DO NOT MERGE: Add meta queries to security extended for QA

This reverts commit 76f6adde5121d6d0740b419e08c083d48e887d2f.

python/ql/lib/semmle/python/Module.qll

@@ -177,7 +177,7 @@ private predicate legalDottedName(string name) {
 }
 
 bindingset[name]
-private predicate legalShortName(string name) { name.regexpMatch("(\\p{L}|_)(\\p{L}|\\d|_)*") }
+predicate legalShortName(string name) { name.regexpMatch("(\\p{L}|_)(\\p{L}|\\d|_)*") }
 
 private string moduleNameFromBase(Container file) {
   // We used to also require `isPotentialPackage(f)` to hold in this case,

python/ql/lib/semmle/python/frameworks/Aioch.qll

@@ -9,6 +9,7 @@ private import python
 private import semmle.python.Concepts
 private import semmle.python.ApiGraphs
 private import semmle.python.frameworks.ClickhouseDriver
+private import semmle.python.frameworks.data.ModelsAsData
 
 /**
  * INTERNAL: Do not use.
@@ -24,6 +25,8 @@ module Aioch {
     /** Gets a reference to the `aioch.Client` class or any subclass. */
     API::Node subclassRef() {
       result = API::moduleImport("aioch").getMember("Client").getASubclass*()
+      or
+      result = ModelOutput::getATypeNode("aioch.Client~Subclass").getASubclass*()
     }
 
     /** Gets a reference to an instance of `clickhouse_driver.Client` or any subclass. */

python/ql/lib/semmle/python/frameworks/Aiohttp.qll

@@ -14,6 +14,7 @@ private import semmle.python.frameworks.internal.SelfRefMixin
 private import semmle.python.frameworks.Multidict
 private import semmle.python.frameworks.Yarl
 private import semmle.python.frameworks.internal.InstanceTaintStepsHelper
+private import semmle.python.frameworks.data.ModelsAsData
 
 /**
  * INTERNAL: Do not use.
@@ -31,6 +32,8 @@ module AiohttpWebModel {
     /** Gets a reference to the `aiohttp.web.View` class or any subclass. */
     API::Node subclassRef() {
       result = API::moduleImport("aiohttp").getMember("web").getMember("View").getASubclass*()
+      or
+      result = ModelOutput::getATypeNode("aiohttp.web.View~Subclass").getASubclass*()
     }
   }
 
@@ -706,10 +709,12 @@ module AiohttpWebModel {
 }
 
 /**
+ * INTERNAL: Do not use.
+ *
  * Provides models for the web server part (`aiohttp.client`) of the `aiohttp` PyPI package.
  * See https://docs.aiohttp.org/en/stable/client.html
  */
-private module AiohttpClientModel {
+module AiohttpClientModel {
   /**
    * Provides models for the `aiohttp.ClientSession` class
    *
@@ -717,8 +722,10 @@ private module AiohttpClientModel {
    */
   module ClientSession {
     /** Gets a reference to the `aiohttp.ClientSession` class. */
-    private API::Node classRef() {
+    API::Node classRef() {
       result = API::moduleImport("aiohttp").getMember("ClientSession")
+      or
+      result = ModelOutput::getATypeNode("aiohttp.ClientSession~Subclass").getASubclass*()
     }
 
     /** Gets a reference to an instance of `aiohttp.ClientSession`. */

python/ql/lib/semmle/python/frameworks/ClickhouseDriver.qll

@@ -9,6 +9,7 @@ private import python
 private import semmle.python.Concepts
 private import semmle.python.ApiGraphs
 private import semmle.python.frameworks.PEP249
+private import semmle.python.frameworks.data.ModelsAsData
 
 /**
  * INTERNAL: Do not use.
@@ -37,6 +38,9 @@ module ClickhouseDriver {
         or
         // commonly used alias
         classRef = API::moduleImport("clickhouse_driver").getMember("Client")
+        or
+        // Models-as-Data subclass
+        classRef = ModelOutput::getATypeNode("clickhouse_driver.client.Client~Subclass")
       |
         result = classRef.getASubclass*()
       )

python/ql/lib/semmle/python/frameworks/Django.qll

@@ -16,6 +16,7 @@ private import semmle.python.frameworks.internal.PoorMansFunctionResolution
 private import semmle.python.frameworks.internal.SelfRefMixin
 private import semmle.python.frameworks.internal.InstanceTaintStepsHelper
 private import semmle.python.security.dataflow.UrlRedirectCustomizations
+private import semmle.python.frameworks.data.ModelsAsData
 
 /**
  * INTERNAL: Do not use.
@@ -85,6 +86,10 @@ module Django {
         }
       }
 
+      private class MaDSubclass extends ModeledSubclass {
+        MaDSubclass() { this = ModelOutput::getATypeNode("Django.Views.View~Subclass") }
+      }
+
       /** Gets a reference to the `django.views.generic.View` class or any subclass. */
       API::Node subclassRef() { result = any(ModeledSubclass subclass).getASubclass*() }
     }
@@ -185,6 +190,10 @@ module Django {
         }
       }
 
+      private class MaDSubclass extends ModeledSubclass {
+        MaDSubclass() { this = ModelOutput::getATypeNode("django.forms.BaseForm~Subclass") }
+      }
+
       /** Gets a reference to the `django.forms.forms.BaseForm` class or any subclass. */
       API::Node subclassRef() { result = any(ModeledSubclass subclass).getASubclass*() }
     }
@@ -290,6 +299,10 @@ module Django {
         }
       }
 
+      private class MaDSubclass extends ModeledSubclass {
+        MaDSubclass() { this = ModelOutput::getATypeNode("Django.Forms.Field~Subclass") }
+      }
+
       /** Gets a reference to the `django.forms.fields.Field` class or any subclass. */
       API::Node subclassRef() { result = any(ModeledSubclass subclass).getASubclass*() }
     }
@@ -596,6 +609,8 @@ module PrivateDjango {
                   .getMember("models")
                   .getMember("PolymorphicModel")
                   .getASubclass*()
+            or
+            result = ModelOutput::getATypeNode("Django.db.models.Model~Subclass").getASubclass*()
           }
 
           /**
@@ -766,6 +781,9 @@ module PrivateDjango {
                     .getMember(className)
                     .getASubclass*()
             )
+            or
+            result =
+              ModelOutput::getATypeNode("django.db.models.FileField~Subclass").getASubclass*()
           }
         }
 
@@ -823,6 +841,10 @@ module PrivateDjango {
               or
               // Commonly used alias
               result = models().getMember("RawSQL")
+              or
+              result =
+                ModelOutput::getATypeNode("django.db.models.expressions.RawSQL~Subclass")
+                    .getASubclass*()
             }
 
             /**
@@ -1157,6 +1179,9 @@ module PrivateDjango {
             or
             // handle django.http.HttpRequest alias
             result = http().getMember("HttpRequest")
+            or
+            result =
+              ModelOutput::getATypeNode("django.http.request.HttpRequest~Subclass").getASubclass*()
           }
 
           /**
@@ -1322,7 +1347,13 @@ module PrivateDjango {
           }
 
           /** Gets a reference to the `django.http.response.HttpResponse` class or any subclass. */
-          API::Node classRef() { result = baseClassRef().getASubclass*() }
+          API::Node classRef() {
+            result = baseClassRef().getASubclass*()
+            or
+            result =
+              ModelOutput::getATypeNode("django.http.response.HttpResponse~Subclass")
+                  .getASubclass*()
+          }
 
           /**
            * A source of instances of `django.http.response.HttpResponse`, extend this class to model new instances.
@@ -1383,7 +1414,12 @@ module PrivateDjango {
           }
 
           /** Gets a reference to a subclass of the `django.http.response.HttpResponseRedirect` class. */
-          API::Node classRef() { result = baseClassRef().getASubclass*() }
+          API::Node classRef() {
+            result = baseClassRef().getASubclass*() or
+            result =
+              ModelOutput::getATypeNode("django.http.response.HttpResponseRedirect~Subclass")
+                  .getASubclass*()
+          }
 
           /**
            * A source of instances of `django.http.response.HttpResponseRedirect`, extend this class to model new instances.
@@ -1446,7 +1482,12 @@ module PrivateDjango {
           }
 
           /** Gets a reference to the `django.http.response.HttpResponsePermanentRedirect` class. */
-          API::Node classRef() { result = baseClassRef().getASubclass*() }
+          API::Node classRef() {
+            result = baseClassRef().getASubclass*() or
+            result =
+              ModelOutput::getATypeNode("django.http.response.HttpResponsePermanentRedirect~Subclass")
+                  .getASubclass*()
+          }
 
           /**
            * A source of instances of `django.http.response.HttpResponsePermanentRedirect`, extend this class to model new instances.
@@ -1510,7 +1551,12 @@ module PrivateDjango {
           }
 
           /** Gets a reference to the `django.http.response.HttpResponseNotModified` class. */
-          API::Node classRef() { result = baseClassRef().getASubclass*() }
+          API::Node classRef() {
+            result = baseClassRef().getASubclass*() or
+            result =
+              ModelOutput::getATypeNode("django.http.response.HttpResponseNotModified~Subclass")
+                  .getASubclass*()
+          }
 
           /**
            * A source of instances of `django.http.response.HttpResponseNotModified`, extend this class to model new instances.
@@ -1562,7 +1608,12 @@ module PrivateDjango {
           }
 
           /** Gets a reference to the `django.http.response.HttpResponseBadRequest` class. */
-          API::Node classRef() { result = baseClassRef().getASubclass*() }
+          API::Node classRef() {
+            result = baseClassRef().getASubclass*() or
+            result =
+              ModelOutput::getATypeNode("django.http.response.HttpResponseBadRequest~Subclass")
+                  .getASubclass*()
+          }
 
           /**
            * A source of instances of `django.http.response.HttpResponseBadRequest`, extend this class to model new instances.
@@ -1616,7 +1667,12 @@ module PrivateDjango {
           }
 
           /** Gets a reference to the `django.http.response.HttpResponseNotFound` class. */
-          API::Node classRef() { result = baseClassRef().getASubclass*() }
+          API::Node classRef() {
+            result = baseClassRef().getASubclass*() or
+            result =
+              ModelOutput::getATypeNode("django.http.response.HttpResponseNotFound~Subclass")
+                  .getASubclass*()
+          }
 
           /**
            * A source of instances of `django.http.response.HttpResponseNotFound`, extend this class to model new instances.
@@ -1670,7 +1726,12 @@ module PrivateDjango {
           }
 
           /** Gets a reference to the `django.http.response.HttpResponseForbidden` class. */
-          API::Node classRef() { result = baseClassRef().getASubclass*() }
+          API::Node classRef() {
+            result = baseClassRef().getASubclass*() or
+            result =
+              ModelOutput::getATypeNode("django.http.response.HttpResponseForbidden~Subclass")
+                  .getASubclass*()
+          }
 
           /**
            * A source of instances of `django.http.response.HttpResponseForbidden`, extend this class to model new instances.
@@ -1724,7 +1785,12 @@ module PrivateDjango {
           }
 
           /** Gets a reference to the `django.http.response.HttpResponseNotAllowed` class. */
-          API::Node classRef() { result = baseClassRef().getASubclass*() }
+          API::Node classRef() {
+            result = baseClassRef().getASubclass*() or
+            result =
+              ModelOutput::getATypeNode("django.http.response.HttpResponseNotAllowed~Subclass")
+                  .getASubclass*()
+          }
 
           /**
            * A source of instances of `django.http.response.HttpResponseNotAllowed`, extend this class to model new instances.
@@ -1779,7 +1845,12 @@ module PrivateDjango {
           }
 
           /** Gets a reference to the `django.http.response.HttpResponseGone` class. */
-          API::Node classRef() { result = baseClassRef().getASubclass*() }
+          API::Node classRef() {
+            result = baseClassRef().getASubclass*() or
+            result =
+              ModelOutput::getATypeNode("django.http.response.HttpResponseGone~Subclass")
+                  .getASubclass*()
+          }
 
           /**
            * A source of instances of `django.http.response.HttpResponseGone`, extend this class to model new instances.
@@ -1833,7 +1904,12 @@ module PrivateDjango {
           }
 
           /** Gets a reference to the `django.http.response.HttpResponseServerError` class. */
-          API::Node classRef() { result = baseClassRef().getASubclass*() }
+          API::Node classRef() {
+            result = baseClassRef().getASubclass*() or
+            result =
+              ModelOutput::getATypeNode("django.http.response.HttpResponseServerError~Subclass")
+                  .getASubclass*()
+          }
 
           /**
            * A source of instances of `django.http.response.HttpResponseServerError`, extend this class to model new instances.
@@ -1887,7 +1963,12 @@ module PrivateDjango {
           }
 
           /** Gets a reference to the `django.http.response.JsonResponse` class. */
-          API::Node classRef() { result = baseClassRef().getASubclass*() }
+          API::Node classRef() {
+            result = baseClassRef().getASubclass*() or
+            result =
+              ModelOutput::getATypeNode("django.http.response.JsonResponse~Subclass")
+                  .getASubclass*()
+          }
 
           /**
            * A source of instances of `django.http.response.JsonResponse`, extend this class to model new instances.
@@ -1944,7 +2025,12 @@ module PrivateDjango {
           }
 
           /** Gets a reference to the `django.http.response.StreamingHttpResponse` class. */
-          API::Node classRef() { result = baseClassRef().getASubclass*() }
+          API::Node classRef() {
+            result = baseClassRef().getASubclass*() or
+            result =
+              ModelOutput::getATypeNode("django.http.response.StreamingHttpResponse~Subclass")
+                  .getASubclass*()
+          }
 
           /**
            * A source of instances of `django.http.response.StreamingHttpResponse`, extend this class to model new instances.
@@ -1998,7 +2084,12 @@ module PrivateDjango {
           }
 
           /** Gets a reference to the `django.http.response.FileResponse` class. */
-          API::Node classRef() { result = baseClassRef().getASubclass*() }
+          API::Node classRef() {
+            result = baseClassRef().getASubclass*() or
+            result =
+              ModelOutput::getATypeNode("django.http.response.FileResponse~Subclass")
+                  .getASubclass*()
+          }
 
           /**
            * A source of instances of `django.http.response.FileResponse`, extend this class to model new instances.

python/ql/lib/semmle/python/frameworks/Fabric.qll

@@ -12,6 +12,7 @@ private import semmle.python.dataflow.new.DataFlow
 private import semmle.python.dataflow.new.RemoteFlowSources
 private import semmle.python.Concepts
 private import semmle.python.ApiGraphs
+private import semmle.python.frameworks.data.ModelsAsData
 
 /**
  * Provides classes modeling security-relevant aspects of the `fabric` PyPI package, for
@@ -65,12 +66,14 @@ private module FabricV1 {
 }
 
 /**
+ * INTERNAL: Do not use.
+ *
  * Provides classes modeling security-relevant aspects of the `fabric` PyPI package, for
  * version 2.x.
  *
  * See http://docs.fabfile.org/en/2.5/getting-st  arted.html.
  */
-private module FabricV2 {
+module FabricV2 {
   /** Gets a reference to the `fabric` module. */
   API::Node fabric() { result = API::moduleImport("fabric") }
 
@@ -95,6 +98,9 @@ private module FabricV2 {
           result = fabric().getMember("Connection")
           or
           result = connection().getMember("Connection")
+          or
+          result =
+            ModelOutput::getATypeNode("fabric.connection.Connection~Subclass").getASubclass*()
         }
 
         /**

python/ql/lib/semmle/python/frameworks/FastApi.qll

@@ -11,18 +11,21 @@ private import semmle.python.Concepts
 private import semmle.python.ApiGraphs
 private import semmle.python.frameworks.Pydantic
 private import semmle.python.frameworks.Starlette
+private import semmle.python.frameworks.data.ModelsAsData
 
 /**
  * Provides models for the `fastapi` PyPI package.
  * See https://fastapi.tiangolo.com/.
  */
-private module FastApi {
+module FastApi {
   /**
    * Provides models for FastAPI applications (an instance of `fastapi.FastAPI`).
    */
   module App {
+    API::Node cls() { result = API::moduleImport("fastapi").getMember("FastAPI") }
+
     /** Gets a reference to a FastAPI application (an instance of `fastapi.FastAPI`). */
-    API::Node instance() { result = API::moduleImport("fastapi").getMember("FastAPI").getReturn() }
+    API::Node instance() { result = cls().getReturn() }
   }
 
   /**
@@ -31,10 +34,14 @@ private module FastApi {
    * See https://fastapi.tiangolo.com/tutorial/bigger-applications/.
    */
   module ApiRouter {
-    /** Gets a reference to an instance of `fastapi.ApiRouter`. */
-    API::Node instance() {
-      result = API::moduleImport("fastapi").getMember("APIRouter").getASubclass*().getReturn()
+    API::Node cls() {
+      result = API::moduleImport("fastapi").getMember("APIRouter").getASubclass*()
+      or
+      result = ModelOutput::getATypeNode("fastapi.APIRouter~Subclass").getASubclass*()
     }
+
+    /** Gets a reference to an instance of `fastapi.ApiRouter`. */
+    API::Node instance() { result = cls().getReturn() }
   }
 
