A single convention-based auto-import: a bare identifier name that resolves
to an export in source by framework convention, with no explicit import
statement in the consuming file.
Include/exclude lists scoping the active security categories. When include
is set, only those categories are active; exclude removes categories from
the admitted set. Both unset admits catalogue categories. hardcoded-secret
still requires explicit inclusion.
Scopes the security categories used by fallow security. An absent block
admits every catalogue category. hardcoded-secret is include-required and
only runs when explicitly listed in security.categories.include.
Default per-file size ceiling (in megabytes) for source discovery. A value
chosen so hand-written source effectively never reaches it while generated
API clients, vendored bundles, and minified blobs do. See issue #1086.
Discover external plugin definitions AND validate their user-supplied glob
patterns. Accumulates all errors across all loaded plugins so the user sees
every problem in one run.
Check whether value is a valid pnpm override right-hand side, even if it
is not a semver range. Returns false when the value is empty, contains a
raw newline, or is otherwise garbage.
Parse an override key into parent, target, and optional version
selectors. Returns None when the key cannot be split into a recognised
shape (empty key, parent or target missing).
Parse the pnpm.overrides section of a root package.json. Returns an
empty PnpmOverrideData when the file has no overrides, when the JSON is
malformed, or when the section is present but empty.
Parse the overrides: section of pnpm-workspace.yaml. Returns an empty
PnpmOverrideData when the file has no overrides, when the YAML is
malformed, or when the section is present but empty.
Replace the workspace-discovery diagnostics for root with diagnostics,
PRESERVING any source-discovery diagnostics (see
WorkspaceDiagnosticKind::is_source_discovery) already appended for the
root.
Read the workspace-discovery diagnostics produced by the most recent
stash_workspace_diagnostics + any subsequent
append_workspace_diagnostics calls for root. Returns an empty vector
when nothing has been stashed for this root yet (e.g. programmatic
callers bypassing the standard loader).