codeql/java/documentation/library-coverage/coverage.csv

1	package	sink	source	summary	sink:bean-validation	sink:create-file	sink:fragment-injection	sink:groovy	sink:header-splitting	sink:information-leak	sink:intent-start	sink:jdbc-url	sink:jexl	sink:jndi-injection	sink:ldap	sink:logging	sink:mvel	sink:ognl-injection	sink:open-url	sink:pending-intent-sent	sink:read-file	sink:regex-use	sink:regex-use[-1]	sink:regex-use[0]	sink:regex-use[]	sink:regex-use[f-1]	sink:regex-use[f1]	sink:regex-use[f]	sink:set-hostname-verifier	sink:sql	sink:ssti	sink:url-redirect	sink:write-file	sink:xpath	sink:xslt	sink:xss	source:android-external-storage-dir	source:android-widget	source:contentprovider	source:remote	summary:taint	summary:value
2	android.app	35		103			11				7									17																					18	85
3	android.content	24	31	154							16																			8							4		27		63	91
4	android.database	59		41																										59											41
5	android.net			60																																					45	15
6	android.os		2	122																																	2				41	81
7	android.support.v4.app	11					11
8	android.util	6	16													6																								16
9	android.webkit	3	2																																	3				2
10	android.widget		1	1																																		1			1
11	androidx.core.app	6		95																6																					12	83
12	androidx.fragment.app	11					11
13	androidx.slice	2	5	88																2																			5		27	61
14	cn.hutool.core.codec			1																																					1
15	com.esotericsoftware.kryo.io			1																																					1
16	com.esotericsoftware.kryo5.io			1																																					1
17	com.fasterxml.jackson.core			1																																					1
18	com.fasterxml.jackson.databind			6																																					6
19	com.google.common.base	4		87																				3	1																63	24
20	com.google.common.cache			17																																						17
21	com.google.common.collect			553																																					2	551
22	com.google.common.flogger	29														29
23	com.google.common.io	8		73		2															5												1								72	1
24	com.google.gson			39																																					25	14
25	com.hubspot.jinjava	2																													2
26	com.mitchellbosecke.pebble	2																													2
27	com.opensymphony.xwork2.ognl	3																3
28	com.rabbitmq.client		21	7																																				21	7
29	com.thoughtworks.xstream	1																			1
30	com.unboundid.ldap.sdk	17													17
31	com.zaxxer.hikari	2										2
32	flexjson			1																																						1
33	freemarker.cache	1																													1
34	freemarker.template	7																													7
35	groovy.lang	26						26
36	groovy.text	1						1
37	groovy.util	5						5
38	hudson	44		16		19													6		17												2								16
39	io.jsonwebtoken		2	4																																				2	4
40	io.netty.bootstrap	3																	3
41	io.netty.buffer			207																																					130	77
42	io.netty.channel	9	2																9																					2
43	io.netty.handler.codec	4	13	259															3		1																			13	143	116
44	io.netty.handler.ssl	2																			2
45	io.netty.handler.stream	1																			1
46	io.netty.resolver			1																																					1
47	io.netty.util	2		23		1													1																						21	2
48	jakarta.faces.context	2	7																																	2				7
49	jakarta.json			123																																					100	23
50	jakarta.ws.rs.client	1																	1
51	jakarta.ws.rs.container		9																																					9
52	jakarta.ws.rs.core	2		149																												2									94	55
53	java.awt			3																																						3
54	java.beans			1																																					1
55	java.io	44		45		18															4												22								43	2
56	java.lang	18		92												8					5		4			1															56	36
57	java.net	13	3	20															13																					3	20
58	java.nio	38		31		22															13												3								31
59	java.sql	13		3								4																		9											2	1
60	java.util	44		484												34								5	2		1	2													44	440
61	javafx.scene.web	1																	1
62	javax.faces.context	2	7																																	2				7
63	javax.imageio.stream			1																																					1
64	javax.jms		9	57																																				9	57
65	javax.json			123																																					100	23
66	javax.management.remote	2												2
67	javax.naming	7		1										6	1																										1
68	javax.net.ssl	2																											2
69	javax.script	1															1
70	javax.servlet	5	21	2					3	1											1																			21	2
71	javax.validation	1	1		1																																			1
72	javax.ws.rs.client	1																	1
73	javax.ws.rs.container		9																																					9
74	javax.ws.rs.core	3		149					1																							2									94	55
75	javax.xml.transform	2		6		1																													1						6
76	javax.xml.xpath	3																																3
77	jodd.json			10																																						10
78	kotlin	16		1843		11													2		3																				1836	7
79	net.sf.saxon.s9api	5																																	5
80	ognl	6																6
81	okhttp3	4		47															4																						22	25
