lgtm,codescanning
* Support for `chokidar` has improved. The `js/tainted-path` query now recognizes calls to `chokidar.watch`, 
  and the security queries recognize the filenames returned by the library.
  Affected packages are
    [chokidar](https://npmjs.com/package/chokidar)