lgtm,codescanning
* The security queries recognize the merge call from [webpack-merge](https://npmjs.com/package/webpack-merge). 
  Affected packages are
    [webpack-merge](https://npmjs.com/package/webpack-merge)