npm / @babel/types / 8.0.6

@babel/types 8.0.6

Source
https://github.com/babel/babel
Tag scanned
v8.0.6
Directory
packages/babel-types (only this part of the repository was scanned)
Compared with
v8.0.5 (0 signals introduced since)
Files
117 scanned, 5 skipped (binary, oversized, or unrecognised)
Signals
0 critical · 0 warn · 2 info
Scan time
2.5 s
LLM review
Reviewed by claude-haiku-5-5 (Anthropic): 1 of 1 warn and critical signal; 1 demoted to info.
Disclude version
4.1.0
Scanned (UTC)
2026-10-22 13:51

Signals

Ordered by severity, then signals introduced in this release. Hidden characters are shown as ⟨U+…⟩.

  1. info warn → info by review long-line packages/babel-types/src/builders/generated/index.ts:23:1

    line length 4619 characters (raw pass, confidence 0.65)

      ArrayExpression, AssignmentExpression, BinaryExpression, InterpreterDirective, Directive, DirectiveLiteral, BlockStatement, BreakStatement, CallExpression, CatchClause, ConditionalExpression, ContinueStatement, DebuggerStatement, DoWhileStatement, EmptyStatement, ExpressionStatement, File, ForInStatement, ForStatemen
    dismissed LLM, confidence 0.95 A generated TypeScript index file containing one very long line listing Babel AST node type names.
    Reasoning

    A raw long-line warning on a generated builders index file is a standard artifact of code generation. The snippet is a plain comma-separated list of Babel AST node type names (ArrayExpression, BlockStatement, etc.), which is ordinary library code with no encoding, obfuscation, or execution behavior. Low severity and raw pass make this a known false-positive pattern.

  2. identifier `α` contains homoglyph candidates: α (03B1)→a (in string/comment) (raw pass, confidence 0.35)

          expect(t.react.isCompatTag("plastic-button")).toBe(true); // ascii letters
          expect(t.react.isCompatTag("math-α")).toBe(true); // non-latin chars
          expect(t.react.isCompatTag("img-viewer2")).toBe(true); // numbers
          expect(t.react.isCompatTag("emotion-😍")).toBe(true); // emoji

Reproduce This Scan

Run disclude locally to verify. Add --format sarif for SARIF output. Add --llm (with an API key in the environment) to include the LLM review.

cargo install disclude --version 4.1.0
git clone https://github.com/babel/babel babel && cd babel
git checkout v8.0.6
disclude scan --severity info --diff v8.0.5 packages/babel-types