Build system optimized for JavaScript and TypeScript, written in Rust
This report summarizes scanner evidence for vercel/turborepo, a Rust project with 31,281 GitHub stars. SynthScan examined 708,228 lines of code across 3392 source files, recording 740 pattern matches distributed across 14 syntactic categories. The legacy adjusted pattern signal is 1.3 (Low pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.
Can maintainers explain intent, assumptions, and trade-offs? 696 finding(s).
Are imports declared and package/API names verified? 32 finding(s).
Are wrappers, guards, and repeated structures necessary? 90 finding(s).
Which changes need focused human review? 740 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 740 distinct pattern matches across 14 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | crates/turborepo-tracing/src/lib.rs | 181 | /// This layer can be reloaded. `None` means the layer is disabled. | COMMENT |
| LOW | crates/turborepo-tracing/src/lib.rs | 261 | impl TurboSubscriber { | COMMENT |
| LOW | crates/turborepo-watch/src/lib.rs | 301 | /// leading-newline hint for a stalled-startup message, with one file per line | COMMENT |
| LOW | crates/turborepo-shim/src/error.rs | 1 | //! This file is intentionally empty. | COMMENT |
| LOW | crates/turborepo-shim/src/lib.rs | 1 | //! Shim for invoking the correct turbo binary version. | COMMENT |
| LOW | crates/turborepo-shim/src/lib.rs | 41 | /// correct one to use (either because it's the local installation, or because | COMMENT |
| LOW | crates/turborepo-shim/src/lib.rs | 81 | /// | COMMENT |
| LOW | crates/turborepo-shim/src/lib.rs | 121 | /// configuration infrastructure in `turborepo-cli`. | COMMENT |
| LOW | crates/turborepo-shim/src/run.rs | 41 | pub const INVOCATION_CWD_ENV_VAR: &str = "TURBO_INVOCATION_CWD"; | COMMENT |
| LOW | crates/turborepo-shim/src/run.rs | 121 | /// Failed to execute turbo via the package manager | COMMENT |
| LOW | crates/turborepo-shim/src/run.rs | 141 | Ok(i32), | COMMENT |
| LOW | crates/turborepo-shim/src/run.rs | 181 | /// args. | COMMENT |
| LOW | crates/turborepo-shim/src/capabilities.rs | 61 | cli_version: String, | COMMENT |
| LOW | crates/turborepo-shim/src/local_turbo_state.rs | 41 | } | COMMENT |
| LOW | crates/turborepo-archive/src/lib.rs | 1 | //! Verified TAR/TAR.GZ and ZIP extraction; no transport, installation or CLI. | COMMENT |
| LOW | crates/turborepo-archive/src/lib.rs | 21 | //! self-extracting prefixes, reordered/overlapping local records, and unknown | COMMENT |
| LOW | crates/turborepo-archive/src/lib.rs | 121 | /// as protoc's release zips. Those entries are staged below a synthetic root | COMMENT |
| LOW | crates/turborepo-platform/src/lib.rs | 21 | #[derive(Debug, Clone, Copy, PartialEq, Eq)] | COMMENT |
| LOW | crates/turborepo-run-summary/src/observability/mod.rs | 1 | //! Observability abstraction layer for Turborepo runs. | COMMENT |
| LOW | crates/turborepo-run-summary/src/observability/mod.rs | 61 | /// Shutdown the observer, flushing any pending metrics. | COMMENT |
| LOW | crates/turbo-trace/src/tracer.rs | 181 | } else { | COMMENT |
| LOW | crates/turbo-trace/src/tracer.rs | 921 | #[test_case("@types/react" ; "types package")] | COMMENT |
| LOW | crates/turborepo-filewatch/src/globwatcher.rs | 2221 | // | COMMENT |
| LOW | crates/turborepo-filewatch/src/lib.rs | 1 | //! File watching utilities for Turborepo. Includes a file watcher that is | COMMENT |
| LOW | crates/turborepo-filewatch/src/lib.rs | 2821 | COMMENT | |
| LOW | crates/turborepo-filewatch/src/hash_watcher.rs | 161 | // responding. Both package discovery and file hashing can fail depending on the | COMMENT |
| LOW | crates/turborepo-filewatch/src/hash_watcher.rs | 221 | // We use a radix_trie to store hashes so that we can quickly match a file path | COMMENT |
