JLLeitschuh/ql | GitHub | Ecosyste.ms: Repos

Loading...

Readme

Loading...

ruby/ql/test/query-tests/security/cwe-300/Gemfile rubygems

jwt = 1.2.3

.github/workflows/atm-check-query-suite.yml actions

./.github/actions/cache-query-compilation * composite
./.github/actions/fetch-codeql * composite
actions/checkout v3 composite
actions/upload-artifact v3 composite

.github/workflows/check-qldoc.yml actions

./.github/actions/fetch-codeql * composite
actions/checkout v3 composite

.github/workflows/check-query-ids.yml actions

actions/checkout v3 composite

.github/workflows/close-stale.yml actions

actions/stale v7 composite

.github/workflows/codeql-analysis.yml actions

actions/checkout v3 composite
actions/setup-dotnet v2 composite
github/codeql-action/analyze main composite
github/codeql-action/init main composite

.github/workflows/compile-queries.yml actions

./.github/actions/cache-query-compilation * composite
./.github/actions/fetch-codeql * composite
actions/checkout v3 composite

.github/workflows/csharp-qltest.yml actions

./.github/actions/cache-query-compilation * composite
./.github/actions/fetch-codeql * composite
./csharp/actions/create-extractor-pack * composite
actions/checkout v3 composite
actions/setup-dotnet v3 composite

.github/workflows/csv-coverage-metrics.yml actions

./.github/actions/fetch-codeql * composite
actions/checkout v3 composite
actions/upload-artifact v3 composite
github/codeql-action/upload-sarif main composite

.github/workflows/csv-coverage-pr-artifacts.yml actions

./merge/.github/actions/fetch-codeql * composite
actions/checkout v3 composite
actions/setup-python v4 composite
actions/upload-artifact v3 composite

.github/workflows/csv-coverage-pr-comment.yml actions

actions/checkout v3 composite
actions/setup-python v4 composite

.github/workflows/csv-coverage-timeseries.yml actions

./script/.github/actions/fetch-codeql * composite
actions/checkout v3 composite
actions/setup-python v4 composite
actions/upload-artifact v3 composite

.github/workflows/csv-coverage-update.yml actions

./ql/.github/actions/fetch-codeql * composite
actions/checkout v3 composite
actions/setup-python v4 composite

.github/workflows/csv-coverage.yml actions

./script/.github/actions/fetch-codeql * composite
actions/checkout v3 composite
actions/setup-python v4 composite
actions/upload-artifact v3 composite

.github/workflows/go-tests-other-os.yml actions

./.github/actions/cache-query-compilation * composite
./.github/actions/fetch-codeql * composite
actions/checkout v2 composite
actions/setup-go v3 composite

.github/workflows/go-tests.yml actions

./.github/actions/cache-query-compilation * composite
./.github/actions/fetch-codeql * composite
actions/checkout v2 composite
actions/setup-go v3 composite
actions/upload-artifact v3 composite

.github/workflows/js-ml-tests.yml actions

./.github/actions/cache-query-compilation * composite
./.github/actions/fetch-codeql * composite
actions/checkout v3 composite

.github/workflows/labeler.yml actions

actions/labeler v4 composite

.github/workflows/mad_modelDiff.yml actions

./codeql-main/.github/actions/fetch-codeql * composite
actions/checkout v3 composite
actions/upload-artifact v3 composite

.github/workflows/mad_regenerate-models.yml actions

./.github/actions/fetch-codeql * composite
actions/checkout v3 composite
actions/upload-artifact v3 composite

.github/workflows/qhelp-pr-preview.yml actions

./.github/actions/fetch-codeql * composite
actions/checkout v3 composite
actions/upload-artifact v3 composite

.github/workflows/ql-for-ql-build.yml actions

./.github/actions/find-latest-bundle * composite
./.github/actions/os-version * composite
actions/cache v3 composite
actions/checkout v3 composite
actions/upload-artifact v3 composite
github/codeql-action/analyze 45955cb1830b640e2c1603ad72ad542a49d47b96 composite
github/codeql-action/init 45955cb1830b640e2c1603ad72ad542a49d47b96 composite

