The React Framework
This report summarizes scanner evidence for vercel/next.js, a JavaScript project with 143,229 GitHub stars. SynthScan examined 2,338,800 lines of code across 28347 source files, recording 6329 pattern matches distributed across 18 syntactic categories. The legacy adjusted pattern signal is 2.5 (Low pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.
Can maintainers explain intent, assumptions, and trade-offs? 6147 finding(s).
Are imports declared and package/API names verified? 168 finding(s).
Are wrappers, guards, and repeated structures necessary? 4742 finding(s).
Which changes need focused human review? 6329 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 6329 distinct pattern matches across 18 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | bench/vercel/generate-package-json.js | 44 | async function getCurrentRootReactPackagesVersions() { | CODE |
| LOW | bench/render-pipeline/benchmark.ts | 786 | async function runMinimalServerModeBenchmark( | CODE |
| LOW | bench/render-pipeline/benchmark.ts | 842 | async function runMinimalServerBenchmarks( | CODE |
| LOW | bench/render-pipeline/benchmark.ts | 854 | async function ensureGeneratedClientGraph(options: CliOptions): Promise<void> { | CODE |
| LOW | …evals/agent-058-agent-feedback-distinct-issues/EVAL.ts | 56 | function literalFeedbackCommandPayloads(commands: string[]): string[] { | CODE |
| LOW | …evals/agent-058-agent-feedback-distinct-issues/EVAL.ts | 71 | function feedbackCommandInvocationCount(commands: string[]): number { | CODE |
| LOW | evals/evals/agent-022-prefer-server-actions/EVAL.ts | 28 | function readContactFormAndImports(): string { | CODE |
| LOW | …s/evals/agent-057-agent-feedback-anonymization/EVAL.ts | 75 | function literalFeedbackCommandPayloads(commands: string[]): string[] { | CODE |
| LOW | …s/evals/agent-057-agent-feedback-anonymization/EVAL.ts | 90 | function feedbackCommandInvocationCount(commands: string[]): number { | CODE |
| LOW | evals/lib/setup.ts | 230 | export async function writeAgentFeedbackInstructions( | CODE |
| LOW | evals/lib/bundle-optimizer/hooks.ts | 140 | function assertBundleOptimizerSkillInvoked({ | CODE |
| LOW | …t-custom-transforms/tests/loader/issue-40231/output.js | 1 | function loadSomethingWithDynamicImport(param) { | CODE |
| LOW | …xt-custom-transforms/tests/loader/issue-40231/input.js | 1 | function loadSomethingWithDynamicImport(param) { | CODE |
| LOW | test/get-test-filter.js | 49 | function getTestFilterFromManifest(manifest) { | CODE |
| LOW | …t/unit/runtime-error-state/runtime-error-state.test.ts | 21 | function createRuntimeErrorStateHandler( | CODE |
| LOW | …-before-hydration/hmr-refresh-before-hydration.test.ts | 79 | function countServerComponentChanges(page: Playwright.Page) { | CODE |
| LOW | …ir/instant-navs-devtools/instant-navs-devtools.test.ts | 9 | async function waitForPanelRouterTransition() { | CODE |
| LOW | …ir/instant-navs-devtools/instant-navs-devtools.test.ts | 35 | async function waitForInstantModeCookieAbsent( | CODE |
| LOW | …ir/instant-navs-devtools/instant-navs-devtools.test.ts | 163 | async function clickInstantNavMenuItemIfMounted(browser: Playwright) { | CODE |
| LOW | …ir/instant-navs-devtools/instant-navs-devtools.test.ts | 176 | async function reopenInstantNavPanelFromMenu(browser: Playwright) { | CODE |
| LOW | …ir/instant-navs-devtools/instant-navs-devtools.test.ts | 202 | async function expectInstantNavPanelText( | CODE |
| LOW | …ir/instant-navs-devtools/instant-navs-devtools.test.ts | 300 | async function expectTargetPageSpaShellWithRuntimeData(browser: Playwright) { | CODE |
| LOW | …ir/instant-navs-devtools/instant-navs-devtools.test.ts | 351 | async function expectAwaitConnectionPageLoading(browser: Playwright) { | CODE |
| LOW | …ir/instant-navs-devtools/instant-navs-devtools.test.ts | 365 | async function openHomeWithTargetPageWarmup() { | CODE |
| LOW | …-dir/route-change-refetch/route-change-refetch.test.ts | 41 | async function addPageAndWaitUntilServable(pathname: string) { | CODE |
| LOW | …-dir/route-change-refetch/route-change-refetch.test.ts | 338 | async function addPageAndWaitUntilServable(pathname: string) { | CODE |
| LOW | …ment/app-dir/request-insights/request-insights.test.ts | 73 | async function patchRequestInsightsConfig(patch: { | CODE |
| LOW | …st/development/app-dir/owner-stack/owner-stack.test.ts | 6 | function normalizeBrowserConsoleStackTrace(trace: unknown) { | CODE |
| LOW | …/cache-components-tasks/cache-components-tasks.test.ts | 56 | function assertNoUnexpectedErrorsInCli() { | CODE |
| LOW | …ation-scheduling/instant-validation-scheduling.test.ts | 23 | async function waitForValidationTerminal( | CODE |
| LOW | …ir/special-project-paths/special-project-paths.test.ts | 13 | async function assertSymbolicatedSSRError( | CODE |
| LOW | …/enabled-features-trace/enabled-features-trace.test.ts | 131 | async function createTestTraceUploadServer(): Promise<{ | CODE |
| LOW | …-cache-deadlock-probe/use-cache-deadlock-probe.test.ts | 11 | function expectedTimeoutErrorMessage(route: string) { | CODE |
| LOW | …n/cache-components-spurious-cache-invalidation.test.ts | 44 | async function addPageAndWaitUntilServable(pathname: string) { | CODE |
| LOW | …st/development/acceptance-app/rsc-build-errors.util.ts | 32 | export function registerInvalidReactApiTests( | CODE |
| LOW | test/development/basic/allowed-dev-origins.test.ts | 60 | function requestInternalDevMiddleware( | CODE |
| LOW | test/development/basic/allowed-dev-origins.test.ts | 78 | async function expectBlockedDevResourceMessage( | CODE |
| LOW | …pment/basic/hmr/run-hot-module-reload-hmr-test.util.ts | 5 | export function runHotModuleReloadHmrTest(nextConfig: { | CODE |
| LOW | test/development/typescript-plugin/test-utils.ts | 34 | function createPluginLanguageService( | CODE |
| LOW | test/development/client-dev-overlay/index.test.ts | 18 | function elementExistsInNextJSPortalShadowDOM( | CODE |
| LOW | …ction/app-dir/graceful-degrade/delete-dynamic-chunk.js | 5 | export async function deleteBrowserDynamicChunks(next) { | CODE |
| LOW | …duction/app-dir/actions-tree-shaking/_testing/utils.ts | 18 | async function getActionsMappingByRuntime( | CODE |
| LOW | …duction/app-dir/actions-tree-shaking/_testing/utils.ts | 29 | export function nextTestSetupActionTreeShaking(opts) { | CODE |
| LOW | …duction/app-dir/actions-tree-shaking/_testing/utils.ts | 79 | export async function getActionsRoutesStateByRuntime(next: NextInstance) { | CODE |
| LOW | …tions-tree-shaking/client-actions-tree-shaking.test.ts | 6 | function getServerReferenceIdsFromBundle(source: string): string[] { | CODE |
| LOW | …p-dir/reference-tree-shaking/library/server-utility.js | 7 | export function unusedServerUtilityExport() { | CODE |
| LOW | …tion/app-dir/use-cache-expire/use-cache-expire.test.ts | 18 | async function expectBlockingRevalidation(path: string) { | CODE |
| LOW | …r-action-period-hash/server-action-period-hash.test.ts | 3 | async function getServerActionManifestNodeKeys(next: NextInstance) { | CODE |
| LOW | …riod-hash/server-action-period-hash-custom-key.test.ts | 3 | async function getServerActionManifestNodeKeys(next: NextInstance) { | CODE |
| LOW | …ack-resume-data-cache/app/events/[id]/group/actions.ts | 13 | export async function notFoundAfterRevalidation() { | CODE |
| LOW | …pp-dir/use-cache-code-hash/use-cache-code-hash.test.ts | 220 | async function expectStableRootParamHash(args: string[] = []) { | CODE |
| LOW | …te-request-smuggling/rewrite-request-smuggling.test.ts | 66 | async function sendAbsoluteUrlUpgradePayload({ | CODE |
| LOW | test/production/next-image-legacy/basic/basic.test.ts | 13 | async function hasPreloadLinkMatchingUrl(browser, url) { | CODE |
| LOW | …ion-entry/required-files-instrumentation-entry.test.ts | 3 | async function readRequiredFilesManifest(next: any) { | CODE |
| LOW | test/production/create-next-app/prompts.test.ts | 13 | function expectTurbopackTailwindSetup(cwd: string, projectName: string) { | CODE |
| LOW | …t/production/create-next-app/templates/app-api.test.ts | 12 | function shouldBeApiTemplateProject({ | CODE |
| LOW | …production/production-browser-sourcemaps/index.test.ts | 13 | async function validateSourceMapForChunk( | CODE |
| LOW | …t/production/css-features/basic-global-support.test.ts | 457 | async function assertMultiGlobalReversedCss( | CODE |
| LOW | test/production/css-features/css-rendering.test.ts | 7 | function baseNextConfigWithLightning(useLightningcss: boolean) { | CODE |
| LOW | test/production/graceful-shutdown/index.test.ts | 304 | async function waitForAppToStartRefusingConnections( | CODE |
| 4668 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | Cargo.toml | 61 | # single module, enabling better inlining and identical-function deduplication | COMMENT |
| LOW | bench/basic-app/benchmark.sh | 1 | #!/bin/bash | COMMENT |
| LOW | bench/render-pipeline/client-trace.ts | 1 | // This script must be run with tsx | COMMENT |
| LOW | bench/dev-validation/benchmark.ts | 1 | // Dev-validation benchmark. Must be run with tsx (via `pnpm | COMMENT |
| LOW | bench/dev-validation/benchmark.ts | 21 | // invisible to it. | COMMENT |
| LOW | bench/dev-validation/app/families.ts | 1 | // The benchmark's route families and the nested segments each route sits under. | COMMENT |
| LOW | …als/agent-053-cache-components-url-shell/next-env.d.ts | 1 | /// <reference types="next" /> | COMMENT |
| LOW | …s/evals/agent-047-adopt-cache-components/next-env.d.ts | 1 | /// <reference types="next" /> | COMMENT |
| LOW | …ls/evals/agent-050-optimize-static-shell/next-env.d.ts | 1 | /// <reference types="next" /> | COMMENT |
| LOW | …t-052-cache-components-session-isolation/next-env.d.ts | 1 | /// <reference types="next" /> | COMMENT |
| LOW | …vals/agent-046-adopt-partial-prefetching/next-env.d.ts | 1 | /// <reference types="next" /> | COMMENT |
| LOW | …s/agent-051-optimize-partial-prefetching/next-env.d.ts | 1 | /// <reference types="next" /> | COMMENT |
| LOW | …ustom-transforms/tests/fixture/server-actions/index.ts | 1 | /// <reference types="./next" /> | COMMENT |
| LOW | …ransforms/tests/fixture/track-dynamic-imports/index.ts | 1 | /// <reference types="./next" /> | COMMENT |
| LOW | …custom-transforms/src/transforms/strip_page_exports.rs | 81 | exports: FxHashMap<Id, ExportType>, | COMMENT |
| LOW | …ext-custom-transforms/src/transforms/server_actions.rs | 321 | // argument is used, or being spread or destructured (so it can be | COMMENT |
| LOW | …ext-custom-transforms/src/transforms/server_actions.rs | 3201 | ..Default::default() | COMMENT |
| LOW | crates/next-custom-transforms/src/transforms/dynamic.rs | 61 | #[derive(Debug, Clone, Eq, PartialEq)] | COMMENT |
| LOW | crates/next-custom-transforms/src/transforms/dynamic.rs | 301 | // don't need to do it as it doesn't need to enter the non-ssr module. | COMMENT |
| LOW | crates/next-code-frame/src/highlight.rs | 181 | // --------------------------------------------------------------------------- | COMMENT |
| LOW | crates/next-code-frame/src/highlight.rs | 461 | /// Maximum number of lines to walk back looking for a safe restart point. | COMMENT |
| LOW | crates/next-code-frame/src/highlight.rs | 521 | // --------------------------------------------------------------------------- | COMMENT |
| LOW | crates/next-code-frame/src/highlight.rs | 681 | impl Scanner<'_> { | COMMENT |
| LOW | crates/next-code-frame/src/highlight.rs | 1561 | // Known limitation: when a block comment contains a blank line, the | COMMENT |
| LOW | crates/next-code-frame/src/frame.rs | 41 | /// 1-indexed line number. | COMMENT |
| LOW | crates/next-api/src/nft_json.rs | 21 | }; | COMMENT |
| LOW | crates/next-api/src/route.rs | 101 | #[turbo_tasks::function] | COMMENT |
| LOW | crates/next-api/src/server_actions.rs | 121 | COMMENT | |
| LOW | crates/next-api/src/server_actions.rs | 261 | NextRuntime::Edge => &mut manifest.edge, | COMMENT |
| LOW | crates/next-api/src/dynamic_imports.rs | 1 | //! If an import is specified as dynamic, next.js does few things: | COMMENT |
| LOW | crates/next-api/src/path_utils.rs | 1 | /// Extract the convention base name (e.g. `"proxy"`, `"middleware"`) from a | COMMENT |
| LOW | crates/next-api/src/project.rs | 301 | /// This serves two purposes: | COMMENT |
| LOW | crates/next-api/src/project.rs | 1041 | COMMENT | |
| LOW | crates/next-api/src/project.rs | 1961 | /// This replaces an earlier `before_resolve` plugin that emitted telemetry per resolve; | COMMENT |
| LOW | crates/next-api/src/project.rs | 1981 | // `packages/next/src/build/webpack/plugins/telemetry-plugin/telemetry-plugin.ts`. | COMMENT |
| LOW | crates/next-api/src/versioned_content_map.rs | 61 | COMMENT | |
| LOW | crates/next-api/src/versioned_content_map.rs | 101 | /// [`VersionedContent`](turbopack_core::version::VersionedContent), sorted by path. Only | COMMENT |
| LOW | crates/next-api/src/next_server_nft.rs | 21 | output::{OutputAsset, OutputAssets, OutputAssetsReference}, | COMMENT |
| LOW | crates/next-api/src/app.rs | 1941 | let entry_chunk_group = ChunkGroupKey::Entry(vec![app_entry.rsc_entry]); | COMMENT |
| LOW | crates/next-core/src/url_node.rs | 341 | // So in the case that is test/e2e/dynamic-routing it'll be this: | COMMENT |
| LOW | crates/next-core/src/util.rs | 61 | } | COMMENT |
| LOW | crates/next-core/src/util.rs | 81 | // VERCEL_PROJECT_PRODUCTION_URL | COMMENT |
| LOW | crates/next-core/src/next_telemetry.rs | 1 | use turbo_rcstr::RcStr; | COMMENT |
| LOW | crates/next-core/src/segment_config.rs | 401 | pub enum ParseSegmentMode { | COMMENT |
| LOW | crates/next-core/src/segment_config.rs | 421 | /// instead of parsing the raw source code. That would ensure that things like webpack loaders can | COMMENT |
| LOW | crates/next-core/src/segment_config.rs | 441 | /// be cleanly encapsulated to an operation over a single file. | COMMENT |
| LOW | crates/next-core/src/segment_config.rs | 461 | /// | COMMENT |
| LOW | crates/next-core/src/app_structure.rs | 201 | /// Flattened URL tree with route groups and parallel routes transparent. | COMMENT |
| LOW | crates/next-core/src/app_structure.rs | 221 | /// The UrlSegmentTree would be: | COMMENT |
| LOW | crates/next-core/src/app_structure.rs | 1681 | /// If the module is already set, update the parent module to the same value. | COMMENT |
| LOW | crates/next-core/src/app_structure.rs | 1921 | let is_inside_catchall = app_page.is_catchall(); | COMMENT |
| LOW | crates/next-core/src/next_config.rs | 141 | /// server-side bundles. | COMMENT |
| LOW | crates/next-core/src/next_config.rs | 761 | COMMENT | |
| LOW | crates/next-core/src/next_config.rs | 941 | /// approximation if you don't have a better value. | COMMENT |
| LOW | crates/next-core/src/next_config.rs | 961 | max_merge_chunk_size: Option<usize>, | COMMENT |
| LOW | crates/next-core/src/next_config.rs | 1201 | /// chunks loaded inside the worker) produced by | COMMENT |
| LOW | crates/next-core/src/next_config.rs | 1221 | /// Disable automatic configuration of the sass loader. | COMMENT |
| LOW | …next-core/src/next_app/app_client_references_chunks.rs | 201 | // .iter() | COMMENT |
| LOW | …next-core/src/next_app/app_client_references_chunks.rs | 221 | // ( | COMMENT |
| LOW | …next-core/src/next_app/app_client_references_chunks.rs | 241 | // None | COMMENT |
| 1040 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | bench/basic-app/app/api/app/route.js | 2 | return Response.json({ name: 'John Doe' }) | CODE |
| LOW | bench/basic-app/pages/api/page-api.js | 2 | res.status(200).json({ name: 'John Doe' }) | CODE |
| LOW | evals/evals/agent-033-forbidden-auth/app/lib/auth.ts | 17 | name: 'John Doe', | CODE |
| LOW | evals/evals/agent-032-use-cache-directive/lib/api.ts | 6 | { id: 1, title: 'Getting Started with Next.js', author: 'Jane Doe' }, | CODE |
| LOW | test/production/create-next-app/utils.ts | 208 | expect(await apiRes.json()).toEqual({ name: 'John Doe' }) | CODE |
| LOW | …e/prefetch-runtime/app/(default)/fully-static/page.tsx | 16 | .map(() => 'Lorem ipsum dolor sit amet.')} | CODE |
| LOW | …e/prefetch-runtime/app/(default)/fully-static/page.tsx | 16 | .map(() => 'Lorem ipsum dolor sit amet.')} | CODE |
| LOW | …2e/app-dir/actions-streaming/actions-streaming.test.ts | 24 | 'Lorem ipsum dolor sit' | CODE |
| LOW | …dir/actions-streaming/app/readable-stream/api/route.ts | 4 | 'Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt.\n' | CODE |
| LOW | …dir/actions-streaming/app/readable-stream/api/route.ts | 4 | 'Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt.\n' | CODE |
| LOW⚡ | test/e2e/next-dynamic-css/src/Component2.jsx | 8 | Contrary to popular belief, Lorem Ipsum is not simply random text. It | CODE |
| LOW⚡ | test/e2e/next-dynamic-css/src/Component2.jsx | 12 | Latin words, consectetur, from a Lorem Ipsum passage, and going through | CODE |
| LOW⚡ | test/e2e/next-dynamic-css/src/Component2.jsx | 14 | undoubtable source. Lorem Ipsum comes from sections 1.10.32 and 1.10.33 | CODE |
| LOW⚡ | test/e2e/next-dynamic-css/src/Component2.jsx | 18 | Ipsum, "Lorem ipsum dolor sit amet..", comes from a line in section | CODE |
| LOW⚡ | test/e2e/next-dynamic-css/src/Component2.jsx | 18 | Ipsum, "Lorem ipsum dolor sit amet..", comes from a line in section | CODE |
| LOW⚡ | test/e2e/next-dynamic-css/src/Component2.jsx | 19 | 1.10.32. The standard chunk of Lorem Ipsum used since the 1500s is | CODE |
| LOW⚡ | test/e2e/next-dynamic-css/src/Content.jsx | 9 | Contrary to popular belief, Lorem Ipsum is not simply random text. It | CODE |
| LOW⚡ | test/e2e/next-dynamic-css/src/Content.jsx | 13 | Latin words, consectetur, from a Lorem Ipsum passage, and going through | CODE |
| LOW⚡ | test/e2e/next-dynamic-css/src/Content.jsx | 15 | undoubtable source. Lorem Ipsum comes from sections 1.10.32 and 1.10.33 | CODE |
| LOW⚡ | test/e2e/next-dynamic-css/src/Content.jsx | 19 | Ipsum, "Lorem ipsum dolor sit amet..", comes from a line in section | CODE |
| LOW⚡ | test/e2e/next-dynamic-css/src/Content.jsx | 19 | Ipsum, "Lorem ipsum dolor sit amet..", comes from a line in section | CODE |
| LOW⚡ | test/e2e/next-dynamic-css/src/Content.jsx | 20 | 1.10.32. The standard chunk of Lorem Ipsum used since the 1500s is | CODE |
| LOW⚡ | …t/e2e/next-dynamic-css-asset-prefix/src/Component2.jsx | 8 | Contrary to popular belief, Lorem Ipsum is not simply random text. It | CODE |
| LOW⚡ | …t/e2e/next-dynamic-css-asset-prefix/src/Component2.jsx | 12 | Latin words, consectetur, from a Lorem Ipsum passage, and going through | CODE |
| LOW⚡ | …t/e2e/next-dynamic-css-asset-prefix/src/Component2.jsx | 14 | undoubtable source. Lorem Ipsum comes from sections 1.10.32 and 1.10.33 | CODE |
| LOW⚡ | …t/e2e/next-dynamic-css-asset-prefix/src/Component2.jsx | 18 | Ipsum, "Lorem ipsum dolor sit amet..", comes from a line in section | CODE |
| LOW⚡ | …t/e2e/next-dynamic-css-asset-prefix/src/Component2.jsx | 18 | Ipsum, "Lorem ipsum dolor sit amet..", comes from a line in section | CODE |
| LOW⚡ | …t/e2e/next-dynamic-css-asset-prefix/src/Component2.jsx | 19 | 1.10.32. The standard chunk of Lorem Ipsum used since the 1500s is | CODE |
| LOW⚡ | test/e2e/next-dynamic-css-asset-prefix/src/Content.jsx | 9 | Contrary to popular belief, Lorem Ipsum is not simply random text. It | CODE |
| LOW⚡ | test/e2e/next-dynamic-css-asset-prefix/src/Content.jsx | 13 | Latin words, consectetur, from a Lorem Ipsum passage, and going through | CODE |
| LOW⚡ | test/e2e/next-dynamic-css-asset-prefix/src/Content.jsx | 15 | undoubtable source. Lorem Ipsum comes from sections 1.10.32 and 1.10.33 | CODE |
| LOW⚡ | test/e2e/next-dynamic-css-asset-prefix/src/Content.jsx | 19 | Ipsum, "Lorem ipsum dolor sit amet..", comes from a line in section | CODE |
| LOW⚡ | test/e2e/next-dynamic-css-asset-prefix/src/Content.jsx | 19 | Ipsum, "Lorem ipsum dolor sit amet..", comes from a line in section | CODE |
| LOW⚡ | test/e2e/next-dynamic-css-asset-prefix/src/Content.jsx | 20 | 1.10.32. The standard chunk of Lorem Ipsum used since the 1500s is | CODE |
| LOW | …mascript/tests/benches/react-dom-client.development.js | 22385 | placeholder: 'placeholder', | CODE |
| LOW | …tes/turbopack-ecmascript/tests/benches/jsonwebtoken.js | 9 | */(function(){var t;var n="4.17.21";var a=200;var i="Unsupported core-js use. Try https://npms.io/search?q=ponyfill.",s | COMMENT |
| LOW | …es/with-nhost-auth-realtime-graphql/pages/api/hello.js | 2 | res.status(200).json({ name: "John Doe" }); | CODE |
| LOW | examples/cms-builder-io/builder/post/second.json | 18 | "intro": "Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore", | CODE |
| LOW | examples/cms-builder-io/builder/post/second.json | 18 | "intro": "Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore", | CODE |
| LOW | examples/cms-builder-io/builder/post/second.json | 87 | "text": "<p>Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor i | CODE |
| LOW | examples/cms-builder-io/builder/post/second.json | 87 | "text": "<p>Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor i | CODE |
| LOW | examples/cms-builder-io/builder/post/second.json | 114 | "text": "<p>Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor i | CODE |
| LOW | examples/cms-builder-io/builder/post/second.json | 114 | "text": "<p>Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor i | CODE |
| LOW | examples/cms-builder-io/builder/post/second.json | 142 | "text": "<p>Lorem ipsum dolor sit amet,</p>" | CODE |
| LOW | examples/cms-builder-io/builder/post/second.json | 142 | "text": "<p>Lorem ipsum dolor sit amet,</p>" | CODE |
| LOW | examples/cms-builder-io/builder/post/second.json | 396 | "text": "<p>Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incid | CODE |
| LOW | examples/cms-builder-io/builder/post/second.json | 396 | "text": "<p>Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incid | CODE |
| LOW | examples/cms-builder-io/builder/post/second.json | 545 | "text": "<p>Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incid | CODE |
| LOW | examples/cms-builder-io/builder/post/second.json | 545 | "text": "<p>Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incid | CODE |
