48:I[660678,["/_next/static/chunks/13vqyfldau57p.js","/_next/static/chunks/1gbl-dcot4vlq.js","/_next/static/chunks/3w7s_-pxil6pv.js","/_next/static/chunks/3zorfbfh_a_pd.js","/_next/static/chunks/0cnrn8dx8wpm6.js","/_next/static/chunks/2e4udl7tfg2xd.js","/_next/static/chunks/1mbdq0lktamc7.js","/_next/static/chunks/0nq310uz96h4-.js","/_next/static/chunks/2i4xo8xu-dpuk.js","/_next/static/chunks/40fmu66fmb8tm.js","/_next/static/chunks/3vehc-g2atkra.js","/_next/static/chunks/2a4jc680f5x-9.js","/_next/static/chunks/2wyk4b1ao4pa_.js","/_next/static/chunks/1gth09_ur0iam.js","/_next/static/chunks/0ugk39ckud30x.js","/_next/static/chunks/0pp6seif9t0rh.js","/_next/static/chunks/3bhq66ea_v7by.js","/_next/static/chunks/44c_5nh0vyeb5.js","/_next/static/chunks/1jiredr0b6jr_.js","/_next/static/chunks/0r86cplnpkdza.js","/_next/static/chunks/2ghxk472-g0i6.js","/_next/static/chunks/1ra7jqz5hyzln.js","/_next/static/chunks/42kj-we3o-c3u.js","/_next/static/chunks/2vvl77bxv5nze.js","/_next/static/chunks/2dk9hti1hh4ut.js","/_next/static/chunks/2l8l4_a9-xhts.js","/_next/static/chunks/1qsa_rj-5yj90.js","/_next/static/chunks/0ewjxq-e6quq-.js","/_next/static/chunks/34y7-26s89h2f.js","/_next/static/chunks/0ojgzwcpt7vsk.js","/_next/static/chunks/3enqpgm3pn7at.js","/_next/static/chunks/3-906s1ue5fj3.js","/_next/static/chunks/2t_5zfez2-77k.js","/_next/static/chunks/2641m2aqdum9a.js","/_next/static/chunks/1cvej8ocaz0a2.js","/_next/static/chunks/1j29bqcxcpyur.js"],"HydrationBoundary"] 47:Tbc8,{"@context":"https://schema.org","@graph":[{"@type":"WebSite","@id":"https://app.codemod.com/registry#website","url":"https://app.codemod.com/registry","name":"Codemod Registry"},{"@type":"Organization","@id":"https://app.codemod.com#org","name":"codemod","url":"https://app.codemod.com","logo":"https://avatars.githubusercontent.com/u/78830094?v=4"},{"@type":"BreadcrumbList","@id":"https://app.codemod.com/registry/@codemod/detect-csharp-reference-array-covariance#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Registry","item":"https://app.codemod.com/registry"},{"@type":"ListItem","position":2,"name":"@codemod/detect-csharp-reference-array-covariance","item":"https://app.codemod.com/registry/@codemod/detect-csharp-reference-array-covariance"}]},{"@type":"WebPage","@id":"https://app.codemod.com/registry/@codemod/detect-csharp-reference-array-covariance#webpage","url":"https://app.codemod.com/registry/@codemod/detect-csharp-reference-array-covariance","name":"detect-csharp-reference-array-covariance - Codemod Registry","description":"Read-only C# analysis codemod that reports reference-type array covariance sites and emits stable metrics without rewriting source files","isPartOf":{"@id":"https://app.codemod.com/registry#website"},"author":{"@id":"https://app.codemod.com#org"},"breadcrumb":{"@id":"https://app.codemod.com/registry/@codemod/detect-csharp-reference-array-covariance#breadcrumb"},"mainEntity":{"@id":"https://app.codemod.com/registry/@codemod/detect-csharp-reference-array-covariance#sourcecode"}},{"@type":"SoftwareSourceCode","@id":"https://app.codemod.com/registry/@codemod/detect-csharp-reference-array-covariance#sourcecode","name":"@codemod/detect-csharp-reference-array-covariance","description":"Read-only C# analysis codemod that reports reference-type array covariance sites and emits stable metrics without rewriting source files","url":"https://app.codemod.com/registry/@codemod/detect-csharp-reference-array-covariance","publisher":{"@id":"https://app.codemod.com#org"},"image":"https://avatars.githubusercontent.com/u/78830094?v=4","isAccessibleForFree":true,"license":"MIT","version":"1.0.1","keywords":["csharp","analysis","arrays","type-safety","metrics"],"datePublished":"2026-07-10 13:35:30.017599+00","dateModified":"2026-08-25 07:38:25.128961+00"},{"@type":"SoftwareApplication","@id":"https://app.codemod.com/registry/@codemod/detect-csharp-reference-array-covariance#app","name":"detect-csharp-reference-array-covariance