lgtm,codescanning
* The `js/tainted-path` and `js/zipslip` queries now recognize path that have been 
  normalized using the `slash` library.
    Affected packages are
    [slash](https://npmjs.com/package/slash)