Skip to content

test: use a Scorecard-recognised extension for property fuzzing - #80

Merged
efegokdemir merged 1 commit into
mainfrom
codex/changeguard-fuzz-scorecard-detection
Oct 23, 2026
Merged

efegokdemir merged 1 commit into
mainfrom
codex/changeguard-fuzz-scorecard-detection

Conversation

@efegokdemir

Copy link
Copy Markdown
Member

Summary

Rename the existing fast-check property suite to .js. Scorecard v5.6.0 scans JavaScript .js and .jsx files for direct fast-check imports, so it did not detect the current .mjs file (detector source). The test contents are unchanged.

Motivation

Make the existing bounded, deterministic property tests visible to Scorecard’s detector without adding tests or artificial fuzzing signals.

Changes

  • Rename tests/property-fuzz.test.mjs to tests/property-fuzz.test.js; the file is byte-for-byte identical.

Tests performed

  • On Node 22.18.0 and 24.21.0: npm ci --ignore-scripts, direct property-test discovery (3 passed), npm test (122 passed), npm run coverage, npm run lint, npm audit --audit-level=high (0 vulnerabilities), npm run package:check, npm run package:smoke, npm run action:check and npm run format:check.
  • Confirmed package.json, package-lock.json and dist are unchanged. The package dry run does not include the test file.

Compatibility

package.json already declares "type": "module" and Node >=22. The renamed ESM test ran on Node 22 and 24.

Security and privacy

Only the test filename changes. The deterministic seed, generated input bounds and assertions are unchanged.

Shopify source/evidence

N/A; this is a test filename change.

Release impact

Tests only. No npm package contents, package version, runtime behaviour or release workflow changes; no release is needed.

Checklist

  • The change is focused and docs/examples match the implementation.
  • Relevant regression tests and checks are recorded above.
  • Generated distributions are unchanged; no production code changed.
  • No sensitive or third-party material was added.

@efegokdemir
efegokdemir requested a review from a team as a code owner October 23, 2026 18:25
@efegokdemir
efegokdemir merged commit 6510f3f into main Oct 23, 2026
18 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant