codeql/java/documentation/library-coverage/coverage.csv

1	package	sink	source	summary	sink:bean-validation	sink:command-injection	sink:file-content-store	sink:fragment-injection	sink:groovy-injection	sink:hostname-verification	sink:html-injection	sink:information-leak	sink:intent-redirection	sink:jexl-injection	sink:jndi-injection	sink:js-injection	sink:ldap-injection	sink:log-injection	sink:mvel-injection	sink:ognl-injection	sink:path-injection	sink:pending-intents	sink:regex-use	sink:regex-use[-1]	sink:regex-use[0]	sink:regex-use[]	sink:regex-use[f-1]	sink:regex-use[f1]	sink:regex-use[f]	sink:request-forgery	sink:response-splitting	sink:sql-injection	sink:template-injection	sink:trust-boundary-violation	sink:url-redirection	sink:xpath-injection	sink:xslt-injection	source:android-external-storage-dir	source:contentprovider	source:remote	summary:taint	summary:value
2	actions.osgi			6																																					6
3	android.app	35		103				11					7									17																			18	85
4	android.content	24	31	154									16																			8						4	27		63	91
5	android.database	59		41																												59									41
6	android.net			60																																					45	15
7	android.os		2	122																																		2			41	81
8	android.support.v4.app	11						11
9	android.util	6	16															6																						16
10	android.webkit	3	2								2					1																								2
11	android.widget		1	1																																				1	1
12	androidx.core.app	6		95																		6																			12	83
13	androidx.fragment.app	11						11
14	androidx.slice	2	5	88																		2																	5		27	61
15	antlr			1																																					1
16	cn.hutool.core.codec			1																																					1
17	com.alibaba.druid.sql			1																																					1
18	com.esotericsoftware.kryo.io			1																																					1
19	com.esotericsoftware.kryo5.io			1																																					1
20	com.fasterxml.jackson.core			1																																					1
21	com.fasterxml.jackson.databind	2		6																	2																				6
22	com.google.common.base	4		87																					3	1															63	24
23	com.google.common.cache			17																																						17
24	com.google.common.collect			553																																					2	551
25	com.google.common.flogger	29																29
26	com.google.common.io	8		73			1														7																				72	1
27	com.google.gson			44																																					30	14
28	com.hubspot.jinjava	2																															2
29	com.jcraft.jsch	1		1																										1											1
30	com.mitchellbosecke.pebble	2																															2
31	com.opensymphony.xwork2	67		961																67																					867	94
32	com.rabbitmq.client		21	7																																				21	7
33	com.thoughtworks.xstream	1																			1
34	com.unboundid.ldap.sdk	17															17
35	com.zaxxer.hikari	2																												2
36	flexjson			1																																						1
37	freemarker.cache	1																															1
38	freemarker.template	7																															7
39	groovy.lang	26							26
40	groovy.text	1							1
41	groovy.util	5							5
42	hudson	68	4	2334		4	3				4										51									6										4	2258	76
43	io.jsonwebtoken		2	4																																				2	4
44	io.netty.bootstrap	3																												3
45	io.netty.buffer			207																																					130	77
46	io.netty.channel	9	2																											9										2
47	io.netty.handler.codec	4	13	259																	1									3										13	143	116
48	io.netty.handler.ssl	4																			4
49	io.netty.handler.stream	1																			1
50	io.netty.resolver			1																																					1
51	io.netty.util	2		23																	1									1											21	2
52	jakarta.faces.context	2	7								2																													7
53	jakarta.json			123																																					100	23
54	jakarta.ws.rs.client	1																												1
55	jakarta.ws.rs.container		9																																					9
56	jakarta.ws.rs.core	2		149																															2						94	55
57	java.awt			3																																						3
58	java.beans			1																																					1
59	java.io	50		46			22														28																				44	2
60	java.lang	31		93		13												8			5			4			1														57	36
61	java.net	13	3	23																										13										3	23
62	java.nio	49		36			5														43									1											36
63	java.sql	13		2																										4		9									2
64	java.util	45		487			1											34							5	2		1	2												45	442
65	javafx.scene.web	1																												1
66	javax.faces.context	2	7								2																													7
67	javax.imageio.stream			1																																					1
68	javax.jms		9	57																																				9	57
69	javax.json			123																																					100	23
70	javax.management.remote	2													2
71	javax.naming	7		1											6		1																								1
72	javax.net.ssl	2								2
73	javax.portlet			61																																					61
74	javax.script	1																	1
75	javax.servlet	7	21	2								1									1										3			2						21	2
76	javax.validation	1	1		1																																			1
77	javax.ws.rs.client	1																												1
78	javax.ws.rs.container		9																																					9
79	javax.ws.rs.core	3		149																											1				2						94	55
80	javax.xml.transform	2		6																	1																1				6
81	javax.xml.xpath	3																																		3
82	jenkins			446																																					423	23
83	jodd.json			10																																						10
84	kotlin	16		1849																	14									2											1836	13
85	net.sf.json	2		338																										2											321	17
86	net.sf.saxon.s9api	5																																			5
87	ognl	6																		6
88	okhttp3	4		50																										4											23	27
89	org.acegisecurity			49																																					49
90	org.antlr.runtime	1																			1
91	org.apache.commons.codec			6																																					6
92	org.apache.commons.collections			800																																					17	783