| LOW | examples/cms-builder-io/builder/post/second.json | 694 | "text": "<p>Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incid | CODE |
| LOW | examples/cms-builder-io/builder/post/second.json | 694 | "text": "<p>Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incid | CODE |
| LOW | examples/cms-builder-io/builder/post/second.json | 843 | "text": "<p>Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incid | CODE |
| LOW | examples/cms-builder-io/builder/post/second.json | 843 | "text": "<p>Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incid | CODE |
| LOW | examples/cms-builder-io/builder/post/second.json | 989 | "text": "<p>Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incid | CODE |
| LOW | examples/cms-builder-io/builder/post/second.json | 989 | "text": "<p>Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incid | CODE |
| LOW | examples/cms-builder-io/builder/post/second.json | 1135 | "text": "<p>Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incid | CODE |
| LOW | examples/cms-builder-io/builder/post/second.json | 1135 | "text": "<p>Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incid | CODE |
| LOW | examples/cms-builder-io/builder/post/first-one.json | 84 | "text": "<p>Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod temp | CODE |
| LOW | examples/cms-builder-io/builder/post/first-one.json | 84 | "text": "<p>Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod temp | CODE |
| LOW | examples/cms-builder-io/builder/post/schema.model.json | 123 | "defaultValue": "Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labo | CODE |
| 95 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …st/development/stale-dev-types/stale-dev-types.test.ts | 15 | // Step 1: Wait for dev server to generate .next/dev/types/validator.ts | COMMENT |
| LOW⚡ | …st/development/stale-dev-types/stale-dev-types.test.ts | 34 | // Step 2: Stop dev server | COMMENT |
| LOW⚡ | …st/development/stale-dev-types/stale-dev-types.test.ts | 37 | // Step 3: Delete the temp-route (simulating user deleting a route) | COMMENT |
| LOW⚡ | …st/development/stale-dev-types/stale-dev-types.test.ts | 44 | // Step 4: Run build - should NOT fail due to stale .next/dev types | COMMENT |
| LOW⚡ | …st/e2e/app-dir/static-siblings/static-siblings.test.ts | 79 | // Step 2: Navigate back to the home page | COMMENT |
| LOW⚡ | …st/e2e/app-dir/static-siblings/static-siblings.test.ts | 83 | // Step 3: Navigate to the static sibling with prefetch={false} | COMMENT |
| LOW⚡ | …st/e2e/app-dir/static-siblings/static-siblings.test.ts | 118 | // Step 2: Navigate back to the home page | COMMENT |
| LOW⚡ | …st/e2e/app-dir/static-siblings/static-siblings.test.ts | 122 | // Step 3: Navigate to the static sibling with prefetch={false} | COMMENT |
| LOW⚡ | …st/e2e/app-dir/static-siblings/static-siblings.test.ts | 157 | // Step 2: Navigate back to the home page | COMMENT |
| LOW⚡ | …st/e2e/app-dir/static-siblings/static-siblings.test.ts | 161 | // Step 3: Navigate to the static sibling with prefetch={false} | COMMENT |
| LOW⚡ | …st/e2e/app-dir/static-siblings/static-siblings.test.ts | 205 | // Step 2: Navigate back to the home page | COMMENT |
| LOW⚡ | …st/e2e/app-dir/static-siblings/static-siblings.test.ts | 209 | // Step 3: Navigate to the deeply nested static sibling with prefetch={false} | COMMENT |
| LOW | …st/e2e/app-dir/static-siblings/static-siblings.test.ts | 67 | // Step 1: Navigate to the dynamic route first to "discover" it | COMMENT |
| LOW | …st/e2e/app-dir/static-siblings/static-siblings.test.ts | 106 | // Step 1: Navigate to the dynamic route first to "discover" it | COMMENT |
| LOW | …st/e2e/app-dir/static-siblings/static-siblings.test.ts | 145 | // Step 1: Navigate to the dynamic route first to "discover" it | COMMENT |
| LOW | …st/e2e/app-dir/static-siblings/static-siblings.test.ts | 191 | // Step 1: Navigate to the dynamic route first to "discover" it | COMMENT |
| LOW | …/app-dir/optimistic-routing/optimistic-routing.test.ts | 55 | // Step 1: Reveal and prefetch the first blog post link. | COMMENT |
| LOW | …/app-dir/optimistic-routing/optimistic-routing.test.ts | 70 | // Step 2: Reveal the second link and navigate to it. | COMMENT |
| LOW | …/app-dir/optimistic-routing/optimistic-routing.test.ts | 91 | // Step 3: After act completes, verify the full page eventually loads | COMMENT |
| LOW | …/app-dir/optimistic-routing/optimistic-routing.test.ts | 104 | // Step 1: Reveal and prefetch the first product link. | COMMENT |
| LOW | …/app-dir/optimistic-routing/optimistic-routing.test.ts | 118 | // Step 2: Navigate to a different product with different category AND id. | COMMENT |
| LOW | …/app-dir/optimistic-routing/optimistic-routing.test.ts | 152 | // Step 1: Prefetch /docs (index route, no slug segments) | COMMENT |
| LOW | …/app-dir/optimistic-routing/optimistic-routing.test.ts | 165 | // Step 2: Navigate to /docs/intro (one segment) | COMMENT |
| LOW | …/app-dir/optimistic-routing/optimistic-routing.test.ts | 191 | // Step 1: Prefetch /docs/intro (one segment) | COMMENT |
| LOW | …/app-dir/optimistic-routing/optimistic-routing.test.ts | 204 | // Step 2: Navigate to /docs/guide/getting-started (two segments). | COMMENT |
| LOW | …/app-dir/optimistic-routing/optimistic-routing.test.ts | 238 | // Step 1: Prefetch /files/documents/report.pdf (three segments) | COMMENT |
| LOW | …/app-dir/optimistic-routing/optimistic-routing.test.ts | 251 | // Step 2: Navigate to /files/a/b/c/d (four segments). | COMMENT |
| LOW | …/app-dir/optimistic-routing/optimistic-routing.test.ts | 281 | // Step 1: Prefetch /blog/post-1 to learn the /blog/[slug] pattern. | COMMENT |
| LOW | …/app-dir/optimistic-routing/optimistic-routing.test.ts | 295 | // Step 2: Navigate to /blog/featured (static sibling). | COMMENT |
| LOW | …/app-dir/optimistic-routing/optimistic-routing.test.ts | 332 | // Step 1: Navigate to /rewritten/first. | COMMENT |
| LOW | …/app-dir/optimistic-routing/optimistic-routing.test.ts | 348 | // Step 2: Navigate forward to /hub. We use a hub page rather than | COMMENT |
| LOW | …/app-dir/optimistic-routing/optimistic-routing.test.ts | 363 | // Step 3: From /hub, reveal /rewritten/second. This link has | COMMENT |
| LOW | …/app-dir/optimistic-routing/optimistic-routing.test.ts | 403 | // Step 1: Prefetch /products/electronics/phone-1 to learn the | COMMENT |
| LOW | …/app-dir/optimistic-routing/optimistic-routing.test.ts | 418 | // Step 2: Reveal /products/promo/gadget (prefetch={true}). The URL | COMMENT |
| LOW | …/app-dir/optimistic-routing/optimistic-routing.test.ts | 431 | // Step 3: Navigate. The page must render the server's params | COMMENT |
| LOW | …/app-dir/optimistic-routing/optimistic-routing.test.ts | 463 | // Step 1: Navigate to /search-rewrite?v=alpha | COMMENT |
| LOW | …/app-dir/optimistic-routing/optimistic-routing.test.ts | 481 | // Step 2: Navigate forward to /hub instead of using browser.back() to | COMMENT |
| LOW | …/app-dir/optimistic-routing/optimistic-routing.test.ts | 494 | // Step 3: From /hub, reveal /search-rewrite?v=beta. | COMMENT |
| LOW | …/app-dir/optimistic-routing/optimistic-routing.test.ts | 527 | // Step 1: Prefetch /dashboard/anything/here to learn the catch-all pattern | COMMENT |
| LOW | …/app-dir/optimistic-routing/optimistic-routing.test.ts | 541 | // Step 2: Prefetch /dashboard/settings to populate the static child | COMMENT |