| LOW | crates/turborepo-filewatch/src/hash_watcher.rs | 561 | dynamic_scope.replace(&hashes); | COMMENT |
| LOW | crates/turborepo-filewatch/src/cookies.rs | 1 | //! Cookies. | COMMENT |
| LOW | crates/turborepo-filewatch/src/cookies.rs | 21 | //! a response (with a timeout). Upon getting the serial, a `CookiedRequest` | COMMENT |
| LOW | crates/turborepo-filewatch/src/fsevent.rs | 1 | //! Watcher implementation for Darwin's FSEvents API | COMMENT |
| LOW | crates/turborepo-filewatch/src/fsevent.rs | 81 | const IS_LAST_HARDLINK = fs::kFSEventStreamEventFlagItemIsLastHardlink; | COMMENT |
| LOW | crates/turborepo-filewatch/src/fsevent.rs | 101 | /// // Watch paths on the same or different filesystem devices. | COMMENT |
| LOW | crates/turborepo-filewatch/src/fsevent.rs | 141 | // other threads. | COMMENT |
| LOW | crates/turborepo-config/src/experimental_otel.rs | 81 | pub metrics: Option<ExperimentalOtelMetricsOptions>, | COMMENT |
| LOW | crates/turborepo-config/src/lib.rs | 1 | //! turborepo-config: Configuration loading and merging for Turborepo | COMMENT |
| LOW | crates/turborepo-config/src/lib.rs | 141 | pub const DEFAULT_UPLOAD_TIMEOUT: u64 = 60; | COMMENT |
| LOW | crates/turborepo-config/src/lib.rs | 161 | /// Turbo.json specific errors are in `turborepo_turbo_json::Error` and can be | COMMENT |
| LOW | crates/turborepo-config/src/lib.rs | 201 | #[error(transparent)] | COMMENT |
| LOW | crates/turborepo-config/src/lib.rs | 281 | pub api_url: Option<String>, | COMMENT |
| LOW | crates/turborepo-config/src/lib.rs | 581 | self.cache_max_size.as_deref() | COMMENT |
| LOW | crates/turborepo-config/src/lib.rs | 821 | .collect::<HashMap<_, _>>(); | COMMENT |
| LOW | crates/turborepo-config/src/turbo_json.rs | 121 | COMMENT | |
| LOW | crates/turborepo-run/src/error.rs | 21 | #[diagnostic(transparent)] | COMMENT |
| LOW | crates/turborepo-run/src/error.rs | 41 | #[error(transparent)] | COMMENT |
| LOW | crates/turborepo-run/src/lib.rs | 101 | /// Remote reads are enabled but uploads are skipped, either by the | COMMENT |
| LOW | crates/turborepo-run/src/builder.rs | 421 | // In watch mode, we can have a changed package that we want to serve as an entrypoint. | COMMENT |
| LOW | crates/turborepo-run/src/builder.rs | 601 | /// this single prefix covers exactly what per-package prefixes used to. | COMMENT |
| LOW | crates/turborepo-run/src/builder.rs | 641 | /// | COMMENT |
| LOW | crates/turborepo-run/src/builder.rs | 721 | /// requires a complete graph (scope resolution surfaces the actual parse | COMMENT |
| LOW | crates/turborepo-run/src/builder.rs | 761 | || self.opts.future_flags.strict_task_entrypoint_selection | COMMENT |
| LOW | crates/turborepo-run/src/builder.rs | 981 | // engine construction. The SCM handle is sent back as soon as it | COMMENT |
| LOW | crates/turborepo-run/src/builder.rs | 1601 | if use_task_level_affected { | COMMENT |
| LOW | crates/turborepo-run/src/builder.rs | 1681 | } | COMMENT |
| LOW | crates/turborepo-scm/src/git.rs | 981 | /// | COMMENT |
| LOW | crates/turborepo-scm/src/git_index_regression_tests.rs | 1 | //! Regression tests for the git index → file hashing pipeline. | COMMENT |
| LOW | crates/turborepo-scm/src/crlf.rs | 1 | //! CRLF→LF normalization for file hashing. | COMMENT |
| LOW | crates/turborepo-scm/src/crlf.rs | 421 | /// 1. Get file length from metadata | COMMENT |
| LOW | crates/turborepo-scm/src/crlf.rs | 541 | COMMENT | |
| LOW | crates/turborepo-scm/src/package_deps.rs | 701 | )?; | COMMENT |
| 538 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL | crates/turborepo-run-summary/src/tracker.rs | 743 | task.shared.environment_variables.specified.env.join(", ") | CODE |
| CRITICAL | crates/turborepo-run/src/lib.rs | 473 | let targets_list = self.execution.opts.run_opts.tasks.join(", "); | CODE |
| CRITICAL⚡ | crates/turborepo-run/src/lib.rs | 628 | self.execution.opts.run_opts.ui_mode.use_tui() | CODE |