.github/workflows/ql-for-ql-dataset_measure.yml actions

./.github/actions/os-version * composite
actions/cache v3 composite
actions/checkout v3 composite
actions/download-artifact v3 composite
actions/upload-artifact v3 composite
github/codeql-action/init 45955cb1830b640e2c1603ad72ad542a49d47b96 composite

.github/workflows/ql-for-ql-tests.yml actions

./.github/actions/cache-query-compilation * composite
./.github/actions/os-version * composite
actions/cache v3 composite
actions/checkout v3 composite
github/codeql-action/init 45955cb1830b640e2c1603ad72ad542a49d47b96 composite
github/codeql-action/init 77a8d2d10c0b403a8b4aadbd223dc489ecd22683 composite

.github/workflows/query-list.yml actions

./codeql/.github/actions/fetch-codeql * composite
actions/checkout v3 composite
actions/setup-python v4 composite
actions/upload-artifact v3 composite

.github/workflows/ruby-build.yml actions

./.github/actions/cache-query-compilation * composite
./.github/actions/fetch-codeql * composite
./.github/actions/os-version * composite
actions/cache v3 composite
actions/checkout v3 composite
actions/download-artifact v3 composite
actions/upload-artifact v3 composite

.github/workflows/ruby-dataset-measure.yml actions

./.github/actions/fetch-codeql * composite
./ruby/actions/create-extractor-pack * composite
actions/checkout v3 composite
actions/download-artifact v3 composite
actions/upload-artifact v3 composite

.github/workflows/ruby-qltest.yml actions

./.github/actions/cache-query-compilation * composite
./.github/actions/fetch-codeql * composite
./ruby/actions/create-extractor-pack * composite
actions/checkout v3 composite

.github/workflows/swift.yml actions

./.github/actions/fetch-codeql * composite
./swift/actions/build-and-test * composite
./swift/actions/database-upgrade-scripts * composite
./swift/actions/run-integration-tests * composite
./swift/actions/run-ql-tests * composite
actions/checkout v3 composite
actions/setup-python v4 composite
actions/upload-artifact v3 composite
bazelbuild/setup-bazelisk v2 composite
pre-commit/action v3.0.0 composite

.github/workflows/sync-files.yml actions

actions/checkout v3 composite

.github/workflows/validate-change-notes.yml actions

./.github/actions/fetch-codeql * composite
actions/checkout v3 composite

csharp/actions/create-extractor-pack/action.yml actions

actions/setup-dotnet v3 composite

ruby/actions/create-extractor-pack/action.yml actions

./.github/actions/os-version * composite
actions/cache v3 composite

swift/actions/build-and-test/action.yml actions

./swift/actions/share-extractor-pack * composite
actions/cache v3 composite
actions/cache/restore v3 composite
actions/setup-python v4 composite
bazelbuild/setup-bazelisk v2 composite

swift/actions/run-integration-tests/action.yml actions

./.github/actions/cache-query-compilation * composite
./.github/actions/fetch-codeql * composite
./swift/actions/share-extractor-pack * composite
actions/setup-python v4 composite
actions/upload-artifact v3 composite
swift-actions/setup-swift 194625b58a582570f61cc707c3b558086c26b723 composite

swift/actions/run-ql-tests/action.yml actions

./.github/actions/cache-query-compilation * composite
./.github/actions/fetch-codeql * composite
./swift/actions/share-extractor-pack * composite

swift/actions/share-extractor-pack/action.yml actions

actions/cache v3 composite

python/tools/recorded-call-graph-metrics/setup.py pypi

lxml *

swift/codegen/requirements.txt pypi

ruby/ql/test/library-tests/ast/gems/Gemfile rubygems

another_gem = 3.1.4
foo_gem ~> 2.0
my_gem = 1.0

.github/actions/cache-query-compilation/action.yml actions

actions/cache v3 composite
actions/cache/restore v3 composite

.devcontainer/swift/Dockerfile docker

mcr.microsoft.com/vscode/devcontainers/cpp 0-ubuntu-22.04 build

go/go.mod go

golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4
golang.org/x/sys v0.0.0-20220722155257-8c9f86f7a55f
golang.org/x/tools v0.1.12
golang.org/x/xerrors v0.0.0-20200804184101-5ec99f83aff1