| LOW | …/app-dir/optimistic-routing/optimistic-routing.test.ts | 556 | // Step 3: Navigate to /dashboard/settings/profile (prefetch={false}). | COMMENT |
| LOW⚡ | turbopack/crates/turbo-tasks-backend/tests/effects.rs | 480 | // Step 1: A emits and applies (key=1, hash=H1). | COMMENT |
| LOW⚡ | turbopack/crates/turbo-tasks-backend/tests/effects.rs | 489 | // Step 2: B emits and applies (key=1, hash=H2). Different hash for the | COMMENT |
| LOW | turbopack/crates/turbo-tasks-backend/tests/effects.rs | 501 | // Step 3: re-apply A's original Effects. Captured slice is still alive | COMMENT |
| LOW | turbopack/crates/turbo-tasks-backend/src/backend/mod.rs | 1795 | // Step 1: Fast read-only cache lookup (read lock, no allocation). | COMMENT |
| LOW | turbopack/crates/turbo-tasks-backend/src/backend/mod.rs | 1811 | // Step 2: Check backing storage using borrowed components (no box needed yet). | COMMENT |
| LOW⚡ | …pack/crates/turbo-tasks-backend/src/backend/storage.rs | 1403 | // Step 1: modify the task outside snapshot mode (data_modified = true). | COMMENT |
| LOW⚡ | …pack/crates/turbo-tasks-backend/src/backend/storage.rs | 1409 | // Step 2: enter snapshot mode. | COMMENT |
| LOW⚡ | …pack/crates/turbo-tasks-backend/src/backend/storage.rs | 1426 | // Step 4: now that the capture is done but before we consume the iterator, | COMMENT |
| LOW⚡ | …pack/crates/turbo-tasks-backend/src/backend/storage.rs | 1435 | // Step 5: consume the iterator. | COMMENT |
| LOW⚡ | …pack/crates/turbo-tasks-backend/src/backend/storage.rs | 1468 | // Step 1: modify meta only, outside snapshot mode. | COMMENT |
| LOW⚡ | …pack/crates/turbo-tasks-backend/src/backend/storage.rs | 1476 | // Step 2: enter snapshot mode. | COMMENT |
| LOW⚡ | …pack/crates/turbo-tasks-backend/src/backend/storage.rs | 1479 | // Step 3: take_snapshot captures the task. | COMMENT |
| LOW⚡ | …pack/crates/turbo-tasks-backend/src/backend/storage.rs | 1488 | // Step 4: modify data during snapshot. | COMMENT |
| LOW⚡ | …pack/crates/turbo-tasks-backend/src/backend/storage.rs | 1496 | // Step 5: consume the iterator — must not panic. | COMMENT |
| LOW | turbopack/crates/turbo-tasks-fs/src/virtual_fs.rs | 20 | /// NOTE: This function is not a `turbo_tasks::function` to avoid instances | COMMENT |
| LOW | turbopack/crates/turbo-tasks-fs/src/virtual_fs.rs | 34 | /// NOTE: This function is not a `turbo_tasks::function` to avoid instances | COMMENT |
| LOW | …opack-ecmascript/src/module_fragments/optimizations.rs | 132 | // Step 1: Build a reverse reachability map (which starting nodes can reach each node) | COMMENT |
| LOW | …opack-ecmascript/src/module_fragments/optimizations.rs | 160 | // Step 2: Find nodes that are reachable from exactly one starting node | COMMENT |
| LOW | …opack-ecmascript/src/module_fragments/optimizations.rs | 190 | // Step 3: Merge nodes into their starting points | COMMENT |
| 41 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …st/development/stale-dev-types/stale-dev-types.test.ts | 15 | // Step 1: Wait for dev server to generate .next/dev/types/validator.ts | COMMENT |
| LOW⚡ | …st/development/stale-dev-types/stale-dev-types.test.ts | 34 | // Step 2: Stop dev server | COMMENT |
| LOW⚡ | …st/development/stale-dev-types/stale-dev-types.test.ts | 37 | // Step 3: Delete the temp-route (simulating user deleting a route) | COMMENT |
| LOW⚡ | …st/development/stale-dev-types/stale-dev-types.test.ts | 44 | // Step 4: Run build - should NOT fail due to stale .next/dev types | COMMENT |
| LOW⚡ | …st/e2e/app-dir/static-siblings/static-siblings.test.ts | 79 | // Step 2: Navigate back to the home page | COMMENT |
| LOW⚡ | …st/e2e/app-dir/static-siblings/static-siblings.test.ts | 83 | // Step 3: Navigate to the static sibling with prefetch={false} | COMMENT |
| LOW⚡ | …st/e2e/app-dir/static-siblings/static-siblings.test.ts | 118 | // Step 2: Navigate back to the home page | COMMENT |
| LOW⚡ | …st/e2e/app-dir/static-siblings/static-siblings.test.ts | 122 | // Step 3: Navigate to the static sibling with prefetch={false} | COMMENT |
| LOW⚡ | …st/e2e/app-dir/static-siblings/static-siblings.test.ts | 157 | // Step 2: Navigate back to the home page | COMMENT |
| LOW⚡ | …st/e2e/app-dir/static-siblings/static-siblings.test.ts | 161 | // Step 3: Navigate to the static sibling with prefetch={false} | COMMENT |
| LOW⚡ | …st/e2e/app-dir/static-siblings/static-siblings.test.ts | 205 | // Step 2: Navigate back to the home page | COMMENT |
| LOW⚡ | …st/e2e/app-dir/static-siblings/static-siblings.test.ts | 209 | // Step 3: Navigate to the deeply nested static sibling with prefetch={false} | COMMENT |
| LOW | …st/e2e/app-dir/static-siblings/static-siblings.test.ts | 67 | // Step 1: Navigate to the dynamic route first to "discover" it | COMMENT |
| LOW | …st/e2e/app-dir/static-siblings/static-siblings.test.ts | 106 | // Step 1: Navigate to the dynamic route first to "discover" it | COMMENT |
| LOW | …st/e2e/app-dir/static-siblings/static-siblings.test.ts | 145 | // Step 1: Navigate to the dynamic route first to "discover" it | COMMENT |
| LOW | …st/e2e/app-dir/static-siblings/static-siblings.test.ts | 191 | // Step 1: Navigate to the dynamic route first to "discover" it | COMMENT |
| LOW | …/app-dir/optimistic-routing/optimistic-routing.test.ts | 55 | // Step 1: Reveal and prefetch the first blog post link. | COMMENT |
| LOW | …/app-dir/optimistic-routing/optimistic-routing.test.ts | 70 | // Step 2: Reveal the second link and navigate to it. | COMMENT |
| LOW | …/app-dir/optimistic-routing/optimistic-routing.test.ts | 91 | // Step 3: After act completes, verify the full page eventually loads | COMMENT |
| LOW | …/app-dir/optimistic-routing/optimistic-routing.test.ts | 104 | // Step 1: Reveal and prefetch the first product link. | COMMENT |
| LOW | …/app-dir/optimistic-routing/optimistic-routing.test.ts | 118 | // Step 2: Navigate to a different product with different category AND id. | COMMENT |
| LOW | …/app-dir/optimistic-routing/optimistic-routing.test.ts | 152 | // Step 1: Prefetch /docs (index route, no slug segments) | COMMENT |
| LOW | …/app-dir/optimistic-routing/optimistic-routing.test.ts | 165 | // Step 2: Navigate to /docs/intro (one segment) | COMMENT |
| LOW | …/app-dir/optimistic-routing/optimistic-routing.test.ts | 191 | // Step 1: Prefetch /docs/intro (one segment) | COMMENT |
| LOW | …/app-dir/optimistic-routing/optimistic-routing.test.ts | 204 | // Step 2: Navigate to /docs/guide/getting-started (two segments). | COMMENT |
| LOW | …/app-dir/optimistic-routing/optimistic-routing.test.ts | 238 | // Step 1: Prefetch /files/documents/report.pdf (three segments) | COMMENT |
| LOW | …/app-dir/optimistic-routing/optimistic-routing.test.ts | 251 | // Step 2: Navigate to /files/a/b/c/d (four segments). | COMMENT |
| LOW | …/app-dir/optimistic-routing/optimistic-routing.test.ts | 281 | // Step 1: Prefetch /blog/post-1 to learn the /blog/[slug] pattern. | COMMENT |
| LOW | …/app-dir/optimistic-routing/optimistic-routing.test.ts | 295 | // Step 2: Navigate to /blog/featured (static sibling). | COMMENT |
| LOW | …/app-dir/optimistic-routing/optimistic-routing.test.ts | 332 | // Step 1: Navigate to /rewritten/first. | COMMENT |
| LOW | …/app-dir/optimistic-routing/optimistic-routing.test.ts | 348 | // Step 2: Navigate forward to /hub. We use a hub page rather than | COMMENT |
| LOW | …/app-dir/optimistic-routing/optimistic-routing.test.ts | 363 | // Step 3: From /hub, reveal /rewritten/second. This link has | COMMENT |