codemod","description":"Read-only C# analysis codemod that reports reference-type array covariance sites and emits stable metrics without rewriting source files","url":"https://app.codemod.com/registry/@codemod/detect-csharp-reference-array-covariance","publisher":{"@id":"https://app.codemod.com#org"},"softwareVersion":"1.0.1","applicationCategory":"DeveloperApplication","operatingSystem":"Cross-platform","offers":{"@type":"Offer","price":"0","priceCurrency":"USD","availability":"https://schema.org/InStock"}}]}49:Tbb3,# @codemod/detect-csharp-reference-array-covariance Read-only C# analysis codemod that reports reference-type array covariance sites such as assigning `Dog[]` to `Animal[]`, passing widened arrays into APIs, returning widened arrays, or checking them against broader array types. It emits stable `codemod:metrics` findings and leaves source files unchanged. ## Installation ```bash pnpm dlx codemod@latest workflow run -w . -t /path/to/csharp-repo --no-interactive --allow-dirty ``` ## Usage The workflow scans `**/*.cs` files and reports conservative, provider-neutral findings for these read-only conversion contexts when it can prove the source and target array types from syntax plus in-file type declarations: - Assignments and explicit target-typed variable initializers - Field and property initializers - Argument-to-parameter array widening - Return statements and expression-bodied members - Explicit casts, `as` casts, and `is` declaration patterns - Conditional expressions, switch-expression arms, tuple elements, lambda returns, and null-coalescing branches when an outer target array type is known - Object initializer assignments to array-typed members - Single-dimensional and multidimensional array covariance with identical ranks It skips generated files by default, value-type arrays, same-type array flows, non-array targets, and ambiguous cases the current C# JSSG runtime cannot prove safely. Current implementation boundary: - The current C# JSSG runtime does not expose compiler semantic bindings. - This package therefore stays conservative and reports only sites it can prove from AST structure, explicit array types, in-file inheritance/interface declarations, and a small set of known framework type relationships. - Ambiguous cross-file or overload-heavy cases are intentionally skipped instead of guessed. Optional configuration: ```json { "include_generated": "true" } ``` You can also pass `--param include_generated=true` when running the workflow. ## Metrics The package emits one stable `codemod:metrics` record: - `array_covariance_occurrence` — one increment per finding, with cardinality for `file`, `line`, `conversion_kind`, `source_array_type`, `target_array_type`, `remediation`, and `severity`. ## Remediation - Prefer exact array element types for mutable API boundaries - Prefer `IReadOnlyList` or `IEnumerable` for read-only consumption - Prefer invariant generic collections when consumers may write through a widened reference - Avoid relying on runtime `ArrayTypeMismatchException` checks as a substitute for an invariant API contract ## Development ```bash # Run fixture tests and assert committed metrics snapshots pnpm test # Refresh committed metrics snapshots explicitly pnpm test:update # Validate the workflow pnpm dlx codemod@latest workflow validate -w . # Type-check the package pnpm check-types # Publish to registry pnpm dlx codemod@latest login pnpm dlx codemod@latest publish ``` ## License MIT 19:[["$","script",null,{"type":"application/ld+json","dangerouslySetInnerHTML":{"__html":"$47"}}],["$","$L48",null,{"state":{"mutations":[],"queries":[{"state":{"data":{"json":{"id":"c82c0a9d-a79a-4ac9-8b2a-781a6f0df21d","name":"detect-csharp-reference-array-covariance","displayName":"@codemod/detect-csharp-reference-array-covariance","description":"Read-only