add change note

erik-krogh · erik-krogh · commit 7f09edcf596e · 2021-06-07T17:25:18.000+02:00
diff --git a/javascript/change-notes/2021-06-07-serverless.md b/javascript/change-notes/2021-06-07-serverless.md
@@ -0,0 +1,4 @@
+lgtm,codescanning
+* Events from the [`serverless`](https://npmjs.com/package/serverless) package are recognized a source of remote user input.
+  Affected packages are
+    [serverless](https://npmjs.com/package/serverless)
