npm / vitest / 5.1.0-beta.1

vitest 5.1.0-beta.1

Source
https://github.com/vitest-dev/vitest
Artifact scanned
vitest-5.1.0-beta.1.tgz (npm tarball · 699.3 KB · SHA-256 5103900b80da…)
Compared with
vitest-5.0.5.tgz (73 signals introduced since)
Files
104 scanned, 0 skipped (binary, oversized, or unrecognised)
Signals
0 critical · 0 warn · 125 info
Scan time
14.4 s
LLM review
Reviewed by claude-haiku-5-5 (Anthropic): 15 of 15 warn and critical signals; 15 demoted to info.
Disclude version
4.3.0
Scanned (UTC)
2026-10-24 00:00

Signals

Ordered by severity, then signals introduced in this release. Hidden characters are shown as ⟨U+…⟩.

  1. info long-line dist/chunks/cli-api.DE22LIzq.js:4:1 new in this release

    line length 943 characters (raw pass, confidence 0.50)

    import { o as parse, s as stringify, k as isFileServingAllowed, q as getSpecificationDocblock, t as resolveStaticMocks, u as getStaticMocks, f as createDebugger, v as hash, w as resolveCoverageReporters, x as createIndexLocationsMap, y as getOutputFile, z as groupBy, A as generateCodeFrame, C as printStack, R as RangeL
  2. info unicode-surrogate dist/chunks/cli-api.DE22LIzq.js:9924:87 new in this release

    orphaned high surrogate \uD83F (no matching low surrogate) (token pass, confidence 0.65)

    \\x84]|[\\x86-\\x9F]|[\\uFDD0-\\uFDEF]|\\uD83F[\\uDFFE\\uDFFF]|(?:\\uD87F[\\uDFFE\\uDFFF])|\\uD8BF[\\uDFFE\\uDFFF]|\\uD8FF[\\uDFFE\\uDFFF]|(?:\\uD93F[\\uDFFE\\uDFFF])|\\uD97F[\\uDFFE\\uDFFF]|\\uD9BF[\\uDFFE\\uDFFF]|\\uD9FF[\\uDFFE\\uDFFF]|\\uDA3F[\\uDFFE\\uDFFF]|\\uDA7F[\\uDFFE\\uDFFF]|\\uDABF[\\uDFFE\\uDFFF]|(?:\\uDAF
  3. info unicode-surrogate dist/chunks/cli-api.DE22LIzq.js:9924:95 new in this release

    orphaned low surrogate \uDFFE (no preceding high surrogate) (token pass, confidence 0.65)

    \\x86-\\x9F]|[\\uFDD0-\\uFDEF]|\\uD83F[\\uDFFE\\uDFFF]|(?:\\uD87F[\\uDFFE\\uDFFF])|\\uD8BF[\\uDFFE\\uDFFF]|\\uD8FF[\\uDFFE\\uDFFF]|(?:\\uD93F[\\uDFFE\\uDFFF])|\\uD97F[\\uDFFE\\uDFFF]|\\uD9BF[\\uDFFE\\uDFFF]|\\uD9FF[\\uDFFE\\uDFFF]|\\uDA3F[\\uDFFE\\uDFFF]|\\uDA7F[\\uDFFE\\uDFFF]|\\uDABF[\\uDFFE\\uDFFF]|(?:\\uDAFF[\\uDFF
  4. info unicode-surrogate dist/chunks/cli-api.DE22LIzq.js:9924:102 new in this release

    orphaned low surrogate \uDFFF (no preceding high surrogate) (token pass, confidence 0.65)

    \x9F]|[\\uFDD0-\\uFDEF]|\\uD83F[\\uDFFE\\uDFFF]|(?:\\uD87F[\\uDFFE\\uDFFF])|\\uD8BF[\\uDFFE\\uDFFF]|\\uD8FF[\\uDFFE\\uDFFF]|(?:\\uD93F[\\uDFFE\\uDFFF])|\\uD97F[\\uDFFE\\uDFFF]|\\uD9BF[\\uDFFE\\uDFFF]|\\uD9FF[\\uDFFE\\uDFFF]|\\uDA3F[\\uDFFE\\uDFFF]|\\uDA7F[\\uDFFE\\uDFFF]|\\uDABF[\\uDFFE\\uDFFF]|(?:\\uDAFF[\\uDFFE\\uDFF
  5. info unicode-surrogate dist/chunks/cli-api.DE22LIzq.js:9924:114 new in this release

    orphaned high surrogate \uD87F (no matching low surrogate) (token pass, confidence 0.65)

    D0-\\uFDEF]|\\uD83F[\\uDFFE\\uDFFF]|(?:\\uD87F[\\uDFFE\\uDFFF])|\\uD8BF[\\uDFFE\\uDFFF]|\\uD8FF[\\uDFFE\\uDFFF]|(?:\\uD93F[\\uDFFE\\uDFFF])|\\uD97F[\\uDFFE\\uDFFF]|\\uD9BF[\\uDFFE\\uDFFF]|\\uD9FF[\\uDFFE\\uDFFF]|\\uDA3F[\\uDFFE\\uDFFF]|\\uDA7F[\\uDFFE\\uDFFF]|\\uDABF[\\uDFFE\\uDFFF]|(?:\\uDAFF[\\uDFFE\\uDFFF])|\\uDB3F[
  6. info unicode-surrogate dist/chunks/cli-api.DE22LIzq.js:9924:122 new in this release

    orphaned low surrogate \uDFFE (no preceding high surrogate) (token pass, confidence 0.65)

    EF]|\\uD83F[\\uDFFE\\uDFFF]|(?:\\uD87F[\\uDFFE\\uDFFF])|\\uD8BF[\\uDFFE\\uDFFF]|\\uD8FF[\\uDFFE\\uDFFF]|(?:\\uD93F[\\uDFFE\\uDFFF])|\\uD97F[\\uDFFE\\uDFFF]|\\uD9BF[\\uDFFE\\uDFFF]|\\uD9FF[\\uDFFE\\uDFFF]|\\uDA3F[\\uDFFE\\uDFFF]|\\uDA7F[\\uDFFE\\uDFFF]|\\uDABF[\\uDFFE\\uDFFF]|(?:\\uDAFF[\\uDFFE\\uDFFF])|\\uDB3F[\\uDFFE\
  7. info unicode-surrogate dist/chunks/cli-api.DE22LIzq.js:9924:129 new in this release

    orphaned low surrogate \uDFFF (no preceding high surrogate) (token pass, confidence 0.65)

    D83F[\\uDFFE\\uDFFF]|(?:\\uD87F[\\uDFFE\\uDFFF])|\\uD8BF[\\uDFFE\\uDFFF]|\\uD8FF[\\uDFFE\\uDFFF]|(?:\\uD93F[\\uDFFE\\uDFFF])|\\uD97F[\\uDFFE\\uDFFF]|\\uD9BF[\\uDFFE\\uDFFF]|\\uD9FF[\\uDFFE\\uDFFF]|\\uDA3F[\\uDFFE\\uDFFF]|\\uDA7F[\\uDFFE\\uDFFF]|\\uDABF[\\uDFFE\\uDFFF]|(?:\\uDAFF[\\uDFFE\\uDFFF])|\\uDB3F[\\uDFFE\\uDFFF]
  8. info unicode-surrogate dist/chunks/cli-api.DE22LIzq.js:9924:139 new in this release

    orphaned high surrogate \uD8BF (no matching low surrogate) (token pass, confidence 0.65)

    FE\\uDFFF]|(?:\\uD87F[\\uDFFE\\uDFFF])|\\uD8BF[\\uDFFE\\uDFFF]|\\uD8FF[\\uDFFE\\uDFFF]|(?:\\uD93F[\\uDFFE\\uDFFF])|\\uD97F[\\uDFFE\\uDFFF]|\\uD9BF[\\uDFFE\\uDFFF]|\\uD9FF[\\uDFFE\\uDFFF]|\\uDA3F[\\uDFFE\\uDFFF]|\\uDA7F[\\uDFFE\\uDFFF]|\\uDABF[\\uDFFE\\uDFFF]|(?:\\uDAFF[\\uDFFE\\uDFFF])|\\uDB3F[\\uDFFE\\uDFFF]|\\uDB7F[\
  9. info unicode-surrogate dist/chunks/cli-api.DE22LIzq.js:9924:147 new in this release

    orphaned low surrogate \uDFFE (no preceding high surrogate) (token pass, confidence 0.65)

    F]|(?:\\uD87F[\\uDFFE\\uDFFF])|\\uD8BF[\\uDFFE\\uDFFF]|\\uD8FF[\\uDFFE\\uDFFF]|(?:\\uD93F[\\uDFFE\\uDFFF])|\\uD97F[\\uDFFE\\uDFFF]|\\uD9BF[\\uDFFE\\uDFFF]|\\uD9FF[\\uDFFE\\uDFFF]|\\uDA3F[\\uDFFE\\uDFFF]|\\uDA7F[\\uDFFE\\uDFFF]|\\uDABF[\\uDFFE\\uDFFF]|(?:\\uDAFF[\\uDFFE\\uDFFF])|\\uDB3F[\\uDFFE\\uDFFF]|\\uDB7F[\\uDFFE\\
  10. info unicode-surrogate dist/chunks/cli-api.DE22LIzq.js:9924:154 new in this release

    orphaned low surrogate \uDFFF (no preceding high surrogate) (token pass, confidence 0.65)

