lgtm,codescanning
* Taint sources and sinks from the [history](https://npmjs.com/package/history) library are now recognized.
  Affected packages are
    [history](https://www.npmjs.com/package/history)