codeql/java/documentation/library-coverage/coverage.csv

1	package	sink	source	summary	sink:bean-validation	sink:command-injection	sink:credentials-key	sink:credentials-password	sink:credentials-username	sink:encryption-iv	sink:file-content-store	sink:fragment-injection	sink:groovy-injection	sink:hostname-verification	sink:html-injection	sink:information-leak	sink:intent-redirection	sink:jexl-injection	sink:jndi-injection	sink:js-injection	sink:ldap-injection	sink:log-injection	sink:mvel-injection	sink:ognl-injection	sink:path-injection	sink:pending-intents	sink:regex-use	sink:regex-use[-1]	sink:regex-use[0]	sink:regex-use[]	sink:regex-use[f-1]	sink:regex-use[f1]	sink:regex-use[f]	sink:request-forgery	sink:response-splitting	sink:sql-injection	sink:template-injection	sink:trust-boundary-violation	sink:url-redirection	sink:xpath-injection	sink:xslt-injection	source:android-external-storage-dir	source:contentprovider	source:database	source:environment	source:file	source:remote	summary:taint	summary:value
2	actions.osgi			6																																												6
3	android.app	35		103								11					7									17																						18	85
4	android.content	24	31	154													16																			8						4	27					63	91
5	android.database	59		41																																59												41
6	android.net			60																																												45	15
7	android.os		2	122																																						2						41	81
8	android.support.v4.app	11										11
9	android.util	6	16																			6																									16
10	android.webkit	3	2												2					1																											2
11	android.widget		1	1																																											1	1
12	androidx.core.app	6		95																						6																						12	83
13	androidx.fragment.app	11										11
14	androidx.slice	2	5	88																						2																	5					27	61
15	antlr			1																																												1
16	ch.ethz.ssh2	2						1	1
17	cn.hutool.core.codec			1																																												1
18	com.alibaba.druid.sql			1																																												1
19	com.alibaba.fastjson2			1																																												1
20	com.amazonaws.auth	2					2
21	com.auth0.jwt.algorithms	6					6
22	com.azure.identity	3					1	1	1
23	com.esotericsoftware.kryo.io			1																																												1
24	com.esotericsoftware.kryo5.io			1																																												1
25	com.fasterxml.jackson.core			1																																												1
26	com.fasterxml.jackson.databind	2		6																					2																							6
27	com.google.common.base	4		87																									3	1																		63	24
28	com.google.common.cache			17																																													17
29	com.google.common.collect			553																																												2	551
30	com.google.common.flogger	29																				29
31	com.google.common.io	8		73							1														7																							72	1
32	com.google.gson			44																																												30	14
33	com.hubspot.jinjava	2																																			2
34	com.jcraft.jsch	5		1				2	2																									1														1
35	com.microsoft.sqlserver.jdbc	4						2	2
36	com.mitchellbosecke.pebble	2																																			2
37	com.mongodb	10						4	6
38	com.opensymphony.xwork2	67		961																				67																								867	94
39	com.rabbitmq.client		21	7																																											21	7
40	com.sshtools.j2ssh.authentication	3						1	2
41	com.sun.crypto.provider	19					17	2
42	com.sun.jndi.ldap	4							4
43	com.sun.net.httpserver	3						1	2
44	com.sun.net.ssl	3						3
45	com.sun.rowset	3						2	1
46	com.sun.security.auth.module	2						2
47	com.sun.security.ntlm	5						3	2
48	com.sun.security.sasl.digest	3						2	1
49	com.thoughtworks.xstream	1																							1
50	com.trilead.ssh2	13					2	4	7
51	com.unboundid.ldap.sdk	17																			17
52	com.zaxxer.hikari	2																																2
53	flexjson			1																																													1
54	freemarker.cache	1																																			1
55	freemarker.template	7																																			7
56	groovy.lang	26											26
57	groovy.text	1											1
58	groovy.util	5											5
59	hudson	68	9	2647		4					3				4										51									6												5	4	2571	76
60	io.jsonwebtoken		2	4																																											2	4
61	io.netty.bootstrap	3																																3
62	io.netty.buffer			207																																												130	77
63	io.netty.channel	9	2																															9													2
64	io.netty.handler.codec	4	13	259																					1									3													13	143	116
65	io.netty.handler.ssl	4																							4
66	io.netty.handler.stream	1																							1
67	io.netty.resolver			1																																												1
68	io.netty.util	2		23																					1									1														21	2
69	jakarta.activation	2		2																					1									1														2
70	jakarta.faces.context	2	7												2																																7
71	jakarta.json			123																																												100	23
72	jakarta.ws.rs.client	1																																1
73	jakarta.ws.rs.container		9																																												9
74	jakarta.ws.rs.core	2		149																																			2									94	55
75	jakarta.xml.bind.attachment		2																																												2
