phylum-dev / vuln-reach

A library for building tools to determine if vulnerabilities are reachable in a code base.

Home Page:https://phylum.io

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

CommonJS reexports

andreaphylum opened this issue · comments

CommonJS reexports aren't supported yet because there are no scope lookups separating the export from the import.

We could make a special case out of this; this would solve the problem, but could have unintended side effects to other import forms, and we should carefully assess whether all conceivable kinds of reexport will be covered.

We should build test cases to assess whether side-effect support automatically makes this go away.