github / github/codeql

FP? JS import assertions

Ouverte
#9,104 0 commentaires 1 réaction 0 personnes assignées Voir sur GitHub
false-positive
Langage dominant
CodeQL
Étoiles
10.1k
Forks
2.1k
Merge moyen
2 j 15 h
PR mergées (30 j)
141

Description

**Description of the false positive**

```JS
import foo form "./foo.json" assert {type: "json"}
```

... is a proposed syntax update for JavaScript. It is already enabled in [V8](https://v8.dev/features/import-assertions) and [implemented](https://bugzilla.mozilla.org/show_bug.cgi?id=1736060) in SpiderMonkey/Firefox (not sure it is enabled yet). Given that it has two implementations, it should move to the final stage 4 this year.

I don't know what your policy is on green features like this, but you currently report it as a syntax error even though it works fine in Node.

**URL to the alert on the project page on LGTM.com**

https://lgtm.com/projects/g/compose-regexp/compose-regexp.js/snapshot/3384157884d8cd1de08fd9935400d4663327e40c/files/scripts/postpublish.js?sort=name&dir=ASC&mode=heatmap

Guide de contribution

Ouvrir le guide de contribution

Évaluation

Cette issue n'a pas encore été évaluée.

Recevez les nouvelles issues par e-mail

Un résumé court des issues GitHub adaptées aux débutants.