76	java.awt			3																																													3
77	java.beans			1																																												1
78	java.io	50	1	46							22														28																					1		44	2
79	java.lang	31	3	94		13																8			5			4			1														3			57	37
80	java.net	15	3	23				1	1																									13													3	23
81	java.nio	49		36							5														43									1														36
82	java.security	16					6	10
83	java.sql	15	1	2				1	1																									4		9								1				2
84	java.util	45	2	519							1											34							5	2		1	2												2			45	474
85	javafx.scene.web	1																																1
86	javax.activation	2		7																					1									1														7
87	javax.crypto	16		4			11	3		2																																						4
88	javax.faces.context	2	7												2																																7
89	javax.imageio.stream			1																																												1
90	javax.jms		9	57																																											9	57
91	javax.json			123																																												100	23
92	javax.management	2		1															2																													1
93	javax.naming	7		1															6		1																											1
94	javax.net.ssl	4						2						2
95	javax.portlet			61																																												61
96	javax.print.attribute.standard	2							2
97	javax.script	1																					1
98	javax.security.auth.callback	1						1
99	javax.security.auth.kerberos	6					4	2
100	javax.servlet	7	21	2												1									1										3			2									21	2
101	javax.sql	7						4	3
102	javax.validation	1	1		1																																										1
103	javax.ws.rs.client	1																																1
104	javax.ws.rs.container		9																																												9
105	javax.ws.rs.core	3		149																															1				2									94	55
106	javax.xml.bind.attachment		2																																												2
107	javax.xml.transform	2		6																					1																1							6
108	javax.xml.xpath	3																																						3
109	jenkins			523																																												500	23
110	jodd.json			10																																													10
111	kotlin	16		1849																					14									2														1836	13
112	net.schmizz.sshj	4						2	2
113	net.sf.json	2		338																														2														321	17
114	net.sf.saxon.s9api	5																																							5
115	ognl	6																						6
116	okhttp3	4		50																														4														23	27
117	org.acegisecurity			49																																												49
118	org.antlr.runtime	1																							1
119	org.apache.commons.codec			6																																												6
120	org.apache.commons.collections			800																																												17	783
121	org.apache.commons.collections4			800																																												17	783
122	org.apache.commons.compress.archivers.tar			4																																												4
123	org.apache.commons.exec	6				6
124	org.apache.commons.httpclient.util			1																																												1
125	org.apache.commons.io	111		560							2														94									15														546	14
126	org.apache.commons.jelly	6																																6
127	org.apache.commons.jexl2	15																15
128	org.apache.commons.jexl3	15																15
129	org.apache.commons.lang			767																																												596	171
130	org.apache.commons.lang3	6		425																							6																					294	131
131	org.apache.commons.logging	6																				6
132	org.apache.commons.net	13	12					2	2																3									6													12
133	org.apache.commons.ognl	6																						6
134	org.apache.commons.text			272																																												220	52
135	org.apache.cxf.catalog	1																																1
136	org.apache.cxf.common.classloader	3																							1									2
137	org.apache.cxf.common.jaxb	1																							1
138	org.apache.cxf.common.logging	6																				6
139	org.apache.cxf.configuration.jsse	2												1											1
140	org.apache.cxf.helpers	10																							5															5
141	org.apache.cxf.resource	9																							4									5
142	org.apache.cxf.staxutils	1																							1
143	org.apache.cxf.tools.corba.utils	4																							4
144	org.apache.cxf.tools.util	10																							10
145	org.apache.cxf.transform	3																																							3
146	org.apache.directory.ldap.client.api	1																			1
147	org.apache.hadoop.fs			10																																												10
148	org.apache.hadoop.hive.metastore	3																																		3
149	org.apache.hc.client5.http.async.methods	84																																84
150	org.apache.hc.client5.http.classic.methods	37																																37
151	org.apache.hc.client5.http.fluent	19																																19
152	org.apache.hc.core5.benchmark	1																																1
153	org.apache.hc.core5.function			1																																												1
154	org.apache.hc.core5.http	73	2	45											1																			72													2	45
155	org.apache.hc.core5.net			18																																												18
156	org.apache.hc.core5.util			24																																												18	6
157	org.apache.hive.hcatalog.templeton	1																																		1
158	org.apache.http	48	3	95											2																			46													3	86	9