   // ---------------------------------------------------------------------------

python/ql/lib/semmle/python/frameworks/Flask.qll

@@ -14,6 +14,7 @@ private import semmle.python.ApiGraphs
 private import semmle.python.frameworks.internal.InstanceTaintStepsHelper
 private import semmle.python.security.dataflow.PathInjectionCustomizations
 private import semmle.python.dataflow.new.FlowSummary
+private import semmle.python.frameworks.data.ModelsAsData
 
 /**
  * Provides models for the `flask` PyPI package.
@@ -39,6 +40,10 @@ module Flask {
                   "MethodView"
                 ])
               .getASubclass*()
+        or
+        result = ModelOutput::getATypeNode("flask.View~Subclass").getASubclass*()
+        or
+        result = ModelOutput::getATypeNode("flask.MethodView~Subclass").getASubclass*()
       }
     }
 
@@ -52,6 +57,8 @@ module Flask {
       API::Node subclassRef() {
         result =
           API::moduleImport("flask").getMember("views").getMember("MethodView").getASubclass*()
+        or
+        result = ModelOutput::getATypeNode("flask.MethodView~Subclass").getASubclass*()
       }
     }
   }
@@ -63,7 +70,10 @@ module Flask {
    */
   module FlaskApp {
     /** Gets a reference to the `flask.Flask` class. */
-    API::Node classRef() { result = API::moduleImport("flask").getMember("Flask") }
+    API::Node classRef() {
+      result = API::moduleImport("flask").getMember("Flask") or
+      result = ModelOutput::getATypeNode("flask.Flask~Subclass").getASubclass*()
+    }
 
     /** Gets a reference to an instance of `flask.Flask` (a flask application). */
     API::Node instance() { result = classRef().getReturn() }
@@ -80,6 +90,8 @@ module Flask {
       result = API::moduleImport("flask").getMember("Blueprint")
       or
       result = API::moduleImport("flask").getMember("blueprints").getMember("Blueprint")
+      or
+      result = ModelOutput::getATypeNode("flask.Blueprint~Subclass").getASubclass*()
     }
 
     /** Gets a reference to an instance of `flask.Blueprint`. */
@@ -87,7 +99,9 @@ module Flask {
   }
 
   /** Gets a reference to the `flask.request` object. */
-  API::Node request() { result = API::moduleImport("flask").getMember("request") }
+  API::Node request() {
+    result = API::moduleImport(["flask", "flask_restful"]).getMember("request")
+  }
 
   /**
    * Provides models for the `flask.Response` class
@@ -104,6 +118,8 @@ module Flask {
       result = API::moduleImport("flask").getMember("Response")
       or
       result = [FlaskApp::classRef(), FlaskApp::instance()].getMember("response_class")
+      or
+      result = ModelOutput::getATypeNode("flask.Response~Subclass").getASubclass*()
     }
 
     /**

python/ql/lib/semmle/python/frameworks/Httpx.qll

@@ -9,15 +9,18 @@
 private import python
 private import semmle.python.Concepts
 private import semmle.python.ApiGraphs
+private import semmle.python.frameworks.data.ModelsAsData
 
 /**
+ * INTERNAL: Do not use.
+ *
  * Provides models for the `httpx` PyPI package.
  *
  * See
  * - https://pypi.org/project/httpx/
  * - https://www.python-httpx.org/
  */
-private module HttpxModel {
+module HttpxModel {
   /**
    * An outgoing HTTP request, from the `httpx` library.
    *
@@ -59,8 +62,10 @@ private module HttpxModel {
    */
   module Client {
     /** Get a reference to the `httpx.Client` or `httpx.AsyncClient` class. */
-    private API::Node classRef() {
+    API::Node classRef() {
       result = API::moduleImport("httpx").getMember(["Client", "AsyncClient"])
+      or
+      result = ModelOutput::getATypeNode("httpx.Client~Subclass").getASubclass*()
     }
 
     /** A method call on a Client that sends off a request */

python/ql/lib/semmle/python/frameworks/Invoke.qll

@@ -7,12 +7,15 @@ private import python
 private import semmle.python.dataflow.new.DataFlow
 private import semmle.python.Concepts
 private import semmle.python.ApiGraphs
+private import semmle.python.frameworks.data.ModelsAsData
 
 /**
+ * INTERNAL: Do not use.
+ *
  * Provides models for the `invoke` PyPI package.
  * See https://www.pyinvoke.org/.
  */
-private module Invoke {
+module Invoke {
   // ---------------------------------------------------------------------------
   // invoke
   // ---------------------------------------------------------------------------
@@ -30,6 +33,8 @@ private module Invoke {
           result = API::moduleImport("invoke").getMember("context").getMember("Context")
           or
           result = API::moduleImport("invoke").getMember("Context")
+          or
+          result = ModelOutput::getATypeNode("invoke.context.Context~Subclass").getASubclass*()
         }
 
         /** Gets a reference to an instance of `invoke.context.Context`. */

python/ql/lib/semmle/python/frameworks/Lxml.qll

@@ -10,15 +10,25 @@ private import python
 private import semmle.python.dataflow.new.DataFlow
 private import semmle.python.Concepts
 private import semmle.python.ApiGraphs
+private import semmle.python.frameworks.data.ModelsAsData
 
 /**
+ * INTERNAL: Do not use.
+ *
  * Provides classes modeling security-relevant aspects of the `lxml` PyPI package
  *
  * See
  * - https://pypi.org/project/lxml/
  * - https://lxml.de/tutorial.html
  */
-private module Lxml {
+module Lxml {
+  /** Gets a reference to the `lxml.etree` module */
+  API::Node etreeRef() {
+    result = API::moduleImport("lxml").getMember("etree")
+    or
+    result = ModelOutput::getATypeNode("lxml.etree~Alias")
+  }
+
   // ---------------------------------------------------------------------------
   // XPath
   // ---------------------------------------------------------------------------
@@ -34,9 +44,7 @@ private module Lxml {
    * - https://lxml.de/apidoc/lxml.etree.html#lxml.etree.ETXPath
    */
   private class XPathClassCall extends XML::XPathConstruction::Range, DataFlow::CallCfgNode {
-    XPathClassCall() {
-      this = API::moduleImport("lxml").getMember("etree").getMember(["XPath", "ETXPath"]).getACall()
-    }
+    XPathClassCall() { this = etreeRef().getMember(["XPath", "ETXPath"]).getACall() }
 
     override DataFlow::Node getXPath() { result in [this.getArg(0), this.getArgByName("path")] }
 
@@ -62,20 +70,11 @@ private module Lxml {
     XPathCall() {
       exists(API::Node parseResult |
         parseResult =
-          API::moduleImport("lxml")
-              .getMember("etree")
-              .getMember(["parse", "fromstring", "fromstringlist", "HTML", "XML"])
-              .getReturn()
+          etreeRef().getMember(["parse", "fromstring", "fromstringlist", "HTML", "XML"]).getReturn()
         or
         // TODO: lxml.etree.parseid(<text>)[0] will contain the root element from parsing <text>
         // but we don't really have a way to model that nicely.
-        parseResult =
-          API::moduleImport("lxml")
-              .getMember("etree")
-              .getMember("XMLParser")
-              .getReturn()
-              .getMember("close")
-              .getReturn()
+        parseResult = etreeRef().getMember("XMLParser").getReturn().getMember("close").getReturn()
       |
         this = parseResult.getMember("xpath").getACall()
       )
@@ -87,14 +86,7 @@ private module Lxml {
   }
 
   class XPathEvaluatorCall extends XML::XPathExecution::Range, DataFlow::CallCfgNode {
-    XPathEvaluatorCall() {
-      this =
-        API::moduleImport("lxml")
-            .getMember("etree")
-            .getMember("XPathEvaluator")
-            .getReturn()
-            .getACall()
-    }
+    XPathEvaluatorCall() { this = etreeRef().getMember("XPathEvaluator").getReturn().getACall() }
 
     override DataFlow::Node getXPath() { result = this.getArg(0) }
 
@@ -130,9 +122,7 @@ private module Lxml {
      * See https://lxml.de/apidoc/lxml.etree.html?highlight=xmlparser#lxml.etree.XMLParser
      */
     private class LxmlParser extends InstanceSource, API::CallNode {
-      LxmlParser() {
-        this = API::moduleImport("lxml").getMember("etree").getMember("XMLParser").getACall()
-      }
+      LxmlParser() { this = etreeRef().getMember("XMLParser").getACall() }
 
       // NOTE: it's not possible to change settings of a parser after constructing it
       override predicate vulnerableTo(XML::XmlParsingVulnerabilityKind kind) {
@@ -162,10 +152,7 @@ private module Lxml {
      * See https://lxml.de/apidoc/lxml.etree.html?highlight=xmlparser#lxml.etree.get_default_parser
      */
     private class LxmlDefaultParser extends InstanceSource, DataFlow::CallCfgNode {
-      LxmlDefaultParser() {
-        this =
-          API::moduleImport("lxml").getMember("etree").getMember("get_default_parser").getACall()
-      }
+      LxmlDefaultParser() { this = etreeRef().getMember("get_default_parser").getACall() }
 
       override predicate vulnerableTo(XML::XmlParsingVulnerabilityKind kind) {
         // as highlighted by
@@ -240,7 +227,7 @@ private module Lxml {
 
     LxmlParsing() {
       functionName in ["fromstring", "fromstringlist", "XML", "XMLID", "parse", "parseid"] and
-      this = API::moduleImport("lxml").getMember("etree").getMember(functionName).getACall()
+      this = etreeRef().getMember(functionName).getACall()
     }
 
     override DataFlow::Node getAnInput() {
@@ -309,9 +296,7 @@ private module Lxml {
   private class LxmlIterparseCall extends API::CallNode, XML::XmlParsing::Range,
     FileSystemAccess::Range
   {
-    LxmlIterparseCall() {
-      this = API::moduleImport("lxml").getMember("etree").getMember("iterparse").getACall()
-    }
+    LxmlIterparseCall() { this = etreeRef().getMember("iterparse").getACall() }
 
     override DataFlow::Node getAnInput() { result in [this.getArg(0), this.getArgByName("source")] }
 

python/ql/lib/semmle/python/frameworks/MarkupSafe.qll

@@ -9,12 +9,15 @@ private import semmle.python.dataflow.new.TaintTracking
 private import semmle.python.Concepts
 private import semmle.python.ApiGraphs
 private import semmle.python.frameworks.internal.InstanceTaintStepsHelper
+private import semmle.python.frameworks.data.ModelsAsData
 
 /**
+ * INTERNAL: Do not use.
+ *
  * Provides models for the `MarkupSafe` PyPI package.
  * See https://markupsafe.palletsprojects.com/en/2.0.x/.
  */
-private module MarkupSafeModel {
+module MarkupSafeModel {
   /**
    * Provides models for the `markupsafe.Markup` class
    *
@@ -26,6 +29,8 @@ private module MarkupSafeModel {
       result = API::moduleImport("markupsafe").getMember("Markup")
       or
       result = API::moduleImport("flask").getMember("Markup")
+      or
+      result = ModelOutput::getATypeNode("markupsafe.Markup~Subclass").getASubclass*()
     }
 
     /**

python/ql/lib/semmle/python/frameworks/Multidict.qll

@@ -9,6 +9,7 @@ private import semmle.python.dataflow.new.TaintTracking
 private import semmle.python.Concepts
 private import semmle.python.ApiGraphs
 private import semmle.python.frameworks.internal.InstanceTaintStepsHelper
+private import semmle.python.frameworks.data.ModelsAsData
 
 /**
  * INTERNAL: Do not use.
@@ -28,6 +29,8 @@ module Multidict {
     /** Gets a reference to a `MultiDictProxy` class. */
     API::Node classRef() {
       result = API::moduleImport("multidict").getMember(["MultiDictProxy", "CIMultiDictProxy"])
+      or
+      result = ModelOutput::getATypeNode("multidict.MultiDictProxy~Subclass").getASubclass*()
     }
 
     /**

python/ql/lib/semmle/python/frameworks/Peewee.qll

@@ -11,14 +11,17 @@ private import semmle.python.dataflow.new.TaintTracking
 private import semmle.python.Concepts
 private import semmle.python.ApiGraphs
 private import semmle.python.frameworks.PEP249
+private import semmle.python.frameworks.data.ModelsAsData
 
 /**
+ * INTERNAL: Do not use.
+ *
  * Provides models for the `peewee` PyPI package.
  * See
  * - https://pypi.org/project/peewee/
  * - https://docs.peewee-orm.com/en/latest/index.html
  */
-private module Peewee {
+module Peewee {
   /** Provides models for the `peewee.Database` class and subclasses. */
   module Database {
     /** Gets a reference to the `peewee.Database` class or any subclass. */
@@ -31,7 +34,7 @@ private module Peewee {
             .getMember(["SqliteDatabase", "MySQLDatabase", "PostgresqlDatabase"])
             .getASubclass*()
       or
-      // Ohter known subclasses, semi auto generated by using
+      // Other known subclasses, semi auto generated by using
       // ```ql
       // class DBClass extends Class, SelfRefMixin {
       //   DBClass() {
@@ -153,6 +156,8 @@ private module Peewee {
             .getMember("sqliteq")
             .getMember("SqliteQueueDatabase")
             .getASubclass*()
+      or
+      result = ModelOutput::getATypeNode("peewee.Database~Subclass").getASubclass*()
     }
 
     /** Gets a reference to an instance of `peewee.Database` or any subclass. */

python/ql/lib/semmle/python/frameworks/Pycurl.qll

@@ -9,15 +9,18 @@
 private import python
 private import semmle.python.Concepts
 private import semmle.python.ApiGraphs
+private import semmle.python.frameworks.data.ModelsAsData
 
 /**
+ * INTERNAL: Do not use.
+ *
  * Provides models for the `pycurl` PyPI package.
  *
  * See
  * - https://pypi.org/project/pycurl/
  * - https://pycurl.io/docs/latest/
  */
-private module Pycurl {
+module Pycurl {
   /**
    * Provides models for the `pycurl.Curl` class
    *
@@ -25,7 +28,11 @@ private module Pycurl {
    */
   module Curl {
     /** Gets a reference to the `pycurl.Curl` class. */
-    private API::Node classRef() { result = API::moduleImport("pycurl").getMember("Curl") }
+    API::Node classRef() {
+      result = API::moduleImport("pycurl").getMember("Curl")
+      or
+      result = ModelOutput::getATypeNode("pycurl.Curl~Subclass").getASubclass*()
+    }
 
     /** Gets a reference to an instance of `pycurl.Curl`. */
     private API::Node instance() { result = classRef().getReturn() }

python/ql/lib/semmle/python/frameworks/Pydantic.qll

@@ -11,6 +11,7 @@ private import semmle.python.dataflow.new.DataFlow
 private import semmle.python.dataflow.new.TaintTracking
 private import semmle.python.Concepts
 private import semmle.python.ApiGraphs
+private import semmle.python.frameworks.data.ModelsAsData
 
 /**
  * INTERNAL: Do not use.
@@ -31,6 +32,8 @@ module Pydantic {
     /** Gets a reference to a `pydantic.BaseModel` subclass (a pydantic model). */
     API::Node subclassRef() {
       result = API::moduleImport("pydantic").getMember("BaseModel").getASubclass+()
+      or
+      result = ModelOutput::getATypeNode("pydantic.BaseModel~Subclass").getASubclass*()
     }
 
     /**

python/ql/lib/semmle/python/frameworks/Requests.qll

@@ -12,6 +12,7 @@ private import semmle.python.ApiGraphs
 private import semmle.python.dataflow.new.TaintTracking
 private import semmle.python.frameworks.internal.InstanceTaintStepsHelper
 private import semmle.python.frameworks.Stdlib
+private import semmle.python.frameworks.data.ModelsAsData
 
 /**
  * INTERNAL: Do not use.
@@ -22,7 +23,7 @@ private import semmle.python.frameworks.Stdlib
  * - https://pypi.org/project/requests/
  * - https://requests.readthedocs.io/en/latest/
  */
-private module Requests {
+module Requests {
   /**
    * An outgoing HTTP request, from the `requests` library.
    *
@@ -91,10 +92,12 @@ private module Requests {
    */
   module Response {
     /** Gets a reference to the `requests.models.Response` class. */
-    private API::Node classRef() {
+    API::Node classRef() {
       result = API::moduleImport("requests").getMember("models").getMember("Response")
       or
       result = API::moduleImport("requests").getMember("Response")
+      or
+      result = ModelOutput::getATypeNode("requests.models.Response~Subclass").getASubclass*()
     }
 
