{
  "repository": "vitejs/vite",
  "ref": "0fdd81e9460dd44806b2b6290603ee2c8366a54e",
  "methods": [
    {
      "slug": "formal",
      "title": "Formal verification and model checking"
    },
    {
      "slug": "static_analysis",
      "title": "Static analysis"
    },
    {
      "slug": "testing",
      "title": "Testing"
    },
    {
      "slug": "formatting",
      "title": "Formatting and hygiene"
    },
    {
      "slug": "supply_chain",
      "title": "Supply chain"
    },
    {
      "slug": "unclassified",
      "title": "Unclassified"
    }
  ],
  "verifications": [
    {
      "tool": "semgrep",
      "method": "static_analysis",
      "commands": [
        "semgrep scan --quiet --sarif --config auto --exclude playground --exclude __tests__ --exclude-rule javascript.lang.security.audit.detect-non-literal-regexp.detect-non-literal-regexp > semgrep-results.sarif"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/semgrep.yml",
          "locator": "jobs.semgrep.steps[1]"
        }
      ],
      "upstream": "https://github.com/semgrep/semgrep",
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": "tsc",
      "method": "static_analysis",
      "commands": [
        "tsc -p scripts",
        "tsc"
      ],
      "triggers": [
        "ci",
        "local"
      ],
      "evidence": [
        {
          "path": ".github/workflows/ci.yml",
          "locator": "jobs.lint.steps[5] (Typecheck)"
        },
        {
          "path": "package.json",
          "locator": "scripts.typecheck"
        },
        {
          "path": "playground/package.json",
          "locator": "scripts.typecheck"
        },
        {
          "path": "docs/package.json",
          "locator": "devDependencies: typescript"
        },
        {
          "path": "package.json",
          "locator": "devDependencies: typescript"
        }
      ],
      "upstream": "https://github.com/microsoft/TypeScript",
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": "zizmor",
      "method": "static_analysis",
      "commands": [
        "uses zizmorcore/zizmor-action"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/zizmor.yml",
          "locator": "jobs.zizmor.steps[1] (Run zizmor 🌈)"
        }
      ],
      "upstream": "https://github.com/zizmorcore/zizmor",
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": "ci-matrix",
      "method": "testing",
      "commands": [
        "test (os: 1, node_version: 4, include: 2)"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/ci.yml",
          "locator": "jobs.test.strategy.matrix"
        }
      ],
      "upstream": "https://docs.github.com/en/actions/how-tos/write-workflows/choose-what-workflows-do/run-job-variations",
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": "vitest",
      "method": "testing",
      "commands": [
        "vitest run",
        "vitest run -c vitest.config.e2e.ts"
      ],
      "triggers": [
        "ci",
        "local"
      ],
      "evidence": [
        {
          "path": ".github/workflows/ci.yml",
          "locator": "jobs.test.steps[9] (Test unit)"
        },
        {
          "path": "package.json",
          "locator": "scripts.test-unit"
        },
        {
          "path": ".github/workflows/ci.yml",
          "locator": "jobs.test.steps[10] (Test serve)"
        },
        {
          "path": "package.json",
          "locator": "scripts.test-serve"
        },
        {
          "path": ".github/workflows/ci.yml",
          "locator": "jobs.test.steps[11] (Test serve (bundled dev))"
        },
        {
          "path": "package.json",
          "locator": "scripts.test-serve-bundled"
        },
        {
          "path": ".github/workflows/ci.yml",
          "locator": "jobs.test.steps[12] (Test build)"
        },
        {
          "path": "package.json",
          "locator": "scripts.test-build"
        },
        {
          "path": "package.json",
          "locator": "scripts.test"
        },
        {
          "path": "package.json",
          "locator": "scripts.debug-serve"
        },
        {
          "path": "package.json",
          "locator": "scripts.debug-build"
        },
        {
          "path": "package.json",
          "locator": "devDependencies: vitest"
        }
      ],
      "upstream": "https://github.com/vitest-dev/vitest",
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "node scripts/detect-release.ts $(git log -1 --format=%s) >> $GITHUB_OUTPUT"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/publish.yml",
          "locator": "jobs.detect-release.steps[2] (Detect release)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "oxfmt"
      ],
      "triggers": [
        "ci",
        "local"
      ],
      "evidence": [
        {
          "path": ".github/workflows/ci.yml",
          "locator": "jobs.lint.steps[4] (Check formatting)"
        },
        {
          "path": "package.json",
          "locator": "scripts.format"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "oxlint ."
      ],
      "triggers": [
        "ci",
        "local"
      ],
      "evidence": [
        {
          "path": ".github/workflows/ci.yml",
          "locator": "jobs.lint.steps[3] (Lint)"
        },
        {
          "path": "package.json",
          "locator": "scripts.lint"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "vitepress dev"
      ],
      "triggers": [
        "local"
      ],
      "evidence": [
        {
          "path": "docs/package.json",
          "locator": "scripts.docs"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "vitepress serve"
      ],
      "triggers": [
        "local"
      ],
      "evidence": [
        {
          "path": "docs/package.json",
          "locator": "scripts.docs-serve"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    }
  ]
}