undici-types 8.12.2

Source: https://github.com/nodejs/undici
Tag scanned: v8.12.2
Compared with: v8.12.1 (14 signals introduced since)
Files: 832 scanned, 30 skipped (binary, oversized, or unrecognised)
Signals: 0 critical · 0 warn · 61 info
Scan time: 31.2 s
LLM review: Reviewed by claude-haiku-5-5 (Anthropic): 54 of 54 warn and critical signals; 54 demoted to info.
Disclude version: 4.0.0
Scanned (UTC): 2026-10-16 09:42

Signals

Ordered by severity, then signals introduced in this release. Hidden characters are shown as ⟨U+…⟩.

info ~~warn~~ → info by review encoding-base64 test/subresource-integrity/GHSA-f72v-6w45-q472.js:12:18 new in this release

base64-like blob (44 bytes, compression ratio 1.25) (raw pass, confidence 0.60)
```
const skip = runtimeFeatures.has('crypto') === false
const hash256 = 'wFNeS+K3n/2TKRMFQ2v4iTFOSj+uwF7P/Lt98xrZ5Ro='

test('should ignore well-formed but unknown algorithm tokens', { skip }, (t) => {
```
likely benign LLM, confidence 0.96 Base64 SHA-256 hash constant in an SRI regression test.
Reasoning
SHA-256 digest constant used in a regression test for an SRI advisory about unknown algorithm tokens; benign test fixture.
info ~~warn~~ → info by review encoding-base64 test/subresource-integrity/GHSA-f72v-6w45-q472.js:25:20 new in this release

base64-like blob (44 bytes, compression ratio 1.25) (raw pass, confidence 0.60)
```
  const body = 'Hello world!'
  const hash256 = 'wFNeS+K3n/2TKRMFQ2v4iTFOSj+uwF7P/Lt98xrZ5Ro='
  const hash384 = 'hiVfosNuSzCWnq4X3DTHcsvr38WLWEA5AL6HYU6xo0uHgCY/JV615lypu7hkHMz+'
  const hash512 = '9s3ioPgZMUzd5V/CJ9jX2uPSjMVWIioKitZtkcytSq1glPUXohgjYMmqz2o9wyMWLLb9jN/+2w/gOPVehf+1tg=='
```
dismissed LLM, confidence 0.97 Base64-encoded SHA-256 integrity hash constant in an SRI test fixture.
Reasoning
These are SRI hash strings (base64 digests of the body 'Hello world!') in a test file for subresource integrity. Raw-pass base64 detection on legitimate hash constants is a known false positive.
info ~~warn~~ → info by review encoding-base64 test/subresource-integrity/GHSA-f72v-6w45-q472.js:26:20 new in this release

base64-like blob (64 bytes, compression ratio 1.17) (raw pass, confidence 0.60)
```
  const hash256 = 'wFNeS+K3n/2TKRMFQ2v4iTFOSj+uwF7P/Lt98xrZ5Ro='
  const hash384 = 'hiVfosNuSzCWnq4X3DTHcsvr38WLWEA5AL6HYU6xo0uHgCY/JV615lypu7hkHMz+'
  const hash512 = '9s3ioPgZMUzd5V/CJ9jX2uPSjMVWIioKitZtkcytSq1glPUXohgjYMmqz2o9wyMWLLb9jN/+2w/gOPVehf+1tg=='
```
dismissed LLM, confidence 0.97 Base64-encoded SHA-384 integrity hash constant in an SRI test fixture.
Reasoning
Same SRI test fixture; the value is a base64 SHA-384 digest used as an expected integrity value, not an obfuscated payload.
info ~~warn~~ → info by review encoding-base64 test/subresource-integrity/GHSA-f72v-6w45-q472.js:27:20 new in this release

base64-like blob (88 bytes, compression ratio 1.12) (raw pass, confidence 0.60)
```
  const hash384 = 'hiVfosNuSzCWnq4X3DTHcsvr38WLWEA5AL6HYU6xo0uHgCY/JV615lypu7hkHMz+'
  const hash512 = '9s3ioPgZMUzd5V/CJ9jX2uPSjMVWIioKitZtkcytSq1glPUXohgjYMmqz2o9wyMWLLb9jN/+2w/gOPVehf+1tg=='

  const server = createServer({ joinDuplicateHeaders: true }, (req, res) => {
```
dismissed LLM, confidence 0.97 Base64-encoded SHA-512 integrity hash constant in an SRI test fixture.
Reasoning
SHA-512 base64 digest used as an expected integrity value in a test for subresource integrity handling; benign test data.
info ~~warn~~ → info by review encoding-base64 test/subresource-integrity/GHSA-f72v-6w45-q472.js:59:25 new in this release

base64-like blob (44 bytes, compression ratio 1.25) (raw pass, confidence 0.60)
```
  const body = 'Hello world!'
  const hash256Wrong = 'MWD71RGgcch4KOzmR6VMaqWh4VY7eonYmHWvemOtMno='
  const hash384Wrong = 'zxSYGGGjWi7iIZ9SmiTenQIQ+/nzPTd5bbesJhBTZvoYomj28rsVLXbUyJU/Yqob'
  const hash512Wrong = 'eC9loL1pd8AD1Btp9aHu+ymH5Rfnh64hiTYgyfeXy270KfjPQupBkhb2OeP35vZA8ofSBNJ01LzweDIhznuqaw=='
```
dismissed LLM, confidence 0.97 Base64 SHA-256 digest of an incorrect hash used as a negative test vector.
Reasoning
Deliberately wrong hash values used to test that mismatched integrity fails; these are test vectors for a security regression test, not malicious content.
info ~~warn~~ → info by review encoding-base64 test/subresource-integrity/GHSA-f72v-6w45-q472.js:60:25 new in this release

base64-like blob (64 bytes, compression ratio 1.17) (raw pass, confidence 0.60)
```
  const hash256Wrong = 'MWD71RGgcch4KOzmR6VMaqWh4VY7eonYmHWvemOtMno='
  const hash384Wrong = 'zxSYGGGjWi7iIZ9SmiTenQIQ+/nzPTd5bbesJhBTZvoYomj28rsVLXbUyJU/Yqob'
  const hash512Wrong = 'eC9loL1pd8AD1Btp9aHu+ymH5Rfnh64hiTYgyfeXy270KfjPQupBkhb2OeP35vZA8ofSBNJ01LzweDIhznuqaw=='
```
dismissed LLM, confidence 0.97 Base64 SHA-384 digest of an incorrect hash used as a negative test vector.
Reasoning
Incorrect SHA-384 test vector for negative SRI checking; benign test fixture.
info ~~warn~~ → info by review encoding-base64 test/subresource-integrity/GHSA-f72v-6w45-q472.js:61:25 new in this release