| LOW | …/app-dir/optimistic-routing/optimistic-routing.test.ts | 403 | // Step 1: Prefetch /products/electronics/phone-1 to learn the | COMMENT |
| LOW | …/app-dir/optimistic-routing/optimistic-routing.test.ts | 418 | // Step 2: Reveal /products/promo/gadget (prefetch={true}). The URL | COMMENT |
| LOW | …/app-dir/optimistic-routing/optimistic-routing.test.ts | 431 | // Step 3: Navigate. The page must render the server's params | COMMENT |
| LOW | …/app-dir/optimistic-routing/optimistic-routing.test.ts | 463 | // Step 1: Navigate to /search-rewrite?v=alpha | COMMENT |
| LOW | …/app-dir/optimistic-routing/optimistic-routing.test.ts | 481 | // Step 2: Navigate forward to /hub instead of using browser.back() to | COMMENT |
| LOW | …/app-dir/optimistic-routing/optimistic-routing.test.ts | 494 | // Step 3: From /hub, reveal /search-rewrite?v=beta. | COMMENT |
| LOW | …/app-dir/optimistic-routing/optimistic-routing.test.ts | 527 | // Step 1: Prefetch /dashboard/anything/here to learn the catch-all pattern | COMMENT |
| LOW | …/app-dir/optimistic-routing/optimistic-routing.test.ts | 541 | // Step 2: Prefetch /dashboard/settings to populate the static child | COMMENT |
| LOW | …/app-dir/optimistic-routing/optimistic-routing.test.ts | 556 | // Step 3: Navigate to /dashboard/settings/profile (prefetch={false}). | COMMENT |
| LOW⚡ | turbopack/crates/turbo-tasks-backend/tests/effects.rs | 480 | // Step 1: A emits and applies (key=1, hash=H1). | COMMENT |
| LOW⚡ | turbopack/crates/turbo-tasks-backend/tests/effects.rs | 489 | // Step 2: B emits and applies (key=1, hash=H2). Different hash for the | COMMENT |
| LOW | turbopack/crates/turbo-tasks-backend/tests/effects.rs | 501 | // Step 3: re-apply A's original Effects. Captured slice is still alive | COMMENT |
| LOW | turbopack/crates/turbo-tasks-backend/src/backend/mod.rs | 1795 | // Step 1: Fast read-only cache lookup (read lock, no allocation). | COMMENT |
| LOW | turbopack/crates/turbo-tasks-backend/src/backend/mod.rs | 1811 | // Step 2: Check backing storage using borrowed components (no box needed yet). | COMMENT |
| LOW⚡ | …pack/crates/turbo-tasks-backend/src/backend/storage.rs | 1403 | // Step 1: modify the task outside snapshot mode (data_modified = true). | COMMENT |
| LOW⚡ | …pack/crates/turbo-tasks-backend/src/backend/storage.rs | 1409 | // Step 2: enter snapshot mode. | COMMENT |
| LOW⚡ | …pack/crates/turbo-tasks-backend/src/backend/storage.rs | 1412 | // Step 3: `take_snapshot` captures the task. | COMMENT |
| LOW⚡ | …pack/crates/turbo-tasks-backend/src/backend/storage.rs | 1426 | // Step 4: now that the capture is done but before we consume the iterator, | COMMENT |
| LOW⚡ | …pack/crates/turbo-tasks-backend/src/backend/storage.rs | 1435 | // Step 5: consume the iterator. | COMMENT |
| LOW⚡ | …pack/crates/turbo-tasks-backend/src/backend/storage.rs | 1468 | // Step 1: modify meta only, outside snapshot mode. | COMMENT |
| LOW⚡ | …pack/crates/turbo-tasks-backend/src/backend/storage.rs | 1476 | // Step 2: enter snapshot mode. | COMMENT |
| LOW⚡ | …pack/crates/turbo-tasks-backend/src/backend/storage.rs | 1479 | // Step 3: take_snapshot captures the task. | COMMENT |
| LOW⚡ | …pack/crates/turbo-tasks-backend/src/backend/storage.rs | 1488 | // Step 4: modify data during snapshot. | COMMENT |
| LOW⚡ | …pack/crates/turbo-tasks-backend/src/backend/storage.rs | 1496 | // Step 5: consume the iterator — must not panic. | COMMENT |
| LOW | turbopack/crates/turbopack-core/src/module_graph/mod.rs | 5374 | /// Step 1: `a` and `b` don't read the entry group. Step 2: `b` does. Step 3: `a` does too. | COMMENT |
| LOW | …opack-ecmascript/src/module_fragments/optimizations.rs | 132 | // Step 1: Build a reverse reachability map (which starting nodes can reach each node) | COMMENT |
| LOW | …opack-ecmascript/src/module_fragments/optimizations.rs | 160 | // Step 2: Find nodes that are reachable from exactly one starting node | COMMENT |
| LOW | …opack-ecmascript/src/module_fragments/optimizations.rs | 190 | // Step 3: Merge nodes into their starting points | COMMENT |
| 20 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …pp-dir/sync-io-blocks-root/sync-io-blocks-root.test.ts | 18 | // Essentially, when Sync IO happens, we might lose more content that we would've if we did a halt. | COMMENT |
| MEDIUM | …ment-cache/prefetch-inlining/prefetch-inlining.test.ts | 588 | // recovery path needs a more robust test harness. | COMMENT |
| MEDIUM | …/app-dir/app-static/app/force-cache-revalidate/page.js | 1 | // we want to bail out of ISR, but still leverage fetch caching | COMMENT |
| MEDIUM | …e2e/app-dir/monaco-editor/components/editor/editor.tsx | 7 | // We leverage `use` to wait for the promise. | COMMENT |
| MEDIUM | …t/e2e/filesystem-cache/warm-restart-task-stats.test.ts | 76 | // Turbopack sorts on the Rust side, but sort again here to be robust | COMMENT |
| MEDIUM | …pack/crates/turbopack-ecmascript/src/references/mod.rs | 1368 | // This is only used for env var tracking. The more robust solution would be | COMMENT |
| MEDIUM | .cargo/config.toml | 18 | # state-of-the-art in Rust optimization land (which might change month-to-month!). | COMMENT |
| MEDIUM | packages/next/src/server/base-server.ts | 1615 | // This is needed for pages router to leverage unstable_cache | COMMENT |
| MEDIUM | packages/next/src/server/config.ts | 1250 | // only leverage deploymentId | COMMENT |
| MEDIUM | packages/next/src/server/web/adapter.ts | 261 | // leverage the shared instance if not we need | COMMENT |
| MEDIUM | packages/next/src/server/lib/patch-fetch.ts | 663 | // prerendering so that we can still leverage the fetch cache between | COMMENT |
| MEDIUM | packages/next/src/server/lib/incremental-cache/index.ts | 223 | // if we have a global cache handler available leverage it | COMMENT |
| MEDIUM | packages/next/src/server/lib/incremental-cache/index.ts | 564 | // we don't leverage the prerender cache in dev mode | COMMENT |
| MEDIUM | packages/next/src/server/dev/middleware-webpack.ts | 481 | // Try Client Compilation first. In `pages` we leverage | COMMENT |
| MEDIUM | packages/next/src/server/response-cache/web.ts | 69 | // we keep the previous cache entry around to leverage | COMMENT |
| MEDIUM | packages/next/src/compiled/serve-handler/index.js | 19 | */a.exports=rangeParser;function rangeParser(a,e,i){var n=e.indexOf("=");if(n===-1){return-2}var o=e.slice(n+1).split(" | COMMENT |
| MEDIUM | packages/next/src/compiled/serve-handler/index.js | 19 | */a.exports=rangeParser;function rangeParser(a,e,i){var n=e.indexOf("=");if(n===-1){return-2}var o=e.slice(n+1).split(" | COMMENT |
| MEDIUM⚡ | …t/src/compiled/@modelcontextprotocol/sdk/server/mcp.js | 3 | (function(e,t){true?t(r):0})(this,(function(e){"use strict";function merge(){for(var e=arguments.length,r=Array(e),t=0;t | CODE |
| MEDIUM | packages/next/src/compiled/compression/index.js | 58 | */a.exports=vary;a.exports.append=append;var e=/^[!#$%&'*+\-.^_`|~0-9A-Za-z]+$/;function append(a,i){if(typeof a!=="str | COMMENT |
| MEDIUM | packages/next/src/compiled/compression/index.js | 58 | */a.exports=vary;a.exports.append=append;var e=/^[!#$%&'*+\-.^_`|~0-9A-Za-z]+$/;function append(a,i){if(typeof a!=="str | COMMENT |
| MEDIUM | packages/next/src/shared/lib/router/router.ts | 247 | // leverage x-matched-path to detect next.config.js rewrites | COMMENT |
