JS: Add model of pg-promise

[asgerf]

Adds a model of pg-promise, a PostgreSQL connector library.

Evaluations: (internal link)

• On 10 projects using pg-promise shows 231 new sinks and 30 new alerts.
• Default slugs from a slightly older version of the PR shows acceptable performance.

[esbena]

LGTM. Impressive numbers!

Subjective module structuring:

What do you think of splittling the Postgres module into two internal modules Postgres::pg and Postgres::pg-promise to avoid the explicit mention of pg-promise in all of the docstrings?

Types

pg-promise has types, can we add the ofType cases to this PR, like we do for our related mongodb/mongoose models?

codeql/javascript/ql/src/semmle/javascript/frameworks/NoSQL.qll

Line 224 in b381f48

result = API::Node::ofType("mongoose", "Model")

[asgerf]

What do you think of splittling the Postgres module into two internal modules Postgres::pg and Postgres::pg-promise to avoid the explicit mention of pg-promise in all of the docstrings?

I don't think it's a huge problem to mention pg-promise in the docstring. It's also easier to read than having to scroll upwards to see what module you're inside.

pg-promise has types, can we add the ofType cases to this PR, like we do for our related mongodb/mongoose models?

👍

[esbena]

nit: this file belongs to the typed directory

[asgerf]

The typed directory is for tests that rely on type information provided by the TypeScript compiler, which in turn requires a .d.ts shim.

As of #4401, however, we don't need that in our tests anymore, which is why the test works in this directory.