go/ql/test/experimental/CWE-090/go.mod go

github.com/go-ldap/ldap v3.0.3+incompatible
github.com/go-ldap/ldap/v3 v3.4.1
github.com/jtblin/go-ldap-client v0.0.0-20170223121919-b73f66626b33
gopkg.in/asn1-ber.v1 v1.0.0-20181015200546-f715ec2f112d
gopkg.in/ldap.v2 v2.5.1

go/ql/test/experimental/CWE-090/vendor/gopkg.in/ldap.v2/depstubber_reflect_635541987/go.mod go

github.com/go-ldap/ldap v3.0.3+incompatible
github.com/go-ldap/ldap/v3 v3.4.1
github.com/jtblin/go-ldap-client v0.0.0-20170223121919-b73f66626b33
gopkg.in/asn1-ber.v1 v1.0.0-20181015200546-f715ec2f112d
gopkg.in/ldap.v2 v2.5.1

go/ql/test/experimental/CWE-1004/go.mod go

github.com/gin-gonic/gin v1.7.1
github.com/gorilla/sessions v1.2.1

go/ql/test/experimental/CWE-285/go.mod go

github.com/msteinert/pam v1.0.0

go/ql/test/experimental/CWE-321/go.mod go

github.com/appleboy/gin-jwt/v2 v2.8.0
github.com/cristalhq/jwt/v3 v3.1.0
github.com/davecgh/go-spew v1.1.1
github.com/gin-contrib/sse v0.1.0
github.com/gin-gonic/gin v1.7.7
github.com/go-kit/kit v0.12.0
github.com/go-kit/log v0.2.0
github.com/go-logfmt/logfmt v0.5.1
github.com/go-playground/locales v0.13.0
github.com/go-playground/universal-translator v0.17.0
github.com/go-playground/validator/v10 v10.4.1
github.com/golang-jwt/jwt/v4 v4.4.1
github.com/golang/protobuf v1.5.2
github.com/json-iterator/go v1.1.12
github.com/leodido/go-urn v1.2.0
github.com/lestrrat/go-jwx v0.9.1
github.com/lestrrat/go-pdebug v0.0.0-20180220043741-569c97477ae8
github.com/mattn/go-isatty v0.0.14
github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd
github.com/modern-go/reflect2 v1.0.2
github.com/pkg/errors v0.9.1
github.com/square/go-jose/v3 v3.0.0-20200630053402-0a67ce9b0693
github.com/ugorji/go/codec v1.1.7
golang.org/x/crypto v0.0.0-20210915214749-c084706c2272
golang.org/x/net v0.0.0-20210917221730-978cfadd31cf
golang.org/x/sys v0.0.0-20210917161153-d61c044b1678
golang.org/x/text v0.3.7
google.golang.org/genproto v0.0.0-20210917145530-b395a37504d4
google.golang.org/grpc v1.40.0
google.golang.org/protobuf v1.27.1
gopkg.in/square/go-jose.v2 v2.6.0
gopkg.in/yaml.v2 v2.2.8

go/ql/test/experimental/CWE-400/go.mod go

gorm.io/gorm v1.21.12

go/ql/test/experimental/CWE-918/go.mod go

github.com/gin-gonic/gin v1.6.3
github.com/go-chi/chi v4.1.2+incompatible
github.com/gorilla/mux v1.8.0
github.com/gorilla/websocket v1.4.2
github.com/kr/text v0.2.0
github.com/niemeyer/pretty v0.0.0-20200227124842-a10e7caefd8e
github.com/stretchr/testify v1.6.0
golang.org/x/net v0.0.0-20210405180319-a5a99cb37ef4
gopkg.in/check.v1 v1.0.0-20200227125254-8fa46927fb4f

go/ql/test/experimental/InconsistentCode/go.mod go

gorm.io/gorm v1.21.12

go/ql/test/experimental/frameworks/CleverGo/go.mod go

clevergo.tech/clevergo v0.5.2

go/ql/test/experimental/frameworks/Fiber/go.mod go

github.com/gofiber/fiber v1.14.6
github.com/gofiber/utils v0.0.10

go/ql/test/library-tests/semmle/go/Files/go.mod go

github.com/github/nonexistent v0.0.0

go/ql/test/library-tests/semmle/go/Function/go.mod go

github.com/anotherpkg v0.0.0-20200203000000-0000000000000

go/ql/test/library-tests/semmle/go/GoModExpr/go.mod go

github.com/Masterminds/squirrel v1.2.0
github.com/Sirupsen/logrus v1.4.1
github.com/github/codeql-go v1.23.2-0.20200302182241-5e71a04fdf30
github.com/gorilla/mux v1.7.4
golang.org/x/tools v0.0.0-20200109174759-ac4f524c1612

go/ql/test/library-tests/semmle/go/Packages/go.mod go

github.com/nonexistent-test-pkg v0.0.0-20200203000000-0000000000000

go/ql/test/library-tests/semmle/go/concepts/LoggerCall/go.mod go

github.com/golang/glog v0.0.0-20160126235308-23def4e6c14b
github.com/sirupsen/logrus v1.7.0
k8s.io/klog v1.0.0

go/ql/test/library-tests/semmle/go/dataflow/ExternalFlow/go.mod go

github.com/nonexistent/test v0.0.0-20200203000000-0000000000000

go/ql/test/library-tests/semmle/go/dataflow/ExternalFlowVarArgs/go.mod go

github.com/nonexistent/test v0.0.0-20200203000000-0000000000000

go/ql/test/library-tests/semmle/go/dataflow/VarArgsWithFunctionModels/go.mod go

github.com/nonexistent/test v0.0.0-20200203000000-0000000000000

go/ql/test/library-tests/semmle/go/dependencies/codeql-go/go.mod go

golang.org/x/mod v0.2.0
golang.org/x/tools v0.0.0-20200302225559-9b52d559c609

go/ql/test/library-tests/semmle/go/dependencies/fabric-snaps/go.mod go

github.com/DATA-DOG/godog v0.7.4
github.com/cactus/go-statsd-client v3.1.1+incompatible
github.com/cloudflare/cfssl v0.0.0-20180323000720-5d63dbd981b5
github.com/facebookgo/clock v0.0.0-20150410010913-600d898af40a
github.com/fsouza/go-dockerclient v1.3.0
github.com/go-kit/kit v0.7.0
github.com/go-logfmt/logfmt v0.4.0
github.com/golang/protobuf v1.2.0
github.com/google/certificate-transparency-go v0.0.0-20180219093839-391726f8973d
github.com/hyperledger/fabric v1.4.0
github.com/hyperledger/fabric-sdk-go v0.0.0-20190125204638-b490519efff9
github.com/onsi/gomega v1.5.0
github.com/op/go-logging v0.0.0-20160315200505-970db520ece7
github.com/pkg/errors v0.8.1
github.com/rs/xid v0.0.0-20170604230408-02dd45c33376
github.com/securekey/fabric-snaps/membershipsnap/pkg/membership v0.0.0
github.com/securekey/fabric-snaps/util/rolesmgr v0.4.0
github.com/securekey/fabric-snaps/util/statemgr v0.4.0
github.com/spf13/cobra v0.0.3
github.com/spf13/pflag v1.0.3
github.com/spf13/viper v0.0.0-20171227194143-aafc9e6bc7b7
github.com/stretchr/testify v1.3.0
github.com/uber-go/tally v3.3.2+incompatible
github.com/xeipuuv/gojsonpointer v0.0.0-20170225233418-6fe8760cad35
github.com/xeipuuv/gojsonreference v0.0.0-20150808065054-e02fc20de94c
github.com/xeipuuv/gojsonschema v0.0.0-20170528113821-0c8571ac0ce1
golang.org/x/crypto v0.0.0-20181001203147-e3636079e1a4
golang.org/x/net v0.0.0-20181003013248-f5e5bdd77824
golang.org/x/tools v0.0.0-20181026183834-f60e5f99f081
google.golang.org/grpc v1.17.0

go/ql/test/library-tests/semmle/go/dependencies/hrm-profile-tool/go.mod go

github.com/ajstarks/svgo v0.0.0-20180830174826-7338bd80e790
github.com/clj/hrm-profile-tool/cmd/hrm v0.0.0
github.com/clj/hrm-profile-tool/instructions v0.0.0
github.com/clj/hrm-profile-tool/profile v0.0.0
github.com/clj/hrm-profile-tool/render v0.0.0

