type-fest 5.10.0

Source: https://github.com/sindresorhus/type-fest
Tag scanned: v5.10.0
Compared with: v5.9.0 (0 signals introduced since)
Files: 461 scanned, 9 skipped (binary, oversized, or unrecognised)
Signals: 0 critical · 0 warn · 55 info
Scan time: 18.1 s
LLM review: Reviewed by claude-haiku-5-5 (Anthropic): 28 of 28 warn and critical signals; 28 demoted to info.
Disclude version: 4.1.0
Scanned (UTC): 2026-10-22 10:30

Signals

Ordered by severity, then signals introduced in this release. Hidden characters are shown as ⟨U+…⟩.

info whitespace-anomaly lint-rules/import-path.js:4:1

file mixes tab and space indentation (46 tab-indented and 1 space-indented lines) (raw pass, confidence 0.40)
```
export const importPathRule = /** @type {const} */ ({
	meta: {
		type: 'problem',
		docs: {
```
info unicode-zero-width lint-rules/test-utils.js:147:5

U+200B ZERO WIDTH SPACE in source (in string/comment) (raw pass, confidence 0.45)
```
// Note: Some note.
// *⟨U+200B⟩/

jsdoc('@example', '```\ntype A = string;\n```', '@category Test');
```
info unicode-zero-width lint-rules/test-utils.js:157:5

U+200B ZERO WIDTH SPACE in source (in string/comment) (raw pass, confidence 0.45)
```
// @category Test
// *⟨U+200B⟩/
```
*/
```
info unicode-zero-width lint-rules/test-utils.js:175:46

U+200B ZERO WIDTH SPACE in source (in string/comment) (raw pass, confidence 0.45)
```
	'type Test = string;',
	'/**\nSome description.\nNote: Some note.\n*⟨U+200B⟩/'
);
// Returns:
```
info unicode-zero-width lint-rules/test-utils.js:187:5

U+200B ZERO WIDTH SPACE in source (in string/comment) (raw pass, confidence 0.45)
```
// Note: Some note.
// *⟨U+200B⟩/
// export type T2 = string;
*/
```
info unicode-zero-width lint-rules/test-utils.js:206:46

U+200B ZERO WIDTH SPACE in source (in string/comment) (raw pass, confidence 0.45)
```
	'type Test = string;',
	'/**\nSome description.\nNote: Some note.\n*⟨U+200B⟩/'
);
// Returns:
```
info unicode-zero-width lint-rules/test-utils.js:219:6

U+200B ZERO WIDTH SPACE in source (in string/comment) (raw pass, confidence 0.45)
```
// 	Note: Some note.
// 	*⟨U+200B⟩/
// 	p2: string;
// };
```
info unicode-zero-width lint-rules/test-utils.js:241:59

U+200B ZERO WIDTH SPACE in source (in string/comment) (raw pass, confidence 0.45)
```
```
exportTypeAndOption('// Some comment', '/**\nSome JSDoc\n*⟨U+200B⟩/');
// Returns:
// // Some comment
```
info unicode-zero-width lint-rules/test-utils.js:248:5

U+200B ZERO WIDTH SPACE in source (in string/comment) (raw pass, confidence 0.45)
```
// Some JSDoc
// *⟨U+200B⟩/
// type T1 = string;
```
info unicode-zero-width lint-rules/test-utils.js:257:6

U+200B ZERO WIDTH SPACE in source (in string/comment) (raw pass, confidence 0.45)
```
// 	Some JSDoc
// 	*⟨U+200B⟩/
// 	p1: string;
// };
```
info ~~warn~~ → info by review encoding-base64 readme.md:391:52

base64-like blob (139 bytes, compression ratio 0.95) (raw pass, confidence 0.60)
```
	[Playground](https://www.typescriptlang.org/play?#code/JYWwDg9gTgLgBDAnmApnA3gBQIYGMDW2A5igFIDOEAdnNuXAEJ0o4HFmVUC+cAZlBBBwA5ElQBaXinIxhAbgCwAKFCRYCZGnQAZYFRgooPfoJHSANntmKlysWlaESFanAC8jZo-YuaAMgwLKwBhal5gIgB+AC44XX1DADpQqnCiLhsgA)

	```ts
```
likely benign LLM, confidence 0.93 A TypeScript Playground link in the README carrying a compressed code fragment.
Reasoning
The blob is the fragment of a TypeScript Playground share link in a markdown README. The lz-string-style compressed payload is the normal way the Playground encodes code, so the base64-like match is a documentation URL, not an obfuscated payload.

info long-line readme.md:417:1

line length 883 characters (raw pass, confidence 0.50)

  [Playground](https://www.typescriptlang.org/play/?#code/JYOwLgpgTgZghgYwgAgKoGdrIN4FgBQyyAkMACYBcyIArgLYBG0A3AUcSHHRFemFKADmrQiTiCe1ekygiiAXwJtkCADZx06NJigBBAA7AAytABuwJDmXENATxAJkMCGAQALDNAAUNHQElKKUZoAEoqAAUoAHs6YEwAHk8oAD4rUWJiAHpM5AAxF3dkMDcUXywyODA4J2i6IpLkCqqGDQgAOmssnIAVBsQwGjhVZGA6fVUIbnBK4CiQZFjBNzBkVSiogGtV

info ~~warn~~ → info by review encoding-base64 readme.md:417:54

base64-like blob (522 bytes, compression ratio 0.78) (raw pass, confidence 0.60)
```
Playground](https://www.typescriptlang.org/play/?#code/JYOwLgpgTgZghgYwgAgKoGdrIN4FgBQyyAkMACYBcyIArgLYBG0A3AUcSHHRFemFKADmrQiTiCe1ekygiiAXwJtkCADZx06NJigBBAA7AAytABuwJDmXENATxAJkMCGAQALDNAAUNHQElKKUZoAEoqAAUoAHs6YEwAHk8oAD4rUWJiAHpM5AAxF3dkMDcUXywyODA4J2i6IpLkCqqGDQgAOmssnIAVBsQwGjhVZGA6fVUIbnBK4CiQZFjBNzBkVSiogGtV4A2
```
likely benign LLM, confidence 0.93 A TypeScript Playground share link in the README with an encoded code fragment.