base64-like blob (88 bytes, compression ratio 1.12) (raw pass, confidence 0.60)
```
  const hash384Wrong = 'zxSYGGGjWi7iIZ9SmiTenQIQ+/nzPTd5bbesJhBTZvoYomj28rsVLXbUyJU/Yqob'
  const hash512Wrong = 'eC9loL1pd8AD1Btp9aHu+ymH5Rfnh64hiTYgyfeXy270KfjPQupBkhb2OeP35vZA8ofSBNJ01LzweDIhznuqaw=='

  const server = createServer({ joinDuplicateHeaders: true }, (req, res) => {
```
dismissed LLM, confidence 0.97 Base64 SHA-512 digest of an incorrect hash used as a negative test vector.
Reasoning
Incorrect SHA-512 test vector for negative SRI checking in a regression test; benign.
info ~~warn~~ → info by review encoding-base64 test/subresource-integrity/GHSA-f72v-6w45-q472.js:95:25 new in this release

base64-like blob (44 bytes, compression ratio 1.25) (raw pass, confidence 0.60)
```
  await t.assert.doesNotReject(fetch(`http://localhost:${server.address().port}`, {
    integrity: 'sha1024-MWD71RGgcch4KOzmR6VMaqWh4VY7eonYmHWvemOtMno='
  }))
})
```
dismissed LLM, confidence 0.97 Base64 digest inside an integrity attribute value in a fetch test.
Reasoning
The sha1024 integrity string is a test value for an invalid algorithm/format check within the SRI test; the base64 is a digest, not a hidden payload.
info ~~warn~~ → info by review encoding-base64 test/subresource-integrity/GHSA-f72v-6w45-q472.js:101:20 new in this release

base64-like blob (44 bytes, compression ratio 1.25) (raw pass, confidence 0.60)
```
  const body = 'Hello world!'
  const hash256 = 'wFNeS+K3n/2TKRMFQ2v4iTFOSj+uwF7P/Lt98xrZ5Ro='
  const hash384 = 'hiVfosNuSzCWnq4X3DTHcsvr38WLWEA5AL6HYU6xo0uHgCY/JV615lypu7hkHMz+'
  const hash512 = '9s3ioPgZMUzd5V/CJ9jX2uPSjMVWIioKitZtkcytSq1glPUXohgjYMmqz2o9wyMWLLb9jN/+2w/gOPVehf+1tg=='
```
dismissed LLM, confidence 0.97 Base64-encoded SHA-256 integrity hash constant in an SRI test fixture.
Reasoning
Repeated SRI hash constants in the same benign test file; no decoding or execution of the blob occurs.
info ~~warn~~ → info by review encoding-base64 test/subresource-integrity/GHSA-f72v-6w45-q472.js:102:20 new in this release

base64-like blob (64 bytes, compression ratio 1.17) (raw pass, confidence 0.60)
```
  const hash256 = 'wFNeS+K3n/2TKRMFQ2v4iTFOSj+uwF7P/Lt98xrZ5Ro='
  const hash384 = 'hiVfosNuSzCWnq4X3DTHcsvr38WLWEA5AL6HYU6xo0uHgCY/JV615lypu7hkHMz+'
  const hash512 = '9s3ioPgZMUzd5V/CJ9jX2uPSjMVWIioKitZtkcytSq1glPUXohgjYMmqz2o9wyMWLLb9jN/+2w/gOPVehf+1tg=='
```
dismissed LLM, confidence 0.97 Base64-encoded SHA-384 integrity hash constant in an SRI test fixture.
Reasoning
Repeated SHA-384 integrity constant in the benign SRI test file.
info ~~warn~~ → info by review encoding-base64 test/subresource-integrity/GHSA-f72v-6w45-q472.js:103:20 new in this release

base64-like blob (88 bytes, compression ratio 1.12) (raw pass, confidence 0.60)
```
  const hash384 = 'hiVfosNuSzCWnq4X3DTHcsvr38WLWEA5AL6HYU6xo0uHgCY/JV615lypu7hkHMz+'
  const hash512 = '9s3ioPgZMUzd5V/CJ9jX2uPSjMVWIioKitZtkcytSq1glPUXohgjYMmqz2o9wyMWLLb9jN/+2w/gOPVehf+1tg=='
  const hash256Wrong = 'MWD71RGgcch4KOzmR6VMaqWh4VY7eonYmHWvemOtMno='
```
dismissed LLM, confidence 0.97 Base64-encoded SHA-512 integrity hash constant in an SRI test fixture.
Reasoning
Repeated SHA-512 integrity constant in the benign SRI test file.
info ~~warn~~ → info by review encoding-base64 test/subresource-integrity/GHSA-f72v-6w45-q472.js:104:25 new in this release

base64-like blob (44 bytes, compression ratio 1.25) (raw pass, confidence 0.60)
```
  const hash512 = '9s3ioPgZMUzd5V/CJ9jX2uPSjMVWIioKitZtkcytSq1glPUXohgjYMmqz2o9wyMWLLb9jN/+2w/gOPVehf+1tg=='
  const hash256Wrong = 'MWD71RGgcch4KOzmR6VMaqWh4VY7eonYmHWvemOtMno='
  const hash384Wrong = 'zxSYGGGjWi7iIZ9SmiTenQIQ+/nzPTd5bbesJhBTZvoYomj28rsVLXbUyJU/Yqob'
```
dismissed LLM, confidence 0.97 Base64 digest used as a mismatched integrity value in a test.
Reasoning
Wrong-hash test vector in a benign SRI regression test; the blob is only compared, never decoded or executed.
info ~~warn~~ → info by review encoding-base64 test/subresource-integrity/GHSA-f72v-6w45-q472.js:105:25 new in this release

base64-like blob (64 bytes, compression ratio 1.17) (raw pass, confidence 0.60)
```
  const hash256Wrong = 'MWD71RGgcch4KOzmR6VMaqWh4VY7eonYmHWvemOtMno='
  const hash384Wrong = 'zxSYGGGjWi7iIZ9SmiTenQIQ+/nzPTd5bbesJhBTZvoYomj28rsVLXbUyJU/Yqob'
  const hash512Wrong = 'eC9loL1pd8AD1Btp9aHu+ymH5Rfnh64hiTYgyfeXy270KfjPQupBkhb2OeP35vZA8ofSBNJ01LzweDIhznuqaw=='
```
likely benign LLM, confidence 0.97 Wrong-value SRI hash constants used in a test fixture.
Reasoning
Raw base64-like match on hash string literals in a test file for subresource integrity; these are expected test fixtures of SRI hash values, not obfuscation.
info ~~warn~~ → info by review encoding-base64 test/subresource-integrity/GHSA-f72v-6w45-q472.js:106:25 new in this release

