disclude.io

npm / jiti / 2.7.0

jiti 2.7.0

Source
https://github.com/unjs/jiti
Artifact scanned
jiti-2.7.0.tgz (npm tarball · 417.3 KB · SHA-256 8dd0d365fb49…)
Compared with
jiti-2.6.1.tgz (146 signals introduced since)
Files
15 scanned, 1 skipped (binary, oversized, or unrecognised)
Signals
0 critical · 0 warn · 151 info
Scan time
25.5 s
LLM review
Reviewed by claude-haiku-5-5 (Anthropic): 28 of 28 warn and critical signals; 28 demoted to info.
Disclude version
4.3.0
Scanned (UTC)
2026-10-23 19:57

Signals

Ordered by severity, then signals introduced in this release. Hidden characters are shown as ⟨U+…⟩.

  1. info warn → info by review dynamic-execution dist/babel.cjs:1:33412 new in this release

    `atob` decodes a base64 value at runtime — common step before dynamic fetch or eval (ast pass, confidence 0.75)

    g()}:function(e){return decodeURIComponent(escape(atob(e)))},Converter.prototype.toJSON=function(e){return JSON.stringify(this.sourcemap,null,e)},"undefined"!=typeof Buffer?"function"==typeof Buffer.from?Converter.prototype.toBase64=function(){var e=this.toJSON();return Buffer.from(e,"utf8").toString("base64")}:Convert
    likely benign LLM, confidence 0.90 A base64 decode helper in Babel's bundled source-map converter.
    Reasoning

    The atob call is part of the standard base64 source-map decoding helper (decodeURIComponent(escape(atob(e)))) that sits next to toJSON and toBase64 in a Babel source-map converter. It decodes inline data locally and has no eval, fetch, or dynamic execution nearby. This is ordinary library code.

  2. info dynamic-execution dist/babel.cjs:1:33942 new in this release

    `btoa` encodes a value as base64 at runtime — used in exfiltration patterns (ast pass, confidence 0.55)

    pe.toBase64=function(){var e=this.toJSON();return btoa(unescape(encodeURIComponent(e)))},Converter.prototype.toURI=function(){var e=this.toJSON();return encodeURIComponent(e)},Converter.prototype.toComment=function(e){var t,r,n;return null!=e&&"uri"===e.encoding?(t="",r=this.toURI()):(t=";base64",r=this.toBase64()),n="
  3. info warn → info by review long-line dist/babel.cjs:13:1 new in this release

    line length 135353 characters (raw pass, confidence 0.65)

      `(i))]);var i}function buildVar(e){const t=m("babelHelpers"),r=[];r.push(v("var",[E(t,y([]))]));const n=b(r);return buildHelpers(r,t,e),r.push(d(t)),n}function buildHelpers(e,t,r){const getHelperReference=e=>t?f(t,m(e)):m(`_${e}`),n={};return helpers().list.forEach(function(i){if(r&&!r.includes(i))return;const o=n[i]
    dismissed LLM, confidence 0.90 A very long line in a bundled Babel helper module.
    Reasoning

    This is a 135k-character line from a bundled Babel build, which is normal for minified or concatenated output. The visible content is ordinary Babel helper-building code with no encoded payloads or execution sinks. The raw pass has a high false-positive rate for this kind of signal.

  4. info warn → info by review long-line dist/babel.cjs:24:1 new in this release

    line length 13396 characters (raw pass, confidence 0.65)

          `],wrapClass:e=>(e.replaceWith(b),e.get(g))}};var n=r("./node_modules/.pnpm/@babel+core@7.29.0/node_modules/@babel/core/lib/index.js"),s=r("./node_modules/.pnpm/@babel+helper-replace-supers@7.28.6_@babel+core@7.29.0/node_modules/@babel/helper-replace-supers/lib/index.js");function prop(e,t){return t?n.types.objec
    dismissed LLM, confidence 0.90 A long bundled line of Babel class-transform plugin code.
    Reasoning

    The line is a long run of Babel plugin code and node_modules require paths in a bundle. Length alone is not an obfuscation indicator here, and the content is legitimate AST-transform logic.

  5. info warn → info by review long-line dist/babel.cjs:26:1 new in this release

    line length 7658 characters (raw pass, confidence 0.65)

          `;r.body.body=[n.types.classProperty(n.types.toExpression(X),void 0,void 0,void 0,!0,!0),...o];const s=[],i=n.types.newExpression(r,[]);U.length>0&&s.push(...U),z&&(H=!0,s.push(z)),s.length>0?(s.unshift(n.types.callExpression(n.types.super(),[n.types.cloneNode(I)])),r.body.body.push(createConstructorFromExpressio
    dismissed LLM, confidence 0.90 A long bundled line building Babel class AST nodes.
    Reasoning

    The long line contains ordinary Babel AST construction for class properties and constructors. It is the expected shape of a bundled, minified build and carries no malicious signal.

  6. info warn → info by review long-line dist/babel.cjs:38:1 new in this release

    line length 20363 characters (raw pass, confidence 0.65)

        `]}function getComputedKeyLastElement(e){if((e=(0,i.skipTransparentExprWrappers)(e)).isSequenceExpression()){const t=e.get("expressions");return getComputedKeyLastElement(t[t.length-1])}return e}function getComputedKeyMemoiser(e){const t=getComputedKeyLastElement(e);if(t.isConstantExpression())return n.types.cloneN
    dismissed LLM, confidence 0.90 A long bundled line of Babel computed-key helper functions.
    Reasoning

    The snippet is standard Babel helper code for computed-key memoisation and expression unwrapping. The line length reflects bundling and minification, not hidden content.

  7. info warn → info by review long-line dist/babel.cjs:114:1 new in this release

    line length 27614 characters (raw pass, confidence 0.65)

        `,t)}function buildPrivateMethodDeclaration(e,t,r,s=!1){const i=r.get(t.node.key.id.name),{id:o,methodId:a,getId:l,setId:p,getterDeclared:c,setterDeclared:u,static:d}=i,{params:h,body:m,generator:y,async:b}=t.node,g=l&&0===h.length,x=p&&h.length>0;if(g&&c||x&&u)return r.set(t.node.key.id.name,Object.assign({},i,{in
    dismissed LLM, confidence 0.90 A long bundled line with Babel private-method transform code.
    Reasoning

    The snippet is ordinary Babel code for building private method declarations. Its length comes from bundling, and no encoding, eval, or network activity is visible.

  8. info long-line dist/babel.cjs:127:1 new in this release

    line length 1907 characters (raw pass, confidence 0.50)

        `};var n=r("./node_modules/.pnpm/@babel+core@7.29.0/node_modules/@babel/core/lib/index.js");t.getDynamicImportSource=function(e){const[t]=e.arguments;return n.types.isStringLiteral(t)||n.types.isTemplateLiteral(t)?t:n.template.expression.ast`\`\${${t}}\``}},"./node_modules/.pnpm/@babel+helper-module-transforms@7.28
  9. info warn → info by review long-line dist/babel.cjs:163:1 new in this release

    line length 3438 characters (raw pass, confidence 0.65)

          `)({EXPORTS:e.exportName})}(T,v));const P=function(e,t){const r=Object.create(null);for(const e of t.local.values())for(const t of e.names)r[t]=!0;let n=!1;for(const e of t.source.values()){for(const t of e.reexports.keys())r[t]=!0;for(const t of e.reexportNamespace)r[t]=!0;n=n||!!e.reexportAll}if(!n||0===Object.
    dismissed LLM, confidence 0.90 A long bundled line with Babel export-handling logic.
    Reasoning

    The snippet is Babel module-export analysis code for ES module interop. It contains no encoded or executed payloads, and the line length is typical of a bundle.

  10. info warn → info by review long-line dist/babel.cjs:179:1 new in this release

    line length 10955 characters (raw pass, confidence 0.65)

          })["${t}"] = ${r}`;function buildInitStatement(e,t,r){const{stringSpecifiers:n,exportName:i}=e;return s.types.expressionStatement(t.reduce((e,t)=>{const r={exports:i,name:t,value:e};return"__proto__"===t?InitTemplate_define(r):n.has(t)?InitTemplate_computed(r):InitTemplate_default(r)},r))}},"./node_modules/.pnpm/
    dismissed LLM, confidence 0.90 A long bundled line with Babel export-initialisation helpers.
    Reasoning

    The snippet is Babel export-initialisation code using template helpers and reduce. It is consistent with module-transform logic, and the long line is a bundling artifact.

  11. info warn → info by review long-line dist/babel.cjs:183:1 new in this release

    line length 10384 characters (raw pass, confidence 0.65)

      `,i={ReferencedIdentifier(e){const{seen:t,buildImportReference:r,scope:s,imported:i,requeueInParent:o}=this;if(t.has(e.node))return;t.add(e.node);const a=e.node.name,l=i.get(a);if(l){if(function(e){do{switch(e.parent.type){case"TSTypeAnnotation":case"TSTypeAliasDeclaration":case"TSTypeReference":case"TypeAnnotation":
    dismissed LLM, confidence 0.90 A long bundled line with a Babel identifier-rewriting visitor.
    Reasoning

    The snippet is a Babel ReferencedIdentifier visitor that handles TypeScript type annotations and imports. This is legitimate transform logic, and the length is a product of minified bundling.

  12. info warn → info by review long-line dist/babel.cjs:191:1 new in this release

    line length 447735 characters (raw pass, confidence 0.65)

          `}},x=Object.assign({},b,{prop(e){const{property:t}=e.node;return this.memoiser.has(t)?p(this.memoiser.get(t)):p(t)},get(e){const{isStatic:t,getSuperRef:r}=this,{computed:n}=e.node,s=this.prop(e);let i;var o,a;t?i=null!=(o=r())?o:u(c("Function"),c("prototype")):i=u(null!=(a=r())?a:c("Object"),c("prototype"));retu
    dismissed LLM, confidence 0.90 An extremely long bundled line with Babel class-member transform code.
    Reasoning

    The snippet is Babel class-property transform code with memoisers and super-ref handling. A 447k-character line is typical of a minified single-line bundle, and nothing visible is malicious.

  13. info unicode-mixed-script dist/babel.cjs:191:8232 new in this release

    identifier `ˤˬˮͰ` mixes scripts: Other + Greek (in string/comment) (raw pass, confidence 0.40)

    art;let r="ªµºÀ-ÖØ-öø-ˁˆ-ˑˠ-ˤˬˮͰ-ʹͶͷͺ-ͽͿΆΈ-ΊΌΎ-ΡΣ-ϵϷ-ҁҊ-ԯԱ-Ֆՙՠ-ֈא-תׯ-ײؠ-يٮٯٱ-ۓەۥۦۮۯۺ-ۼۿܐܒ-ܯݍ-ޥޱߊ-ߪߴߵߺࠀ-ࠕࠚࠤࠨࡀ-ࡘࡠ-ࡪࡰ-ࢇࢉ-⟨U+088F⟩ࢠ-ࣉऄ-हऽॐक़-ॡॱ-ঀঅ-ঌএঐও-নপ-রলশ-হঽৎড়ঢ়য়-ৡৰৱৼਅ-ਊ… (340 bytes total)
  14. info unicode-mixed-script dist/babel.cjs:191:8281 new in this release

    identifier `ԯԱ` mixes scripts: Cyrillic + Armenian (in string/comment) (raw pass, confidence 0.40)

    ʹͶͷͺ-ͽͿΆΈ-ΊΌΎ-ΡΣ-ϵϷ-ҁҊ-ԯԱ-Ֆՙՠ-ֈא-תׯ-ײؠ-يٮٯٱ-ۓەۥۦۮۯۺ-ۼۿܐܒ-ܯݍ-ޥޱߊ-ߪߴߵߺࠀ-ࠕࠚࠤࠨࡀ-ࡘࡠ-ࡪࡰ-ࢇࢉ-⟨U+088F⟩ࢠ-ࣉऄ-हऽॐक़-ॡॱ-ঀঅ-ঌএঐও-নপ-রলশ-হঽৎড়ঢ়য়-ৡৰৱৼਅ-ਊਏਐਓ-ਨਪ-ਰਲਲ਼ਵਸ਼ਸਹਖ਼-ੜਫ਼… (339 bytes total)
  15. info unicode-mixed-script dist/babel.cjs:191:8293 new in this release

    identifier `ֈא` mixes scripts: Armenian + Hebrew (in string/comment) (raw pass, confidence 0.40)

    �ΆΈ-ΊΌΎ-ΡΣ-ϵϷ-ҁҊ-ԯԱ-Ֆՙՠ-ֈא-תׯ-ײؠ-يٮٯٱ-ۓەۥۦۮۯۺ-ۼۿܐܒ-ܯݍ-ޥޱߊ-ߪߴߵߺࠀ-ࠕࠚࠤࠨࡀ-ࡘࡠ-ࡪࡰ-ࢇࢉ-⟨U+088F⟩ࢠ-ࣉऄ-हऽॐक़-ॡॱ-ঀঅ-ঌএঐও-নপ-রলশ-হঽৎড়ঢ়য়-ৡৰৱৼਅ-ਊਏਐਓ-ਨਪ-ਰਲਲ਼ਵਸ਼ਸਹਖ਼-ੜਫ਼ੲ-ੴઅ-… (340 bytes total)
  16. info unicode-mixed-script dist/babel.cjs:191:8303 new in this release

    identifier `ײؠ` mixes scripts: Hebrew + Arabic (in string/comment) (raw pass, confidence 0.40)

    Ύ-ΡΣ-ϵϷ-ҁҊ-ԯԱ-Ֆՙՠ-ֈא-תׯ-ײؠ-يٮٯٱ-ۓەۥۦۮۯۺ-ۼۿܐܒ-ܯݍ-ޥޱߊ-ߪߴߵߺࠀ-ࠕࠚࠤࠨࡀ-ࡘࡠ-ࡪࡰ-ࢇࢉ-⟨U+088F⟩ࢠ-ࣉऄ-हऽॐक़-ॡॱ-ঀঅ-ঌএঐও-নপ-রলশ-হঽৎড়ঢ়য়-ৡৰৱৼਅ-ਊਏਐਓ-ਨਪ-ਰਲਲ਼ਵਸ਼ਸਹਖ਼-ੜਫ਼ੲ-ੴઅ-ઍએ-ઑઓ
  17. info unicode-mixed-script dist/babel.cjs:191:8332 new in this release

    identifier `ۼۿܐܒ` mixes scripts: Arabic + Other (in string/comment) (raw pass, confidence 0.40)

    -ֈא-תׯ-ײؠ-يٮٯٱ-ۓەۥۦۮۯۺ-ۼۿܐܒ-ܯݍ-ޥޱߊ-ߪߴߵߺࠀ-ࠕࠚࠤࠨࡀ-ࡘࡠ-ࡪࡰ-ࢇࢉ-⟨U+088F⟩ࢠ-ࣉऄ-हऽॐक़-ॡॱ-ঀঅ-ঌএঐও-নপ-রলশ-হঽৎড়ঢ়য়-ৡৰৱৼਅ-ਊਏਐਓ-ਨਪ-ਰਲਲ਼ਵਸ਼ਸਹਖ਼-ੜਫ਼ੲ-ੴઅ-ઍએ-ઑઓ-નપ-રલળવ-હઽ… (339 bytes total)
  18. info unicode-mixed-script dist/babel.cjs:191:9492 new in this release

    identifier `ᶿḀ` mixes scripts: Other + Latin (in string/comment) (raw pass, confidence 0.40)

    ��-ᲺᲽ-Ჿᳩ-ᳬᳮ-ᳳᳵᳶᳺᴀ-ᶿḀ-ἕἘ-Ἕἠ-ὅὈ-Ὅὐ-ὗὙὛὝὟ-ώᾀ-ᾴᾶ-ᾼιῂ-ῄῆ-ῌῐ-ΐῖ-Ίῠ-Ῥῲ-ῴῶ-ῼⁱⁿₐ-ₜℂℇℊ-ℓℕ℘-ℝℤΩℨK-ℹℼ-ℿⅅ-ⅉⅎⅠ-ↈⰀ-ⳤⳫ-ⳮⳲⳳⴀ-ⴥⴧⴭⴰ-ⵧⵯⶀ-ⶖⶠ-ⶦⶨ-ⶮⶰ-ⶶⶸ-ⶾ… (339 bytes total)
  19. info unicode-mixed-script dist/babel.cjs:191:9609 new in this release

    identifier `ῼⁱⁿₐ` mixes scripts: Greek + Other (in string/comment) (raw pass, confidence 0.40)

    �ῆ-ῌῐ-ΐῖ-Ίῠ-Ῥῲ-ῴῶ-ῼⁱⁿₐ-ₜℂℇℊ-ℓℕ℘-ℝℤΩℨK-ℹℼ-ℿⅅ-ⅉⅎⅠ-ↈⰀ-ⳤⳫ-ⳮⳲⳳⴀ-ⴥⴧⴭⴰ-ⵧⵯⶀ-ⶖⶠ-ⶦⶨ-ⶮⶰ-ⶶⶸ-ⶾⷀ-ⷆⷈ-ⷎⷐ-ⷖⷘ-ⷞ々-〇〡-〩〱-〵〸-〼ぁ-ゖ゛-ゟァ-ヺー-ヿㄅ-ㄯㄱ-ㆎㆠ-ㆿㇰ-ㇿ㐀-䶿… (339 bytes total)
  20. info unicode-mixed-script dist/babel.cjs:191:9819 new in this release

    identifier `〼ぁ` mixes scripts: Other + Hiragana (in string/comment) (raw pass, confidence 0.40)

