codeql/java/documentation/library-coverage/coverage.csv

1	package	sink	source	summary	sink:bean-validation	sink:command-injection	sink:encryption-iv	sink:file-content-store	sink:fragment-injection	sink:groovy-injection	sink:hostname-verification	sink:html-injection	sink:information-leak	sink:intent-redirection	sink:jexl-injection	sink:jndi-injection	sink:js-injection	sink:ldap-injection	sink:log-injection	sink:mvel-injection	sink:ognl-injection	sink:path-injection	sink:pending-intents	sink:regex-use	sink:regex-use[-1]	sink:regex-use[0]	sink:regex-use[]	sink:regex-use[f-1]	sink:regex-use[f1]	sink:regex-use[f]	sink:request-forgery	sink:response-splitting	sink:sql-injection	sink:template-injection	sink:trust-boundary-violation	sink:url-redirection	sink:xpath-injection	sink:xslt-injection	source:android-external-storage-dir	source:contentprovider	source:database	source:environment	source:file	source:remote	summary:taint	summary:value
2	actions.osgi			6																																									6
3	android.app	35		103					11					7									17																						18	85
4	android.content	24	31	154										16																			8						4	27					63	91
5	android.database	59		41																													59												41
6	android.net			60																																									45	15
7	android.os		2	122																																			2						41	81
8	android.support.v4.app	11							11
9	android.util	6	16																6																									16
10	android.webkit	3	2									2					1																											2
11	android.widget		1	1																																								1	1
12	androidx.core.app	6		95																			6																						12	83
13	androidx.fragment.app	11							11
14	androidx.slice	2	5	88																			2																	5					27	61
15	antlr			1																																									1
16	cn.hutool.core.codec			1																																									1
17	com.alibaba.druid.sql			1																																									1
18	com.alibaba.fastjson2			1																																									1
19	com.esotericsoftware.kryo.io			1																																									1
20	com.esotericsoftware.kryo5.io			1																																									1
21	com.fasterxml.jackson.core			1																																									1
22	com.fasterxml.jackson.databind	2		6																		2																							6
23	com.google.common.base	4		87																						3	1																		63	24
24	com.google.common.cache			17																																										17
25	com.google.common.collect			553																																									2	551
26	com.google.common.flogger	29																	29
27	com.google.common.io	8		73				1														7																							72	1
28	com.google.gson			44																																									30	14
29	com.hubspot.jinjava	2																																2
30	com.jcraft.jsch	1		1																											1														1
31	com.mitchellbosecke.pebble	2																																2
32	com.opensymphony.xwork2	67		961																	67																								867	94
33	com.rabbitmq.client		21	7																																								21	7
34	com.thoughtworks.xstream	1																				1
35	com.unboundid.ldap.sdk	17																17
36	com.zaxxer.hikari	2																													2
37	flexjson			1																																										1
38	freemarker.cache	1																																1
39	freemarker.template	7																																7
40	groovy.lang	26								26
41	groovy.text	1								1
42	groovy.util	5								5
43	hudson	68	9	2647		4		3				4										51									6												5	4	2571	76
44	io.jsonwebtoken		2	4																																								2	4
45	io.netty.bootstrap	3																													3
46	io.netty.buffer			207																																									130	77
47	io.netty.channel	9	2																												9													2
48	io.netty.handler.codec	4	13	259																		1									3													13	143	116
49	io.netty.handler.ssl	4																				4
50	io.netty.handler.stream	1																				1
51	io.netty.resolver			1																																									1
52	io.netty.util	2		23																		1									1														21	2
53	jakarta.activation	2		2																		1									1														2
54	jakarta.faces.context	2	7									2																																7
55	jakarta.json			123																																									100	23
56	jakarta.ws.rs.client	1																													1
57	jakarta.ws.rs.container		9																																									9
58	jakarta.ws.rs.core	2		149																																2									94	55
59	jakarta.xml.bind.attachment		2																																									2
60	java.awt			3																																										3
61	java.beans			1																																									1
62	java.io	50	1	46				22														28																					1		44	2
63	java.lang	31	3	94		13													8			5			4			1														3			57	37
64	java.net	13	3	23																											13													3	23
65	java.nio	49		36				5														43									1														36
66	java.sql	13	1	2																											4		9								1				2
67	java.util	45	2	487				1											34							5	2		1	2												2			45	442
68	javafx.scene.web	1																													1
69	javax.activation	2		7																		1									1														7
70	javax.crypto	2		4			2																																						4
71	javax.faces.context	2	7									2																																7
72	javax.imageio.stream			1																																									1
73	javax.jms		9	57																																								9	57
74	javax.json			123																																									100	23
75	javax.management	2		1												2																													1
76	javax.naming	7		1												6		1																											1
77	javax.net.ssl	2									2
78	javax.portlet			61																																									61
79	javax.script	1																		1
80	javax.servlet	7	21	2									1									1										3			2									21	2
81	javax.validation	1	1		1																																							1
82	javax.ws.rs.client	1																													1
83	javax.ws.rs.container		9																																									9
84	javax.ws.rs.core	3		149																												1				2									94	55
85	javax.xml.bind.attachment		2																																									2
86	javax.xml.transform	2		6																		1																1							6
87	javax.xml.xpath	3																																			3
88	jenkins			523																																									500	23
89	jodd.json			10																																										10
90	kotlin	16		1849																		14									2														1836	13
91	net.sf.json	2		338																											2														321	17
92	net.sf.saxon.s9api	5																																				5
93	ognl	6																			6
94	okhttp3	4		50																											4														23	27
95	org.acegisecurity			49																																									49
96	org.antlr.runtime	1																				1
97	org.apache.commons.codec			6																																									6
98	org.apache.commons.collections			800																																									17	783
99	org.apache.commons.collections4			800																																									17	783