base64-like blob (88 bytes, compression ratio 1.12) (raw pass, confidence 0.60)
```
  const hash384Wrong = 'zxSYGGGjWi7iIZ9SmiTenQIQ+/nzPTd5bbesJhBTZvoYomj28rsVLXbUyJU/Yqob'
  const hash512Wrong = 'eC9loL1pd8AD1Btp9aHu+ymH5Rfnh64hiTYgyfeXy270KfjPQupBkhb2OeP35vZA8ofSBNJ01LzweDIhznuqaw=='

  const server = createServer({ joinDuplicateHeaders: true }, (req, res) => {
```
likely benign LLM, confidence 0.97 Wrong-value SHA-384 and SHA-512 hash constants in an SRI test.
Reasoning
Same as the sibling finding: a base64 SRI hash literal in a test file, consistent with legitimate test data.

info long-line README.md:3:1

line length 521 characters (raw pass, confidence 0.50)

[![Node CI](https://github.com/nodejs/undici/actions/workflows/ci.yml/badge.svg)](https://github.com/nodejs/undici/actions/workflows/nodejs.yml) [![neostandard javascript style](https://img.shields.io/badge/neo-standard-7fffff?style=flat\&labelColor=ff80ff)](https://github.com/neostandard/neostandard) [![npm version](h

info proc-macro-presence deps/milo/macros/README.md:10:1

[embedded rust] proc-macro attribute `#[proc_macro]` present (ast pass, confidence 0.95)
```
#[proc_macro]
pub fn new_macro(input: TokenStream) -> TokenStream {
  TokenStream::new( /* ... */)
```
info proc-macro-presence deps/milo/macros/README.md:23:1

[embedded rust] proc-macro attribute `#[proc_macro]` present (ast pass, confidence 0.95)
```
#[proc_macro]
pub fn char(input: TokenStream) -> TokenStream {
  let character = parse_macro_input!(input as LitChar);
```
info proc-macro-presence deps/milo/macros/src/lib.rs:11:1

proc-macro attribute `#[proc_macro]` present (ast pass, confidence 0.95)
```
#[proc_macro]
pub fn generate(_: TokenStream) -> TokenStream { generators::generate() }
```

info long-line docs/docs/index.md:5:1

line length 521 characters (raw pass, confidence 0.50)

[![Node CI](https://github.com/nodejs/undici/actions/workflows/ci.yml/badge.svg)](https://github.com/nodejs/undici/actions/workflows/nodejs.yml) [![neostandard javascript style](https://img.shields.io/badge/neo-standard-7fffff?style=flat\&labelColor=ff80ff)](https://github.com/neostandard/neostandard) [![npm version](h

info long-line lib/llhttp/constants.js:3:1

line length 636 characters (raw pass, confidence 0.50)

exports.SPECIAL_HEADERS = exports.MINOR = exports.MAJOR = exports.HTAB_SP_VCHAR_OBS_TEXT = exports.QUOTED_STRING = exports.CONNECTION_TOKEN_CHARS = exports.HEADER_CHARS = exports.TOKEN = exports.HEX = exports.URL_CHAR = exports.USERINFO_CHARS = exports.MARK = exports.ALPHANUM = exports.NUM = exports.HEX_MAP = exports.N

info ~~warn~~ → info by review encoding-base64 test/busboy/test-parser.js:171:1

base64-like blob (700 bytes over 10 lines, compression ratio 0.79) (raw pass, confidence 0.60)
```
                `
iVBORw0KGgoAAAANSUhEUgAAABAAAAAQCAYAAAAf8/9hAAAABGdBTUEAAK/INwWK6QAAABl0RVh0
U29mdHdhcmUAQWRvYmUgSW1hZ2VSZWFkeXHJZTwAAAGdSURBVDjLpVMxa8JAFL6rAQUHXQoZpLU/
oUOnDtKtW/MDBFHHThUKTgrqICgOEtd2EVxb2qFkKTgVChbSCnZTiVBEMBRLiEmafleCDaWxDX3w
```
likely benign LLM, confidence 0.95 Base64-encoded PNG image fixture in a busboy multipart test.
Reasoning
The blob is a base64-encoded PNG (the 'iVBORw0KGgo' header) embedded as a template literal in a multipart parser test. Test fixtures commonly embed sample image uploads, and the raw-pass base64 signal is a known false-positive pattern.
info ~~warn~~ → info by review encoding-base64 test/busboy/test-parser.js:188:1

base64-like blob (940 bytes over 13 lines, compression ratio 0.79) (raw pass, confidence 0.60)
```
                `
iVBORw0KGgoAAAANSUhEUgAAABAAAAAQCAYAAAAf8/9hAAAABGdBTUEAAK/INwWK6QAAABl0RVh0
U29mdHdhcmUAQWRvYmUgSW1hZ2VSZWFkeXHJZTwAAAJRSURBVBgZpcHda81xHMDx9+d3fudYzuYw
2RaZ5yTWolEiuZpCSjGJFEktUUr8A6ZxQZGHmDtqdrGUXHgoeZqSp1F2bLFWjtkOB8PZzvmd7+dj
```
likely benign LLM, confidence 0.95 Base64-encoded PNG image fixture in a busboy multipart test.
Reasoning
Another base64 PNG fixture in the same test file, with the same PNG header and no decoding or execution around it. It is test input data for a multipart upload parser.
info ~~warn~~ → info by review encoding-base64 test/busboy/test-parser.js:254:1

base64-like blob (1044 bytes over 14 lines, compression ratio 0.79) (raw pass, confidence 0.60)
```
                `
iVBORw0KGgoAAAANSUhEUgAAABAAAAAQCAYAAAAf8/9hAAAABGdBTUEAAK/INwWK6QAAABl0RVh0
U29mdHdhcmUAQWRvYmUgSW1hZ2VSZWFkeXHJZTwAAAKfSURBVDjLpZPrS1NhHMf9O3bOdmwDCWRE
IYKEUHsVJBI7mg3FvCxL09290jZj2EyLMnJexkgpLbPUanNOberU5taUMnHZUULMvelCtWF0sW/n
```
likely benign LLM, confidence 0.95 Base64-encoded PNG image fixture in a busboy multipart test.
Reasoning
Base64 PNG test data inside a template literal in the busboy parser test suite. The raw pass flags length and entropy only; the content is a standard image sample.
info ~~warn~~ → info by review encoding-base64 test/busboy/test-parser.js:275:1

