verify / javascript
Verifying JavaScript changes
Files: .js, .jsx, .mjs, .cjs.
Run the checks under every change, add the checks for what your diff touches, then
apply the review prompts for what the tools miss. Usage is measured across
22 scanned repositories that write JavaScript; prompts come from
318 review discussions.
Run on every change
the tool most JavaScript repositories run for each check
-
Formatting Layout drift that buries the real change in the diff.
prettier64% · 14 of 22 repos autofixprettier --write .exit codes, docs, alternatives, where it runs
- Exit codes
0everything formatted1something was not formatted (--check)2prettier error - Commands seen
prettier --write .prettier --check .prettier --cache --check . - Runs inci, local
- Seen infacebook/react, vercel/next.js, facebook/react-native, axios/axios, mui/material-ui, mermaid-js/mermaid
- Docshttps://prettier.io/docs/cli#exit-codes
- Exit codes
-
Linting Bug-prone patterns, unused code and conventions the formatter does not cover.
eslint95% · 21 of 22 repos autofixeslint .exit codes, docs, alternatives, where it runs
- Exit codes
0no errors1linting errors found2configuration problem or internal error - Commands seen
eslint .eslinteslint --fix - Runs inci, local
- Alternatives
biome5% - Seen infacebook/react, vercel/next.js, facebook/react-native, nodejs/node, axios/axios, mui/material-ui
- Docshttps://eslint.org/docs/latest/use/command-line-interface#exit-codes
- Exit codes
-
Type checking Wrong types, unhandled null or None, call signatures broken across modules.
No scanned repository in this language runs a tool for this. Lean on the review prompts.
-
Unit and integration tests Behaviour regressions on the paths the tests exercise.
jest32% · 7 of 22 reposjestexit codes, docs, alternatives, where it runs
- Commands seen
jestjest --maxWorkers=2 --ci --reporters=default --reporters=jest-junitjest --runInBand - Runs inci, local
- Alternatives
vitest32%,mocha18%,node-test14% - Seen infacebook/react, vercel/next.js, facebook/react-native, mermaid-js/mermaid, prettier/prettier, cypress-io/cypress
- Docshttps://github.com/jestjs/jest
- Commands seen
Review prompts for every change 53 in total
Add when the change touches
open the ones that describe your diff
Authentication, input handling, secrets, permissions
-
Security scanning Injection, unsafe APIs and tainted data reaching a sink.
codeql23% · 5 of 22 reposruns via GitHub Action github/codeql-action/analyze
exit codes, docs, alternatives, where it runs
- Runs inci
- Alternatives
semgrep5% - Seen innodejs/node, mui/material-ui, mermaid-js/mermaid, expressjs/express, tj/commander.js
- Docshttps://github.com/github/codeql
-
Secret scanning Credentials and tokens committed to the repository.
No scanned repository in this language runs a tool for this. Lean on the review prompts.
-
Dependency audit Known-vulnerable or disallowed dependencies and licenses.
dependency-review14% · 3 of 22 reposruns via GitHub Action actions/dependency-review-action
exit codes, docs, alternatives, where it runs
- Runs inci
- Alternatives
npm-audit5% - Seen inaxios/axios, mermaid-js/mermaid, prettier/prettier
- Docshttps://github.com/actions/dependency-review-action
Public APIs, signatures, error paths, nullability
-
Type checking Wrong types, unhandled null or None, call signatures broken across modules.
No scanned repository in this language runs a tool for this. Lean on the review prompts.
-
Unit and integration tests Behaviour regressions on the paths the tests exercise.
jest32% · 7 of 22 reposjestexit codes, docs, alternatives, where it runs
- Commands seen
jestjest --maxWorkers=2 --ci --reporters=default --reporters=jest-junitjest --runInBand - Runs inci, local
- Alternatives
vitest32%,mocha18%,node-test14% - Seen infacebook/react, vercel/next.js, facebook/react-native, mermaid-js/mermaid, prettier/prettier, cypress-io/cypress
- Docshttps://github.com/jestjs/jest
- Commands seen
-
Property-based tests Edge-case inputs nobody wrote a test for; invariants over generated data.
No scanned repository in this language runs a tool for this. Lean on the review prompts.
65 more in API, Error Handling, Null Handling — the playbook lists the top 12.