| MEDIUM | packages/next/src/shared/lib/router/router.ts | 2496 | // links via the equivalent of a hard navigation and hence never utilize these | COMMENT |
| MEDIUM | …ges/next/src/shared/lib/router/utils/interpolate-as.ts | 31 | // TODO: more robust handling for user-error (passing `/`) | COMMENT |
| MEDIUM | packages/next/src/lib/fs/rename.ts | 46 | // is locked by AV software. We do leverage graceful-fs to iron | COMMENT |
| MEDIUM | packages/next/src/export/index.ts | 699 | // that even setups with only a few static pages can leverage a shared | COMMENT |
| MEDIUM | packages/next/src/client/components/render-tree.ts | 2068 | // Trigger a "soft" refresh. Essentially the same as calling `refresh()` | COMMENT |
| MEDIUM | packages/next/src/client/components/app-router-state.ts | 336 | // not just the page segments. Essentially treating it the same as a refresh() | COMMENT |
| MEDIUM | packages/next-codemod/bin/upgrade.ts | 928 | // TODO: Asking package manager for the installed version is most robust e.g. `pnpm why ${dependency}` | COMMENT |
| MEDIUM | packages/next-codemod/transforms/cra-to-next.ts | 539 | // Remove this to leverage Next.js' static image handling | COMMENT |
| MEDIUM | .github/workflows/build_reusable.yml | 124 | # efficient, but won't fully utilize all available CPU cores. A small value here makes sense since | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …s/tests/fixture/server-actions/server-graph/63/data.ts | 2 | export async function getData() {} | CODE |
| LOW | test/development/app-dir/use-cache-dev/app/page.tsx | 10 | async function getData() { | CODE |
| LOW | …lopment/app-dir/use-cache-deadlock-probe/app/shared.ts | 21 | export function getData(url: string): Promise<Response> { | CODE |
| LOW | …pment/basic/node-builtins/app/server-component/page.js | 25 | async function getData() { | CODE |
| LOW | …node-builtins/app/server-component/node-schema/page.js | 22 | async function getData() { | CODE |
| LOW | …ile-system-cache-clock/file-system-cache-clock.test.ts | 67 | async function getData(pathname: string) { | CODE |
| LOW | …production/app-dir/file-system-cache-clock/lib/data.ts | 4 | export async function getData(path: string) { | CODE |
| LOW | …e-cross-deployment/app/argument-use-server/get-data.ts | 3 | export async function getData(action) { | CODE |
| LOW | …he-cross-deployment/app/argument-use-cache/get-data.ts | 3 | export async function getData(action) { | CODE |
| LOW | …app-dir/use-cache-cross-deployment/app/(site)/page.tsx | 5 | async function getData() { | CODE |
| LOW | …r/use-cache-cross-deployment/app/(site)/route/route.ts | 4 | async function getData() { | CODE |
| LOW | …-cross-deployment/app/argument-use-client/get-data.tsx | 1 | export async function getData(Client) { | CODE |
| LOW | …on/build-trace-extra-entries-turbo/app/lib/get-data.js | 4 | export function getData() { | CODE |
| LOW | …/production/turborepo-access-trace/app/lib/get-data.js | 4 | export function getData() { | CODE |
| LOW | …ion/turbotrace-with-webpack-worker/app/lib/get-data.js | 4 | export function getData() { | CODE |
| LOW | …oduction/build-trace-extra-entries/app/lib/get-data.js | 4 | export function getData() { | CODE |
| LOW | test/e2e/app-dir/app-prefetch/app/dashboard/layout.js | 3 | async function getData() { | CODE |
| LOW | test/e2e/app-dir/app-prefetch/app/dashboard/page.js | 5 | async function getData() { | CODE |
| LOW | …st/e2e/app-dir/app-prefetch/app/dashboard/[id]/page.js | 4 | async function getData() { | CODE |
| LOW | …pp-dir/app-prefetch/app/prefetch-auto/[slug]/layout.js | 3 | function getData() { | CODE |
| LOW | …/app-dir/app-prefetch/app/prefetch-auto/[slug]/page.js | 3 | function getData() { | CODE |
| LOW | …e/app-dir/app-fetch-deduping/app/trace-headers/page.js | 1 | async function getData() { | CODE |
| LOW | test/e2e/app-dir/app/app/layout.js | 9 | async function getData() { | CODE |
| LOW | …pp-dir/app/app/slow-layout-with-loading/slow/layout.js | 3 | async function getData() { | CODE |
| LOW | test/e2e/app-dir/app/app/(newroot)/layout.js | 3 | async function getData() { | CODE |
| LOW | …pp/app/(newroot)/dashboard/project/[projectId]/page.js | 3 | async function getData({ params }) { | CODE |
| LOW | …p/app/slow-layout-and-page-with-loading/slow/layout.js | 3 | async function getData() { | CODE |
| LOW | …app/app/slow-layout-and-page-with-loading/slow/page.js | 3 | async function getData() { | CODE |
| LOW | …st/e2e/app-dir/app/app/dashboard/deployments/layout.js | 3 | async function getData() { | CODE |
| LOW | …e2e/app-dir/app/app/dashboard/deployments/[id]/page.js | 5 | async function getData({ params }) { | CODE |
| LOW | test/e2e/app-dir/app/app/slow-page-with-loading/page.js | 3 | async function getData() { | CODE |
| LOW | test/e2e/app-dir/app/app/slow-page-no-loading/page.js | 3 | async function getData() { | CODE |
| LOW | …st/e2e/app-dir/app-rendering/app/static-only/layout.js | 3 | async function getData() { | CODE |
| LOW | …e/app-dir/app-rendering/app/static-only/slow/layout.js | 3 | async function getData() { | CODE |
| LOW | …e2e/app-dir/app-rendering/app/static-only/slow/page.js | 5 | async function getData() { | CODE |
| LOW | …e/app-dir/app-rendering/app/static-only/nested/page.js | 5 | async function getData() { | CODE |
| LOW | …-dir/app-rendering/app/isr-ssr-combined/slow/layout.js | 3 | async function getData() { | CODE |
| LOW | …pp-dir/app-rendering/app/isr-ssr-combined/slow/page.js | 3 | async function getData() { | CODE |
| LOW | …ir/app-rendering/app/isr-ssr-combined/nested/layout.js | 3 | async function getData() { | CODE |
| LOW | …-dir/app-rendering/app/isr-ssr-combined/nested/page.js | 3 | async function getData() { | CODE |
| LOW | test/e2e/app-dir/app-rendering/app/ssr-only/layout.js | 5 | async function getData() { | CODE |
| LOW | …/e2e/app-dir/app-rendering/app/ssr-only/slow/layout.js | 5 | async function getData() { | CODE |
| LOW | …st/e2e/app-dir/app-rendering/app/ssr-only/slow/page.js | 4 | async function getData() { | CODE |
| LOW | …/e2e/app-dir/app-rendering/app/ssr-only/nested/page.js | 3 | async function getData() { | CODE |
| LOW | …t/e2e/app-dir/app-rendering/app/isr-multiple/layout.js | 3 | async function getData() { | CODE |
| LOW | …/app-dir/app-rendering/app/isr-multiple/nested/page.js | 5 | async function getData() { | CODE |
| LOW | …/app-dir/app-compilation/app/page-with-loading/page.js | 3 | async function getData() { | CODE |
| LOW | …pp-dir/parallel-routes-revalidation/app/prr/actions.ts | 13 | export async function getData() { | CODE |
| LOW | …e-cache/app/(dynamic)/cache-fetch-auth-header/page.tsx | 4 | async function getData() { | CODE |
| LOW | …-cache/app/(dynamic)/private-dedup-sequential/page.tsx | 6 | async function getData(params: { id: number }) { | CODE |
| LOW | …-dir/use-cache/app/(dynamic)/dedup-sequential/page.tsx | 6 | async function getData(params: { id: number }) { | CODE |
| LOW | …app-dir/use-cache/app/(dynamic)/action-dedupe/page.tsx | 7 | async function getData(params: { id: number }) { | CODE |
| LOW | …cache/app/(partially-static)/fetch-revalidate/page.tsx | 3 | async function getData() { | CODE |
| LOW | …e/app/(partially-static)/cache-fetch-no-store/page.tsx | 3 | async function getData() { | CODE |
| LOW | …/use-cache/app/(partially-static)/cache-fetch/page.tsx | 3 | async function getData() { | CODE |
