step 5: Sysprep — MUST be last provisioner | COMMENT |
| LOW | packages/bun-lambda/README.md | 21 | ### Step 1: Create a Bun Lambda handler function | COMMENT |
| LOW | packages/bun-lambda/README.md | 58 | ### Step 2: Build the Bun handler | COMMENT |
| LOW | packages/bun-lambda/README.md | 65 | ### Step 3: Create the Lambda function on AWS | COMMENT |
| LOW⚡ | src/js/internal/sql/shared.ts | 1673 | // Step 1: Determine the options object and initial URL | COMMENT |
| LOW | src/js/internal/sql/shared.ts | 1726 | // Step 3: Parse protocol and ensure URL format for non-SQLite databases | COMMENT |
| LOW⚡ | src/js/internal/sql/shared.ts | 1757 | // Step 4: Set adapter from environment if not already set, but ONLY if not | COMMENT |
| LOW⚡ | src/js/internal/sql/shared.ts | 1763 | // Step 5: Return early if adapter is explicitly specified | COMMENT |
| LOW | src/js/internal/sql/shared.ts | 1776 | // Step 6: Infer adapter from protocol | COMMENT |
| LOW | …react_compiler/inference/align_object_method_scopes.rs | 101 | // Step 1: Merge affected scopes to their canonical root. | COMMENT |
| LOW | …react_compiler/inference/align_object_method_scopes.rs | 148 | // Step 2: Repoint identifiers whose scopes were merged | COMMENT |
| LOW⚡ | …mpiler/inference/build_reactive_scope_terminals_hir.rs | 266 | // Step 1: Collect rewrites | COMMENT |
| LOW⚡ | …mpiler/inference/build_reactive_scope_terminals_hir.rs | 269 | // Step 2: Apply rewrites by splitting blocks | COMMENT |
| LOW | …mpiler/inference/build_reactive_scope_terminals_hir.rs | 333 | // Step 3: Repoint phis when they refer to a rewritten block | COMMENT |
| LOW⚡ | …mpiler/inference/build_reactive_scope_terminals_hir.rs | 353 | // Step 4: Fixup HIR to restore RPO, correct predecessors, renumber instructions | COMMENT |
| LOW⚡ | …mpiler/inference/build_reactive_scope_terminals_hir.rs | 358 | // Step 5: Fix scope and identifier ranges to account for renumbered instructions | COMMENT |
| LOW⚡ | …compiler/inference/propagate_scope_dependencies_hir.rs | 92 | // Step 2: Calculate hoistable dependencies using the tree. | COMMENT |
| LOW⚡ | …compiler/inference/propagate_scope_dependencies_hir.rs | 98 | // Step 3: Reduce dependencies to a minimal set. | COMMENT |
| LOW | …compiler/inference/propagate_scope_dependencies_hir.rs | 1018 | // Step 1: Collect identifier to function expression mappings | COMMENT |
| LOW | …compiler/inference/propagate_scope_dependencies_hir.rs | 1046 | // Step 2: Forward pass to analyze assumed function calls | COMMENT |
| LOW | …compiler/inference/propagate_scope_dependencies_hir.rs | 1119 | // Step 3: Propagate assumed-invoked status through mayInvoke chains | COMMENT |
| LOW | src/runtime/server/StaticRoute.rs | 498 | // Step 1: If-Match (strong comparison); step 2: If-Unmodified-Since | COMMENT |
| LOW⚡ | src/runtime/server/StaticRoute.rs | 515 | // Step 3: If-None-Match (weak comparison). Presence suppresses step 4. | COMMENT |
| LOW⚡ | src/runtime/server/StaticRoute.rs | 521 | // Step 4: If-Modified-Since (only when If-None-Match is absent). | COMMENT |
| 14 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | bench/react-hello-world/react-hello-world.workerd.js | 16 | var iC=Object.create;var{getPrototypeOf:tC,defineProperty:XE,getOwnPropertyNames:JC}=Object;var VC=Object.prototype.hasO | CODE |
| MEDIUM | bench/react-hello-world/react-hello-world.workerd.js | 16 | var iC=Object.create;var{getPrototypeOf:tC,defineProperty:XE,getOwnPropertyNames:JC}=Object;var VC=Object.prototype.hasO | CODE |
