decolua/9router

5 other commands the scanner could not classify

Commands from CI steps and task runners that look like checks but match no known tool. Some are checks, some are not.

• const promoteLatest = (process.env.EVENT_NAME === push
• process.env.PROMOTE_LATEST_INPUT === true
• tee $RUNNER_TEMP/dockerhub-latest-manifest.txt
• tee $RUNNER_TEMP/ghcr-latest-manifest.txt
• tee sdk-provenance.txt

full scan as JSON

• Test fidelity and assertionsTests must exercise the real production code path and fail with clear, actionable diagnostics when they break. 1. Never duplicate impleme...

  Decolua/9Router Testing JavaScript llm-infra 2026-09-06

  copy raw open
• Enforce trust boundariesTreat every point where data crosses a trust boundary as a security checkpoint, not an afterthought. Concretely: 1. Never leak secrets ou...

  Decolua/9Router Security JavaScript llm-infra 2026-09-29

  copy raw open
• Test real behavior clearlyTests should exercise the actual production code and fail with clear, actionable messages when something breaks. - Import and call the re...

  decolua/9router Testing JavaScript llm-infra 2026-09-06

  copy raw open
• Guard trust boundariesTreat every point where data crosses a trust boundary — server to client, client to server, or internal module to external provider — as ...

  decolua/9router Security JavaScript llm-infra 2026-09-29

  copy raw open
• Clear, real-implementation test assertionsTests must exercise the actual production code and fail with clear, actionable diagnostics rather than cryptic errors. - Import and test ...

  Decolua/9Router Testing JavaScript llm-infra 2026-09-06

  copy raw open
• Explicit API routing and translationWhen building adapters that route requests or translate payloads between different provider/API formats (e.g. OpenAI, Claude, Responses),...

  decolua/9router API JavaScript llm-infra 2026-09-29

  copy raw open
• Handle async failures explicitlyWhen composing state from multiple async calls (parallel fetches, follow-up probes, or secondary enrichment requests), always check the r...

  Decolua/9Router Error Handling JavaScript llm-infra 2026-09-29

  copy raw open
• LLM provider translation fidelityWhen writing adapters that translate between different LLM provider wire formats (OpenAI chat/completions, Responses API, Anthropic, Gemi...

  Decolua/9Router AI JavaScript llm-infra 2026-09-29

  copy raw open
• Sanitize untrusted input, fail closedTreat any data that originates outside your own trust boundary—upstream provider responses, client-supplied tool/parameter names, or unco...

  Decolua/9Router Security JavaScript llm-infra 2026-09-13

  copy raw open
• Translation layer fidelityWhen building proxy/translation layers between different API or protocol formats (e.g., OpenAI-to-Claude streaming translation, built-in-...

  Decolua/9Router API JavaScript llm-infra 2026-09-13

  copy raw open
• Extract duplicated logicAvoid duplicating logic across files or within multiple branches of the same function. When the same algorithm, HTTP call, parsing routin...

  Decolua/9Router Code Style JavaScript llm-infra 2026-09-04

  copy raw open
• Isolate errors, avoid cascadesWhen a feature depends on multiple probes/loads, ensure that failures in secondary/best-effort steps don’t corrupt primary state or cause...

  decolua/9router Error Handling JavaScript llm-infra 2026-07-05

  copy raw open
• Sanitize Upstream Stream ErrorsWhen handling upstream streaming responses (SSE/streaming APIs), treat any non-stream payload (e.g., HTML error pages) as untrusted input...

  decolua/9router Security JavaScript llm-infra 2026-06-30

  copy raw open