Reasoning
This is a Playground URL in a markdown README with a compressed #code/ fragment, the standard share format. The raw-pass base64 signal is a false positive on documentation links.
info ~~warn~~ → info by review encoding-base64 readme.md:417:577

base64-like blob (129 bytes, compression ratio 0.98) (raw pass, confidence 0.60)
```
sEAA2l93u4kl8ALrJZIiZR2BxOGgOMCzeZuOAgMgTJKcypwLx-C1QcxIKhJc0mWNWhngwK0YJQEJpdj8Wy5mEIU4rQFURXuZWq+5PF4raPJuPte0eHQ+fxkXHpWG6GCQKBOApuITIQGNCMM2xRGgqIPIeWwKJQOqmOACadafr+rToGiFDSj-RNEfFUo6EbgaDwJB0vGz9wnhqImpRb2Es8QBlLhZwDYjuBkGQrz+kMyC6OEfjnBAACONCXGAm5aCAEDKsqHTpPIs4fMgXjQNE2aFhkxx4d+gbBqoQjWJKChKKIxbwqWZqGI2VpqtQECP
```
likely benign LLM, confidence 0.93 Continuation of a Playground share link's compressed code fragment in the README.
Reasoning
The snippet continues the same Playground URL fragment in the README. The high-entropy blob is the compressed code in the link, not a payload or dropper.
info ~~warn~~ → info by review encoding-base64 readme.md:417:707

base64-like blob (176 bytes, compression ratio 0.91) (raw pass, confidence 0.60)
```
OApuITIQGNCMM2xRGgqIPIeWwKJQOqmOACadafr+rToGiFDSj-RNEfFUo6EbgaDwJB0vGz9wnhqImpRb2Es8QBlLhZwDYjuBkGQrz+kMyC6OEfjnBAACONCXGAm5aCAEDKsqHTpPIs4fMgXjQNE2aFhkxx4d+gbBqoQjWJKChKKIxbwqWZqGI2VpqtQECPNo0BJpaSA4tCZEhhAYYRu23HMbxn7IDSUJAA)
```
likely benign LLM, confidence 0.93 Further compressed code data from a Playground link in the README.
Reasoning
Same Playground URL fragment in the README, with the compressed code data continuing. Raw-pass entropy on a documentation link is expected and not evidence of malice.

info long-line readme.md:463:1

line length 580 characters (raw pass, confidence 0.50)

	[Playground](https://www.typescriptlang.org/play/#code/JYOwLgpgTgZghgYwgAgHIHsAmEDC6QzADmyA3gLABQyycADnanALYQBcyAzmFKEQNxUaddFDAcQAV2YAjaIMoBfKlQQAbOJ05osEAIIMAQpOBrsUMkOR1eANziRkCfISKSoD4Pg4ZseAsTIALyW1DS0DEysHADkvvoMMQA0VsKi4sgAzAAMuVaKClY2wPaOknSYDrguADwA0sgQAB6QIJjaANYQAJ7oMDp+LsQAfAAUXd0cdUnI9mo+uv6uANp1ALoAlKHhy

info ~~warn~~ → info by review encoding-base64 readme.md:463:52

base64-like blob (528 bytes, compression ratio 0.79) (raw pass, confidence 0.60)
```
[Playground](https://www.typescriptlang.org/play/#code/JYOwLgpgTgZghgYwgAgHIHsAmEDC6QzADmyA3gLABQyycADnanALYQBcyAzmFKEQNxUaddFDAcQAV2YAjaIMoBfKlQQAbOJ05osEAIIMAQpOBrsUMkOR1eANziRkCfISKSoD4Pg4ZseAsTIALyW1DS0DEysHADkvvoMMQA0VsKi4sgAzAAMuVaKClY2wPaOknSYDrguADwA0sgQAB6QIJjaANYQAJ7oMDp+LsQAfAAUXd0cdUnI9mo+uv6uANp1ALoAlKHhyG
```
likely benign LLM, confidence 0.93 A TypeScript Playground example link in the README.
Reasoning
A Playground link in a markdown document with a compressed #code/ fragment. It is a shareable example URL, and the base64-like match is a false positive.
info ~~warn~~ → info by review encoding-base64 readme.md:512:112

base64-like blob (283 bytes, compression ratio 0.84) (raw pass, confidence 0.60)
```
Q4SwOwFwUwJwGYEMDGNgGED21VQGJZwC2wA3gFCjXAzFJgA2A-AFzADOUckA5gNxUaIYjA4ckvGG07c+g6gF8KQkAgCuEFFDA5O6gEbEwUbLm2ESwABQIixACJIoSdgCUYAR3Vg4MACYAPGYuFvYAfACU5Ko0APRxwADKMBD+wFAAFuh2Vv7OSBlYGdmc8ABu8LHKsRyGxqY4oQT21pTCIHQMjOwA5DAAHgACxAAOjDAAdChYxL0ANLHUouKSMH0AEmAAhJhY6ozpAJ77GTCMjMCiV0ToSAb7UJPPC9WRgrEJwAAqR6MwSRQPFGUFocD
```
likely benign LLM, confidence 0.93 Compressed code fragment within a Playground link in the README.
