- Big update!Introducing GitHub Bot Commands. Learn more →
Dynamic require
Severity
Low
Description
Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.
Suggestion
Packages should avoid dynamic imports when possible. Audit the use of dynamic require to ensure it is not executing malicious or vulnerable code.
Packages with this issue
readable-stream
Streams3, a user-land copy of the stream library from Node.js
cwmma
published 2.1.5 • jest-worker
Module for executing heavy tasks under forked processes in parallel, by providing a `Promise` based interface, minimum overhead, and bound workers.
simenb
published 29.0.3 • browserslist
Share target browsers between different front-end tools, like Autoprefixer, Stylelint and babel-env-preset
ai
published 4.21.4 •