     /**

python/ql/lib/semmle/python/frameworks/RestFramework.qll

@@ -16,6 +16,7 @@ private import semmle.python.ApiGraphs
 private import semmle.python.frameworks.internal.InstanceTaintStepsHelper
 private import semmle.python.frameworks.Django
 private import semmle.python.frameworks.Stdlib
+private import semmle.python.frameworks.data.ModelsAsData
 
 /**
  * INTERNAL: Do not use.
@@ -27,7 +28,7 @@ private import semmle.python.frameworks.Stdlib
  * - https://www.django-rest-framework.org/
  * - https://pypi.org/project/djangorestframework/
  */
-private module RestFramework {
+module RestFramework {
   // ---------------------------------------------------------------------------
   // rest_framework.views.APIView handling
   // ---------------------------------------------------------------------------
@@ -212,8 +213,10 @@ private module RestFramework {
    */
   module Request {
     /** Gets a reference to the `rest_framework.request.Request` class. */
-    private API::Node classRef() {
+    API::Node classRef() {
       result = API::moduleImport("rest_framework").getMember("request").getMember("Request")
+      or
+      result = ModelOutput::getATypeNode("rest_framework.request.Request~Subclass").getASubclass*()
     }
 
     /**
@@ -296,8 +299,11 @@ private module RestFramework {
    */
   module Response {
     /** Gets a reference to the `rest_framework.response.Response` class. */
-    private API::Node classRef() {
+    API::Node classRef() {
       result = API::moduleImport("rest_framework").getMember("response").getMember("Response")
+      or
+      result =
+        ModelOutput::getATypeNode("rest_framework.response.Response~Subclass").getASubclass*()
     }
 
     /** A direct instantiation of `rest_framework.response.Response`. */
@@ -325,6 +331,23 @@ private module RestFramework {
    * See https://www.django-rest-framework.org/api-guide/exceptions/#api-reference
    */
   module ApiException {
+    API::Node classRef() {
+      exists(string className |
+        className in [
+            "APIException", "ValidationError", "ParseError", "AuthenticationFailed",
+            "NotAuthenticated", "PermissionDenied", "NotFound", "NotAcceptable"
+          ] and
+        result =
+          API::moduleImport("rest_framework")
+              .getMember("exceptions")
+              .getMember(className)
+              .getASubclass*()
+      )
+      or
+      result =
+        ModelOutput::getATypeNode("rest_framework.exceptions.APIException~Subclass").getASubclass*()
+    }
+
     /** A direct instantiation of `rest_framework.exceptions.ApiException` or subclass. */
     private class ClassInstantiation extends Http::Server::HttpResponse::Range,
       DataFlow::CallCfgNode
@@ -342,6 +365,8 @@ private module RestFramework {
               .getMember("exceptions")
               .getMember(className)
               .getACall()
+        or
+        this = classRef().getACall() and className = "APIException"
       }
 
       override DataFlow::Node getBody() {

python/ql/lib/semmle/python/frameworks/SqlAlchemy.qll

@@ -13,6 +13,7 @@ private import semmle.python.Concepts
 // This import is done like this to avoid importing the deprecated top-level things that
 // would pollute the namespace
 private import semmle.python.frameworks.PEP249::PEP249 as PEP249
+private import semmle.python.frameworks.data.ModelsAsData
 
 /**
  * INTERNAL: Do not use.
@@ -34,10 +35,12 @@ module SqlAlchemy {
    */
   module Engine {
     /** Gets a reference to a SQLAlchemy Engine class. */
-    private API::Node classRef() {
+    API::Node classRef() {
       result = API::moduleImport("sqlalchemy").getMember("engine").getMember("Engine")
       or
       result = API::moduleImport("sqlalchemy").getMember("future").getMember("Engine")
+      or
+      result = ModelOutput::getATypeNode("sqlalchemy.engine.Engine~Subclass").getASubclass*()
     }
 
     /**
@@ -87,7 +90,7 @@ module SqlAlchemy {
    */
   module Connection {
     /** Gets a reference to a SQLAlchemy Connection class. */
-    private API::Node classRef() {
+    API::Node classRef() {
       result =
         API::moduleImport("sqlalchemy")
             .getMember("engine")
@@ -95,6 +98,8 @@ module SqlAlchemy {
             .getMember("Connection")
       or
       result = API::moduleImport("sqlalchemy").getMember("future").getMember("Connection")
+      or
+      result = ModelOutput::getATypeNode("sqlalchemy.engine.Connection~Subclass").getASubclass*()
     }
 
     /**
@@ -178,8 +183,10 @@ module SqlAlchemy {
    */
   module Session {
     /** Gets a reference to the `sqlalchemy.orm.Session` class. */
-    private API::Node classRef() {
+    API::Node classRef() {
       result = API::moduleImport("sqlalchemy").getMember("orm").getMember("Session")
+      or
+      result = ModelOutput::getATypeNode("sqlalchemy.orm.Session~Subclass").getASubclass*()
     }
 
     /**

python/ql/lib/semmle/python/frameworks/Starlette.qll

@@ -13,6 +13,7 @@ private import semmle.python.Concepts
 private import semmle.python.ApiGraphs
 private import semmle.python.frameworks.internal.InstanceTaintStepsHelper
 private import semmle.python.frameworks.Stdlib
+private import semmle.python.frameworks.data.ModelsAsData
 
 /**
  * INTERNAL: Do not use.
@@ -35,6 +36,8 @@ module Starlette {
       result = API::moduleImport("starlette").getMember("websockets").getMember("WebSocket")
       or
       result = API::moduleImport("fastapi").getMember("WebSocket")
+      or
+      result = ModelOutput::getATypeNode("starlette.websockets.WebSocket~Subclass").getASubclass*()
     }
 
     /**
@@ -100,8 +103,10 @@ module Starlette {
    */
   module Url {
     /** Gets a reference to the `starlette.requests.URL` class. */
-    private API::Node classRef() {
+    API::Node classRef() {
       result = API::moduleImport("starlette").getMember("requests").getMember("URL")
+      or
+      result = ModelOutput::getATypeNode("starlette.requests.URL~Subclass").getASubclass*()
     }
 
     /**

python/ql/lib/semmle/python/frameworks/Stdlib.qll

@@ -17,6 +17,7 @@ private import semmle.python.frameworks.internal.InstanceTaintStepsHelper
 // modeling split over multiple files to keep this file from becoming too big
 private import semmle.python.frameworks.Stdlib.Urllib
 private import semmle.python.frameworks.Stdlib.Urllib2
+private import semmle.python.frameworks.data.ModelsAsData
 
 /** Provides models for the Python standard library. */
 module Stdlib {
@@ -181,8 +182,10 @@ module Stdlib {
    */
   module SplitResult {
     /** Gets a reference to the `urllib.parse.SplitResult` class. */
-    private API::Node classRef() {
+    API::Node classRef() {
       result = API::moduleImport("urllib").getMember("parse").getMember("SplitResult")
+      or
+      result = ModelOutput::getATypeNode("urllib.parse.SplitResult~Subclass").getASubclass*()
     }
 
     /**
@@ -252,8 +255,10 @@ module Stdlib {
    */
   module Logger {
     /** Gets a reference to the `logging.Logger` class or any subclass. */
-    private API::Node subclassRef() {
+    API::Node subclassRef() {
       result = API::moduleImport("logging").getMember("Logger").getASubclass*()
+      or
+      result = ModelOutput::getATypeNode("logging.Logger~Subclass").getASubclass*()
     }
 
     /**
@@ -298,7 +303,7 @@ module Stdlib {
  * policy, and the code is not in a polished enough state that we want to do so -- at
  * least not without having convincing use-cases for it :)
  */
-private module StdlibPrivate {
+module StdlibPrivate {
   // ---------------------------------------------------------------------------
   // os
   // ---------------------------------------------------------------------------
@@ -1293,14 +1298,36 @@ private module StdlibPrivate {
   // pickle
   // ---------------------------------------------------------------------------
   /** Gets a reference to any of the `pickle` modules. */
-  API::Node pickle() { result = API::moduleImport(["pickle", "cPickle", "_pickle"]) }
+  API::Node pickle() {
+    result = API::moduleImport(["pickle", "cPickle", "_pickle"])
+    or
+    result = ModelOutput::getATypeNode("pickle~Alias")
+  }
+
+  /**
+   * A reference to `pickle.load`
+   */
+  API::Node pickle_load() {
+    result = pickle().getMember("load")
+    or
+    result = ModelOutput::getATypeNode("pickle.load~Alias")
+  }
+
+  /**
+   * A reference to `pickle.loads`
+   */
+  API::Node pickle_loads() {
+    result = pickle().getMember("loads")
+    or
+    result = ModelOutput::getATypeNode("pickle.loads~Alias")
+  }
 
   /**
    * A call to `pickle.load`
    * See https://docs.python.org/3/library/pickle.html#pickle.load
    */
-  private class PickleLoadCall extends Decoding::Range, DataFlow::CallCfgNode {
-    PickleLoadCall() { this = pickle().getMember("load").getACall() }
+  private class PickleLoadCall extends Decoding::Range, API::CallNode {
+    PickleLoadCall() { this = pickle_load().getACall() }
 
     override predicate mayExecuteInput() { any() }
 
@@ -1315,8 +1342,8 @@ private module StdlibPrivate {
    * A call to `pickle.loads`
    * See https://docs.python.org/3/library/pickle.html#pickle.loads
    */
-  private class PickleLoadsCall extends Decoding::Range, DataFlow::CallCfgNode {
-    PickleLoadsCall() { this = pickle().getMember("loads").getACall() }
+  private class PickleLoadsCall extends Decoding::Range, API::CallNode {
+    PickleLoadsCall() { this = pickle_loads().getACall() }
 
     override predicate mayExecuteInput() { any() }
 
@@ -1709,8 +1736,21 @@ private module StdlibPrivate {
      * See https://docs.python.org/3/library/cgi.html.
      */
     module FieldStorage {
-      /** Gets a reference to the `cgi.FieldStorage` class. */
-      API::Node classRef() { result = cgi().getMember("FieldStorage") }
+      /**
+       * DEPRECATED: Use `subclassRef` predicate instead.
+       *
+       * Gets a reference to the `cgi.FieldStorage` class.
+       */
+      deprecated API::Node classRef() {
+        result = API::moduleImport("cgi").getMember("FieldStorage")
+      }
+
+      /** Gets a reference to the `cgi.FieldStorage` class or any subclass. */
+      API::Node subclassRef() {
+        result = API::moduleImport("cgi").getMember("FieldStorage").getASubclass*()
+        or
+        result = ModelOutput::getATypeNode("cgi.FieldStorage~Subclass").getASubclass*()
+      }
 
       /**
        * A source of instances of `cgi.FieldStorage`, extend this class to model new instances.
@@ -1733,13 +1773,13 @@ private module StdlibPrivate {
       private class ClassInstantiation extends InstanceSource, RemoteFlowSource::Range,
         DataFlow::CallCfgNode
       {
-        ClassInstantiation() { this = classRef().getACall() }
+        ClassInstantiation() { this = subclassRef().getACall() }
 
         override string getSourceType() { result = "cgi.FieldStorage" }
       }
 
       /** Gets a reference to an instance of `cgi.FieldStorage`. */
-      API::Node instance() { result = classRef().getReturn() }
+      API::Node instance() { result = subclassRef().getReturn() }
 
       /** Gets a reference to the `getvalue` method on a `cgi.FieldStorage` instance. */
       API::Node getvalueRef() { result = instance().getMember("getvalue") }
@@ -1993,7 +2033,7 @@ private module StdlibPrivate {
    *  - https://docs.python.org/3.9/library/http.server.html#http.server.BaseHTTPRequestHandler
    *  - https://docs.python.org/2.7/library/basehttpserver.html#BaseHTTPServer.BaseHTTPRequestHandler
    */
-  private module HttpRequestHandler {
+  module BaseHttpRequestHandler {
     /** Gets a reference to the `BaseHttpRequestHandler` class or any subclass. */
     API::Node subclassRef() {
       result =
@@ -2007,6 +2047,9 @@ private module StdlibPrivate {
           API::moduleImport("http").getMember("server").getMember("SimpleHTTPRequestHandler"),
           API::moduleImport("http").getMember("server").getMember("CGIHTTPRequestHandler"),
         ].getASubclass*()
+      or
+      result =
+        ModelOutput::getATypeNode("http.server.BaseHTTPRequestHandler~Subclass").getASubclass*()
     }
 
     /** A HttpRequestHandler class definition (most likely in project code). */
@@ -2101,17 +2144,20 @@ private module StdlibPrivate {
   // wsgiref.simple_server
   // ---------------------------------------------------------------------------
   /** Provides models for the `wsgiref.simple_server` module. */
-  private module WsgirefSimpleServer {
+  module WsgirefSimpleServer {
+    API::Node subclassRef() {
+      result =
+        API::moduleImport("wsgiref")
+            .getMember("simple_server")
+            .getMember("WSGIServer")
+            .getASubclass*()
+      or
+      result =
+        ModelOutput::getATypeNode("wsgiref.simple_server.WSGIServer~Subclass").getASubclass*()
+    }
+
     class WsgiServerSubclass extends Class, SelfRefMixin {
-      WsgiServerSubclass() {
-        this.getParent() =
-          API::moduleImport("wsgiref")
-              .getMember("simple_server")
-              .getMember("WSGIServer")
-              .getASubclass*()
-              .asSource()
-              .asExpr()
-      }
+      WsgiServerSubclass() { this.getParent() = subclassRef().asSource().asExpr() }
     }
 
     /**
@@ -2128,13 +2174,7 @@ private module StdlibPrivate {
         exists(DataFlow::Node appArg, DataFlow::CallCfgNode setAppCall |
           (
             setAppCall =
-              API::moduleImport("wsgiref")
-                  .getMember("simple_server")
-                  .getMember("WSGIServer")
-                  .getASubclass*()
-                  .getReturn()
-                  .getMember("set_app")
-                  .getACall()
+              WsgirefSimpleServer::subclassRef().getReturn().getMember("set_app").getACall()
             or
             setAppCall
                 .(DataFlow::MethodCallNode)
@@ -2272,7 +2312,7 @@ private module StdlibPrivate {
    */
   module HttpConnection {
     /** Gets a reference to the `http.client.HttpConnection` class. */
-    private API::Node classRef() {
+    API::Node classRef() {
       exists(string className | className in ["HTTPConnection", "HTTPSConnection"] |
         // Python 3
         result = API::moduleImport("http").getMember("client").getMember(className)
@@ -2283,6 +2323,8 @@ private module StdlibPrivate {
         result =
           API::moduleImport("six").getMember("moves").getMember("http_client").getMember(className)
       )
+      or
+      result = ModelOutput::getATypeNode("http.client.HTTPConnection~Subclass").getASubclass*()
     }
 
     /**
@@ -2394,8 +2436,10 @@ private module StdlibPrivate {
    */
   module HttpResponse {
     /** Gets a reference to the `http.client.HttpResponse` class. */
-    private API::Node classRef() {
+    API::Node classRef() {
       result = API::moduleImport("http").getMember("client").getMember("HTTPResponse")
+      or
+      result = ModelOutput::getATypeNode("http.client.HTTPResponse~Subclass").getASubclass*()
     }
 
     /**
@@ -3285,8 +3329,10 @@ private module StdlibPrivate {
    */
   module StringIO {
     /** Gets a reference to the `io.StringIO` class. */
-    private API::Node classRef() {
+    API::Node classRef() {
       result = API::moduleImport("io").getMember(["StringIO", "BytesIO"])
+      or
+      result = ModelOutput::getATypeNode("io.StringIO~Subclass").getASubclass*()
     }
 
     /**
@@ -3336,6 +3382,12 @@ private module StdlibPrivate {
   // ---------------------------------------------------------------------------
   // xml.etree.ElementTree
   // ---------------------------------------------------------------------------
+  /** A reference to the `xml.etree.ElementTree` class */
+  API::Node elementTreeClassRef() {
+    result = API::moduleImport("xml").getMember("etree").getMember("ElementTree").getASubclass*() or
+    result = ModelOutput::getATypeNode("xml.etree.ElementTree~Subclass").getASubclass*()
+  }
+
   /**
    * An instance of `xml.etree.ElementTree.ElementTree`.
    *
@@ -3343,20 +3395,10 @@ private module StdlibPrivate {
    */
   private API::Node elementTreeInstance() {
     //parse to a tree
-    result =
-      API::moduleImport("xml")
-          .getMember("etree")
-          .getMember("ElementTree")
-          .getMember("parse")
-          .getReturn()
+    result = elementTreeClassRef().getMember("parse").getReturn()
     or
     // construct a tree without parsing
-    result =
-      API::moduleImport("xml")
-          .getMember("etree")
-          .getMember("ElementTree")
-          .getMember("ElementTree")
-          .getReturn()
+    result = elementTreeClassRef().getMember("ElementTree").getReturn()
   }
 