82	org.apache.commons.codec			6																																					6
83	org.apache.commons.collections			800																																					17	783
84	org.apache.commons.collections4			800																																					17	783
85	org.apache.commons.compress.archivers.tar			4																																					4
86	org.apache.commons.httpclient.util			1																																					1
87	org.apache.commons.io	111		560		93													15		1												2								546	14
88	org.apache.commons.jelly	6																	6
89	org.apache.commons.jexl2	15											15
90	org.apache.commons.jexl3	15											15
91	org.apache.commons.lang3	6		424																		6																			293	131
92	org.apache.commons.logging	6														6
93	org.apache.commons.net	9	12																6		3																			12
94	org.apache.commons.ognl	6																6
95	org.apache.commons.text			272																																					220	52
96	org.apache.directory.ldap.client.api	1													1
97	org.apache.hadoop.fs			10																																					10
98	org.apache.hadoop.hive.metastore	3																												3
99	org.apache.hc.client5.http.async.methods	84																	84
100	org.apache.hc.client5.http.classic.methods	37																	37
101	org.apache.hc.client5.http.fluent	19																	19
102	org.apache.hc.core5.benchmark	1																	1
103	org.apache.hc.core5.function			1																																					1
104	org.apache.hc.core5.http	73	2	45															72																	1				2	45
105	org.apache.hc.core5.net			18																																					18
106	org.apache.hc.core5.util			24																																					18	6
107	org.apache.hive.hcatalog.templeton	1																												1
108	org.apache.http	48	3	94															46																	2				3	86	8
109	org.apache.ibatis.jdbc	6		57																										6											57
110	org.apache.log4j	11														11
111	org.apache.logging.log4j	359		8												359																									4	4
112	org.apache.shiro.codec			1																																					1
113	org.apache.shiro.jndi	1												1
114	org.apache.tools.ant	11				3															8
115	org.apache.tools.zip			1																																					1
116	org.apache.velocity.app	4																													4
117	org.apache.velocity.runtime	4																													4
118	org.codehaus.cargo.container.installer	3				2													1
119	org.codehaus.groovy.control	1						1
120	org.dom4j	20																																20
121	org.eclipse.jetty.client	1																	1
122	org.geogebra.web.full.main	1																														1
123	org.hibernate	7																												7
124	org.jboss.logging	324														324
125	org.jdbi.v3.core	6										6
126	org.jooq	1																												1
127	org.json			236																																					198	38
128	org.kohsuke.stapler	3		1															1		1											1									1
129	org.mvel2	16															16
130	org.openjdk.jmh.runner.options	1				1
131	org.scijava.log	13														13
132	org.slf4j	55		6												55																									2	4
133	org.springframework.beans			30																																						30
134	org.springframework.boot.jdbc	1										1
135	org.springframework.cache			13																																						13
136	org.springframework.context			3																																					3
137	org.springframework.data.repository			1																																						1
138	org.springframework.http	14		71															14																						61	10
139	org.springframework.jdbc.core	19																												19
140	org.springframework.jdbc.datasource	4										4
141	org.springframework.jdbc.object	9																												9
142	org.springframework.jndi	1												1
143	org.springframework.ldap	47												33	14
144	org.springframework.security.web.savedrequest		6																																					6
145	org.springframework.ui			32																																						32
146	org.springframework.util	3		142		2															1																				90	52
147	org.springframework.validation			13																																					13
148	org.springframework.web.client	13	3																13																					3
149	org.springframework.web.context.request		8																																					8
150	org.springframework.web.multipart		12	13																																				12	13
151	org.springframework.web.reactive.function.client	2																	2
152	org.springframework.web.util			165																																					140	25
153	org.thymeleaf	2		2																											2										2
154	org.xml.sax			1																																					1
155	org.xmlpull.v1		3																																					3
156	play.libs.ws	2																	2
157	play.mvc		13	24																																				13	24
158	ratpack.core.form			3																																					3
159	ratpack.core.handling		6	4																																				6	4
160	ratpack.core.http		10	10																																				10	10
161	ratpack.exec			48																																						48
162	ratpack.form			3																																					3
163	ratpack.func			35																																						35
164	ratpack.handling		6	4																																				6	4
165	ratpack.http		10	10																																				10	10
166	ratpack.util			35																																						35
167	retrofit2	1																	1