This release fixes issues for SREs watching stability and regressions.
✓ No known CVEs patched in this version
Topics
+13 more
Summary
AI summaryFixed complexity/file-too-large to correctly apply a 1.5x tolerance for JSX/TSX files and made aislop fix -f properly handle pnpm dependency audits.
Full changelog
Two bug fixes. No new features, no breaking API changes. Agent-integration hooks land in 0.6.0 separately.
Fixed
complexity/file-too-large now respects config on JSX/TSX
Previous behaviour silently applied a 2x multiplier for .jsx / .tsx plus a 10% soft buffer, so maxFileLoc: 400 actually fired at 881 lines on TSX. Neither piece was documented or configurable, so big React pages sailed past 400 unflagged.
New behaviour:
.jsx/.tsxuse a 1.5x tolerance (400 → 600) with no soft buffer.- Every other extension (
.ts,.js,.py,.go,.rs,.rb,.java,.php,.mjs,.cjs) hits the exact configured value. - This is a tightening for TSX: a
.tsxfile that was fine at 800 lines under 0.5.0 will now flag at 601 lines. Bump.aislop/config.yml→maxFileLocif needed.
aislop fix -f pnpm dep-audit fix
Previously tried to run pnpm audit --fix, which pnpm has no subcommand for, so the step silently failed. Now parses pnpm audit --json and writes surgical pnpm.overrides entries keyed on <pkg>@<vulnerable_versions> into root package.json, then runs pnpm install to materialise them. npm path unchanged.
Changed
- Internal refactor.
narrative-comments.ts416 → 358 lines splits patterns intonarrative-comments-patterns.ts.complexity.ts416 → 241 lines splits function-boundary detection intofunction-boundaries.ts. No behaviour change.
Tests
- 3 new complexity tests (1.5x JSX tolerance). Total: 516 → 519 passing.
Install
npm i -g [email protected]
# or
npx [email protected] scan .
What's Changed
- release: v0.5.1 — JSX file-too-large config fix + pnpm audit fix by @heavykenny in https://github.com/scanaislop/aislop/pull/35
Full Changelog: https://github.com/scanaislop/aislop/compare/v0.5.0...v0.5.1
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About AISlop
All releases →Related context
Related tools
Beta — feedback welcome: [email protected]