   /**
@@ -3369,21 +3411,9 @@ private module StdlibPrivate {
     result = elementTreeInstance().getMember(["parse", "getroot"]).getReturn()
     or
     // parse directly to an element
-    result =
-      API::moduleImport("xml")
-          .getMember("etree")
-          .getMember("ElementTree")
-          .getMember(["fromstring", "fromstringlist", "XML"])
-          .getReturn()
+    result = elementTreeClassRef().getMember(["fromstring", "fromstringlist", "XML"]).getReturn()
     or
-    result =
-      API::moduleImport("xml")
-          .getMember("etree")
-          .getMember("ElementTree")
-          .getMember("XMLParser")
-          .getReturn()
-          .getMember("close")
-          .getReturn()
+    result = elementTreeClassRef().getMember("XMLParser").getReturn().getMember("close").getReturn()
   }
 
   /**
@@ -3428,12 +3458,7 @@ private module StdlibPrivate {
     /** A direct instantiation of `xml.etree` parsers. */
     private class ClassInstantiation extends InstanceSource, DataFlow::CallCfgNode {
       ClassInstantiation() {
-        this =
-          API::moduleImport("xml")
-              .getMember("etree")
-              .getMember("ElementTree")
-              .getMember(["XMLParser", "XMLPullParser"])
-              .getACall()
+        this = elementTreeClassRef().getMember(["XMLParser", "XMLPullParser"]).getACall()
       }
     }
 
@@ -3490,9 +3515,7 @@ private module StdlibPrivate {
   private class XmlEtreeParsing extends DataFlow::CallCfgNode, XML::XmlParsing::Range {
     XmlEtreeParsing() {
       this =
-        API::moduleImport("xml")
-            .getMember("etree")
-            .getMember("ElementTree")
+        elementTreeClassRef()
             .getMember(["fromstring", "fromstringlist", "XML", "XMLID", "parse", "iterparse"])
             .getACall()
       or
@@ -3540,12 +3563,7 @@ private module StdlibPrivate {
    */
   private class FileAccessFromXmlEtreeParsing extends XmlEtreeParsing, FileSystemAccess::Range {
     FileAccessFromXmlEtreeParsing() {
-      this =
-        API::moduleImport("xml")
-            .getMember("etree")
-            .getMember("ElementTree")
-            .getMember(["parse", "iterparse"])
-            .getACall()
+      this = elementTreeClassRef().getMember(["parse", "iterparse"]).getACall()
       or
       this = elementTreeInstance().getMember("parse").getACall()
       // I considered whether we should try to reduce FPs from people passing file-like

python/ql/lib/semmle/python/frameworks/Tornado.qll

@@ -12,6 +12,7 @@ private import semmle.python.ApiGraphs
 private import semmle.python.regex
 private import semmle.python.frameworks.Stdlib
 private import semmle.python.frameworks.internal.InstanceTaintStepsHelper
+private import semmle.python.frameworks.data.ModelsAsData
 
 /**
  * INTERNAL: Do not use.
@@ -87,7 +88,11 @@ module Tornado {
        */
       module RequestHandler {
         /** Gets a reference to the `tornado.web.RequestHandler` class or any subclass. */
-        API::Node subclassRef() { result = web().getMember("RequestHandler").getASubclass*() }
+        API::Node subclassRef() {
+          result = web().getMember("RequestHandler").getASubclass*()
+          or
+          result = ModelOutput::getATypeNode("tornado.web.RequestHandler~Subclass").getASubclass*()
+        }
 
         /** A RequestHandler class (most likely in project code). */
         class RequestHandlerClass extends Class {
@@ -213,7 +218,11 @@ module Tornado {
        */
       module Application {
         /** Gets a reference to the `tornado.web.Application` class. */
-        API::Node classRef() { result = web().getMember("Application") }
+        API::Node classRef() {
+          result = web().getMember("Application")
+          or
+          result = ModelOutput::getATypeNode("tornado.web.Application~Subclass").getASubclass*()
+        }
 
         /**
          * A source of instances of `tornado.web.Application`, extend this class to model new instances.
@@ -270,7 +279,12 @@ module Tornado {
        */
       module HttpServerRequest {
         /** Gets a reference to the `tornado.httputil.HttpServerRequest` class. */
-        API::Node classRef() { result = httputil().getMember("HttpServerRequest") }
+        API::Node classRef() {
+          result = httputil().getMember("HttpServerRequest")
+          or
+          result =
+            ModelOutput::getATypeNode("tornado.httputil.HttpServerRequest~Subclass").getASubclass*()
+        }
 
         /**
          * A source of instances of `tornado.httputil.HttpServerRequest`, extend this class to model new instances.

python/ql/lib/semmle/python/frameworks/Urllib3.qll

@@ -9,15 +9,18 @@
 private import python
 private import semmle.python.Concepts
 private import semmle.python.ApiGraphs
+private import semmle.python.frameworks.data.ModelsAsData
 
 /**
+ * INTERNAL: Do not use.
+ *
  * Provides models for the `urllib3` PyPI package.
  *
  * See
  * - https://pypi.org/project/urllib3/
  * - https://urllib3.readthedocs.io/en/stable/reference/
  */
-private module Urllib3 {
+module Urllib3 {
   /**
    * Provides models for the `urllib3.request.RequestMethods` class and subclasses, such
    * as the `urllib3.PoolManager` class
@@ -30,7 +33,7 @@ private module Urllib3 {
    */
   module PoolManager {
     /** Gets a reference to the `urllib3.PoolManager` class. */
-    private API::Node classRef() {
+    API::Node classRef() {
       result =
         API::moduleImport("urllib3")
             .getMember(["PoolManager", "ProxyManager", "HTTPConnectionPool", "HTTPSConnectionPool"])
@@ -40,6 +43,8 @@ private module Urllib3 {
             .getMember("request")
             .getMember("RequestMethods")
             .getASubclass+()
+      or
+      result = ModelOutput::getATypeNode("urllib3.PoolManager~Subclass").getASubclass*()
     }
 
     /**

python/ql/lib/semmle/python/frameworks/data/internal/subclass-capture/auto-CapitalApp.model.yml

@@ -0,0 +1,12 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - Django.db.models.Model~Subclass
+    - CapitalApp
+    - Member[admin].Member[CapitalModel]
+  - - Django.db.models.Model~Subclass
+    - CapitalApp
+    - Member[models].Member[CapitalModel]

python/ql/lib/semmle/python/frameworks/data/internal/subclass-capture/auto-Coach.model.yml

@@ -0,0 +1,9 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - pickle~Alias
+    - Coach
+    - Member[pickle]

python/ql/lib/semmle/python/frameworks/data/internal/subclass-capture/auto-Cython.model.yml

@@ -0,0 +1,30 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - io.StringIO~Subclass
+    - Cython
+    - Member[Compiler].Member[Annotate].Member[StringIO]
+  - - io.StringIO~Subclass
+    - Cython
+    - Member[Compiler].Member[Parsing].Member[StringIO]
+  - - io.StringIO~Subclass
+    - Cython
+    - Member[Compiler].Member[TreeFragment].Member[StringIO]
+  - - io.StringIO~Subclass
+    - Cython
+    - Member[StringIOTree].Member[StringIO]
+  - - lxml.etree~Alias
+    - Cython
+    - Member[Debugger].Member[DebugWriter].Member[etree]
+  - - lxml.etree~Alias
+    - Cython
+    - Member[Debugger].Member[libcython].Member[etree]
+  - - xml.etree.ElementTree~Subclass
+    - Cython
+    - Member[Debugger].Member[DebugWriter].Member[etree]
+  - - xml.etree.ElementTree~Subclass
+    - Cython
+    - Member[Debugger].Member[libcython].Member[etree]

python/ql/lib/semmle/python/frameworks/data/internal/subclass-capture/auto-GEOparse.model.yml

@@ -0,0 +1,9 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - io.StringIO~Subclass
+    - GEOparse
+    - Member[GEOparse].Member[StringIO]

python/ql/lib/semmle/python/frameworks/data/internal/subclass-capture/auto-KalturaClient.model.yml

@@ -0,0 +1,12 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - http.client.HTTPConnection~Subclass
+    - KalturaClient
+    - Member[Client].Member[HTTPConnection]
+  - - lxml.etree~Alias
+    - KalturaClient
+    - Member[Client].Member[etree]

python/ql/lib/semmle/python/frameworks/data/internal/subclass-capture/auto-MetaICL.model.yml

@@ -0,0 +1,9 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - pickle~Alias
+    - MetaICL
+    - Member[metaicl].Member[data].Member[pkl]

python/ql/lib/semmle/python/frameworks/data/internal/subclass-capture/auto-O365.model.yml

@@ -0,0 +1,9 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - io.StringIO~Subclass
+    - O365
+    - Member[utils].Member[attachment].Member[BytesIO]

python/ql/lib/semmle/python/frameworks/data/internal/subclass-capture/auto-OSMPythonTools.model.yml

@@ -0,0 +1,9 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - pickle~Alias
+    - OSMPythonTools
+    - Member[cachingStrategy].Member[pickle].Member[pickle]

python/ql/lib/semmle/python/frameworks/data/internal/subclass-capture/auto-Orange.model.yml

@@ -0,0 +1,18 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - httpx.Client~Subclass
+    - Orange
+    - Member[misc].Member[server_embedder].Member[AsyncClient]
+  - - pickle~Alias
+    - Orange
+    - Member[misc].Member[utils].Member[embedder_utils].Member[pickle]
+  - - pickle~Alias
+    - Orange
+    - Member[widgets].Member[model].Member[owloadmodel].Member[pickle]
+  - - pickle~Alias
+    - Orange
+    - Member[widgets].Member[model].Member[owsavemodel].Member[pickle]

python/ql/lib/semmle/python/frameworks/data/internal/subclass-capture/auto-PIL.model.yml

@@ -0,0 +1,30 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - io.StringIO~Subclass
+    - PIL
+    - Member[BlpImagePlugin].Member[BytesIO]
+  - - io.StringIO~Subclass
+    - PIL
+    - Member[DdsImagePlugin].Member[BytesIO]
+  - - io.StringIO~Subclass
+    - PIL
+    - Member[FtexImagePlugin].Member[BytesIO]
+  - - io.StringIO~Subclass
+    - PIL
+    - Member[IcoImagePlugin].Member[BytesIO]
+  - - io.StringIO~Subclass
+    - PIL
+    - Member[ImageFont].Member[BytesIO]
+  - - io.StringIO~Subclass
+    - PIL
+    - Member[ImageQt].Member[BytesIO]
+  - - io.StringIO~Subclass
+    - PIL
+    - Member[ImageTk].Member[BytesIO]
+  - - io.StringIO~Subclass
+    - PIL
+    - Member[WebPImagePlugin].Member[BytesIO]

python/ql/lib/semmle/python/frameworks/data/internal/subclass-capture/auto-PILTools.model.yml

@@ -0,0 +1,12 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - io.StringIO~Subclass
+    - PILTools
+    - Member[BytesIO]
+  - - io.StringIO~Subclass
+    - PILTools
+    - Member[base].Member[BytesIO]

python/ql/lib/semmle/python/frameworks/data/internal/subclass-capture/auto-PMML44.model.yml

@@ -0,0 +1,9 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - lxml.etree~Alias
+    - PMML44
+    - Member[etree_]

python/ql/lib/semmle/python/frameworks/data/internal/subclass-capture/auto-PPOCRLabel.model.yml

@@ -0,0 +1,9 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - pickle~Alias
+    - PPOCRLabel
+    - Member[libs].Member[settings].Member[pickle]

python/ql/lib/semmle/python/frameworks/data/internal/subclass-capture/auto-Products.model.yml

@@ -0,0 +1,15 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - io.StringIO~Subclass
+    - Products
+    - Member[CMFPlone].Member[MigrationTool].Member[StringIO]
+  - - io.StringIO~Subclass
+    - Products
+    - Member[CMFPlone].Member[controlpanel].Member[browser].Member[redirects].Member[StringIO]
+  - - lxml.etree~Alias
+    - Products
+    - Member[CMFPlone].Member[browser].Member[icons].Member[etree]

python/ql/lib/semmle/python/frameworks/data/internal/subclass-capture/auto-ProgettiHWSW.model.yml

@@ -0,0 +1,21 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - lxml.etree~Alias
+    - ProgettiHWSW
+    - Member[ProgettiHWSWAPI].Member[etree]
+  - - lxml.etree~Alias
+    - ProgettiHWSW
+    - Member[analog].Member[etree]
+  - - lxml.etree~Alias
+    - ProgettiHWSW
+    - Member[input].Member[etree]
+  - - lxml.etree~Alias
+    - ProgettiHWSW
+    - Member[relay].Member[etree]
+  - - lxml.etree~Alias
+    - ProgettiHWSW
+    - Member[temperature].Member[etree]

python/ql/lib/semmle/python/frameworks/data/internal/subclass-capture/auto-PyFunceble.model.yml

@@ -0,0 +1,39 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - sqlalchemy.orm.Session~Subclass
+    - PyFunceble
+    - Member[checker].Member[availability].Member[base].Member[Session]
+  - - sqlalchemy.orm.Session~Subclass
+    - PyFunceble
+    - Member[checker].Member[base].Member[Session]
+  - - sqlalchemy.orm.Session~Subclass
+    - PyFunceble
+    - Member[checker].Member[reputation].Member[base].Member[Session]
+  - - sqlalchemy.orm.Session~Subclass
+    - PyFunceble
+    - Member[checker].Member[syntax].Member[base].Member[Session]
+  - - sqlalchemy.orm.Session~Subclass
+    - PyFunceble
+    - Member[checker].Member[syntax].Member[domain].Member[Session]
+  - - sqlalchemy.orm.Session~Subclass
+    - PyFunceble
+    - Member[checker].Member[utils].Member[whois].Member[Session]
+  - - sqlalchemy.orm.Session~Subclass
+    - PyFunceble
+    - Member[cli].Member[migrators].Member[alembic].Member[Session]
+  - - sqlalchemy.orm.Session~Subclass
+    - PyFunceble
+    - Member[cli].Member[migrators].Member[base].Member[Session]
+  - - sqlalchemy.orm.Session~Subclass
+    - PyFunceble
+    - Member[cli].Member[processes].Member[migrator].Member[Session]
+  - - sqlalchemy.orm.Session~Subclass
+    - PyFunceble
+    - Member[cli].Member[system].Member[launcher].Member[Session]
+  - - sqlalchemy.orm.Session~Subclass
+    - PyFunceble
+    - Member[dataset].Member[sql_base].Member[Session]

python/ql/lib/semmle/python/frameworks/data/internal/subclass-capture/auto-PyInstaller.model.yml

@@ -0,0 +1,21 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - io.StringIO~Subclass
+    - PyInstaller
+    - Member[lib].Member[modulegraph].Member[_compat].Member[BytesIO]
+  - - io.StringIO~Subclass
+    - PyInstaller
+    - Member[lib].Member[modulegraph].Member[_compat].Member[StringIO]
+  - - io.StringIO~Subclass
+    - PyInstaller
+    - Member[lib].Member[modulegraph].Member[modulegraph].Member[BytesIO]
+  - - io.StringIO~Subclass
+    - PyInstaller
+    - Member[lib].Member[modulegraph].Member[zipio].Member[_BytesIO]
+  - - io.StringIO~Subclass
+    - PyInstaller
+    - Member[lib].Member[modulegraph].Member[zipio].Member[_StringIO]

python/ql/lib/semmle/python/frameworks/data/internal/subclass-capture/auto-Python_ARQ.model.yml

@@ -0,0 +1,9 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - aiohttp.ClientSession~Subclass
+    - Python_ARQ
+    - Member[arq].Member[ClientSession]

python/ql/lib/semmle/python/frameworks/data/internal/subclass-capture/auto-QcloudApi.model.yml

@@ -0,0 +1,15 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - http.client.HTTPConnection~Subclass
+    - QcloudApi
+    - Member[common].Member[request].Member[HTTPConnection]
+  - - http.client.HTTPConnection~Subclass
+    - QcloudApi
+    - Member[common].Member[request].Member[HTTPSConnection]
+  - - http.client.HTTPConnection~Subclass
+    - QcloudApi
+    - Member[common].Member[request].Member[MyHTTPSConnection]

python/ql/lib/semmle/python/frameworks/data/internal/subclass-capture/auto-RequestsLibrary.model.yml

@@ -0,0 +1,9 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - requests.models.Response~Subclass
+    - RequestsLibrary
+    - Member[SessionKeywords].Member[Response]

python/ql/lib/semmle/python/frameworks/data/internal/subclass-capture/auto-SafoneAPI.model.yml

