tools: Remove lockfiles from spell-checking
What changed, and why it matters
This is a trivial change to a spell-checking script used during development. It tells the spell-checker to ignore package-lock.json files because their randomly-generated hash strings can accidentally contain the letters 'ctlv', which the script flags as a misspelling of 'cltv'. There is no security issue here.
No security action needed. This is a benign developer tooling change.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The commit modifies tools/check-spelling.sh to add ‘:!**/package-lock.json’ to a git grep exclusion list. The script searches for the string ‘ctlv’ (a common typo for ‘cltv’, i.e., check lock time verify) and excludes the script itself and now lockfiles. This is a developer tooling/CI linting fix only.
Changed components
tools/check-spelling.shInspect captured patch +1 / −1
diff --git a/tools/check-spelling.sh b/tools/check-spelling.sh
index a66d0178..6fce914a 100755
--- a/tools/check-spelling.sh
+++ b/tools/check-spelling.sh
@@ -6,7 +6,7 @@ if git --no-pager grep -nHiE 'l[ightn]{6}g|l[ightn]{8}g|ilghtning|lgihtning|lihg
exit 1
fi
-if git --no-pager grep -nHiEP '(?<!en|htl)ctlv' -- . ':!tools/check-spelling.sh'; then
+if git --no-pager grep -nHiEP '(?<!en|htl)ctlv' -- . ':!tools/check-spelling.sh' ':!**/package-lock.json'; then
echo "It's check lock time verify, not check time lock verify!" >&2
exit 1
fi
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.