base64-like blob (980 bytes over 13 lines, compression ratio 0.79) (raw pass, confidence 0.60)
```
                `
iVBORw0KGgoAAAANSUhEUgAAABAAAAAQCAYAAAAf8/9hAAAABGdBTUEAAK/INwWK6QAAABl0RVh0
U29mdHdhcmUAQWRvYmUgSW1hZ2VSZWFkeXHJZTwAAAJvSURBVDjLpZPrS5NhGIf9W7YvBYOkhlko
qCklWChv2WyKik7blnNris72bi6dus0DLZ0TDxW1odtopDs4D8MDZuLU0kXq61CijSIIasOvv94V
```
likely benign LLM, confidence 0.95 Base64-encoded PNG image fixture in a busboy multipart test.
Reasoning
Base64 PNG payload used as multipart test input in a parser test file. Nothing in the snippet decodes it into executable content.
info ~~warn~~ → info by review encoding-base64 test/busboy/test-parser.js:336:1

base64-like blob (776 bytes over 11 lines, compression ratio 0.79) (raw pass, confidence 0.60)
```
                `
iVBORw0KGgoAAAANSUhEUgAAABAAAAAQCAYAAAAf8/9hAAAABGdBTUEAAK/INwWK6QAAABl0RVh0
U29mdHdhcmUAQWRvYmUgSW1hZ2VSZWFkeXHJZTwAAAHYSURBVDjLlVLPS1RxHJynpVu7KEn0Vt+2
l6IO5qGCIsIwCPwD6hTUaSk6REoUHeoQ0qVAMrp0COpY0SUIPVRgSl7ScCUTst6zIoqg0y7lvpnP
```
likely benign LLM, confidence 0.95 Base64-encoded PNG image fixture in a busboy multipart test.
Reasoning
Base64 PNG blob inside a test template literal for multipart parsing. This is sample upload data, not a dropper or hidden payload.
info ~~warn~~ → info by review encoding-base64 test/busboy/test-parser.js:354:1

base64-like blob (980 bytes over 13 lines, compression ratio 0.79) (raw pass, confidence 0.60)
```
                `
iVBORw0KGgoAAAANSUhEUgAAABAAAAAQCAYAAAAf8/9hAAAABGdBTUEAAK/INwWK6QAAABl0RVh0
U29mdHdhcmUAQWRvYmUgSW1hZ2VSZWFkeXHJZTwAAAJvSURBVDjLhZNNSFRRFIC/N++9eWMzhkl/
ZJqFMQMRFvTvImkXSdKiVRAURBRRW1eZA9EqaNOiFlZEtQxKyrJwUS0K+qEQzaTE/AtLHR3Hmffu
```
likely benign LLM, confidence 0.95 Base64-encoded PNG image fixture in a busboy multipart test.
Reasoning
Same pattern: a base64 PNG fixture in a busboy test file, consistent with the other flagged fixtures in the same file.
info ~~warn~~ → info by review encoding-base64 test/busboy/test-parser.js:376:1

base64-like blob (3212 bytes over 43 lines, compression ratio 0.71) (raw pass, confidence 0.60)
```
        `
LS0tLS0tV2ViS2l0Rm9ybUJvdW5kYXJ5amRTRmhjQVJrOGZ5R055Ng0KQ29udGVudC1EaXNwb3Np
dGlvbjogZm9ybS1kYXRhOyBuYW1lPSJmaWxlMSI7IGZpbGVuYW1lPSJndGstYXBwbHkucG5nIg0K
Q29udGVudC1UeXBlOiBpbWFnZS9wbmcNCg0KiVBORw0KGgoAAAANSUhEUgAAABQAAAAUCAYAAACN
```
likely benign LLM, confidence 0.95 Base64-encoded multipart form body with an embedded PNG, used as a busboy test fixture.
Reasoning
The snippet begins with a base64 encoding of a multipart boundary and Content-Disposition headers (decoding to 'WebKitFormBoundary' and 'form-data'), followed by base64 PNG data. This is a constructed HTTP multipart request fixture for testing the parser.
info ~~warn~~ → info by review encoding-base64 test/busboy/test-parser.js:427:1

base64-like blob (1336 bytes over 18 lines, compression ratio 0.77) (raw pass, confidence 0.60)
```
                `
iVBORw0KGgoAAAANSUhEUgAAABQAAAAUCAYAAACNiR0NAAAABHNCSVQICAgIfAhkiAAAAAlwSFlz
AAAN1wAADdcBQiibeAAAABl0RVh0U29mdHdhcmUAd3d3Lmlua3NjYXBlLm9yZ5vuPBoAAANnSURB
VDiNldJ9aJVVHAfw7znPuS/PvW4405WbLWfbsBuNbramq5Tp7mLqIFPXINlwpAitaCAPjWKgBdXz
```
likely benign LLM, confidence 0.95 Base64-encoded PNG image fixture in a busboy multipart test.
Reasoning
Base64 PNG (Inkscape-generated, per the decoded 'www.inkscape.org' text) used as a multipart test input. Consistent with a parser test corpus.
info ~~warn~~ → info by review encoding-base64 test/busboy/test-parser.js:452:1

base64-like blob (1272 bytes over 17 lines, compression ratio 0.78) (raw pass, confidence 0.60)
```
                `
iVBORw0KGgoAAAANSUhEUgAAABQAAAAUCAYAAACNiR0NAAAABHNCSVQICAgIfAhkiAAAAAlwSFlz
AAAN1wAADdcBQiibeAAAABl0RVh0U29mdHdhcmUAd3d3Lmlua3NjYXBlLm9yZ5vuPBoAAAM1SURB
VDiNrZTPaxtHFMc/M7uzs7KobckyDjQxtoPbnlJyMBRKgsGFHkwvvfbuU/+BQCilBHrof+BT7zmV
```
likely benign LLM, confidence 0.95 Base64-encoded PNG image fixture in a busboy multipart test.
Reasoning
Base64 PNG test data with the same Inkscape metadata, in the busboy parser test file. It is sample upload content.
info ~~warn~~ → info by review encoding-base64 test/busboy/test-parser.js:478:1

