phylum-dev / vuln-reach

A library for building tools to determine if vulnerabilities are reachable in a code base.

Home Page:https://phylum.io

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Support `"imports"` field in `package.json`

andreaphylum opened this issue · comments

The "imports" field in package.json allows developers to define internal module mappings.

We currently don't support this specifier format, and an import of the form import '#dep' would result in a missing edge.

We should consider supporting this after evaluating how wide is the adoption for this feature.