go/ql/test/library-tests/semmle/go/dependencies/sweb/go.mod go

github.com/Joker/jade v1.0.0
github.com/Shopify/goreferrer v0.0.0-20181106222321-ec9c9a553398
github.com/aymerick/raymond v2.0.2+incompatible
github.com/eknkc/amber v0.0.0-20171010120322-cdade1c07385
github.com/fatih/structs v1.1.0
github.com/flosch/pongo2 v0.0.0-20190707114632-bbf5a6c351f4
github.com/iris-contrib/blackfriday v2.0.0+incompatible
github.com/iris-contrib/formBinder v0.0.0-20190104093907-fbd5963f41e1
github.com/iris-contrib/go.uuid v2.0.0+incompatible
github.com/json-iterator/go v1.1.6
github.com/kataras/golog v0.0.0-20190624001437-99c81de45f40
github.com/kataras/iris v11.1.1+incompatible
github.com/kataras/pio v0.0.0-20190103105442-ea782b38602d
github.com/klauspost/compress v1.7.2
github.com/klauspost/cpuid v1.2.1
github.com/microcosm-cc/bluemonday v1.0.2
github.com/mitchellh/go-homedir v1.1.0
github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd
github.com/modern-go/reflect2 v1.0.1
github.com/ryanuber/columnize v2.1.0+incompatible
github.com/shurcooL/sanitized_anchor_name v1.0.0
github.com/spf13/cobra v0.0.5
github.com/spf13/viper v1.4.0

go/ql/test/library-tests/semmle/go/frameworks/Beego/go.mod go

github.com/astaxie/beego v1.12.3

go/ql/test/library-tests/semmle/go/frameworks/BeegoOrm/go.mod go

github.com/astaxie/beego v1.12.3

go/ql/test/library-tests/semmle/go/frameworks/Chi/go.mod go

github.com/go-chi/chi v4.1.2+incompatible

go/ql/test/library-tests/semmle/go/frameworks/CouchbaseV1/go.mod go

github.com/golang/snappy v0.0.2
github.com/google/uuid v1.1.4
github.com/opentracing/opentracing-go v1.2.0
github.com/pkg/errors v0.9.1
golang.org/x/net v0.0.0-20201224014010-6772e930b67b
golang.org/x/sync v0.0.0-20201020160332-67f06af15bc9
gopkg.in/couchbase/gocb.v1 v1.6.7
gopkg.in/couchbase/gocbcore.v7 v7.1.18
gopkg.in/couchbaselabs/gocbconnstr.v1 v1.0.4
gopkg.in/couchbaselabs/gojcbmock.v1 v1.0.4
gopkg.in/couchbaselabs/jsonx.v1 v1.0.0

go/ql/test/library-tests/semmle/go/frameworks/Echo/go.mod go

github.com/labstack/echo/v4 v4.1.17

go/ql/test/library-tests/semmle/go/frameworks/ElazarlGoproxy/go.mod go

github.com/elazarl/goproxy v0.0.0-20201021153353-00ad82a08272
github.com/github/depstubber v0.0.0-20201214172518-12c3da4b7c9d

go/ql/test/library-tests/semmle/go/frameworks/Email/go.mod go

github.com/sendgrid/sendgrid-go v3.5.0+incompatible

go/ql/test/library-tests/semmle/go/frameworks/Encoding/go.mod go

github.com/json-iterator/go v1.1.10

go/ql/test/library-tests/semmle/go/frameworks/EvanphxJsonPatch/go.mod go

github.com/evanphx/json-patch/v5 v5.1.0

go/ql/test/library-tests/semmle/go/frameworks/Gin/go.mod go

github.com/gin-gonic/gin v1.6.2

go/ql/test/library-tests/semmle/go/frameworks/GoKit/go.mod go

github.com/go-kit/kit v0.10.0

go/ql/test/library-tests/semmle/go/frameworks/Gorestful/go.mod go

github.com/emicklei/go-restful/v3 v3.2.0
github.com/json-iterator/go v1.1.10

go/ql/test/library-tests/semmle/go/frameworks/K8sIoApiCoreV1/go.mod go

k8s.io/api v0.20.0
k8s.io/apimachinery v0.20.0

go/ql/test/library-tests/semmle/go/frameworks/K8sIoApimachineryPkgRuntime/go.mod go