    �ⷐ-ⷖⷘ-ⷞ々-〇〡-〩〱-〵〸-〼ぁ-ゖ゛-ゟァ-ヺー-ヿㄅ-ㄯㄱ-ㆎㆠ-ㆿㇰ-ㇿ㐀-䶿一-ꒌꓐ-ꓽꔀ-ꘌꘐ-ꘟꘪꘫꙀ-ꙮꙿ-ꚝꚠ-ꛯꜗ-ꜟꜢ-ꞈꞋ-Ƛ⟨U+A7F1⟩-ꠁꠃ-ꠅꠇ-ꠊꠌ-ꠢꡀ-ꡳꢂ-ꢳꣲ-ꣷꣻꣽꣾꤊ-ꤥꤰ-ꥆꥠ-ꥼꦄ-ꦲꧏꧠ-ꧤꧦ-ꧯꧺ-ꧾꨀ-ꨨꩀ-ꩂꩄ-ꩋꩠ-… (340 bytes total)
  21. info unicode-mixed-script dist/babel.cjs:191:9847 new in this release

    identifier `ヿㄅ` mixes scripts: Katakana + Other (in string/comment) (raw pass, confidence 0.40)

    �〱-〵〸-〼ぁ-ゖ゛-ゟァ-ヺー-ヿㄅ-ㄯㄱ-ㆎㆠ-ㆿㇰ-ㇿ㐀-䶿一-ꒌꓐ-ꓽꔀ-ꘌꘐ-ꘟꘪꘫꙀ-ꙮꙿ-ꚝꚠ-ꛯꜗ-ꜟꜢ-ꞈꞋ-Ƛ⟨U+A7F1⟩-ꠁꠃ-ꠅꠇ-ꠊꠌ-ꠢꡀ-ꡳꢂ-ꢳꣲ-ꣷꣻꣽꣾꤊ-ꤥꤰ-ꥆꥠ-ꥼꦄ-ꦲꧏꧠ-ꧤꧦ-ꧯꧺ-ꧾꨀ-ꨨꩀ-ꩂꩄ-ꩋꩠ-ꩶꩺꩾ-ꪯꪱꪵꪶꪹ-ꪽ… (341 bytes total)
  22. info unicode-mixed-script dist/babel.cjs:191:9875 new in this release

    identifier `ㇿ㐀` mixes scripts: Other + Han (in string/comment) (raw pass, confidence 0.40)

    �ァ-ヺー-ヿㄅ-ㄯㄱ-ㆎㆠ-ㆿㇰ-ㇿ㐀-䶿一-ꒌꓐ-ꓽꔀ-ꘌꘐ-ꘟꘪꘫꙀ-ꙮꙿ-ꚝꚠ-ꛯꜗ-ꜟꜢ-ꞈꞋ-Ƛ⟨U+A7F1⟩-ꠁꠃ-ꠅꠇ-ꠊꠌ-ꠢꡀ-ꡳꢂ-ꢳꣲ-ꣷꣻꣽꣾꤊ-ꤥꤰ-ꥆꥠ-ꥼꦄ-ꦲꧏꧠ-ꧤꧦ-ꧯꧺ-ꧾꨀ-ꨨꩀ-ꩂꩄ-ꩋꩠ-ꩶꩺꩾ-ꪯꪱꪵꪶꪹ-ꪽꫀꫂꫛ-ꫝꫠ-ꫪꫲ-ꫴ… (340 bytes total)
  23. info unicode-mixed-script dist/babel.cjs:191:9910 new in this release

    identifier `ꘟꘪꘫꙀ` mixes scripts: Other + Cyrillic (in string/comment) (raw pass, confidence 0.40)

    �ㇰ-ㇿ㐀-䶿一-ꒌꓐ-ꓽꔀ-ꘌꘐ-ꘟꘪꘫꙀ-ꙮꙿ-ꚝꚠ-ꛯꜗ-ꜟꜢ-ꞈꞋ-Ƛ⟨U+A7F1⟩-ꠁꠃ-ꠅꠇ-ꠊꠌ-ꠢꡀ-ꡳꢂ-ꢳꣲ-ꣷꣻꣽꣾꤊ-ꤥꤰ-ꥆꥠ-ꥼꦄ-ꦲꧏꧠ-ꧤꧦ-ꧯꧺ-ꧾꨀ-ꨨꩀ-ꩂꩄ-ꩋꩠ-ꩶꩺꩾ-ꪯꪱꪵꪶꪹ-ꪽꫀꫂꫛ-ꫝꫠ-ꫪꫲ-ꫴꬁ-ꬆꬉ-ꬎꬑ-ꬖꬠ-ꬦꬨ-ꬮ… (340 bytes total)
  24. info unicode-mixed-script dist/babel.cjs:191:9930 new in this release

    identifier `ꚝꚠ` mixes scripts: Cyrillic + Other (in string/comment) (raw pass, confidence 0.40)

    ��ꓐ-ꓽꔀ-ꘌꘐ-ꘟꘪꘫꙀ-ꙮꙿ-ꚝꚠ-ꛯꜗ-ꜟꜢ-ꞈꞋ-Ƛ⟨U+A7F1⟩-ꠁꠃ-ꠅꠇ-ꠊꠌ-ꠢꡀ-ꡳꢂ-ꢳꣲ-ꣷꣻꣽꣾꤊ-ꤥꤰ-ꥆꥠ-ꥼꦄ-ꦲꧏꧠ-ꧤꧦ-ꧯꧺ-ꧾꨀ-ꨨꩀ-ꩂꩄ-ꩋꩠ-ꩶꩺꩾ-ꪯꪱꪵꪶꪹ-ꪽꫀꫂꫛ-ꫝꫠ-ꫪꫲ-ꫴꬁ-ꬆꬉ-ꬎꬑ-ꬖꬠ-ꬦꬨ-ꬮꬰ-ꭚꭜ-ꭩꭰ-… (340 bytes total)
  25. info unicode-mixed-script dist/babel.cjs:191:10205 new in this release

    identifier `ꯢ가` mixes scripts: Other + Hangul (in string/comment) (raw pass, confidence 0.40)

    �ꬑ-ꬖꬠ-ꬦꬨ-ꬮꬰ-ꭚꭜ-ꭩꭰ-ꯢ가-힣ힰ-ퟆퟋ-ퟻ豈-舘並-龎ff-stﬓ-ﬗיִײַ-ﬨשׁ-זּטּ-לּמּנּסּףּפּצּ-ﮱﯓ-ﴽﵐ-ﶏﶒ-ﷇﷰ-ﷻﹰ-ﹴﹶ-ﻼＡ-Ｚａ-ｚｦ-ﾾￂ-ￇￊ-ￏￒ-ￗￚ-ￜ",n="·̀-ͯ·҃-֑҇-ׇֽֿׁׂׅׄؐ-ًؚ-٩ٰۖ-ۜ۟-۪ۤۧۨ-ۭ۰-۹ܑܰ-݊ަ-ް߀-߉… (341 bytes total)
  26. info unicode-mixed-script dist/babel.cjs:191:10212 new in this release

    identifier `힣ힰ` mixes scripts: Hangul + Other (in string/comment) (raw pass, confidence 0.40)

    �ꬠ-ꬦꬨ-ꬮꬰ-ꭚꭜ-ꭩꭰ-ꯢ가-힣ힰ-ퟆퟋ-ퟻ豈-舘並-龎ff-stﬓ-ﬗיִײַ-ﬨשׁ-זּטּ-לּמּנּסּףּפּצּ-ﮱﯓ-ﴽﵐ-ﶏﶒ-ﷇﷰ-ﷻﹰ-ﹴﹶ-ﻼＡ-Ｚａ-ｚｦ-ﾾￂ-ￇￊ-ￏￒ-ￗￚ-ￜ",n="·̀-ͯ·҃-֑҇-ׇֽֿׁׂׅׄؐ-ًؚ-٩ٰۖ-ۜ۟-۪ۤۧۨ-ۭ۰-۹ܑܰ-݊ަ-ް߀-߉߫-߽߳… (341 bytes total)
  27. info unicode-mixed-script dist/babel.cjs:191:10226 new in this release

    identifier `ퟻ豈` mixes scripts: Other + Han (in string/comment) (raw pass, confidence 0.40)

    �ꬰ-ꭚꭜ-ꭩꭰ-ꯢ가-힣ힰ-ퟆퟋ-ퟻ豈-舘並-龎ff-stﬓ-ﬗיִײַ-ﬨשׁ-זּטּ-לּמּנּסּףּפּצּ-ﮱﯓ-ﴽﵐ-ﶏﶒ-ﷇﷰ-ﷻﹰ-ﹴﹶ-ﻼＡ-Ｚａ-ｚｦ-ﾾￂ-ￇￊ-ￏￒ-ￗￚ-ￜ",n="·̀-ͯ·҃-֑҇-ׇֽֿׁׂׅׄؐ-ًؚ-٩ٰۖ-ۜ۟-۪ۤۧۨ-ۭ۰-۹ܑܰ-݊ަ-ް߀-߉߫-߽߳ࠖ-࠙ࠛ-ࠣ… (341 bytes total)
  28. info unicode-mixed-script dist/babel.cjs:191:10240 new in this release

    identifier `龎ff` mixes scripts: Han + Other (in string/comment) (raw pass, confidence 0.40)

    �ꭰ-ꯢ가-힣ힰ-ퟆퟋ-ퟻ豈-舘並-龎ff-stﬓ-ﬗיִײַ-ﬨשׁ-זּטּ-לּמּנּסּףּפּצּ-ﮱﯓ-ﴽﵐ-ﶏﶒ-ﷇﷰ-ﷻﹰ-ﹴﹶ-ﻼＡ-Ｚａ-ｚｦ-ﾾￂ-ￇￊ-ￏￒ-ￗￚ-ￜ",n="·̀-ͯ·҃-֑҇-ׇֽֿׁׂׅׄؐ-ًؚ-٩ٰۖ-ۜ۟-۪ۤۧۨ-ۭ۰-۹ܑܰ-݊ަ-ް߀-߉߫-߽߳ࠖ-࠙ࠛ-ࠣࠥ-ࠧࠩ-࠭… (341 bytes total)
  29. info unicode-mixed-script dist/babel.cjs:191:10342 new in this release

    identifier `ﻼＡ` mixes scripts: Other + Latin (in string/comment) (raw pass, confidence 0.40)

    �ﯓ-ﴽﵐ-ﶏﶒ-ﷇﷰ-ﷻﹰ-ﹴﹶ-ﻼＡ-Ｚａ-ｚｦ-ﾾￂ-ￇￊ-ￏￒ-ￗￚ-ￜ",n="·̀-ͯ·҃-֑҇-ׇֽֿׁׂׅׄؐ-ًؚ-٩ٰۖ-ۜ۟-۪ۤۧۨ-ۭ۰-۹ܑܰ-݊ަ-ް߀-߉߫-߽߳ࠖ-࠙ࠛ-ࠣࠥ-ࠧࠩ-࡙࠭-࡛ࢗ-࢟࣊-ࣣ࣡-ःऺ-़ा-ॏ॑-ॗॢॣ०-९ঁ-ঃ়া-ৄেৈো-্ৗৢৣ… (340 bytes total)
  30. info unicode-mixed-script dist/babel.cjs:191:10416 new in this release

    identifier `ׇֽֿׁׂׅׄؐ` mixes scripts: Hebrew + Arabic (in string/comment) (raw pass, confidence 0.40)

    -ￏￒ-ￗￚ-ￜ",n="·̀-ͯ·҃-֑҇-ׇֽֿׁׂׅׄؐ-ًؚ-٩ٰۖ-ۜ۟-۪ۤۧۨ-ۭ۰-۹ܑܰ-݊ަ-ް߀-߉߫-߽߳ࠖ-࠙ࠛ-ࠣࠥ-ࠧࠩ-࡙࠭-࡛ࢗ-࢟࣊-ࣣ࣡-ःऺ-़ा-ॏ॑-ॗॢॣ०-९ঁ-ঃ়া-ৄেৈো-্ৗৢৣ০-৯৾ਁ-ਃ਼ਾ-ੂੇੈੋ-੍ੑ੦-ੱੵઁ-ઃ઼ા-ૅે-ૉ
  31. info unicode-zero-width dist/babel.cjs:191:11438 new in this release

    U+200C ZERO WIDTH NON-JOINER in source (in string/comment) (raw pass, confidence 0.45)

    ��-᱙᳐-᳔᳒-᳨᳭᳴᳷-᳹᷀-᷿⟨U+200C⟩⟨U+200D⟩‿⁀⁔⃐-⃥⃜⃡-⃰⳯-⵿⳱ⷠ-〪ⷿ-゙゚〯・꘠-꘩꙯ꙴ-꙽ꚞꚟ꛰꛱ꠂ꠆ꠋꠣ-ꠧ꠬ꢀꢁꢴ-ꣅ꣐-꣙꣠-꣱ꣿ-꤉ꤦ-꤭ꥇ-꥓ꦀ-ꦃ꦳-꧀꧐-꧙ꧥ꧰-꧹ꨩ-ꨶꩃꩌꩍ꩐-꩙ꩻ-ꩽꪰꪲ-ꪴꪷꪸꪾ꪿꫁ꫫ-ꫯꫵ꫶ꯣ-ꯪ꯬꯭꯰… (341 bytes total)
  32. info unicode-zero-width dist/babel.cjs:191:11441 new in this release

    U+200D ZERO WIDTH JOINER in source (in string/comment) (raw pass, confidence 0.45)

    ᱙᳐-᳔᳒-᳨᳭᳴᳷-᳹᷀-᷿⟨U+200C⟩⟨U+200D⟩‿⁀⁔⃐-⃥⃜⃡-⃰⳯-⵿⳱ⷠ-〪ⷿ-゙゚〯・꘠-꘩꙯ꙴ-꙽ꚞꚟ꛰꛱ꠂ꠆ꠋꠣ-ꠧ꠬ꢀꢁꢴ-ꣅ꣐-꣙꣠-꣱ꣿ-꤉ꤦ-꤭ꥇ-꥓ꦀ-ꦃ꦳-꧀꧐-꧙ꧥ꧰-꧹ꨩ-ꨶꩃꩌꩍ꩐-꩙ꩻ-ꩽꪰꪲ-ꪴꪷꪸꪾ꪿꫁ꫫ-ꫯꫵ꫶ꯣ-ꯪ꯬꯭꯰-꯹ﬞ
  33. info critical → info by review unicode-invisible dist/babel.cjs:191:11721 new in this release

    4 invisible characters encode hidden payload: "\0\u{f}\0\u{f}" (raw pass, confidence 0.99)

    �꫁ꫫ-ꫯꫵ꫶ꯣ-ꯪ꯬꯭꯰-꯹ﬞ⟨U+FE00⟩-⟨U+FE0F⟩︠-︯︳︴﹍-﹏０-９＿･";const s=new RegExp("["+r+"]"),i=new RegExp("["+r+n+"]");r=n=null;const o=[0,11,2,25,2,18,2,1,2,14,3,13,35,122,70,52,268,28,4,48,48,31,14,29,6,37,11,29,3,35,5,7,2,4,43,157,19,35,5,35,5,39,9,51,13,10,2,14,2,6,2,1,2,10,2,14,2,6,2,1,4,51,13… (341 bytes total)
    likely benign LLM, confidence 0.85 Babel's bundled Unicode identifier tables, which contain invisible code points, are used to build regexes for validating JavaScript identifiers.
    Reasoning

    The flagged characters sit inside a regex character class built from large Unicode identifier-range tables (the numeric array that follows). This matches the ID_Start/ID_Continue tables used by Babel's identifier validator, so the invisible code points are legitimate Unicode ranges, not a hidden payload. The raw-pass heuristic misread them.