    \uD87F[\\uDFFE\\uDFFF])|\\uD8BF[\\uDFFE\\uDFFF]|\\uD8FF[\\uDFFE\\uDFFF]|(?:\\uD93F[\\uDFFE\\uDFFF])|\\uD97F[\\uDFFE\\uDFFF]|\\uD9BF[\\uDFFE\\uDFFF]|\\uD9FF[\\uDFFE\\uDFFF]|\\uDA3F[\\uDFFE\\uDFFF]|\\uDA7F[\\uDFFE\\uDFFF]|\\uDABF[\\uDFFE\\uDFFF]|(?:\\uDAFF[\\uDFFE\\uDFFF])|\\uDB3F[\\uDFFE\\uDFFF]|\\uDB7F[\\uDFFE\\uDFFF]|
  11. info unicode-surrogate dist/chunks/cli-api.DE22LIzq.js:9924:163 new in this release

    orphaned high surrogate \uD8FF (no matching low surrogate) (token pass, confidence 0.65)

    uDFFE\\uDFFF])|\\uD8BF[\\uDFFE\\uDFFF]|\\uD8FF[\\uDFFE\\uDFFF]|(?:\\uD93F[\\uDFFE\\uDFFF])|\\uD97F[\\uDFFE\\uDFFF]|\\uD9BF[\\uDFFE\\uDFFF]|\\uD9FF[\\uDFFE\\uDFFF]|\\uDA3F[\\uDFFE\\uDFFF]|\\uDA7F[\\uDFFE\\uDFFF]|\\uDABF[\\uDFFE\\uDFFF]|(?:\\uDAFF[\\uDFFE\\uDFFF])|\\uDB3F[\\uDFFE\\uDFFF]|\\uDB7F[\\uDFFE\\uDFFF]|(?:\\uDBB
  12. info unicode-surrogate dist/chunks/cli-api.DE22LIzq.js:9924:171 new in this release

    orphaned low surrogate \uDFFE (no preceding high surrogate) (token pass, confidence 0.65)

    DFFF])|\\uD8BF[\\uDFFE\\uDFFF]|\\uD8FF[\\uDFFE\\uDFFF]|(?:\\uD93F[\\uDFFE\\uDFFF])|\\uD97F[\\uDFFE\\uDFFF]|\\uD9BF[\\uDFFE\\uDFFF]|\\uD9FF[\\uDFFE\\uDFFF]|\\uDA3F[\\uDFFE\\uDFFF]|\\uDA7F[\\uDFFE\\uDFFF]|\\uDABF[\\uDFFE\\uDFFF]|(?:\\uDAFF[\\uDFFE\\uDFFF])|\\uDB3F[\\uDFFE\\uDFFF]|\\uDB7F[\\uDFFE\\uDFFF]|(?:\\uDBBF[\\uDFF
  13. info unicode-surrogate dist/chunks/cli-api.DE22LIzq.js:9924:178 new in this release

    orphaned low surrogate \uDFFF (no preceding high surrogate) (token pass, confidence 0.65)

    \\uD8BF[\\uDFFE\\uDFFF]|\\uD8FF[\\uDFFE\\uDFFF]|(?:\\uD93F[\\uDFFE\\uDFFF])|\\uD97F[\\uDFFE\\uDFFF]|\\uD9BF[\\uDFFE\\uDFFF]|\\uD9FF[\\uDFFE\\uDFFF]|\\uDA3F[\\uDFFE\\uDFFF]|\\uDA7F[\\uDFFE\\uDFFF]|\\uDABF[\\uDFFE\\uDFFF]|(?:\\uDAFF[\\uDFFE\\uDFFF])|\\uDB3F[\\uDFFE\\uDFFF]|\\uDB7F[\\uDFFE\\uDFFF]|(?:\\uDBBF[\\uDFFE\\uDFF
  14. info unicode-surrogate dist/chunks/cli-api.DE22LIzq.js:9924:190 new in this release

    orphaned high surrogate \uD93F (no matching low surrogate) (token pass, confidence 0.65)

    FFE\\uDFFF]|\\uD8FF[\\uDFFE\\uDFFF]|(?:\\uD93F[\\uDFFE\\uDFFF])|\\uD97F[\\uDFFE\\uDFFF]|\\uD9BF[\\uDFFE\\uDFFF]|\\uD9FF[\\uDFFE\\uDFFF]|\\uDA3F[\\uDFFE\\uDFFF]|\\uDA7F[\\uDFFE\\uDFFF]|\\uDABF[\\uDFFE\\uDFFF]|(?:\\uDAFF[\\uDFFE\\uDFFF])|\\uDB3F[\\uDFFE\\uDFFF]|\\uDB7F[\\uDFFE\\uDFFF]|(?:\\uDBBF[\\uDFFE\\uDFFF])|\\uDBFF[
  15. info unicode-surrogate dist/chunks/cli-api.DE22LIzq.js:9924:198 new in this release

    orphaned low surrogate \uDFFE (no preceding high surrogate) (token pass, confidence 0.65)

    FF]|\\uD8FF[\\uDFFE\\uDFFF]|(?:\\uD93F[\\uDFFE\\uDFFF])|\\uD97F[\\uDFFE\\uDFFF]|\\uD9BF[\\uDFFE\\uDFFF]|\\uD9FF[\\uDFFE\\uDFFF]|\\uDA3F[\\uDFFE\\uDFFF]|\\uDA7F[\\uDFFE\\uDFFF]|\\uDABF[\\uDFFE\\uDFFF]|(?:\\uDAFF[\\uDFFE\\uDFFF])|\\uDB3F[\\uDFFE\\uDFFF]|\\uDB7F[\\uDFFE\\uDFFF]|(?:\\uDBBF[\\uDFFE\\uDFFF])|\\uDBFF[\\uDFFE\
  16. info unicode-surrogate dist/chunks/cli-api.DE22LIzq.js:9924:205 new in this release

    orphaned low surrogate \uDFFF (no preceding high surrogate) (token pass, confidence 0.65)

    D8FF[\\uDFFE\\uDFFF]|(?:\\uD93F[\\uDFFE\\uDFFF])|\\uD97F[\\uDFFE\\uDFFF]|\\uD9BF[\\uDFFE\\uDFFF]|\\uD9FF[\\uDFFE\\uDFFF]|\\uDA3F[\\uDFFE\\uDFFF]|\\uDA7F[\\uDFFE\\uDFFF]|\\uDABF[\\uDFFE\\uDFFF]|(?:\\uDAFF[\\uDFFE\\uDFFF])|\\uDB3F[\\uDFFE\\uDFFF]|\\uDB7F[\\uDFFE\\uDFFF]|(?:\\uDBBF[\\uDFFE\\uDFFF])|\\uDBFF[\\uDFFE\\uDFFF]
  17. info unicode-surrogate dist/chunks/cli-api.DE22LIzq.js:9924:215 new in this release

    orphaned high surrogate \uD97F (no matching low surrogate) (token pass, confidence 0.65)

    FE\\uDFFF]|(?:\\uD93F[\\uDFFE\\uDFFF])|\\uD97F[\\uDFFE\\uDFFF]|\\uD9BF[\\uDFFE\\uDFFF]|\\uD9FF[\\uDFFE\\uDFFF]|\\uDA3F[\\uDFFE\\uDFFF]|\\uDA7F[\\uDFFE\\uDFFF]|\\uDABF[\\uDFFE\\uDFFF]|(?:\\uDAFF[\\uDFFE\\uDFFF])|\\uDB3F[\\uDFFE\\uDFFF]|\\uDB7F[\\uDFFE\\uDFFF]|(?:\\uDBBF[\\uDFFE\\uDFFF])|\\uDBFF[\\uDFFE\\uDFFF](?:[\\0-\\
  18. info unicode-surrogate dist/chunks/cli-api.DE22LIzq.js:9924:223 new in this release

    orphaned low surrogate \uDFFE (no preceding high surrogate) (token pass, confidence 0.65)

    F]|(?:\\uD93F[\\uDFFE\\uDFFF])|\\uD97F[\\uDFFE\\uDFFF]|\\uD9BF[\\uDFFE\\uDFFF]|\\uD9FF[\\uDFFE\\uDFFF]|\\uDA3F[\\uDFFE\\uDFFF]|\\uDA7F[\\uDFFE\\uDFFF]|\\uDABF[\\uDFFE\\uDFFF]|(?:\\uDAFF[\\uDFFE\\uDFFF])|\\uDB3F[\\uDFFE\\uDFFF]|\\uDB7F[\\uDFFE\\uDFFF]|(?:\\uDBBF[\\uDFFE\\uDFFF])|\\uDBFF[\\uDFFE\\uDFFF](?:[\\0-\\t\\v\\f\
  19. info unicode-surrogate dist/chunks/cli-api.DE22LIzq.js:9924:230 new in this release

    orphaned low surrogate \uDFFF (no preceding high surrogate) (token pass, confidence 0.65)

    \uD93F[\\uDFFE\\uDFFF])|\\uD97F[\\uDFFE\\uDFFF]|\\uD9BF[\\uDFFE\\uDFFF]|\\uD9FF[\\uDFFE\\uDFFF]|\\uDA3F[\\uDFFE\\uDFFF]|\\uDA7F[\\uDFFE\\uDFFF]|\\uDABF[\\uDFFE\\uDFFF]|(?:\\uDAFF[\\uDFFE\\uDFFF])|\\uDB3F[\\uDFFE\\uDFFF]|\\uDB7F[\\uDFFE\\uDFFF]|(?:\\uDBBF[\\uDFFE\\uDFFF])|\\uDBFF[\\uDFFE\\uDFFF](?:[\\0-\\t\\v\\f\\x0E-\\
  20. info unicode-surrogate dist/chunks/cli-api.DE22LIzq.js:9924:239 new in this release

    orphaned high surrogate \uD9BF (no matching low surrogate) (token pass, confidence 0.65)

    uDFFE\\uDFFF])|\\uD97F[\\uDFFE\\uDFFF]|\\uD9BF[\\uDFFE\\uDFFF]|\\uD9FF[\\uDFFE\\uDFFF]|\\uDA3F[\\uDFFE\\uDFFF]|\\uDA7F[\\uDFFE\\uDFFF]|\\uDABF[\\uDFFE\\uDFFF]|(?:\\uDAFF[\\uDFFE\\uDFFF])|\\uDB3F[\\uDFFE\\uDFFF]|\\uDB7F[\\uDFFE\\uDFFF]|(?:\\uDBBF[\\uDFFE\\uDFFF])|\\uDBFF[\\uDFFE\\uDFFF](?:[\\0-\\t\\v\\f\\x0E-\\u2027\\u2
  21. info unicode-surrogate dist/chunks/cli-api.DE22LIzq.js:9924:247 new in this release

    orphaned low surrogate \uDFFE (no preceding high surrogate) (token pass, confidence 0.65)

