npm / picocolors / 1.1.1

picocolors 1.1.1

Source

https://github.com/alexeyraspopov/picocolors

Artifact scanned

picocolors-1.1.1.tgz (npm tarball · 2.6 KB · SHA-256 d3aedb280796…)

Compared with

picocolors-1.1.0.tgz (0 signals introduced since)

Files

6 scanned, 1 skipped (binary, oversized, or unrecognised)

Signals

0 critical · 0 warn · 1 info

Scan time

0.1 s

LLM review

LLM review by claude-haiku-5-5 (Anthropic): nothing at warn or critical to review.

Disclude version

4.3.0

Scanned (UTC)

2026-10-23 16:42

Signals

Ordered by severity, then signals introduced in this release. Hidden characters are shown as ⟨U+…⟩.

1. info long-line picocolors.browser.js:2:1

   line length 520 characters (raw pass, confidence 0.50)

   var create=function() {return {isColorSupported:false,reset:x,bold:x,dim:x,italic:x,underline:x,inverse:x,hidden:x,strikethrough:x,black:x,red:x,green:x,yellow:x,blue:x,magenta:x,cyan:x,white:x,gray:x,bgBlack:x,bgRed:x,bgGreen:x,bgYellow:x,bgBlue:x,bgMagenta:x,bgCyan:x,bgWhite:x,blackBright:x,redBright:x,greenBright:x,

Reproduce This Scan

Run disclude locally to verify. These commands scan the published file; the "new in this release" marks come from comparing it with the previous release's file, which they don't repeat. Add --format sarif for SARIF output. Add --llm (with an API key in the environment) to include the LLM review.

cargo install disclude --version 4.3.0
curl -fsSL -o picocolors-1.1.1.tgz https://registry.npmjs.org/picocolors/-/picocolors-1.1.1.tgz
printf '%s  %s\n' d3aedb2807967b7eb37fd11b03b7e3701e725af79c650d0812ff7213f8f882d9 picocolors-1.1.1.tgz | shasum -a 256 -c -
mkdir pkg && tar -xzf picocolors-1.1.1.tgz -C pkg --strip-components 1
disclude scan --untrusted --severity info pkg