| CRITICAL⚡ | crates/turborepo-run/src/lib.rs | 632 | Ok(self.execution.opts.run_opts.ui_mode.use_tui() | CODE |
| CRITICAL⚡ | crates/turborepo-run/src/lib.rs | 633 | && self.execution.opts.run_opts.dry_run.is_none() | CODE |
| CRITICAL | crates/turborepo-run/src/lib.rs | 700 | skip_cache_writes: self.execution.opts.cache_opts.cache.skip_writes(), | CODE |
| CRITICAL | crates/turborepo-run/src/lib.rs | 897 | let skip_cache_writes = self.execution.opts.cache_opts.cache.skip_writes(); | CODE |
| CRITICAL | crates/turborepo-run/src/lib.rs | 910 | let use_tui = self.execution.opts.run_opts.ui_mode.use_tui(); | CODE |
| CRITICAL | crates/turborepo-run/src/lib.rs | 1140 | let needs_expanded = self.execution.opts.run_opts.dry_run.is_some() | CODE |
| CRITICAL | crates/turborepo-run/src/lib.rs | 1307 | if self.execution.opts.run_opts.dry_run.is_some() { | CODE |
| CRITICAL | crates/turborepo-run/src/lib.rs | 1355 | self.execution.opts.scope_opts.pkg_inference_root.as_deref(), | CODE |
| CRITICAL | crates/turborepo-run/src/builder.rs | 571 | || (self.opts.cache_opts.cache.remote.should_use() && self.api_auth.is_some()) | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | lockfile-tests/runners/local.ts | 80 | function lockfileValidationCommand( | CODE |
| LOW | packages/turbo-vsc/src/turbo-discovery.ts | 77 | export function findExecutableInDirectory( | CODE |
| LOW | packages/turbo-vsc/src/turbo-run-terminal-options.ts | 24 | export function createTurboRunTerminalOptions( | CODE |
| LOW | packages/turbo-workspaces/__tests__/test-utils.ts | 136 | export function generateConvertLockMatrix() { | CODE |
| LOW | packages/turbo-workspaces/src/utils.ts | 83 | function getWorkspacePackageManager({ | CODE |
| LOW | packages/turbo-workspaces/src/utils.ts | 231 | function invalidDevEnginesPackageManager(message: string): ConvertError { | CODE |
| LOW | packages/turbo-workspaces/src/utils.ts | 240 | function getPackageManagerFromPackageManagerField( | CODE |
| LOW | packages/turbo-workspaces/src/utils.ts | 252 | function setPackageManagerDeclaration({ | CODE |
| LOW | packages/turbo-workspaces/src/utils.ts | 278 | function removePackageManagerDeclaration({ | CODE |
| LOW | packages/turbo-workspaces/src/utils.ts | 301 | function isDevEnginesPackageManagerDeclaration( | CODE |
| LOW | packages/turbo-workspaces/src/utils.ts | 493 | function getUnderlyingLockfileManager({ | CODE |
| LOW | packages/turbo-workspaces/src/utils.ts | 528 | function getUnderlyingLockfileName({ | CODE |
| LOW | packages/turbo-workspaces/src/utils.ts | 587 | function isCompatibleWithBunWorkspaces({ | CODE |
| LOW | packages/turbo-utils/src/managers.ts | 45 | function parsePackageManagerVersion(output: string | undefined) { | CODE |
| LOW | packages/turbo-utils/src/managers.ts | 106 | function getYarnReleasePathVersion(yarnPath: string): string | undefined { | CODE |
| LOW | packages/turbo-utils/src/managers.ts | 188 | export async function getAvailablePackageManagers( | CODE |
| LOW | packages/turbo-utils/src/managers.ts | 211 | export async function getPackageManagersBinPaths( | CODE |
| LOW | packages/turbo-utils/src/examples.ts | 556 | export async function downloadAndExtractExample(root: string, name: string) { | CODE |
| LOW | packages/turbo-gen/__tests__/test-utils.ts | 4 | export function getWorkspaceDetailsMockReturnValue({ | CODE |
| LOW | packages/turbo-gen/src/utils/plop.ts | 322 | function getWorkspaceGeneratorConfigs({ project }: { project: Project }) { | CODE |
| LOW | packages/turbo-codemod/__tests__/transform.test.ts | 15 | function expectedPackageJsonWithPackageManager() { | CODE |
| LOW | packages/turbo-codemod/__tests__/migrate.test.ts | 18 | function expectedPackageJsonWithPackageManager({ | CODE |
| LOW | packages/turbo-codemod/__tests__/test-utils.ts | 5 | export function getWorkspaceDetailsMockReturnValue({ | CODE |