Reasoning
The blob sits inside a Playground-style compressed code fragment in the README. Raw-pass base64 detection on such a link is a known false-positive pattern.

info long-line readme.md:544:1

line length 610 characters (raw pass, confidence 0.50)

	[Playground](https://typescript-play.js.org/?target=6#code/AQ4UwOwVwW2AZA9gc3mAbmANsA3gKFCOAHkAzMgGkOJABEwAjKZa2kAUQCcvEu32AMQCGAF2FYBIAL4BufDRABLCKLBcywgMZgEKZOoDCiCGSXI8i4hGEwwALmABnUVxXJ57YFgzZHSVF8sT1BpBSItLGEnJz1kAy5LLy0TM2RHACUwYQATEywATwAeAITjU3MAPnkrCJMXLigtUT4AClxgGztKbyDgaX99I1TzAEokr1BRAAslJwA6FIqLAF48TtswH

info ~~warn~~ → info by review encoding-base64 readme.md:544:56

base64-like blob (554 bytes, compression ratio 0.79) (raw pass, confidence 0.60)
```
yground](https://typescript-play.js.org/?target=6#code/AQ4UwOwVwW2AZA9gc3mAbmANsA3gKFCOAHkAzMgGkOJABEwAjKZa2kAUQCcvEu32AMQCGAF2FYBIAL4BufDRABLCKLBcywgMZgEKZOoDCiCGSXI8i4hGEwwALmABnUVxXJ57YFgzZHSVF8sT1BpBSItLGEnJz1kAy5LLy0TM2RHACUwYQATEywATwAeAITjU3MAPnkrCJMXLigtUT4AClxgGztKbyDgaX99I1TzAEokr1BRAAslJwA6FIqLAF48TtswHp9MHD
```
likely benign LLM, confidence 0.93 A typescript-play example link with a compressed code fragment in the README.
Reasoning
The link points to typescript-play.js.org with a target parameter and a compressed code fragment, which is a normal documentation example link. Nothing in the snippet indicates execution or a dropper.

info long-line readme.md:589:1

line length 704 characters (raw pass, confidence 0.50)

	[Playground](https://typescript-play.js.org/?target=6#code/AQ4SwOwFwUwJwGYEMDGNgEE5TCgNugN4BQoZwOUBAXMAM5RyQDmA3KeSFABYCuAtgCMISMHloMmENh04oA9tBjQJjFuzIBfYrOAB6PcADCcGElh1gEGAHcKATwAO6ebyjB5CTNlwFwSxFR0BX5HeToYABNgBDh5fm8cfBg6AHIKG3ldA2BHOOcfFNpUygJ0pAhokr4hETFUgDpswywkggAFUwA3MFtgAF5gQgowKhhVKTYKGuFRcXo1aVZgbTIoJ3RW3

info ~~warn~~ → info by review encoding-base64 readme.md:589:56

base64-like blob (648 bytes, compression ratio 0.78) (raw pass, confidence 0.60)
```
yground](https://typescript-play.js.org/?target=6#code/AQ4SwOwFwUwJwGYEMDGNgEE5TCgNugN4BQoZwOUBAXMAM5RyQDmA3KeSFABYCuAtgCMISMHloMmENh04oA9tBjQJjFuzIBfYrOAB6PcADCcGElh1gEGAHcKATwAO6ebyjB5CTNlwFwSxFR0BX5HeToYABNgBDh5fm8cfBg6AHIKG3ldA2BHOOcfFNpUygJ0pAhokr4hETFUgDpswywkggAFUwA3MFtgAF5gQgowKhhVKTYKGuFRcXo1aVZgbTIoJ3RW3xhOmB
```
likely benign LLM, confidence 0.93 A typescript-play example link carrying encoded example code.
Reasoning
Another typescript-play example link in the README with a compressed code fragment. The entropy comes from the encoded example code, not from obfuscated logic.

info long-line readme.md:629:1

line length 901 characters (raw pass, confidence 0.50)

	[Playground](https://typescript-play.js.org/?target=6#code/AQ4ejYAUHsGcCWAXBMB2dgwGbAKYC2ADgDYwCeeemCaWArgE7ADGMxAhmuQHQBQoYEnJE8wALKEARnkaxEKdMAC8wAOS0kstGuAAfdQBM8ANzxlRjXQbVaWACwC0JPB0NqA3HwGgIwAJJoWozYHCxixnAsjAhStADmwESMMJYo1Fi4HMCIaPEu+MRklHj8gpqyoeHAAKJFFFTAAN4+giDYCIxwSAByHAR4AFw5SDF5Xm2gJBzdfQPD3WPxE5PAlBxdAP

info ~~warn~~ → info by review encoding-base64 readme.md:629:56

base64-like blob (318 bytes, compression ratio 0.83) (raw pass, confidence 0.60)
```
yground](https://typescript-play.js.org/?target=6#code/AQ4ejYAUHsGcCWAXBMB2dgwGbAKYC2ADgDYwCeeemCaWArgE7ADGMxAhmuQHQBQoYEnJE8wALKEARnkaxEKdMAC8wAOS0kstGuAAfdQBM8ANzxlRjXQbVaWACwC0JPB0NqA3HwGgIwAJJoWozYHCxixnAsjAhStADmwESMMJYo1Fi4HMCIaPEu+MRklHj8gpqyoeHAAKJFFFTAAN4+giDYCIxwSAByHAR4AFw5SDF5Xm2gJBzdfQPD3WPxE5PAlBxdAPLYNQA
```
likely benign LLM, confidence 0.93 A typescript-play example link with an encoded code parameter in the README.