  34. info unicode-mixed-script dist/babel.cjs:191:155057 new in this release

    identifier `ˤˬˮͰ` mixes scripts: Other + Greek (in string/comment) (raw pass, confidence 0.40)

    g)};let C="ªµºÀ-ÖØ-öø-ˁˆ-ˑˠ-ˤˬˮͰ-ʹͶͷͺ-ͽͿΆΈ-ΊΌΎ-ΡΣ-ϵϷ-ҁҊ-ԯԱ-Ֆՙՠ-ֈא-תׯ-ײؠ-يٮٯٱ-ۓەۥۦۮۯۺ-ۼۿܐܒ-ܯݍ-ޥޱߊ-ߪߴߵߺࠀ-ࠕࠚࠤࠨࡀ-ࡘࡠ-ࡪࡰ-ࢇࢉ-⟨U+088F⟩ࢠ-ࣉऄ-हऽॐक़-ॡॱ-ঀঅ-ঌএঐও-নপ-রলশ-হঽৎড়ঢ়য়-ৡৰৱৼਅ-ਊ… (340 bytes total)
  35. info unicode-mixed-script dist/babel.cjs:191:155106 new in this release

    identifier `ԯԱ` mixes scripts: Cyrillic + Armenian (in string/comment) (raw pass, confidence 0.40)

    ʹͶͷͺ-ͽͿΆΈ-ΊΌΎ-ΡΣ-ϵϷ-ҁҊ-ԯԱ-Ֆՙՠ-ֈא-תׯ-ײؠ-يٮٯٱ-ۓەۥۦۮۯۺ-ۼۿܐܒ-ܯݍ-ޥޱߊ-ߪߴߵߺࠀ-ࠕࠚࠤࠨࡀ-ࡘࡠ-ࡪࡰ-ࢇࢉ-⟨U+088F⟩ࢠ-ࣉऄ-हऽॐक़-ॡॱ-ঀঅ-ঌএঐও-নপ-রলশ-হঽৎড়ঢ়য়-ৡৰৱৼਅ-ਊਏਐਓ-ਨਪ-ਰਲਲ਼ਵਸ਼ਸਹਖ਼-ੜਫ਼… (339 bytes total)
  36. info unicode-mixed-script dist/babel.cjs:191:155118 new in this release

    identifier `ֈא` mixes scripts: Armenian + Hebrew (in string/comment) (raw pass, confidence 0.40)

    �ΆΈ-ΊΌΎ-ΡΣ-ϵϷ-ҁҊ-ԯԱ-Ֆՙՠ-ֈא-תׯ-ײؠ-يٮٯٱ-ۓەۥۦۮۯۺ-ۼۿܐܒ-ܯݍ-ޥޱߊ-ߪߴߵߺࠀ-ࠕࠚࠤࠨࡀ-ࡘࡠ-ࡪࡰ-ࢇࢉ-⟨U+088F⟩ࢠ-ࣉऄ-हऽॐक़-ॡॱ-ঀঅ-ঌএঐও-নপ-রলশ-হঽৎড়ঢ়য়-ৡৰৱৼਅ-ਊਏਐਓ-ਨਪ-ਰਲਲ਼ਵਸ਼ਸਹਖ਼-ੜਫ਼ੲ-ੴઅ-… (340 bytes total)
  37. info unicode-mixed-script dist/babel.cjs:191:155128 new in this release

    identifier `ײؠ` mixes scripts: Hebrew + Arabic (in string/comment) (raw pass, confidence 0.40)

    Ύ-ΡΣ-ϵϷ-ҁҊ-ԯԱ-Ֆՙՠ-ֈא-תׯ-ײؠ-يٮٯٱ-ۓەۥۦۮۯۺ-ۼۿܐܒ-ܯݍ-ޥޱߊ-ߪߴߵߺࠀ-ࠕࠚࠤࠨࡀ-ࡘࡠ-ࡪࡰ-ࢇࢉ-⟨U+088F⟩ࢠ-ࣉऄ-हऽॐक़-ॡॱ-ঀঅ-ঌএঐও-নপ-রলশ-হঽৎড়ঢ়য়-ৡৰৱৼਅ-ਊਏਐਓ-ਨਪ-ਰਲਲ਼ਵਸ਼ਸਹਖ਼-ੜਫ਼ੲ-ੴઅ-ઍએ-ઑઓ
  38. info unicode-mixed-script dist/babel.cjs:191:155157 new in this release

    identifier `ۼۿܐܒ` mixes scripts: Arabic + Other (in string/comment) (raw pass, confidence 0.40)

    -ֈא-תׯ-ײؠ-يٮٯٱ-ۓەۥۦۮۯۺ-ۼۿܐܒ-ܯݍ-ޥޱߊ-ߪߴߵߺࠀ-ࠕࠚࠤࠨࡀ-ࡘࡠ-ࡪࡰ-ࢇࢉ-⟨U+088F⟩ࢠ-ࣉऄ-हऽॐक़-ॡॱ-ঀঅ-ঌএঐও-নপ-রলশ-হঽৎড়ঢ়য়-ৡৰৱৼਅ-ਊਏਐਓ-ਨਪ-ਰਲਲ਼ਵਸ਼ਸਹਖ਼-ੜਫ਼ੲ-ੴઅ-ઍએ-ઑઓ-નપ-રલળવ-હઽ… (339 bytes total)
  39. info unicode-mixed-script dist/babel.cjs:191:156317 new in this release

    identifier `ᶿḀ` mixes scripts: Other + Latin (in string/comment) (raw pass, confidence 0.40)

    ��-ᲺᲽ-Ჿᳩ-ᳬᳮ-ᳳᳵᳶᳺᴀ-ᶿḀ-ἕἘ-Ἕἠ-ὅὈ-Ὅὐ-ὗὙὛὝὟ-ώᾀ-ᾴᾶ-ᾼιῂ-ῄῆ-ῌῐ-ΐῖ-Ίῠ-Ῥῲ-ῴῶ-ῼⁱⁿₐ-ₜℂℇℊ-ℓℕ℘-ℝℤΩℨK-ℹℼ-ℿⅅ-ⅉⅎⅠ-ↈⰀ-ⳤⳫ-ⳮⳲⳳⴀ-ⴥⴧⴭⴰ-ⵧⵯⶀ-ⶖⶠ-ⶦⶨ-ⶮⶰ-ⶶⶸ-ⶾ… (339 bytes total)
  40. info unicode-mixed-script dist/babel.cjs:191:156434 new in this release

    identifier `ῼⁱⁿₐ` mixes scripts: Greek + Other (in string/comment) (raw pass, confidence 0.40)

    �ῆ-ῌῐ-ΐῖ-Ίῠ-Ῥῲ-ῴῶ-ῼⁱⁿₐ-ₜℂℇℊ-ℓℕ℘-ℝℤΩℨK-ℹℼ-ℿⅅ-ⅉⅎⅠ-ↈⰀ-ⳤⳫ-ⳮⳲⳳⴀ-ⴥⴧⴭⴰ-ⵧⵯⶀ-ⶖⶠ-ⶦⶨ-ⶮⶰ-ⶶⶸ-ⶾⷀ-ⷆⷈ-ⷎⷐ-ⷖⷘ-ⷞ々-〇〡-〩〱-〵〸-〼ぁ-ゖ゛-ゟァ-ヺー-ヿㄅ-ㄯㄱ-ㆎㆠ-ㆿㇰ-ㇿ㐀-䶿… (339 bytes total)
  41. info unicode-mixed-script dist/babel.cjs:191:156644 new in this release

    identifier `〼ぁ` mixes scripts: Other + Hiragana (in string/comment) (raw pass, confidence 0.40)

    �ⷐ-ⷖⷘ-ⷞ々-〇〡-〩〱-〵〸-〼ぁ-ゖ゛-ゟァ-ヺー-ヿㄅ-ㄯㄱ-ㆎㆠ-ㆿㇰ-ㇿ㐀-䶿一-ꒌꓐ-ꓽꔀ-ꘌꘐ-ꘟꘪꘫꙀ-ꙮꙿ-ꚝꚠ-ꛯꜗ-ꜟꜢ-ꞈꞋ-Ƛ⟨U+A7F1⟩-ꠁꠃ-ꠅꠇ-ꠊꠌ-ꠢꡀ-ꡳꢂ-ꢳꣲ-ꣷꣻꣽꣾꤊ-ꤥꤰ-ꥆꥠ-ꥼꦄ-ꦲꧏꧠ-ꧤꧦ-ꧯꧺ-ꧾꨀ-ꨨꩀ-ꩂꩄ-ꩋꩠ-… (340 bytes total)
  42. info unicode-mixed-script dist/babel.cjs:191:156672 new in this release

    identifier `ヿㄅ` mixes scripts: Katakana + Other (in string/comment) (raw pass, confidence 0.40)

    �〱-〵〸-〼ぁ-ゖ゛-ゟァ-ヺー-ヿㄅ-ㄯㄱ-ㆎㆠ-ㆿㇰ-ㇿ㐀-䶿一-ꒌꓐ-ꓽꔀ-ꘌꘐ-ꘟꘪꘫꙀ-ꙮꙿ-ꚝꚠ-ꛯꜗ-ꜟꜢ-ꞈꞋ-Ƛ⟨U+A7F1⟩-ꠁꠃ-ꠅꠇ-ꠊꠌ-ꠢꡀ-ꡳꢂ-ꢳꣲ-ꣷꣻꣽꣾꤊ-ꤥꤰ-ꥆꥠ-ꥼꦄ-ꦲꧏꧠ-ꧤꧦ-ꧯꧺ-ꧾꨀ-ꨨꩀ-ꩂꩄ-ꩋꩠ-ꩶꩺꩾ-ꪯꪱꪵꪶꪹ-ꪽ… (341 bytes total)
  43. info unicode-mixed-script dist/babel.cjs:191:156700 new in this release

    identifier `ㇿ㐀` mixes scripts: Other + Han (in string/comment) (raw pass, confidence 0.40)

    �ァ-ヺー-ヿㄅ-ㄯㄱ-ㆎㆠ-ㆿㇰ-ㇿ㐀-䶿一-ꒌꓐ-ꓽꔀ-ꘌꘐ-ꘟꘪꘫꙀ-ꙮꙿ-ꚝꚠ-ꛯꜗ-ꜟꜢ-ꞈꞋ-Ƛ⟨U+A7F1⟩-ꠁꠃ-ꠅꠇ-ꠊꠌ-ꠢꡀ-ꡳꢂ-ꢳꣲ-ꣷꣻꣽꣾꤊ-ꤥꤰ-ꥆꥠ-ꥼꦄ-ꦲꧏꧠ-ꧤꧦ-ꧯꧺ-ꧾꨀ-ꨨꩀ-ꩂꩄ-ꩋꩠ-ꩶꩺꩾ-ꪯꪱꪵꪶꪹ-ꪽꫀꫂꫛ-ꫝꫠ-ꫪꫲ-ꫴ… (340 bytes total)
  44. info unicode-mixed-script dist/babel.cjs:191:156735 new in this release

    identifier `ꘟꘪꘫꙀ` mixes scripts: Other + Cyrillic (in string/comment) (raw pass, confidence 0.40)

    �ㇰ-ㇿ㐀-䶿一-ꒌꓐ-ꓽꔀ-ꘌꘐ-ꘟꘪꘫꙀ-ꙮꙿ-ꚝꚠ-ꛯꜗ-ꜟꜢ-ꞈꞋ-Ƛ⟨U+A7F1⟩-ꠁꠃ-ꠅꠇ-ꠊꠌ-ꠢꡀ-ꡳꢂ-ꢳꣲ-ꣷꣻꣽꣾꤊ-ꤥꤰ-ꥆꥠ-ꥼꦄ-ꦲꧏꧠ-ꧤꧦ-ꧯꧺ-ꧾꨀ-ꨨꩀ-ꩂꩄ-ꩋꩠ-ꩶꩺꩾ-ꪯꪱꪵꪶꪹ-ꪽꫀꫂꫛ-ꫝꫠ-ꫪꫲ-ꫴꬁ-ꬆꬉ-ꬎꬑ-ꬖꬠ-ꬦꬨ-ꬮ… (340 bytes total)
  45. info unicode-mixed-script dist/babel.cjs:191:156755 new in this release

    identifier `ꚝꚠ` mixes scripts: Cyrillic + Other (in string/comment) (raw pass, confidence 0.40)

    ��ꓐ-ꓽꔀ-ꘌꘐ-ꘟꘪꘫꙀ-ꙮꙿ-ꚝꚠ-ꛯꜗ-ꜟꜢ-ꞈꞋ-Ƛ⟨U+A7F1⟩-ꠁꠃ-ꠅꠇ-ꠊꠌ-ꠢꡀ-ꡳꢂ-ꢳꣲ-ꣷꣻꣽꣾꤊ-ꤥꤰ-ꥆꥠ-ꥼꦄ-ꦲꧏꧠ-ꧤꧦ-ꧯꧺ-ꧾꨀ-ꨨꩀ-ꩂꩄ-ꩋꩠ-ꩶꩺꩾ-ꪯꪱꪵꪶꪹ-ꪽꫀꫂꫛ-ꫝꫠ-ꫪꫲ-ꫴꬁ-ꬆꬉ-ꬎꬑ-ꬖꬠ-ꬦꬨ-ꬮꬰ-ꭚꭜ-ꭩꭰ-… (340 bytes total)
  46. info unicode-mixed-script dist/babel.cjs:191:157030 new in this release

    identifier `ꯢ가` mixes scripts: Other + Hangul (in string/comment) (raw pass, confidence 0.40)

    �ꬑ-ꬖꬠ-ꬦꬨ-ꬮꬰ-ꭚꭜ-ꭩꭰ-ꯢ가-힣ힰ-ퟆퟋ-ퟻ豈-舘並-龎ff-stﬓ-ﬗיִײַ-ﬨשׁ-זּטּ-לּמּנּסּףּפּצּ-ﮱﯓ-ﴽﵐ-ﶏﶒ-ﷇﷰ-ﷻﹰ-ﹴﹶ-ﻼＡ-Ｚａ-ｚｦ-ﾾￂ-ￇￊ-ￏￒ-ￗￚ-ￜ",w="·̀-ͯ·҃-֑҇-ׇֽֿׁׂׅׄؐ-ًؚ-٩ٰۖ-ۜ۟-۪ۤۧۨ-ۭ۰-۹ܑܰ-݊ަ-ް߀-߉… (341 bytes total)
  47. info unicode-mixed-script dist/babel.cjs:191:157037 new in this release

    identifier `힣ힰ` mixes scripts: Hangul + Other (in string/comment) (raw pass, confidence 0.40)

    �ꬠ-ꬦꬨ-ꬮꬰ-ꭚꭜ-ꭩꭰ-ꯢ가-힣ힰ-ퟆퟋ-ퟻ豈-舘並-龎ff-stﬓ-ﬗיִײַ-ﬨשׁ-זּטּ-לּמּנּסּףּפּצּ-ﮱﯓ-ﴽﵐ-ﶏﶒ-ﷇﷰ-ﷻﹰ-ﹴﹶ-ﻼＡ-Ｚａ-ｚｦ-ﾾￂ-ￇￊ-ￏￒ-ￗￚ-ￜ",w="·̀-ͯ·҃-֑҇-ׇֽֿׁׂׅׄؐ-ًؚ-٩ٰۖ-ۜ۟-۪ۤۧۨ-ۭ۰-۹ܑܰ-݊ަ-ް߀-߉߫-߽߳… (341 bytes total)
  48. info unicode-mixed-script dist/babel.cjs:191:157051 new in this release

    identifier `ퟻ豈` mixes scripts: Other + Han (in string/comment) (raw pass, confidence 0.40)

    �ꬰ-ꭚꭜ-ꭩꭰ-ꯢ가-힣ힰ-ퟆퟋ-ퟻ豈-舘並-龎ff-stﬓ-ﬗיִײַ-ﬨשׁ-זּטּ-לּמּנּסּףּפּצּ-ﮱﯓ-ﴽﵐ-ﶏﶒ-ﷇﷰ-ﷻﹰ-ﹴﹶ-ﻼＡ-Ｚａ-ｚｦ-ﾾￂ-ￇￊ-ￏￒ-ￗￚ-ￜ",w="·̀-ͯ·҃-֑҇-ׇֽֿׁׂׅׄؐ-ًؚ-٩ٰۖ-ۜ۟-۪ۤۧۨ-ۭ۰-۹ܑܰ-݊ަ-ް߀-߉߫-߽߳ࠖ-࠙ࠛ-ࠣ… (341 bytes total)
  49. info unicode-mixed-script dist/babel.cjs:191:157065 new in this release

    identifier `龎ff` mixes scripts: Han + Other (in string/comment) (raw pass, confidence 0.40)

    �ꭰ-ꯢ가-힣ힰ-ퟆퟋ-ퟻ豈-舘並-龎ff-stﬓ-ﬗיִײַ-ﬨשׁ-זּטּ-לּמּנּסּףּפּצּ-ﮱﯓ-ﴽﵐ-ﶏﶒ-ﷇﷰ-ﷻﹰ-ﹴﹶ-ﻼＡ-Ｚａ-ｚｦ-ﾾￂ-ￇￊ-ￏￒ-ￗￚ-ￜ",w="·̀-ͯ·҃-֑҇-ׇֽֿׁׂׅׄؐ-ًؚ-٩ٰۖ-ۜ۟-۪ۤۧۨ-ۭ۰-۹ܑܰ-݊ަ-ް߀-߉߫-߽߳ࠖ-࠙ࠛ-ࠣࠥ-ࠧࠩ-࠭… (341 bytes total)
  50. info unicode-mixed-script dist/babel.cjs:191:157167 new in this release

    identifier `ﻼＡ` mixes scripts: Other + Latin (in string/comment) (raw pass, confidence 0.40)

    �ﯓ-ﴽﵐ-ﶏﶒ-ﷇﷰ-ﷻﹰ-ﹴﹶ-ﻼＡ-Ｚａ-ｚｦ-ﾾￂ-ￇￊ-ￏￒ-ￗￚ-ￜ",w="·̀-ͯ·҃-֑҇-ׇֽֿׁׂׅׄؐ-ًؚ-٩ٰۖ-ۜ۟-۪ۤۧۨ-ۭ۰-۹ܑܰ-݊ަ-ް߀-߉߫-߽߳ࠖ-࠙ࠛ-ࠣࠥ-ࠧࠩ-࡙࠭-࡛ࢗ-࢟࣊-ࣣ࣡-ःऺ-़ा-ॏ॑-ॗॢॣ०-९ঁ-ঃ়া-ৄেৈো-্ৗৢৣ… (340 bytes total)
  51. info unicode-mixed-script dist/babel.cjs:191:157241 new in this release

    identifier `ׇֽֿׁׂׅׄؐ` mixes scripts: Hebrew + Arabic (in string/comment) (raw pass, confidence 0.40)

    -ￏￒ-ￗￚ-ￜ",w="·̀-ͯ·҃-֑҇-ׇֽֿׁׂׅׄؐ-ًؚ-٩ٰۖ-ۜ۟-۪ۤۧۨ-ۭ۰-۹ܑܰ-݊ަ-ް߀-߉߫-߽߳ࠖ-࠙ࠛ-ࠣࠥ-ࠧࠩ-࡙࠭-࡛ࢗ-࢟࣊-ࣣ࣡-ःऺ-़ा-ॏ॑-ॗॢॣ०-९ঁ-ঃ়া-ৄেৈো-্ৗৢৣ০-৯৾ਁ-ਃ਼ਾ-ੂੇੈੋ-੍ੑ੦-ੱੵઁ-ઃ઼ા-ૅે-ૉ
  52. info unicode-zero-width dist/babel.cjs:191:158263 new in this release

    U+200C ZERO WIDTH NON-JOINER in source (in string/comment) (raw pass, confidence 0.45)