C# analysis codemod that reports reference-type array covariance sites and emits stable metrics without rewriting source files","scope":"codemod","visibility":"public","downloadCount":96,"executionCount":13,"createdAt":"2026-07-10 13:35:30.017599+00","updatedAt":"2026-08-25 07:38:25.128961+00","latestVersion":"1.0.1","keywords":["csharp","analysis","arrays","type-safety","metrics"],"starCount":0,"author":"Codemod","homepage":null,"repository":null,"license":"MIT","access":"pro","documentation":null,"bugsUrl":null,"readme":"$49","organization":{"id":"a23e5412-b7c7-435e-ad5a-292e3fe3e6cf","name":"codemod","slug":"codemod","avatarUrl":"https://avatars.githubusercontent.com/u/78830094?v=4"},"owner":{"id":"62e204ad-3c4b-43d9-b513-a48dd273b6c5","username":"ribru17","name":"Riley Bruins","avatarUrl":"https://avatars.githubusercontent.com/u/55766287?v=4"},"isLegacy":false,"versions":[{"version":{"id":"df754c09-6c60-449a-b427-1a4c008205e7","packageId":"c82c0a9d-a79a-4ac9-8b2a-781a6f0df21d","version":"1.0.1","description":"Read-only C# analysis codemod that reports reference-type array covariance sites and emits stable metrics without rewriting source files","manifest":{"name":"@codemod/detect-csharp-reference-array-covariance","author":"Codemod","license":"MIT","targets":{"versions":{},"languages":["csharp"],"frameworks":[]},"version":"1.0.1","keywords":["csharp","analysis","arrays","type-safety","metrics"],"registry":{"access":"pro","visibility":"public"},"workflows":[{"name":"main","path":"workflow.yaml","default":true}],"description":"Read-only C# analysis codemod that reports reference-type array covariance sites and emits stable metrics without rewriting source files","dependencies":[],"schema_version":"1.0"},"checksum":"c3f309e0dce3d89b71680352866c1e1b9dc5094ef106b56c448a028049a8f37f","size":20774,"downloadUrl":"https://registry-cdn.codemod.com/prod/packages/private/codemod/detect-csharp-reference-array-covariance/1.0.1/private-c3f3_xlgzm1afti.tar.gz","aiGenerated":false,"sourceArchiveS3Key":null,"targets":{"languages":["typescript"],"frameworks":[]},"dependencies":[],"languages":["csharp"],"stepTypes":["js-ast-grep"],"workflowMetadata":{"nodes":[{"id":"analyze-array-covariance","name":"Analyze Reference Array Covariance","steps":[{"name":"Scan C# files and emit covariance findings","type":"js-ast-grep","metrics":[],"language":"csharp"}]}],"metricMetadataVersion":1},"validated":false,"validationErrors":null,"publishedBy":"62e204ad-3c4b-43d9-b513-a48dd273b6c5","deprecated":false,"deprecationMessage":null,"downloadCount":68,"cachedTestCases":{"input":"using System;\nusing System.IO;\n\nclass Holder\n{\n public Stream[] Streams { get; set; }\n}\n\nclass EdgeCases\n{\n public Stream[] Choose(bool cond, MemoryStream[] streams, Stream[] fallback) => cond ? streams : fallback;\n\n public void Check(MemoryStream[] streams, Stream[] fallback)\n {\n Stream[] widened = streams;\n Stream[] fromCoalesce = streams ?? fallback;\n Func factory = () =>\n {\n return streams;\n };\n if (streams is Stream[] matched)\n {\n }\n var holder = new Holder { Streams = streams };\n }\n}\n","output":"using System;\nusing System.IO;\n\nclass Holder\n{\n public Stream[] Streams { get; set; }\n}\n\nclass EdgeCases\n{\n public Stream[] Choose(bool cond, MemoryStream[] streams, Stream[] fallback) => cond ? streams : fallback;\n\n public void Check(MemoryStream[] streams, Stream[] fallback)\n {\n Stream[] widened = streams;\n Stream[] fromCoalesce = streams ?? fallback;\n Func factory = () =>\n {\n return streams;\n };\n if (streams is Stream[] matched)\n {\n }\n var holder = new Holder { Streams = streams };\n }\n}\n","isValid":true,"examples":[{"name":"edge-bcl-and-lambda-block","path":"tests/fixtures/edge-bcl-and-lambda-block","input":"using System;\nusing System.IO;\n\nclass Holder\n{\n public Stream[] Streams { get; set; }\n}\n\nclass EdgeCases\n{\n