k8s.io/apimachinery v0.19.4

go/ql/test/library-tests/semmle/go/frameworks/K8sIoClientGo/go.mod go

github.com/github/depstubber v0.0.0-20201022140002-ee3b8f2acc53
github.com/google/gofuzz v1.2.0
golang.org/x/crypto v0.0.0-20201208171446-5f87f3452ae9
golang.org/x/net v0.0.0-20201207224615-747e23833adb
golang.org/x/oauth2 v0.0.0-20201208152858-08078c50e5b5
golang.org/x/time v0.0.0-20201208040808-7e3f01d25324
k8s.io/client-go v0.19.0
k8s.io/utils v0.0.0-20201110183641-67b214c5f920

go/ql/test/library-tests/semmle/go/frameworks/Macaron/go.mod go

gopkg.in/macaron.v1 v1.3.5

go/ql/test/library-tests/semmle/go/frameworks/Mux/go.mod go

github.com/gorilla/mux v1.7.4

go/ql/test/library-tests/semmle/go/frameworks/NoSQL/go.mod go

github.com/couchbase/gocb/v2 v2.2.0
github.com/google/uuid v1.1.4
github.com/opentracing/opentracing-go v1.2.0
go.mongodb.org/mongo-driver v1.3.2
gopkg.in/couchbase/gocb.v1 v1.6.7
gopkg.in/couchbase/gocbcore.v7 v7.1.18
gopkg.in/couchbaselabs/gocbconnstr.v1 v1.0.4
gopkg.in/couchbaselabs/gojcbmock.v1 v1.0.4
gopkg.in/couchbaselabs/jsonx.v1 v1.0.0

go/ql/test/library-tests/semmle/go/frameworks/Protobuf/go.mod go

github.com/golang/protobuf v1.4.2
google.golang.org/protobuf v1.23.0

go/ql/test/library-tests/semmle/go/frameworks/Revel/go.mod go

go/ql/test/library-tests/semmle/go/frameworks/SQL/Gorm/go.mod go

github.com/jinzhu/gorm v1.9.16
gorm.io/gorm v1.20.0

go/ql/test/library-tests/semmle/go/frameworks/SQL/Sqlx/go.mod go

github.com/jmoiron/sqlx v1.2.0

go/ql/test/library-tests/semmle/go/frameworks/SQL/go.mod go

github.com/Masterminds/squirrel v1.1.0
github.com/go-pg/pg v8.0.6+incompatible
github.com/go-pg/pg/v9 v9.1.3
github.com/go-sql-driver/mysql v1.6.0
github.com/go-xorm/xorm v0.7.9
github.com/lib/pq v1.10.2
github.com/mattn/go-sqlite3 v1.14.7
xorm.io/xorm v1.1.0

go/ql/test/library-tests/semmle/go/frameworks/SQL/gogf/go.mod go

github.com/BurntSushi/toml v0.3.1
github.com/clbanning/mxj v1.8.5-0.20200714211355-ff02cfb8ea28
github.com/fatih/color v1.12.0
github.com/fsnotify/fsnotify v1.4.9
github.com/go-sql-driver/mysql v1.6.0
github.com/gogf/gf v1.16.9
github.com/gomodule/redigo v1.8.5
github.com/gorilla/websocket v1.4.2
github.com/grokify/html-strip-tags-go v0.0.1
github.com/mattn/go-colorable v0.1.8
github.com/mattn/go-isatty v0.0.12
github.com/mattn/go-runewidth v0.0.9
github.com/olekukonko/tablewriter v0.0.5
go.opentelemetry.io/otel v1.0.0
go.opentelemetry.io/otel/trace v1.0.0
golang.org/x/net v0.0.0-20210520170846-37e1c6afe023
golang.org/x/sys v0.0.0-20210423082822-04245dca01da
golang.org/x/text v0.3.6
gopkg.in/yaml.v3 v3.0.0-20210107192922-496545a6307b

go/ql/test/library-tests/semmle/go/frameworks/SQL/gorqlite/go.mod go

github.com/rqlite/gorqlite v0.0.0-20220528150909-c4e99ae96be6

go/ql/test/library-tests/semmle/go/frameworks/Spew/go.mod go

github.com/davecgh/go-spew v1.1.1
github.com/github/depstubber v0.0.0-20200916130315-f3217697abd4

