npm / yargs / 18.2.0

yargs 18.2.0

Source
https://github.com/yargs/yargs
Artifact scanned
yargs-18.2.0.tgz (npm tarball · 47.7 KB · SHA-256 44ddd9d39e41…)
Compared with
yargs-18.1.0.tgz (0 signals introduced since)
Files
29 scanned, 30 skipped (binary, oversized, or unrecognised)
Signals
0 critical · 0 warn · 2 info
Scan time
0.1 s
LLM review
LLM review by claude-haiku-5-5 (Anthropic): nothing at warn or critical to review.
Disclude version
4.3.0
Scanned (UTC)
2026-10-23 15:57

Signals

Ordered by severity, then signals introduced in this release. Hidden characters are shown as ⟨U+…⟩.

  1. line length 952 characters (raw pass, confidence 0.50)

    var _YargsInstance_command, _YargsInstance_cwd, _YargsInstance_context, _YargsInstance_completion, _YargsInstance_completionCommand, _YargsInstance_defaultShowHiddenOpt, _YargsInstance_exitError, _YargsInstance_detectLocale, _YargsInstance_emittedWarnings, _YargsInstance_exitProcess, _YargsInstance_frozens, _YargsInsta
  2. line length 1540 characters (raw pass, confidence 0.50)

        [(_YargsInstance_command = new WeakMap(), _YargsInstance_cwd = new WeakMap(), _YargsInstance_context = new WeakMap(), _YargsInstance_completion = new WeakMap(), _YargsInstance_completionCommand = new WeakMap(), _YargsInstance_defaultShowHiddenOpt = new WeakMap(), _YargsInstance_exitError = new WeakMap(), _YargsInst

Reproduce This Scan

Run disclude locally to verify. These commands scan the published file; the "new in this release" marks come from comparing it with the previous release's file, which they don't repeat. Add --format sarif for SARIF output. Add --llm (with an API key in the environment) to include the LLM review.

cargo install disclude --version 4.3.0
curl -fsSL -o yargs-18.2.0.tgz https://registry.npmjs.org/yargs/-/yargs-18.2.0.tgz
printf '%s  %s\n' 44ddd9d39e41a7d73dd794b6d229f2b92fd655d394ef59e2ca34d31df6181d13 yargs-18.2.0.tgz | shasum -a 256 -c -
mkdir pkg && tar -xzf yargs-18.2.0.tgz -C pkg --strip-components 1
disclude scan --untrusted --severity info pkg