| LOW | …-dir/revalidate-path-with-rewrites/app/shared-page.tsx | 1 | async function getData() { | CODE |
| LOW | test/e2e/app-dir/use-cache-custom-handler/app/page.tsx | 13 | async function getData() { | CODE |
| LOW | …dir/use-cache-custom-handler/app/registration/page.tsx | 4 | async function getData() { | CODE |
| LOW | …use-cache-custom-handler/app/path-revalidation/data.ts | 4 | export async function getData(id?: string) { | CODE |
| LOW | …se-cache-custom-handler/app/sequential-dedupe/page.tsx | 4 | async function getData(params: { id: number }) { | CODE |
| 23 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | crates/next-code-frame/src/frame.rs | 196 | // ── Validate and normalize the location ────────────────────────────── | COMMENT |
| MEDIUM | …pack-trace-server-query/turbopack-trace-server.test.ts | 21 | // ─── helpers ───────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …pack-trace-server-query/turbopack-trace-server.test.ts | 112 | // ─── test suite ────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …pack-trace-server-query/turbopack-trace-server.test.ts | 236 | // ─── MCP HTTP API tests ────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …pack-trace-server-query/turbopack-trace-server.test.ts | 316 | // ─── allocation metadata ───────────────────────────────────────────────── | COMMENT |
| MEDIUM | …pack-trace-server-query/turbopack-trace-server.test.ts | 402 | // ─── recursive search ──────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …pack-trace-server-query/turbopack-trace-server.test.ts | 465 | // ─── subtree depth ─────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …pack-trace-server-query/turbopack-trace-server.test.ts | 492 | // ─── page size ─────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …pack-trace-server-query/turbopack-trace-server.test.ts | 511 | // ─── heaviest span ─────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …pack-trace-server-query/turbopack-trace-server.test.ts | 578 | // ─── CLI tests ─────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | turbopack/crates/turbo-persistence/src/db.rs | 1292 | // ── Point of no return ────────────────────────────────────────── | COMMENT |
| MEDIUM | …ev-overlay/components/instant/instant-guidance-data.ts | 78 | // ── Blocking-route cards ────────────────────────── | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | test/lib/otel-span-tree.ts | 168 | print(child, prefix + (last ? ' ' : '│ ')) | CODE |
| HIGH | test/lib/otel-span-tree.ts | 173 | print(root, '') | CODE |
| HIGH | examples/cms-wordpress/src/app/not-found.tsx | 15 | print(SeoQuery), | CODE |
| HIGH | examples/cms-wordpress/src/app/[[...slug]]/page.tsx | 24 | print(SeoQuery), | CODE |
| HIGH | examples/cms-wordpress/src/app/[[...slug]]/page.tsx | 53 | print(ContentInfoQuery), | CODE |
| HIGH | examples/cms-wordpress/src/app/api/preview/route.ts | 37 | print(mutation), | CODE |
| HIGH | examples/cms-wordpress/src/app/api/preview/route.ts | 55 | print(query), | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL | crates/next-custom-transforms/src/chain_transforms.rs | 397 | let syntax = self.swc.config.jsc.syntax.unwrap_or_default(); | CODE |
| CRITICAL | crates/next-custom-transforms/src/chain_transforms.rs | 398 | let target = self.swc.config.jsc.target.unwrap_or_else(EsVersion::latest); | CODE |
| CRITICAL | packages/next/src/compiled/crypto-browserify/index.js | 1 | (function(){var e={9186:function(e,t,r){var i=t;i.bignum=r(5944);i.define=r(5673).define;i.base=r(8747);i.constants=r(80 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | run-evals.js | 103 | // Cheap fixed grader for the agentic judge clauses in EVAL.ts files — every | COMMENT |
| MEDIUM | evals/evals/agent-030-app-router-migration-hard/EVAL.ts | 43 | // agentic LLM judge rather than regex. The old regexes rejected correct solutions | COMMENT |
| MEDIUM | packages/create-next-app/templates/index.ts | 497 | // to scaffold the project (e.g. a pnpm-workspace.yaml written for pnpm v10+ | COMMENT |
| MEDIUM | .github/workflows/build_reusable.yml | 114 | # only orchestrates cargo and names artifacts (types are committed), so | COMMENT |
| MEDIUM | skills/next-cache-components-optimizer/SKILL.md | 225 | ## B. BASELINE (unlocked): development scaffold, do not ship | COMMENT |
| MEDIUM | skills/next-cache-components-optimizer/test-template.md | 134 | ## Baseline scaffold: do not ship | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | pnpm-workspace.yaml | 66 | # of a GH Action. If you update this section, make sure you also update that script. | COMMENT |
| MEDIUM | test/lib/next-test-utils.ts | 1809 | // Feel free to adjust this heuristic if it accidentally hides too much. | COMMENT |
| MEDIUM | …/app-dir/server-source-maps/server-source-maps.test.ts | 756 | // Feel free to adjust these locations. They're just here to showcase | COMMENT |
| MEDIUM | turbopack/crates/turbo-persistence/src/tests.rs | 201 | // to run under Miri and depends on concurrency that Miri cannot provide efficiently. | COMMENT |
| LOW | examples/with-http2/server.js | 13 | // Don't forget to create the keys for your development | COMMENT |
| LOW | examples/with-typescript/pages/users/index.tsx | 29 | // Don't forget to include the respective types for any props passed into | COMMENT |
| MEDIUM | examples/with-supabase/proxy.ts | 16 | * Feel free to modify this pattern to include more paths. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | examples/with-firebase-cloud-messaging/utils/webPush.js | 12 | apiKey: "YOUR-API-KEY", | CODE |
| HIGH | …rebase-cloud-messaging/public/firebase-messaging-sw.js | 6 | apiKey: "YOUR-API-KEY", | CODE |
| HIGH | examples/with-apivideo/pages/videos/index.tsx | 58 | API key set in your .env file this way: <i>API_KEY=YOUR_API_KEY</i> | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …th-docker-compose/compose.prod-without-multistage.yaml | 18 | # Define a network, which allows containers to communicate | COMMENT |
| MEDIUM | examples/with-docker-compose/compose.dev.yaml | 27 | # Define a network, which allows containers to communicate | COMMENT |
| MEDIUM | examples/with-docker-compose/compose.prod.yaml | 18 | # Define a network, which allows containers to communicate | COMMENT |
| MEDIUM | .github/workflows/create_release_branch.yml | 21 | # Creating a branch from a tag needs no approval: the tag's content is | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | bench/basic-app/benchmark.sh | 9 | # Usage: | COMMENT |
| LOW | scripts/run-jest.sh | 6 | # Usage: | COMMENT |
| LOW | scripts/benchmark-boot-time.sh | 11 | # Usage: | COMMENT |
| LOW | packages/next-codemod/scripts/test-upgrade-fixture.sh | 5 | # Usage: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | test/e2e/app-dir/app-rendering/rendering.test.ts | 79 | // TODO: implement | COMMENT |
| LOW | test/e2e/app-dir/app-rendering/rendering.test.ts | 84 | // TODO: implement | COMMENT |
| LOW | test/e2e/app-dir/app-rendering/rendering.test.ts | 98 | // TODO: implement | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | turbopack/scripts/analyze_cache_effectiveness.py | 332 | print(f"Error: File not found: {e.filename}") | CODE |
| MEDIUM | turbopack/scripts/analyze_cache_effectiveness.py | 335 | print(f"Error parsing JSON: {e}") | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | turbopack/scripts/analyze_cache_effectiveness.py | 104 | # Print results | COMMENT |