📦 deps(thirdparty): update snapshots

2026-06-03 16:02:56 +00:00
parent ac7fffe532
commit 5cb67428bd
803 changed files with 78437 additions and 401 deletions
@@ -0,0 +1,36 @@
+import { lineOf } from '../util.mjs';
+
+export const metadata = {
+  id: 'source-maps-production',
+  title: 'Source maps enabled in production',
+  severity: 'low',
+  billingDimension: 'edge-requests',
+  trafficIndependent: true,
+  description:
+    'productionBrowserSourceMaps: true ships .map files in the production bundle, increasing transfer size 30-100% per visitor. Useful for error reporting via Sentry; not useful for users.',
+  fix:
+    'Keep source maps generation but exclude them from the public bundle. Upload to your error tracker via build-time CI step; do not serve them with the deployment.',
+  citations: [
+    'https://nextjs.org/docs/messages/improper-devtool',
+  ],
+  excludeGlobs: [],
+  includeGlobs: ['next.config.{js,mjs,ts}', 'svelte.config.{js,mjs,ts}'],
+};
+
+export function scan({ files }) {
+  const out = [];
+  for (const { path, content } of files) {
+    if (!/^next\.config\.(js|mjs|ts)$/.test(path.split('/').pop() ?? '')) continue;
+    const m = /productionBrowserSourceMaps\s*:\s*true/.exec(content);
+    if (m) {
+      out.push({
+        pattern: metadata.id,
+        file: path,
+        line: lineOf(content, m.index),
+        evidence: 'productionBrowserSourceMaps: true',
+        trafficIndependent: metadata.trafficIndependent,
+      });
+    }
+  }
+  return out;
+}