[Export Audit] CloudHypervisorRuntimeBackend - unused export in security-critical module

[github-actions]

Unused Export: CloudHypervisorRuntimeBackend

File: src/cloud-hypervisor-runtime-backend.ts:210
Symbol: CloudHypervisorRuntimeBackend (class)
Evidence: Pre-verified with 0 external usages

Analysis

The CloudHypervisorRuntimeBackend class is exported but never imported outside its defining file. This export is in a security-critical module that handles Cloud Hypervisor microVM backend operations.

Verification:

grep -rw "CloudHypervisorRuntimeBackend" src/ --include="*.ts" | grep -vE "test|cloud-hypervisor-runtime-backend.ts"
# Returns: no matches (0 usages outside defining file)

Dead Code Risk

Severity: HIGH (Score: 5 = 3 unused + 2 security-critical module)

• Security surface: Exported API in microVM security boundary increases attack surface
• Maintenance burden: Unused code path may contain undetected bugs or vulnerabilities
• API confusion: Consumers may incorrectly attempt to use this class directly

Recommendation

1. If truly unused: Remove the export keyword, making it a private implementation detail
2. If planned for future use: Document the intended usage and add a test that imports it
3. If used by external integrations: Add explicit integration tests showing the usage pattern

Related Context

This module is part of the Cloud Hypervisor v53.0 microVM backend (preview). See docs/cloud-hypervisor-foundation.md for architecture details.

Generated by API Surface & Export Audit · sonnet45 · 25.4 AIC · ⊞ 6.2K · ◷

• expires on Sep 23, 2026, 9:21 AM UTC