lgtm,codescanning
* Server side form parsing libraries are now recognized as source of remote user input. 
  Affected packages are
    [multer](https://www.npmjs.com/package/multer),
    [busboy](https://www.npmjs.com/package/busboy),
    [formidable](https://www.npmjs.com/package/formidable), and
    [multiparty](https://www.npmjs.com/package/formidable).