codeql/java/documentation/library-coverage/coverage.csv

1	package	sink	source	summary	sink:bean-validation	sink:create-file	sink:fragment-injection	sink:groovy	sink:header-splitting	sink:information-leak	sink:intent-start	sink:jdbc-url	sink:jexl	sink:jndi-injection	sink:ldap	sink:logging	sink:mvel	sink:ognl-injection	sink:open-url	sink:pending-intent-sent	sink:read-file	sink:regex-use	sink:regex-use[-1]	sink:regex-use[0]	sink:regex-use[]	sink:regex-use[f-1]	sink:regex-use[f1]	sink:regex-use[f]	sink:set-hostname-verifier	sink:sql	sink:ssti	sink:url-open-stream	sink:url-redirect	sink:write-file	sink:xpath	sink:xslt	sink:xss	source:android-external-storage-dir	source:android-widget	source:contentprovider	source:remote	summary:taint	summary:value
2	android.app	35		103			11				7									17																						18	85
3	android.content	24	31	154							16																			8								4		27		63	91
4	android.database	59		39																										59												39
5	android.net			60																																						45	15
6	android.os		2	122																																		2				41	81
7	android.support.v4.app	11					11
8	android.util	6	16													6																									16
9	android.webkit	3	2																																		3				2
10	android.widget		1	1																																			1			1
11	androidx.core.app	6		95																6																						12	83
12	androidx.fragment.app	11					11
13	androidx.slice	2	5	88																2																				5		27	61
14	cn.hutool.core.codec			1																																						1
15	com.esotericsoftware.kryo.io			1																																						1
16	com.esotericsoftware.kryo5.io			1																																						1
17	com.fasterxml.jackson.core			1																																						1
18	com.fasterxml.jackson.databind			6																																						6
19	com.google.common.base	4		85																				3	1																	62	23
20	com.google.common.cache			17																																							17
21	com.google.common.collect			553																																						2	551
22	com.google.common.flogger	29														29
23	com.google.common.io	6		73																												6										72	1
24	com.hubspot.jinjava	2																													2
25	com.mitchellbosecke.pebble	2																													2
26	com.opensymphony.xwork2.ognl	3																3
27	com.rabbitmq.client		21	7																																					21	7
28	com.thoughtworks.xstream	1																			1
29	com.unboundid.ldap.sdk	17													17
30	com.zaxxer.hikari	2										2
31	flexjson			1																																							1
32	freemarker.cache	1																													1
33	freemarker.template	7																													7
34	groovy.lang	26						26
35	groovy.util	5						5
36	hudson.remoting			1																																						1
37	io.netty.resolver			1																																						1
38	jakarta.faces.context	2	7																																		2				7
39	jakarta.json			123																																						100	23
40	jakarta.ws.rs.client	1																	1
41	jakarta.ws.rs.container		9																																						9
42	jakarta.ws.rs.core	2		149																													2									94	55
43	java.beans			1																																						1
44	java.io	42		40		17															3													22								39	1
45	java.lang	16		76												8					3		4			1																53	23
46	java.net	12	3	16															12																						3	16
47	java.nio	20		15		15															3													2								15
48	java.sql	13		2								4																		9												1	1
49	java.util	44		465												34								5	2		1	2														38	427
50	javafx.scene.web	1																	1
51	javax.faces.context	2	7																																		2				7
52	javax.jms		9	57																																					9	57
53	javax.json			123																																						100	23
54	javax.management.remote	2												2
55	javax.naming	7												6	1
56	javax.net.ssl	2																											2
57	javax.script	1															1
58	javax.servlet	4	21	2					3	1																															21	2
59	javax.validation	1	1		1																																				1
60	javax.ws.rs.client	1																	1
61	javax.ws.rs.container		9																																						9
62	javax.ws.rs.core	3		149					1																								2									94	55
63	javax.xml.transform	2		6		1																														1						6
64	javax.xml.xpath	3																																	3
65	jodd.json			10																																							10
66	kotlin	12		1835		10													2																							1828	7
67	net.sf.saxon.s9api	5																																		5
68	ognl	6																6
69	okhttp3	2		47															2																							22	25
