AntiSpoof_body.php has
$deprecated = array_search( "SCRIPT_DEPRECTED", $testScripts );
I think the typo means usernames with characters in the ranges CJK Radicals Supplement, Kangxi Radicals, CJK Compatibility Ideographs, etc. will not be rejected.
But I tried to add a failing test for this to SpoofTest.php and it passes, so I can't demonstrate the failure.
Version: master
Severity: minor