JS: new `Quality` query - Unhandled errors in `.pipe()` chain #19544

Merged

Napalys merged 38 commits intogithub:mainfrom

Napalys:js/quality/stream_pipe

Jun 4, 2025

Commits on May 22, 2025

Add test cases for non-stream field accesses and methods before and after pipe operations
Napalys
committed
Eliminate false positives by detecting non-stream objects returned from `pipe()` calls based on accessed properties
Napalys
committed
Enhance PipeCall to exclude non-function and non-object arguments in pipe method detection
Napalys
committed
Fixed issue where `pipe` calls from `rxjs` package would been identified as `pipe` calls on streams
Napalys
committed
Added `UnhandledStreamPipe` to `javascript-security-and-quality.qls` and `javascript-code-quality.qls`
Napalys
committed
Added detection of custom `gulp-plumber` sanitizer, thus one would not flag such instances.
Napalys
committed
Add predicate to detect non-stream-like usage in sources of pipe calls
Napalys
committed
Added test cases where second parameter passed to `pipe` is a function and some popular library ones
Napalys
committed
Fixed false positives from `strapi` and `rxjs/testing` as well as when one passes function as second arg to `pipe`
Napalys
committed

Commits on May 26, 2025

Added `maintainability` and `error-handling` tags
Napalys
committed

Commits on May 27, 2025

Excluded `ngrx`, `datorama`, `angular`, `react` and `langchain` from stream pipe query.
Napalys
committed

Commits on May 30, 2025

Fix false positives in stream pipe analysis by improving error handler tracking via property access.
Napalys
committed

Commits on Jun 2, 2025