base64-like blob (2400 bytes over 32 lines, compression ratio 0.70) (raw pass, confidence 0.60)
```
        `
LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS03ZDkxYjAzYTIwMTI4DQpDb250ZW50LURpc3Bv
c2l0aW9uOiBmb3JtLWRhdGE7IG5hbWU9ImZpbGUxIjsgZmlsZW5hbWU9IkM6XFB5dGhvbjI1XHd6
dGVzdFx3ZXJremV1Zy1tYWluXHRlc3RzXG11bHRpcGFydFxmaXJlZm94My0ycG5nMXR4dFxmaWxl
```
likely benign LLM, confidence 0.95 Base64-encoded multipart upload fixture with a Windows filename, used in busboy tests.
Reasoning
Base64 that decodes to multipart boundary and Content-Disposition headers with a Windows file path, typical of a multipart test fixture recorded from a real browser upload. No execution or decoding logic is present.
info ~~warn~~ → info by review encoding-base64 test/busboy/test-parser.js:518:1

base64-like blob (700 bytes over 10 lines, compression ratio 0.79) (raw pass, confidence 0.60)
```
                `
iVBORw0KGgoAAAANSUhEUgAAABAAAAAQCAYAAAAf8/9hAAAABGdBTUEAAK/INwWK6QAAABl0RVh0
U29mdHdhcmUAQWRvYmUgSW1hZ2VSZWFkeXHJZTwAAAGdSURBVDjLpVMxa8JAFL6rAQUHXQoZpLU/
oUOnDtKtW/MDBFHHThUKTgrqICgOEtd2EVxb2qFkKTgVChbSCnZTiVBEMBRLiEmafleCDaWxDX3w
```
likely benign LLM, confidence 0.95 Base64-encoded PNG image fixture in a busboy multipart test.
Reasoning
Repeat of the base64 PNG fixture (identical leading bytes to the earlier finding at line 171) in the busboy test file. Sample test data.
info ~~warn~~ → info by review encoding-base64 test/busboy/test-parser.js:535:1

base64-like blob (940 bytes over 13 lines, compression ratio 0.79) (raw pass, confidence 0.60)
```
                `
iVBORw0KGgoAAAANSUhEUgAAABAAAAAQCAYAAAAf8/9hAAAABGdBTUEAAK/INwWK6QAAABl0RVh0
U29mdHdhcmUAQWRvYmUgSW1hZ2VSZWFkeXHJZTwAAAJRSURBVBgZpcHda81xHMDx9+d3fudYzuYw
2RaZ5yTWolEiuZpCSjGJFEktUUr8A6ZxQZGHmDtqdrGUXHgoeZqSp1F2bLFWjtkOB8PZzvmd7+dj
```
likely benign LLM, confidence 0.95 Base64-encoded PNG image fixture in a busboy multipart test.
Reasoning
Duplicate of the base64 PNG fixture pattern seen at line 188, in the same busboy test file. Test data, not an obfuscated payload.
info ~~warn~~ → info by review encoding-base64 test/fetch/integrity.js:25:17

base64-like blob (44 bytes, compression ratio 1.25) (raw pass, confidence 0.60)
```
  const body = 'Hello world!'
  const hash = 'wFNeS+K3n/2TKRMFQ2v4iTFOSj+uwF7P/Lt98xrZ5Ro='

  const server = createServer({ joinDuplicateHeaders: true }, (req, res) => {
```
likely benign LLM, confidence 0.97 A base64 SHA-256 integrity hash constant in a fetch test.
Reasoning
Raw base64 match on a SHA-256 digest literal used as a Subresource Integrity hash in an undici test file. Expected test data, not obfuscation.
info ~~warn~~ → info by review encoding-base64 test/fetch/integrity.js:63:17

base64-like blob (44 bytes, compression ratio 1.25) (raw pass, confidence 0.60)
```
  const body = 'Hello world!'
  const hash = 'wFNeS+K3n/2TKRMFQ2v4iTFOSj+uwF7P/Lt98xrZ5Ro='

  const server = createServer({ joinDuplicateHeaders: true }, (req, res) => {
```
likely benign LLM, confidence 0.97 Repeated base64 integrity hash in fetch test.
Reasoning
Same SHA-256 integrity digest constant of 'Hello world!' reused in a test; legitimate test fixture.
info ~~warn~~ → info by review encoding-base64 test/fetch/integrity.js:94:17

base64-like blob (44 bytes, compression ratio 1.25) (raw pass, confidence 0.60)
```
  const body = 'Hello world!'
  const hash = 'wFNeS+K3n/2TKRMFQ2v4iTFOSj+uwF7P/Lt98xrZ5Ro='

  const server = createServer({ joinDuplicateHeaders: true }, (req, res) => {
```
likely benign LLM, confidence 0.97 Repeated base64 integrity hash in fetch test.
Reasoning
Same SHA-256 integrity digest fixture in a test file; no decoding or execution.
info ~~warn~~ → info by review encoding-base64 test/fetch/integrity.js:110:17

base64-like blob (64 bytes, compression ratio 1.17) (raw pass, confidence 0.60)
```
  const body = 'Hello world!'
  const hash = 'hiVfosNuSzCWnq4X3DTHcsvr38WLWEA5AL6HYU6xo0uHgCY/JV615lypu7hkHMz+'

  const server = createServer({ joinDuplicateHeaders: true }, (req, res) => {
```
likely benign LLM, confidence 0.97 Base64 SHA-384 integrity digest in a fetch test.
Reasoning
SHA-384 digest of the known test body used for Subresource Integrity checks; benign.
info ~~warn~~ → info by review encoding-base64 test/fetch/integrity.js:126:24

base64-like blob (44 bytes, compression ratio 1.25) (raw pass, confidence 0.60)
```
  await t.assert.rejects(fetch(`http://localhost:${server.address().port}`, {
    integrity: 'sha384-ypeBEsobvcr6wjGzmiPcTaeG7/gUfE5yuYB3ha/uSLs='
  }))
})
```
likely benign LLM, confidence 0.96 Intentionally mismatched sha384 integrity value in a rejection test.
Reasoning
Integrity string 'sha384-...' passed to fetch in a rejection test; a deliberately invalid hash fixture, benign.
info ~~warn~~ → info by review encoding-base64 test/fetch/integrity.js:132:17

