Issues

• security: path-traversal matcher misses dynamic later path segments

  fallow-rs/fallow#3712 · Filter by author BartWaardenburg opened on Oct 20, 2026

• security: trusted module-relative paths produce path-traversal candidates

  fallow-rs/fallow#3711 · Filter by author BartWaardenburg opened on Oct 20, 2026

• Scripts run by Nx run-commands targets are reported unused when project.json contains a comment

  bug
  fallow-rs/fallow#3704 · Filter by author Pajn opened on Oct 20, 2026

• mutation: Vitest inline projects ignore fail-fast requests

  fallow-rs/fallow#3701 · Filter by author BartWaardenburg opened on Oct 20, 2026

• PostCSS config default export reported when used with includeEntryExports

  fallow-rs/fallow#3691 · Filter by author osazemeu opened on Oct 20, 2026
  2

• mutation: retain assertion diagnostics when a no-mutant control fails

  fallow-rs/fallow#3690 · Filter by author BartWaardenburg opened on Oct 20, 2026

• mutation: node:test subprocess CLI assertions can produce false survivors

  fallow-rs/fallow#3680 · Filter by author BartWaardenburg opened on Oct 20, 2026

• mutation: node:test skips mapped tests under hidden directories

  fallow-rs/fallow#3678 · Filter by author BartWaardenburg opened on Oct 20, 2026

• mutation: cached derived values can exclude the assertion that kills a mutant

  fallow-rs/fallow#3670 · Filter by author BartWaardenburg opened on Oct 20, 2026

• mutation: prune an equivalent optional map lookup before filter(Boolean)

  fallow-rs/fallow#3667 · Filter by author BartWaardenburg opened on Oct 20, 2026

• mutation: repeated time budgets can repeat survivors without cached progress

  fallow-rs/fallow#3665 · Filter by author BartWaardenburg opened on Oct 19, 2026

• mutation: cover validation links in fluent initializer chains

  fallow-rs/fallow#3662 · Filter by author BartWaardenburg opened on Oct 19, 2026

• mutation: include concrete replacements in JSON reports

  fallow-rs/fallow#3658 · Filter by author BartWaardenburg opened on Oct 19, 2026

• css-broken-reference: false "did you mean" for Tailwind utilities, :global() in Astro styles, and <style> in .html

  fallow-rs/fallow#3588 · Filter by author zaphir opened on Oct 18, 2026

• unused-store-member: resolve ReturnType store aliases declared inside a function body

  fallow-rs/fallow#3550 · Filter by author BartWaardenburg opened on Oct 16, 2026

• fix(health): a type-only module with top-level statements is never an untested file

  fallow-rs/fallow#3549 · Filter by author BartWaardenburg opened on Oct 16, 2026

• Next major: remove the architecture findings from fallow dead-code

  area:boundariesarea:clienhancementstatus:major-version
  fallow-rs/fallow#3293 · Filter by author BartWaardenburg opened on Oct 8, 2026

• Remove the macOS PGO C flag workaround after the cc-rs fix is released

  fallow-rs/fallow#3285 · Filter by author BartWaardenburg opened on Oct 8, 2026