Service and framework code
-
Unit and integration tests Behaviour regressions on the paths the tests exercise.
jest32% · 7 of 22 reposjestexit codes, docs, alternatives, where it runs
- Commands seen
jestjest --maxWorkers=2 --ci --reporters=default --reporters=jest-junitjest --runInBand - Runs inci, local
- Alternatives
vitest32%,mocha18%,node-test14% - Seen infacebook/react, vercel/next.js, facebook/react-native, mermaid-js/mermaid, prettier/prettier, cypress-io/cypress
- Docshttps://github.com/jestjs/jest
- Commands seen
-
Version and platform matrix Breakage on a runtime version, OS or feature combination you did not run locally.
ci-matrix41% · 9 of 22 reposanalyze (language: 2)exit codes, docs, alternatives, where it runs
- Commands seen
analyze (language: 2)Tests (include: 5)analyze (language: 1) - Runs inci
- Seen innodejs/node, mermaid-js/mermaid, sveltejs/svelte, expressjs/express, bmad-code-org/bmad-method, prettier/prettier
- Docshttps://docs.github.com/en/actions/how-tos/write-workflows/choose-what-workflows-do/run-job-variations
- Commands seen
Algorithms, parsers, data transforms
-
Property-based tests Edge-case inputs nobody wrote a test for; invariants over generated data.
No scanned repository in this language runs a tool for this. Lean on the review prompts.
-
Fuzzing Crashes, panics and hangs on malformed input, especially in parsers and decoders.
No scanned repository in this language runs a tool for this. Lean on the review prompts.
-
Mutation testing Tests that keep passing whatever the code does.
No scanned repository in this language runs a tool for this. Lean on the review prompts.
-
Proofs and specifications Design-level bugs in protocols and algorithms, checked against a specification.
No scanned repository in this language runs a tool for this. Lean on the review prompts.
5 more in Algorithms — the playbook lists the top 10.
Threads, async code, locks, shared state
-
Concurrency model checking Races and orderings that fail only under specific interleavings.
No scanned repository in this language runs a tool for this. Lean on the review prompts.
-
Undefined-behaviour detection Memory-safety and aliasing violations in unsafe code.
No scanned repository in this language runs a tool for this. Lean on the review prompts.
-
Property-based tests Edge-case inputs nobody wrote a test for; invariants over generated data.
No scanned repository in this language runs a tool for this. Lean on the review prompts.
7 more in Concurrency — the playbook lists the top 12.
Network calls, retries, timeouts, protocols
-
Unit and integration tests Behaviour regressions on the paths the tests exercise.
jest32% · 7 of 22 reposjestexit codes, docs, alternatives, where it runs
- Commands seen
jestjest --maxWorkers=2 --ci --reporters=default --reporters=jest-junitjest --runInBand - Runs inci, local
- Alternatives
vitest32%,mocha18%,node-test14% - Seen infacebook/react, vercel/next.js, facebook/react-native, mermaid-js/mermaid, prettier/prettier, cypress-io/cypress
- Docshttps://github.com/jestjs/jest
- Commands seen
-
Fuzzing Crashes, panics and hangs on malformed input, especially in parsers and decoders.
No scanned repository in this language runs a tool for this. Lean on the review prompts.
10 more in Networking, Axios — the playbook lists the top 12.
UI components and pages
-
End-to-end browser tests User flows broken across components, routing and the network.
playwright18% · 4 of 22 reposplaywright testexit codes, docs, alternatives, where it runs
- Commands seen
playwright testplaywright test $(node scripts/e2e-tier-scope.mjs pr-check nightly-checkplaywright test ${SPECS[@]} --shard=${SHARD}/${SHARD_TOTAL} - Runs inci, local
- Seen infacebook/react, vercel/next.js, mui/material-ui, mermaid-js/mermaid
- Docshttps://github.com/microsoft/playwright
- Commands seen
-
Linting Bug-prone patterns, unused code and conventions the formatter does not cover.
eslint95% · 21 of 22 repos autofixeslint .exit codes, docs, alternatives, where it runs
- Exit codes
0no errors1linting errors found2configuration problem or internal error - Commands seen
eslint .eslinteslint --fix - Runs inci, local
- Alternatives
biome5% - Seen infacebook/react, vercel/next.js, facebook/react-native, nodejs/node, axios/axios, mui/material-ui
- Docshttps://eslint.org/docs/latest/use/command-line-interface#exit-codes
- Exit codes
12 more in React, Next, Next.js, Vue, Angular — the playbook lists the top 12.
Databases, migrations, caching
-
Unit and integration tests Behaviour regressions on the paths the tests exercise.
jest32% · 7 of 22 reposjestexit codes, docs, alternatives, where it runs
- Commands seen
jestjest --maxWorkers=2 --ci --reporters=default --reporters=jest-junitjest --runInBand - Runs inci, local
- Alternatives
vitest32%,mocha18%,node-test14% - Seen infacebook/react, vercel/next.js, facebook/react-native, mermaid-js/mermaid, prettier/prettier, cypress-io/cypress
- Docshttps://github.com/jestjs/jest
- Commands seen
-
Version and platform matrix Breakage on a runtime version, OS or feature combination you did not run locally.
ci-matrix41% · 9 of 22 reposanalyze (language: 2)exit codes, docs, alternatives, where it runs
- Commands seen
analyze (language: 2)Tests (include: 5)analyze (language: 1) - Runs inci
- Seen innodejs/node, mermaid-js/mermaid, sveltejs/svelte, expressjs/express, bmad-code-org/bmad-method, prettier/prettier
- Docshttps://docs.github.com/en/actions/how-tos/write-workflows/choose-what-workflows-do/run-job-variations
- Commands seen
Hot paths and performance
No tool-based check applies. The review prompts below are the verification.
