fix(unsafe-import): warning on unsafe-import using eval/require

[tchapacan]

fix #179

Warning on unsafe-import using eval/require

const stream = eval('require')('stream')

should return unsafe-import & unsafe-eval ?

Purpose of this PR is to propose a fix for the issue #179 by mdofifying probes isRequire & isUnsafeCallee :

• modify probe isRequire
• modify probe isUnsafeCallee
• add tests
• documentation

Feel free to update it or give any feedback i'll be happy to try to improve it (this is my first real PR 😄 i'm new to the environment so I didn't dig deeper yet sorry, but don't hesitate to give any suggestion to improve it)

Result after :

import { runASTAnalysis } from "./index.js";

const result = runASTAnalysis(`
const stream = eval('require')('stream')
`);

console.log(result);

➜  js-x-ray git:(fix/179) ✗ node test.js
{
  idsLengthAvg: 6,
  stringScore: 0,
  warnings: [
    {
      kind: 'unsafe-stmt',
      location: [Array],
      source: 'JS-X-Ray',
      value: 'eval',
      code: 'unsafe-stmt',
      i18n: 'sast_warnings.unsafe_stmt',
      severity: 'Warning'
    },
    {
      kind: 'unsafe-import',
      location: [Array],
      source: 'JS-X-Ray',
      value: 'stream',
      i18n: 'sast_warnings.unsafe_import',
      severity: 'Warning'
    }
  ],
  dependencies: Map(1) {
    'stream' => { unsafe: true, inTry: false, location: [Object] }
  },
  isOneLineRequire: true
}

[tchapacan]

I have updated the PR according to your comments, again thanks a lot lot for your help and your time, I couldn't have done it without your help ! 😄