70	org.apache.commons.codec			6																																						6
71	org.apache.commons.collections			800																																						17	783
72	org.apache.commons.collections4			800																																						17	783
73	org.apache.commons.compress.archivers.tar			4																																						4
74	org.apache.commons.io	107		560		91													15		1																					546	14
75	org.apache.commons.jelly	6																	6
76	org.apache.commons.jexl2	15											15
77	org.apache.commons.jexl3	15											15
78	org.apache.commons.lang3	6		424																		6																				293	131
79	org.apache.commons.logging	6														6
80	org.apache.commons.ognl	6																6
81	org.apache.commons.text			272																																						220	52
82	org.apache.directory.ldap.client.api	1													1
83	org.apache.hadoop.hive.metastore	3																												3
84	org.apache.hc.core5.function			1																																						1
85	org.apache.hc.core5.http	1	2	39																																	1				2	39
86	org.apache.hc.core5.net			2																																						2
87	org.apache.hc.core5.util			24																																						18	6
88	org.apache.hive.hcatalog.templeton	1																												1
89	org.apache.http	27	3	77															25																		2				3	69	8
90	org.apache.ibatis.jdbc	6		57																										6												57
91	org.apache.log4j	11														11
92	org.apache.logging.log4j	359		8												359																										4	4
93	org.apache.shiro.codec			1																																						1
94	org.apache.shiro.jndi	1												1
95	org.apache.tools.ant	11				3															8
96	org.apache.tools.zip			1																																						1
97	org.apache.velocity.app	4																													4
98	org.apache.velocity.runtime	4																													4
99	org.codehaus.cargo.container.installer	3				2													1
100	org.codehaus.groovy.control	1						1
101	org.dom4j	20																																	20
102	org.hibernate	7																												7
103	org.jboss.logging	324														324
104	org.jdbi.v3.core	6										6
105	org.jooq	1																												1
106	org.json			236																																						198	38
107	org.kohsuke.stapler	3		1															1		1												1									1
108	org.mvel2	16															16
109	org.openjdk.jmh.runner.options	1				1
110	org.scijava.log	13														13
111	org.slf4j	55		6												55																										2	4
112	org.springframework.beans			30																																							30
113	org.springframework.boot.jdbc	1										1
114	org.springframework.cache			13																																							13
115	org.springframework.context			3																																						3
116	org.springframework.data.repository			1																																							1
117	org.springframework.http	14		70															14																							60	10
118	org.springframework.jdbc.core	10																												10
119	org.springframework.jdbc.datasource	4										4
120	org.springframework.jdbc.object	9																												9
121	org.springframework.jndi	1												1
122	org.springframework.ldap	47												33	14
123	org.springframework.security.web.savedrequest		6																																						6
124	org.springframework.ui			32																																							32
125	org.springframework.util			139																																						87	52
126	org.springframework.validation			13																																						13
127	org.springframework.web.client	13	3																13																						3
128	org.springframework.web.context.request		8																																						8
129	org.springframework.web.multipart		12	13																																					12	13
130	org.springframework.web.reactive.function.client	2																	2
131	org.springframework.web.util			163																																						138	25
132	org.thymeleaf	2		2																											2											2
133	org.xml.sax			1																																						1
134	org.xmlpull.v1		3																																						3
135	play.mvc		4																																						4
136	ratpack.core.form			3																																						3
137	ratpack.core.handling		6	4																																					6	4
138	ratpack.core.http		10	10																																					10	10
139	ratpack.exec			48																																							48
140	ratpack.form			3																																						3
141	ratpack.func			35																																							35
142	ratpack.handling		6	4																																					6	4
143	ratpack.http		10	10																																					10	10
144	ratpack.util			35																																							35
145	retrofit2	1																	1