    DFFF])|\\uD97F[\\uDFFE\\uDFFF]|\\uD9BF[\\uDFFE\\uDFFF]|\\uD9FF[\\uDFFE\\uDFFF]|\\uDA3F[\\uDFFE\\uDFFF]|\\uDA7F[\\uDFFE\\uDFFF]|\\uDABF[\\uDFFE\\uDFFF]|(?:\\uDAFF[\\uDFFE\\uDFFF])|\\uDB3F[\\uDFFE\\uDFFF]|\\uDB7F[\\uDFFE\\uDFFF]|(?:\\uDBBF[\\uDFFE\\uDFFF])|\\uDBFF[\\uDFFE\\uDFFF](?:[\\0-\\t\\v\\f\\x0E-\\u2027\\u202A-\\uD
  22. info unicode-surrogate dist/chunks/cli-api.DE22LIzq.js:9924:254 new in this release

    orphaned low surrogate \uDFFF (no preceding high surrogate) (token pass, confidence 0.65)

    \\uD97F[\\uDFFE\\uDFFF]|\\uD9BF[\\uDFFE\\uDFFF]|\\uD9FF[\\uDFFE\\uDFFF]|\\uDA3F[\\uDFFE\\uDFFF]|\\uDA7F[\\uDFFE\\uDFFF]|\\uDABF[\\uDFFE\\uDFFF]|(?:\\uDAFF[\\uDFFE\\uDFFF])|\\uDB3F[\\uDFFE\\uDFFF]|\\uDB7F[\\uDFFE\\uDFFF]|(?:\\uDBBF[\\uDFFE\\uDFFF])|\\uDBFF[\\uDFFE\\uDFFF](?:[\\0-\\t\\v\\f\\x0E-\\u2027\\u202A-\\uD7FF\\uE
  23. info unicode-surrogate dist/chunks/cli-api.DE22LIzq.js:9924:263 new in this release

    orphaned high surrogate \uD9FF (no matching low surrogate) (token pass, confidence 0.65)

    \uDFFE\\uDFFF]|\\uD9BF[\\uDFFE\\uDFFF]|\\uD9FF[\\uDFFE\\uDFFF]|\\uDA3F[\\uDFFE\\uDFFF]|\\uDA7F[\\uDFFE\\uDFFF]|\\uDABF[\\uDFFE\\uDFFF]|(?:\\uDAFF[\\uDFFE\\uDFFF])|\\uDB3F[\\uDFFE\\uDFFF]|\\uDB7F[\\uDFFE\\uDFFF]|(?:\\uDBBF[\\uDFFE\\uDFFF])|\\uDBFF[\\uDFFE\\uDFFF](?:[\\0-\\t\\v\\f\\x0E-\\u2027\\u202A-\\uD7FF\\uE000-\\uFF
  24. info unicode-surrogate dist/chunks/cli-api.DE22LIzq.js:9924:271 new in this release

    orphaned low surrogate \uDFFE (no preceding high surrogate) (token pass, confidence 0.65)

    uDFFF]|\\uD9BF[\\uDFFE\\uDFFF]|\\uD9FF[\\uDFFE\\uDFFF]|\\uDA3F[\\uDFFE\\uDFFF]|\\uDA7F[\\uDFFE\\uDFFF]|\\uDABF[\\uDFFE\\uDFFF]|(?:\\uDAFF[\\uDFFE\\uDFFF])|\\uDB3F[\\uDFFE\\uDFFF]|\\uDB7F[\\uDFFE\\uDFFF]|(?:\\uDBBF[\\uDFFE\\uDFFF])|\\uDBFF[\\uDFFE\\uDFFF](?:[\\0-\\t\\v\\f\\x0E-\\u2027\\u202A-\\uD7FF\\uE000-\\uFFFF]|[\\u
  25. info unicode-surrogate dist/chunks/cli-api.DE22LIzq.js:9924:278 new in this release

    orphaned low surrogate \uDFFF (no preceding high surrogate) (token pass, confidence 0.65)

    \\uD9BF[\\uDFFE\\uDFFF]|\\uD9FF[\\uDFFE\\uDFFF]|\\uDA3F[\\uDFFE\\uDFFF]|\\uDA7F[\\uDFFE\\uDFFF]|\\uDABF[\\uDFFE\\uDFFF]|(?:\\uDAFF[\\uDFFE\\uDFFF])|\\uDB3F[\\uDFFE\\uDFFF]|\\uDB7F[\\uDFFE\\uDFFF]|(?:\\uDBBF[\\uDFFE\\uDFFF])|\\uDBFF[\\uDFFE\\uDFFF](?:[\\0-\\t\\v\\f\\x0E-\\u2027\\u202A-\\uD7FF\\uE000-\\uFFFF]|[\\uD800-\\
  26. info unicode-surrogate dist/chunks/cli-api.DE22LIzq.js:9924:287 new in this release

    orphaned high surrogate \uDA3F (no matching low surrogate) (token pass, confidence 0.65)

    \uDFFE\\uDFFF]|\\uD9FF[\\uDFFE\\uDFFF]|\\uDA3F[\\uDFFE\\uDFFF]|\\uDA7F[\\uDFFE\\uDFFF]|\\uDABF[\\uDFFE\\uDFFF]|(?:\\uDAFF[\\uDFFE\\uDFFF])|\\uDB3F[\\uDFFE\\uDFFF]|\\uDB7F[\\uDFFE\\uDFFF]|(?:\\uDBBF[\\uDFFE\\uDFFF])|\\uDBFF[\\uDFFE\\uDFFF](?:[\\0-\\t\\v\\f\\x0E-\\u2027\\u202A-\\uD7FF\\uE000-\\uFFFF]|[\\uD800-\\uDBFF][\\
  27. info unicode-surrogate dist/chunks/cli-api.DE22LIzq.js:9924:295 new in this release

    orphaned low surrogate \uDFFE (no preceding high surrogate) (token pass, confidence 0.65)

    uDFFF]|\\uD9FF[\\uDFFE\\uDFFF]|\\uDA3F[\\uDFFE\\uDFFF]|\\uDA7F[\\uDFFE\\uDFFF]|\\uDABF[\\uDFFE\\uDFFF]|(?:\\uDAFF[\\uDFFE\\uDFFF])|\\uDB3F[\\uDFFE\\uDFFF]|\\uDB7F[\\uDFFE\\uDFFF]|(?:\\uDBBF[\\uDFFE\\uDFFF])|\\uDBFF[\\uDFFE\\uDFFF](?:[\\0-\\t\\v\\f\\x0E-\\u2027\\u202A-\\uD7FF\\uE000-\\uFFFF]|[\\uD800-\\uDBFF][\\uDC00-\\
  28. info unicode-surrogate dist/chunks/cli-api.DE22LIzq.js:9924:302 new in this release

    orphaned low surrogate \uDFFF (no preceding high surrogate) (token pass, confidence 0.65)

    \\uD9FF[\\uDFFE\\uDFFF]|\\uDA3F[\\uDFFE\\uDFFF]|\\uDA7F[\\uDFFE\\uDFFF]|\\uDABF[\\uDFFE\\uDFFF]|(?:\\uDAFF[\\uDFFE\\uDFFF])|\\uDB3F[\\uDFFE\\uDFFF]|\\uDB7F[\\uDFFE\\uDFFF]|(?:\\uDBBF[\\uDFFE\\uDFFF])|\\uDBFF[\\uDFFE\\uDFFF](?:[\\0-\\t\\v\\f\\x0E-\\u2027\\u202A-\\uD7FF\\uE000-\\uFFFF]|[\\uD800-\\uDBFF][\\uDC00-\\uDFFF]|
  29. info unicode-surrogate dist/chunks/cli-api.DE22LIzq.js:9924:311 new in this release

    orphaned high surrogate \uDA7F (no matching low surrogate) (token pass, confidence 0.65)

    \uDFFE\\uDFFF]|\\uDA3F[\\uDFFE\\uDFFF]|\\uDA7F[\\uDFFE\\uDFFF]|\\uDABF[\\uDFFE\\uDFFF]|(?:\\uDAFF[\\uDFFE\\uDFFF])|\\uDB3F[\\uDFFE\\uDFFF]|\\uDB7F[\\uDFFE\\uDFFF]|(?:\\uDBBF[\\uDFFE\\uDFFF])|\\uDBFF[\\uDFFE\\uDFFF](?:[\\0-\\t\\v\\f\\x0E-\\u2027\\u202A-\\uD7FF\\uE000-\\uFFFF]|[\\uD800-\\uDBFF][\\uDC00-\\uDFFF]|[\\uD800-
  30. info unicode-surrogate dist/chunks/cli-api.DE22LIzq.js:9924:319 new in this release

    orphaned low surrogate \uDFFE (no preceding high surrogate) (token pass, confidence 0.65)

    uDFFF]|\\uDA3F[\\uDFFE\\uDFFF]|\\uDA7F[\\uDFFE\\uDFFF]|\\uDABF[\\uDFFE\\uDFFF]|(?:\\uDAFF[\\uDFFE\\uDFFF])|\\uDB3F[\\uDFFE\\uDFFF]|\\uDB7F[\\uDFFE\\uDFFF]|(?:\\uDBBF[\\uDFFE\\uDFFF])|\\uDBFF[\\uDFFE\\uDFFF](?:[\\0-\\t\\v\\f\\x0E-\\u2027\\u202A-\\uD7FF\\uE000-\\uFFFF]|[\\uD800-\\uDBFF][\\uDC00-\\uDFFF]|[\\uD800-\\uDBFF]
  31. info unicode-surrogate dist/chunks/cli-api.DE22LIzq.js:9924:326 new in this release

    orphaned low surrogate \uDFFF (no preceding high surrogate) (token pass, confidence 0.65)

    \\uDA3F[\\uDFFE\\uDFFF]|\\uDA7F[\\uDFFE\\uDFFF]|\\uDABF[\\uDFFE\\uDFFF]|(?:\\uDAFF[\\uDFFE\\uDFFF])|\\uDB3F[\\uDFFE\\uDFFF]|\\uDB7F[\\uDFFE\\uDFFF]|(?:\\uDBBF[\\uDFFE\\uDFFF])|\\uDBFF[\\uDFFE\\uDFFF](?:[\\0-\\t\\v\\f\\x0E-\\u2027\\u202A-\\uD7FF\\uE000-\\uFFFF]|[\\uD800-\\uDBFF][\\uDC00-\\uDFFF]|[\\uD800-\\uDBFF](?![\\u
  32. info unicode-surrogate dist/chunks/cli-api.DE22LIzq.js:9924:335 new in this release

    orphaned high surrogate \uDABF (no matching low surrogate) (token pass, confidence 0.65)