    ��-᱙᳐-᳔᳒-᳨᳭᳴᳷-᳹᷀-᷿⟨U+200C⟩⟨U+200D⟩‿⁀⁔⃐-⃥⃜⃡-⃰⳯-⵿⳱ⷠ-〪ⷿ-゙゚〯・꘠-꘩꙯ꙴ-꙽ꚞꚟ꛰꛱ꠂ꠆ꠋꠣ-ꠧ꠬ꢀꢁꢴ-ꣅ꣐-꣙꣠-꣱ꣿ-꤉ꤦ-꤭ꥇ-꥓ꦀ-ꦃ꦳-꧀꧐-꧙ꧥ꧰-꧹ꨩ-ꨶꩃꩌꩍ꩐-꩙ꩻ-ꩽꪰꪲ-ꪴꪷꪸꪾ꪿꫁ꫫ-ꫯꫵ꫶ꯣ-ꯪ꯬꯭꯰… (341 bytes total)
  53. info unicode-zero-width dist/babel.cjs:191:158266 new in this release

    U+200D ZERO WIDTH JOINER in source (in string/comment) (raw pass, confidence 0.45)

    ᱙᳐-᳔᳒-᳨᳭᳴᳷-᳹᷀-᷿⟨U+200C⟩⟨U+200D⟩‿⁀⁔⃐-⃥⃜⃡-⃰⳯-⵿⳱ⷠ-〪ⷿ-゙゚〯・꘠-꘩꙯ꙴ-꙽ꚞꚟ꛰꛱ꠂ꠆ꠋꠣ-ꠧ꠬ꢀꢁꢴ-ꣅ꣐-꣙꣠-꣱ꣿ-꤉ꤦ-꤭ꥇ-꥓ꦀ-ꦃ꦳-꧀꧐-꧙ꧥ꧰-꧹ꨩ-ꨶꩃꩌꩍ꩐-꩙ꩻ-ꩽꪰꪲ-ꪴꪷꪸꪾ꪿꫁ꫫ-ꫯꫵ꫶ꯣ-ꯪ꯬꯭꯰-꯹ﬞ
  54. info unicode-zero-width dist/babel.cjs:191:172309 new in this release

    U+00AD SOFT HYPHEN in source (in string/comment) (raw pass, confidence 0.45)

    "©",ordf:"ª",laquo:"«",not:"¬",shy:"⟨U+00AD⟩",reg:"®",macr:"¯",deg:"°",plusmn:"±",sup2:"²",sup3:"³",acute:"´",micro:"µ",para:"",middot:"·",cedil:"¸",sup1:"¹",ordm:"º",raquo:"»",frac14:"¼",frac12:"½",frac34:"¾",iquest:"¿",Agrave:"À",Aacute:"Á",Acirc:"Â",Atilde:"Ã",Auml:"Ä",Aring:"Å",AElig:"Æ",Cce
  55. info unicode-homoglyph dist/babel.cjs:191:173323 new in this release

    identifier `Α` contains homoglyph candidates: Α (0391)→A (in string/comment) (raw pass, confidence 0.35)

    ",fnof:"ƒ",circ:"ˆ",tilde:"˜",Alpha:"Α",Beta:"Β",Gamma:"Γ",Delta:"Δ",Epsilon:"Ε",Zeta:"Ζ",Eta:"Η",Theta:"Θ",Iota:"Ι",Kappa:"Κ",Lambda:"Λ",Mu:"Μ",Nu:"Ν",Xi:"Ξ",Omicron:"Ο",Pi:"Π",Rho:"Ρ",Sigma:"Σ",Tau:"Τ",Upsilon:"Υ",Phi:"Φ",Chi:"Χ",Psi:"Ψ",Omega:"Ω",alpha:"α",beta:"β",gamma:"γ",delta:"δ",
  56. info unicode-homoglyph dist/babel.cjs:191:173333 new in this release

    identifier `Β` contains homoglyph candidates: Β (0392)→B (in string/comment) (raw pass, confidence 0.35)

    ",circ:"ˆ",tilde:"˜",Alpha:"Α",Beta:"Β",Gamma:"Γ",Delta:"Δ",Epsilon:"Ε",Zeta:"Ζ",Eta:"Η",Theta:"Θ",Iota:"Ι",Kappa:"Κ",Lambda:"Λ",Mu:"Μ",Nu:"Ν",Xi:"Ξ",Omicron:"Ο",Pi:"Π",Rho:"Ρ",Sigma:"Σ",Tau:"Τ",Upsilon:"Υ",Phi:"Φ",Chi:"Χ",Psi:"Ψ",Omega:"Ω",alpha:"α",beta:"β",gamma:"γ",delta:"δ",epsilon:"… (340 bytes total)
  57. info unicode-homoglyph dist/babel.cjs:191:173368 new in this release

    identifier `Ε` contains homoglyph candidates: Ε (0395)→E (in string/comment) (raw pass, confidence 0.35)

    eta:"Β",Gamma:"Γ",Delta:"Δ",Epsilon:"Ε",Zeta:"Ζ",Eta:"Η",Theta:"Θ",Iota:"Ι",Kappa:"Κ",Lambda:"Λ",Mu:"Μ",Nu:"Ν",Xi:"Ξ",Omicron:"Ο",Pi:"Π",Rho:"Ρ",Sigma:"Σ",Tau:"Τ",Upsilon:"Υ",Phi:"Φ",Chi:"Χ",Psi:"Ψ",Omega:"Ω",alpha:"α",beta:"β",gamma:"γ",delta:"δ",epsilon:"ε",zeta:"ζ",eta:"η",theta:"θ",io
  58. info unicode-homoglyph dist/babel.cjs:191:173387 new in this release

    identifier `Η` contains homoglyph candidates: Η (0397)→H (in string/comment) (raw pass, confidence 0.35)

    ,Delta:"Δ",Epsilon:"Ε",Zeta:"Ζ",Eta:"Η",Theta:"Θ",Iota:"Ι",Kappa:"Κ",Lambda:"Λ",Mu:"Μ",Nu:"Ν",Xi:"Ξ",Omicron:"Ο",Pi:"Π",Rho:"Ρ",Sigma:"Σ",Tau:"Τ",Upsilon:"Υ",Phi:"Φ",Chi:"Χ",Psi:"Ψ",Omega:"Ω",alpha:"α",beta:"β",gamma:"γ",delta:"δ",epsilon:"ε",zeta:"ζ",eta:"η",theta:"θ",iota:"ι",kappa:"κ",
  59. info unicode-homoglyph dist/babel.cjs:191:173419 new in this release

    identifier `Κ` contains homoglyph candidates: Κ (039A)→K (in string/comment) (raw pass, confidence 0.35)

    �",Eta:"Η",Theta:"Θ",Iota:"Ι",Kappa:"Κ",Lambda:"Λ",Mu:"Μ",Nu:"Ν",Xi:"Ξ",Omicron:"Ο",Pi:"Π",Rho:"Ρ",Sigma:"Σ",Tau:"Τ",Upsilon:"Υ",Phi:"Φ",Chi:"Χ",Psi:"Ψ",Omega:"Ω",alpha:"α",beta:"β",gamma:"γ",delta:"δ",epsilon:"ε",zeta:"ζ",eta:"η",theta:"θ",iota:"ι",kappa:"κ",lambda:"λ",mu:"μ",nu:"ν",xi… (341 bytes total)
  60. info unicode-homoglyph dist/babel.cjs:191:173439 new in this release

    identifier `Μ` contains homoglyph candidates: Μ (039C)→M (in string/comment) (raw pass, confidence 0.35)

    �",Iota:"Ι",Kappa:"Κ",Lambda:"Λ",Mu:"Μ",Nu:"Ν",Xi:"Ξ",Omicron:"Ο",Pi:"Π",Rho:"Ρ",Sigma:"Σ",Tau:"Τ",Upsilon:"Υ",Phi:"Φ",Chi:"Χ",Psi:"Ψ",Omega:"Ω",alpha:"α",beta:"β",gamma:"γ",delta:"δ",epsilon:"ε",zeta:"ζ",eta:"η",theta:"θ",iota:"ι",kappa:"κ",lambda:"λ",mu:"μ",nu:"ν",xi:"ξ",omicron:"ο",p… (341 bytes total)
  61. info unicode-homoglyph dist/babel.cjs:191:173447 new in this release

    identifier `Ν` contains homoglyph candidates: Ν (039D)→N (in string/comment) (raw pass, confidence 0.35)

    "Ι",Kappa:"Κ",Lambda:"Λ",Mu:"Μ",Nu:"Ν",Xi:"Ξ",Omicron:"Ο",Pi:"Π",Rho:"Ρ",Sigma:"Σ",Tau:"Τ",Upsilon:"Υ",Phi:"Φ",Chi:"Χ",Psi:"Ψ",Omega:"Ω",alpha:"α",beta:"β",gamma:"γ",delta:"δ",epsilon:"ε",zeta:"ζ",eta:"η",theta:"θ",iota:"ι",kappa:"κ",lambda:"λ",mu:"μ",nu:"ν",xi:"ξ",omicron:"ο",pi:"π",rho
  62. info unicode-homoglyph dist/babel.cjs:191:173468 new in this release

    identifier `Ο` contains homoglyph candidates: Ο (039F)→O (in string/comment) (raw pass, confidence 0.35)

    a:"Λ",Mu:"Μ",Nu:"Ν",Xi:"Ξ",Omicron:"Ο",Pi:"Π",Rho:"Ρ",Sigma:"Σ",Tau:"Τ",Upsilon:"Υ",Phi:"Φ",Chi:"Χ",Psi:"Ψ",Omega:"Ω",alpha:"α",beta:"β",gamma:"γ",delta:"δ",epsilon:"ε",zeta:"ζ",eta:"η",theta:"θ",iota:"ι",kappa:"κ",lambda:"λ",mu:"μ",nu:"ν",xi:"ξ",omicron:"ο",pi:"π",rho:"ρ",sigmaf:"ς",sig
  63. info unicode-homoglyph dist/babel.cjs:191:173485 new in this release

    identifier `Ρ` contains homoglyph candidates: Ρ (03A1)→P (in string/comment) (raw pass, confidence 0.35)

    :"Ν",Xi:"Ξ",Omicron:"Ο",Pi:"Π",Rho:"Ρ",Sigma:"Σ",Tau:"Τ",Upsilon:"Υ",Phi:"Φ",Chi:"Χ",Psi:"Ψ",Omega:"Ω",alpha:"α",beta:"β",gamma:"γ",delta:"δ",epsilon:"ε",zeta:"ζ",eta:"η",theta:"θ",iota:"ι",kappa:"κ",lambda:"λ",mu:"μ",nu:"ν",xi:"ξ",omicron:"ο",pi:"π",rho:"ρ",sigmaf:"ς",sigma:"σ",tau:"τ",
  64. info unicode-homoglyph dist/babel.cjs:191:173505 new in this release

    identifier `Τ` contains homoglyph candidates: Τ (03A4)→T (in string/comment) (raw pass, confidence 0.35)

    n:"Ο",Pi:"Π",Rho:"Ρ",Sigma:"Σ",Tau:"Τ",Upsilon:"Υ",Phi:"Φ",Chi:"Χ",Psi:"Ψ",Omega:"Ω",alpha:"α",beta:"β",gamma:"γ",delta:"δ",epsilon:"ε",zeta:"ζ",eta:"η",theta:"θ",iota:"ι",kappa:"κ",lambda:"λ",mu:"μ",nu:"ν",xi:"ξ",omicron:"ο",pi:"π",rho:"ρ",sigmaf:"ς",sigma:"σ",tau:"τ",upsilon:"υ",phi:"φ
  65. info unicode-homoglyph dist/babel.cjs:191:173518 new in this release

    identifier `Υ` contains homoglyph candidates: Υ (03A5)→Y (in string/comment) (raw pass, confidence 0.35)

    ",Rho:"Ρ",Sigma:"Σ",Tau:"Τ",Upsilon:"Υ",Phi:"Φ",Chi:"Χ",Psi:"Ψ",Omega:"Ω",alpha:"α",beta:"β",gamma:"γ",delta:"δ",epsilon:"ε",zeta:"ζ",eta:"η",theta:"θ",iota:"ι",kappa:"κ",lambda:"λ",mu:"μ",nu:"ν",xi:"ξ",omicron:"ο",pi:"π",rho:"ρ",sigmaf:"ς",sigma:"σ",tau:"τ",upsilon:"υ",phi:"φ",chi:"χ",ps
  66. info unicode-homoglyph dist/babel.cjs:191:173536 new in this release

    identifier `Χ` contains homoglyph candidates: Χ (03A7)→X (in string/comment) (raw pass, confidence 0.35)

    Σ",Tau:"Τ",Upsilon:"Υ",Phi:"Φ",Chi:"Χ",Psi:"Ψ",Omega:"Ω",alpha:"α",beta:"β",gamma:"γ",delta:"δ",epsilon:"ε",zeta:"ζ",eta:"η",theta:"θ",iota:"ι",kappa:"κ",lambda:"λ",mu:"μ",nu:"ν",xi:"ξ",omicron:"ο",pi:"π",rho:"ρ",sigmaf:"ς",sigma:"σ",tau:"τ",upsilon:"υ",phi:"φ",chi:"χ",psi:"ψ",omega:"ω",
  67. info unicode-homoglyph dist/babel.cjs:191:173567 new in this release

    identifier `α` contains homoglyph candidates: α (03B1)→a (in string/comment) (raw pass, confidence 0.35)

    Φ",Chi:"Χ",Psi:"Ψ",Omega:"Ω",alpha:"α",beta:"β",gamma:"γ",delta:"δ",epsilon:"ε",zeta:"ζ",eta:"η",theta:"θ",iota:"ι",kappa:"κ",lambda:"λ",mu:"μ",nu:"ν",xi:"ξ",omicron:"ο",pi:"π",rho:"ρ",sigmaf:"ς",sigma:"σ",tau:"τ",upsilon:"υ",phi:"φ",chi:"χ",psi:"ψ",omega:"ω",thetasym:"ϑ",upsih:"ϒ",piv:"… (340 bytes total)
  68. info unicode-homoglyph dist/babel.cjs:191:173631 new in this release

    identifier `η` contains homoglyph candidates: η (03B7)→n (in string/comment) (raw pass, confidence 0.35)

    ,delta:"δ",epsilon:"ε",zeta:"ζ",eta:"η",theta:"θ",iota:"ι",kappa:"κ",lambda:"λ",mu:"μ",nu:"ν",xi:"ξ",omicron:"ο",pi:"π",rho:"ρ",sigmaf:"ς",sigma:"σ",tau:"τ",upsilon:"υ",phi:"φ",chi:"χ",psi:"ψ",omega:"ω",thetasym:"ϑ",upsih:"ϒ",piv:"ϖ",ensp:"⟨U+2002⟩",emsp:"⟨U+2003⟩",thinsp:"⟨U+2009⟩",zwnj:"⟨U+200C⟩",zwj:"⟨U+200D⟩",lrm:"
  69. info unicode-homoglyph dist/babel.cjs:191:173663 new in this release

    identifier `κ` contains homoglyph candidates: κ (03BA)→k (in string/comment) (raw pass, confidence 0.35)

    �",eta:"η",theta:"θ",iota:"ι",kappa:"κ",lambda:"λ",mu:"μ",nu:"ν",xi:"ξ",omicron:"ο",pi:"π",rho:"ρ",sigmaf:"ς",sigma:"σ",tau:"τ",upsilon:"υ",phi:"φ",chi:"χ",psi:"ψ",omega:"ω",thetasym:"ϑ",upsih:"ϒ",piv:"ϖ",ensp:"⟨U+2002⟩",emsp:"⟨U+2003⟩",thinsp:"⟨U+2009⟩",zwnj:"⟨U+200C⟩",zwj:"⟨U+200D⟩",lrm:"⟨U+200E⟩",rlm:"⟨U+200F⟩",ndash:"–",mda… (341 bytes total)
  70. info unicode-homoglyph dist/babel.cjs:191:173691 new in this release

    identifier `ν` contains homoglyph candidates: ν (03BD)→v (in string/comment) (raw pass, confidence 0.35)

    "ι",kappa:"κ",lambda:"λ",mu:"μ",nu:"ν",xi:"ξ",omicron:"ο",pi:"π",rho:"ρ",sigmaf:"ς",sigma:"σ",tau:"τ",upsilon:"υ",phi:"φ",chi:"χ",psi:"ψ",omega:"ω",thetasym:"ϑ",upsih:"ϒ",piv:"ϖ",ensp:"⟨U+2002⟩",emsp:"⟨U+2003⟩",thinsp:"⟨U+2009⟩",zwnj:"⟨U+200C⟩",zwj:"⟨U+200D⟩",lrm:"⟨U+200E⟩",rlm:"⟨U+200F⟩",ndash:"–",mdash:"—",lsquo:"‘",rsquo:"… (339 bytes total)
  71. info unicode-homoglyph dist/babel.cjs:191:173712 new in this release

    identifier `ο` contains homoglyph candidates: ο (03BF)→o (in string/comment) (raw pass, confidence 0.35)

    a:"λ",mu:"μ",nu:"ν",xi:"ξ",omicron:"ο",pi:"π",rho:"ρ",sigmaf:"ς",sigma:"σ",tau:"τ",upsilon:"υ",phi:"φ",chi:"χ",psi:"ψ",omega:"ω",thetasym:"ϑ",upsih:"ϒ",piv:"ϖ",ensp:"⟨U+2002⟩",emsp:"⟨U+2003⟩",thinsp:"⟨U+2009⟩",zwnj:"⟨U+200C⟩",zwj:"⟨U+200D⟩",lrm:"⟨U+200E⟩",rlm:"⟨U+200F⟩",ndash:"–",mdash:"—",lsquo:"‘",rsquo:"’",sbquo:"‚",ldquo:
  72. info unicode-homoglyph dist/babel.cjs:191:173729 new in this release

    identifier `ρ` contains homoglyph candidates: ρ (03C1)→p (in string/comment) (raw pass, confidence 0.35)

