From a2a9518d2aad04229dc03f50f09a94c2c712c76b Mon Sep 17 00:00:00 2001
From: Asger F <asgerf@github.com>
Date: Fri, 10 Oct 2025 10:03:03 +0200
Subject: [PATCH] JS: Localize MkModuleImport

---
 javascript/ql/lib/semmle/javascript/ApiGraphs.qll | 9 +++++++--
 1 file changed, 7 insertions(+), 2 deletions(-)

diff --git a/javascript/ql/lib/semmle/javascript/ApiGraphs.qll b/javascript/ql/lib/semmle/javascript/ApiGraphs.qll
index 9a3ba76a487..827ea3335b0 100644
--- a/javascript/ql/lib/semmle/javascript/ApiGraphs.qll
+++ b/javascript/ql/lib/semmle/javascript/ApiGraphs.qll
@@ -740,9 +740,8 @@ module API {
       MkRoot() or
       MkModuleDef(string m) { exists(MkModuleExport(m)) } or
       MkModuleUse(string m) { exists(MkModuleImport(m)) } or
-      MkModuleImport(string m) {
-        imports(_, m)
       MkModuleExport(string m) { isDeclaredPackageName(m) } or
+      MkModuleImport(string m) { isImportedPackageName(m) } or
         or
         any(TypeAnnotation n).hasUnderlyingType(m, _)
       } or
@@ -1959,3 +1958,9 @@ overlay[local]
 private predicate isDeclaredPackageName(string m) {
   m = any(PackageJson pkg).getDeclaredPackageName()
 }
+
+overlay[local]
+private predicate isImportedPackageName(string m) {
+  m = any(Import imprt).getImportedPathString() and
+  m.regexpMatch("[^./].*")
+}