| LOW | …codemod/src/transforms/migrate-env-var-dependencies.ts | 21 | export function hasLegacyEnvVarDependencies(config: SchemaV1) { | CODE |
| LOW | …commands/migrate/steps/get-transforms-for-migration.ts | 8 | export function getTransformsForMigration({ | CODE |
| LOW | packages/create-turbo/__tests__/test-utils.ts | 4 | export function getWorkspaceDetailsMockReturnValue({ | CODE |
| LOW | …eate-turbo/src/transforms/update-commands-in-readme.ts | 67 | export function replacePackageManagerReferences( | CODE |
| LOW | apps/factory/app/latest-factory-sandbox-command.tsx | 8 | export function LatestFactorySandboxCommand({ | CODE |
| LOW | apps/factory/app/workspace-types.ts | 161 | export function workspaceImageSelectionError( | CODE |
| LOW | apps/factory/app/workspace-types.ts | 276 | export function hasConfirmedWorkspaceMessage( | CODE |
| LOW | apps/factory/app/workspace-client.tsx | 1188 | function hasRenderableAssistantProgress(message: EveMessage | undefined) { | CODE |
| LOW | apps/factory/agent/tools/audit_example_versions.ts | 183 | async function fetchLatestPackageManagerVersion( | CODE |
| LOW | apps/factory/agent/tools/audit_example_versions.ts | 199 | function recommendedPackageManagerPin( | CODE |
| LOW | apps/factory/agent/lib/performance-validation.ts | 138 | export async function requirePublishablePerformanceChange( | CODE |
| LOW | apps/factory/agent/lib/performance-validation.ts | 158 | export async function repositoryChangeFingerprint( | CODE |
| LOW | apps/factory/agent/lib/performance-validation.ts | 191 | async function requireMeasurementsAndValidation( | CODE |
| LOW | apps/factory/agent/lib/slack.ts | 46 | function requiredEnvironmentVariable(name: string): string { | CODE |
| LOW | apps/factory/agent/lib/slack.ts | 220 | export async function recordPullRequestSlackNotification( | CODE |
| LOW | apps/factory/agent/lib/slack.ts | 240 | export async function markPullRequestSlackNotificationMerged( | CODE |
| LOW | apps/factory/agent/lib/slack.ts | 269 | async function readPullRequestSlackNotification( | CODE |
| LOW | apps/factory/agent/lib/daily-example-maintenance.ts | 7 | export function fxExampleMaintenancePrompt( | CODE |
| LOW | apps/factory/agent/lib/workspace.ts | 58 | export function parseCreateWorkspaceInput(value: unknown): { | CODE |
| LOW | apps/factory/agent/lib/workspace.ts | 90 | export function isWorkspaceMutationRequest( | CODE |
| LOW | apps/factory/agent/lib/workspace.ts | 177 | export function isWorkspaceThinkingEffort( | CODE |
| LOW | apps/factory/agent/lib/github-feedback.ts | 27 | export function isTrustedFactoryPullRequestFeedback( | CODE |
| LOW | apps/factory/agent/lib/github-feedback.ts | 44 | export function isAuthorizedFactoryPullRequestUpdate( | CODE |
| LOW | apps/factory/agent/lib/workspace-drive.ts | 19 | export function workspaceDriveInitializationScript(): string { | CODE |
| LOW | apps/factory/agent/lib/workspace-pull-request.ts | 23 | export async function updateWorkspaceActivityForSession( | CODE |
| LOW | apps/factory/agent/lib/workspace-pull-request.ts | 42 | export async function recordWorkspacePullRequestForSession( | CODE |
| LOW | apps/factory/agent/lib/operator-runs.ts | 31 | export function createOperatorWorkspaceRecord(input: { | CODE |
| LOW | apps/factory/agent/lib/repo.ts | 104 | export async function resolveAutomatedSelection( | CODE |
| LOW | apps/factory/agent/lib/operator-console.ts | 20 | function isWorkspaceThinkingEffort( | CODE |
| LOW | apps/factory/agent/lib/operator-console.ts | 90 | export function selectedOperatorThinkingEffort( | CODE |
| LOW | apps/factory/agent/lib/operator-console.ts | 137 | export function operatorSessionRequestPrincipal( | CODE |
| LOW | apps/factory/agent/lib/operator-console.ts | 147 | export function isOperatorSessionPrincipal( | CODE |