    \uDFFE\\uDFFF]|\\uDA7F[\\uDFFE\\uDFFF]|\\uDABF[\\uDFFE\\uDFFF]|(?:\\uDAFF[\\uDFFE\\uDFFF])|\\uDB3F[\\uDFFE\\uDFFF]|\\uDB7F[\\uDFFE\\uDFFF]|(?:\\uDBBF[\\uDFFE\\uDFFF])|\\uDBFF[\\uDFFE\\uDFFF](?:[\\0-\\t\\v\\f\\x0E-\\u2027\\u202A-\\uD7FF\\uE000-\\uFFFF]|[\\uD800-\\uDBFF][\\uDC00-\\uDFFF]|[\\uD800-\\uDBFF](?![\\uDC00-\\uD
  33. info unicode-surrogate dist/chunks/cli-api.DE22LIzq.js:9924:343 new in this release

    orphaned low surrogate \uDFFE (no preceding high surrogate) (token pass, confidence 0.65)

    uDFFF]|\\uDA7F[\\uDFFE\\uDFFF]|\\uDABF[\\uDFFE\\uDFFF]|(?:\\uDAFF[\\uDFFE\\uDFFF])|\\uDB3F[\\uDFFE\\uDFFF]|\\uDB7F[\\uDFFE\\uDFFF]|(?:\\uDBBF[\\uDFFE\\uDFFF])|\\uDBFF[\\uDFFE\\uDFFF](?:[\\0-\\t\\v\\f\\x0E-\\u2027\\u202A-\\uD7FF\\uE000-\\uFFFF]|[\\uD800-\\uDBFF][\\uDC00-\\uDFFF]|[\\uD800-\\uDBFF](?![\\uDC00-\\uDFFF])|(?
  34. info unicode-surrogate dist/chunks/cli-api.DE22LIzq.js:9924:350 new in this release

    orphaned low surrogate \uDFFF (no preceding high surrogate) (token pass, confidence 0.65)

    \\uDA7F[\\uDFFE\\uDFFF]|\\uDABF[\\uDFFE\\uDFFF]|(?:\\uDAFF[\\uDFFE\\uDFFF])|\\uDB3F[\\uDFFE\\uDFFF]|\\uDB7F[\\uDFFE\\uDFFF]|(?:\\uDBBF[\\uDFFE\\uDFFF])|\\uDBFF[\\uDFFE\\uDFFF](?:[\\0-\\t\\v\\f\\x0E-\\u2027\\u202A-\\uD7FF\\uE000-\\uFFFF]|[\\uD800-\\uDBFF][\\uDC00-\\uDFFF]|[\\uD800-\\uDBFF](?![\\uDC00-\\uDFFF])|(?:[^\\uD
  35. info unicode-surrogate dist/chunks/cli-api.DE22LIzq.js:9924:362 new in this release

    orphaned high surrogate \uDAFF (no matching low surrogate) (token pass, confidence 0.65)

    FFE\\uDFFF]|\\uDABF[\\uDFFE\\uDFFF]|(?:\\uDAFF[\\uDFFE\\uDFFF])|\\uDB3F[\\uDFFE\\uDFFF]|\\uDB7F[\\uDFFE\\uDFFF]|(?:\\uDBBF[\\uDFFE\\uDFFF])|\\uDBFF[\\uDFFE\\uDFFF](?:[\\0-\\t\\v\\f\\x0E-\\u2027\\u202A-\\uD7FF\\uE000-\\uFFFF]|[\\uD800-\\uDBFF][\\uDC00-\\uDFFF]|[\\uD800-\\uDBFF](?![\\uDC00-\\uDFFF])|(?:[^\\uD800-\\uDBFF]
  36. info unicode-surrogate dist/chunks/cli-api.DE22LIzq.js:9924:370 new in this release

    orphaned low surrogate \uDFFE (no preceding high surrogate) (token pass, confidence 0.65)

    FF]|\\uDABF[\\uDFFE\\uDFFF]|(?:\\uDAFF[\\uDFFE\\uDFFF])|\\uDB3F[\\uDFFE\\uDFFF]|\\uDB7F[\\uDFFE\\uDFFF]|(?:\\uDBBF[\\uDFFE\\uDFFF])|\\uDBFF[\\uDFFE\\uDFFF](?:[\\0-\\t\\v\\f\\x0E-\\u2027\\u202A-\\uD7FF\\uE000-\\uFFFF]|[\\uD800-\\uDBFF][\\uDC00-\\uDFFF]|[\\uD800-\\uDBFF](?![\\uDC00-\\uDFFF])|(?:[^\\uD800-\\uDBFF]|^)[\\uD
  37. info unicode-surrogate dist/chunks/cli-api.DE22LIzq.js:9924:377 new in this release

    orphaned low surrogate \uDFFF (no preceding high surrogate) (token pass, confidence 0.65)

    DABF[\\uDFFE\\uDFFF]|(?:\\uDAFF[\\uDFFE\\uDFFF])|\\uDB3F[\\uDFFE\\uDFFF]|\\uDB7F[\\uDFFE\\uDFFF]|(?:\\uDBBF[\\uDFFE\\uDFFF])|\\uDBFF[\\uDFFE\\uDFFF](?:[\\0-\\t\\v\\f\\x0E-\\u2027\\u202A-\\uD7FF\\uE000-\\uFFFF]|[\\uD800-\\uDBFF][\\uDC00-\\uDFFF]|[\\uD800-\\uDBFF](?![\\uDC00-\\uDFFF])|(?:[^\\uD800-\\uDBFF]|^)[\\uDC00-\\u
  38. info unicode-surrogate dist/chunks/cli-api.DE22LIzq.js:9924:387 new in this release

    orphaned high surrogate \uDB3F (no matching low surrogate) (token pass, confidence 0.65)

    FE\\uDFFF]|(?:\\uDAFF[\\uDFFE\\uDFFF])|\\uDB3F[\\uDFFE\\uDFFF]|\\uDB7F[\\uDFFE\\uDFFF]|(?:\\uDBBF[\\uDFFE\\uDFFF])|\\uDBFF[\\uDFFE\\uDFFF](?:[\\0-\\t\\v\\f\\x0E-\\u2027\\u202A-\\uD7FF\\uE000-\\uFFFF]|[\\uD800-\\uDBFF][\\uDC00-\\uDFFF]|[\\uD800-\\uDBFF](?![\\uDC00-\\uDFFF])|(?:[^\\uD800-\\uDBFF]|^)[\\uDC00-\\uDFFF]))", 
  39. info unicode-surrogate dist/chunks/cli-api.DE22LIzq.js:9924:395 new in this release

    orphaned low surrogate \uDFFE (no preceding high surrogate) (token pass, confidence 0.65)

    F]|(?:\\uDAFF[\\uDFFE\\uDFFF])|\\uDB3F[\\uDFFE\\uDFFF]|\\uDB7F[\\uDFFE\\uDFFF]|(?:\\uDBBF[\\uDFFE\\uDFFF])|\\uDBFF[\\uDFFE\\uDFFF](?:[\\0-\\t\\v\\f\\x0E-\\u2027\\u202A-\\uD7FF\\uE000-\\uFFFF]|[\\uD800-\\uDBFF][\\uDC00-\\uDFFF]|[\\uD800-\\uDBFF](?![\\uDC00-\\uDFFF])|(?:[^\\uD800-\\uDBFF]|^)[\\uDC00-\\uDFFF]))", "g");
  40. info unicode-surrogate dist/chunks/cli-api.DE22LIzq.js:9924:402 new in this release

    orphaned low surrogate \uDFFF (no preceding high surrogate) (token pass, confidence 0.65)

    \uDAFF[\\uDFFE\\uDFFF])|\\uDB3F[\\uDFFE\\uDFFF]|\\uDB7F[\\uDFFE\\uDFFF]|(?:\\uDBBF[\\uDFFE\\uDFFF])|\\uDBFF[\\uDFFE\\uDFFF](?:[\\0-\\t\\v\\f\\x0E-\\u2027\\u202A-\\uD7FF\\uE000-\\uFFFF]|[\\uD800-\\uDBFF][\\uDC00-\\uDFFF]|[\\uD800-\\uDBFF](?![\\uDC00-\\uDFFF])|(?:[^\\uD800-\\uDBFF]|^)[\\uDC00-\\uDFFF]))", "g");
  41. info unicode-surrogate dist/chunks/cli-api.DE22LIzq.js:9924:411 new in this release

    orphaned high surrogate \uDB7F (no matching low surrogate) (token pass, confidence 0.65)

    uDFFE\\uDFFF])|\\uDB3F[\\uDFFE\\uDFFF]|\\uDB7F[\\uDFFE\\uDFFF]|(?:\\uDBBF[\\uDFFE\\uDFFF])|\\uDBFF[\\uDFFE\\uDFFF](?:[\\0-\\t\\v\\f\\x0E-\\u2027\\u202A-\\uD7FF\\uE000-\\uFFFF]|[\\uD800-\\uDBFF][\\uDC00-\\uDFFF]|[\\uD800-\\uDBFF](?![\\uDC00-\\uDFFF])|(?:[^\\uD800-\\uDBFF]|^)[\\uDC00-\\uDFFF]))", "g");
  42. info unicode-surrogate dist/chunks/cli-api.DE22LIzq.js:9924:419 new in this release

    orphaned low surrogate \uDFFE (no preceding high surrogate) (token pass, confidence 0.65)

    DFFF])|\\uDB3F[\\uDFFE\\uDFFF]|\\uDB7F[\\uDFFE\\uDFFF]|(?:\\uDBBF[\\uDFFE\\uDFFF])|\\uDBFF[\\uDFFE\\uDFFF](?:[\\0-\\t\\v\\f\\x0E-\\u2027\\u202A-\\uD7FF\\uE000-\\uFFFF]|[\\uD800-\\uDBFF][\\uDC00-\\uDFFF]|[\\uD800-\\uDBFF](?![\\uDC00-\\uDFFF])|(?:[^\\uD800-\\uDBFF]|^)[\\uDC00-\\uDFFF]))", "g");
  43. info unicode-surrogate dist/chunks/cli-api.DE22LIzq.js:9924:426 new in this release

    orphaned low surrogate \uDFFF (no preceding high surrogate) (token pass, confidence 0.65)

