Source code
Code quality
Dead / never-imported file
Part of the AI-generated code risks check · fix arrives as a pull request
What it is
A source file exists in the repository but nothing imports it, directly or transitively, from any entry point.
Why it matters
Dead files get read as live during review and maintained by mistake. When one contains an older copy of an auth or validation helper, someone eventually imports the wrong one.
How to fix it
Delete it — git keeps the history if you want it back. If it is genuinely pending work, move it out of the source tree or mark it clearly so the next reader is not misled.
Run them all on your app
Connect your repo and your live services with read-only scopes. The first scan is free, and nothing changes without your approval.