| MEDIUM | bench/react-hello-world/react-hello-world.workerd.js | 42 | $RC=function(a,b){if(b=document.getElementById(b))(a=document.getElementById(a))?(a.previousSibling.data="$~",$RB.push(a | CODE |
| MEDIUM | bench/react-hello-world/react-hello-world.workerd.js | 42 | $RC=function(a,b){if(b=document.getElementById(b))(a=document.getElementById(a))?(a.previousSibling.data="$~",$RB.push(a | CODE |
| MEDIUM | bench/site/bench/bundler.sh | 2 | # rolldown/benchmarks harness on apps/10000 (10k React components / ~19k modules): vite, rsbuild, rspack, rollup, rolldo | COMMENT |
| MEDIUM | bench/site/bench/bundler.sh | 3 | # The harness runs `bun build` via `bun` on PATH, so a shim dir pointing at $BUN goes first on PATH. | COMMENT |
| MEDIUM | test/js/web/structured-clone-blob-file.test.ts | 379 | // payload; keeps the test robust against wire-format header changes. | COMMENT |
| MEDIUM | test/js/web/structured-clone-blob-file.test.ts | 728 | // test stays robust against outer serializer framing changes. | COMMENT |
| MEDIUM | …js/bun/http/serve-response-stream-sink-leak-fixture.ts | 74 | // is robust to both ends; a min would pass on one dip even while the sink leaks. | COMMENT |
| MEDIUM | test/js/bun/gc/gc-controller-cadence.test.ts | 136 | // Observed ~128 before the fix. A generous ceiling keeps this robust | COMMENT |
| MEDIUM | …/node/test/parallel/test-timers-unrefed-in-callback.js | 14 | // robust is that: | COMMENT |
| MEDIUM | …st/js/node/test/parallel/test-http2-session-timeout.js | 50 | // connection as the timeout should be robust. Double it anyway for good | COMMENT |
| MEDIUM | test/cli/install/registry/verdaccio.yaml | 3 | # please read carefully the documentation and best practices to | COMMENT |
| MEDIUM | test/cli/install/registry/verdaccio.yaml | 9 | # Read about the best practices | COMMENT |
| MEDIUM | test/regression/issue/29585.test.ts | 16 | // pattern) keeps the check robust against any future naming scheme. | COMMENT |
| MEDIUM | scripts/bootstrap.sh | 1988 | # test/harness.ts getPuppeteerInstallEnv). | COMMENT |
| MEDIUM | packages/h3blast/src/h3blast.c | 790 | // Rewind and erase the previous frame in one shot — robust to wrapped lines. | COMMENT |
| MEDIUM | .github/workflows/source-lints.yml | 84 | # paths, or `harness` (resolved via test/tsconfig.json `paths`), so a | COMMENT |
| MEDIUM | src/js/internal/repl/completion.js | 602 | // upstream-todo(dario-piotrowicz): make this more robust, right now we only split by spaces | COMMENT |
| MEDIUM | src/js/node/http2.ts | 2621 | // seamless compatibility with http1. When the session is being torn down with an error | COMMENT |
| MEDIUM | src/bun_core/env_var.rs | 13 | //! but environment variables are not meant to be a robust configuration mechanism. If you do think | COMMENT |
| MEDIUM | src/bun_core/env_var.rs | 494 | /// Note that deserialization errors cannot panic. If you need more robust means of | COMMENT |
| MEDIUM | src/react_compiler/Cargo.toml | 10 | # Fixture-harness support: test-only `// @pragma` parsing, the pragma-gated | COMMENT |
| MEDIUM | …c/react_compiler/optimization/dead_code_elimination.rs | 404 | // Definitely safe to prune since they are read-only | COMMENT |
| MEDIUM | src/runtime/shell/interpreter.rs | 7 | //! performance reasons and also to leverage Bun's existing IO/FS code | COMMENT |
| MEDIUM | src/runtime/allocators/LinuxMemFdAllocator.rs | 2 | //! leverage copy-on-write memory to avoid actually copying the data. To do that | COMMENT |