public Stream[] Choose(bool cond, MemoryStream[] streams, Stream[] fallback) => cond ? streams : fallback;\n\n public void Check(MemoryStream[] streams, Stream[] fallback)\n {\n Stream[] widened = streams;\n Stream[] fromCoalesce = streams ?? fallback;\n Func factory = () =>\n {\n return streams;\n };\n if (streams is Stream[] matched)\n {\n }\n var holder = new Holder { Streams = streams };\n }\n}\n","output":"using System;\nusing System.IO;\n\nclass Holder\n{\n public Stream[] Streams { get; set; }\n}\n\nclass EdgeCases\n{\n public Stream[] Choose(bool cond, MemoryStream[] streams, Stream[] fallback) => cond ? streams : fallback;\n\n public void Check(MemoryStream[] streams, Stream[] fallback)\n {\n Stream[] widened = streams;\n Stream[] fromCoalesce = streams ?? fallback;\n Func factory = () =>\n {\n return streams;\n };\n if (streams is Stream[] matched)\n {\n }\n var holder = new Holder { Streams = streams };\n }\n}\n","filename":"Edge.cs"},{"name":"net8.0","path":"tests/fixtures/edge-bcl-and-lambda-block/obj/Debug/net8.0","input":"//------------------------------------------------------------------------------\n// \n// This code was generated by a tool.\n//\n// Changes to this file may cause incorrect behavior and will be lost if\n// the code is regenerated.\n// \n//------------------------------------------------------------------------------\n\nusing System;\nusing System.Reflection;\n\n[assembly: System.Reflection.AssemblyCompanyAttribute(\"App\")]\n[assembly: System.Reflection.AssemblyConfigurationAttribute(\"Debug\")]\n[assembly: System.Reflection.AssemblyFileVersionAttribute(\"1.0.0.0\")]\n[assembly: System.Reflection.AssemblyInformationalVersionAttribute(\"1.0.0+ae732af1a0e2cc235cee9acb4efbb9ca1fd0975f\")]\n[assembly: System.Reflection.AssemblyProductAttribute(\"App\")]\n[assembly: System.Reflection.AssemblyTitleAttribute(\"App\")]\n[assembly: System.Reflection.AssemblyVersionAttribute(\"1.0.0.0\")]\n\n// Generated by the MSBuild WriteCodeFragment class.\n\n","output":"//------------------------------------------------------------------------------\n// \n// This code was generated by a tool.\n//\n// Changes to this file may cause incorrect behavior and will be lost if\n// the code is regenerated.\n// \n//------------------------------------------------------------------------------\n\nusing System;\nusing System.Reflection;\n\n[assembly: System.Reflection.AssemblyCompanyAttribute(\"App\")]\n[assembly: System.Reflection.AssemblyConfigurationAttribute(\"Debug\")]\n[assembly: System.Reflection.AssemblyFileVersionAttribute(\"1.0.0.0\")]\n[assembly: System.Reflection.AssemblyInformationalVersionAttribute(\"1.0.0+ae732af1a0e2cc235cee9acb4efbb9ca1fd0975f\")]\n[assembly: System.Reflection.AssemblyProductAttribute(\"App\")]\n[assembly: System.Reflection.AssemblyTitleAttribute(\"App\")]\n[assembly: System.Reflection.AssemblyVersionAttribute(\"1.0.0.0\")]\n\n// Generated by the MSBuild WriteCodeFragment class.\n\n","filename":"App.AssemblyInfo.cs"},{"name":"negative-and-generated","path":"tests/fixtures/negative-and-generated","input":"// \nclass GeneratedCase\n{\n void M(Dog[] dogs)\n {\n Animal[] animals = dogs;\n }\n}\n\nclass Animal\n{\n}\n\nclass Dog : Animal\n{\n}\n","output":"// \nclass GeneratedCase\n{\n void M(Dog[] dogs)\n {\n Animal[] animals = dogs;\n }\n}\n\nclass Animal\n{\n}\n\nclass Dog : Animal\n{\n}\n","filename":"Generated.g.cs"},{"name":"negative-and-generated","path":"tests/fixtures/negative-and-generated","input":"using System.Collections.Generic;\n\nclass Animal\n{\n}\n\nclass Negative\n{\n private string[] _names = new string[1];\n private int[] _numbers = new int[1];\n\n public string[] Same => _names;\n\n public object Boxed(string[] names) => names;\n\n public void Check(string[] names, dynamic dyn, object value)\n {\n string[] same = names;\n var inferred = names;\n object boxed = names;\n IEnumerable