| LOW | apps/factory/agent/lib/factory-image.ts | 641 | export function factoryImageProgressCommand( | CODE |
| LOW | apps/factory/agent/lib/factory-image.ts | 663 | export function parseFactoryImageProgress( | CODE |
| LOW | apps/factory/agent/lib/factory-image-trigger.ts | 137 | async function startClaimedFactoryImageBuild(buildId: string): Promise<void> { | CODE |
| LOW | apps/factory/agent/lib/factory-image-trigger.ts | 174 | export async function reconcileFactoryImageBuilds(): Promise< | CODE |
| LOW | apps/factory/agent/lib/factory-image-registry.ts | 38 | export function isFactoryImageRegistryConfigured(): boolean { | CODE |
| 18 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH⚡ | apps/factory/agent/lib/factory-image.ts | 189 | elif have dnf; then | CODE |
| HIGH⚡ | apps/factory/agent/lib/factory-image.ts | 191 | elif have yum; then | CODE |
| HIGH⚡ | apps/factory/agent/lib/factory-image.ts | 193 | elif have apk; then | CODE |
| HIGH | apps/factory/agent/lib/factory-image.ts | 229 | elif have dnf || have yum; then | CODE |
| HIGH | apps/factory/agent/lib/factory-image.ts | 232 | elif have apk; then | CODE |
| HIGH | apps/factory/agent/lib/factory-image.ts | 281 | elif have dnf || have yum; then | CODE |
| HIGH | apps/factory/agent/lib/factory-image.ts | 447 | elif (cd /tmp && factory_timeout ${TOOL_INSTALL_TIMEOUT_SECONDS} cargo install --locked ${tool.crate}); then | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | crates/turborepo-scm/src/git_index_regression_tests.rs | 185 | // ═══════════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | crates/turborepo-scm/src/git_index_regression_tests.rs | 187 | // ═══════════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | crates/turborepo-scm/src/git_index_regression_tests.rs | 361 | // ═══════════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | crates/turborepo-scm/src/git_index_regression_tests.rs | 363 | // ═══════════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | crates/turborepo-scm/src/git_index_regression_tests.rs | 406 | // ═══════════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | crates/turborepo-scm/src/git_index_regression_tests.rs | 408 | // ═══════════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | crates/turborepo-scm/src/git_index_regression_tests.rs | 508 | // ═══════════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | crates/turborepo-scm/src/git_index_regression_tests.rs | 515 | // ═══════════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | crates/turborepo-query-api/src/lib.rs | 10 | //! ├── turborepo-cli ──────► turborepo-run ──► turborepo-query-api (traits) | COMMENT |
| MEDIUM | .github/workflows/turborepo-release.yml | 78 | # ┌─────────────────────────────────────────────────────────────────────────────┐ | COMMENT |
| MEDIUM | .github/workflows/turborepo-release.yml | 80 | # ├─────────────────────────────────────────────────────────────────────────────┤ | COMMENT |
| MEDIUM | .github/workflows/turborepo-release.yml | 101 | # └─────────────────────────────────────────────────────────────────────────────┘ | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | crates/turborepo-filewatch/src/globwatcher.rs | 1787 | #[ignore = "manual performance harness"] | COMMENT |
| MEDIUM | crates/turborepo-filewatch/src/hash_watcher.rs | 162 | // state of the filesystem, so clients will need to be robust to receiving | COMMENT |
| MEDIUM | crates/turborepo-task-executor/src/command.rs | 603 | // TODO: leverage package manager to find the local proxy | COMMENT |
| MEDIUM | crates/turborepo-cli/src/cli/mod.rs | 161 | // and made a little more robust or clear | COMMENT |
| MEDIUM | packages/turbo-utils/src/get-turbo-configs.ts | 120 | // TODO: after @turbo/workspace-convert is merged, we can leverage those utils here | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | lockfile-tests/runners/local.ts | 439 | GIT_AUTHOR_EMAIL: "test@test.com", | CODE |
