lgtm,codescanning

• The security queries now track taint through the format string of a date-formatting operation. Affected packages are moment, moment-timezone, date-fns, and dateformat.