| MEDIUM | src/runtime/bake/FrameworkRouter.rs | 1249 | /// Fast enough for development to be seamless, but avoids building a | COMMENT |
| MEDIUM | src/runtime/bake/dev_server/source_map_store.rs | 359 | /// utilize the bottom 32 bits of their keys. This is because the bottom | COMMENT |
| MEDIUM | src/runtime/bake/bun-framework-react/server.tsx | 194 | // The RSC payload is provided so client-side can use this file for seamless | COMMENT |
| MEDIUM | src/runtime/socket/WindowsNamedPipe.rs | 6 | //! and Windows Named Pipe operations, enabling seamless cross-platform | COMMENT |
| MEDIUM | src/ast/expr.rs | 2453 | break 'brk left; // Definitely not null or undefined | CODE |
| MEDIUM | src/ast/expr.rs | 2457 | break 'brk PrimitiveType::Mixed; // Definitely some kind of primitive | CODE |
| MEDIUM | src/crash_handler/lib.rs | 1978 | // https://github.com/go-delve/delve/pull/1384 | COMMENT |
| MEDIUM | src/jsc/bindings/js_classes.ts | 3 | // tests if a value is an instanceof a native class in a robust cross-realm manner | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | tools/hawk/README.md | 22 | git checkout -- src/runtime/Cargo.toml && rm -f src/runtime/hawk_root.rs # revert the scaffolding | CODE |
| MEDIUM⚡ | src/runtime/api.rs | 154 | // ─── shared scaffold for Bun.{TOML,JSONC,JSON5,YAML}.parse ─────────────────── | COMMENT |
| MEDIUM⚡ | src/runtime/api.rs | 159 | // (c) parse-error class + Expr→JS tail — so this helper owns ONLY the scaffold | COMMENT |
| MEDIUM | src/runtime/test_runner/expect.rs | 1717 | /// the matcher-scaffold family alongside [`Self::run_unary_predicate`] and | COMMENT |
| MEDIUM⚡ | src/runtime/test_runner/expect.rs | 1984 | // ─── unary-predicate matcher scaffold ──────────────────────────────────── | COMMENT |
| MEDIUM⚡ | src/runtime/test_runner/expect.rs | 1989 | /// Shared scaffold for zero-arg `expect(v).toBeX()` matchers whose pass/fail | COMMENT |
| MEDIUM | src/runtime/test_runner/expect.rs | 2017 | /// Shared scaffold for one-arg `expect(v).toStartWith/toEndWith/toInclude(expected)` | COMMENT |
| MEDIUM⚡ | src/runtime/timer/mod.rs | 34 | // Shared scaffold for `TimeoutObject` / `ImmediateObject`: both are a | COMMENT |
| MEDIUM | src/runtime/api/XMLObject.rs | 68 | // The scaffold hands the string's code units over as bytes. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | test/js/web/fetch/fixture.html | 1115 | bun implements Node.js' module resolution algorithm, so you can use npm packages in Bun. ESM and | CODE |
| MEDIUM | test/js/bun/toml/toml-test-suite.test.ts | 1579 | '[fruit]\napple.color = "red"\napple.taste.sweet = true\n\n# [fruit.apple] # INVALID\n# [fruit.apple.taste] # IN | CODE |
| MEDIUM | test/js/bun/toml/toml-test-suite.test.ts | 1696 | '# This makes the key "fruit" into a table.\nfruit.apple.smooth = true\n\n# So then you can add to the table "frui | CODE |
| MEDIUM | test/js/bun/toml/toml-test-suite.test.ts | 6546 | '[fruit]\napple.color = "red"\napple.taste.sweet = true\n\n[fruit.apple] # INVALID\n# [fruit.apple.taste] # INVA | CODE |
| MEDIUM | test/js/bun/toml/toml-test-suite.test.ts | 6559 | '[fruit]\napple.color = "red"\napple.taste.sweet = true\n\n# [fruit.apple] # INVALID\n[fruit.apple.taste] # INVA | CODE |
| LOW | test/js/bun/css/files/tachyons.css | 692 | 2. Don't forget to clearfix your floats with .cf | CODE |
| LOW | packages/bun-usockets/src/internal/internal.h | 108 | #define POLL_TYPE_BITSIZE 5 // make sure to update epoll_kqueue.h if you change this | COMMENT |
