codeql
codeql copied to clipboard
JS: Do not treat AMD pseudo-dependencies as imports
When an AMD define() call declares exports, module, or require as a dependency, it does not import a module with that name, but we accidentally treated them as imports.
Also removes a spurious recursion pattern in AMD.
Evaluation looks very quiet. Two spurious import edges have been removed. I've seen some more cases in other codebases.