base64-like blob (88 bytes, compression ratio 1.12) (raw pass, confidence 0.60)
```
  const body = 'Hello world!'
  const hash = '9s3ioPgZMUzd5V/CJ9jX2uPSjMVWIioKitZtkcytSq1glPUXohgjYMmqz2o9wyMWLLb9jN/+2w/gOPVehf+1tg=='

  const server = createServer({ joinDuplicateHeaders: true }, (req, res) => {
```
likely benign LLM, confidence 0.96 Base64 SHA-512 integrity digest in a fetch test.
Reasoning
SHA-512 digest fixture of the test body for integrity verification; benign.
info ~~warn~~ → info by review encoding-base64 test/fetch/integrity.js:148:24

base64-like blob (44 bytes, compression ratio 1.25) (raw pass, confidence 0.60)
```
  await t.assert.rejects(fetch(`http://localhost:${server.address().port}`, {
    integrity: 'sha512-ypeBEsobvcr6wjGzmiPcTaeG7/gUfE5yuYB3ha/uSLs='
  }))
})
```
likely benign LLM, confidence 0.96 Mismatched sha512 integrity value in a rejection test.
Reasoning
Intentionally wrong sha512 integrity string in a rejection test; benign test data.
info ~~warn~~ → info by review encoding-base64 test/fetch/integrity.js:154:20

base64-like blob (64 bytes, compression ratio 1.17) (raw pass, confidence 0.60)
```
  const body = 'Hello world!'
  const hash384 = 'hiVfosNuSzCWnq4X3DTHcsvr38WLWEA5AL6HYU6xo0uHgCY/JV615lypu7hkHMz+'

  const server = createServer({ joinDuplicateHeaders: true }, (req, res) => {
```
likely benign LLM, confidence 0.96 Base64 SHA-384 digest constant in a fetch test.
Reasoning
SHA-384 digest constant used in integrity tests; legitimate fixture.
info ~~warn~~ → info by review encoding-base64 test/fetch/integrity.js:244:19

base64-like blob (44 bytes, compression ratio 1.25) (raw pass, confidence 0.60)
```
  const body = 'Hello world!'
  const sha256 = 'wFNeS+K3n/2TKRMFQ2v4iTFOSj+uwF7P/Lt98xrZ5Ro='
  const sha384 = 'ä'
```
likely benign LLM, confidence 0.95 Integrity digest constants in a fetch test, with a deliberately odd value.
Reasoning
SHA-256 digest fixture alongside other integrity hashes in a test; the non-ASCII 'ä' is a deliberate invalid-hash test value, not a hidden payload.
info ~~warn~~ → info by review encoding-base64 test/fetch/integrity.js:265:19

base64-like blob (44 bytes, compression ratio 1.25) (raw pass, confidence 0.60)
```
  const body = 'Hello world!'
  const sha256 = 'wFNeS+K3n/2TKRMFQ2v4iTFOSj+uwF7P/Lt98xrZ5Ro='
  const sha384 = 'hiVfosNuSzCWnq4X3DTHcsvr38WLWEA5AL6HYU6xo0uHgCY/JV615lypu7hkHMz+'
  const sha512 = '9s3ioPgZMUzd5V/CJ9jX2uPSjMVWIioKitZtkcytSq1glPUXohgjYMmqz2o9wyMWLLb9jN/+2w/gOPVehf+1tg=='
```
likely benign LLM, confidence 0.96 Set of base64 integrity digests in a fetch test.
Reasoning
Group of SHA-256/384/512 digest constants for the same test body; standard test fixtures.
info ~~warn~~ → info by review encoding-base64 test/fetch/integrity.js:266:19

base64-like blob (64 bytes, compression ratio 1.17) (raw pass, confidence 0.60)
```
  const sha256 = 'wFNeS+K3n/2TKRMFQ2v4iTFOSj+uwF7P/Lt98xrZ5Ro='
  const sha384 = 'hiVfosNuSzCWnq4X3DTHcsvr38WLWEA5AL6HYU6xo0uHgCY/JV615lypu7hkHMz+'
  const sha512 = '9s3ioPgZMUzd5V/CJ9jX2uPSjMVWIioKitZtkcytSq1glPUXohgjYMmqz2o9wyMWLLb9jN/+2w/gOPVehf+1tg=='
```
likely benign LLM, confidence 0.96 Base64 integrity digest constants in a fetch test.
Reasoning
Same SHA-384/512 digest fixtures in a test file; benign.

info ~~warn~~ → info by review encoding-base64 test/fetch/integrity.js:267:19

base64-like blob (88 bytes, compression ratio 1.12) (raw pass, confidence 0.60)

  const sha384 = 'hiVfosNuSzCWnq4X3DTHcsvr38WLWEA5AL6HYU6xo0uHgCY/JV615lypu7hkHMz+'
  const sha512 = '9s3ioPgZMUzd5V/CJ9jX2uPSjMVWIioKitZtkcytSq1glPUXohgjYMmqz2o9wyMWLLb9jN/+2w/gOPVehf+1tg=='

  const server = createServer({ joinDuplicateHeaders: true }, (req, res) => {

likely benign LLM, confidence 0.96 Base64 SHA-512 digest constant in a fetch test.

Reasoning

SHA-512 digest fixture for integrity tests; benign.

info ~~critical~~ → info by review proxy-global-hijack test/install.js:13:27

`new Proxy(globalThis, ...)` interposes on a global object — every property read goes through the handler (ast pass, confidence 0.90)
```
  // and no other properties are added to globalThis by undici.install().
  const proxyGlobalThis = new Proxy(globalThis, {
    set (target, prop, value) {
      if (exportsToCheck.has(prop)) {
```
likely benign LLM, confidence 0.85 Test-side Proxy over globalThis that monitors property sets to check for unwanted global additions.
Reasoning
Test for undici.install() checks that globalThis is not polluted; the Proxy is a test-side observer that records set attempts to verify no unexpected globals are added. Proxying globalThis is unusual and warrants the critical flag, but here it is a verification harness in a test file, not a payload.
info ~~warn~~ → info by review encoding-base64 test/subresource-integrity/apply-algorithm-to-bytes.js:12:20

base64-like blob (44 bytes, compression ratio 1.25) (raw pass, confidence 0.60)
```
  /* Hash values generated with for "Hello world!" */
  const hash256 = 'wFNeS+K3n/2TKRMFQ2v4iTFOSj+uwF7P/Lt98xrZ5Ro='
  const hash384 = 'hiVfosNuSzCWnq4X3DTHcsvr38WLWEA5AL6HYU6xo0uHgCY/JV615lypu7hkHMz+'
  const hash512 = '9s3ioPgZMUzd5V/CJ9jX2uPSjMVWIioKitZtkcytSq1glPUXohgjYMmqz2o9wyMWLLb9jN/+2w/gOPVehf+1tg=='
```
likely benign LLM, confidence 0.97 Precomputed SHA-256 digest literal in a test for hashing bytes.
Reasoning
Comment states these are hash values generated for 'Hello world!'; base64 digests in a test for SRI algorithms are expected.
info ~~warn~~ → info by review encoding-base64 test/subresource-integrity/apply-algorithm-to-bytes.js:13:20