Reasoning
A typescript-play link with an encoded code parameter in the README, a standard way of sharing examples. The raw signal is a false positive.
info ~~warn~~ → info by review encoding-base64 readme.md:629:417

base64-like blob (155 bytes, compression ratio 0.94) (raw pass, confidence 0.60)
```
LEhC9g4-0BmA4JBISXgiCkBQABpILrJ5MhUGhYcATGD6Bk4Hh-jNgABrPDkOBlXyQAAq9ngYmJpOAAHcEOCRjAXqwYODfoo6DhakUSph+Uh7GI4P0xER4Cj0OSQGwMP8tP1hgAlX7swwAHgRl2RvIANALSA08ABtAC6AD4VM1Wm0Kow0MMrYaHYJjGYLLJXZb3at1HYnC43Go-QHQDcvA6-JsmEJXARgCDgMYWAhjIYhDAU+YiMAAFIwex0ZmilMITCGF79TLAGRsAgJYAAZRwSEZGzEABFTOZUrJ5Yn+jwnWgeER6HB7AAKJrADpdXq
```
likely benign LLM, confidence 0.92 Continuation of the encoded code fragment from a Playground link in the README.
Reasoning
Continuation of the encoded Playground fragment in the same README link. Raw-pass entropy in a documentation URL is expected, with no executable context.
info ~~warn~~ → info by review encoding-base64 readme.md:629:582

base64-like blob (319 bytes, compression ratio 0.83) (raw pass, confidence 0.60)
```
4VM1Wm0Kow0MMrYaHYJjGYLLJXZb3at1HYnC43Go-QHQDcvA6-JsmEJXARgCDgMYWAhjIYhDAU+YiMAAFIwex0ZmilMITCGF79TLAGRsAgJYAAZRwSEZGzEABFTOZUrJ5Yn+jwnWgeER6HB7AAKJrADpdXqS4ZqYultTG6azVfqHswPBbtauLY7fayQ7HIbAAAMwBuAEoYw9IBq2Ixs9h2eFMOQYPQObALQKJgggABeYhghCIpikkKRpOQRIknAsZUiIeCttECBEP8NSMCkjDDAARMGziuIYxHwYOjDCMBmDNnAuTxA6irdCOBB1Lh5D
```
likely benign LLM, confidence 0.93 Further encoded code data from a typescript-play link in the README.
Reasoning
The same typescript-play fragment continues in the README. It is compressed example code in a share URL, with no sign of obfuscated execution.

info long-line readme.md:672:1

line length 638 characters (raw pass, confidence 0.50)

	[Playground](https://typescript-play.js.org/?target=6#code/JYOwLgpgTgZghgYwgAgMrQG7QMIHsQzADmyA3gFDLIAOuUYAXMiAK4A2byAPsgM5hRQJHqwC2AI2gBucgF9y5MAE9qKAEoQAjiwj8AEnBAATNtGQBeZAAooWphu26wAGmS3e93bRC8IASgsAPmRDJRlyAHoI5ABRAA8ENhYjFFYOZGVVZBgoXFFkAAM0zh5+QRBhZhYJaAKAOkjogEkQZAQ4X2QAdwALCFbaemRgXmQtFjhOMFwq9K6ULuB0lk6U+HYw

info ~~warn~~ → info by review encoding-base64 readme.md:672:56

base64-like blob (582 bytes, compression ratio 0.79) (raw pass, confidence 0.60)
```
yground](https://typescript-play.js.org/?target=6#code/JYOwLgpgTgZghgYwgAgMrQG7QMIHsQzADmyA3gFDLIAOuUYAXMiAK4A2byAPsgM5hRQJHqwC2AI2gBucgF9y5MAE9qKAEoQAjiwj8AEnBAATNtGQBeZAAooWphu26wAGmS3e93bRC8IASgsAPmRDJRlyAHoI5ABRAA8ENhYjFFYOZGVVZBgoXFFkAAM0zh5+QRBhZhYJaAKAOkjogEkQZAQ4X2QAdwALCFbaemRgXmQtFjhOMFwq9K6ULuB0lk6U+HYwZAxJn
```
likely benign LLM, confidence 0.93 Base64-style LZ-compressed TypeScript playground link in a readme.
Reasoning
The blob sits inside a typescript-play.js.org URL fragment (#code/...), which is the playground's LZ-string-compressed source format. It is a documentation link embedding example code, not a payload, and a markdown file has no execution path for it.

info long-line readme.md:706:1

line length 714 characters (raw pass, confidence 0.50)

	[Playground](https://typescript-play.js.org/?target=6#code/CYUwxgNghgTiAEAzArgOzAFwJYHtXzSwEdkQBJYACgEoAueVZAWwCMQYBuAKDDwGcM8MgBF4AXngBlAJ6scESgHIRi6ty5ZUGdoihgEABXZ888AN5d48ANoiAuvUat23K6ihMQ9ATE0BzV3goPy8GZjZOLgBfLi4Aejj4AEEICBwAdz54MAALKFQQ+BxEeAAHY1NgKAwoIKy0grr4DByEUpgccpgMaXgAaxBerCzi+B9-ZulygDouFHRsU1z8kKMYE1R

info ~~warn~~ → info by review encoding-base64 readme.md:706:56

base64-like blob (241 bytes, compression ratio 0.87) (raw pass, confidence 0.60)
```
yground](https://typescript-play.js.org/?target=6#code/CYUwxgNghgTiAEAzArgOzAFwJYHtXzSwEdkQBJYACgEoAueVZAWwCMQYBuAKDDwGcM8MgBF4AXngBlAJ6scESgHIRi6ty5ZUGdoihgEABXZ888AN5d48ANoiAuvUat23K6ihMQ9ATE0BzV3goPy8GZjZOLgBfLi4Aejj4AEEICBwAdz54MAALKFQQ+BxEeAAHY1NgKAwoIKy0grr4DByEUpgccpgMaXgAaxBerCzi+B9-ZulygDouFHRsU1z8kKMYE1RhaqgA
```
likely benign LLM, confidence 0.93 Compressed TypeScript playground example link in documentation.
