sverklo audit
D
Overall Health
B
Dead code
13% orphan symbols (243/1808)
D
Circular deps
6 cycles detected
D
Coupling
max fan-in: 43 (demos/bookstore/app/routes.ts)
F
Security
62 concerns found
Overview
- 884 files indexed
- 4633 code symbols extracted
- 26130 symbol references tracked
- 0 active memories (0 core, 0 stale)
- Languages: typescript (879), javascript (5)
God Nodes (most-referenced symbols)
These are the symbols your codebase depends on most. Changes here have the largest blast radius.
- equal — 1678 references
- deepEqual — 409 references
- set — 272 references
- query — 254 references
- add — 203 references
- render — 190 references
- update — 180 references
- quoteIdentifier — 134 references
- table — 122 references
- invariant — 101 references
Hub Files (highest PageRank)
Core architectural files — imported by many others.
demos/bookstore/app/routes.ts(1.00)packages/component/src/lib/invariant.ts(0.70)packages/component/src/lib/vdom.ts(0.60)packages/headers/src/lib/header-value.ts(0.50)packages/component/src/lib/typed-event-target.ts(0.50)packages/auth/src/lib/utils.ts(0.48)demos/bookstore/app/ui/layout.tsx(0.42)demos/bookstore/test/helpers.ts(0.37)packages/fetch-router/src/lib/route-map.ts(0.37)packages/component/src/lib/mixin.ts(0.35)
Orphans (potential dead code)
Named functions with zero detected references. Could be dead code, public API exports, or referenced dynamically.
- createDelta —
packages/component/src/lib/mixins/animate-layout-mixin.ts:22 - calcBoxDelta —
packages/component/src/lib/mixins/animate-layout-mixin.ts:57 - buildEnterKeyframes —
packages/component/src/lib/mixins/animate-mixins.ts:62 - resolveStyleTarget —
packages/component/src/lib/mixins/css-mixin.ts:66 - buildExitKeyframes —
packages/component/src/lib/mixins/animate-mixins.ts:67 - mixDelta —
packages/component/src/lib/mixins/animate-layout-mixin.ts:70 - resolveEnterConfig —
packages/component/src/lib/mixins/animate-mixins.ts:72 - resolveExitConfig —
packages/component/src/lib/mixins/animate-mixins.ts:78 - copyDeltaInto —
packages/component/src/lib/mixins/animate-layout-mixin.ts:82 - createAnimationOptions —
packages/component/src/lib/mixins/animate-mixins.ts:84
Coupling (high-PageRank files)
demos/bookstore/app/routes.ts(1.00)packages/component/src/lib/invariant.ts(0.70)packages/component/src/lib/vdom.ts(0.60)packages/headers/src/lib/header-value.ts(0.50)packages/component/src/lib/typed-event-target.ts(0.50)
Circular Dependencies (6 cycles)
- packages/component/src/lib/frame.ts -> packages/component/src/lib/vdom.ts -> packages/component/src/lib/scheduler.ts -> packages/component/src/lib/reconcile.ts -> packages/component/src/lib/frame.ts
- packages/component/src/lib/reconcile.ts -> packages/component/src/lib/vdom.ts -> packages/component/src/lib/scheduler.ts -> packages/component/src/lib/reconcile.ts
- packages/route-pattern/src/lib/route-pattern/parse.ts -> packages/route-pattern/src/lib/route-pattern/part-pattern.ts -> packages/route-pattern/src/lib/route-pattern/parse.ts
- packages/component/src/lib/navigation.ts -> packages/component/src/lib/run.ts -> packages/component/src/lib/navigation.ts
- packages/data-table/src/lib/database/helpers.ts -> packages/data-table/src/lib/database/query-execution.ts -> packages/data-table/src/lib/database/helpers.ts
- packages/data-table/src/lib/database/query-execution.ts -> packages/data-table/src/lib/database/relations.ts -> packages/data-table/src/lib/database/query-execution.ts
Security Issues (62 found)
Critical (62)
- Command injection risk —
packages/data-table-sqlite/src/lib/adapter.ts:228 this.#database.exec('savepoint ' + quoteIdentifier(name))- Command injection risk —
packages/data-table-sqlite/src/lib/adapter.ts:239 this.#database.exec('rollback to savepoint ' + quoteIdentifier(name))- Command injection risk —
packages/data-table-sqlite/src/lib/adapter.ts:250 this.#database.exec('release savepoint ' + quoteIdentifier(name))- Hardcoded secret —
demos/bookstore/app/controllers/auth/controller.test.ts:14 password: 'admin123',- Hardcoded secret —
demos/bookstore/app/controllers/auth/controller.test.ts:31 password: 'wrongpassword',- Hardcoded secret —
demos/social-auth/app/router.test.ts:39 body: new URLSearchParams({ email: 'user@example.com', password: 'password123' }),- Hardcoded secret —
packages/auth/src/lib/finish-external-auth.test.ts:27 access_token: 'access-token',- Hardcoded secret —
packages/auth/src/lib/finish-external-auth.test.ts:49 clientSecret: 'google-client-secret',- Hardcoded secret —
packages/auth/src/lib/oauth-flow.integration.test.ts:39 clientSecret: 'fake-client-secret',- Hardcoded secret —
packages/auth/src/lib/providers/auth0.test.ts:20 clientSecret: 'client-secret',- ...and 52 more
Suggested Next Steps
- Before refactoring equal, run
sverklo_impactto see the 1678 call sites demos/bookstore/app/routes.tsis your most-imported file — changes here cascade widely- 15+ potential orphans detected — audit for dead code