    \\uDB3F[\\uDFFE\\uDFFF]|\\uDB7F[\\uDFFE\\uDFFF]|(?:\\uDBBF[\\uDFFE\\uDFFF])|\\uDBFF[\\uDFFE\\uDFFF](?:[\\0-\\t\\v\\f\\x0E-\\u2027\\u202A-\\uD7FF\\uE000-\\uFFFF]|[\\uD800-\\uDBFF][\\uDC00-\\uDFFF]|[\\uD800-\\uDBFF](?![\\uDC00-\\uDFFF])|(?:[^\\uD800-\\uDBFF]|^)[\\uDC00-\\uDFFF]))", "g");
  44. info unicode-surrogate dist/chunks/cli-api.DE22LIzq.js:9924:438 new in this release

    orphaned high surrogate \uDBBF (no matching low surrogate) (token pass, confidence 0.65)

    FFE\\uDFFF]|\\uDB7F[\\uDFFE\\uDFFF]|(?:\\uDBBF[\\uDFFE\\uDFFF])|\\uDBFF[\\uDFFE\\uDFFF](?:[\\0-\\t\\v\\f\\x0E-\\u2027\\u202A-\\uD7FF\\uE000-\\uFFFF]|[\\uD800-\\uDBFF][\\uDC00-\\uDFFF]|[\\uD800-\\uDBFF](?![\\uDC00-\\uDFFF])|(?:[^\\uD800-\\uDBFF]|^)[\\uDC00-\\uDFFF]))", "g");
  45. info unicode-surrogate dist/chunks/cli-api.DE22LIzq.js:9924:446 new in this release

    orphaned low surrogate \uDFFE (no preceding high surrogate) (token pass, confidence 0.65)

    FF]|\\uDB7F[\\uDFFE\\uDFFF]|(?:\\uDBBF[\\uDFFE\\uDFFF])|\\uDBFF[\\uDFFE\\uDFFF](?:[\\0-\\t\\v\\f\\x0E-\\u2027\\u202A-\\uD7FF\\uE000-\\uFFFF]|[\\uD800-\\uDBFF][\\uDC00-\\uDFFF]|[\\uD800-\\uDBFF](?![\\uDC00-\\uDFFF])|(?:[^\\uD800-\\uDBFF]|^)[\\uDC00-\\uDFFF]))", "g");
  46. info unicode-surrogate dist/chunks/cli-api.DE22LIzq.js:9924:453 new in this release

    orphaned low surrogate \uDFFF (no preceding high surrogate) (token pass, confidence 0.65)

    DB7F[\\uDFFE\\uDFFF]|(?:\\uDBBF[\\uDFFE\\uDFFF])|\\uDBFF[\\uDFFE\\uDFFF](?:[\\0-\\t\\v\\f\\x0E-\\u2027\\u202A-\\uD7FF\\uE000-\\uFFFF]|[\\uD800-\\uDBFF][\\uDC00-\\uDFFF]|[\\uD800-\\uDBFF](?![\\uDC00-\\uDFFF])|(?:[^\\uD800-\\uDBFF]|^)[\\uDC00-\\uDFFF]))", "g");
  47. info unicode-surrogate dist/chunks/cli-api.DE22LIzq.js:9924:463 new in this release

    orphaned high surrogate \uDBFF (no matching low surrogate) (token pass, confidence 0.65)

    FE\\uDFFF]|(?:\\uDBBF[\\uDFFE\\uDFFF])|\\uDBFF[\\uDFFE\\uDFFF](?:[\\0-\\t\\v\\f\\x0E-\\u2027\\u202A-\\uD7FF\\uE000-\\uFFFF]|[\\uD800-\\uDBFF][\\uDC00-\\uDFFF]|[\\uD800-\\uDBFF](?![\\uDC00-\\uDFFF])|(?:[^\\uD800-\\uDBFF]|^)[\\uDC00-\\uDFFF]))", "g");
  48. info unicode-surrogate dist/chunks/cli-api.DE22LIzq.js:9924:471 new in this release

    orphaned low surrogate \uDFFE (no preceding high surrogate) (token pass, confidence 0.65)

    F]|(?:\\uDBBF[\\uDFFE\\uDFFF])|\\uDBFF[\\uDFFE\\uDFFF](?:[\\0-\\t\\v\\f\\x0E-\\u2027\\u202A-\\uD7FF\\uE000-\\uFFFF]|[\\uD800-\\uDBFF][\\uDC00-\\uDFFF]|[\\uD800-\\uDBFF](?![\\uDC00-\\uDFFF])|(?:[^\\uD800-\\uDBFF]|^)[\\uDC00-\\uDFFF]))", "g");
  49. info unicode-surrogate dist/chunks/cli-api.DE22LIzq.js:9924:478 new in this release

    orphaned low surrogate \uDFFF (no preceding high surrogate) (token pass, confidence 0.65)

    \uDBBF[\\uDFFE\\uDFFF])|\\uDBFF[\\uDFFE\\uDFFF](?:[\\0-\\t\\v\\f\\x0E-\\u2027\\u202A-\\uD7FF\\uE000-\\uFFFF]|[\\uD800-\\uDBFF][\\uDC00-\\uDFFF]|[\\uD800-\\uDBFF](?![\\uDC00-\\uDFFF])|(?:[^\\uD800-\\uDBFF]|^)[\\uDC00-\\uDFFF]))", "g");
  50. info unicode-surrogate dist/chunks/cli-api.DE22LIzq.js:9924:549 new in this release

    orphaned high surrogate \uD800 (no matching low surrogate) (token pass, confidence 0.65)

    \u2027\\u202A-\\uD7FF\\uE000-\\uFFFF]|[\\uD800-\\uDBFF][\\uDC00-\\uDFFF]|[\\uD800-\\uDBFF](?![\\uDC00-\\uDFFF])|(?:[^\\uD800-\\uDBFF]|^)[\\uDC00-\\uDFFF]))", "g");
  51. info unicode-surrogate dist/chunks/cli-api.DE22LIzq.js:9924:557 new in this release

    orphaned high surrogate \uDBFF (no matching low surrogate) (token pass, confidence 0.65)

    u202A-\\uD7FF\\uE000-\\uFFFF]|[\\uD800-\\uDBFF][\\uDC00-\\uDFFF]|[\\uD800-\\uDBFF](?![\\uDC00-\\uDFFF])|(?:[^\\uD800-\\uDBFF]|^)[\\uDC00-\\uDFFF]))", "g");
  52. info unicode-surrogate dist/chunks/cli-api.DE22LIzq.js:9924:566 new in this release

    orphaned low surrogate \uDC00 (no preceding high surrogate) (token pass, confidence 0.65)

    D7FF\\uE000-\\uFFFF]|[\\uD800-\\uDBFF][\\uDC00-\\uDFFF]|[\\uD800-\\uDBFF](?![\\uDC00-\\uDFFF])|(?:[^\\uD800-\\uDBFF]|^)[\\uDC00-\\uDFFF]))", "g");
  53. info unicode-surrogate dist/chunks/cli-api.DE22LIzq.js:9924:574 new in this release

    orphaned low surrogate \uDFFF (no preceding high surrogate) (token pass, confidence 0.65)

    000-\\uFFFF]|[\\uD800-\\uDBFF][\\uDC00-\\uDFFF]|[\\uD800-\\uDBFF](?![\\uDC00-\\uDFFF])|(?:[^\\uD800-\\uDBFF]|^)[\\uDC00-\\uDFFF]))", "g");
  54. info unicode-surrogate dist/chunks/cli-api.DE22LIzq.js:9924:584 new in this release

    orphaned high surrogate \uD800 (no matching low surrogate) (token pass, confidence 0.65)

    F]|[\\uD800-\\uDBFF][\\uDC00-\\uDFFF]|[\\uD800-\\uDBFF](?![\\uDC00-\\uDFFF])|(?:[^\\uD800-\\uDBFF]|^)[\\uDC00-\\uDFFF]))", "g");
  55. info unicode-surrogate dist/chunks/cli-api.DE22LIzq.js:9924:592 new in this release

    orphaned high surrogate \uDBFF (no matching low surrogate) (token pass, confidence 0.65)

    800-\\uDBFF][\\uDC00-\\uDFFF]|[\\uD800-\\uDBFF](?![\\uDC00-\\uDFFF])|(?:[^\\uD800-\\uDBFF]|^)[\\uDC00-\\uDFFF]))", "g");
  56. info unicode-surrogate dist/chunks/cli-api.DE22LIzq.js:9924:604 new in this release

    orphaned low surrogate \uDC00 (no preceding high surrogate) (token pass, confidence 0.65)

    [\\uDC00-\\uDFFF]|[\\uD800-\\uDBFF](?![\\uDC00-\\uDFFF])|(?:[^\\uD800-\\uDBFF]|^)[\\uDC00-\\uDFFF]))", "g");
  57. info unicode-surrogate dist/chunks/cli-api.DE22LIzq.js:9924:612 new in this release

    orphaned low surrogate \uDFFF (no preceding high surrogate) (token pass, confidence 0.65)

    -\\uDFFF]|[\\uD800-\\uDBFF](?![\\uDC00-\\uDFFF])|(?:[^\\uD800-\\uDBFF]|^)[\\uDC00-\\uDFFF]))", "g");
  58. info unicode-surrogate dist/chunks/cli-api.DE22LIzq.js:9924:627 new in this release

    orphaned high surrogate \uD800 (no matching low surrogate) (token pass, confidence 0.65)

    800-\\uDBFF](?![\\uDC00-\\uDFFF])|(?:[^\\uD800-\\uDBFF]|^)[\\uDC00-\\uDFFF]))", "g");
  59. info unicode-surrogate dist/chunks/cli-api.DE22LIzq.js:9924:635 new in this release

    orphaned high surrogate \uDBFF (no matching low surrogate) (token pass, confidence 0.65)

    BFF](?![\\uDC00-\\uDFFF])|(?:[^\\uD800-\\uDBFF]|^)[\\uDC00-\\uDFFF]))", "g");
  60. info unicode-surrogate dist/chunks/cli-api.DE22LIzq.js:9924:647 new in this release

    orphaned low surrogate \uDC00 (no preceding high surrogate) (token pass, confidence 0.65)

    C00-\\uDFFF])|(?:[^\\uD800-\\uDBFF]|^)[\\uDC00-\\uDFFF]))", "g");
  61. info unicode-surrogate dist/chunks/cli-api.DE22LIzq.js:9924:655 new in this release

    orphaned low surrogate \uDFFF (no preceding high surrogate) (token pass, confidence 0.65)

    FFF])|(?:[^\\uD800-\\uDBFF]|^)[\\uDC00-\\uDFFF]))", "g");
  62. info warn → info by review long-line dist/chunks/config.d.BgktgHfG.d.ts:3838:1 new in this release

    line length 3014 characters (raw pass, confidence 0.65)

    export type { TestTryOptions as $, Awaitable as A, MaybeMockedDeep as C, DiffOptions as D, ExpectStatic as E, FileSpecification as F, MaybeMocked as G, MaybePartiallyMocked as H, MaybePartiallyMockedDeep as I, MockInstance as J, TestAPI as K, LabelColor as L, ModuleGraphData as M, SuiteCollector as N, SuiteAPI as O, Pa
    likely benign LLM, confidence 0.90 A long generated .d.ts line re-exporting many vitest type aliases.
    Reasoning

    The raw long-line signal is on a TypeScript declaration file that re-exports a long list of type aliases. This is generated type-declaration output with no executable content.

