sverklo audit
D
Overall Health
C
Dead code
18% orphan symbols (231/1319)
C
Circular deps
5 cycles detected
F
Coupling
max fan-in: 131 (lib/RuntimeGlobals.js)
F
Security
6 concerns found
Overview
- 8362 files indexed
- 10798 code symbols extracted
- 59628 symbol references tracked
- 0 active memories (0 core, 0 stale)
- Languages: javascript (8272), typescript (89), cpp (1)
God Nodes (most-referenced symbols)
These are the symbols your codebase depends on most. Changes here have the largest blast radius.
- add — 1025 references
- callback — 946 references
- set — 854 references
- get — 742 references
- resolve — 675 references
- apply — 448 references
- read — 375 references
- dep — 299 references
- call — 287 references
- indent — 243 references
Hub Files (highest PageRank)
Core architectural files — imported by many others.
lib/util/makeSerializable.js(1.00)lib/util/serialization.js(0.89)lib/WebpackError.js(0.55)lib/util/memoize.js(0.51)lib/RuntimeGlobals.js(0.41)lib/ModuleTypeConstants.js(0.31)lib/AbstractMethodError.js(0.30)test/helpers/supportsWebAssembly.js(0.26)lib/config/defaults.js(0.26)lib/Template.js(0.25)
Orphans (potential dead code)
Named functions with zero detected references. Could be dead code, public API exports, or referenced dynamically.
- RETURNS_TRUE —
lib/ExportsInfo.js:62 - Hash —
lib/util/Hash.js:11 - find —
lib/util/SetHelpers.js:61 - chunkHasRuntimeOrJs —
lib/javascript/JavascriptModulesPlugin.js:131 - printGeneratedCodeForStack —
lib/javascript/JavascriptModulesPlugin.js:159 - renderMissingModuleError —
lib/javascript/JavascriptModulesPlugin.js:1645 - HarmonyImportDependency —
lib/dependencies/HarmonyImportDependency.js:92 - fnv1a32 —
lib/util/numberHash.js:47 - fnv1a64 —
lib/util/numberHash.js:64 - Parser —
lib/Parser.js:26
Coupling (high-PageRank files)
lib/util/makeSerializable.js(1.00)lib/util/serialization.js(0.89)lib/WebpackError.js(0.55)lib/util/memoize.js(0.51)lib/RuntimeGlobals.js(0.41)
Circular Dependencies (5 cycles)
- lib/AbstractMethodError.js -> lib/WebpackError.js -> lib/util/makeSerializable.js -> lib/util/serialization.js -> lib/serialization/FileMiddleware.js -> lib/serialization/SerializerMiddleware.js -> lib/AbstractMethodError.js
- lib/Dependency.js -> lib/RawModule.js -> lib/Module.js -> lib/ModuleGraph.js -> lib/dependencies/HarmonyImportDependency.js -> lib/Dependency.js
- lib/Dependency.js -> lib/RawModule.js -> lib/Module.js -> lib/ModuleGraph.js -> lib/dependencies/HarmonyImportDependency.js -> lib/dependencies/ModuleDependency.js -> lib/Dependency.js
- lib/util/binarySearchBounds.js -> lib/util/binarySearchBounds.js
- lib/DynamicEntryPlugin.js -> lib/EntryOptionPlugin.js -> lib/DynamicEntryPlugin.js
Security Issues (6 found)
Critical (1)
- API token —
lib/util/hash/md4.js:14 "AGFzbQEAAAABCAJgAX8AYAAAAwUEAQAAAAUDAQABBhoFfwFBAAt/AUEAC38BQQALfwFBAAt/AUEACwciBARpbml0AAAGdXBkYXRlAAIFZmluYWwAAwZtZW1
High (5)
- new Function() usage —
lib/util/binarySearchBounds.js:111 const result = new Function(fnSource);- new Function() usage —
lib/runtime/GlobalRuntimeModule.js:30 "return this || new Function('return this')();"- eval() usage —
lib/JavascriptMetaInfoPlugin.js:41 buildInfo.moduleConcatenationBailout = "eval()";- eval() usage —
lib/EvalDevToolModulePlugin.js:101 - `
eval(${ - eval() usage —
lib/EvalSourceMapDevToolPlugin.js:219 - `
eval(${
Suggested Next Steps
- Before refactoring add, run
sverklo_impactto see the 1025 call sites lib/util/makeSerializable.jsis your most-imported file — changes here cascade widely- 15+ potential orphans detected — audit for dead code