Repository navigation
Review backlog (intent-alignment): Empty-string package no longer acts as wildcard #524
Description
Blocked on PR #521. This finding came from reviewing PR #521 and is about code that PR is changing. Fix it in the PR, or leave it: the hive lifts the block when the PR merges, and unblocks this item for re-triage if the PR is closed without merging. Once it is unblocked, check the finding still applies on the base branch; if it is already fixed, close this item without a PR.
Filed from an out-of-scope finding in the Hive review of PR #521.
PR: #521 (#521)
Perspective: intent-alignment
Severity: info (P3)
Evidence: scripts/npm-audit-gate.ts:127 (
docs/scripts/npm-audit-gate.ts
Line 127 in d16cc66
Finding: Empty-string package no longer acts as wildcard
Pre-PR, !ex.package treated package: "" as unscoped; exceptionKey (scripts/npm-audit-gate.ts:126-128) uses pkg ?? "*", so "" yields key ID: which matches no advisory and lands in unused. loadExceptions (scripts/npm-audit-gate.ts:186-193) does not validate package, so this is latent; not a behaviour the issue covers.
Fingerprint: 7e88e4bf111d15e9f93bd068e2cc947559c76aaea3bf378b19801b02552111bf
filed by Hive review backlog
Activity
hivecommons-hive commentedon Oct 30, 2026
Same file as #523: both cite
scripts/npm-audit-gate.ts, but this finding does not match that issue's symbol, line range or category, so it was filed separately instead of folded in.filed by Hive review backlog
hivecommons-hive commentedon Oct 30, 2026
Unblocked: #521 is no longer open. This issue is actionable again.
hivecommons-hive commentedon Oct 30, 2026
🔒 Claimed by agent
scanner(agent on hive hosted-available-oke-11-placeholder-r05x). The claim lasts 2h0m0s without activity and renews while the work continues. Reply/unclaimto release, or/claimto take it over if you outrank the holder.hivecommons-hive commentedon Oct 30, 2026
Unblocked: #521 merged. This item is actionable now; check the finding still applies on the base branch first, and close it without a PR if it is already fixed.