@safetnsr/vet 1.20.0 → 1.20.1

package/dist/checks/deep.js

@@ -26,10 +26,16 @@ function analyzeCatch(node) {
     const block = node.block;
     const stmts = block.statements;
     const line = node.getSourceFile().getLineAndCharacterOfPosition(node.getStart()).line + 1;
+    const text = block.getText();
     if (stmts.length === 0) {
+        // Check if there's a deliberate comment (/* skip */, /* ignore */, etc.)
+        const hasComment = /\/[/*]\s*(skip|ignore|noop|intentional|expected|ok|no-op)/i.test(text);
+        if (hasComment) {
+            // Deliberate empty catch — not a bug
+            return { line, isEmpty: false, isLazy: false, isRethrow: false };
+        }
         return { line, isEmpty: true, isLazy: false, isRethrow: false };
     }
-    const text = block.getText();
     const isLazy = stmts.length === 1 && /console\.(log|error|warn)\s*\(/.test(text) && !text.includes('throw');
     const isRethrow = text.includes('throw');
     return { line, isEmpty: false, isLazy, isRethrow };

package/dist/checks/deps.js

@@ -311,6 +311,16 @@ const TOOLING_PACKAGES = new Set([
     'del-cli', 'make-node',
     // Type packages (consumed by TS compiler, not imported)
     '@types/react', '@types/react-dom', '@types/jest', '@types/mocha',
+    // Test runners / e2e (used via CLI, not imported)
+    'playwright', '@playwright/test', 'cypress', 'puppeteer',
+    // Package quality tools (used via CLI)
+    'publint', 'arethetypeswrong', 'are-the-types-wrong', 'attw',
+    'pkg-pr-new', 'size-limit', '@size-limit/preset-small-lib',
+    // Monorepo/workspace tools
+    'update-ts-references', 'syncpack', 'manypkg',
+    // Prettier plugins (loaded via config, not imported)
+    'prettier-plugin-svelte', 'prettier-plugin-tailwindcss',
+    'prettier-plugin-organize-imports', 'prettier-plugin-packagejson',
 ]);
 // ── Collect all deps declared in workspace sub-packages ──────────────────────
 export function collectWorkspaceDeps(cwd) {
@@ -500,6 +510,11 @@ export async function checkDeps(cwd) {
                 // Skip known tooling packages that are devDependencies (used via CLI scripts, not imports)
                 if (TOOLING_PACKAGES.has(pkg) && devDepNames.has(pkg))
                     continue;
+                // Wildcard tooling patterns (eslint configs, prettier plugins, @types/*)
+                if (devDepNames.has(pkg) && (pkg.startsWith('eslint-config-') || pkg.startsWith('eslint-plugin-') ||
+                    pkg.startsWith('prettier-plugin-') || pkg.startsWith('@types/') ||
+                    pkg.startsWith('@typescript-eslint/') || pkg.startsWith('@eslint/')))
+                    continue;
                 // Check if it's a CLI tool / plugin / type package (common false positives)
                 // Still flag it, but as info
                 issues.push({

package/dist/checks/semantic.js

@@ -130,7 +130,7 @@ export async function checkSemantic(cwd) {
             patternEmbeddings.push({ pattern, embedding: new Float32Array(result.data) });
         }
         // Embed and compare each function
-        const THRESHOLD = 0.40; // similarity threshold — code-to-code embeddings
+        const THRESHOLD = 0.45; // similarity threshold — code-to-code embeddings (0.40 gave false positives)
         for (const func of funcsToAnalyze) {
             const result = await extractor(func.body, { pooling: 'mean', normalize: true });
             const funcEmb = new Float32Array(result.data);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@safetnsr/vet",
-  "version": "1.20.0",
+  "version": "1.20.1",
   "description": "vet your AI-generated code — one command, one score card, one letter grade",
   "type": "module",
   "bin": {