    :"ν",xi:"ξ",omicron:"ο",pi:"π",rho:"ρ",sigmaf:"ς",sigma:"σ",tau:"τ",upsilon:"υ",phi:"φ",chi:"χ",psi:"ψ",omega:"ω",thetasym:"ϑ",upsih:"ϒ",piv:"ϖ",ensp:"⟨U+2002⟩",emsp:"⟨U+2003⟩",thinsp:"⟨U+2009⟩",zwnj:"⟨U+200C⟩",zwj:"⟨U+200D⟩",lrm:"⟨U+200E⟩",rlm:"⟨U+200F⟩",ndash:"–",mdash:"—",lsquo:"‘",rsquo:"’",sbquo:"‚",ldquo:"“",rdquo:"”"
  73. info unicode-zero-width dist/babel.cjs:191:173891 new in this release

    U+200C ZERO WIDTH NON-JOINER in source (in string/comment) (raw pass, confidence 0.45)

    nsp:"⟨U+2002⟩",emsp:"⟨U+2003⟩",thinsp:"⟨U+2009⟩",zwnj:"⟨U+200C⟩",zwj:"⟨U+200D⟩",lrm:"⟨U+200E⟩",rlm:"⟨U+200F⟩",ndash:"–",mdash:"—",lsquo:"‘",rsquo:"’",sbquo:"‚",ldquo:"“",rdquo:"”",bdquo:"„",dagger:"†",Dagger:"‡",bull:"•",hellip:"…",permil:"‰",prime:"′",Prime:"″",lsaquo:"‹",rsaquo:"›",oline:"‾",frasl:"⁄",euro:"€",i
  74. info unicode-zero-width dist/babel.cjs:191:173901 new in this release

    U+200D ZERO WIDTH JOINER in source (in string/comment) (raw pass, confidence 0.45)

    emsp:"⟨U+2003⟩",thinsp:"⟨U+2009⟩",zwnj:"⟨U+200C⟩",zwj:"⟨U+200D⟩",lrm:"⟨U+200E⟩",rlm:"⟨U+200F⟩",ndash:"–",mdash:"—",lsquo:"‘",rsquo:"’",sbquo:"‚",ldquo:"“",rdquo:"”",bdquo:"„",dagger:"†",Dagger:"‡",bull:"•",hellip:"…",permil:"‰",prime:"′",Prime:"″",lsaquo:"‹",rsaquo:"›",oline:"‾",frasl:"⁄",euro:"€",image:"ℑ"
  75. info warn → info by review long-line dist/babel.cjs:193:1 new in this release

    line length 11988 characters (raw pass, confidence 0.65)

            `;let i;const o=[e];return"number"==typeof t?(o.push(s.types.numericLiteral(t)),i="slicedToArray"):i="toArray",n&&(o.unshift(r.path.hub.addHelper(i)),i="maybeArrayLike"),s.types.callExpression(r.path.hub.addHelper(i),o)}}pushAssignmentPattern({left:e,right:t},r){if(isPureVoid(r))return void this.push(e,t);const
    likely benign LLM, confidence 0.92 A long minified line from the bundled Babel transform plugins.
    Reasoning

    The line is part of a minified, bundled Babel build. Very long lines are normal for minified dist output, and the snippet shows ordinary Babel plugin code with no decoding or execution hazards.

  76. info warn → info by review long-line dist/babel.cjs:202:1 new in this release

    line length 6656 characters (raw pass, confidence 0.65)

          `;i.types.inherits(l,e.node);const{parentPath:p}=e;p.isFunction()||p.isTryStatement()||p.isCatchClause()?e.replaceWith(i.types.blockStatement([l])):e.isStaticBlock()?e.node.body=[l]:e.replaceWith(l)}},n=i.traverse.visitors.merge([r,{Function(e){e.skip()}}]);return{name:"transform-explicit-resource-management",man
    likely benign LLM, confidence 0.92 A long minified line from Babel's explicit-resource-management transform plugin.
    Reasoning

    This is minified bundle output from Babel's explicit resource management transform. Long lines are typical of minified dist code, and nothing in the snippet is suspicious.

  77. info warn → info by review long-line dist/babel.cjs:209:1 new in this release

    line length 2862 characters (raw pass, confidence 0.65)

      `,S={ReferencedIdentifier(e){const t=e.node.name;if("module"!==t&&"exports"!==t)return;const r=e.scope.getBinding(t);this.scope.getBinding(t)!==r||e.parentPath.isObjectProperty({value:e.node})&&e.parentPath.parentPath.isObjectPattern()||e.parentPath.isAssignmentExpression({left:e.node})||e.isAssignmentExpression({lef
    likely benign LLM, confidence 0.92 A long minified line from Babel's module-handling transform code.
    Reasoning

    The snippet is ordinary Babel module-transform logic in minified form. The length alone is a normal property of the bundle.

  78. info warn → info by review long-line dist/babel.cjs:217:1 new in this release

    line length 3744 characters (raw pass, confidence 0.65)

          `},wrapReference(e,t){if("lazy/function"===t)return n.types.callExpression(e,[])}})},"./node_modules/.pnpm/@babel+plugin-transform-react-jsx@7.28.6_@babel+core@7.29.0/node_modules/@babel/plugin-transform-react-jsx/lib/create-plugin.js"(e,t,r){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default
    likely benign LLM, confidence 0.92 A long minified line from the bundled Babel React JSX plugin.
    Reasoning

    This is a minified Babel bundle containing JSX plugin module wrappers and standard helper code. Long lines are expected here and the snippet shows no malicious behavior.

  79. info warn → info by review long-line dist/babel.cjs:221:1 new in this release

    line length 20491 characters (raw pass, confidence 0.65)

                      }`}if(i.types.traverse(e.node,{enter(e,t){if(!i.types.isJSXOpeningElement(e))return;const r=e.attributes;isThisAllowed(t)&&r.push(i.types.jsxAttribute(i.types.jsxIdentifier("__self"),i.types.jsxExpressionContainer(i.types.thisExpression()))),r.push(i.types.jsxAttribute(i.types.jsxIdentifier("__source"
    likely benign LLM, confidence 0.92 A long minified line from Babel's JSX transform that adds dev-mode attributes.
    Reasoning

    The snippet shows standard Babel JSX transform code adding __self and __source attributes in development mode. It is minified bundle output, so the long line is expected.

  80. info warn → info by review long-line dist/babel.cjs:223:1 new in this release

    line length 10533 characters (raw pass, confidence 0.65)

                `),t.replaceWith(t.get("parameter")),o.registerBinding("param",t)}}(0,i.injectInitialization)(t,e,s)}};return{name:"transform-typescript",inherits:s.default,visitor:{Pattern:visitPattern,Identifier:visitPattern,RestElement:visitPattern,Program:{enter(e,t){const{file:r}=t;let n=null,s=null;const i=e.scope;if
    likely benign LLM, confidence 0.92 A long minified line from Babel's TypeScript transform visitors.
    Reasoning

    The snippet is standard Babel TypeScript transform visitor code in minified form. Nothing in it indicates dynamic execution or exfiltration.

  81. info long-line dist/babel.cjs:230:1 new in this release

    line length 31347 characters (mostly string/comment) (raw pass, confidence 0.39)

      `}},"./node_modules/.pnpm/@babel+preset-typescript@7.28.5_@babel+core@7.29.0/node_modules/@babel/preset-typescript/lib/index.js"(e,t,r){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var n=r("./node_modules/.pnpm/@babel+helper-plugin-utils@7.28.6/node_modules/@babel/helper-plugin-utils/lib/index.js"),s
  82. info unicode-surrogate dist/babel.cjs:230:30541 new in this release

    orphaned high surrogate \uD800 (no matching low surrogate) (token pass, confidence 0.65)

    l==t)return this;let{name:r}=t;if(!e&&/[\uD800-\uDFFF]/.test(r))return null;if(r.startsWith("get ")||r.startsWith("set "))return null;r=N(r.replace(/[/ ]/g,"_"));const n=m(r);$(n,t.originalNode);const i={needsRename:!1,name:r},{scope:o}=this,a=o.getOwnBinding(r);a?"param"===a.kind&&(i.needsRename=!0):(o.parent.hasBindi
  83. info unicode-surrogate dist/babel.cjs:230:30548 new in this release

    orphaned low surrogate \uDFFF (no preceding high surrogate) (token pass, confidence 0.65)

    turn this;let{name:r}=t;if(!e&&/[\uD800-\uDFFF]/.test(r))return null;if(r.startsWith("get ")||r.startsWith("set "))return null;r=N(r.replace(/[/ ]/g,"_"));const n=m(r);$(n,t.originalNode);const i={needsRename:!1,name:r},{scope:o}=this,a=o.getOwnBinding(r);a?"param"===a.kind&&(i.needsRename=!0):(o.parent.hasBinding(r)||
  84. info warn → info by review long-line dist/babel.cjs:242:1 new in this release

    line length 543951 characters (raw pass, confidence 0.65)

      `;return this.replaceWith(c)[0].get("arguments.0")},t.splitExportDeclaration=function(){if(!this.isExportDeclaration()||this.isExportAllDeclaration())throw new Error("Only default and named export declarations can be split.");if(this.isExportNamedDeclaration()&&this.get("specifiers").length>0)throw new Error("It does
    likely benign LLM, confidence 0.92 A very long minified line from the bundled Babel core and its AST helpers.
    Reasoning

    The 543951-character line is a minified bundle of Babel core and helpers, with ordinary AST manipulation code visible. Such a line is typical of a minified dist build and is not a sign of malice.

  85. info high-complexity dist/babel.cjs:242:213810 new in this release

    string literal compression ratio 0.954 (131 bytes) (outside string/comment) (raw pass, confidence 0.30)

    tionParameter","PatternLike","LVal","TSEntityName"],fields:Object.assign({},patternLikeCommon(),{name:{validate:process.env.BABEL_TYPES_8_BREAKING?(0,l.chain)((0,l.assertValueType)("string"),Object.assign(function(e,t,r){if(!(0,s.default)(r,!1))throw new TypeError(`"${r}" is not a valid identifier name`)},{type:"string
  86. info high-complexity dist/babel.cjs:242:214115 new in this release

    string literal compression ratio 0.952 (147 bytes) (outside string/comment) (raw pass, confidence 0.30)

    },{type:"string"})):(0,l.assertValueType)("string")}}),validate:process.env.BABEL_TYPES_8_BREAKING?function(e,t,r){const s=/\.(\w+)$/.exec(t.toString());if(!s)return;const[,o]=s,a={computed:!1};if("property"===o){if((0,n.default)("MemberExpression",e,a))return;if((0,n.default)("OptionalMemberExpression",e,a))return}els
  87. info high-complexity dist/babel.cjs:242:221866 new in this release

    string literal compression ratio 0.969 (129 bytes) (outside string/comment) (raw pass, confidence 0.30)

    nNullExpression","RestElement","AssignmentPattern")}}),validate:process.env.BABEL_TYPES_8_BREAKING?function(e,t){const r=/(\w+)\[(\d+)\]/.exec(t.toString());if(!r)throw new Error("Internal Babel error: malformed key.");const[,n,s]=r;if(e[n].length>+s+1)throw new TypeError(`RestElement must be last element of ${n}`)}:vo
  88. info high-complexity dist/babel.cjs:242:371066 new in this release

    compression ratio 0.922 is >2σ above file mean 0.641 (outside string/comment) (raw pass, confidence 0.25)

    {"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default=function(e,t){if(e===t)return!0;const r=n.PLACEHOLDERS_ALIAS[e];return!(null==r||!r.includes(t))};var n=r("./node_modules/.pnpm/@babel+types@7.29.0/node_modules/@babel/types/lib/definitions/index.js")},"./node_modules/.pnpm/@babel+types@7.29.0/nod
  89. info unicode-zero-width dist/babel.cjs:242:394213 new in this release

    U+200C ZERO WIDTH NON-JOINER in source (in string/comment) (raw pass, confidence 0.45)

    "Z"||e>="0"&&e<="9"||"$"===e||"_"===e||"⟨U+200C⟩"===e||"⟨U+200D⟩"===e||n.ID_Continue.test(e)),isDigit:e=>"string"==typeof e&&/[0-9]/.test(e),isHexDigit:e=>"string"==typeof e&&/[0-9A-Fa-f]/.test(e)};let i,o,a,l,p,c,u,d,h;function internalize(e,t,r){const n=e[t];if(null!=n&&"object"==typeof n)if(Array.isArray(n))for(let e=0;e<n.le
  90. info unicode-zero-width dist/babel.cjs:242:394224 new in this release

    U+200D ZERO WIDTH JOINER in source (in string/comment) (raw pass, confidence 0.45)

    &&e<="9"||"$"===e||"_"===e||"⟨U+200C⟩"===e||"⟨U+200D⟩"===e||n.ID_Continue.test(e)),isDigit:e=>"string"==typeof e&&/[0-9]/.test(e),isHexDigit:e=>"string"==typeof e&&/[0-9A-Fa-f]/.test(e)};let i,o,a,l,p,c,u,d,h;function internalize(e,t,r){const n=e[t];if(null!=n&&"object"==typeof n)if(Array.isArray(n))for(let e=0;e<n.length;e++){c
  91. info warn → info by review unicode-zero-width dist/babel.cjs:242:396950 new in this release

    U+200C ZERO WIDTH NON-JOINER in source (raw pass, confidence 0.75)

    erName(){switch(g){case"$":case"_":case"⟨U+200C⟩":case"⟨U+200D⟩":return void(f+=read());case"\\":return read(),void(m="identifierNameEscape")}if(!s.isIdContinueChar(g))return newToken("identifier",f);f+=read()},identifierNameEscape(){if("u"!==g)throw invalidChar(read());read();const e=unicodeEscape();switch(e){case"$":case"_":ca
    likely benign LLM, confidence 0.90 A ZWNJ literal in a JavaScript tokenizer's identifier-continuation logic.
    Reasoning

    The U+200C character appears inside a switch case in the JavaScript tokenizer, where ZWNJ is a valid identifier-continue character per the ECMAScript spec. This is legitimate parser code for handling Unicode identifiers.

  92. info warn → info by review unicode-zero-width dist/babel.cjs:242:396960 new in this release

    U+200D ZERO WIDTH JOINER in source (raw pass, confidence 0.75)

    witch(g){case"$":case"_":case"⟨U+200C⟩":case"⟨U+200D⟩":return void(f+=read());case"\\":return read(),void(m="identifierNameEscape")}if(!s.isIdContinueChar(g))return newToken("identifier",f);f+=read()},identifierNameEscape(){if("u"!==g)throw invalidChar(read());read();const e=unicodeEscape();switch(e){case"$":case"_":case"⟨U+200C⟩":ca
    likely benign LLM, confidence 0.90 A ZWJ literal in a JavaScript tokenizer's identifier-continuation switch.
    Reasoning

    The U+200D character is a case label in the tokenizer's identifier-part handling, where ZWJ is a valid identifier-continue character per ECMAScript. It is parser logic, not hidden content.

  93. info warn → info by review unicode-zero-width dist/babel.cjs:242:397233 new in this release

    U+200C ZERO WIDTH NON-JOINER in source (raw pass, confidence 0.75)

    Escape();switch(e){case"$":case"_":case"⟨U+200C⟩":case"⟨U+200D⟩":break;default:if(!s.isIdContinueChar(e))throw invalidIdentifier()}f+=e,m="identifierName"},sign(){switch(g){case".":return f=read(),void(m="decimalPointLeading");case"0":return f=read(),void(m="zero");case"1":case"2":case"3":case"4":case"5":case"6":case"7":case"8":
    likely benign LLM, confidence 0.90 A ZWNJ literal in a JavaScript tokenizer's escaped-identifier validation.
    Reasoning

    The U+200C character is a case label in the identifier-escape validation of the tokenizer, where ZWNJ is permitted in identifiers. This is standard parser code and the raw-pass hit is a false positive.

  94. info warn → info by review unicode-zero-width dist/babel.cjs:242:397243 new in this release

    U+200D ZERO WIDTH JOINER in source (raw pass, confidence 0.75)

    witch(e){case"$":case"_":case"⟨U+200C⟩":case"⟨U+200D⟩":break;default:if(!s.isIdContinueChar(e))throw invalidIdentifier()}f+=e,m="identifierName"},sign(){switch(g){case".":return f=read(),void(m="decimalPointLeading");case"0":return f=read(),void(m="zero");case"1":case"2":case"3":case"4":case"5":case"6":case"7":case"8":case"9":re
    likely benign LLM, confidence 0.90 Babel's identifier parser lists ZWNJ and ZWJ as valid identifier continue characters.
    Reasoning

    The zero-width joiner and non-joiner appear as case labels inside Babel's identifier-character validation switch, which is how the parser recognizes valid ECMAScript identifier continuation characters. This is a legitimate use of those characters in a parser, not hidden content.