Reasoning
Same pattern: a typescript-play URL fragment carrying compressed example code in a markdown readme. The raw-pass base64 signal is a false positive on the playground encoding.
info ~~warn~~ → info by review encoding-base64 readme.md:706:298

base64-like blob (416 bytes, compression ratio 0.82) (raw pass, confidence 0.60)
```
xEeAAHY1NgKAwoIKy0grr4DByEUpgccpgMaXgAaxBerCzi+B9-ZulygDouFHRsU1z8kKMYE1RhaqgAHkt4AHkWACt4EAAPbVRgLLWNgBp9gGlBs8uQa6yAUUuYPQwdgNpKM7nh7mMML4CgA+R5WABqUAgpDeVxuhxO1he0jsXGh8EoOBO9COx3BQPo2PBADckaR6IjkSA6PBqTgsMBzPsicdrEC7OJWXSQNwYvFEgAVTS9JLXODpeDpKBZFg4GCoWa8VACIJykAKiQWKy2YQOAioYikCg0OEMDyhRSy4DyxS24KhAAMjyi6gS8AAwjh5
```
likely benign LLM, confidence 0.93 Second compressed TypeScript playground link in the same readme line.
Reasoning
A second playground link on the same line, with the same compressed-code fragment format. Nothing executes it; it is documentation content.

info long-line readme.md:750:1

line length 556 characters (raw pass, confidence 0.50)

	[Playground](https://typescript-play.js.org/?target=6#code/C4TwDgpgBACg9gJ2AOQK4FsBGEFQLxQDOwCAlgHYDmUAPlORtrnQwDasDcAUFwPQBU-WAEMkUOADMowqAGNWwwoSgATCBIqlgpOOSjAAFsOBRSy1IQgr9cKJlSlW1mZYQA3HFH68u8xcoBlHA8EACEHJ08Aby4oKDBUTFZSWXjEFEYcAEIALihkXTR2YSSIAB54JDQsHAA+blj4xOTUsHSACkMzPKD3HHDHNQQAGjSkPMqMmoQASh7g-oihqBi4uNIpd

info ~~warn~~ → info by review encoding-base64 readme.md:750:56

4 rows of base64-like lines, lines 750-750 (first: base64-like blob (71 bytes, compression ratio 1.15)) (raw pass, confidence 0.60)
```
yground](https://typescript-play.js.org/?target=6#code/C4TwDgpgBACg9gJ2AOQK4FsBGEFQLxQDOwCAlgHYDmUAPlORtrnQwDasDcAUFwPQBU-WAEMkUOADMowqAGNWwwoSgATCBIqlgpOOSjAAFsOBRSy1IQgr9cKJlSlW1mZYQA3HFH68u8xcoBlHA8EACEHJ08Aby4oKDBUTFZSWXjEFEYcAEIALihkXTR2YSSIAB54JDQsHAA+blj4xOTUsHSACkMzPKD3HHDHNQQAGjSkPMqMmoQASh7g-oihqBi4uNIpdraxPA
```
likely benign LLM, confidence 0.92 Playground share link with compressed example code.
Reasoning
The four-row base64-like run is a typescript-play #code/ fragment in markdown. This is the standard playground share URL format and not an obfuscated dropper.

info long-line readme.md:788:1

line length 523 characters (raw pass, confidence 0.50)

	[Playground](https://typescript-play.js.org/?target=6#code/GYVwdgxgLglg9mABAZwBYmMANgUwBQxgAOIUAXIgIZgCeA2gLoCUFAbnDACaIDeAUIkQB6IYgCypSlBxUATrMo1ECsJzgBbLEoipqAc0J7EMKMgDkiHLnU4wp46pwAPHMgB0fAL58+oSLARECEosLAA5ABUYG2QAHgAxJGdpVWREPDdMylk9ZApqemZEAF4APipacrw-CApEgBogkKwAYThwckQwEHUAIxxZJl4BYVEImiIZKF0oZRwiWVdbeygJmThg

info ~~warn~~ → info by review encoding-base64 readme.md:788:56

base64-like blob (204 bytes, compression ratio 0.87) (raw pass, confidence 0.60)
```
yground](https://typescript-play.js.org/?target=6#code/GYVwdgxgLglg9mABAZwBYmMANgUwBQxgAOIUAXIgIZgCeA2gLoCUFAbnDACaIDeAUIkQB6IYgCypSlBxUATrMo1ECsJzgBbLEoipqAc0J7EMKMgDkiHLnU4wp46pwAPHMgB0fAL58+oSLARECEosLAA5ABUYG2QAHgAxJGdpVWREPDdMylk9ZApqemZEAF4APipacrw-CApEgBogkKwAYThwckQwEHUAIxxZJl4BYVEImiIZKF0oZRwiWVdbeygJmThgOYgcG
```
likely benign LLM, confidence 0.93 Compressed TypeScript playground example link in a readme.