go/ql/test/library-tests/semmle/go/frameworks/StdlibTaintFlow/go.mod go

golang.org/x/net v0.0.0-20201010224723-4f7140c49acb

go/ql/test/library-tests/semmle/go/frameworks/SystemCommandExecutors/go.mod go

github.com/codeskyblue/go-sh v0.0.0-20190412065543-76bd3d59ff27
golang.org/x/crypto v0.0.0-20200323165209-0ec3e9974c59

go/ql/test/library-tests/semmle/go/frameworks/WebSocket/go.mod go

github.com/gobwas/ws v1.0.3
github.com/gorilla/websocket v1.4.2
github.com/sacOO7/gowebsocket v0.0.0-20180719182212-1436bb906a4e
golang.org/x/net v0.0.0-20200505041828-1ed23360d12c
nhooyr.io/websocket v1.8.5

go/ql/test/library-tests/semmle/go/frameworks/XNetHtml/go.mod go

golang.org/x/net v0.0.0-20201010224723-4f7140c49acb

go/ql/test/library-tests/semmle/go/frameworks/Yaml/go.mod go

gopkg.in/yaml.v1 v1.0.0-20140924161607-9f9df34309c0
gopkg.in/yaml.v2 v2.4.0
gopkg.in/yaml.v3 v3.0.0-20210107192922-496545a6307b

go/ql/test/library-tests/semmle/go/frameworks/Zap/go.mod go

go.uber.org/zap v1.16.0

go/ql/test/query-tests/InconsistentCode/WrappedErrorAlwaysNil/go.mod go

github.com/pkg/errors v0.9.1

go/ql/test/query-tests/Security/CWE-020/IncompleteHostnameRegexp/go.mod go

github.com/elazarl/goproxy v0.0.0-20201021153353-00ad82a08272

go/ql/test/query-tests/Security/CWE-079/go.mod go

github.com/gobwas/ws v1.0.3
github.com/gorilla/websocket v1.4.2
golang.org/x/net v0.0.0-20200505041828-1ed23360d12c
nhooyr.io/websocket v1.8.5

go/ql/test/query-tests/Security/CWE-089/go.mod go

github.com/Masterminds/squirrel v1.1.0
go.mongodb.org/mongo-driver v1.3.3

go/ql/test/query-tests/Security/CWE-117/go.mod go

github.com/astaxie/beego v1.12.3
github.com/elazarl/goproxy v0.0.0-20211114080932-d06c3be7c11b
github.com/golang/glog v0.0.0-20160126235308-23def4e6c14b
github.com/kr/text v0.2.0
github.com/sirupsen/logrus v1.8.1
github.com/stretchr/testify v1.6.0
golang.org/x/sys v0.0.0-20200930185726-fdedc70b468f
k8s.io/klog v1.0.0

go/ql/test/query-tests/Security/CWE-312/go.mod go

github.com/golang/glog v0.0.0-20160126235308-23def4e6c14b
github.com/golang/protobuf v1.4.2
github.com/sirupsen/logrus v1.5.0
google.golang.org/protobuf v1.23.0
k8s.io/klog v1.0.0

go/ql/test/query-tests/Security/CWE-322/go.mod go

github.com/github/depstubber v0.0.0-20200618063247-cc37722ad494
golang.org/x/crypto v0.0.0-20200622213623-75b288015ac9

go/ql/test/query-tests/Security/CWE-352/go.mod go

golang.org/x/oauth2 v0.0.0-20200107190931-bf48bf16ab8d

go/ql/test/query-tests/Security/CWE-640/go.mod go

github.com/sendgrid/sendgrid-go v3.5.0+incompatible

go/ql/test/query-tests/Security/CWE-643/go.mod go

github.com/ChrisTrenkamp/goxpath v0.0.0-20190607011252-c5096ec8773d
github.com/antchfx/htmlquery v1.2.2
github.com/antchfx/jsonquery v1.1.2
github.com/antchfx/xmlquery v1.2.3
github.com/antchfx/xpath v1.1.5
github.com/go-xmlpath/xmlpath v0.0.0-20150820204837-860cbeca3ebc
github.com/jbowtie/gokogiri v0.0.0-20190301021639-37f655d3078f
github.com/santhosh-tekuri/xpathparser v1.0.0