  95. info unicode-mixed-script dist/babel.cjs:242:420221 new in this release

    identifier `ˤˬˮͰ` mixes scripts: Other + Greek (in string/comment) (raw pass, confidence 0.40)

    6,8489],v="ªµºÀ-ÖØ-öø-ˁˆ-ˑˠ-ˤˬˮͰ-ʹͶͷͺ-ͽͿΆΈ-ΊΌΎ-ΡΣ-ϵϷ-ҁҊ-ԯԱ-Ֆՙՠ-ֈא-תׯ-ײؠ-يٮٯٱ-ۓەۥۦۮۯۺ-ۼۿܐܒ-ܯݍ-ޥޱߊ-ߪߴߵߺࠀ-ࠕࠚࠤࠨࡀ-ࡘࡠ-ࡪࡰ-ࢇࢉ-⟨U+088F⟩ࢠ-ࣉऄ-हऽॐक़-ॡॱ-ঀঅ-ঌএঐও-নপ-রলশ-হঽৎড়ঢ়য়-ৡৰৱৼਅ-ਊ… (340 bytes total)
  96. info unicode-mixed-script dist/babel.cjs:242:420270 new in this release

    identifier `ԯԱ` mixes scripts: Cyrillic + Armenian (in string/comment) (raw pass, confidence 0.40)

    ʹͶͷͺ-ͽͿΆΈ-ΊΌΎ-ΡΣ-ϵϷ-ҁҊ-ԯԱ-Ֆՙՠ-ֈא-תׯ-ײؠ-يٮٯٱ-ۓەۥۦۮۯۺ-ۼۿܐܒ-ܯݍ-ޥޱߊ-ߪߴߵߺࠀ-ࠕࠚࠤࠨࡀ-ࡘࡠ-ࡪࡰ-ࢇࢉ-⟨U+088F⟩ࢠ-ࣉऄ-हऽॐक़-ॡॱ-ঀঅ-ঌএঐও-নপ-রলশ-হঽৎড়ঢ়য়-ৡৰৱৼਅ-ਊਏਐਓ-ਨਪ-ਰਲਲ਼ਵਸ਼ਸਹਖ਼-ੜਫ਼… (339 bytes total)
  97. info unicode-mixed-script dist/babel.cjs:242:420282 new in this release

    identifier `ֈא` mixes scripts: Armenian + Hebrew (in string/comment) (raw pass, confidence 0.40)

    �ΆΈ-ΊΌΎ-ΡΣ-ϵϷ-ҁҊ-ԯԱ-Ֆՙՠ-ֈא-תׯ-ײؠ-يٮٯٱ-ۓەۥۦۮۯۺ-ۼۿܐܒ-ܯݍ-ޥޱߊ-ߪߴߵߺࠀ-ࠕࠚࠤࠨࡀ-ࡘࡠ-ࡪࡰ-ࢇࢉ-⟨U+088F⟩ࢠ-ࣉऄ-हऽॐक़-ॡॱ-ঀঅ-ঌএঐও-নপ-রলশ-হঽৎড়ঢ়য়-ৡৰৱৼਅ-ਊਏਐਓ-ਨਪ-ਰਲਲ਼ਵਸ਼ਸਹਖ਼-ੜਫ਼ੲ-ੴઅ-… (340 bytes total)
  98. info unicode-mixed-script dist/babel.cjs:242:420292 new in this release

    identifier `ײؠ` mixes scripts: Hebrew + Arabic (in string/comment) (raw pass, confidence 0.40)

    Ύ-ΡΣ-ϵϷ-ҁҊ-ԯԱ-Ֆՙՠ-ֈא-תׯ-ײؠ-يٮٯٱ-ۓەۥۦۮۯۺ-ۼۿܐܒ-ܯݍ-ޥޱߊ-ߪߴߵߺࠀ-ࠕࠚࠤࠨࡀ-ࡘࡠ-ࡪࡰ-ࢇࢉ-⟨U+088F⟩ࢠ-ࣉऄ-हऽॐक़-ॡॱ-ঀঅ-ঌএঐও-নপ-রলশ-হঽৎড়ঢ়য়-ৡৰৱৼਅ-ਊਏਐਓ-ਨਪ-ਰਲਲ਼ਵਸ਼ਸਹਖ਼-ੜਫ਼ੲ-ੴઅ-ઍએ-ઑઓ
  99. info unicode-mixed-script dist/babel.cjs:242:420321 new in this release

    identifier `ۼۿܐܒ` mixes scripts: Arabic + Other (in string/comment) (raw pass, confidence 0.40)

    -ֈא-תׯ-ײؠ-يٮٯٱ-ۓەۥۦۮۯۺ-ۼۿܐܒ-ܯݍ-ޥޱߊ-ߪߴߵߺࠀ-ࠕࠚࠤࠨࡀ-ࡘࡠ-ࡪࡰ-ࢇࢉ-⟨U+088F⟩ࢠ-ࣉऄ-हऽॐक़-ॡॱ-ঀঅ-ঌএঐও-নপ-রলশ-হঽৎড়ঢ়য়-ৡৰৱৼਅ-ਊਏਐਓ-ਨਪ-ਰਲਲ਼ਵਸ਼ਸਹਖ਼-ੜਫ਼ੲ-ੴઅ-ઍએ-ઑઓ-નપ-રલળવ-હઽ… (339 bytes total)
  100. info unicode-mixed-script dist/babel.cjs:242:421481 new in this release

    identifier `ᶿḀ` mixes scripts: Other + Latin (in string/comment) (raw pass, confidence 0.40)

    ��-ᲺᲽ-Ჿᳩ-ᳬᳮ-ᳳᳵᳶᳺᴀ-ᶿḀ-ἕἘ-Ἕἠ-ὅὈ-Ὅὐ-ὗὙὛὝὟ-ώᾀ-ᾴᾶ-ᾼιῂ-ῄῆ-ῌῐ-ΐῖ-Ίῠ-Ῥῲ-ῴῶ-ῼⁱⁿₐ-ₜℂℇℊ-ℓℕ℘-ℝℤΩℨK-ℹℼ-ℿⅅ-ⅉⅎⅠ-ↈⰀ-ⳤⳫ-ⳮⳲⳳⴀ-ⴥⴧⴭⴰ-ⵧⵯⶀ-ⶖⶠ-ⶦⶨ-ⶮⶰ-ⶶⶸ-ⶾ… (339 bytes total)
  101. info unicode-mixed-script dist/babel.cjs:242:421598 new in this release

    identifier `ῼⁱⁿₐ` mixes scripts: Greek + Other (in string/comment) (raw pass, confidence 0.40)

    �ῆ-ῌῐ-ΐῖ-Ίῠ-Ῥῲ-ῴῶ-ῼⁱⁿₐ-ₜℂℇℊ-ℓℕ℘-ℝℤΩℨK-ℹℼ-ℿⅅ-ⅉⅎⅠ-ↈⰀ-ⳤⳫ-ⳮⳲⳳⴀ-ⴥⴧⴭⴰ-ⵧⵯⶀ-ⶖⶠ-ⶦⶨ-ⶮⶰ-ⶶⶸ-ⶾⷀ-ⷆⷈ-ⷎⷐ-ⷖⷘ-ⷞ々-〇〡-〩〱-〵〸-〼ぁ-ゖ゛-ゟァ-ヺー-ヿㄅ-ㄯㄱ-ㆎㆠ-ㆿㇰ-ㇿ㐀-䶿… (339 bytes total)
  102. info unicode-mixed-script dist/babel.cjs:242:421808 new in this release

    identifier `〼ぁ` mixes scripts: Other + Hiragana (in string/comment) (raw pass, confidence 0.40)

    �ⷐ-ⷖⷘ-ⷞ々-〇〡-〩〱-〵〸-〼ぁ-ゖ゛-ゟァ-ヺー-ヿㄅ-ㄯㄱ-ㆎㆠ-ㆿㇰ-ㇿ㐀-䶿一-ꒌꓐ-ꓽꔀ-ꘌꘐ-ꘟꘪꘫꙀ-ꙮꙿ-ꚝꚠ-ꛯꜗ-ꜟꜢ-ꞈꞋ-Ƛ⟨U+A7F1⟩-ꠁꠃ-ꠅꠇ-ꠊꠌ-ꠢꡀ-ꡳꢂ-ꢳꣲ-ꣷꣻꣽꣾꤊ-ꤥꤰ-ꥆꥠ-ꥼꦄ-ꦲꧏꧠ-ꧤꧦ-ꧯꧺ-ꧾꨀ-ꨨꩀ-ꩂꩄ-ꩋꩠ-… (340 bytes total)
  103. info unicode-mixed-script dist/babel.cjs:242:421836 new in this release

    identifier `ヿㄅ` mixes scripts: Katakana + Other (in string/comment) (raw pass, confidence 0.40)

    �〱-〵〸-〼ぁ-ゖ゛-ゟァ-ヺー-ヿㄅ-ㄯㄱ-ㆎㆠ-ㆿㇰ-ㇿ㐀-䶿一-ꒌꓐ-ꓽꔀ-ꘌꘐ-ꘟꘪꘫꙀ-ꙮꙿ-ꚝꚠ-ꛯꜗ-ꜟꜢ-ꞈꞋ-Ƛ⟨U+A7F1⟩-ꠁꠃ-ꠅꠇ-ꠊꠌ-ꠢꡀ-ꡳꢂ-ꢳꣲ-ꣷꣻꣽꣾꤊ-ꤥꤰ-ꥆꥠ-ꥼꦄ-ꦲꧏꧠ-ꧤꧦ-ꧯꧺ-ꧾꨀ-ꨨꩀ-ꩂꩄ-ꩋꩠ-ꩶꩺꩾ-ꪯꪱꪵꪶꪹ-ꪽ… (341 bytes total)
  104. info unicode-mixed-script dist/babel.cjs:242:421864 new in this release

    identifier `ㇿ㐀` mixes scripts: Other + Han (in string/comment) (raw pass, confidence 0.40)

    �ァ-ヺー-ヿㄅ-ㄯㄱ-ㆎㆠ-ㆿㇰ-ㇿ㐀-䶿一-ꒌꓐ-ꓽꔀ-ꘌꘐ-ꘟꘪꘫꙀ-ꙮꙿ-ꚝꚠ-ꛯꜗ-ꜟꜢ-ꞈꞋ-Ƛ⟨U+A7F1⟩-ꠁꠃ-ꠅꠇ-ꠊꠌ-ꠢꡀ-ꡳꢂ-ꢳꣲ-ꣷꣻꣽꣾꤊ-ꤥꤰ-ꥆꥠ-ꥼꦄ-ꦲꧏꧠ-ꧤꧦ-ꧯꧺ-ꧾꨀ-ꨨꩀ-ꩂꩄ-ꩋꩠ-ꩶꩺꩾ-ꪯꪱꪵꪶꪹ-ꪽꫀꫂꫛ-ꫝꫠ-ꫪꫲ-ꫴ… (340 bytes total)
  105. info unicode-mixed-script dist/babel.cjs:242:421899 new in this release

    identifier `ꘟꘪꘫꙀ` mixes scripts: Other + Cyrillic (in string/comment) (raw pass, confidence 0.40)

    �ㇰ-ㇿ㐀-䶿一-ꒌꓐ-ꓽꔀ-ꘌꘐ-ꘟꘪꘫꙀ-ꙮꙿ-ꚝꚠ-ꛯꜗ-ꜟꜢ-ꞈꞋ-Ƛ⟨U+A7F1⟩-ꠁꠃ-ꠅꠇ-ꠊꠌ-ꠢꡀ-ꡳꢂ-ꢳꣲ-ꣷꣻꣽꣾꤊ-ꤥꤰ-ꥆꥠ-ꥼꦄ-ꦲꧏꧠ-ꧤꧦ-ꧯꧺ-ꧾꨀ-ꨨꩀ-ꩂꩄ-ꩋꩠ-ꩶꩺꩾ-ꪯꪱꪵꪶꪹ-ꪽꫀꫂꫛ-ꫝꫠ-ꫪꫲ-ꫴꬁ-ꬆꬉ-ꬎꬑ-ꬖꬠ-ꬦꬨ-ꬮ… (340 bytes total)
  106. info unicode-mixed-script dist/babel.cjs:242:421919 new in this release

    identifier `ꚝꚠ` mixes scripts: Cyrillic + Other (in string/comment) (raw pass, confidence 0.40)

    ��ꓐ-ꓽꔀ-ꘌꘐ-ꘟꘪꘫꙀ-ꙮꙿ-ꚝꚠ-ꛯꜗ-ꜟꜢ-ꞈꞋ-Ƛ⟨U+A7F1⟩-ꠁꠃ-ꠅꠇ-ꠊꠌ-ꠢꡀ-ꡳꢂ-ꢳꣲ-ꣷꣻꣽꣾꤊ-ꤥꤰ-ꥆꥠ-ꥼꦄ-ꦲꧏꧠ-ꧤꧦ-ꧯꧺ-ꧾꨀ-ꨨꩀ-ꩂꩄ-ꩋꩠ-ꩶꩺꩾ-ꪯꪱꪵꪶꪹ-ꪽꫀꫂꫛ-ꫝꫠ-ꫪꫲ-ꫴꬁ-ꬆꬉ-ꬎꬑ-ꬖꬠ-ꬦꬨ-ꬮꬰ-ꭚꭜ-ꭩꭰ-… (340 bytes total)
  107. info unicode-mixed-script dist/babel.cjs:242:422194 new in this release

    identifier `ꯢ가` mixes scripts: Other + Hangul (in string/comment) (raw pass, confidence 0.40)

    �ꬑ-ꬖꬠ-ꬦꬨ-ꬮꬰ-ꭚꭜ-ꭩꭰ-ꯢ가-힣ힰ-ퟆퟋ-ퟻ豈-舘並-龎ff-stﬓ-ﬗיִײַ-ﬨשׁ-זּטּ-לּמּנּסּףּפּצּ-ﮱﯓ-ﴽﵐ-ﶏﶒ-ﷇﷰ-ﷻﹰ-ﹴﹶ-ﻼＡ-Ｚａ-ｚｦ-ﾾￂ-ￇￊ-ￏￒ-ￗￚ-ￜ",E={3:"abstract boolean byte char class double enum export extends final float goto impl… (341 bytes total)
  108. info unicode-mixed-script dist/babel.cjs:242:422201 new in this release

    identifier `힣ힰ` mixes scripts: Hangul + Other (in string/comment) (raw pass, confidence 0.40)

    �ꬠ-ꬦꬨ-ꬮꬰ-ꭚꭜ-ꭩꭰ-ꯢ가-힣ힰ-ퟆퟋ-ퟻ豈-舘並-龎ff-stﬓ-ﬗיִײַ-ﬨשׁ-זּטּ-לּמּנּסּףּפּצּ-ﮱﯓ-ﴽﵐ-ﶏﶒ-ﷇﷰ-ﷻﹰ-ﹴﹶ-ﻼＡ-Ｚａ-ｚｦ-ﾾￂ-ￇￊ-ￏￒ-ￗￚ-ￜ",E={3:"abstract boolean byte char class double enum export extends final float goto implements … (341 bytes total)
  109. info unicode-mixed-script dist/babel.cjs:242:422215 new in this release

    identifier `ퟻ豈` mixes scripts: Other + Han (in string/comment) (raw pass, confidence 0.40)

    �ꬰ-ꭚꭜ-ꭩꭰ-ꯢ가-힣ힰ-ퟆퟋ-ퟻ豈-舘並-龎ff-stﬓ-ﬗיִײַ-ﬨשׁ-זּטּ-לּמּנּסּףּפּצּ-ﮱﯓ-ﴽﵐ-ﶏﶒ-ﷇﷰ-ﷻﹰ-ﹴﹶ-ﻼＡ-Ｚａ-ｚｦ-ﾾￂ-ￇￊ-ￏￒ-ￗￚ-ￜ",E={3:"abstract boolean byte char class double enum export extends final float goto implements import int int… (341 bytes total)
  110. info unicode-mixed-script dist/babel.cjs:242:422229 new in this release

    identifier `龎ff` mixes scripts: Han + Other (in string/comment) (raw pass, confidence 0.40)

    �ꭰ-ꯢ가-힣ힰ-ퟆퟋ-ퟻ豈-舘並-龎ff-stﬓ-ﬗיִײַ-ﬨשׁ-זּטּ-לּמּנּסּףּפּצּ-ﮱﯓ-ﴽﵐ-ﶏﶒ-ﷇﷰ-ﷻﹰ-ﹴﹶ-ﻼＡ-Ｚａ-ｚｦ-ﾾￂ-ￇￊ-ￏￒ-ￗￚ-ￜ",E={3:"abstract boolean byte char class double enum export extends final float goto implements import int interface long na… (341 bytes total)
  111. info unicode-mixed-script dist/babel.cjs:242:422331 new in this release

    identifier `ﻼＡ` mixes scripts: Other + Latin (in string/comment) (raw pass, confidence 0.40)

    �ﯓ-ﴽﵐ-ﶏﶒ-ﷇﷰ-ﷻﹰ-ﹴﹶ-ﻼＡ-Ｚａ-ｚｦ-ﾾￂ-ￇￊ-ￏￒ-ￗￚ-ￜ",E={3:"abstract boolean byte char class double enum export extends final float goto implements import int interface long native package private protected public short static super synchronized throws transient volatile",5:"cl… (341 bytes total)
  112. info unicode-zero-width dist/babel.cjs:242:423095 new in this release

    U+200C ZERO WIDTH NON-JOINER in source (in string/comment) (raw pass, confidence 0.45)

    w RegExp("["+v+"]"),A=new RegExp("["+v+"⟨U+200C⟩⟨U+200D⟩·̀-ͯ·҃-֑҇-ׇֽֿׁׂׅׄؐ-ًؚ-٩ٰۖ-ۜ۟-۪ۤۧۨ-ۭ۰-۹ܑܰ-݊ަ-ް߀-߉߫-߽߳ࠖ-࠙ࠛ-ࠣࠥ-ࠧࠩ-࡙࠭-࡛ࢗ-࢟࣊-ࣣ࣡-ःऺ-़ा-ॏ॑-ॗॢॣ०-९ঁ-ঃ়া-ৄেৈো-্ৗৢৣ০-৯৾ਁ-ਃ਼ਾ-ੂੇੈੋ-੍ੑ੦-ੱੵ… (340 bytes total)
  113. info unicode-zero-width dist/babel.cjs:242:423098 new in this release