Reasoning
A typescript-play #code/ URL in a readme. The encoding matches the playground's compressed source format, and the raw pass flags it only on its base64-like character set.
info ~~warn~~ → info by review encoding-base64 readme.md:788:261

base64-like blob (262 bytes, compression ratio 0.85) (raw pass, confidence 0.60)
```
A5ABUYG2QAHgAxJGdpVWREPDdMylk9ZApqemZEAF4APipacrw-CApEgBogkKwAYThwckQwEHUAIxxZJl4BYVEImiIZKF0oZRwiWVdbeygJmThgOYgcGFYcbhqApCJsyhtpWXcR1cnEePBoeDAABVPzgbTixFeFd8uEsClADcIxGiygIFkSEOT3SmTc2VydQeRx+ZxwF2QQ34gkEwDgsnSuFmMBKiAADEDjIhYk1Qm0OlSYABqZnYka4xA1DJZHJYkGc7yCbyeRA+CAIZCzNAYbA4CIAdxg2zJwVCkWirjwMswuEaACYmCCgA)
```
likely benign LLM, confidence 0.92 Further segment of a TypeScript playground share link.
Reasoning
Continuation of a typescript-play share URL in the same readme line. The blob is the playground's compressed code payload, which is benign documentation content.

info long-line readme.md:816:1

line length 763 characters (raw pass, confidence 0.50)

	[Playground](https://typescript-play.js.org/?target=6#code/MYGwhgzhAECCBOAXAlqApgWQPYBM0mgG8AoaaFRENALmgkXmQDsBzAblOmCycTV4D8teo1YdO3JiICuwRFngAKClWENmLAJRFOZRAAtkEAHQq00ALzlklNBzIBfYk+KhIMAJJTEYJsDQAwmDA+mgAPAAq0GgAHnxMODCKTGgA7tCKxllg8CwQtL4AngDaALraFgB80EWa1SRkAA6MAG5gfNAB4FABPDJyCrQR9tDNyG0dwMGhtBhgjWEiGgA00F70vv4

info ~~warn~~ → info by review encoding-base64 readme.md:816:56

base64-like blob (344 bytes, compression ratio 0.83) (raw pass, confidence 0.60)
```
yground](https://typescript-play.js.org/?target=6#code/MYGwhgzhAECCBOAXAlqApgWQPYBM0mgG8AoaaFRENALmgkXmQDsBzAblOmCycTV4D8teo1YdO3JiICuwRFngAKClWENmLAJRFOZRAAtkEAHQq00ALzlklNBzIBfYk+KhIMAJJTEYJsDQAwmDA+mgAPAAq0GgAHnxMODCKTGgA7tCKxllg8CwQtL4AngDaALraFgB80EWa1SRkAA6MAG5gfNAB4FABPDJyCrQR9tDNyG0dwMGhtBhgjWEiGgA00F70vv4RhY3h
```
likely benign LLM, confidence 0.93 Compressed TypeScript playground example link.
Reasoning
Typescript-play #code/ link in markdown documentation. The compressed fragment is the standard playground share encoding, not executable malware in a readme.
info ~~warn~~ → info by review encoding-base64 readme.md:816:401

base64-like blob (362 bytes, compression ratio 0.82) (raw pass, confidence 0.60)
```
EPaDWTkhiZd7r3e8LK3llwGCMXGQWGhEOsfH5zJlsrl8p0+gw-goAAo5MAAW3BaHgEEilU0tEhmzQ212BJ0ry4SOg+kg+gBBiMximIGA0nAfAQLGk2N4EAAEgzYcYcnkLsRdDTvNEYkYUKwSdCme9WdM0MYwYhFPSIPpJdTkAAzDKxBUaZX+aAAQgsVmkCTQxuYaBw2ng4Ok8CYcotSu8pMur09iG9vuObxZnx6SN+AyUWTF8MN0CcZE4Ywm5jZHK5aB5fP4iCFIqT4oRRTKRLo6lYVNeAHpG50wOzOe1zHr9NLQ+HoABybsD4HOKXXR
```
likely benign LLM, confidence 0.92 Second compressed playground link in the same readme line.
Reasoning
A second playground link on the same readme line, with the same compressed-code format. It is a documentation example and does not execute.

info long-line readme.md:864:1

line length 938 characters (raw pass, confidence 0.50)

	[Playground](https://typescript-play.js.org/?target=6#code/MYGwhgzhAECSAmICmBlJAnAbgS2E6A3gFDTTwD2AcuQC4AW2AdgOYAUAlAFzSbnbyEAvkWFFQkGJSQB3GMVI1sNZNwg10TZgG4S0YOUY0kh1es07d+xmvQBXYDXLpWi5UlMaWAGj0GjJ6BtNdkJdBQYIADpXZGgAXmgYpB1ScOwoq38aeN9DYxoU6GFRKzVoJjUwRjwAYXJbPPRuAFkwAAcAHgAxBodsAx9GWwBbACMMAD4cxhloVraOCyYjdAAzMDxo

info ~~warn~~ → info by review encoding-base64 readme.md:864:56

base64-like blob (535 bytes, compression ratio 0.80) (raw pass, confidence 0.60)
```
yground](https://typescript-play.js.org/?target=6#code/MYGwhgzhAECSAmICmBlJAnAbgS2E6A3gFDTTwD2AcuQC4AW2AdgOYAUAlAFzSbnbyEAvkWFFQkGJSQB3GMVI1sNZNwg10TZgG4S0YOUY0kh1es07d+xmvQBXYDXLpWi5UlMaWAGj0GjJ6BtNdkJdBQYIADpXZGgAXmgYpB1ScOwoq38aeN9DYxoU6GFRKzVoJjUwRjwAYXJbPPRuAFkwAAcAHgAxBodsAx9GWwBbACMMAD4cxhloVraOCyYjdAAzMDxoOut1e
```
likely benign LLM, confidence 0.93 Compressed TypeScript playground example link.