base64-like blob (64 bytes, compression ratio 1.17) (raw pass, confidence 0.60)
```
  const hash256 = 'wFNeS+K3n/2TKRMFQ2v4iTFOSj+uwF7P/Lt98xrZ5Ro='
  const hash384 = 'hiVfosNuSzCWnq4X3DTHcsvr38WLWEA5AL6HYU6xo0uHgCY/JV615lypu7hkHMz+'
  const hash512 = '9s3ioPgZMUzd5V/CJ9jX2uPSjMVWIioKitZtkcytSq1glPUXohgjYMmqz2o9wyMWLLb9jN/+2w/gOPVehf+1tg=='
```
likely benign LLM, confidence 0.97 Precomputed SHA-384 digest literal in an SRI test.
Reasoning
Precomputed SHA-384 digest of a known test string in a test file; legitimate test fixture.
info ~~warn~~ → info by review encoding-base64 test/subresource-integrity/apply-algorithm-to-bytes.js:14:20

base64-like blob (88 bytes, compression ratio 1.12) (raw pass, confidence 0.60)
```
  const hash384 = 'hiVfosNuSzCWnq4X3DTHcsvr38WLWEA5AL6HYU6xo0uHgCY/JV615lypu7hkHMz+'
  const hash512 = '9s3ioPgZMUzd5V/CJ9jX2uPSjMVWIioKitZtkcytSq1glPUXohgjYMmqz2o9wyMWLLb9jN/+2w/gOPVehf+1tg=='

  test('valid sha256', { skip }, (t) => {
```
likely benign LLM, confidence 0.97 Precomputed SHA-512 digest literal in an SRI test.
Reasoning
Precomputed SHA-512 digest literal in a test file, consistent with expected test vectors.
info ~~warn~~ → info by review encoding-base64 test/subresource-integrity/case-sensitive-match.js:15:26

base64-like blob (44 bytes, compression ratio 1.25) (raw pass, confidence 0.60)
```
  test('identical strings, actualValue has one padding char', (t) => {
    const actualValue = 'ypeBEsobvcr6wjGzmiPcTaeG7/gUfE5yuYB3ha/uSLs='
    const expectedValue = 'ypeBEsobvcr6wjGzmiPcTaeG7/gUfE5yuYB3ha/uSLs'
    t.assert.ok(caseSensitiveMatch(actualValue, expectedValue))
```
likely benign LLM, confidence 0.96 Base64 test string with padding for comparison testing.
Reasoning
Base64 string constant used to test case-sensitive string comparison with padding; a test value, not obfuscation.
info ~~warn~~ → info by review encoding-base64 test/subresource-integrity/case-sensitive-match.js:22:28

base64-like blob (44 bytes, compression ratio 1.25) (raw pass, confidence 0.60)
```
    const actualValue = 'ypeBEsobvcr6wjGzmiPcTaeG7/gUfE5yuYB3ha/uSLs'
    const expectedValue = 'ypeBEsobvcr6wjGzmiPcTaeG7/gUfE5yuYB3ha/uSLs='
    t.assert.ok(caseSensitiveMatch(actualValue, expectedValue))
  })
```
likely benign LLM, confidence 0.96 Base64 test string without padding for comparison testing.
Reasoning
Same base64 test vector used in a padding-mismatch comparison test.
info ~~warn~~ → info by review encoding-base64 test/subresource-integrity/case-sensitive-match.js:28:28

base64-like blob (45 bytes, compression ratio 1.24) (raw pass, confidence 0.60)
```
    const actualValue = 'ypeBEsobvcr6wjGzmiPcTaeG7/gUfE5yuYB3ha/uSLs'
    const expectedValue = 'ypeBEsobvcr6wjGzmiPcTaeG7/gUfE5yuYB3ha/uSLs=='
    t.assert.ok(caseSensitiveMatch(actualValue, expectedValue))
  })
```
likely benign LLM, confidence 0.96 Base64 test string with two padding chars for comparison testing.
Reasoning
Base64 test vector with double padding used in a comparison test.
info ~~warn~~ → info by review encoding-base64 test/subresource-integrity/case-sensitive-match.js:33:26

base64-like blob (44 bytes, compression ratio 1.25) (raw pass, confidence 0.60)
```
  test('identical strings, both have one padding char', (t) => {
    const actualValue = 'ypeBEsobvcr6wjGzmiPcTaeG7/gUfE5yuYB3ha/uSLs='
    const expectedValue = 'ypeBEsobvcr6wjGzmiPcTaeG7/gUfE5yuYB3ha/uSLs='
    t.assert.ok(caseSensitiveMatch(actualValue, expectedValue))
```
likely benign LLM, confidence 0.96 Base64 test string for identical-match comparison test.
Reasoning
Identical base64 test vectors in a unit test of string matching; no malicious intent.
info ~~warn~~ → info by review encoding-base64 test/subresource-integrity/case-sensitive-match.js:34:28

base64-like blob (44 bytes, compression ratio 1.25) (raw pass, confidence 0.60)
```
    const actualValue = 'ypeBEsobvcr6wjGzmiPcTaeG7/gUfE5yuYB3ha/uSLs='
    const expectedValue = 'ypeBEsobvcr6wjGzmiPcTaeG7/gUfE5yuYB3ha/uSLs='
    t.assert.ok(caseSensitiveMatch(actualValue, expectedValue))
  })
```
likely benign LLM, confidence 0.96 Base64 test string for identical-match comparison test.
Reasoning
Repeated base64 test vector used in matching assertion; benign test data.
info ~~warn~~ → info by review encoding-base64 test/subresource-integrity/case-sensitive-match.js:39:26

base64-like blob (45 bytes, compression ratio 1.24) (raw pass, confidence 0.60)
```
  test('identical strings, both have two padding chars', (t) => {
    const actualValue = 'ypeBEsobvcr6wjGzmiPcTaeG7/gUfE5yuYB3ha/uSLs=='
    const expectedValue = 'ypeBEsobvcr6wjGzmiPcTaeG7/gUfE5yuYB3ha/uSLs=='
    t.assert.ok(caseSensitiveMatch(actualValue, expectedValue))
```
likely benign LLM, confidence 0.96 Base64 test string with two padding chars for identical-match test.
Reasoning
Base64 double-padded test vector in a matching test; benign fixture data.
info ~~warn~~ → info by review encoding-base64 test/subresource-integrity/case-sensitive-match.js:40:28