    U+200D ZERO WIDTH JOINER in source (in string/comment) (raw pass, confidence 0.45)

    egExp("["+v+"]"),A=new RegExp("["+v+"⟨U+200C⟩⟨U+200D⟩·̀-ͯ·҃-֑҇-ׇֽֿׁׂׅׄؐ-ًؚ-٩ٰۖ-ۜ۟-۪ۤۧۨ-ۭ۰-۹ܑܰ-݊ަ-ް߀-߉߫-߽߳ࠖ-࠙ࠛ-ࠣࠥ-ࠧࠩ-࡙࠭-࡛ࢗ-࢟࣊-ࣣ࣡-ःऺ-़ा-ॏ॑-ॗॢॣ०-९ঁ-ঃ়া-ৄেৈো-্ৗৢৣ০-৯৾ਁ-ਃ਼ਾ-ੂੇੈੋ-੍ੑ੦-ੱੵઁ-
  114. info unicode-mixed-script dist/babel.cjs:242:423118 new in this release

    identifier `ׇֽֿׁׂׅׄؐ` mixes scripts: Hebrew + Arabic (in string/comment) (raw pass, confidence 0.40)

    ew RegExp("["+v+"⟨U+200C⟩⟨U+200D⟩·̀-ͯ·҃-֑҇-ׇֽֿׁׂׅׄؐ-ًؚ-٩ٰۖ-ۜ۟-۪ۤۧۨ-ۭ۰-۹ܑܰ-݊ަ-ް߀-߉߫-߽߳ࠖ-࠙ࠛ-ࠣࠥ-ࠧࠩ-࡙࠭-࡛ࢗ-࢟࣊-ࣣ࣡-ःऺ-़ा-ॏ॑-ॗॢॣ०-९ঁ-ঃ়া-ৄেৈো-্ৗৢৣ০-৯৾ਁ-ਃ਼ਾ-ੂੇੈੋ-੍ੑ੦-ੱੵઁ-ઃ઼ા-ૅે-ૉ
  115. info unicode-zero-width dist/babel.cjs:242:424140 new in this release

    U+200C ZERO WIDTH NON-JOINER in source (in string/comment) (raw pass, confidence 0.45)

    ��-᱙᳐-᳔᳒-᳨᳭᳴᳷-᳹᷀-᷿⟨U+200C⟩⟨U+200D⟩‿⁀⁔⃐-⃥⃜⃡-⃰⳯-⵿⳱ⷠ-〪ⷿ-゙゚〯・꘠-꘩꙯ꙴ-꙽ꚞꚟ꛰꛱ꠂ꠆ꠋꠣ-ꠧ꠬ꢀꢁꢴ-ꣅ꣐-꣙꣠-꣱ꣿ-꤉ꤦ-꤭ꥇ-꥓ꦀ-ꦃ꦳-꧀꧐-꧙ꧥ꧰-꧹ꨩ-ꨶꩃꩌꩍ꩐-꩙ꩻ-ꩽꪰꪲ-ꪴꪷꪸꪾ꪿꫁ꫫ-ꫯꫵ꫶ꯣ-ꯪ꯬꯭꯰… (341 bytes total)
  116. info unicode-zero-width dist/babel.cjs:242:424143 new in this release

    U+200D ZERO WIDTH JOINER in source (in string/comment) (raw pass, confidence 0.45)

    ᱙᳐-᳔᳒-᳨᳭᳴᳷-᳹᷀-᷿⟨U+200C⟩⟨U+200D⟩‿⁀⁔⃐-⃥⃜⃡-⃰⳯-⵿⳱ⷠ-〪ⷿ-゙゚〯・꘠-꘩꙯ꙴ-꙽ꚞꚟ꛰꛱ꠂ꠆ꠋꠣ-ꠧ꠬ꢀꢁꢴ-ꣅ꣐-꣙꣠-꣱ꣿ-꤉ꤦ-꤭ꥇ-꥓ꦀ-ꦃ꦳-꧀꧐-꧙ꧥ꧰-꧹ꨩ-ꨶꩃꩌꩍ꩐-꩙ꩻ-ꩽꪰꪲ-ꪴꪷꪸꪾ꪿꫁ꫫ-ꫯꫵ꫶ꯣ-ꯪ꯬꯭꯰-꯹ﬞ
  117. info unicode-invisible dist/babel.cjs:242:424423 new in this release

    U+FE00 VARIATION SELECTOR-1 (invisible payload carrier) in source (in string/comment) (raw pass, confidence 0.54)

    �꫁ꫫ-ꫯꫵ꫶ꯣ-ꯪ꯬꯭꯰-꯹ﬞ⟨U+FE00⟩-⟨U+FE0F⟩︠-︯︳︴﹍-﹏０-９＿･]");function isInAstralSet(e,t){for(var r=65536,n=0;n<t.length;n+=2){if((r+=t[n])>e)return!1;if((r+=t[n+1])>=e)return!0}return!1}function isIdentifierStart(e,t){return e<65?36===e:e<91||(e<97?95===e:e<123||(e<=65535?e>=170&&_.test(String.… (341 bytes total)
  118. info unicode-invisible dist/babel.cjs:242:424427 new in this release

    U+FE0F VARIATION SELECTOR-16 (invisible payload carrier) in source (in string/comment) (raw pass, confidence 0.54)

    ꫫ-ꫯꫵ꫶ꯣ-ꯪ꯬꯭꯰-꯹ﬞ⟨U+FE00⟩-⟨U+FE0F⟩︠-︯︳︴﹍-﹏０-９＿･]");function isInAstralSet(e,t){for(var r=65536,n=0;n<t.length;n+=2){if((r+=t[n])>e)return!1;if((r+=t[n+1])>=e)return!0}return!1}function isIdentifierStart(e,t){return e<65?36===e:e<91||(e<97?95===e:e<123||(e<=65535?e>=170&&_.test(String.fromCh
  119. info long-line dist/babel.cjs:249:1 new in this release

    line length 1770 characters (raw pass, confidence 0.50)

      `,b={ReferencedIdentifier(e){const t=e.node.name;if("module"!==t&&"exports"!==t)return;const r=e.scope.getBinding(t);this.scope.getBinding(t)!==r||e.parentPath.isObjectProperty({value:e.node})&&e.parentPath.parentPath.isObjectPattern()||e.parentPath.isAssignmentExpression({left:e.node})||e.isAssignmentExpression({lef
  120. info long-line dist/babel.cjs:255:1 new in this release

    line length 1954 characters (raw pass, confidence 0.50)

          `},wrapReference(t,r){if("lazy/function"===r)return e.types.callExpression(t,[])}}))(c))},visitor:{["CallExpression"+(t.types.importExpression?"|ImportExpression":"")](t){if(t.isCallExpression()&&!e.types.isImport(t.node.callee))return;let{scope:r}=t;do{r.rename("require")}while(r=r.parent);transformDynamicImport
  121. info warn → info by review long-line dist/jiti.cjs:1:1 new in this release

    line length 188017 characters (raw pass, confidence 0.65)

    (()=>{var e={"./node_modules/.pnpm/mlly@1.8.2/node_modules/mlly/dist lazy recursive"(e){function webpackEmptyAsyncContext(e){return Promise.resolve().then(function(){var t=new Error("Cannot find module '"+e+"'");throw t.code="MODULE_NOT_FOUND",t})}webpackEmptyAsyncContext.keys=()=>[],webpackEmptyAsyncContext.resolve=we
    likely benign LLM, confidence 0.85 A minified webpack bundle of the jiti loader with one very long line.
    Reasoning

    The file is a bundled, minified webpack output, which produces very long lines. The visible code is the standard webpack lazy-context helper for dynamic requires, with no sign of decoding or execution of hidden payloads.

  122. info unicode-mixed-script dist/jiti.cjs:1:30357 new in this release

    identifier `ˤˬˮͰ` mixes scripts: Other + Greek (in string/comment) (raw pass, confidence 0.40)

    6,8489],a="ªµºÀ-ÖØ-öø-ˁˆ-ˑˠ-ˤˬˮͰ-ʹͶͷͺ-ͽͿΆΈ-ΊΌΎ-ΡΣ-ϵϷ-ҁҊ-ԯԱ-Ֆՙՠ-ֈא-תׯ-ײؠ-يٮٯٱ-ۓەۥۦۮۯۺ-ۼۿܐܒ-ܯݍ-ޥޱߊ-ߪߴߵߺࠀ-ࠕࠚࠤࠨࡀ-ࡘࡠ-ࡪࡰ-ࢇࢉ-⟨U+088F⟩ࢠ-ࣉऄ-हऽॐक़-ॡॱ-ঀঅ-ঌএঐও-নপ-রলশ-হঽৎড়ঢ়য়-ৡৰৱৼਅ-ਊ… (340 bytes total)
  123. info unicode-mixed-script dist/jiti.cjs:1:30406 new in this release

    identifier `ԯԱ` mixes scripts: Cyrillic + Armenian (in string/comment) (raw pass, confidence 0.40)

    ʹͶͷͺ-ͽͿΆΈ-ΊΌΎ-ΡΣ-ϵϷ-ҁҊ-ԯԱ-Ֆՙՠ-ֈא-תׯ-ײؠ-يٮٯٱ-ۓەۥۦۮۯۺ-ۼۿܐܒ-ܯݍ-ޥޱߊ-ߪߴߵߺࠀ-ࠕࠚࠤࠨࡀ-ࡘࡠ-ࡪࡰ-ࢇࢉ-⟨U+088F⟩ࢠ-ࣉऄ-हऽॐक़-ॡॱ-ঀঅ-ঌএঐও-নপ-রলশ-হঽৎড়ঢ়য়-ৡৰৱৼਅ-ਊਏਐਓ-ਨਪ-ਰਲਲ਼ਵਸ਼ਸਹਖ਼-ੜਫ਼… (339 bytes total)
  124. info unicode-mixed-script dist/jiti.cjs:1:30418 new in this release

    identifier `ֈא` mixes scripts: Armenian + Hebrew (in string/comment) (raw pass, confidence 0.40)

    �ΆΈ-ΊΌΎ-ΡΣ-ϵϷ-ҁҊ-ԯԱ-Ֆՙՠ-ֈא-תׯ-ײؠ-يٮٯٱ-ۓەۥۦۮۯۺ-ۼۿܐܒ-ܯݍ-ޥޱߊ-ߪߴߵߺࠀ-ࠕࠚࠤࠨࡀ-ࡘࡠ-ࡪࡰ-ࢇࢉ-⟨U+088F⟩ࢠ-ࣉऄ-हऽॐक़-ॡॱ-ঀঅ-ঌএঐও-নপ-রলশ-হঽৎড়ঢ়য়-ৡৰৱৼਅ-ਊਏਐਓ-ਨਪ-ਰਲਲ਼ਵਸ਼ਸਹਖ਼-ੜਫ਼ੲ-ੴઅ-… (340 bytes total)
  125. info unicode-mixed-script dist/jiti.cjs:1:30428 new in this release

    identifier `ײؠ` mixes scripts: Hebrew + Arabic (in string/comment) (raw pass, confidence 0.40)

    Ύ-ΡΣ-ϵϷ-ҁҊ-ԯԱ-Ֆՙՠ-ֈא-תׯ-ײؠ-يٮٯٱ-ۓەۥۦۮۯۺ-ۼۿܐܒ-ܯݍ-ޥޱߊ-ߪߴߵߺࠀ-ࠕࠚࠤࠨࡀ-ࡘࡠ-ࡪࡰ-ࢇࢉ-⟨U+088F⟩ࢠ-ࣉऄ-हऽॐक़-ॡॱ-ঀঅ-ঌএঐও-নপ-রলশ-হঽৎড়ঢ়য়-ৡৰৱৼਅ-ਊਏਐਓ-ਨਪ-ਰਲਲ਼ਵਸ਼ਸਹਖ਼-ੜਫ਼ੲ-ੴઅ-ઍએ-ઑઓ
  126. info unicode-mixed-script dist/jiti.cjs:1:30457 new in this release

    identifier `ۼۿܐܒ` mixes scripts: Arabic + Other (in string/comment) (raw pass, confidence 0.40)

    -ֈא-תׯ-ײؠ-يٮٯٱ-ۓەۥۦۮۯۺ-ۼۿܐܒ-ܯݍ-ޥޱߊ-ߪߴߵߺࠀ-ࠕࠚࠤࠨࡀ-ࡘࡠ-ࡪࡰ-ࢇࢉ-⟨U+088F⟩ࢠ-ࣉऄ-हऽॐक़-ॡॱ-ঀঅ-ঌএঐও-নপ-রলশ-হঽৎড়ঢ়য়-ৡৰৱৼਅ-ਊਏਐਓ-ਨਪ-ਰਲਲ਼ਵਸ਼ਸਹਖ਼-ੜਫ਼ੲ-ੴઅ-ઍએ-ઑઓ-નપ-રલળવ-હઽ… (339 bytes total)
  127. info unicode-mixed-script dist/jiti.cjs:1:31617 new in this release

    identifier `ᶿḀ` mixes scripts: Other + Latin (in string/comment) (raw pass, confidence 0.40)

    ��-ᲺᲽ-Ჿᳩ-ᳬᳮ-ᳳᳵᳶᳺᴀ-ᶿḀ-ἕἘ-Ἕἠ-ὅὈ-Ὅὐ-ὗὙὛὝὟ-ώᾀ-ᾴᾶ-ᾼιῂ-ῄῆ-ῌῐ-ΐῖ-Ίῠ-Ῥῲ-ῴῶ-ῼⁱⁿₐ-ₜℂℇℊ-ℓℕ℘-ℝℤΩℨK-ℹℼ-ℿⅅ-ⅉⅎⅠ-ↈⰀ-ⳤⳫ-ⳮⳲⳳⴀ-ⴥⴧⴭⴰ-ⵧⵯⶀ-ⶖⶠ-ⶦⶨ-ⶮⶰ-ⶶⶸ-ⶾ… (339 bytes total)
  128. info unicode-mixed-script dist/jiti.cjs:1:31734 new in this release

    identifier `ῼⁱⁿₐ` mixes scripts: Greek + Other (in string/comment) (raw pass, confidence 0.40)

    �ῆ-ῌῐ-ΐῖ-Ίῠ-Ῥῲ-ῴῶ-ῼⁱⁿₐ-ₜℂℇℊ-ℓℕ℘-ℝℤΩℨK-ℹℼ-ℿⅅ-ⅉⅎⅠ-ↈⰀ-ⳤⳫ-ⳮⳲⳳⴀ-ⴥⴧⴭⴰ-ⵧⵯⶀ-ⶖⶠ-ⶦⶨ-ⶮⶰ-ⶶⶸ-ⶾⷀ-ⷆⷈ-ⷎⷐ-ⷖⷘ-ⷞ々-〇〡-〩〱-〵〸-〼ぁ-ゖ゛-ゟァ-ヺー-ヿㄅ-ㄯㄱ-ㆎㆠ-ㆿㇰ-ㇿ㐀-䶿… (339 bytes total)
  129. info unicode-mixed-script dist/jiti.cjs:1:31944 new in this release

    identifier `〼ぁ` mixes scripts: Other + Hiragana (in string/comment) (raw pass, confidence 0.40)

    �ⷐ-ⷖⷘ-ⷞ々-〇〡-〩〱-〵〸-〼ぁ-ゖ゛-ゟァ-ヺー-ヿㄅ-ㄯㄱ-ㆎㆠ-ㆿㇰ-ㇿ㐀-䶿一-ꒌꓐ-ꓽꔀ-ꘌꘐ-ꘟꘪꘫꙀ-ꙮꙿ-ꚝꚠ-ꛯꜗ-ꜟꜢ-ꞈꞋ-Ƛ⟨U+A7F1⟩-ꠁꠃ-ꠅꠇ-ꠊꠌ-ꠢꡀ-ꡳꢂ-ꢳꣲ-ꣷꣻꣽꣾꤊ-ꤥꤰ-ꥆꥠ-ꥼꦄ-ꦲꧏꧠ-ꧤꧦ-ꧯꧺ-ꧾꨀ-ꨨꩀ-ꩂꩄ-ꩋꩠ-… (340 bytes total)
  130. info unicode-mixed-script dist/jiti.cjs:1:31972 new in this release

    identifier `ヿㄅ` mixes scripts: Katakana + Other (in string/comment) (raw pass, confidence 0.40)

    �〱-〵〸-〼ぁ-ゖ゛-ゟァ-ヺー-ヿㄅ-ㄯㄱ-ㆎㆠ-ㆿㇰ-ㇿ㐀-䶿一-ꒌꓐ-ꓽꔀ-ꘌꘐ-ꘟꘪꘫꙀ-ꙮꙿ-ꚝꚠ-ꛯꜗ-ꜟꜢ-ꞈꞋ-Ƛ⟨U+A7F1⟩-ꠁꠃ-ꠅꠇ-ꠊꠌ-ꠢꡀ-ꡳꢂ-ꢳꣲ-ꣷꣻꣽꣾꤊ-ꤥꤰ-ꥆꥠ-ꥼꦄ-ꦲꧏꧠ-ꧤꧦ-ꧯꧺ-ꧾꨀ-ꨨꩀ-ꩂꩄ-ꩋꩠ-ꩶꩺꩾ-ꪯꪱꪵꪶꪹ-ꪽ… (341 bytes total)
  131. info unicode-mixed-script dist/jiti.cjs:1:32000 new in this release

    identifier `ㇿ㐀` mixes scripts: Other + Han (in string/comment) (raw pass, confidence 0.40)

    �ァ-ヺー-ヿㄅ-ㄯㄱ-ㆎㆠ-ㆿㇰ-ㇿ㐀-䶿一-ꒌꓐ-ꓽꔀ-ꘌꘐ-ꘟꘪꘫꙀ-ꙮꙿ-ꚝꚠ-ꛯꜗ-ꜟꜢ-ꞈꞋ-Ƛ⟨U+A7F1⟩-ꠁꠃ-ꠅꠇ-ꠊꠌ-ꠢꡀ-ꡳꢂ-ꢳꣲ-ꣷꣻꣽꣾꤊ-ꤥꤰ-ꥆꥠ-ꥼꦄ-ꦲꧏꧠ-ꧤꧦ-ꧯꧺ-ꧾꨀ-ꨨꩀ-ꩂꩄ-ꩋꩠ-ꩶꩺꩾ-ꪯꪱꪵꪶꪹ-ꪽꫀꫂꫛ-ꫝꫠ-ꫪꫲ-ꫴ… (340 bytes total)
  132. info unicode-mixed-script dist/jiti.cjs:1:32035 new in this release

    identifier `ꘟꘪꘫꙀ` mixes scripts: Other + Cyrillic (in string/comment) (raw pass, confidence 0.40)