@@ -0,0 +1,12 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - io.StringIO~Subclass
+    - SafoneAPI
+    - Member[BytesIO]
+  - - io.StringIO~Subclass
+    - SafoneAPI
+    - Member[api].Member[BytesIO]

python/ql/lib/semmle/python/frameworks/data/internal/subclass-capture/auto-SeleniumLibrary.model.yml

@@ -0,0 +1,9 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - io.StringIO~Subclass
+    - SeleniumLibrary
+    - Member[keywords].Member[webdrivertools].Member[webdrivertools].Member[StringIO]

python/ql/lib/semmle/python/frameworks/data/internal/subclass-capture/auto-ShazamAPI.model.yml

@@ -0,0 +1,12 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - io.StringIO~Subclass
+    - ShazamAPI
+    - Member[api].Member[BytesIO]
+  - - io.StringIO~Subclass
+    - ShazamAPI
+    - Member[signature_format].Member[BytesIO]

python/ql/lib/semmle/python/frameworks/data/internal/subclass-capture/auto-SibylSystem.model.yml

@@ -0,0 +1,87 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - pydantic.BaseModel~Subclass
+    - SibylSystem
+    - Member[BanRes]
+  - - pydantic.BaseModel~Subclass
+    - SibylSystem
+    - Member[BanResult]
+  - - pydantic.BaseModel~Subclass
+    - SibylSystem
+    - Member[Ban]
+  - - pydantic.BaseModel~Subclass
+    - SibylSystem
+    - Member[GeneralInfo]
+  - - pydantic.BaseModel~Subclass
+    - SibylSystem
+    - Member[PermissionResponse]
+  - - pydantic.BaseModel~Subclass
+    - SibylSystem
+    - Member[ReportResponse]
+  - - pydantic.BaseModel~Subclass
+    - SibylSystem
+    - Member[StatsResult]
+  - - pydantic.BaseModel~Subclass
+    - SibylSystem
+    - Member[TokenValidation]
+  - - pydantic.BaseModel~Subclass
+    - SibylSystem
+    - Member[Token]
+  - - pydantic.BaseModel~Subclass
+    - SibylSystem
+    - Member[types].Member[bans].Member[BanRes]
+  - - pydantic.BaseModel~Subclass
+    - SibylSystem
+    - Member[types].Member[bans].Member[BanResult]
+  - - pydantic.BaseModel~Subclass
+    - SibylSystem
+    - Member[types].Member[bans].Member[Ban]
+  - - pydantic.BaseModel~Subclass
+    - SibylSystem
+    - Member[types].Member[bans].Member[Error]
+  - - pydantic.BaseModel~Subclass
+    - SibylSystem
+    - Member[types].Member[error].Member[Error]
+  - - pydantic.BaseModel~Subclass
+    - SibylSystem
+    - Member[types].Member[general_info].Member[Error]
+  - - pydantic.BaseModel~Subclass
+    - SibylSystem
+    - Member[types].Member[general_info].Member[GeneralInfoResult]
+  - - pydantic.BaseModel~Subclass
+    - SibylSystem
+    - Member[types].Member[general_info].Member[GeneralInfo]
+  - - pydantic.BaseModel~Subclass
+    - SibylSystem
+    - Member[types].Member[permission].Member[Error]
+  - - pydantic.BaseModel~Subclass
+    - SibylSystem
+    - Member[types].Member[permission].Member[PermissionResponse]
+  - - pydantic.BaseModel~Subclass
+    - SibylSystem
+    - Member[types].Member[report].Member[Error]
+  - - pydantic.BaseModel~Subclass
+    - SibylSystem
+    - Member[types].Member[report].Member[ReportResponse]
+  - - pydantic.BaseModel~Subclass
+    - SibylSystem
+    - Member[types].Member[stats].Member[Error]
+  - - pydantic.BaseModel~Subclass
+    - SibylSystem
+    - Member[types].Member[stats].Member[SibylStats]
+  - - pydantic.BaseModel~Subclass
+    - SibylSystem
+    - Member[types].Member[stats].Member[StatsResult]
+  - - pydantic.BaseModel~Subclass
+    - SibylSystem
+    - Member[types].Member[token].Member[Error]
+  - - pydantic.BaseModel~Subclass
+    - SibylSystem
+    - Member[types].Member[token].Member[TokenValidation]
+  - - pydantic.BaseModel~Subclass
+    - SibylSystem
+    - Member[types].Member[token].Member[Token]

python/ql/lib/semmle/python/frameworks/data/internal/subclass-capture/auto-UnleashClient.model.yml

@@ -0,0 +1,9 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - requests.models.Response~Subclass
+    - UnleashClient
+    - Member[utils].Member[Response]

python/ql/lib/semmle/python/frameworks/data/internal/subclass-capture/auto-_CI.model.yml

@@ -0,0 +1,9 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - io.StringIO~Subclass
+    - _CI
+    - Member[library].Member[patch].Member[StringIO]

python/ql/lib/semmle/python/frameworks/data/internal/subclass-capture/auto-_plotly_utils.model.yml

@@ -0,0 +1,9 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - io.StringIO~Subclass
+    - _plotly_utils
+    - Member[data_utils].Member[BytesIO]

python/ql/lib/semmle/python/frameworks/data/internal/subclass-capture/auto-_pydev_bundle.model.yml

@@ -0,0 +1,18 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - io.StringIO~Subclass
+    - _pydev_bundle
+    - Member[_pydev_jy_imports_tipper].Member[StringIO]
+  - - io.StringIO~Subclass
+    - _pydev_bundle
+    - Member[_pydev_log].Member[StringIO]
+  - - io.StringIO~Subclass
+    - _pydev_bundle
+    - Member[pydev_console_utils].Member[StringIO]
+  - - io.StringIO~Subclass
+    - _pydev_bundle
+    - Member[pydev_imports].Member[StringIO]

python/ql/lib/semmle/python/frameworks/data/internal/subclass-capture/auto-_pydev_runfiles.model.yml

@@ -0,0 +1,15 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - io.StringIO~Subclass
+    - _pydev_runfiles
+    - Member[pydev_runfiles].Member[StringIO]
+  - - io.StringIO~Subclass
+    - _pydev_runfiles
+    - Member[pydev_runfiles_nose].Member[StringIO]
+  - - io.StringIO~Subclass
+    - _pydev_runfiles
+    - Member[pydev_runfiles_xml_rpc].Member[StringIO]

python/ql/lib/semmle/python/frameworks/data/internal/subclass-capture/auto-_pydevd_bundle.model.yml

@@ -0,0 +1,36 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - io.StringIO~Subclass
+    - _pydevd_bundle
+    - Member[pydevd_code_to_source].Member[StringIO]
+  - - io.StringIO~Subclass
+    - _pydevd_bundle
+    - Member[pydevd_collect_bytecode_info].Member[StringIO]
+  - - io.StringIO~Subclass
+    - _pydevd_bundle
+    - Member[pydevd_comm].Member[StringIO]
+  - - io.StringIO~Subclass
+    - _pydevd_bundle
+    - Member[pydevd_constants].Member[StringIO]
+  - - io.StringIO~Subclass
+    - _pydevd_bundle
+    - Member[pydevd_net_command_factory_json].Member[StringIO]
+  - - io.StringIO~Subclass
+    - _pydevd_bundle
+    - Member[pydevd_net_command_factory_xml].Member[StringIO]
+  - - io.StringIO~Subclass
+    - _pydevd_bundle
+    - Member[pydevd_process_net_command].Member[StringIO]
+  - - io.StringIO~Subclass
+    - _pydevd_bundle
+    - Member[pydevd_resolver].Member[StringIO]
+  - - io.StringIO~Subclass
+    - _pydevd_bundle
+    - Member[pydevd_vars].Member[StringIO]
+  - - pickle~Alias
+    - _pydevd_bundle
+    - Member[pydevd_vars].Member[pickle]

python/ql/lib/semmle/python/frameworks/data/internal/subclass-capture/auto-_shaded_thriftpy.model.yml

@@ -0,0 +1,27 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - io.StringIO~Subclass
+    - _shaded_thriftpy
+    - Member[contrib].Member[aio].Member[transport].Member[buffered].Member[BytesIO]
+  - - io.StringIO~Subclass
+    - _shaded_thriftpy
+    - Member[contrib].Member[aio].Member[transport].Member[framed].Member[BytesIO]
+  - - io.StringIO~Subclass
+    - _shaded_thriftpy
+    - Member[http].Member[BytesIO]
+  - - io.StringIO~Subclass
+    - _shaded_thriftpy
+    - Member[tornado].Member[BytesIO]
+  - - io.StringIO~Subclass
+    - _shaded_thriftpy
+    - Member[transport].Member[buffered].Member[BytesIO]
+  - - io.StringIO~Subclass
+    - _shaded_thriftpy
+    - Member[transport].Member[framed].Member[BytesIO]
+  - - io.StringIO~Subclass
+    - _shaded_thriftpy
+    - Member[transport].Member[memory].Member[BytesIO]

python/ql/lib/semmle/python/frameworks/data/internal/subclass-capture/auto-abodepy.model.yml

@@ -0,0 +1,9 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - pickle~Alias
+    - abodepy
+    - Member[utils].Member[pickle]

python/ql/lib/semmle/python/frameworks/data/internal/subclass-capture/auto-absolute.model.yml

@@ -0,0 +1,15 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - Django.Views.View~Subclass
+    - absolute
+    - Member[urls].Member[TemplateView]
+  - - Django.db.models.Model~Subclass
+    - absolute
+    - Member[context_processors].Member[Site]
+  - - Django.db.models.Model~Subclass
+    - absolute
+    - Member[templatetags].Member[absolute].Member[Site]

python/ql/lib/semmle/python/frameworks/data/internal/subclass-capture/auto-account.model.yml

@@ -0,0 +1,240 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - Django.Forms.Field~Subclass
+    - account
+    - Member[forms].Member[PasswordField]
+  - - Django.Views.View~Subclass
+    - account
+    - Member[urls].Member[ChangePasswordView]
+  - - Django.Views.View~Subclass
+    - account
+    - Member[urls].Member[ConfirmEmailView]
+  - - Django.Views.View~Subclass
+    - account
+    - Member[urls].Member[DeleteView]
+  - - Django.Views.View~Subclass
+    - account
+    - Member[urls].Member[InviteUserView]
+  - - Django.Views.View~Subclass
+    - account
+    - Member[urls].Member[LoginView]
+  - - Django.Views.View~Subclass
+    - account
+    - Member[urls].Member[LogoutView]
+  - - Django.Views.View~Subclass
+    - account
+    - Member[urls].Member[PasswordResetTokenView]
+  - - Django.Views.View~Subclass
+    - account
+    - Member[urls].Member[PasswordResetView]
+  - - Django.Views.View~Subclass
+    - account
+    - Member[urls].Member[SettingsView]
+  - - Django.Views.View~Subclass
+    - account
+    - Member[urls].Member[SignupView]
+  - - Django.Views.View~Subclass
+    - account
+    - Member[views].Member[ChangePasswordView]
+  - - Django.Views.View~Subclass
+    - account
+    - Member[views].Member[ConfirmEmailView]
+  - - Django.Views.View~Subclass
+    - account
+    - Member[views].Member[CreateView]
+  - - Django.Views.View~Subclass
+    - account
+    - Member[views].Member[DeleteView]
+  - - Django.Views.View~Subclass
+    - account
+    - Member[views].Member[FormView]
+  - - Django.Views.View~Subclass
+    - account
+    - Member[views].Member[InviteUserView]
+  - - Django.Views.View~Subclass
+    - account
+    - Member[views].Member[LoginView]
+  - - Django.Views.View~Subclass
+    - account
+    - Member[views].Member[LogoutView]
+  - - Django.Views.View~Subclass
+    - account
+    - Member[views].Member[PasswordResetTokenView]
+  - - Django.Views.View~Subclass
+    - account
+    - Member[views].Member[PasswordResetView]
+  - - Django.Views.View~Subclass
+    - account
+    - Member[views].Member[SettingsView]
+  - - Django.Views.View~Subclass
+    - account
+    - Member[views].Member[SignupView]
+  - - Django.Views.View~Subclass
+    - account
+    - Member[views].Member[View]
+  - - Django.db.models.Model~Subclass
+    - account
+    - Member[admin].Member[AccountDeletion]
+  - - Django.db.models.Model~Subclass
+    - account
+    - Member[admin].Member[Account]
+  - - Django.db.models.Model~Subclass
+    - account
+    - Member[admin].Member[EmailAddress]
+  - - Django.db.models.Model~Subclass
+    - account
+    - Member[admin].Member[PasswordExpiry]
+  - - Django.db.models.Model~Subclass
+    - account
+    - Member[admin].Member[PasswordHistory]
+  - - Django.db.models.Model~Subclass
+    - account
+    - Member[admin].Member[SignupCodeExtended]
+  - - Django.db.models.Model~Subclass
+    - account
+    - Member[admin].Member[SignupCode]
+  - - Django.db.models.Model~Subclass
+    - account
+    - Member[auth_backends].Member[EmailAddress]
+  - - Django.db.models.Model~Subclass
+    - account
+    - Member[compat].Member[User]
+  - - Django.db.models.Model~Subclass
+    - account
+    - Member[context_processors].Member[Account]
+  - - Django.db.models.Model~Subclass
+    - account
+    - Member[forms].Member[EmailAddress]
+  - - Django.db.models.Model~Subclass
+    - account
+    - Member[forms].Member[SignupCodeExtended]
+  - - Django.db.models.Model~Subclass
+    - account
+    - Member[forms].Member[SignupCode]
+  - - Django.db.models.Model~Subclass
+    - account
+    - Member[management].Member[commands].Member[expunge_deleted].Member[AccountDeletion]
+  - - Django.db.models.Model~Subclass
+    - account
+    - Member[management].Member[commands].Member[user_password_expiry].Member[PasswordExpiry]
+  - - Django.db.models.Model~Subclass
+    - account
+    - Member[management].Member[commands].Member[user_password_history].Member[PasswordHistory]
+  - - Django.db.models.Model~Subclass
+    - account
+    - Member[middleware].Member[Account]
+  - - Django.db.models.Model~Subclass
+    - account
+    - Member[models].Member[AccountDeletion]
+  - - Django.db.models.Model~Subclass
+    - account
+    - Member[models].Member[Account]
+  - - Django.db.models.Model~Subclass
+    - account
+    - Member[models].Member[EmailAddress]
+  - - Django.db.models.Model~Subclass
+    - account
+    - Member[models].Member[EmailConfirmation]
+  - - Django.db.models.Model~Subclass
+    - account
+    - Member[models].Member[PasswordExpiry]
+  - - Django.db.models.Model~Subclass
+    - account
+    - Member[models].Member[PasswordHistory]
+  - - Django.db.models.Model~Subclass
+    - account
+    - Member[models].Member[SignupCodeExtended]
+  - - Django.db.models.Model~Subclass
+    - account
+    - Member[models].Member[SignupCodeResult]
+  - - Django.db.models.Model~Subclass
+    - account
+    - Member[models].Member[SignupCode]
+  - - Django.db.models.Model~Subclass
+    - account
+    - Member[models].Member[Site]
+  - - Django.db.models.Model~Subclass
+    - account
+    - Member[utils].Member[PasswordHistory]
+  - - Django.db.models.Model~Subclass
+    - account
+    - Member[views].Member[AccountDeletion]
+  - - Django.db.models.Model~Subclass
+    - account
+    - Member[views].Member[Account]
+  - - Django.db.models.Model~Subclass
+    - account
+    - Member[views].Member[EmailAddress]
+  - - Django.db.models.Model~Subclass
+    - account
+    - Member[views].Member[EmailConfirmation]
+  - - Django.db.models.Model~Subclass
+    - account
+    - Member[views].Member[PasswordHistory]
+  - - Django.db.models.Model~Subclass
+    - account
+    - Member[views].Member[SignupCodeExtended]
+  - - Django.db.models.Model~Subclass
+    - account
+    - Member[views].Member[SignupCode]
+  - - django.forms.BaseForm~Subclass
+    - account
+    - Member[forms].Member[ChangePasswordForm]
+  - - django.forms.BaseForm~Subclass
+    - account
+    - Member[forms].Member[LoginEmailForm]
+  - - django.forms.BaseForm~Subclass
+    - account
+    - Member[forms].Member[LoginForm]
+  - - django.forms.BaseForm~Subclass
+    - account
+    - Member[forms].Member[LoginUsernameForm]
+  - - django.forms.BaseForm~Subclass
+    - account
+    - Member[forms].Member[PasswordResetForm]
+  - - django.forms.BaseForm~Subclass
+    - account
+    - Member[forms].Member[PasswordResetTokenForm]
+  - - django.forms.BaseForm~Subclass
+    - account
+    - Member[forms].Member[SettingsForm]
+  - - django.forms.BaseForm~Subclass
+    - account
+    - Member[forms].Member[SignupCodeForm]
+  - - django.forms.BaseForm~Subclass
+    - account
+    - Member[forms].Member[SignupForm]
+  - - django.forms.BaseForm~Subclass
+    - account
+    - Member[views].Member[ChangePasswordForm]
+  - - django.forms.BaseForm~Subclass
+    - account
+    - Member[views].Member[LoginUsernameForm]
+  - - django.forms.BaseForm~Subclass
+    - account
+    - Member[views].Member[PasswordResetForm]
+  - - django.forms.BaseForm~Subclass
+    - account
+    - Member[views].Member[PasswordResetTokenForm]
+  - - django.forms.BaseForm~Subclass
+    - account
+    - Member[views].Member[SettingsForm]
+  - - django.forms.BaseForm~Subclass
+    - account
+    - Member[views].Member[SignupCodeForm]
+  - - django.forms.BaseForm~Subclass
+    - account
+    - Member[views].Member[SignupForm]
+  - - django.http.response.HttpResponseForbidden~Subclass
+    - account
+    - Member[views].Member[HttpResponseForbidden]
+  - - django.http.response.HttpResponseRedirect~Subclass
+    - account
+    - Member[middleware].Member[HttpResponseRedirect]
+  - - django.http.response.HttpResponseRedirect~Subclass
+    - account
+    - Member[utils].Member[HttpResponseRedirect]

python/ql/lib/semmle/python/frameworks/data/internal/subclass-capture/auto-accounts.model.yml

