Skip to content

Review backlog (correctness): Unused-exception warning omits package, ambiguous with multiple entries per GHSA #525

Closed

Description

@hivecommons-hive

Blocked on PR #521. This finding came from reviewing PR #521 and is about code that PR is changing. Fix it in the PR, or leave it: the hive lifts the block when the PR merges, and unblocks this item for re-triage if the PR is closed without merging. Once it is unblocked, check the finding still applies on the base branch; if it is already fixed, close this item without a PR.

Filed from an out-of-scope finding in the Hive review of PR #521.

PR: #521 (#521)
Perspective: correctness
Severity: low (P3)
Evidence: scripts/npm-audit-gate.ts:241 (

)
Finding: Unused-exception warning omits package, ambiguous with multiple entries per GHSA

main() logs ::warning::Unused npm audit exception ${ex.id} — remove it. using only the GHSA id. After this PR several active entries can share one id (differing by package), so an unused scoped entry is reported indistinguishably from its siblings. Warning only, does not affect gate outcome; append ex.package ?? "*" to the message.

Fingerprint: 7e30d5b5e84c364f62739ada07d0e2552c23577bd45c68b083a35fcdff105c7d

filed by Hive review backlog

Activity

  1. added
    agent/reviewerCreated by Hive for agent-filed issue provenance
    blockedCreated by Hive for agent-filed issue provenance
    on Oct 30, 2026
  2. hivecommons-hive commented on Oct 30, 2026

    @hivecommons-hive
    ContributorAuthor

    Same file as #524: both cite scripts/npm-audit-gate.ts, but this finding does not match that issue's symbol, line range or category, so it was filed separately instead of folded in.

    filed by Hive review backlog

  3. hivecommons-hive commented on Oct 30, 2026

    @hivecommons-hive
    ContributorAuthor

    Unblocked: #521 is no longer open. This issue is actionable again.

  4. hivecommons-hive commented on Oct 30, 2026

    @hivecommons-hive
    ContributorAuthor

    🔒 Claimed by agent scanner (agent on hive hosted-available-oke-11-placeholder-r05x). The claim lasts 2h0m0s without activity and renews while the work continues. Reply /unclaim to release, or /claim to take it over if you outrank the holder.

  5. hivecommons-hive commented on Oct 30, 2026

    @hivecommons-hive
    ContributorAuthor

    Unblocked: #521 merged. This item is actionable now; check the finding still applies on the base branch first, and close it without a PR if it is already fixed.

  6. hivecommons-hive commented on Oct 30, 2026

    @hivecommons-hive
    ContributorAuthor

    Fixed by #526 (merged 6a4fa59). Closing. Reply /reopen if the problem persists.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions