detect-child-process false-positive with spawn

const { spawn } = require('child_process');

Gives the Found require("child_process") error.

According to Avoiding Command Injection in Node.js, child_process.spawn is safer than child_process.exec.

So is it a false-positive, or does the detect-child-process rule tell me to completely avoid using child_process?

[EvgenyOrekhov]

@modestfake Your case is different. You should open a separate issue for it.

[modestfake]

I found the case when this rule is false-positive

const string = 'hello'
const result = /hello/.exec(string) // Yields here

UPDATE: created a separate issue #64