Reasoning
A typescript-play #code/ URL in a markdown readme. The encoding is the playground's compressed source format, so this is a documentation link and a raw-pass false positive.
info ~~warn~~ → info by review encoding-base64 readme.md:864:592

base64-like blob (142 bytes, compression ratio 0.96) (raw pass, confidence 0.60)
```
FddXlzKjyACp3Nq842HaDIbL6BrZBIVGhIpB1EMYSLsmjmtWW-YhAA+qegAAYLKQLQj3ZsEsdccmnGcLor2Dn8xGedHGpEIBzEzspfsfMHDNAANTQACMVaIljV5GQkRA5DYmIpVKQAgAJARO9le33BDXIyi0YuLW2nJFGLqkOvxFB0YPdBSaLZ0IwNzyPkO8-xkGgsLh8Al427a3hWAhXwwHA8EHT5PmgAB1bAQBAANJ24adKWpft72RaBUTgRBUCAj89HAM8xCTaBjggABRQx0DuHJv25P9dCkWRZVIAAiBjoFImpmjlFBgA0Npsjad
```
likely benign LLM, confidence 0.92 Playground link fragment with compressed example code.
Reasoning
Another playground share URL fragment on the same line, consistent with the other compressed example links in this readme.
info ~~warn~~ → info by review encoding-base64 readme.md:864:735

base64-like blob (203 bytes, compression ratio 0.89) (raw pass, confidence 0.60)
```
O9le33BDXIyi0YuLW2nJFGLqkOvxFB0YPdBSaLZ0IwNzyPkO8-xkGgsLh8Al427a3hWAhXwwHA8EHT5PmgAB1bAQBAANJ24adKWpft72RaBUTgRBUCAj89HAM8xCTaBjggABRQx0DuHJv25P9dCkWRZVIAAiBjoFImpmjlFBgA0NpsjadByDacgIDAEAIAAQmYpjoGYgAZSBsmGPw6DtZiiFA8CoJguDmAQmoZ2QvtUKQLdoAYmBTwgdEiCAA)
```
likely benign LLM, confidence 0.92 Trailing part of a TypeScript playground share link.
Reasoning
Trailing segment of a typescript-play share URL in the readme. It is the same compressed playground encoding and carries no executable threat.

info long-line readme.md:899:1

line length 938 characters (raw pass, confidence 0.50)

	[Playground](https://typescript-play.js.org/?target=6#code/MYGwhgzhAECSAmICmBlJAnAbgS2E6A3gFDTTwD2AcuQC4AW2AdgOYAUAlAFzSbnbyEAvkWFFQkGJSQB3GMVI1sNZNwg10TZgG4S0YOUY0kh1es07d+xmvQBXYDXLpWi5UlMaWAGj0GjJ6BtNdkJdBQYIADpXZGgAXmgYpB1ScOwoq38aeN9DYxoU6GFRKzVoJjUwRjwAYXJbPPRuAFkwAAcAHgAxBodsAx9GWwBbACMMAD4cxhloVraOCyYjdAAzMDxo

info ~~warn~~ → info by review encoding-base64 readme.md:899:56

base64-like blob (535 bytes, compression ratio 0.80) (raw pass, confidence 0.60)
```
yground](https://typescript-play.js.org/?target=6#code/MYGwhgzhAECSAmICmBlJAnAbgS2E6A3gFDTTwD2AcuQC4AW2AdgOYAUAlAFzSbnbyEAvkWFFQkGJSQB3GMVI1sNZNwg10TZgG4S0YOUY0kh1es07d+xmvQBXYDXLpWi5UlMaWAGj0GjJ6BtNdkJdBQYIADpXZGgAXmgYpB1ScOwoq38aeN9DYxoU6GFRKzVoJjUwRjwAYXJbPPRuAFkwAAcAHgAxBodsAx9GWwBbACMMAD4cxhloVraOCyYjdAAzMDxoOut1e
```
likely benign LLM, confidence 0.93 Base64-like compressed code payload in a TypeScript playground link in the README.
Reasoning
Raw base64-like blob inside a markdown link to a TypeScript playground URL. The payload is the lz-string style compressed code parameter used by the TypeScript playground hash, a standard legitimate pattern. Raw pass has high false-positive rate.
info ~~warn~~ → info by review encoding-base64 readme.md:899:592

base64-like blob (142 bytes, compression ratio 0.96) (raw pass, confidence 0.60)
```
FddXlzKjyACp3Nq842HaDIbL6BrZBIVGhIpB1EMYSLsmjmtWW-YhAA+qegAAYLKQLQj3ZsEsdccmnGcLor2Dn8xGedHGpEIBzEzspfsfMHDNAANTQACMVaIljV5GQkRA5DYmIpVKQAgAJARO9le33BDXIyi0YuLW2nJFGLqkOvxFB0YPdBSaLZ0IwNzyPkO8-xkGgsLh8Al427a3hWAhXwwHA8EHT5PmgAB1bAQBAANJ24adKWpft72RaBUTgRBUCAj89HAM8xCTaBjggABRQx0DuHJv25P9dCkWRZVIAAiBjoFImpmjlFBgA0Npsjad
```
likely benign LLM, confidence 0.92 Second compressed blob in the same TypeScript playground link in the README.