  63. info long-line dist/chunks/index.D14IAvnE.js:15659:1 new in this release

    line length 1245 characters (raw pass, confidence 0.50)

    export { generateCodeFrame as A, BaseSequencer as B, printStack as C, LocationFilterFileNotFoundError as D, GitCommandError as E, ForksPoolWorker as F, GitNotFoundError as G, VitestResolver as H, IncludeTaskLocationDisabledError as I, createClusterServer as J, attachProjectsFromEntries as K, Logger as L, ModuleTransfor
  64. info long-line dist/chunks/plugin.d.olEn8IL9.d.ts:2:1 new in this release

    line length 785 characters (raw pass, confidence 0.50)

    import { aW as TaskMeta, U as UserConsoleLog, Q as Suite, a as File, bk as SerializableRetry, T as TestError, h as TestAnnotation, j as TestArtifact, b2 as TestBenchmark, aL as SerializedError, a1 as ImportDuration, n as Test, A as Awaitable, Z as CancelReason, P as ParsedStack, bl as BrowserTraceViewMode, a6 as Baseli
  65. info long-line dist/chunks/plugin.d.olEn8IL9.d.ts:4667:1 new in this release

    line length 540 characters (raw pass, confidence 0.50)

    export { Logger as L, MinimalReporter as M, PluginHarness as P, ReportersMap as aD, TapFlatReporter as aK, TapReporter as aL, TestCase as aP, TestCollection as aQ, TestModule as aS, DefaultReporter as aa, DotReporter as ac, GithubActionsReporter as ae, HangingProcessReporter as ag, JUnitReporter as aj, JsonReporter as 
  66. info warn → info by review long-line dist/chunks/plugin.d.olEn8IL9.d.ts:4668:1 new in this release

    line length 2714 characters (raw pass, confidence 0.65)

    export type { CSSModuleScopeStrategy as $, ApiConfig as A, BaseCoverageOptions as B, CoverageOptions as C, BrowserModuleMocker as D, BrowserOrchestrator as E, FieldsWithDefaultValues as F, BrowserProvider as G, BrowserProviderCloseOptions as H, InlineConfig as I, BrowserProviderOption as J, BrowserScript as K, BrowserS
    likely benign LLM, confidence 0.90 A long generated .d.ts line re-exporting many vitest type names.
    Reasoning

    The raw long-line finding is a generated TypeScript declaration file with a long re-export list of vitest types. It contains only type declarations, not executable code.

  67. info long-line dist/index.d.ts:2:1 new in this release

    line length 941 characters (raw pass, confidence 0.50)

    import { a as File, A as Awaitable, h as TestAnnotation, j as TestArtifact, k as TaskResultPack, l as TaskEventPack, U as UserConsoleLog, m as SerializedRootConfig, L as LabelColor, M as ModuleGraphData, n as Test, o as TaskPopulated, E as ExpectStatic, p as ProvidedContext, q as MatcherState, r as SyncExpectationResul
  68. info long-line dist/index.d.ts:3:1 new in this release

    line length 1939 characters (raw pass, confidence 0.50)

    export { a3 as AfterSuiteRunMeta, a4 as Assertion, a5 as AsymmetricMatchersContaining, a6 as BaselineData, a7 as Bench, a8 as BenchFn, a9 as BenchFnOptions, aa as BenchFromSource, ab as BenchOptions, ac as BenchRegistration, ad as BenchRegistrationInput, ae as BenchResult, af as BenchRunOptions, ag as BenchStorage, ah 
  69. info long-line dist/index.d.ts:1069:1 new in this release

    line length 852 characters (raw pass, confidence 0.50)

    export { AsyncExpectationResult as AsyncMatcherResult, CancelReason, DomainSnapshotAdapter, ExpectStatic, Experimental, FakeTimersConfig, ImportDuration, LabelColor, ExpectationResult as MatcherResult, MatcherState, Mock, MockInstance, ModuleGraphData, ProvidedContext, Task as RunnerTask, TaskEventPack as RunnerTaskEve
  70. info warn → info by review long-line dist/node.d.ts:7:1 new in this release

    line length 2757 characters (raw pass, confidence 0.65)

    export { M as AgentReporter, B as BaseCoverageOptions, t as BaseReporter, u as BenchmarkUserOptions, v as BrowserBuiltinProvider, w as BrowserCommand, x as BrowserCommandContext, y as BrowserConfigOptions, z as BrowserInstanceOption, D as BrowserModuleMocker, E as BrowserOrchestrator, G as BrowserProvider, H as Browser
    dismissed LLM, confidence 0.90 Generated TypeScript declaration re-export line with many long identifier aliases.
    Reasoning

    This is a TypeScript declaration file with a long re-export list of renamed identifiers, typical of bundler-generated type declarations. Long lines in generated .d.ts files are common and carry no execution risk.

  71. info long-line dist/node.d.ts:532:1 new in this release

    line length 856 characters (raw pass, confidence 0.50)

    export { ApiConfig, BaseCoverageProvider, BaseSequencer, BrowserConnectionError, CliOptions, ForksPoolWorker, GitNotFoundError, GitVCSProvider, Logger, MtimeVCSProvider, PluginHarness, PoolOptions, PoolWorker, ReportContext, ResolvedConfig, ResolvedCoverageOptions, TestProject, TestSequencer, TestSpecification, UserCon
  72. info long-line dist/node.js:4:1 new in this release

    line length 501 characters (raw pass, confidence 0.50)

    export { M as AgentReporter, B as BaseCoverageProvider, D as DefaultReporter, a as DotReporter, G as GitVCSProvider, b as GithubActionsReporter, H as HangingProcessReporter, J as JUnitReporter, c as JsonReporter, M as MinimalReporter, d as MtimeVCSProvider, R as ReportersMap, T as TapFlatReporter, e as TapReporter, f a
  73. info long-line dist/node.js:5:1 new in this release

    line length 532 characters (raw pass, confidence 0.50)

    export { B as BaseSequencer, a as BrowserConnectionError, F as ForksPoolWorker, G as GitNotFoundError, L as Logger, P as PluginHarness, b as TestsNotFoundError, T as ThreadsPoolWorker, c as TypecheckPoolWorker, V as VitestPackageInstaller, d as VmForksPoolWorker, e as VmThreadsPoolWorker, f as createDebugger, g as crea
  74. info warn → info by review long-line dist/chunks/acorn.C1kjbUFw.js:5:1

    line length 2074 characters (raw pass, confidence 0.65)

    var astralIdentifierStartCodes = [0, 11, 2, 25, 2, 18, 2, 1, 2, 14, 3, 13, 35, 122, 70, 52, 268, 28, 4, 48, 48, 31, 14, 29, 6, 37, 11, 29, 3, 35, 5, 7, 2, 4, 43, 157, 19, 35, 5, 35, 5, 39, 9, 51, 13, 10, 2, 14, 2, 6, 2, 1, 2, 10, 2, 14, 2, 6, 2, 1, 68, 310, 10, 21, 11, 7, 25, 5, 2, 41, 2, 8, 70, 5, 3, 0, 2, 43, 2, 1, 4
    likely benign LLM, confidence 0.90 A long minified line holding acorn's astral identifier-start code table.
    Reasoning

    The raw long-line signal flags a 2074-character line that is a large numeric table of Unicode code-point ranges, the standard form of the acorn parser's identifier tables in a minified bundle. Line length alone is not malicious, and the content is data, not executable payload.

  75. info whitespace-anomaly dist/chunks/base.PJyN9N0u.js:25:1

    file mixes tab and space indentation (179 tab-indented and 1 space-indented lines) (raw pass, confidence 0.40)

    async function setupGlobalEnv(config, environment) {
    	await setupCommonEnv(config);
    	Object.defineProperty(globalThis, "__vitest_index__", {
    		value: index,
  76. info whitespace-anomaly dist/chunks/cac.Ccf5Je_F.js:10:1

    file mixes tab and space indentation (1065 tab-indented and 1051 space-indented lines) (raw pass, confidence 0.40)

    function toArr(any) {
    	return any == null ? [] : Array.isArray(any) ? any : [any];
    }
  77. info warn → info by review long-line dist/chunks/cac.Ccf5Je_F.js:1364:1

    line length 4437 characters (raw pass, confidence 0.65)

    const a={ShellCompDirectiveError:1,ShellCompDirectiveNoSpace:2,ShellCompDirectiveNoFileComp:4,ShellCompDirectiveFilterFileExt:8,ShellCompDirectiveFilterDirs:16,ShellCompDirectiveKeepOrder:32,ShellCompDirectiveDefault:0};var o$1=class o{name;variadic;command;handler;constructor(e,t,n,r=false){this.command=e,this.name=t,
    likely benign LLM, confidence 0.90 A minified line of cac CLI code with shell-completion constants and a command class.
    Reasoning

    The raw long-line finding covers a minified CLI bundle containing shell-completion directive constants and a class definition. This is ordinary bundled CLI code, and the length comes from minification.