159	org.apache.ibatis.jdbc	6		57																																6												57
160	org.apache.log4j	11																				11
161	org.apache.logging.log4j	359		8																		359																										4	4
162	org.apache.shiro.codec			1																																												1
163	org.apache.shiro.jndi	1																	1
164	org.apache.shiro.mgt	1					1
165	org.apache.sshd.client.session	3						1	2
166	org.apache.struts.beanvalidation.validation.interceptor			4																																												4
167	org.apache.struts2	14		3873																				11														3										3839	34
168	org.apache.tools.ant	11																							11
169	org.apache.tools.zip			1																																												1
170	org.apache.velocity.app	4																																			4
171	org.apache.velocity.runtime	4																																			4
172	org.codehaus.cargo.container.installer	3																							2									1
173	org.codehaus.groovy.control	1											1
174	org.dom4j	20																																						20
175	org.eclipse.jetty.client	1																																1
176	org.fusesource.leveldbjni	1																							1
177	org.geogebra.web.full.main	1																																					1
178	org.gradle.api.file			2																																												2
179	org.hibernate	7																																		7
180	org.influxdb	1																																1
181	org.jboss.logging	324																				324
182	org.jdbi.v3.core	6																																6
183	org.jenkins.ui.icon			49																																												48	1
184	org.jenkins.ui.symbol			33																																												25	8
185	org.jooq	1																																		1
186	org.json			236																																												198	38
187	org.kohsuke.stapler	20	24	363											2										9									4					5								24	352	11
188	org.mvel2	16																					16
189	org.openjdk.jmh.runner.options	1																							1
190	org.owasp.esapi			1																																												1
191	org.scijava.log	13																				13
192	org.slf4j	55		6																		55																										2	4
193	org.springframework.beans			30																																													30
194	org.springframework.boot.jdbc	1																																1
195	org.springframework.cache			13																																													13
196	org.springframework.context			3																																												3
197	org.springframework.core.io	3																							2									1
198	org.springframework.data.repository			1																																													1
199	org.springframework.http	14		77																														14														67	10
200	org.springframework.jdbc.core	19																																		19
201	org.springframework.jdbc.datasource	4																																4
202	org.springframework.jdbc.object	9																																		9
203	org.springframework.jndi	1																	1
204	org.springframework.ldap	47																	33		14
205	org.springframework.security.core.userdetails	2						1	1
206	org.springframework.security.web.savedrequest		6																																												6
207	org.springframework.ui			32																																													32
208	org.springframework.util	3		142																					3																							90	52
209	org.springframework.validation			13																																												13
210	org.springframework.web.client	13	3																															13													3
211	org.springframework.web.context.request		8																																												8
212	org.springframework.web.multipart		12	13																																											12	13
213	org.springframework.web.reactive.function.client	2																																2
214	org.springframework.web.util		9	157																																											9	132	25
215	org.thymeleaf	2		2																																	2											2
216	org.xml.sax			1																																												1
217	org.xmlpull.v1		3																																												3
218	org.yaml.snakeyaml			1																																												1
219	play.libs.ws	2																																2
220	play.mvc	1	13	24																																		1									13	24
221	ratpack.core.form			3																																												3
222	ratpack.core.handling		6	4																																											6	4
223	ratpack.core.http		10	10																																											10	10
224	ratpack.exec			48																																													48
225	ratpack.form			3																																												3
226	ratpack.func			35																																													35
227	ratpack.handling		6	4																																											6	4
228	ratpack.http		10	10																																											10	10
229	ratpack.util			35																																													35
230	retrofit2	1		1																														1														1
231	sun.jvmstat.perfdata.monitor.protocol.local	3							3
232	sun.jvmstat.perfdata.monitor.protocol.rmi	1							1
233	sun.misc	3							3
234	sun.net.ftp	5						2	3
235	sun.net.www.protocol.http	3						2	1
236	sun.security.acl	1							1
237	sun.security.jgss.krb5	2					2
238	sun.security.krb5	9					3	6
239	sun.security.pkcs	4					4
240	sun.security.pkcs11	3					1	2
241	sun.security.provider	2						2
242	sun.security.ssl	3						3
243	sun.security.x509	1					1
244	sun.tools.jconsole	28						13	15