Skip to content
Code Recycle
← Collections

The library said it worked

A truthy return value is not evidence. These are measured cases where a well-known library answered confidently and wrongly.

Curated by Code Recycle Editorial

  1. 1
    Library VerdictsData service✓ from $59

    Your agent picks libraries from download counts. Here is what six of them actually do at the edge.

    Why it's here: What six libraries your agent picked from download counts actually do at the edge.

  2. 2
    Pillow Truncated Load VerdictComponent✓ from $19

    LOAD_TRUNCATED_IMAGES = True stops the error and keeps the bug: the incomplete image loads, reports the right dimensions, and is three-quarters flat grey.

    Why it's here: The incomplete image loads, reports the right dimensions, and is three-quarters grey.

  3. 3

    extract() returns a string for a navigation bar and for a paywall notice. There is no confidence field anywhere in the output -- all 21 were checked.

    Why it's here: extract() returns a string for a nav bar and for a paywall. No confidence field exists.

  4. 4
    Extraction Contract VerdictComponent✓ from $29

    charThreshold is documented as the number of characters an article must have to return a result. It is not enforced: set it to 100000 and you still get back a footer copyright line as the article.

    Why it's here: charThreshold is documented and not enforced: 100000 still returns a footer line.

  5. 5
    Upload VerdictComponent✓ from $19

    mime-types says a Windows executable named invoice.pdf is a PDF. file-type says a PHP web shell is undefined.

    Why it's here: mime-types says a Windows executable named invoice.pdf is a PDF.

  6. 6
    Registrable DomainComponent✓ from $19

    tldts says every GitHub Pages tenant is the same owner. psl says 192.168.1.1 is a domain called 1.1.

    Why it's here: tldts says every GitHub Pages tenant is the same owner.

  7. 7
    Safe FilenameComponent✓ from $19

    sanitize-filename returns an empty string for CON.txt. path.join with an empty name is the directory itself.

    Why it's here: sanitize-filename returns an empty string for CON.txt.

  8. 8
    Device Capability VerdictComponent✓ from $29

    /Safari/.test(ua) is true for Chrome, Edge, Opera, and Samsung Internet. A Safari-only workaround built on that lands on every Chromium browser on earth.

    Why it's here: /Safari/.test(ua) is true for Chrome, Edge, Opera and Samsung Internet.