npm / @babel/types / 8.0.6

@babel/types 8.0.6

Source

https://github.com/babel/babel

Tag scanned

v8.0.6

Directory

packages/babel-types (only this part of the repository was scanned)

Compared with

v8.0.5 (0 signals introduced since)

Files

117 scanned, 5 skipped (binary, oversized, or unrecognised)

Signals

0 critical · 0 warn · 2 info

Scan time

1.7 s

LLM review

Reviewed by claude-haiku-5-5 (Anthropic): 1 of 1 warn and critical signal; 1 demoted to info.

Disclude version

4.0.0

Scanned (UTC)

2026-10-14 19:19

Signals

Ordered by severity, then signals introduced in this release. Hidden characters are shown as ⟨U+…⟩.

1. info warn → info by review long-line packages/babel-types/src/builders/generated/index.ts:23:1

   line length 4619 characters (raw pass, confidence 0.65)

     ArrayExpression, AssignmentExpression, BinaryExpression, InterpreterDirective, Directive, DirectiveLiteral, BlockStatement, BreakStatement, CallExpression, CatchClause, ConditionalExpression, ContinueStatement, DebuggerStatement, DoWhileStatement, EmptyStatement, ExpressionStatement, File, ForInStatement, ForStatemen

   likely benign LLM, confidence 0.95 A generated TypeScript file contains a very long line listing AST node type names, consistent with Babel-style code generation.

   Reasoning

   The finding is a raw-pass long-line warning on a generated TypeScript file under a 'generated' path. The snippet shows a comma-separated list of Babel AST node type names (ArrayExpression, BinaryExpression, etc.), which is the typical output of a code generator emitting a long export or union list. No encoding, dynamic execution, or obfuscation is present; line length alone is a style concern on generated code.

2. info unicode-homoglyph packages/babel-types/test/validators.js:51:40

   identifier `α` contains homoglyph candidates: α (03B1)→a (in string/comment) (raw pass, confidence 0.35)

         expect(t.react.isCompatTag("plastic-button")).toBe(true); // ascii letters
         expect(t.react.isCompatTag("math-α")).toBe(true); // non-latin chars
         expect(t.react.isCompatTag("img-viewer2")).toBe(true); // numbers
         expect(t.react.isCompatTag("emotion-😍")).toBe(true); // emoji

Reproduce This Scan

Run disclude locally to verify. Add --format sarif for SARIF output. Add --llm (with an API key in the environment) to include the LLM review.

cargo install disclude --version 4.0.0
git clone https://github.com/babel/babel babel && cd babel
git checkout v8.0.6
disclude scan --severity info --diff v8.0.5 packages/babel-types