If Github started automatically blocking things like this, then the problem would be how to allow legit dot files and the like (e.g. you are intentionally including dummy dot files as a "quick start" project template of some kind)?
Some clarification is needed:
Scripts evaluated with `setInterval(String, 2)`, `setTimeout(String, 2)`, or `new Function(String)` only have access to their own local variables and global variables, not variables from the scope from which those functions were called. This contrasts with `eval()` in that `eval()` has access to the local scope in which you called `eval()`.
and that optimization isn't even a factor in v8 anymore because it caches `items.length`. Not sure about other engines.
The latter example could still be rewritten as:
for (var i=0,len=items.length; i<len; i++){
// code is here...
}