I googled a bit (actually DuckDuckGo'd) to find the source code of that tool because I wondered what it considered "evidence", and I believe this is it. Looks like it looks for:
- log-and-continue catch blocks
- error-obscuring catch blocks (default-return or generic replacement error)
- empty catch blocks
- promise .catch() default fallbacks
- generic status envelopes
- generic record casts
- stringified unknown errors
- pass-through wrappers
- duplicated test mock/setup patterns
