codeql/java/documentation/library-coverage/coverage.csv

1	package	sink	source	summary	sink:bean-validation	sink:command-injection	sink:file-content-store	sink:fragment-injection	sink:groovy-injection	sink:hostname-verification	sink:html-injection	sink:information-leak	sink:intent-redirection	sink:jexl-injection	sink:jndi-injection	sink:js-injection	sink:ldap-injection	sink:log-injection	sink:mvel-injection	sink:ognl-injection	sink:path-injection	sink:pending-intents	sink:regex-use	sink:regex-use[-1]	sink:regex-use[0]	sink:regex-use[]	sink:regex-use[f-1]	sink:regex-use[f1]	sink:regex-use[f]	sink:request-forgery	sink:response-splitting	sink:sql-injection	sink:template-injection	sink:trust-boundary-violation	sink:url-redirection	sink:xpath-injection	sink:xslt-injection	source:android-external-storage-dir	source:contentprovider	source:remote	summary:taint	summary:value
2	actions.osgi			6																																					6
3	android.app	35		103				11					7									17																			18	85
4	android.content	24	31	154									16																			8						4	27		63	91
5	android.database	59		41																												59									41
6	android.net			60																																					45	15
7	android.os		2	122																																		2			41	81
8	android.support.v4.app	11						11
9	android.util	6	16															6																						16
10	android.webkit	3	2								2					1																								2
11	android.widget		1	1																																				1	1
12	androidx.core.app	6		95																		6																			12	83
13	androidx.fragment.app	11						11
14	androidx.slice	2	5	88																		2																	5		27	61
15	antlr			1																																					1
16	cn.hutool.core.codec			1																																					1
17	com.alibaba.druid.sql			1																																					1
18	com.esotericsoftware.kryo.io			1																																					1
19	com.esotericsoftware.kryo5.io			1																																					1
20	com.fasterxml.jackson.core			1																																					1
21	com.fasterxml.jackson.databind	2		6																	2																				6
22	com.google.common.base	4		87																					3	1															63	24
23	com.google.common.cache			17																																						17
24	com.google.common.collect			553																																					2	551
25	com.google.common.flogger	29																29
26	com.google.common.io	8		73			1														7																				72	1
27	com.google.gson			44																																					30	14
28	com.hubspot.jinjava	2																															2
29	com.jcraft.jsch	1		1																										1											1
30	com.mitchellbosecke.pebble	2																															2
31	com.opensymphony.xwork2	67		961																67																					867	94
32	com.rabbitmq.client		21	7																																				21	7
33	com.thoughtworks.xstream	1																			1
34	com.unboundid.ldap.sdk	17															17
35	com.zaxxer.hikari	2																												2
36	flexjson			1																																						1
37	freemarker.cache	1																															1
38	freemarker.template	7																															7
39	groovy.lang	26							26
40	groovy.text	1							1
41	groovy.util	5							5
42	hudson	68	4	2647		4	3				4										51									6										4	2571	76
43	io.jsonwebtoken		2	4																																				2	4
44	io.netty.bootstrap	3																												3
45	io.netty.buffer			207																																					130	77
46	io.netty.channel	9	2																											9										2
47	io.netty.handler.codec	4	13	259																	1									3										13	143	116
48	io.netty.handler.ssl	4																			4
49	io.netty.handler.stream	1																			1
50	io.netty.resolver			1																																					1
51	io.netty.util	2		23																	1									1											21	2
52	jakarta.activation	2		2																	1									1											2
53	jakarta.faces.context	2	7								2																													7
54	jakarta.json			123																																					100	23
55	jakarta.ws.rs.client	1																												1
56	jakarta.ws.rs.container		9																																					9
57	jakarta.ws.rs.core	2		149																															2						94	55
58	jakarta.xml.bind.attachment		2																																					2
59	java.awt			3																																						3
60	java.beans			1																																					1
61	java.io	50		46			22														28																				44	2
62	java.lang	31		94		13												8			5			4			1														57	37
63	java.net	13	3	23																										13										3	23
64	java.nio	49		36			5														43									1											36
65	java.sql	13		2																										4		9									2
66	java.util	45		487			1											34							5	2		1	2												45	442
67	javafx.scene.web	1																												1
68	javax.activation	2		7																	1									1											7
69	javax.faces.context	2	7								2																													7
70	javax.imageio.stream			1																																					1
71	javax.jms		9	57																																				9	57
72	javax.json			123																																					100	23
73	javax.management.remote	2													2
74	javax.naming	7		1											6		1																								1
75	javax.net.ssl	2								2
76	javax.portlet			61																																					61
77	javax.script	1																	1
78	javax.servlet	7	21	2								1									1										3			2						21	2
79	javax.validation	1	1		1																																			1
80	javax.ws.rs.client	1																												1
81	javax.ws.rs.container		9																																					9
82	javax.ws.rs.core	3		149																											1				2						94	55
83	javax.xml.bind.attachment		2																																					2
84	javax.xml.transform	2		6																	1																1				6
85	javax.xml.xpath	3																																		3
86	jenkins			523																																					500	23
87	jodd.json			10																																						10
88	kotlin	16		1849																	14									2											1836	13
89	net.sf.json	2		338																										2											321	17
90	net.sf.saxon.s9api	5																																			5
91	ognl	6																		6
92	okhttp3	4		50																										4											23	27
93	org.acegisecurity			49																																					49
94	org.antlr.runtime	1																			1
95	org.apache.commons.codec			6																																					6
96	org.apache.commons.collections			800																																					17	783
97	org.apache.commons.collections4			800																																					17	783
98	org.apache.commons.compress.archivers.tar			4																																					4