| LOW | packages/bun-usockets/src/internal/loop_data.h | 35 | // IMPORTANT: When changing this, don't forget to update the Rust mirror in src/uws_sys/InternalLoopData.rs as well! | COMMENT |
| LOW | src/sql_jsc/postgres/PostgresSQLConnection.rs | 2330 | // explicit use switch without else so if new modes are added, we don't forget to check for duplicate fi | COMMENT |
| LOW | src/jsc/bindings/sqlite/JSSQLStatement.cpp | 2421 | // Don't forget to reset before releasing the exception. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | test/js/bun/shell/bunshell.test.ts | 1966 | # Check if we got a non-empty, non-null version string | COMMENT |
| LOW | test/js/bun/yaml/translate_yaml_test_suite_to_bun.py | 83 | # Check if this is a stringified collection from yaml package | COMMENT |
| LOW | test/js/bun/yaml/translate_yaml_test_suite_to_bun.py | 168 | # Check if this is a simple object | COMMENT |
| LOW | test/js/bun/yaml/translate_yaml_test_suite_to_bun.py | 837 | # Check if it's in an array context | COMMENT |
| LOW | test/js/bun/yaml/translate_yaml_test_suite_to_bun.py | 841 | # Check if it's in mapping values (not keys) | COMMENT |
| LOW | test/js/bun/yaml/translate_yaml_test_suite_to_bun.py | 465 | # Check if this is an error test (has 'error' file) | STRING |
| LOW | test/js/bun/yaml/translate_yaml_test_suite_to_bun.py | 699 | # Check if YAML has anchors/aliases | STRING |
| LOW | test/js/bun/yaml/translate_yaml_test_suite_to_bun.py | 914 | # Check if yaml package is installed (for getting expected values) | STRING |
| LOW | test/js/bun/yaml/translate_yaml_test_suite_to_bun.py | 939 | # Check if this is a test directory (has in.yaml) | STRING |
| LOW | scripts/lldb-inline.sh | 11 | # Check if we need to rebuild | COMMENT |
| LOW | packages/bun-types/test.d.ts | 72 | * ## Set Date to a specific time | COMMENT |
| LOW | misctools/lldb/bun_pretty_printer.py | 75 | # Check if it's a pointer type and dereference if needed | COMMENT |
| LOW | misctools/lldb/bun_pretty_printer.py | 85 | # Check if it's 8-bit (latin1) or 16-bit (utf16) string | COMMENT |
| LOW | .buildkite/Dockerfile-bootstrap.sh | 4 | # Check if running as root | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | test/js/bun/yaml/translate_yaml_test_suite_to_bun.py | 87 | # Extract the content and convert to JS array.toString() format | COMMENT |
| HIGH | test/js/bun/yaml/translate_yaml_test_suite_to_bun.py | 104 | # JavaScript Object.toString() returns "[object Object]" | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | test/js/node/url/url-null-char.test.js | 6 | // TODO: Fix error properties | COMMENT |
| LOW | test/bake/dev/esm.test.ts | 260 | const esmImport = await import('./esm'); // TODO: implement sync ESM | CODE |
| LOW | src/js/thirdparty/ws.js | 1302 | // TODO: implement this more proper | COMMENT |
| LOW | src/runtime/cli/run_command.rs | 390 | let ipc_fd: Option<bun_sys::Fd> = None; // TODO: implement on Windows | CODE |
| LOW | src/runtime/bake/DevServer.rs | 1947 | // TODO: implement a proper solution here | COMMENT |
| LOW | src/runtime/bake/dev_server/mod.rs | 1393 | // TODO: implement that. for now it ignores (BUN-10968) | COMMENT |
| LOW | src/runtime/webcore/Blob.rs | 4878 | // TODO: implement a writev() fast path | COMMENT |
| LOW | src/ast/fold_string_addition.rs | 155 | // TODO: implement foldAdditionPreProcess to fold some more things :) | COMMENT |
