code-buster 0.11.0

Repository-aware static analysis for AI-assisted development
Documentation
{
  "id": "regex-empty-alternative",
  "language": "all",
  "group": "suspicious",
  "listingTitle": "Regex empty alternative",
  "title": "Review empty alternative",
  "mvvm": false,
  "defaultSeverity": "info",
  "legacyGroup": "regex",
  "why": "This regular expression can be invalid, inefficient, misleading, or unsafe for validation.",
  "suggestion": "Simplify, anchor, precompile, or test the expression against adversarial input.",
  "version": 1,
  "semanticMaturity": "text",
  "securityKind": "none",
  "taxonomy": [
    "maintainability"
  ],
  "requirements": [
    "sourceText"
  ],
  "packs": [
    "regex"
  ],
  "implementation": "src/rules/regex.rs",
  "languages": [],
  "frameworks": [],
  "languageVersions": [],
  "limitations": []
}