100	org.apache.commons.compress.archivers.tar			4																																									4
101	org.apache.commons.exec	6				6
102	org.apache.commons.httpclient.util			1																																									1
103	org.apache.commons.io	111		560				2														94									15														546	14
104	org.apache.commons.jelly	6																													6
105	org.apache.commons.jexl2	15													15
106	org.apache.commons.jexl3	15													15
107	org.apache.commons.lang			767																																									596	171
108	org.apache.commons.lang3	6		425																				6																					294	131
109	org.apache.commons.logging	6																	6
110	org.apache.commons.net	9	12																			3									6													12
111	org.apache.commons.ognl	6																			6
112	org.apache.commons.text			272																																									220	52
113	org.apache.cxf.catalog	1																													1
114	org.apache.cxf.common.classloader	3																				1									2
115	org.apache.cxf.common.jaxb	1																				1
116	org.apache.cxf.common.logging	6																	6
117	org.apache.cxf.configuration.jsse	2									1											1
118	org.apache.cxf.helpers	10																				5															5
119	org.apache.cxf.resource	9																				4									5
120	org.apache.cxf.staxutils	1																				1
121	org.apache.cxf.tools.corba.utils	4																				4
122	org.apache.cxf.tools.util	10																				10
123	org.apache.cxf.transform	3																																				3
124	org.apache.directory.ldap.client.api	1																1
125	org.apache.hadoop.fs			10																																									10
126	org.apache.hadoop.hive.metastore	3																															3
127	org.apache.hc.client5.http.async.methods	84																													84
128	org.apache.hc.client5.http.classic.methods	37																													37
129	org.apache.hc.client5.http.fluent	19																													19
130	org.apache.hc.core5.benchmark	1																													1
131	org.apache.hc.core5.function			1																																									1
132	org.apache.hc.core5.http	73	2	45								1																			72													2	45
133	org.apache.hc.core5.net			18																																									18
134	org.apache.hc.core5.util			24																																									18	6
135	org.apache.hive.hcatalog.templeton	1																															1
136	org.apache.http	48	3	95								2																			46													3	86	9
137	org.apache.ibatis.jdbc	6		57																													6												57
138	org.apache.log4j	11																	11
139	org.apache.logging.log4j	359		8															359																										4	4
140	org.apache.shiro.codec			1																																									1
141	org.apache.shiro.jndi	1														1
142	org.apache.struts.beanvalidation.validation.interceptor			4																																									4
143	org.apache.struts2	14		3873																	11														3										3839	34
144	org.apache.tools.ant	11																				11
145	org.apache.tools.zip			1																																									1
146	org.apache.velocity.app	4																																4
147	org.apache.velocity.runtime	4																																4
148	org.codehaus.cargo.container.installer	3																				2									1
149	org.codehaus.groovy.control	1								1
150	org.dom4j	20																																			20
151	org.eclipse.jetty.client	1																													1
152	org.fusesource.leveldbjni	1																				1
153	org.geogebra.web.full.main	1																																		1
154	org.gradle.api.file			2																																									2
155	org.hibernate	7																															7
156	org.influxdb	1																													1
157	org.jboss.logging	324																	324
158	org.jdbi.v3.core	6																													6
159	org.jenkins.ui.icon			49																																									48	1
160	org.jenkins.ui.symbol			33																																									25	8
161	org.jooq	1																															1
162	org.json			236																																									198	38
163	org.kohsuke.stapler	20	24	363								2										9									4					5								24	352	11
164	org.mvel2	16																		16
165	org.openjdk.jmh.runner.options	1																				1
166	org.owasp.esapi			1																																									1
167	org.scijava.log	13																	13
168	org.slf4j	55		6															55																										2	4
169	org.springframework.beans			30																																										30
170	org.springframework.boot.jdbc	1																													1
171	org.springframework.cache			13																																										13
172	org.springframework.context			3																																									3
173	org.springframework.core.io	2																				1									1
174	org.springframework.data.repository			1																																										1
175	org.springframework.http	14		71																											14														61	10
176	org.springframework.jdbc.core	19																															19
177	org.springframework.jdbc.datasource	4																													4
178	org.springframework.jdbc.object	9																															9
179	org.springframework.jndi	1														1
180	org.springframework.ldap	47														33		14
181	org.springframework.security.web.savedrequest		6																																									6
182	org.springframework.ui			32																																										32
183	org.springframework.util	3		142																		3																							90	52
184	org.springframework.validation			13																																									13
185	org.springframework.web.client	13	3																												13													3
186	org.springframework.web.context.request		8																																									8
187	org.springframework.web.multipart		12	13																																								12	13
188	org.springframework.web.reactive.function.client	2																													2
189	org.springframework.web.util			165																																									140	25
190	org.thymeleaf	2		2																														2											2
191	org.xml.sax			1																																									1
192	org.xmlpull.v1		3																																									3
193	org.yaml.snakeyaml			1																																									1
194	play.libs.ws	2																													2
195	play.mvc	1	13	24																															1									13	24
196	ratpack.core.form			3																																									3
197	ratpack.core.handling		6	4																																								6	4
198	ratpack.core.http		10	10																																								10	10
199	ratpack.exec			48																																										48
200	ratpack.form			3																																									3
201	ratpack.func			35																																										35
202	ratpack.handling		6	4																																								6	4
203	ratpack.http		10	10																																								10	10
204	ratpack.util			35																																										35
205	retrofit2	1		1																											1														1