  78. line length 1493 characters (raw pass, confidence 0.50)

    const o=process.execPath,s=process.argv.slice(1),c=/<[^>]+>|\[[^\]]+\]/;async function l(l,u$1){for(let e of [l.globalCommand,...l.commands]){if(e.name===`complete`)continue;let t=(e.rawName.match(/\[.*?\]|<.*?>/g)||[]).map(e=>e.startsWith(`[`)),n=e.name===`@@global@@`,r=n?u$1:u$1?.subCommands?.[e.name],a=n?``:e.name,o
  79. info whitespace-anomaly dist/chunks/cli-api.DE22LIzq.js:49:1

    file mixes tab and space indentation (10837 tab-indented and 455 space-indented lines) (raw pass, confidence 0.40)

    class SnapshotManager {
    	options;
    	summary;
    	extension = ".snap";
  80. info warn → info by review dynamic-execution dist/chunks/cli-api.DE22LIzq.js:11242:38

    `atob` decodes a base64 value at runtime — common step before dynamic fetch or eval (ast pass, confidence 0.75)

    		function decodeBase64WithAtob(base64) {
    		  return decodeURIComponent(escape(atob(base64)));
    		}
    likely benign LLM, confidence 0.75 A helper that decodes a base64 string to UTF-8 text using atob.
    Reasoning

    The AST pass flags atob for runtime base64 decoding. The snippet is a UTF-8-aware base64 decode helper (atob, escape, decodeURIComponent) that returns a string without eval or fetch. That is a common text-decoding utility, though the helper's callers are not shown, so a small doubt remains.

  81. `btoa` encodes a value as base64 at runtime — used in exfiltration patterns (ast pass, confidence 0.55)

    		  var json = this.toJSON();
    		  return btoa(unescape(encodeURIComponent(json)));
    		}
  82. info whitespace-anomaly dist/chunks/config.d.BgktgHfG.d.ts:12:1

    file mixes tab and space indentation (1388 tab-indented and 57 space-indented lines) (raw pass, confidence 0.40)

    interface Colors {
    	comment: {
    		close: string;
    		open: string;
  83. line length 1577 characters (raw pass, confidence 0.50)

      export type { _vitest_spy_Constructable as Constructable, _vitest_spy_MaybeMocked as MaybeMocked, _vitest_spy_MaybeMockedConstructor as MaybeMockedConstructor, _vitest_spy_MaybeMockedDeep as MaybeMockedDeep, _vitest_spy_MaybePartiallyMocked as MaybePartiallyMocked, _vitest_spy_MaybePartiallyMockedDeep as MaybePartial
  84. line length 560 characters (raw pass, confidence 0.50)

    }[T extends Readonly<[any]> ? 1 : T extends Readonly<[any, any]> ? 2 : T extends Readonly<[any, any, any]> ? 3 : T extends Readonly<[any, any, any, any]> ? 4 : T extends Readonly<[any, any, any, any, any]> ? 5 : T extends Readonly<[any, any, any, any, any, any]> ? 6 : T extends Readonly<[any, any, any, any, any, any, a
  85. line length 651 characters (raw pass, confidence 0.50)

    > = { [K in keyof NonNullable<T["$test"]>]: NonNullable<T["$test"]>[K] | ScopedFixtureFn<NonNullable<T["$test"]>[K], ExtractScopedFixtures<T> & ExtraContext & TestContext> | [ScopedFixtureFn<NonNullable<T["$test"]>[K], ExtractScopedFixtures<T> & ExtraContext & TestContext>, TestScopeFixtureOptions?] } & { [K in keyof N
  86. info warn → info by review dynamic-import dist/chunks/coverage.cTDc4uSS.js:16:101

    dynamic `import(...)` with a non-literal specifier (ast pass, confidence 0.65)

    		if (loader.isBrowser) builtInModule += "/browser";
    		const { default: coverageModule } = loader.isBrowser ? await loader.import(builtInModule) : await import(
    			/* @vite-ignore */
    			builtInModule
    likely benign LLM, confidence 0.85 Loads the built-in coverage module through a computed import path.
    Reasoning

    The dynamic import specifier is a built-in coverage module path that the code assembles itself, with a @vite-ignore hint. Vitest uses this pattern to load its own coverage provider, so it is an expected dynamic load, not a fetch of attacker-controlled code.

  87. info whitespace-anomaly dist/chunks/creator.BQ3onxbh.js:56:1

    file mixes tab and space indentation (382 tab-indented and 94 space-indented lines) (raw pass, confidence 0.40)

    const jsxExample = {
    	name: "HelloWorld.jsx",
    	js: `
    export default function HelloWorld({ name }) {
  88. orphaned high surrogate \uD800 (no matching low surrogate) (token pass, confidence 0.65)

    function isHighSurrogate(char) {
    	return char >= "\ud800" && char <= "\udbff";
    }
  89. orphaned high surrogate \uDBFF (no matching low surrogate) (token pass, confidence 0.65)

    function isHighSurrogate(char) {
    	return char >= "\ud800" && char <= "\udbff";
    }
  90. info whitespace-anomaly dist/chunks/doctor.CPlMs7-y.js:19:1

    file mixes tab and space indentation (400 tab-indented and 10 space-indented lines) (raw pass, confidence 0.40)

    function resolveDoctorCandidates(projects, options = {}) {
    	const candidates = [];
    	// `pool`, `environment` and the fs module cache don't reach the browser
    	// runtime, so those candidates are driven by the node-side projects only;
  91. info whitespace-anomaly dist/chunks/index.B03wg4V0.js:10:1

    file mixes tab and space indentation (177 tab-indented and 1 space-indented lines) (raw pass, confidence 0.40)

    function setupChaiConfig(config) {
    	Object.assign(chai.config, config);
    }
  92. info whitespace-anomaly dist/chunks/index.BFXLpwll.js:19:1

    file mixes tab and space indentation (1504 tab-indented and 7 space-indented lines) (raw pass, confidence 0.40)

    class BareModuleMocker {
    	options;
    	static pendingIds = [];
    	spyModule;
  93. info whitespace-anomaly dist/chunks/index.BXttT2gP.js:23:1

    file mixes tab and space indentation (6425 tab-indented and 20 space-indented lines) (raw pass, confidence 0.40)

    function requireNaturalCompare () {
    	if (hasRequiredNaturalCompare) return naturalCompare$1.exports;
    	hasRequiredNaturalCompare = 1;
    	/*
  94. info whitespace-anomaly dist/chunks/index.BoyTG_B7.js:8:1

    file mixes tab and space indentation (49 tab-indented and 143 space-indented lines) (raw pass, confidence 0.40)

    const AGENTS = [
      "npm",
      "yarn",
      "yarn@berry",
  95. info whitespace-anomaly dist/chunks/index.D0heQG4v.js:4:1

    file mixes tab and space indentation (913 tab-indented and 18 space-indented lines) (raw pass, confidence 0.40)

    function _mergeNamespaces(n, m) {
      m.forEach(function (e) {
        e && typeof e !== 'string' && !Array.isArray(e) && Object.keys(e).forEach(function (k) {
          if (k !== 'default' && !(k in n)) {
  96. line length 648 characters (raw pass, confidence 0.50)

    	function v(a){if("object"===typeof a&&null!==a){var r=a.$$typeof;switch(r){case b:switch(a=a.type,a){case d:case f:case e:case m:case n:return a;default:switch(a=a&&a.$$typeof,a){case k:case h:case l:case q:case p:case g:return a;default:return r}}case c:return r}}}reactIs_production_min.ContextConsumer=h;reactIs_prod
  97. line length 651 characters (raw pass, confidence 0.50)

    	reactIs_production_min.SuspenseList=n;reactIs_production_min.isAsyncMode=function(){return  false};reactIs_production_min.isConcurrentMode=function(){return  false};reactIs_production_min.isContextConsumer=function(a){return v(a)===h};reactIs_production_min.isContextProvider=function(a){return v(a)===g};reactIs_produc
  98. info whitespace-anomaly dist/chunks/index.D14IAvnE.js:54:1

    file mixes tab and space indentation (12129 tab-indented and 417 space-indented lines) (raw pass, confidence 0.40)

    function _mergeNamespaces(n, m) {
      m.forEach(function (e) {
        e && typeof e !== 'string' && !Array.isArray(e) && Object.keys(e).forEach(function (k) {
          if (k !== 'default' && !(k in n)) {
  99. line length 962 characters (raw pass, confidence 0.50)

    	function _createForOfIteratorHelper(o, allowArrayLike) { var it = typeof Symbol !== "undefined" && o[Symbol.iterator] || o["@@iterator"]; if (!it) { if (Array.isArray(o) || (it = _unsupportedIterableToArray(o)) || allowArrayLike) { if (it) o = it; var i = 0; var F = function F() {}; return { s: F, n: function n() { if
  100. line length 535 characters (raw pass, confidence 0.50)

    	function _objectSpread(target) { for (var i = 1; i < arguments.length; i++) { var source = arguments[i] != null ? arguments[i] : {}; if (i % 2) { ownKeys(Object(source), true).forEach(function (key) { _defineProperty(target, key, source[key]); }); } else if (Object.getOwnPropertyDescriptors) { Object.defineProperties(
  101. line length 962 characters (raw pass, confidence 0.50)

    	function _createForOfIteratorHelper(o, allowArrayLike) { var it = typeof Symbol !== "undefined" && o[Symbol.iterator] || o["@@iterator"]; if (!it) { if (Array.isArray(o) || (it = _unsupportedIterableToArray(o)) || allowArrayLike) { if (it) o = it; var i = 0; var F = function F() {}; return { s: F, n: function n() { if
  102. info whitespace-anomaly dist/chunks/init.DVorxUyL.js:15:1

    file mixes tab and space indentation (364 tab-indented and 1 space-indented lines) (raw pass, confidence 0.40)

    function isBuiltinEnvironment(env) {
    	return env in environments;
    }
    const isWindows = process.platform === "win32";
  103. info warn → info by review dynamic-import dist/chunks/init.DVorxUyL.js:51:113

    dynamic `import(...)` with a non-literal specifier (ast pass, confidence 0.65)

    	return resolveEnvironmentFromModule(name, packageId, await traces.$("vitest.runtime.environment.import", () => import(packageId)));
    }
    function resolveEnvironmentFromModule(name, packageId, pkg) {
    likely benign LLM, confidence 0.80 Dynamically imports a named test-environment package for vitest.
    Reasoning

    The import resolves a user-configured test environment package by name, which is how vitest loads environment plugins. Importing a configured package is normal for a test runner, though the specifier is not a literal.