    �ㇰ-ㇿ㐀-䶿一-ꒌꓐ-ꓽꔀ-ꘌꘐ-ꘟꘪꘫꙀ-ꙮꙿ-ꚝꚠ-ꛯꜗ-ꜟꜢ-ꞈꞋ-Ƛ⟨U+A7F1⟩-ꠁꠃ-ꠅꠇ-ꠊꠌ-ꠢꡀ-ꡳꢂ-ꢳꣲ-ꣷꣻꣽꣾꤊ-ꤥꤰ-ꥆꥠ-ꥼꦄ-ꦲꧏꧠ-ꧤꧦ-ꧯꧺ-ꧾꨀ-ꨨꩀ-ꩂꩄ-ꩋꩠ-ꩶꩺꩾ-ꪯꪱꪵꪶꪹ-ꪽꫀꫂꫛ-ꫝꫠ-ꫪꫲ-ꫴꬁ-ꬆꬉ-ꬎꬑ-ꬖꬠ-ꬦꬨ-ꬮ… (340 bytes total)
  133. info unicode-mixed-script dist/jiti.cjs:1:32055 new in this release

    identifier `ꚝꚠ` mixes scripts: Cyrillic + Other (in string/comment) (raw pass, confidence 0.40)

    ��ꓐ-ꓽꔀ-ꘌꘐ-ꘟꘪꘫꙀ-ꙮꙿ-ꚝꚠ-ꛯꜗ-ꜟꜢ-ꞈꞋ-Ƛ⟨U+A7F1⟩-ꠁꠃ-ꠅꠇ-ꠊꠌ-ꠢꡀ-ꡳꢂ-ꢳꣲ-ꣷꣻꣽꣾꤊ-ꤥꤰ-ꥆꥠ-ꥼꦄ-ꦲꧏꧠ-ꧤꧦ-ꧯꧺ-ꧾꨀ-ꨨꩀ-ꩂꩄ-ꩋꩠ-ꩶꩺꩾ-ꪯꪱꪵꪶꪹ-ꪽꫀꫂꫛ-ꫝꫠ-ꫪꫲ-ꫴꬁ-ꬆꬉ-ꬎꬑ-ꬖꬠ-ꬦꬨ-ꬮꬰ-ꭚꭜ-ꭩꭰ-… (340 bytes total)
  134. info unicode-mixed-script dist/jiti.cjs:1:32330 new in this release

    identifier `ꯢ가` mixes scripts: Other + Hangul (in string/comment) (raw pass, confidence 0.40)

    �ꬑ-ꬖꬠ-ꬦꬨ-ꬮꬰ-ꭚꭜ-ꭩꭰ-ꯢ가-힣ힰ-ퟆퟋ-ퟻ豈-舘並-龎ff-stﬓ-ﬗיִײַ-ﬨשׁ-זּטּ-לּמּנּסּףּפּצּ-ﮱﯓ-ﴽﵐ-ﶏﶒ-ﷇﷰ-ﷻﹰ-ﹴﹶ-ﻼＡ-Ｚａ-ｚｦ-ﾾￂ-ￇￊ-ￏￒ-ￗￚ-ￜ",c={3:"abstract boolean byte char class double enum export extends final float goto impl… (341 bytes total)
  135. info unicode-mixed-script dist/jiti.cjs:1:32337 new in this release

    identifier `힣ힰ` mixes scripts: Hangul + Other (in string/comment) (raw pass, confidence 0.40)

    �ꬠ-ꬦꬨ-ꬮꬰ-ꭚꭜ-ꭩꭰ-ꯢ가-힣ힰ-ퟆퟋ-ퟻ豈-舘並-龎ff-stﬓ-ﬗיִײַ-ﬨשׁ-זּטּ-לּמּנּסּףּפּצּ-ﮱﯓ-ﴽﵐ-ﶏﶒ-ﷇﷰ-ﷻﹰ-ﹴﹶ-ﻼＡ-Ｚａ-ｚｦ-ﾾￂ-ￇￊ-ￏￒ-ￗￚ-ￜ",c={3:"abstract boolean byte char class double enum export extends final float goto implements … (341 bytes total)
  136. info unicode-mixed-script dist/jiti.cjs:1:32351 new in this release

    identifier `ퟻ豈` mixes scripts: Other + Han (in string/comment) (raw pass, confidence 0.40)

    �ꬰ-ꭚꭜ-ꭩꭰ-ꯢ가-힣ힰ-ퟆퟋ-ퟻ豈-舘並-龎ff-stﬓ-ﬗיִײַ-ﬨשׁ-זּטּ-לּמּנּסּףּפּצּ-ﮱﯓ-ﴽﵐ-ﶏﶒ-ﷇﷰ-ﷻﹰ-ﹴﹶ-ﻼＡ-Ｚａ-ｚｦ-ﾾￂ-ￇￊ-ￏￒ-ￗￚ-ￜ",c={3:"abstract boolean byte char class double enum export extends final float goto implements import int int… (341 bytes total)
  137. info unicode-mixed-script dist/jiti.cjs:1:32365 new in this release

    identifier `龎ff` mixes scripts: Han + Other (in string/comment) (raw pass, confidence 0.40)

    �ꭰ-ꯢ가-힣ힰ-ퟆퟋ-ퟻ豈-舘並-龎ff-stﬓ-ﬗיִײַ-ﬨשׁ-זּטּ-לּמּנּסּףּפּצּ-ﮱﯓ-ﴽﵐ-ﶏﶒ-ﷇﷰ-ﷻﹰ-ﹴﹶ-ﻼＡ-Ｚａ-ｚｦ-ﾾￂ-ￇￊ-ￏￒ-ￗￚ-ￜ",c={3:"abstract boolean byte char class double enum export extends final float goto implements import int interface long na… (341 bytes total)
  138. info unicode-mixed-script dist/jiti.cjs:1:32467 new in this release

    identifier `ﻼＡ` mixes scripts: Other + Latin (in string/comment) (raw pass, confidence 0.40)

    �ﯓ-ﴽﵐ-ﶏﶒ-ﷇﷰ-ﷻﹰ-ﹴﹶ-ﻼＡ-Ｚａ-ｚｦ-ﾾￂ-ￇￊ-ￏￒ-ￗￚ-ￜ",c={3:"abstract boolean byte char class double enum export extends final float goto implements import int interface long native package private protected public short static super synchronized throws transient volatile",5:"cl… (341 bytes total)
  139. info unicode-zero-width dist/jiti.cjs:1:33231 new in this release

    U+200C ZERO WIDTH NON-JOINER in source (in string/comment) (raw pass, confidence 0.45)

    w RegExp("["+a+"]"),C=new RegExp("["+a+"⟨U+200C⟩⟨U+200D⟩·̀-ͯ·҃-֑҇-ׇֽֿׁׂׅׄؐ-ًؚ-٩ٰۖ-ۜ۟-۪ۤۧۨ-ۭ۰-۹ܑܰ-݊ަ-ް߀-߉߫-߽߳ࠖ-࠙ࠛ-ࠣࠥ-ࠧࠩ-࡙࠭-࡛ࢗ-࢟࣊-ࣣ࣡-ःऺ-़ा-ॏ॑-ॗॢॣ०-९ঁ-ঃ়া-ৄেৈো-্ৗৢৣ০-৯৾ਁ-ਃ਼ਾ-ੂੇੈੋ-੍ੑ੦-ੱੵ… (340 bytes total)
  140. info unicode-zero-width dist/jiti.cjs:1:33234 new in this release

    U+200D ZERO WIDTH JOINER in source (in string/comment) (raw pass, confidence 0.45)

    egExp("["+a+"]"),C=new RegExp("["+a+"⟨U+200C⟩⟨U+200D⟩·̀-ͯ·҃-֑҇-ׇֽֿׁׂׅׄؐ-ًؚ-٩ٰۖ-ۜ۟-۪ۤۧۨ-ۭ۰-۹ܑܰ-݊ަ-ް߀-߉߫-߽߳ࠖ-࠙ࠛ-ࠣࠥ-ࠧࠩ-࡙࠭-࡛ࢗ-࢟࣊-ࣣ࣡-ःऺ-़ा-ॏ॑-ॗॢॣ०-९ঁ-ঃ়া-ৄেৈো-্ৗৢৣ০-৯৾ਁ-ਃ਼ਾ-ੂੇੈੋ-੍ੑ੦-ੱੵઁ-
  141. info unicode-mixed-script dist/jiti.cjs:1:33254 new in this release

    identifier `ׇֽֿׁׂׅׄؐ` mixes scripts: Hebrew + Arabic (in string/comment) (raw pass, confidence 0.40)

    ew RegExp("["+a+"⟨U+200C⟩⟨U+200D⟩·̀-ͯ·҃-֑҇-ׇֽֿׁׂׅׄؐ-ًؚ-٩ٰۖ-ۜ۟-۪ۤۧۨ-ۭ۰-۹ܑܰ-݊ަ-ް߀-߉߫-߽߳ࠖ-࠙ࠛ-ࠣࠥ-ࠧࠩ-࡙࠭-࡛ࢗ-࢟࣊-ࣣ࣡-ःऺ-़ा-ॏ॑-ॗॢॣ०-९ঁ-ঃ়া-ৄেৈো-্ৗৢৣ০-৯৾ਁ-ਃ਼ਾ-ੂੇੈੋ-੍ੑ੦-ੱੵઁ-ઃ઼ા-ૅે-ૉ
  142. info unicode-zero-width dist/jiti.cjs:1:34276 new in this release

    U+200C ZERO WIDTH NON-JOINER in source (in string/comment) (raw pass, confidence 0.45)

    ��-᱙᳐-᳔᳒-᳨᳭᳴᳷-᳹᷀-᷿⟨U+200C⟩⟨U+200D⟩‿⁀⁔⃐-⃥⃜⃡-⃰⳯-⵿⳱ⷠ-〪ⷿ-゙゚〯・꘠-꘩꙯ꙴ-꙽ꚞꚟ꛰꛱ꠂ꠆ꠋꠣ-ꠧ꠬ꢀꢁꢴ-ꣅ꣐-꣙꣠-꣱ꣿ-꤉ꤦ-꤭ꥇ-꥓ꦀ-ꦃ꦳-꧀꧐-꧙ꧥ꧰-꧹ꨩ-ꨶꩃꩌꩍ꩐-꩙ꩻ-ꩽꪰꪲ-ꪴꪷꪸꪾ꪿꫁ꫫ-ꫯꫵ꫶ꯣ-ꯪ꯬꯭꯰… (341 bytes total)
  143. info unicode-zero-width dist/jiti.cjs:1:34279 new in this release

    U+200D ZERO WIDTH JOINER in source (in string/comment) (raw pass, confidence 0.45)

    ᱙᳐-᳔᳒-᳨᳭᳴᳷-᳹᷀-᷿⟨U+200C⟩⟨U+200D⟩‿⁀⁔⃐-⃥⃜⃡-⃰⳯-⵿⳱ⷠ-〪ⷿ-゙゚〯・꘠-꘩꙯ꙴ-꙽ꚞꚟ꛰꛱ꠂ꠆ꠋꠣ-ꠧ꠬ꢀꢁꢴ-ꣅ꣐-꣙꣠-꣱ꣿ-꤉ꤦ-꤭ꥇ-꥓ꦀ-ꦃ꦳-꧀꧐-꧙ꧥ꧰-꧹ꨩ-ꨶꩃꩌꩍ꩐-꩙ꩻ-ꩽꪰꪲ-ꪴꪷꪸꪾ꪿꫁ꫫ-ꫯꫵ꫶ꯣ-ꯪ꯬꯭꯰-꯹ﬞ
  144. info unicode-invisible dist/jiti.cjs:1:34559 new in this release

    U+FE00 VARIATION SELECTOR-1 (invisible payload carrier) in source (in string/comment) (raw pass, confidence 0.54)

    �꫁ꫫ-ꫯꫵ꫶ꯣ-ꯪ꯬꯭꯰-꯹ﬞ⟨U+FE00⟩-⟨U+FE0F⟩︠-︯︳︴﹍-﹏０-９＿･]");function isInAstralSet(e,t){for(var i=65536,n=0;n<t.length;n+=2){if((i+=t[n])>e)return!1;if((i+=t[n+1])>=e)return!0}return!1}function isIdentifierStart(e,t){return e<65?36===e:e<91||(e<97?95===e:e<123||(e<=65535?e>=170&&w.test(String.… (341 bytes total)
  145. info unicode-invisible dist/jiti.cjs:1:34563 new in this release

    U+FE0F VARIATION SELECTOR-16 (invisible payload carrier) in source (in string/comment) (raw pass, confidence 0.54)

    ꫫ-ꫯꫵ꫶ꯣ-ꯪ꯬꯭꯰-꯹ﬞ⟨U+FE00⟩-⟨U+FE0F⟩︠-︯︳︴﹍-﹏０-９＿･]");function isInAstralSet(e,t){for(var i=65536,n=0;n<t.length;n+=2){if((i+=t[n])>e)return!1;if((i+=t[n+1])>=e)return!0}return!1}function isIdentifierStart(e,t){return e<65?36===e:e<91||(e<97?95===e:e<123||(e<=65535?e>=170&&w.test(String.fromCh
  146. info warn → info by review dynamic-import lib/jiti-static.mjs:10:30 new in this release

    dynamic `import(...)` with a non-literal specifier (ast pass, confidence 0.65)

    
const nativeImport = (id) => import(id);

export function createJiti(id, opts = {}) {
    likely benign LLM, confidence 0.85 A thin wrapper around dynamic import used by the jiti loader.
    Reasoning

    The snippet is a one-line wrapper, const nativeImport = (id) => import(id), used by a module loader to import modules it has already resolved. A variable specifier is expected for this design.

  147. info long-line README.md:15:1

    line length 945 characters (raw pass, confidence 0.50)

    [Docusaurus](https://docusaurus.io/), [ESLint](https://github.com/eslint/eslint), [FormKit](https://formkit.com/), [Histoire](https://histoire.dev/), [Knip](https://knip.dev/), [Nitro](https://nitro.unjs.io/), [Nuxt](https://nuxt.com/), [PostCSS loader](https://github.com/webpack-contrib/postcss-loader), [Rsbuild](http
  148. info warn → info by review long-line dist/babel.cjs:40:1

    line length 7752 characters (raw pass, confidence 0.65)

          `)}const{id:c,static:u}=a.get(p);u?e.replaceWith(n.template.expression.ast`${buildCheckInRHS(i,t)} === ${n.types.cloneNode(this.classRef)}`):e.replaceWith(n.template.expression.ast`${n.types.cloneNode(c)}.has(${buildCheckInRHS(i,t)})`)}});function readOnlyError(e,t){return n.types.callExpression(e.addHelper("read
    dismissed LLM, confidence 0.90 A long bundled line with Babel private-field transform logic.
    Reasoning

    The snippet is a template-literal AST replacement for private-field checks in Babel's class transform. This is legitimate code, and the long line is a property of the bundle.

  149. info warn → info by review dynamic-import lib/jiti-native.mjs:58:24

    dynamic `import(...)` with a non-literal specifier (ast pass, confidence 0.65)

              }
          return await import(resolved, importAttrs);
        } catch (error) {
          if (error.code === 'ERR_MODULE_NOT_FOUND' || error.code === 'ERR_UNSUPPORTED_DIR_IMPORT') {
    likely benign LLM, confidence 0.85 A jiti loader wrapper that calls native dynamic import on a resolved module path.
    Reasoning

    jiti is a runtime TypeScript/ESM loader, and passing a resolved path to a dynamic import is its core purpose. The surrounding code handles ERR_MODULE_NOT_FOUND errors, which is consistent with a module loader rather than a dropper.

  150. info warn → info by review dynamic-import lib/jiti.cjs:8:30

    dynamic `import(...)` with a non-literal specifier (ast pass, confidence 0.65)

    
const nativeImport = (id) => import(id);

let _transform;
    likely benign LLM, confidence 0.85 The jiti CJS build's wrapper around dynamic import for loading resolved modules.
    Reasoning

    This is the same nativeImport wrapper pattern as the other jiti files, and dynamic import with a variable specifier is what a module loader needs. Nothing in the snippet decodes or runs hidden code.

  151. info warn → info by review dynamic-import lib/jiti.mjs:8:30

    dynamic `import(...)` with a non-literal specifier (ast pass, confidence 0.65)

    
const nativeImport = (id) => import(id);

let _transform;
    likely benign LLM, confidence 0.85 The jiti ESM build's wrapper around dynamic import for loading resolved modules.
    Reasoning

    The ESM build has the same nativeImport wrapper as the CJS build. A dynamic import with a variable is the expected behavior for a loader, and the snippet shows no encoded or hidden payload.

Reproduce This Scan

Run disclude locally to verify. These commands scan the published file; the "new in this release" marks come from comparing it with the previous release's file, which they don't repeat. Add --format sarif for SARIF output. Add --llm (with an API key in the environment) to include the LLM review.

cargo install disclude --version 4.3.0
curl -fsSL -o jiti-2.7.0.tgz https://registry.npmjs.org/jiti/-/jiti-2.7.0.tgz
printf '%s  %s\n' 8dd0d365fb49c0e7cc42d6a00df6fb2da9056fc24492094346fc34ecdbcf28ca jiti-2.7.0.tgz | shasum -a 256 -c -
mkdir pkg && tar -xzf jiti-2.7.0.tgz -C pkg --strip-components 1
disclude scan --untrusted --severity info pkg