java-topology/defects/deno/patch/CLEAN.md
russell@unturf.com da26ffd2cf wave16c: esbuild/deno CWE-407 scan results
esbuild-0001: serve_other.go hosts []string scan → map[string]struct{} (57x, MEDIUM)
deno: CLEAN (uses HashSet/HashMap throughout, no Vec.contains() in loops)

1 test: 1/1 PASS
2026-03-30 07:39:57 -04:00

462 B

CLEAN: deno

Scanned 2026-03-30. No actionable CWE-407 defects found.

The Deno codebase uses correct data structures throughout:

  • HashSet for deduplication and membership tests (module_loader.rs, permissions/lib.rs, etc.)
  • BTreeSet for sorted membership (cli/util/extract.rs)
  • HashMap/BTreeMap for O(1) keyed lookups
  • Fixed-size array literals only for small constant-size checks

No Vec.contains() patterns found in performance-critical loops.