14 more in Performance Optimization — the playbook lists the top 12.
Model, prompt and LLM code
-
Unit and integration tests Behaviour regressions on the paths the tests exercise.
jest32% · 7 of 22 reposjestexit codes, docs, alternatives, where it runs
- Commands seen
jestjest --maxWorkers=2 --ci --reporters=default --reporters=jest-junitjest --runInBand - Runs inci, local
- Alternatives
vitest32%,mocha18%,node-test14% - Seen infacebook/react, vercel/next.js, facebook/react-native, mermaid-js/mermaid, prettier/prettier, cypress-io/cypress
- Docshttps://github.com/jestjs/jest
- Commands seen
Logging, metrics, tracing
No tool-based check applies. The review prompts below are the verification.
CI workflows and configuration files
-
CI workflow linting Broken GitHub Actions syntax, script injection, over-broad token permissions.
No scanned repository in this language runs a tool for this. Lean on the review prompts.
-
File hygiene Invalid JSON, YAML or TOML, merge markers, trailing whitespace, oversized files.
pre-commit-hooks5% · 1 of 22 repos autofixruns via pre-commit hook check-json
exit codes, docs, alternatives, where it runs
- Runs inpre-commit, ci
- Seen inbmad-code-org/bmad-method
- Docshttps://github.com/pre-commit/pre-commit-hooks
32 more in CI/CD, Configurations — the playbook lists the top 12.
Dependencies and lockfiles
-
Dependency audit Known-vulnerable or disallowed dependencies and licenses.
dependency-review14% · 3 of 22 reposruns via GitHub Action actions/dependency-review-action
exit codes, docs, alternatives, where it runs
- Runs inci
- Alternatives
npm-audit5% - Seen inaxios/axios, mermaid-js/mermaid, prettier/prettier
- Docshttps://github.com/actions/dependency-review-action
-
Lockfile consistency A lockfile that no longer matches its manifest.
No scanned repository in this language runs a tool for this. Lean on the review prompts.
-
Version and platform matrix Breakage on a runtime version, OS or feature combination you did not run locally.
ci-matrix41% · 9 of 22 reposanalyze (language: 2)exit codes, docs, alternatives, where it runs
- Commands seen
analyze (language: 2)Tests (include: 5)analyze (language: 1) - Runs inci
- Seen innodejs/node, mermaid-js/mermaid, sveltejs/svelte, expressjs/express, bmad-code-org/bmad-method, prettier/prettier
- Docshttps://docs.github.com/en/actions/how-tos/write-workflows/choose-what-workflows-do/run-job-variations
- Commands seen
The tests themselves
-
Mutation testing Tests that keep passing whatever the code does.
No scanned repository in this language runs a tool for this. Lean on the review prompts.
-
Version and platform matrix Breakage on a runtime version, OS or feature combination you did not run locally.
ci-matrix41% · 9 of 22 reposanalyze (language: 2)exit codes, docs, alternatives, where it runs
- Commands seen
analyze (language: 2)Tests (include: 5)analyze (language: 1) - Runs inci
- Seen innodejs/node, mermaid-js/mermaid, sveltejs/svelte, expressjs/express, bmad-code-org/bmad-method, prettier/prettier
- Docshttps://docs.github.com/en/actions/how-tos/write-workflows/choose-what-workflows-do/run-job-variations
- Commands seen
Documentation and comments
-
Docs build Broken cross-references, links and markup in documentation.
No scanned repository in this language runs a tool for this. Lean on the review prompts.
-
Spelling Typos in identifiers, comments and docs.
No scanned repository in this language runs a tool for this. Lean on the review prompts.
8 more in Documentation — the playbook lists the top 12.
Where this comes from
22 scanned repositories with at least a fifth of their prompts in JavaScript
facebook/react7 · vercel/next.js11 · facebook/react-native4 · nodejs/node8 · axios/axios7 · mui/material-ui6 · mermaid-js/mermaid9 · sveltejs/svelte5 · expressjs/express4 · bmad-code-org/bmad-method7 · prettier/prettier6 · cypress-io/cypress5 · serverless/serverless6 · discourse/discourse3 · zen-browser/desktop2 · fastify/fastify3 · decolua/9router2 · tj/commander.js6 · chalk/chalk2 · adonisjs/core4 · aws/aws-sdk-js3 · cloudflare/workerd7