@@ -0,0 +1,33 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - Django.Views.View~Subclass
+    - accounts
+    - Member[views].Member[APIView]
+  - - Django.Views.View~Subclass
+    - accounts
+    - Member[views].Member[MyUserMeChange]
+  - - Django.Views.View~Subclass
+    - accounts
+    - Member[views].Member[MyUserMe]
+  - - Django.db.models.Model~Subclass
+    - accounts
+    - Member[admin].Member[VerifiedUser]
+  - - Django.db.models.Model~Subclass
+    - accounts
+    - Member[models].Member[EmailAbstractUser]
+  - - Django.db.models.Model~Subclass
+    - accounts
+    - Member[models].Member[MyUser]
+  - - Django.db.models.Model~Subclass
+    - accounts
+    - Member[models].Member[VerifiedUser]
+  - - django.http.response.HttpResponse~Subclass
+    - accounts
+    - Member[views].Member[Response]
+  - - rest_framework.response.Response~Subclass
+    - accounts
+    - Member[views].Member[Response]

python/ql/lib/semmle/python/frameworks/data/internal/subclass-capture/auto-accuweather.model.yml

@@ -0,0 +1,9 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - aiohttp.ClientSession~Subclass
+    - accuweather
+    - Member[ClientSession]

python/ql/lib/semmle/python/frameworks/data/internal/subclass-capture/auto-actors.model.yml

@@ -0,0 +1,27 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - Django.Views.View~Subclass
+    - actors
+    - Member[views].Member[ActorsView]
+  - - Django.Views.View~Subclass
+    - actors
+    - Member[views].Member[SearchListView]
+  - - Django.db.models.Model~Subclass
+    - actors
+    - Member[admin].Member[Actor]
+  - - Django.db.models.Model~Subclass
+    - actors
+    - Member[models].Member[Actor]
+  - - Django.db.models.Model~Subclass
+    - actors
+    - Member[views].Member[Actor]
+  - - django.forms.BaseForm~Subclass
+    - actors
+    - Member[forms].Member[SearchActorForm]
+  - - django.forms.BaseForm~Subclass
+    - actors
+    - Member[views].Member[SearchActorForm]

python/ql/lib/semmle/python/frameworks/data/internal/subclass-capture/auto-actstream.model.yml

@@ -0,0 +1,114 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - Django.Views.View~Subclass
+    - actstream
+    - Member[drf].Member[urls].Member[ActionViewSet]
+  - - Django.Views.View~Subclass
+    - actstream
+    - Member[drf].Member[urls].Member[FollowViewSet]
+  - - Django.Views.View~Subclass
+    - actstream
+    - Member[drf].Member[views].Member[ActionViewSet]
+  - - Django.Views.View~Subclass
+    - actstream
+    - Member[drf].Member[views].Member[DefaultModelViewSet]
+  - - Django.Views.View~Subclass
+    - actstream
+    - Member[drf].Member[views].Member[FollowViewSet]
+  - - Django.Views.View~Subclass
+    - actstream
+    - Member[feeds].Member[CustomJSONActivityFeed]
+  - - Django.Views.View~Subclass
+    - actstream
+    - Member[feeds].Member[JSONActivityFeed]
+  - - Django.Views.View~Subclass
+    - actstream
+    - Member[feeds].Member[ModelJSONActivityFeed]
+  - - Django.Views.View~Subclass
+    - actstream
+    - Member[feeds].Member[ObjectJSONActivityFeed]
+  - - Django.Views.View~Subclass
+    - actstream
+    - Member[feeds].Member[UserJSONActivityFeed]
+  - - Django.Views.View~Subclass
+    - actstream
+    - Member[feeds].Member[View]
+  - - Django.db.models.Model~Subclass
+    - actstream
+    - Member[actions].Member[ContentType]
+  - - Django.db.models.Model~Subclass
+    - actstream
+    - Member[drf].Member[serializers].Member[Action]
+  - - Django.db.models.Model~Subclass
+    - actstream
+    - Member[drf].Member[serializers].Member[Follow]
+  - - Django.db.models.Model~Subclass
+    - actstream
+    - Member[drf].Member[views].Member[ContentType]
+  - - Django.db.models.Model~Subclass
+    - actstream
+    - Member[feeds].Member[Action]
+  - - Django.db.models.Model~Subclass
+    - actstream
+    - Member[feeds].Member[ContentType]
+  - - Django.db.models.Model~Subclass
+    - actstream
+    - Member[feeds].Member[Site]
+  - - Django.db.models.Model~Subclass
+    - actstream
+    - Member[follows].Member[Follow]
+  - - Django.db.models.Model~Subclass
+    - actstream
+    - Member[managers].Member[ContentType]
+  - - Django.db.models.Model~Subclass
+    - actstream
+    - Member[managers].Member[Model]
+  - - Django.db.models.Model~Subclass
+    - actstream
+    - Member[models].Member[Action]
+  - - Django.db.models.Model~Subclass
+    - actstream
+    - Member[models].Member[ContentType]
+  - - Django.db.models.Model~Subclass
+    - actstream
+    - Member[models].Member[Follow]
+  - - Django.db.models.Model~Subclass
+    - actstream
+    - Member[templatetags].Member[activity_tags].Member[Action]
+  - - Django.db.models.Model~Subclass
+    - actstream
+    - Member[templatetags].Member[activity_tags].Member[ContentType]
+  - - Django.db.models.Model~Subclass
+    - actstream
+    - Member[templatetags].Member[activity_tags].Member[Follow]
+  - - Django.db.models.Model~Subclass
+    - actstream
+    - Member[views].Member[ContentType]
+  - - django.http.response.HttpResponseRedirect~Subclass
+    - actstream
+    - Member[views].Member[HttpResponseRedirect]
+  - - django.http.response.HttpResponse~Subclass
+    - actstream
+    - Member[drf].Member[views].Member[Response]
+  - - django.http.response.HttpResponse~Subclass
+    - actstream
+    - Member[feeds].Member[HttpResponse]
+  - - django.http.response.HttpResponse~Subclass
+    - actstream
+    - Member[views].Member[HttpResponse]
+  - - rest_framework.exceptions.APIException~Subclass
+    - actstream
+    - Member[drf].Member[views].Member[APIException]
+  - - rest_framework.exceptions.APIException~Subclass
+    - actstream
+    - Member[drf].Member[views].Member[ModelNotRegistered]
+  - - rest_framework.exceptions.APIException~Subclass
+    - actstream
+    - Member[drf].Member[views].Member[NotFound]
+  - - rest_framework.response.Response~Subclass
+    - actstream
+    - Member[drf].Member[views].Member[Response]

python/ql/lib/semmle/python/frameworks/data/internal/subclass-capture/auto-actuator.model.yml

@@ -0,0 +1,9 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - pickle.loads~Alias
+    - actuator
+    - Member[scheduler].Member[loads]

python/ql/lib/semmle/python/frameworks/data/internal/subclass-capture/auto-adal.model.yml

@@ -0,0 +1,15 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - xml.etree.ElementTree~Subclass
+    - adal
+    - Member[mex].Member[ET]
+  - - xml.etree.ElementTree~Subclass
+    - adal
+    - Member[wstrust_response].Member[ET]
+  - - xml.etree.ElementTree~Subclass
+    - adal
+    - Member[xmlutil].Member[ET]

python/ql/lib/semmle/python/frameworks/data/internal/subclass-capture/auto-adaptor.model.yml

@@ -0,0 +1,15 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - Django.db.models.Model~Subclass
+    - adaptor
+    - Member[fields].Member[djangoModel]
+  - - Django.db.models.Model~Subclass
+    - adaptor
+    - Member[model].Member[Model]
+  - - lxml.etree~Alias
+    - adaptor
+    - Member[fields].Member[etree]

python/ql/lib/semmle/python/frameworks/data/internal/subclass-capture/auto-address.model.yml

@@ -0,0 +1,36 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - Django.Forms.Field~Subclass
+    - address
+    - Member[forms].Member[AddressField]
+  - - Django.db.models.Model~Subclass
+    - address
+    - Member[admin].Member[Address]
+  - - Django.db.models.Model~Subclass
+    - address
+    - Member[admin].Member[Country]
+  - - Django.db.models.Model~Subclass
+    - address
+    - Member[admin].Member[Locality]
+  - - Django.db.models.Model~Subclass
+    - address
+    - Member[admin].Member[State]
+  - - Django.db.models.Model~Subclass
+    - address
+    - Member[models].Member[Address]
+  - - Django.db.models.Model~Subclass
+    - address
+    - Member[models].Member[Country]
+  - - Django.db.models.Model~Subclass
+    - address
+    - Member[models].Member[Locality]
+  - - Django.db.models.Model~Subclass
+    - address
+    - Member[models].Member[State]
+  - - Django.db.models.Model~Subclass
+    - address
+    - Member[widgets].Member[Address]

python/ql/lib/semmle/python/frameworks/data/internal/subclass-capture/auto-admin.model.yml

@@ -0,0 +1,9 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - flask.Blueprint~Subclass
+    - admin
+    - Member[Blueprint]

python/ql/lib/semmle/python/frameworks/data/internal/subclass-capture/auto-admin_auto_filters.model.yml

@@ -0,0 +1,15 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - Django.Views.View~Subclass
+    - admin_auto_filters
+    - Member[views].Member[AutocompleteJsonView]
+  - - Django.Views.View~Subclass
+    - admin_auto_filters
+    - Member[views].Member[Base]
+  - - django.http.response.JsonResponse~Subclass
+    - admin_auto_filters
+    - Member[views].Member[JsonResponse]

python/ql/lib/semmle/python/frameworks/data/internal/subclass-capture/auto-admin_honeypot.model.yml

@@ -0,0 +1,27 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - Django.Views.View~Subclass
+    - admin_honeypot
+    - Member[views].Member[AdminHoneypot]
+  - - Django.db.models.Model~Subclass
+    - admin_honeypot
+    - Member[admin].Member[LoginAttempt]
+  - - Django.db.models.Model~Subclass
+    - admin_honeypot
+    - Member[models].Member[LoginAttempt]
+  - - Django.db.models.Model~Subclass
+    - admin_honeypot
+    - Member[views].Member[LoginAttempt]
+  - - django.forms.BaseForm~Subclass
+    - admin_honeypot
+    - Member[forms].Member[AdminAuthenticationForm]
+  - - django.forms.BaseForm~Subclass
+    - admin_honeypot
+    - Member[forms].Member[HoneypotLoginForm]
+  - - django.forms.BaseForm~Subclass
+    - admin_honeypot
+    - Member[views].Member[HoneypotLoginForm]

python/ql/lib/semmle/python/frameworks/data/internal/subclass-capture/auto-admin_interface.model.yml

@@ -0,0 +1,15 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - Django.db.models.Model~Subclass
+    - admin_interface
+    - Member[admin].Member[Theme]
+  - - Django.db.models.Model~Subclass
+    - admin_interface
+    - Member[models].Member[Theme]
+  - - Django.db.models.Model~Subclass
+    - admin_interface
+    - Member[templatetags].Member[admin_interface_tags].Member[Theme]

python/ql/lib/semmle/python/frameworks/data/internal/subclass-capture/auto-admin_numeric_filter.model.yml

@@ -0,0 +1,24 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - django.forms.BaseForm~Subclass
+    - admin_numeric_filter
+    - Member[admin].Member[RangeNumericForm]
+  - - django.forms.BaseForm~Subclass
+    - admin_numeric_filter
+    - Member[admin].Member[SingleNumericForm]
+  - - django.forms.BaseForm~Subclass
+    - admin_numeric_filter
+    - Member[admin].Member[SliderNumericForm]
+  - - django.forms.BaseForm~Subclass
+    - admin_numeric_filter
+    - Member[forms].Member[RangeNumericForm]
+  - - django.forms.BaseForm~Subclass
+    - admin_numeric_filter
+    - Member[forms].Member[SingleNumericForm]
+  - - django.forms.BaseForm~Subclass
+    - admin_numeric_filter
+    - Member[forms].Member[SliderNumericForm]

python/ql/lib/semmle/python/frameworks/data/internal/subclass-capture/auto-admin_thumbnails.model.yml

@@ -0,0 +1,12 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - django.db.models.FileField~Subclass
+    - admin_thumbnails
+    - Member[FileField]
+  - - django.db.models.FileField~Subclass
+    - admin_thumbnails
+    - Member[ThumbnailerImageField]

python/ql/lib/semmle/python/frameworks/data/internal/subclass-capture/auto-admin_tools.model.yml

@@ -0,0 +1,54 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - Django.db.models.Model~Subclass
+    - admin_tools
+    - Member[dashboard].Member[forms].Member[DashboardPreferences]
+  - - Django.db.models.Model~Subclass
+    - admin_tools
+    - Member[dashboard].Member[management].Member[commands].Member[clear_dashboard_preferences].Member[DashboardPreferences]
+  - - Django.db.models.Model~Subclass
+    - admin_tools
+    - Member[dashboard].Member[models].Member[DashboardPreferences]
+  - - Django.db.models.Model~Subclass
+    - admin_tools
+    - Member[dashboard].Member[templatetags].Member[admin_tools_dashboard_tags].Member[DashboardPreferences]
+  - - Django.db.models.Model~Subclass
+    - admin_tools
+    - Member[dashboard].Member[views].Member[DashboardPreferences]
+  - - Django.db.models.Model~Subclass
+    - admin_tools
+    - Member[menu].Member[forms].Member[Bookmark]
+  - - Django.db.models.Model~Subclass
+    - admin_tools
+    - Member[menu].Member[models].Member[Bookmark]
+  - - Django.db.models.Model~Subclass
+    - admin_tools
+    - Member[menu].Member[templatetags].Member[admin_tools_menu_tags].Member[Bookmark]
+  - - Django.db.models.Model~Subclass
+    - admin_tools
+    - Member[menu].Member[views].Member[Bookmark]
+  - - django.forms.BaseForm~Subclass
+    - admin_tools
+    - Member[dashboard].Member[forms].Member[DashboardPreferencesForm]
+  - - django.forms.BaseForm~Subclass
+    - admin_tools
+    - Member[dashboard].Member[views].Member[DashboardPreferencesForm]
+  - - django.forms.BaseForm~Subclass
+    - admin_tools
+    - Member[menu].Member[forms].Member[BookmarkForm]
+  - - django.forms.BaseForm~Subclass
+    - admin_tools
+    - Member[menu].Member[views].Member[BookmarkForm]
+  - - django.http.response.HttpResponseRedirect~Subclass
+    - admin_tools
+    - Member[menu].Member[views].Member[HttpResponseRedirect]
+  - - django.http.response.HttpResponse~Subclass
+    - admin_tools
+    - Member[dashboard].Member[views].Member[HttpResponse]
+  - - django.http.response.HttpResponse~Subclass
+    - admin_tools
+    - Member[menu].Member[views].Member[HttpResponse]

python/ql/lib/semmle/python/frameworks/data/internal/subclass-capture/auto-admin_view_permission.model.yml

@@ -0,0 +1,12 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - Django.db.models.Model~Subclass
+    - admin_view_permission
+    - Member[management].Member[commands].Member[fix_proxy_permissions].Member[ContentType]
+  - - Django.db.models.Model~Subclass
+    - admin_view_permission
+    - Member[management].Member[commands].Member[fix_proxy_permissions].Member[Permission]

python/ql/lib/semmle/python/frameworks/data/internal/subclass-capture/auto-adminsortable.model.yml