99	org.apache.commons.exec	6				6
100	org.apache.commons.httpclient.util			1																																					1
101	org.apache.commons.io	111		560			2														94									15											546	14
102	org.apache.commons.jelly	6																												6
103	org.apache.commons.jexl2	15												15
104	org.apache.commons.jexl3	15												15
105	org.apache.commons.lang			767																																					596	171
106	org.apache.commons.lang3	6		425																			6																		294	131
107	org.apache.commons.logging	6																6
108	org.apache.commons.net	9	12																		3									6										12
109	org.apache.commons.ognl	6																		6
110	org.apache.commons.text			272																																					220	52
111	org.apache.cxf.catalog	1																												1
112	org.apache.cxf.common.classloader	3																			1									2
113	org.apache.cxf.common.jaxb	1																			1
114	org.apache.cxf.common.logging	6																6
115	org.apache.cxf.configuration.jsse	2								1											1
116	org.apache.cxf.helpers	10																			5															5
117	org.apache.cxf.resource	9																			4									5
118	org.apache.cxf.staxutils	1																			1
119	org.apache.cxf.tools.corba.utils	4																			4
120	org.apache.cxf.tools.util	10																			10
121	org.apache.cxf.transform	3																																			3
122	org.apache.directory.ldap.client.api	1															1
123	org.apache.hadoop.fs			10																																					10
124	org.apache.hadoop.hive.metastore	3																														3
125	org.apache.hc.client5.http.async.methods	84																												84
126	org.apache.hc.client5.http.classic.methods	37																												37
127	org.apache.hc.client5.http.fluent	19																												19
128	org.apache.hc.core5.benchmark	1																												1
129	org.apache.hc.core5.function			1																																					1
130	org.apache.hc.core5.http	73	2	45							1																			72										2	45
131	org.apache.hc.core5.net			18																																					18
132	org.apache.hc.core5.util			24																																					18	6
133	org.apache.hive.hcatalog.templeton	1																														1
134	org.apache.http	48	3	94							2																			46										3	86	8
135	org.apache.ibatis.jdbc	6		57																												6									57
136	org.apache.log4j	11																11
137	org.apache.logging.log4j	359		8														359																							4	4
138	org.apache.shiro.codec			1																																					1
139	org.apache.shiro.jndi	1													1
140	org.apache.struts.beanvalidation.validation.interceptor			4																																					4
141	org.apache.struts2	14		3873																11														3							3839	34
142	org.apache.tools.ant	11																			11
143	org.apache.tools.zip			1																																					1
144	org.apache.velocity.app	4																															4
145	org.apache.velocity.runtime	4																															4
146	org.codehaus.cargo.container.installer	3																			2									1
147	org.codehaus.groovy.control	1							1
148	org.dom4j	20																																		20
149	org.eclipse.jetty.client	1																												1
150	org.fusesource.leveldbjni	1																			1
151	org.geogebra.web.full.main	1																																	1
152	org.gradle.api.file			2																																					2
153	org.hibernate	7																														7
154	org.influxdb	1																												1
155	org.jboss.logging	324																324
156	org.jdbi.v3.core	6																												6
157	org.jenkins.ui.icon			49																																					48	1
158	org.jenkins.ui.symbol			33																																					25	8
159	org.jooq	1																														1
160	org.json			236																																					198	38
161	org.kohsuke.stapler	20	24	363							2										9									4					5					24	352	11
162	org.mvel2	16																	16
163	org.openjdk.jmh.runner.options	1																			1
164	org.owasp.esapi			1																																					1
165	org.scijava.log	13																13
166	org.slf4j	55		6														55																							2	4
167	org.springframework.beans			30																																						30
168	org.springframework.boot.jdbc	1																												1
169	org.springframework.cache			13																																						13
170	org.springframework.context			3																																					3
171	org.springframework.core.io	2																			1									1
172	org.springframework.data.repository			1																																						1
173	org.springframework.http	14		71																										14											61	10
174	org.springframework.jdbc.core	19																														19
175	org.springframework.jdbc.datasource	4																												4
176	org.springframework.jdbc.object	9																														9
177	org.springframework.jndi	1													1
178	org.springframework.ldap	47													33		14
179	org.springframework.security.web.savedrequest		6																																					6
180	org.springframework.ui			32																																						32
181	org.springframework.util	3		142																	3																				90	52
182	org.springframework.validation			13																																					13
183	org.springframework.web.client	13	3																											13										3
184	org.springframework.web.context.request		8																																					8
185	org.springframework.web.multipart		12	13																																				12	13
186	org.springframework.web.reactive.function.client	2																												2
187	org.springframework.web.util			165																																					140	25
188	org.thymeleaf	2		2																													2								2
189	org.xml.sax			1																																					1
190	org.xmlpull.v1		3																																					3
191	org.yaml.snakeyaml			1																																					1
192	play.libs.ws	2																												2
193	play.mvc	1	13	24																														1						13	24
194	ratpack.core.form			3																																					3
195	ratpack.core.handling		6	4																																				6	4
196	ratpack.core.http		10	10																																				10	10
197	ratpack.exec			48																																						48
198	ratpack.form			3																																					3
199	ratpack.func			35																																						35
200	ratpack.handling		6	4																																				6	4
201	ratpack.http		10	10																																				10	10
202	ratpack.util			35																																						35
203	retrofit2	1		1																										1											1