npm / micromatch / 4.0.8

micromatch 4.0.8

Source
https://github.com/micromatch/micromatch
Artifact scanned
micromatch-4.0.8.tgz (npm tarball · 14.3 KB · SHA-256 c78d05f20aff…)
Compared with
micromatch-4.0.7.tgz (0 signals introduced since)
Files
3 scanned, 1 skipped (binary, oversized, or unrecognised)
Signals
0 critical · 0 warn · 1 info
Scan time
0.1 s
LLM review
LLM review by claude-haiku-5-5 (Anthropic): nothing at warn or critical to review.
Disclude version
4.3.0
Scanned (UTC)
2026-10-23 22:33

Signals

Ordered by severity, then signals introduced in this release. Hidden characters are shown as ⟨U+…⟩.

  1. info long-line README.md:1:1

    line length 529 characters (raw pass, confidence 0.50)

    # micromatch [![NPM version]https://img.shields.io/npm/v/micromatch.svg?style=flat]https://www.npmjs.com/package/micromatch [![NPM monthly downloads]https://img.shields.io/npm/dm/micromatch.svg?style=flat]https://npmjs.org/package/micromatch [![NPM total downloads](https://img.shields.io/npm/dt/micromatch.svg?s

Reproduce This Scan

Run disclude locally to verify. These commands scan the published file; the "new in this release" marks come from comparing it with the previous release's file, which they don't repeat. Add --format sarif for SARIF output. Add --llm (with an API key in the environment) to include the LLM review.

cargo install disclude --version 4.3.0
curl -fsSL -o micromatch-4.0.8.tgz https://registry.npmjs.org/micromatch/-/micromatch-4.0.8.tgz
printf '%s  %s\n' c78d05f20aff3bc95f024b19e53f72998cfc5f69c42b126c49dff8b1b271bc46 micromatch-4.0.8.tgz | shasum -a 256 -c -
mkdir pkg && tar -xzf micromatch-4.0.8.tgz -C pkg --strip-components 1
disclude scan --untrusted --severity info pkg