@@ -0,0 +1,27 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - Django.db.models.Model~Subclass
+    - adminsortable
+    - Member[admin].Member[ContentType]
+  - - Django.db.models.Model~Subclass
+    - adminsortable
+    - Member[admin].Member[SortableMixin]
+  - - Django.db.models.Model~Subclass
+    - adminsortable
+    - Member[models].Member[ContentType]
+  - - Django.db.models.Model~Subclass
+    - adminsortable
+    - Member[models].Member[SortableMixin]
+  - - Django.db.models.Model~Subclass
+    - adminsortable
+    - Member[models].Member[Sortable]
+  - - Django.db.models.Model~Subclass
+    - adminsortable
+    - Member[utils].Member[SortableMixin]
+  - - django.http.response.JsonResponse~Subclass
+    - adminsortable
+    - Member[admin].Member[JsonResponse]

python/ql/lib/semmle/python/frameworks/data/internal/subclass-capture/auto-adminsortable2.model.yml

@@ -0,0 +1,9 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - django.forms.BaseForm~Subclass
+    - adminsortable2
+    - Member[admin].Member[MovePageActionForm]

python/ql/lib/semmle/python/frameworks/data/internal/subclass-capture/auto-adrf.model.yml

@@ -0,0 +1,21 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - Django.Views.View~Subclass
+    - adrf
+    - Member[decorators].Member[APIView]
+  - - Django.Views.View~Subclass
+    - adrf
+    - Member[views].Member[APIView]
+  - - Django.Views.View~Subclass
+    - adrf
+    - Member[views].Member[DRFAPIView]
+  - - Django.Views.View~Subclass
+    - adrf
+    - Member[viewsets].Member[APIView]
+  - - Django.Views.View~Subclass
+    - adrf
+    - Member[viewsets].Member[ViewSet]

python/ql/lib/semmle/python/frameworks/data/internal/subclass-capture/auto-advocate.model.yml

@@ -0,0 +1,54 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - http.client.HTTPConnection~Subclass
+    - advocate
+    - Member[connection].Member[HTTPConnection]
+  - - http.client.HTTPConnection~Subclass
+    - advocate
+    - Member[connection].Member[HTTPSConnection]
+  - - http.client.HTTPConnection~Subclass
+    - advocate
+    - Member[connection].Member[ValidatingHTTPConnection]
+  - - http.client.HTTPConnection~Subclass
+    - advocate
+    - Member[connection].Member[ValidatingHTTPSConnection]
+  - - http.client.HTTPConnection~Subclass
+    - advocate
+    - Member[connectionpool].Member[ValidatingHTTPConnection]
+  - - http.client.HTTPConnection~Subclass
+    - advocate
+    - Member[connectionpool].Member[ValidatingHTTPSConnection]
+  - - requests.models.Response~Subclass
+    - advocate
+    - Member[Response]
+  - - urllib3.PoolManager~Subclass
+    - advocate
+    - Member[adapters].Member[ValidatingPoolManager]
+  - - urllib3.PoolManager~Subclass
+    - advocate
+    - Member[connectionpool].Member[HTTPConnectionPool]
+  - - urllib3.PoolManager~Subclass
+    - advocate
+    - Member[connectionpool].Member[HTTPSConnectionPool]
+  - - urllib3.PoolManager~Subclass
+    - advocate
+    - Member[connectionpool].Member[ValidatingHTTPConnectionPool]
+  - - urllib3.PoolManager~Subclass
+    - advocate
+    - Member[connectionpool].Member[ValidatingHTTPSConnectionPool]
+  - - urllib3.PoolManager~Subclass
+    - advocate
+    - Member[poolmanager].Member[PoolManager]
+  - - urllib3.PoolManager~Subclass
+    - advocate
+    - Member[poolmanager].Member[ValidatingHTTPConnectionPool]
+  - - urllib3.PoolManager~Subclass
+    - advocate
+    - Member[poolmanager].Member[ValidatingHTTPSConnectionPool]
+  - - urllib3.PoolManager~Subclass
+    - advocate
+    - Member[poolmanager].Member[ValidatingPoolManager]

python/ql/lib/semmle/python/frameworks/data/internal/subclass-capture/auto-aemet_opendata.model.yml

@@ -0,0 +1,9 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - aiohttp.ClientSession~Subclass
+    - aemet_opendata
+    - Member[interface].Member[ClientSession]

python/ql/lib/semmle/python/frameworks/data/internal/subclass-capture/auto-aequitas.model.yml

@@ -0,0 +1,12 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - pickle~Alias
+    - aequitas
+    - Member[fairflow].Member[optimization].Member[pickle]
+  - - pickle~Alias
+    - aequitas
+    - Member[fairflow].Member[orchestrator].Member[pickle]

python/ql/lib/semmle/python/frameworks/data/internal/subclass-capture/auto-aequitas_webapp.model.yml

@@ -0,0 +1,12 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - flask.Flask~Subclass
+    - aequitas_webapp
+    - Member[Flask]
+  - - markupsafe.Markup~Subclass
+    - aequitas_webapp
+    - Member[views].Member[Markup]

python/ql/lib/semmle/python/frameworks/data/internal/subclass-capture/auto-aerich.model.yml

@@ -0,0 +1,24 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - pickle~Alias
+    - aerich
+    - Member[coder].Member[pickle]
+  - - pydantic.BaseModel~Subclass
+    - aerich
+    - Member[inspectdb].Member[Column]
+  - - pydantic.BaseModel~Subclass
+    - aerich
+    - Member[inspectdb].Member[mysql].Member[Column]
+  - - pydantic.BaseModel~Subclass
+    - aerich
+    - Member[inspectdb].Member[postgres].Member[Column]
+  - - pydantic.BaseModel~Subclass
+    - aerich
+    - Member[inspectdb].Member[sqlite].Member[Column]
+  - - pydantic.BaseModel~Subclass
+    - aerich
+    - Member[inspectdb]Member[Column]

python/ql/lib/semmle/python/frameworks/data/internal/subclass-capture/auto-afdko.model.yml

@@ -0,0 +1,12 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - io.StringIO~Subclass
+    - afdko
+    - Member[pdflib].Member[pdfgen].Member[StringIO]
+  - - io.StringIO~Subclass
+    - afdko
+    - Member[pdflib].Member[pdfutils].Member[StringIO]

python/ql/lib/semmle/python/frameworks/data/internal/subclass-capture/auto-afsapi.model.yml

@@ -0,0 +1,12 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - xml.etree.ElementTree~Subclass
+    - afsapi
+    - Member[api].Member[ET]
+  - - xml.etree.ElementTree~Subclass
+    - afsapi
+    - Member[utils].Member[ET]

python/ql/lib/semmle/python/frameworks/data/internal/subclass-capture/auto-ai2thor.model.yml

@@ -0,0 +1,18 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - flask.Flask~Subclass
+    - ai2thor
+    - Member[mock_real_server].Member[Flask]
+  - - flask.Flask~Subclass
+    - ai2thor
+    - Member[wsgi_server].Member[Flask]
+  - - http.server.BaseHTTPRequestHandler~Subclass
+    - ai2thor
+    - Member[wsgi_server].Member[ThorRequestHandler]
+  - - pickle~Alias
+    - ai2thor
+    - Member[offline_controller].Member[pickle]

python/ql/lib/semmle/python/frameworks/data/internal/subclass-capture/auto-aicsimageio.model.yml

@@ -0,0 +1,18 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - xml.etree.ElementTree~Subclass
+    - aicsimageio
+    - Member[metadata].Member[utils].Member[ET]
+  - - xml.etree.ElementTree~Subclass
+    - aicsimageio
+    - Member[readers].Member[czi_reader].Member[ET]
+  - - xml.etree.ElementTree~Subclass
+    - aicsimageio
+    - Member[readers].Member[lif_reader].Member[ET]
+  - - xml.etree.ElementTree~Subclass
+    - aicsimageio
+    - Member[readers].Member[ome_tiff_reader].Member[ET]

python/ql/lib/semmle/python/frameworks/data/internal/subclass-capture/auto-aiida.model.yml

@@ -0,0 +1,75 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - flask.Flask~Subclass
+    - aiida
+    - Member[restapi].Member[api].Member[App]
+  - - flask.Flask~Subclass
+    - aiida
+    - Member[restapi].Member[api].Member[Flask]
+  - - flask.MethodView~Subclass
+    - aiida
+    - Member[restapi].Member[resources].Member[BaseResource]
+  - - flask.MethodView~Subclass
+    - aiida
+    - Member[restapi].Member[resources].Member[CalcJobNode]
+  - - flask.MethodView~Subclass
+    - aiida
+    - Member[restapi].Member[resources].Member[Computer]
+  - - flask.MethodView~Subclass
+    - aiida
+    - Member[restapi].Member[resources].Member[Group]
+  - - flask.MethodView~Subclass
+    - aiida
+    - Member[restapi].Member[resources].Member[Node]
+  - - flask.MethodView~Subclass
+    - aiida
+    - Member[restapi].Member[resources].Member[ProcessNode]
+  - - flask.MethodView~Subclass
+    - aiida
+    - Member[restapi].Member[resources].Member[QueryBuilder]
+  - - flask.MethodView~Subclass
+    - aiida
+    - Member[restapi].Member[resources].Member[Resource]
+  - - flask.MethodView~Subclass
+    - aiida
+    - Member[restapi].Member[resources].Member[ServerInfo]
+  - - flask.MethodView~Subclass
+    - aiida
+    - Member[restapi].Member[resources].Member[User]
+  - - io.StringIO~Subclass
+    - aiida
+    - Member[tools].Member[archive].Member[implementations].Member[sqlite_zip].Member[writer].Member[BytesIO]
+  - - logging.Logger~Subclass
+    - aiida
+    - Member[common].Member[log].Member[AiidaLoggerType]
+  - - pydantic.BaseModel~Subclass
+    - aiida
+    - Member[manage].Member[configuration].Member[config].Member[ConfigSchema]
+  - - pydantic.BaseModel~Subclass
+    - aiida
+    - Member[manage].Member[configuration].Member[config].Member[ConfigVersionSchema]
+  - - pydantic.BaseModel~Subclass
+    - aiida
+    - Member[manage].Member[configuration].Member[config].Member[GlobalOptionsSchema]
+  - - pydantic.BaseModel~Subclass
+    - aiida
+    - Member[manage].Member[configuration].Member[config].Member[ProcessControlConfig]
+  - - pydantic.BaseModel~Subclass
+    - aiida
+    - Member[manage].Member[configuration].Member[config].Member[ProfileOptionsSchema]
+  - - pydantic.BaseModel~Subclass
+    - aiida
+    - Member[manage].Member[configuration].Member[config].Member[ProfileSchema]
+  - - pydantic.BaseModel~Subclass
+    - aiida
+    - Member[manage].Member[configuration].Member[config].Member[ProfileStorageConfig]
+  - - sqlalchemy.orm.Session~Subclass
+    - aiida
+    - Member[storage].Member[psql_dos].Member[migrator].Member[Session]
+  - - sqlalchemy.orm.Session~Subclass
+    - aiida
+    - Member[storage].Member[psql_dos].Member[orm].Member[utils].Member[Session]

python/ql/lib/semmle/python/frameworks/data/internal/subclass-capture/auto-aim.model.yml