Reasoning
Another segment of the same typescript-play.js.org URL hash in the README, a compressed playground snippet. Not an executable or hidden payload; benign documentation link.
info ~~warn~~ → info by review encoding-base64 readme.md:899:735

base64-like blob (203 bytes, compression ratio 0.89) (raw pass, confidence 0.60)
```
O9le33BDXIyi0YuLW2nJFGLqkOvxFB0YPdBSaLZ0IwNzyPkO8-xkGgsLh8Al427a3hWAhXwwHA8EHT5PmgAB1bAQBAANJ24adKWpft72RaBUTgRBUCAj89HAM8xCTaBjggABRQx0DuHJv25P9dCkWRZVIAAiBjoFImpmjlFBgA0NpsjadByDacgIDAEAIAAQmYpjoGYgAZSBsmGPw6DtZiiFA8CoJguDmAQmoZ2QvtUKQLdoAYmBTwgdEiCAA)
```
likely benign LLM, confidence 0.92 Third compressed segment of the TypeScript playground link in the README.
Reasoning
Continuation of the same playground URL parameter in the README. Raw-pass base64 heuristic firing on compressed playground state, consistent with legitimate documentation.

info long-line readme.md:952:1

line length 576 characters (raw pass, confidence 0.50)

	[Playground](https://typescript-play.js.org/?target=6#code/JYOwLgpgTgZghgYwgAgIImAWzgG2QbwChlks4BzCAVShwC5kBnMKUcgbmKYAcIFgIjBs1YgOXMpSFMWbANoBdTiW5woFddwAW0kfKWEAvoUIB6U8gDCUCHEiNkICAHdkYAJ69kz4GC3JcPG4oAHteKDABBxCYNAxsPFBIWEQUCAAPJG4wZABySUFcgJAAEzMLXNV1ck0dIuCw6EjBADpy5AB1FAQ4EGQAV0YUP2AHDy8wEOQbUugmBLwtEIA3OcmQnEj

info ~~warn~~ → info by review encoding-base64 readme.md:952:56

base64-like blob (504 bytes, compression ratio 0.79) (raw pass, confidence 0.60)
```
yground](https://typescript-play.js.org/?target=6#code/JYOwLgpgTgZghgYwgAgIImAWzgG2QbwChlks4BzCAVShwC5kBnMKUcgbmKYAcIFgIjBs1YgOXMpSFMWbANoBdTiW5woFddwAW0kfKWEAvoUIB6U8gDCUCHEiNkICAHdkYAJ69kz4GC3JcPG4oAHteKDABBxCYNAxsPFBIWEQUCAAPJG4wZABySUFcgJAAEzMLXNV1ck0dIuCw6EjBADpy5AB1FAQ4EGQAV0YUP2AHDy8wEOQbUugmBLwtEIA3OcmQnEjuZBgQ
```
likely benign LLM, confidence 0.92 Compressed code payload in another TypeScript playground link in the README.
Reasoning
Same pattern: a compressed TypeScript playground code parameter in a markdown link. Documentation example, no execution or concealment of intent.
info identifier-low-length source/is-equal.d.ts:1:1

20 of 36 non-conventional identifiers are single-character (56%) (token pass, confidence 0.50)

info whitespace-anomaly source/set-parameter-type.d.ts:29:1

file mixes tab and space indentation (41 tab-indented and 2 space-indented lines) (raw pass, confidence 0.40)

type MergeObjectToArray<TArray extends UnknownArray, TObject, TArrayCopy extends UnknownArray = TArray> =
	// If `TObject` is an array like `[0, 1, 2]`
	TObject extends UnknownArray
		// If `TObject` is a variable length array, we should use `TObject`'s type as the result type.

info whitespace-anomaly source/tagged.d.ts:5:1

file mixes tab and space indentation (34 tab-indented and 1 space-indented lines) (raw pass, confidence 0.40)
```
export type TagContainer<Token> = {
	readonly [tag]: Token;
};
```
info whitespace-anomaly test-d/structured-cloneable.ts:28:1

file mixes tab and space indentation (2 tab-indented and 23 space-indented lines) (raw pass, confidence 0.40)
```
## Web/API types
 - Blob
 - File
```

info ~~warn~~ → info by review long-line test-d/tuple-of.ts:20:1

line length 3028 characters (raw pass, confidence 0.65)

expectType<LargeTuple>({} as [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1,

likely benign LLM, confidence 0.95 Very long line containing a literal tuple used in a type assertion test.

Reasoning

Type-test file with a very long generated literal tuple type expression. Long lines in generated type-level tests are a normal pattern; no obfuscation or malicious behavior.

info ~~warn~~ → info by review long-line test-d/tuple-of.ts:26:1

line length 6035 characters (raw pass, confidence 0.65)

expectType<VeryLargeTuple>({} as [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1

likely benign LLM, confidence 0.95 Extremely long line with a large literal tuple in a type assertion test.

Reasoning

Same type-test file with an even larger generated tuple literal for type-level testing. Benign long-line artifact.

Reproduce This Scan

Run disclude locally to verify. Add --format sarif for SARIF output. Add --llm (with an API key in the environment) to include the LLM review.

cargo install disclude --version 4.1.0
git clone https://github.com/sindresorhus/type-fest type-fest && cd type-fest
git checkout v5.10.0
disclude scan --severity info --diff v5.9.0 .