DhanushNehru / DhanushNehru/lockcheck
Alphabetize and expand the TRUSTED_SCOPES list
- Dominant language
- JavaScript
- Stars
- 11
- Forks
- 3
- Avg merge
- 43m
- Merged PRs (30d)
- 1
Description
In `src/analyzers/typosquat.js`, we have a hardcoded Set called `TRUSTED_SCOPES` which prevents the typosquat analyzer from throwing false positives on official packages (like `@types`, `@babel`, etc.).
Currently, this list is a bit messy. It needs to be alphabetized for easier maintenance, and we should expand it to include a few more popular official scopes that developers commonly use.
**Acceptance Criteria:**
- Alphabetize the `TRUSTED_SCOPES` list in `src/analyzers/typosquat.js`.
- Add common missing frontend/backend scopes like `@reduxjs`, `@react-navigation`, `@jest`, `@vitest`, `@eslint`.
Contributor guide
Research direction
Open src/analyzers/typosquat.js and locate the TRUSTED_SCOPES Set. Review its current ordering and entries, then alphabetize the list and add the five scopes named in the acceptance criteria. Done means the list is alphabetized and includes @reduxjs, @react-navigation, @jest, @vitest, and @eslint.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- javascript
- Domain
- cli, security
- Issue type
- Feature
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Activity status
- Quiet
- Clarity
- Clearly specified
- Newbie friendliness
- 68/100