DhanushNehru / DhanushNehru/lockcheck

Alphabetize and expand the TRUSTED_SCOPES list

Open Beginner friendly
#10 0 comments 0 reactions 0 assignees View on GitHub
enhancement good first issue help wanted
Dominant language
JavaScript
Stars
11
Forks
3
Avg merge
43m
Merged PRs (30d)
1

Description

In `src/analyzers/typosquat.js`, we have a hardcoded Set called `TRUSTED_SCOPES` which prevents the typosquat analyzer from throwing false positives on official packages (like `@types`, `@babel`, etc.).

Currently, this list is a bit messy. It needs to be alphabetized for easier maintenance, and we should expand it to include a few more popular official scopes that developers commonly use.

**Acceptance Criteria:**
- Alphabetize the `TRUSTED_SCOPES` list in `src/analyzers/typosquat.js`.
- Add common missing frontend/backend scopes like `@reduxjs`, `@react-navigation`, `@jest`, `@vitest`, `@eslint`.

Contributor guide

Open the contributing guide

Research direction

Open src/analyzers/typosquat.js and locate the TRUSTED_SCOPES Set. Review its current ordering and entries, then alphabetize the list and add the five scopes named in the acceptance criteria. Done means the list is alphabetized and includes @reduxjs, @react-navigation, @jest, @vitest, and @eslint.

Written by the indexing model from the issue text.

Assessment

Tech stack
javascript
Domain
cli, security
Issue type
Feature
Difficulty
2/5
Estimated time
1-3 hours
Activity status
Quiet
Clarity
Clearly specified
Newbie friendliness
68/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.