Is prototype pollution on the roadmap for vulnerability detection?