93	org.apache.commons.collections4			800																																					17	783
94	org.apache.commons.compress.archivers.tar			4																																					4
95	org.apache.commons.exec	6				6
96	org.apache.commons.httpclient.util			1																																					1
97	org.apache.commons.io	111		560			2														94									15											546	14
98	org.apache.commons.jelly	6																												6
99	org.apache.commons.jexl2	15												15
100	org.apache.commons.jexl3	15												15
101	org.apache.commons.lang			767																																					596	171
102	org.apache.commons.lang3	6		425																			6																		294	131
103	org.apache.commons.logging	6																6
104	org.apache.commons.net	9	12																		3									6										12
105	org.apache.commons.ognl	6																		6
106	org.apache.commons.text			272																																					220	52
107	org.apache.directory.ldap.client.api	1															1
108	org.apache.hadoop.fs			10																																					10
109	org.apache.hadoop.hive.metastore	3																														3
110	org.apache.hc.client5.http.async.methods	84																												84
111	org.apache.hc.client5.http.classic.methods	37																												37
112	org.apache.hc.client5.http.fluent	19																												19
113	org.apache.hc.core5.benchmark	1																												1
114	org.apache.hc.core5.function			1																																					1
115	org.apache.hc.core5.http	73	2	45							1																			72										2	45
116	org.apache.hc.core5.net			18																																					18
117	org.apache.hc.core5.util			24																																					18	6
118	org.apache.hive.hcatalog.templeton	1																														1
119	org.apache.http	48	3	94							2																			46										3	86	8
120	org.apache.ibatis.jdbc	6		57																												6									57
121	org.apache.log4j	11																11
122	org.apache.logging.log4j	359		8														359																							4	4
123	org.apache.shiro.codec			1																																					1
124	org.apache.shiro.jndi	1													1
125	org.apache.struts.beanvalidation.validation.interceptor			4																																					4
126	org.apache.struts2	14		3873																11														3							3839	34
127	org.apache.tools.ant	11																			11
128	org.apache.tools.zip			1																																					1
129	org.apache.velocity.app	4																															4
130	org.apache.velocity.runtime	4																															4
131	org.codehaus.cargo.container.installer	3																			2									1
132	org.codehaus.groovy.control	1							1
133	org.dom4j	20																																		20
134	org.eclipse.jetty.client	1																												1
135	org.fusesource.leveldbjni	1																			1
136	org.geogebra.web.full.main	1																																	1
137	org.gradle.api.file			2																																					2
138	org.hibernate	7																														7
139	org.influxdb	1																												1
140	org.jboss.logging	324																324
141	org.jdbi.v3.core	6																												6
142	org.jenkins.ui.icon			42																																					41	1
143	org.jenkins.ui.symbol			32																																					24	8
144	org.jooq	1																														1
145	org.json			236																																					198	38
146	org.kohsuke.stapler	20	24	343							2										9									4					5					24	332	11
147	org.mvel2	16																	16
148	org.openjdk.jmh.runner.options	1																			1
149	org.owasp.esapi			1																																					1
150	org.scijava.log	13																13
151	org.slf4j	55		6														55																							2	4
152	org.springframework.beans			30																																						30
153	org.springframework.boot.jdbc	1																												1
154	org.springframework.cache			13																																						13
155	org.springframework.context			3																																					3
156	org.springframework.core.io	2																			1									1
157	org.springframework.data.repository			1																																						1
158	org.springframework.http	14		71																										14											61	10
159	org.springframework.jdbc.core	19																														19
160	org.springframework.jdbc.datasource	4																												4
161	org.springframework.jdbc.object	9																														9
162	org.springframework.jndi	1													1
163	org.springframework.ldap	47													33		14
164	org.springframework.security.web.savedrequest		6																																					6
165	org.springframework.ui			32																																						32
166	org.springframework.util	3		142																	3																				90	52
167	org.springframework.validation			13																																					13
168	org.springframework.web.client	13	3																											13										3
169	org.springframework.web.context.request		8																																					8
170	org.springframework.web.multipart		12	13																																				12	13
171	org.springframework.web.reactive.function.client	2																												2
172	org.springframework.web.util			165																																					140	25
173	org.thymeleaf	2		2																													2								2
174	org.xml.sax			1																																					1
175	org.xmlpull.v1		3																																					3
176	org.yaml.snakeyaml			1																																					1
177	play.libs.ws	2																												2
178	play.mvc	1	13	24																														1						13	24
179	ratpack.core.form			3																																					3
180	ratpack.core.handling		6	4																																				6	4
181	ratpack.core.http		10	10																																				10	10
182	ratpack.exec			48																																						48
183	ratpack.form			3																																					3
184	ratpack.func			35																																						35
185	ratpack.handling		6	4																																				6	4
186	ratpack.http		10	10																																				10	10
187	ratpack.util			35																																						35
188	retrofit2	1		1																										1											1