base64-like blob (45 bytes, compression ratio 1.24) (raw pass, confidence 0.60)
```
    const actualValue = 'ypeBEsobvcr6wjGzmiPcTaeG7/gUfE5yuYB3ha/uSLs=='
    const expectedValue = 'ypeBEsobvcr6wjGzmiPcTaeG7/gUfE5yuYB3ha/uSLs=='
    t.assert.ok(caseSensitiveMatch(actualValue, expectedValue))
  })
```
dismissed LLM, confidence 0.97 Base64 digest test vector used as a fixed string in a unit test.
Reasoning
Raw pass base64-like detection on a hash string literal in a test of SRI case-sensitive comparison. Hash test vectors are expected in this test file; no decoding or execution involved.
info ~~warn~~ → info by review encoding-base64 test/subresource-integrity/case-sensitive-match.js:45:26

base64-like blob (45 bytes, compression ratio 1.24) (raw pass, confidence 0.60)
```
  test('identical strings, expectedValue has invalid third padding char', (t) => {
    const actualValue = 'ypeBEsobvcr6wjGzmiPcTaeG7/gUfE5yuYB3ha/uSLs=='
    const expectedValue = 'ypeBEsobvcr6wjGzmiPcTaeG7/gUfE5yuYB3ha/uSLs==='
    t.assert.ok(caseSensitiveMatch(actualValue, expectedValue) === false)
```
dismissed LLM, confidence 0.97 Base64 digest fixture in a test that checks invalid padding handling.
Reasoning
Same base64 digest test vector with an intentionally invalid padding char to test rejection. Legitimate test fixture, not obfuscation.
info ~~warn~~ → info by review encoding-base64 test/subresource-integrity/case-sensitive-match.js:46:28

base64-like blob (46 bytes, compression ratio 1.24) (raw pass, confidence 0.60)
```
    const actualValue = 'ypeBEsobvcr6wjGzmiPcTaeG7/gUfE5yuYB3ha/uSLs=='
    const expectedValue = 'ypeBEsobvcr6wjGzmiPcTaeG7/gUfE5yuYB3ha/uSLs==='
    t.assert.ok(caseSensitiveMatch(actualValue, expectedValue) === false)
  })
```
dismissed LLM, confidence 0.97 Base64 digest fixture in a case-sensitivity test assertion.
Reasoning
Repeated digest test vector in a negative-match assertion. Raw pattern match on ordinary test data.
info ~~warn~~ → info by review encoding-base64 test/subresource-integrity/parse-metadata.js:12:20

base64-like blob (44 bytes, compression ratio 1.25) (raw pass, confidence 0.60)
```
  /* Hash values generated with for "Hello world!" */
  const hash256 = 'wFNeS+K3n/2TKRMFQ2v4iTFOSj+uwF7P/Lt98xrZ5Ro='
  const hash384 = 'hiVfosNuSzCWnq4X3DTHcsvr38WLWEA5AL6HYU6xo0uHgCY/JV615lypu7hkHMz+'
  const hash512 = '9s3ioPgZMUzd5V/CJ9jX2uPSjMVWIioKitZtkcytSq1glPUXohgjYMmqz2o9wyMWLLb9jN/+2w/gOPVehf+1tg=='
```
dismissed LLM, confidence 0.97 SHA-256 base64 hash constant documented as a test vector for SRI metadata parsing.
Reasoning
Hash values are explicitly documented in the comment as generated from 'Hello world!', which is typical for SRI parsing test fixtures. Raw pass, low reliability.
info ~~warn~~ → info by review encoding-base64 test/subresource-integrity/parse-metadata.js:13:20

base64-like blob (64 bytes, compression ratio 1.17) (raw pass, confidence 0.60)
```
  const hash256 = 'wFNeS+K3n/2TKRMFQ2v4iTFOSj+uwF7P/Lt98xrZ5Ro='
  const hash384 = 'hiVfosNuSzCWnq4X3DTHcsvr38WLWEA5AL6HYU6xo0uHgCY/JV615lypu7hkHMz+'
  const hash512 = '9s3ioPgZMUzd5V/CJ9jX2uPSjMVWIioKitZtkcytSq1glPUXohgjYMmqz2o9wyMWLLb9jN/+2w/gOPVehf+1tg=='
```
dismissed LLM, confidence 0.97 SHA-384 base64 hash constant used as test data for SRI parsing.
Reasoning
SHA-384 base64 digest constant alongside documented test hashes in an SRI metadata parsing test. Legitimate fixture data.
info ~~warn~~ → info by review encoding-base64 test/subresource-integrity/parse-metadata.js:14:20

base64-like blob (88 bytes, compression ratio 1.12) (raw pass, confidence 0.60)
```
  const hash384 = 'hiVfosNuSzCWnq4X3DTHcsvr38WLWEA5AL6HYU6xo0uHgCY/JV615lypu7hkHMz+'
  const hash512 = '9s3ioPgZMUzd5V/CJ9jX2uPSjMVWIioKitZtkcytSq1glPUXohgjYMmqz2o9wyMWLLb9jN/+2w/gOPVehf+1tg=='

  test('should parse valid metadata with option', { skip }, (t) => {
```
dismissed LLM, confidence 0.97 SHA-512 base64 hash constant used as test data for SRI parsing.
Reasoning
SHA-512 base64 digest constant in the same documented test fixture block. Legitimate test data, not an encoded payload.

info long-line types/index.d.ts:48:1

line length 512 characters (raw pass, confidence 0.50)

export { Dispatcher, BalancedPool, RoundRobinPool, Pool, Client, buildConnector, errors, Agent, Dispatcher1Wrapper, request, stream, pipeline, connect, upgrade, setGlobalDispatcher, getGlobalDispatcher, setGlobalOrigin, getGlobalOrigin, interceptors, cacheStores, MockClient, MockPool, MockAgent, SnapshotAgent, MockCall

Reproduce This Scan

Run disclude locally to verify. Add --format sarif for SARIF output. Add --llm (with an API key in the environment) to include the LLM review.

cargo install disclude --version 4.0.0
git clone https://github.com/nodejs/undici undici && cd undici
git checkout v8.12.2
disclude scan --severity info --diff v8.12.1 .