  104. info warn → info by review dynamic-import dist/chunks/nativeModuleMocker.3uBcOd84.js:179:10

    dynamic `import(...)` with a non-literal specifier (ast pass, confidence 0.65)

    		url.searchParams.set("mock", "actual");
    		return import(url.toString());
    	}
    	importMock(rawId, importer) {
    likely benign LLM, confidence 0.90 Imports the actual (unmocked) module by appending a mock=actual query.
    Reasoning

    This dynamic import adds a query parameter to a module URL and imports it, which is the standard mechanism vitest uses to load the actual module behind a mock. The module URL comes from the test runner's own resolution, so this is legitimate module-mocking behavior.

  105. info warn → info by review dynamic-import dist/chunks/nativeModuleMocker.3uBcOd84.js:184:44

    dynamic `import(...)` with a non-literal specifier (ast pass, confidence 0.65)

    		// file is already mocked
    		if (resolvedId.includes("mock=")) return import(resolvedId);
    		const filename = fileURLToPath(resolvedId);
    		const external = !isAbsolute(filename) || this.isModuleDirectory(resolvedId) ? normalizeModuleId(rawId) : null;
    likely benign LLM, confidence 0.90 Imports an already-mocked module by its resolved URL.
    Reasoning

    The import handles a module that is already mocked, using a resolved file URL the mocker computed. This is the expected path in a module-mocking runtime, not an attacker-driven load.

  106. info warn → info by review dynamic-import dist/chunks/nativeModuleMocker.3uBcOd84.js:189:24

    dynamic `import(...)` with a non-literal specifier (ast pass, confidence 0.65)

    		const redirect = this.findMockRedirect(filename, external);
    		if (redirect) return import(pathToFileURL(redirect).toString());
    		const url = new URL(resolvedId);
    		url.searchParams.set("mock", "automock");
    likely benign LLM, confidence 0.90 Imports a mock redirect target or an automocked module URL.
    Reasoning

    The import loads a redirect target from the mock configuration, or an automock URL built from the module's own resolved ID. Both are internal mocker behavior and the input is test configuration, not network or attacker content.

  107. info warn → info by review dynamic-import dist/chunks/nativeModuleMocker.3uBcOd84.js:192:10

    dynamic `import(...)` with a non-literal specifier (ast pass, confidence 0.65)

    		url.searchParams.set("mock", "automock");
    		return import(url.toString());
    	}
    }
    likely benign LLM, confidence 0.90 Imports an automocked module URL built from the resolved path.
    Reasoning

    This is the same automock dynamic import as the nearby lines, building a URL with a mock=automock query from the module's resolved path. It is standard test-mocking code.

  108. file mixes tab and space indentation (66 tab-indented and 1500 space-indented lines) (raw pass, confidence 0.40)

    function withTrailingSlash(input = "", respectQueryAndFragment) {
      {
        return input.endsWith("/") ? input : input + "/";
      }
  109. info warn → info by review dynamic-import dist/chunks/nativeModuleRunner.xi64Afb2.js:2397:10

    dynamic `import(...)` with a non-literal specifier (ast pass, confidence 0.65)

    		if (moduleId.includes("?") && !path.includes("?")) queryParams = moduleId.slice(moduleId.indexOf("?"));
    		return import(pathToFileURL$1(path + queryParams).toString());
    	}
    }
    likely benign LLM, confidence 0.90 Imports a resolved local module file as a file URL.
    Reasoning

    The import converts a resolved local path, plus any query string taken from the module ID, into a file URL and loads it. This is the module runner's normal loader for files it already resolved, not an arbitrary remote load.

  110. file mixes tab and space indentation (181 tab-indented and 160 space-indented lines) (raw pass, confidence 0.40)

    const KNOWN_ASSET_TYPES = [
    	"apng",
    	"bmp",
    	"png",
  111. line length 677 characters (raw pass, confidence 0.50)

    export { objectAttr as A, getCallLastIndex as B, CSS_LANGS_RE as C, noop as D, createSimpleStackTrace as E, sanitizeFilePath as F, deepMerge as G, withTrailingSlash as H, wrapId as I, isExternalUrl as J, KNOWN_ASSET_TYPES as K, unwrapId as L, relative as a, basename as b, cleanUrl as c, dirname as d, createDefer as e, 
  112. info whitespace-anomaly dist/chunks/plugin.d.olEn8IL9.d.ts:22:1

    file mixes tab and space indentation (1851 tab-indented and 212 space-indented lines) (raw pass, confidence 0.40)

    interface ConstructorOptionsOverride {
    	/**
    	* The html content for the test.
    	*
  113. info whitespace-anomaly dist/chunks/run.BfrMbGVD.js:10:1

    file mixes tab and space indentation (3196 tab-indented and 21 space-indented lines) (raw pass, confidence 0.40)

    function random(seed) {
    	const x = Math.sin(seed++) * 1e4;
    	return x - Math.floor(x);
    }
  114. line length 546 characters (raw pass, confidence 0.50)

    export { createTagsFilter as A, validateTags as B, shuffle as C, TestSyntaxError as T, processError as a, printDiffOrStringify as b, createTaskCollector as c, diff as d, getCurrentSuite as e, createChainable as f, getCurrentTest as g, getHooks as h, getFn as i, afterAll as j, afterEach as k, aroundAll as l, matchesTags
  115. info whitespace-anomaly dist/chunks/source-map.BjWcsIL9.js:9:1

    file mixes tab and space indentation (1023 tab-indented and 457 space-indented lines) (raw pass, confidence 0.40)

    function requireBuild () {
    	if (hasRequiredBuild) return build;
    	hasRequiredBuild = 1;
  116. file mixes tab and space indentation (53 tab-indented and 4 space-indented lines) (raw pass, confidence 0.40)

    interface RuntimeCoverageModuleLoader {
    	import: (id: string) => Promise<{
    		default: RuntimeCoverageProviderModule;
    	}>;
  117. info whitespace-anomaly dist/chunks/spy.DDMXghXv.js:2:1

    file mixes tab and space indentation (423 tab-indented and 9 space-indented lines) (raw pass, confidence 0.40)

    function isMockFunction(fn) {
    	return typeof fn === "function" && "_isMockFunction" in fn && fn._isMockFunction === true;
    }
    const MOCK_RESTORE = /* @__PURE__ */ new Set();
  118. info identifier-low-length dist/chunks/tinyrainbow.Do8I1XRG.js:1:1

    188 of 304 non-conventional identifiers are single-character (62%) (token pass, confidence 0.50)

  119. info whitespace-anomaly dist/chunks/utils.DSfl_w8V.js:28:1

    file mixes tab and space indentation (100 tab-indented and 16 space-indented lines) (raw pass, confidence 0.40)

    const labelDefaultColors = [
    	$.bgYellow,
    	$.bgCyan,
    	$.bgGreen,
  120. info whitespace-anomaly dist/chunks/vm.Cwj01UFE.js:31:1

    file mixes tab and space indentation (1151 tab-indented and 11 space-indented lines) (raw pass, confidence 0.40)

    class CodeCache {
    	entries = /* @__PURE__ */ new Map();
    	get(identifier, source) {
    		const entry = this.entries.get(identifier);
  121. info whitespace-anomaly dist/chunks/worker.d.gsA26mmR.d.ts:9:1

    file mixes tab and space indentation (58 tab-indented and 69 space-indented lines) (raw pass, confidence 0.40)

    interface RpcRequest {
      /**
       * Type
       */
  122. info whitespace-anomaly dist/config.cjs:19:1

    file mixes tab and space indentation (66 tab-indented and 2 space-indented lines) (raw pass, confidence 0.40)

    const coverageConfigDefaults = {
    	provider: "v8",
    	enabled: false,
    	clean: true,
  123. info warn → info by review dynamic-import dist/module-evaluator.js:103:173

    dynamic `import(...)` with a non-literal specifier (ast pass, confidence 0.65)

    		});
    		const namespace = await this._otel.$("vitest.module.external", { attributes: { "code.file.path": file } }, () => this.vm ? this.vm.externalModulesExecutor.import(file) : import(file)).finally(() => {
    			this.options.moduleExecutionInfo?.set(filename, finishModuleExecutionInfo());
    		});
    likely benign LLM, confidence 0.85 Vitest module evaluator dynamically imports an external module file inside a telemetry span.
    Reasoning

    This is Vitest's module evaluator loading external modules via a dynamic import of a file path, wrapped in OpenTelemetry span instrumentation and a VM executor fallback. Dynamic import with a variable path is a normal pattern for a test runner loading user modules; no decoding, shell, or network exfiltration is present.

  124. info whitespace-anomaly dist/node.d.ts:36:1

    file mixes tab and space indentation (173 tab-indented and 104 space-indented lines) (raw pass, confidence 0.40)

    interface TscErrorInfo {
    	filePath: string;
    	errCode: number;
    	errMsg: string;
  125. info warn → info by review dynamic-import dist/traces.js:28:39

    dynamic `import(...)` with a non-literal specifier (ast pass, confidence 0.65)

    			});
    			const sdkInit = (options.sdkPath ? import(
    				/* @vite-ignore */
    				options.sdkPath
    likely benign LLM, confidence 0.85 Conditional dynamic import of a configured tracing SDK path in Vitest's traces module.
    Reasoning

    This is Vitest tracing setup that conditionally imports an SDK path from options with a vite-ignore hint, a common plugin-loading pattern. The specifier comes from configuration rather than attacker-controlled network data, and there is no encoding or payload construction.

Reproduce This Scan

Run disclude locally to verify. These commands scan the published file; the "new in this release" marks come from comparing it with the previous release's file, which they don't repeat. Add --format sarif for SARIF output. Add --llm (with an API key in the environment) to include the LLM review.

cargo install disclude --version 4.3.0
curl -fsSL -o vitest-5.1.0-beta.1.tgz https://registry.npmjs.org/vitest/-/vitest-5.1.0-beta.1.tgz
printf '%s  %s\n' 5103900b80da936eeafd5fbc732ef09bbdba6f355e4d2c94a47033bed06405a8 vitest-5.1.0-beta.1.tgz | shasum -a 256 -c -
mkdir pkg && tar -xzf vitest-5.1.0-beta.1.tgz -C pkg --strip-components 1
disclude scan --untrusted --severity info pkg