update doc to make it clear that moduleImport(..) does not refer to PyPI names

erik-krogh · RasmusWL · web-flow · commit a5b11e88b42d · 2022-05-19T20:00:43.000+02:00
Co-authored-by: Rasmus Wriedt Larsen &lt;rasmuswriedtlarsen@gmail.com&gt;
diff --git a/python/ql/lib/semmle/python/frameworks/data/ModelsAsData.qll b/python/ql/lib/semmle/python/frameworks/data/ModelsAsData.qll
@@ -5,7 +5,8 @@
  * - Use the `ModelInput` module to contribute new models.
  * - Use the `ModelOutput` module to access the model results in terms of API nodes.
  *
- * The package name refers to a Pip package name.
+ * The package name refers to the top-level module the import comes from, and not a PyPI package.
+ * So for `from foo.bar import baz`, the package will be `foo`.
  */
 
 private import python

Original file line number	Diff line number	Diff line change
`@@ -5,7 +5,8 @@`
`5`	`5`	* - Use the `ModelInput` module to contribute new models.
`6`	`6`	* - Use the `ModelOutput` module to access the model results in terms of API nodes.
`7`	`7`	`*`
`8`		`- * The package name refers to a Pip package name.`
	`8`	`+ * The package name refers to the top-level module the import comes from, and not a PyPI package.`
	`9`	+ * So for `from foo.bar import baz`, the package will be `foo`.
`9`	`10`	`*/`
`10`	`11`
`11`	`12`	`private import python`