| LOW | lockfile-tests/runners/local.ts | 441 | GIT_COMMITTER_EMAIL: "test@test.com" | CODE |
| LOW | crates/turborepo-archive/src/tests/links.rs | 389 | ("placeholder", Regular, b"resource", ""), | CODE |
| LOW | crates/turborepo-archive/src/tests/links.rs | 391 | ("placeholder", Kind::Symlink, b"", &target), | CODE |
| LOW | crates/turborepo-run/src/builder.rs | 3804 | &[("app", "lib"), ("lib-no-test", "placeholder")], | CODE |
| LOW | crates/turborepo-run/src/builder.rs | 3880 | let graph = package_graph_with_dependencies(&repo_root, &[("lib-a", "placeholder")]); | CODE |
| LOW | crates/turborepo-scm/src/git.rs | 1034 | .env("GIT_AUTHOR_EMAIL", "test@test.com") | CODE |
| LOW | crates/turborepo-scm/src/git.rs | 1036 | .env("GIT_COMMITTER_EMAIL", "test@test.com") | CODE |
| LOW | …rborepo-package-watcher/src/package_changes_watcher.rs | 2099 | .args(["config", "user.email", "test@test.com"]) | CODE |
| LOW | …rborepo-package-watcher/src/package_changes_watcher.rs | 2908 | .args(["config", "user.email", "test@test.com"]) | CODE |
| LOW | …rborepo-package-watcher/src/package_changes_watcher.rs | 3018 | .args(["config", "user.email", "test@test.com"]) | CODE |
| LOW | examples/design-system/README.md | 150 | Lorem ipsum dolor sit amet, consectetur adipiscing elit. Donec euismod, nisl eget consectetur tempor, nisl nunc egestas | CODE |
| LOW | examples/design-system/README.md | 150 | Lorem ipsum dolor sit amet, consectetur adipiscing elit. Donec euismod, nisl eget consectetur tempor, nisl nunc egestas | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | crates/turborepo-lockfiles/src/cargo.rs | 206 | "# This file is automatically @generated by Cargo.\n# It is not intended for manual \ | CODE |
| MEDIUM | crates/turborepo-lockfiles/src/berry/fast_parse.rs | 422 | const HEADER: &str = "# This file is generated by running \"yarn install\".\n\n__metadata:\n \ | CODE |
| MEDIUM | crates/turborepo-lockfiles/src/berry/ser.rs | 7 | const HEADER: &str = "# This file is generated by running \"yarn install\" inside your project. | CODE |
| MEDIUM | crates/turborepo-repository/src/package_manager/mod.rs | 2655 | "# This file is generated by running \"yarn install\" inside your \ | CODE |
| MEDIUM | crates/turborepo-repository/src/package_manager/yarn.rs | 150 | "# This file is generated by running \"yarn install\" inside your \ | CODE |
| MEDIUM | examples/with-docker/docker-compose.yml | 23 | # Define a network, which allows containers to communicate | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | examples/with-angular/packages/ui/README.md | 9 | ## Code scaffolding | COMMENT |
| MEDIUM | examples/with-angular/packages/ui/projects/ui/README.md | 5 | ## Code scaffolding | COMMENT |
| MEDIUM | examples/with-angular/apps/web/README.md | 9 | ## Code scaffolding | COMMENT |
| MEDIUM | examples/with-angular/apps/docs/README.md | 9 | ## Code scaffolding | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | crates/libghostty-vt-sys/src/bindings.rs | 2235 | #[doc = " Return a selection snapshot with endpoints ordered as requested.\n\n Use \ | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | .github/workflows/lint-pr-title.yml | 44 | # If `subjectPattern` is configured, you can use this property to override | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | crates/turborepo-turbo-json/src/raw.rs | 1184 | // NOTE: This method depends on turborepo-task-access types | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | crates/turborepo-auth/src/lib.rs | 407 | // Not all scopes have an expiration date, so we need to check if all of them | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | .github/actions/check-release-pr/action.yml | 38 | # Check if PR is from github-actions[bot] with the release title | COMMENT |