@@ -0,0 +1,330 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - fastapi.APIRouter~Subclass
+    - aim
+    - Member[web].Member[api].Member[dashboard_apps].Member[views].Member[APIRouter]
+  - - fastapi.APIRouter~Subclass
+    - aim
+    - Member[web].Member[api].Member[dashboards].Member[views].Member[APIRouter]
+  - - fastapi.APIRouter~Subclass
+    - aim
+    - Member[web].Member[api].Member[experiments].Member[views].Member[APIRouter]
+  - - fastapi.APIRouter~Subclass
+    - aim
+    - Member[web].Member[api].Member[projects].Member[views].Member[APIRouter]
+  - - fastapi.APIRouter~Subclass
+    - aim
+    - Member[web].Member[api].Member[runs].Member[views].Member[APIRouter]
+  - - fastapi.APIRouter~Subclass
+    - aim
+    - Member[web].Member[api].Member[tags].Member[views].Member[APIRouter]
+  - - fastapi.APIRouter~Subclass
+    - aim
+    - Member[web].Member[api].Member[utils].Member[APIRouter]
+  - - fastapi.APIRouter~Subclass
+    - aim
+    - Member[web].Member[api].Member[utils].Member[FastAPIRouter]
+  - - fastapi.APIRouter~Subclass
+    - aim
+    - Member[web].Member[api].Member[views].Member[APIRouter]
+  - - io.StringIO~Subclass
+    - aim
+    - Member[sdk].Member[objects].Member[image].Member[BytesIO]
+  - - pydantic.BaseModel~Subclass
+    - aim
+    - Member[web].Member[api].Member[dashboard_apps].Member[pydantic_models].Member[ExploreStateCreateIn]
+  - - pydantic.BaseModel~Subclass
+    - aim
+    - Member[web].Member[api].Member[dashboard_apps].Member[pydantic_models].Member[ExploreStateGetOut]
+  - - pydantic.BaseModel~Subclass
+    - aim
+    - Member[web].Member[api].Member[dashboard_apps].Member[pydantic_models].Member[ExploreStateUpdateIn]
+  - - pydantic.BaseModel~Subclass
+    - aim
+    - Member[web].Member[api].Member[dashboard_apps].Member[views].Member[ExploreStateCreateIn]
+  - - pydantic.BaseModel~Subclass
+    - aim
+    - Member[web].Member[api].Member[dashboard_apps].Member[views].Member[ExploreStateGetOut]
+  - - pydantic.BaseModel~Subclass
+    - aim
+    - Member[web].Member[api].Member[dashboard_apps].Member[views].Member[ExploreStateUpdateIn]
+  - - pydantic.BaseModel~Subclass
+    - aim
+    - Member[web].Member[api].Member[dashboards].Member[pydantic_models].Member[DashboardCreateIn]
+  - - pydantic.BaseModel~Subclass
+    - aim
+    - Member[web].Member[api].Member[dashboards].Member[pydantic_models].Member[DashboardOut]
+  - - pydantic.BaseModel~Subclass
+    - aim
+    - Member[web].Member[api].Member[dashboards].Member[pydantic_models].Member[DashboardUpdateIn]
+  - - pydantic.BaseModel~Subclass
+    - aim
+    - Member[web].Member[api].Member[dashboards].Member[views].Member[DashboardCreateIn]
+  - - pydantic.BaseModel~Subclass
+    - aim
+    - Member[web].Member[api].Member[dashboards].Member[views].Member[DashboardOut]
+  - - pydantic.BaseModel~Subclass
+    - aim
+    - Member[web].Member[api].Member[dashboards].Member[views].Member[DashboardUpdateIn]
+  - - pydantic.BaseModel~Subclass
+    - aim
+    - Member[web].Member[api].Member[experiments].Member[pydantic_models].Member[ExperimentActivityApiOut]
+  - - pydantic.BaseModel~Subclass
+    - aim
+    - Member[web].Member[api].Member[experiments].Member[pydantic_models].Member[ExperimentCreateIn]
+  - - pydantic.BaseModel~Subclass
+    - aim
+    - Member[web].Member[api].Member[experiments].Member[pydantic_models].Member[ExperimentGetOut]
+  - - pydantic.BaseModel~Subclass
+    - aim
+    - Member[web].Member[api].Member[experiments].Member[pydantic_models].Member[ExperimentGetRunsOut]
+  - - pydantic.BaseModel~Subclass
+    - aim
+    - Member[web].Member[api].Member[experiments].Member[pydantic_models].Member[ExperimentUpdateIn]
+  - - pydantic.BaseModel~Subclass
+    - aim
+    - Member[web].Member[api].Member[experiments].Member[pydantic_models].Member[ExperimentUpdateOut]
+  - - pydantic.BaseModel~Subclass
+    - aim
+    - Member[web].Member[api].Member[experiments].Member[views].Member[ExperimentActivityApiOut]
+  - - pydantic.BaseModel~Subclass
+    - aim
+    - Member[web].Member[api].Member[experiments].Member[views].Member[ExperimentCreateIn]
+  - - pydantic.BaseModel~Subclass
+    - aim
+    - Member[web].Member[api].Member[experiments].Member[views].Member[ExperimentGetOut]
+  - - pydantic.BaseModel~Subclass
+    - aim
+    - Member[web].Member[api].Member[experiments].Member[views].Member[ExperimentGetRunsOut]
+  - - pydantic.BaseModel~Subclass
+    - aim
+    - Member[web].Member[api].Member[experiments].Member[views].Member[ExperimentUpdateIn]
+  - - pydantic.BaseModel~Subclass
+    - aim
+    - Member[web].Member[api].Member[experiments].Member[views].Member[ExperimentUpdateOut]
+  - - pydantic.BaseModel~Subclass
+    - aim
+    - Member[web].Member[api].Member[experiments].Member[views].Member[NoteIn]
+  - - pydantic.BaseModel~Subclass
+    - aim
+    - Member[web].Member[api].Member[projects].Member[pydantic_models].Member[ProjectActivityApiOut]
+  - - pydantic.BaseModel~Subclass
+    - aim
+    - Member[web].Member[api].Member[projects].Member[pydantic_models].Member[ProjectApiOut]
+  - - pydantic.BaseModel~Subclass
+    - aim
+    - Member[web].Member[api].Member[projects].Member[pydantic_models].Member[ProjectParamsOut]
+  - - pydantic.BaseModel~Subclass
+    - aim
+    - Member[web].Member[api].Member[projects].Member[pydantic_models].Member[ProjectPinnedSequencesApiIn]
+  - - pydantic.BaseModel~Subclass
+    - aim
+    - Member[web].Member[api].Member[projects].Member[pydantic_models].Member[ProjectPinnedSequencesApiOut]
+  - - pydantic.BaseModel~Subclass
+    - aim
+    - Member[web].Member[api].Member[projects].Member[pydantic_models].Member[Sequence]
+  - - pydantic.BaseModel~Subclass
+    - aim
+    - Member[web].Member[api].Member[projects].Member[views].Member[ProjectActivityApiOut]
+  - - pydantic.BaseModel~Subclass
+    - aim
+    - Member[web].Member[api].Member[projects].Member[views].Member[ProjectApiOut]
+  - - pydantic.BaseModel~Subclass
+    - aim
+    - Member[web].Member[api].Member[projects].Member[views].Member[ProjectParamsOut]
+  - - pydantic.BaseModel~Subclass
+    - aim
+    - Member[web].Member[api].Member[projects].Member[views].Member[ProjectPinnedSequencesApiIn]
+  - - pydantic.BaseModel~Subclass
+    - aim
+    - Member[web].Member[api].Member[projects].Member[views].Member[ProjectPinnedSequencesApiOut]
+  - - pydantic.BaseModel~Subclass
+    - aim
+    - Member[web].Member[api].Member[runs].Member[object_views].Member[DistributionInfo]
+  - - pydantic.BaseModel~Subclass
+    - aim
+    - Member[web].Member[api].Member[runs].Member[object_views].Member[FigureInfo]
+  - - pydantic.BaseModel~Subclass
+    - aim
+    - Member[web].Member[api].Member[runs].Member[object_views].Member[ObjectSearchRunView]
+  - - pydantic.BaseModel~Subclass
+    - aim
+    - Member[web].Member[api].Member[runs].Member[object_views].Member[ObjectSequenceBaseView]
+  - - pydantic.BaseModel~Subclass
+    - aim
+    - Member[web].Member[api].Member[runs].Member[object_views].Member[QuerySyntaxErrorOut]
+  - - pydantic.BaseModel~Subclass
+    - aim
+    - Member[web].Member[api].Member[runs].Member[pydantic_models].Member[AlignedRunIn]
+  - - pydantic.BaseModel~Subclass
+    - aim
+    - Member[web].Member[api].Member[runs].Member[pydantic_models].Member[AlignedTraceIn]
+  - - pydantic.BaseModel~Subclass
+    - aim
+    - Member[web].Member[api].Member[runs].Member[pydantic_models].Member[AudioInfo]
+  - - pydantic.BaseModel~Subclass
+    - aim
+    - Member[web].Member[api].Member[runs].Member[pydantic_models].Member[BaseRangeInfo]
+  - - pydantic.BaseModel~Subclass
+    - aim
+    - Member[web].Member[api].Member[runs].Member[pydantic_models].Member[DistributionInfo]
+  - - pydantic.BaseModel~Subclass
+    - aim
+    - Member[web].Member[api].Member[runs].Member[pydantic_models].Member[EncodedNumpyArray]
+  - - pydantic.BaseModel~Subclass
+    - aim
+    - Member[web].Member[api].Member[runs].Member[pydantic_models].Member[FigureInfo]
+  - - pydantic.BaseModel~Subclass
+    - aim
+    - Member[web].Member[api].Member[runs].Member[pydantic_models].Member[ImageInfo]
+  - - pydantic.BaseModel~Subclass
+    - aim
+    - Member[web].Member[api].Member[runs].Member[pydantic_models].Member[MetricAlignApiIn]
+  - - pydantic.BaseModel~Subclass
+    - aim
+    - Member[web].Member[api].Member[runs].Member[pydantic_models].Member[MetricSearchRunView]
+  - - pydantic.BaseModel~Subclass
+    - aim
+    - Member[web].Member[api].Member[runs].Member[pydantic_models].Member[MetricsBaseView]
+  - - pydantic.BaseModel~Subclass
+    - aim
+    - Member[web].Member[api].Member[runs].Member[pydantic_models].Member[NoteIn]
+  - - pydantic.BaseModel~Subclass
+    - aim
+    - Member[web].Member[api].Member[runs].Member[pydantic_models].Member[ObjectSearchRunView]
+  - - pydantic.BaseModel~Subclass
+    - aim
+    - Member[web].Member[api].Member[runs].Member[pydantic_models].Member[ObjectSequenceBaseView]
+  - - pydantic.BaseModel~Subclass
+    - aim
+    - Member[web].Member[api].Member[runs].Member[pydantic_models].Member[ObjectSequenceFullView]
+  - - pydantic.BaseModel~Subclass
+    - aim
+    - Member[web].Member[api].Member[runs].Member[pydantic_models].Member[PropsView]
+  - - pydantic.BaseModel~Subclass
+    - aim
+    - Member[web].Member[api].Member[runs].Member[pydantic_models].Member[QuerySyntaxErrorOut]
+  - - pydantic.BaseModel~Subclass
+    - aim
+    - Member[web].Member[api].Member[runs].Member[pydantic_models].Member[RunActiveOut]
+  - - pydantic.BaseModel~Subclass
+    - aim
+    - Member[web].Member[api].Member[runs].Member[pydantic_models].Member[RunInfoOut]
+  - - pydantic.BaseModel~Subclass
+    - aim
+    - Member[web].Member[api].Member[runs].Member[pydantic_models].Member[RunSearchRunView]
+  - - pydantic.BaseModel~Subclass
+    - aim
+    - Member[web].Member[api].Member[runs].Member[pydantic_models].Member[StructuredRunAddTagIn]
+  - - pydantic.BaseModel~Subclass
+    - aim
+    - Member[web].Member[api].Member[runs].Member[pydantic_models].Member[StructuredRunAddTagOut]
+  - - pydantic.BaseModel~Subclass
+    - aim
+    - Member[web].Member[api].Member[runs].Member[pydantic_models].Member[StructuredRunRemoveTagOut]
+  - - pydantic.BaseModel~Subclass
+    - aim
+    - Member[web].Member[api].Member[runs].Member[pydantic_models].Member[StructuredRunUpdateIn]
+  - - pydantic.BaseModel~Subclass
+    - aim
+    - Member[web].Member[api].Member[runs].Member[pydantic_models].Member[StructuredRunUpdateOut]
+  - - pydantic.BaseModel~Subclass
+    - aim
+    - Member[web].Member[api].Member[runs].Member[pydantic_models].Member[StructuredRunsArchivedOut]
+  - - pydantic.BaseModel~Subclass
+    - aim
+    - Member[web].Member[api].Member[runs].Member[pydantic_models].Member[TextInfo]
+  - - pydantic.BaseModel~Subclass
+    - aim
+    - Member[web].Member[api].Member[runs].Member[pydantic_models].Member[TraceAlignedView]
+  - - pydantic.BaseModel~Subclass
+    - aim
+    - Member[web].Member[api].Member[runs].Member[pydantic_models].Member[TraceBaseView]
+  - - pydantic.BaseModel~Subclass
+    - aim
+    - Member[web].Member[api].Member[runs].Member[pydantic_models].Member[TraceBase]
+  - - pydantic.BaseModel~Subclass
+    - aim
+    - Member[web].Member[api].Member[runs].Member[pydantic_models].Member[TraceFullView]
+  - - pydantic.BaseModel~Subclass
+    - aim
+    - Member[web].Member[api].Member[runs].Member[pydantic_models].Member[TraceOverview]
+  - - pydantic.BaseModel~Subclass
+    - aim
+    - Member[web].Member[api].Member[runs].Member[utils].Member[AlignedRunIn]
+  - - pydantic.BaseModel~Subclass
+    - aim
+    - Member[web].Member[api].Member[runs].Member[utils].Member[TraceBase]
+  - - pydantic.BaseModel~Subclass
+    - aim
+    - Member[web].Member[api].Member[runs].Member[views].Member[MetricAlignApiIn]
+  - - pydantic.BaseModel~Subclass
+    - aim
+    - Member[web].Member[api].Member[runs].Member[views].Member[NoteIn]
+  - - pydantic.BaseModel~Subclass
+    - aim
+    - Member[web].Member[api].Member[runs].Member[views].Member[QuerySyntaxErrorOut]
+  - - pydantic.BaseModel~Subclass
+    - aim
+    - Member[web].Member[api].Member[runs].Member[views].Member[RunActiveOut]
+  - - pydantic.BaseModel~Subclass
+    - aim
+    - Member[web].Member[api].Member[runs].Member[views].Member[RunInfoOut]
+  - - pydantic.BaseModel~Subclass
+    - aim
+    - Member[web].Member[api].Member[runs].Member[views].Member[StructuredRunAddTagIn]
+  - - pydantic.BaseModel~Subclass
+    - aim
+    - Member[web].Member[api].Member[runs].Member[views].Member[StructuredRunAddTagOut]
+  - - pydantic.BaseModel~Subclass
+    - aim
+    - Member[web].Member[api].Member[runs].Member[views].Member[StructuredRunRemoveTagOut]
+  - - pydantic.BaseModel~Subclass
+    - aim
+    - Member[web].Member[api].Member[runs].Member[views].Member[StructuredRunUpdateIn]
+  - - pydantic.BaseModel~Subclass
+    - aim
+    - Member[web].Member[api].Member[runs].Member[views].Member[StructuredRunUpdateOut]
+  - - pydantic.BaseModel~Subclass
+    - aim
+    - Member[web].Member[api].Member[runs].Member[views].Member[StructuredRunsArchivedOut]
+  - - pydantic.BaseModel~Subclass
+    - aim
+    - Member[web].Member[api].Member[tags].Member[pydantic_models].Member[TagCreateIn]
+  - - pydantic.BaseModel~Subclass
+    - aim
+    - Member[web].Member[api].Member[tags].Member[pydantic_models].Member[TagGetOut]
+  - - pydantic.BaseModel~Subclass
+    - aim
+    - Member[web].Member[api].Member[tags].Member[pydantic_models].Member[TagGetRunsOut]
+  - - pydantic.BaseModel~Subclass
+    - aim
+    - Member[web].Member[api].Member[tags].Member[pydantic_models].Member[TagUpdateIn]
+  - - pydantic.BaseModel~Subclass
+    - aim
+    - Member[web].Member[api].Member[tags].Member[pydantic_models].Member[TagUpdateOut]
+  - - pydantic.BaseModel~Subclass
+    - aim
+    - Member[web].Member[api].Member[tags].Member[views].Member[TagCreateIn]
+  - - pydantic.BaseModel~Subclass
+    - aim
+    - Member[web].Member[api].Member[tags].Member[views].Member[TagGetOut]
+  - - pydantic.BaseModel~Subclass
+    - aim
+    - Member[web].Member[api].Member[tags].Member[views].Member[TagGetRunsOut]
+  - - pydantic.BaseModel~Subclass
+    - aim
+    - Member[web].Member[api].Member[tags].Member[views].Member[TagUpdateIn]
+  - - pydantic.BaseModel~Subclass
+    - aim
+    - Member[web].Member[api].Member[tags].Member[views].Member[TagUpdateOut]
+  - - sqlalchemy.orm.Session~Subclass
+    - aim
+    - Member[web].Member[api].Member[dashboard_apps].Member[views].Member[Session]
+  - - sqlalchemy.orm.Session~Subclass
+    - aim
+    - Member[web].Member[api].Member[dashboards].Member[views].Member[Session]

python/ql/lib/semmle/python/frameworks/data/internal/subclass-capture/auto-aio_geojson_generic_client.model.yml

@@ -0,0 +1,12 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - aiohttp.ClientSession~Subclass
+    - aio_geojson_generic_client
+    - Member[feed].Member[ClientSession]
+  - - aiohttp.ClientSession~Subclass
+    - aio_geojson_generic_client
+    - Member[feed_manager].Member[ClientSession]

python/ql/lib/semmle/python/frameworks/data/internal/subclass-capture/auto-aio_geojson_geonetnz_quakes.model.yml

@@ -0,0 +1,12 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - aiohttp.ClientSession~Subclass
+    - aio_geojson_geonetnz_quakes
+    - Member[feed].Member[ClientSession]
+  - - aiohttp.ClientSession~Subclass
+    - aio_geojson_geonetnz_quakes
+    - Member[feed_manager].Member[ClientSession]

python/ql/lib/semmle/python/frameworks/data/internal/subclass-capture/auto-aio_geojson_geonetnz_volcano.model.yml

@@ -0,0 +1,12 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - aiohttp.ClientSession~Subclass
+    - aio_geojson_geonetnz_volcano
+    - Member[feed].Member[ClientSession]
+  - - aiohttp.ClientSession~Subclass
+    - aio_geojson_geonetnz_volcano
+    - Member[feed_manager].Member[ClientSession]

python/ql/lib/semmle/python/frameworks/data/internal/subclass-capture/auto-aio_geojson_nsw_rfs_incidents.model.yml

@@ -0,0 +1,12 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - aiohttp.ClientSession~Subclass
+    - aio_geojson_nsw_rfs_incidents
+    - Member[feed].Member[ClientSession]
+  - - aiohttp.ClientSession~Subclass
+    - aio_geojson_nsw_rfs_incidents
+    - Member[feed_manager].Member[ClientSession]

python/ql/lib/semmle/python/frameworks/data/internal/subclass-capture/auto-aio_geojson_usgs_earthquakes.model.yml

@@ -0,0 +1,12 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - aiohttp.ClientSession~Subclass
+    - aio_geojson_usgs_earthquakes
+    - Member[feed].Member[ClientSession]
+  - - aiohttp.ClientSession~Subclass
+    - aio_geojson_usgs_earthquakes
+    - Member[feed_manager].Member[ClientSession]

python/ql/lib/semmle/python/frameworks/data/internal/subclass-capture/auto-aio_pika.model.yml

@@ -0,0 +1,9 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - pickle~Alias
+    - aio_pika
+    - Member[patterns].Member[base].Member[pickle]

python/ql/lib/semmle/python/frameworks/data/internal/subclass-capture/auto-aioairzone.model.yml

@@ -0,0 +1,9 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - aiohttp.ClientSession~Subclass
+    - aioairzone
+    - Member[localapi].Member[ClientSession]

python/ql/lib/semmle/python/frameworks/data/internal/subclass-capture/auto-aioambient.model.yml

@@ -0,0 +1,9 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - aiohttp.ClientSession~Subclass
+    - aioambient
+    - Member[api].Member[ClientSession]

python/ql/lib/semmle/python/frameworks/data/internal/subclass-capture/auto-aioaseko.model.yml

@@ -0,0 +1,15 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - aiohttp.ClientSession~Subclass
+    - aioaseko
+    - Member[ClientSession]
+  - - aiohttp.ClientSession~Subclass
+    - aioaseko
+    - Member[mobile].Member[ClientSession]
+  - - aiohttp.ClientSession~Subclass
+    - aioaseko
+    - Member[web].Member[ClientSession]

python/ql/lib/semmle/python/frameworks/data/internal/subclass-capture/auto-aioboto3.model.yml

@@ -0,0 +1,9 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - io.StringIO~Subclass
+    - aioboto3
+    - Member[s3].Member[cse].Member[BytesIO]

python/ql/lib/semmle/python/frameworks/data/internal/subclass-capture/auto-aiobotocore.model.yml

@@ -0,0 +1,9 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - xml.etree.ElementTree~Subclass
+    - aiobotocore
+    - Member[handlers].Member[ETree]

python/ql/lib/semmle/python/frameworks/data/internal/subclass-capture/auto-aiocache.model.yml

@@ -0,0 +1,9 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - pickle~Alias
+    - aiocache
+    - Member[serializers].Member[serializers].Member[pickle]

python/ql/lib/semmle/python/frameworks/data/internal/subclass-capture/auto-aiocfscrape.model.yml

@@ -0,0 +1,9 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - aiohttp.ClientSession~Subclass
+    - aiocfscrape
+    - Member[CloudflareScraper]