| LOW | src/js_parser/parse/mod.rs | 927 | // TODO: implement saveExprCommentsHere and use using_loc here | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | test/js/bun/yaml/translate_yaml_test_suite_to_bun.py | 12 | CODE | |
| LOW | test/js/bun/yaml/translate_yaml_test_suite_to_bun.py | 59 | CODE | |
| LOW | test/js/bun/yaml/translate_yaml_test_suite_to_bun.py | 124 | CODE | |
| LOW | test/js/bun/yaml/translate_yaml_test_suite_to_bun.py | 197 | CODE | |
| LOW | test/js/bun/yaml/translate_yaml_test_suite_to_bun.py | 437 | CODE | |
| LOW | test/js/bun/yaml/translate_yaml_test_suite_to_bun.py | 899 | CODE | |
| LOW | misctools/lldb/lldb_webkit.py | 1179 | CODE | |
| LOW | misctools/lldb/bun_pretty_printer.py | 70 | CODE | |
| LOW | misctools/lldb/bun_pretty_printer.py | 167 | CODE | |
| LOW | misctools/lldb/bun_pretty_printer.py | 247 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | test/js/node/test/sequential/test-init.js | 52 | // test-init-index is in fixtures dir as requested by ry, so go there | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | src/zlib/lib.rs | 106 | /// In this implementation, inflate() always flushes as much output as possible to the output buffer, and always use | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | test/js/third_party/remix/remix-build/server/index.js | 8 | function handleRequest(request, responseStatusCode, responseHeaders, remixContext, loadContext) { | CODE |
| LOW | …st/js/node/test/parallel/test-http2-ip-address-host.js | 34 | function handleRequest(url) { | CODE |
| LOW | …rallel/test-async-hooks-stack-overflow-nested-async.js | 31 | function processData(data, depth = 0) { | CODE |
| LOW | test/bake/dev/hot.test.ts | 70 | export function doSomething() { | CODE |
| LOW | test/bake/dev/server-sourcemap.test.ts | 125 | "lib/utils.ts": `export function doSomething() { | CODE |
| LOW | test/regression/issue/25648.test.ts | 15 | export function doSomething(fn: () => number) { | CODE |
| LOW | test/bundler/bundler_edgecase.test.ts | 2648 | export function getData() { | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | test/js/bun/yaml/translate_yaml_test_suite_to_bun.py | 929 | print("Error: yaml package is not installed. Please run: npm install yaml") | STRING |
| LOW | test/js/bun/yaml/translate_yaml_test_suite_to_bun.py | 431 | except Exception as e: | STRING |
| LOW | test/js/bun/yaml/translate_yaml_test_suite_to_bun.py | 1025 | except Exception as e: | STRING |
| LOW | test/js/bun/yaml/translate_yaml_test_suite_to_bun.py | 1072 | except Exception as e: | STRING |
| LOW | test/js/bun/yaml/translate_yaml_test_suite_to_bun.py | 1117 | except Exception as e: | STRING |
| LOW | misctools/lldb/bun_pretty_printer.py | 302 | except Exception as e: | CODE |
| MEDIUM | misctools/lldb/bun_pretty_printer.py | 43 | def bun_BabyList_SummaryProvider(value, _=None): | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | scripts/sync-react-compiler.sh | 14 | # Usage: | COMMENT |
| LOW | scripts/update-sqlite-amalgamation.sh | 8 | # Usage: | COMMENT |
| LOW | misctools/unicode-generator.ts | 119 | // Example usage: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | test/js/bun/yaml/translate_yaml_test_suite_to_bun.py | 384 | # Create a temporary JavaScript file to parse the YAML | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | test/js/bun/yaml/translate_yaml_test_suite_to_bun.py | 6 | CODE | |
| LOW | test/js/node/readline/run-with-pty.py | 5 | CODE | |
| LOW | misctools/lldb/bun_pretty_printer.py | 3 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | misctools/lldb/lldb_webkit.py | 648 | CODE |