github / github/codeql

FP? JS import assertions

未关闭
#9,104 0 条评论 1 个 reaction 已指派 0 人 在 GitHub 查看
false-positive
主要语言
CodeQL
星标
10.1k
派生
2.1k
平均合并
2 天 15 小时
30 天内合并 PR
141

描述

**Description of the false positive**

```JS
import foo form "./foo.json" assert {type: "json"}
```

... is a proposed syntax update for JavaScript. It is already enabled in [V8](https://v8.dev/features/import-assertions) and [implemented](https://bugzilla.mozilla.org/show_bug.cgi?id=1736060) in SpiderMonkey/Firefox (not sure it is enabled yet). Given that it has two implementations, it should move to the final stage 4 this year.

I don't know what your policy is on green features like this, but you currently report it as a syntax error even though it works fine in Node.

**URL to the alert on the project page on LGTM.com**

https://lgtm.com/projects/g/compose-regexp/compose-regexp.js/snapshot/3384157884d8cd1de08fd9935400d4663327e40c/files/scripts/postpublish.js?sort=name&dir=ASC&mode=heatmap

贡献指南

打开贡献指南

评估

这个 Issue 还没有评估数据。

把新 issue 发到你的邮箱

精选适合新手参与的 GitHub issue 摘要。