esbuild-0001: serve_other.go hosts []string scan → map[string]struct{} (57x, MEDIUM)
deno: CLEAN (uses HashSet/HashMap throughout, no Vec.contains() in loops)
1 test: 1/1 PASS
11 lines
462 B
Markdown
11 lines
462 B
Markdown
# CLEAN: deno
|
|
|
|
Scanned 2026-03-30. No actionable CWE-407 defects found.
|
|
|
|
The Deno codebase uses correct data structures throughout:
|
|
- `HashSet` for deduplication and membership tests (module_loader.rs, permissions/lib.rs, etc.)
|
|
- `BTreeSet` for sorted membership (cli/util/extract.rs)
|
|
- `HashMap`/`BTreeMap` for O(1) keyed lookups
|
|
- Fixed-size array literals only for small constant-size checks
|
|
|
|
No `Vec.contains()` patterns found in performance-critical loops.
|