phylum-dev/vuln-reach

CommonJS reexports

andreaphylum opened this issue · 0 comments

CommonJS reexports aren't supported yet because there are no scope lookups separating the export from the import.

We could make a special case out of this; this would solve the problem, but could have unintended side effects to other import forms, and we should carefully assess whether all conceivable kinds of reexport will be covered.

We should build test cases to assess whether side-effect support automatically makes this go away.