extensions: - addsTo: pack: codeql/javascript-all extensible: sinkModel data: - [ "@example/execa", "Member[shell].Argument[0]", "command-line-injection", ]