knip.json

{
  "$schema": "https://unpkg.com/knip@6/schema.json",
  // `src/index.ts!` is the published surface: knip cannot see consumer usage,
  // so nothing reachable from it is ever dead code.
  "entry": [
    "src/index.ts!",
    "src/**/*.test.ts",
    "e2e/config.ts",
    // CI runs a copy of this from $RUNNER_TEMP, not the file itself.
    "scripts/smoke.js",
    // Run by hand to regenerate the compat golden fixtures.
    "scripts/generate-compat-golden.js"
  ],
  // The `!` markers split production from dev, which is what makes
  // `knip:production` a second lens: source kept alive by tests alone.
  "project": [
    "src/**/*.ts!",
    "src/tests/**/*.ts",
    "e2e/**/*.ts",
    "scripts/*.js",
    "*.{js,cjs,mjs,mts}"
  ],
  "ignoreBinaries": [
    // Installed out of band — pipx/brew locally, a container in CI.
    "semgrep"
  ],
  // RULE: every entry below must name the mechanism by which the dependency is
  // used and knip cannot see it. No such mechanism means it is dead — remove it.
  "ignoreDependencies": [
    // Reached only through a plugin string:
    // `new webpack.ProvidePlugin({ Buffer: ['buffer', 'Buffer'] })`.
    "buffer",
    // A tripwire, imported by nothing on purpose: its own `preinstall` fails
    // the install if `ignore-scripts=true` is ever dropped from `.npmrc`.
    "@lavamoat/preinstall-always-fail"
  ]
}