go/ql/test/query-tests/Security/CWE-918/go.mod go

github.com/gobwas/ws v1.0.3
github.com/gorilla/websocket v1.4.2
github.com/sacOO7/gowebsocket v0.0.0-20180719182212-1436bb906a4e
golang.org/x/net v0.0.0-20200421231249-e086a090c8fd
nhooyr.io/websocket v1.8.5

go/ql/test/query-tests/Summary/go.mod go

github.com/github/codeql-go v1.27.0

go/ql/test/query-tests/filters/ClassifyFiles/go.mod go

github.com/onsi/ginkgo v1.12.0
github.com/onsi/gomega v1.9.0

java/kotlin-explorer/build.gradle maven

org.jetbrains.kotlin:kotlin-stdlib * implementation
org.jetbrains.kotlinx:kotlinx-metadata-jvm 0.3.0 implementation

java/kotlin-extractor/build.gradle maven

org.jetbrains.kotlin:kotlin-compiler * compileOnly
org.jetbrains.kotlin:kotlin-stdlib * implementation

java/ql/integration-tests/all-platforms/java/gradle-sample/build.gradle maven

org.slf4j:slf4j-api 1.7.21 compile
junit:junit 4.12 testCompile
org.testng:testng 6.8.1 testCompile

java/ql/integration-tests/all-platforms/java/java-web-jsp/pom.xml maven

javax.servlet:javax.servlet-api 3.1.0
org.eclipse.jetty:apache-jsp 9.3.3.v20150827
org.eclipse.jetty:apache-jstl 9.3.3.v20150827
org.eclipse.jetty:jetty-annotations 9.3.3.v20150827
org.eclipse.jetty:jetty-webapp 9.3.3.v20150827
org.owasp.encoder:encoder 1.2
org.owasp.encoder:encoder-jsp 1.2
org.springframework:spring-webmvc 4.0.2.RELEASE

java/ql/integration-tests/all-platforms/java/maven-sample/pom.xml maven

junit:junit 4.11 test

java/ql/integration-tests/all-platforms/java/maven-sample-extract-properties/pom.xml maven

junit:junit 4.11 test

java/ql/integration-tests/all-platforms/java/maven-sample-large-xml-files/pom.xml maven

junit:junit 4.11 test

java/ql/integration-tests/all-platforms/java/maven-sample-small-xml-files/pom.xml maven

junit:junit 4.11 test

java/ql/integration-tests/all-platforms/java/maven-sample-xml-mode-all/pom.xml maven

junit:junit 4.11 test

java/ql/integration-tests/all-platforms/java/maven-sample-xml-mode-byname/pom.xml maven

junit:junit 4.11 test

java/ql/integration-tests/all-platforms/java/maven-sample-xml-mode-disabled/pom.xml maven

junit:junit 4.11 test

java/ql/integration-tests/all-platforms/java/maven-sample-xml-mode-smart/pom.xml maven

junit:junit 4.11 test

java/ql/integration-tests/all-platforms/java/partial-gradle-sample/build.gradle maven

org.slf4j:slf4j-api 1.7.21 compile
junit:junit 4.12 testCompile
org.testng:testng 6.8.1 testCompile

java/ql/integration-tests/all-platforms/kotlin/gradle_kotlinx_serialization/app/build.gradle maven

org.jetbrains.kotlin:kotlin-serialization 1.6.10 implementation
org.jetbrains.kotlinx:kotlinx-serialization-json 1.3.2 implementation

java/ql/test/experimental/query-tests/security/CWE-016/pom.xml maven

java/ql/test/query-tests/maven-dependencies/my-project/pom.xml maven

com.semmle:another-project ${project.version}
commons-lang:commons-lang
semmle-test:semmle-test 1.0

java/ql/test/query-tests/maven-dependencies/pom.xml maven

commons-lang:commons-lang 2.6
semmle-test:semmle-test 0.1

java/ql/test/utils/flowtestcasegenerator/pom.xml maven

com.hubspot.jinjava:jinjava 2.6.0
com.squareup.okhttp3:okhttp 4.9.3
com.squareup.retrofit2:retrofit 2.9.0
com.unboundid:unboundid-ldapsdk 6.0.3
io.pebbletemplates:pebble 3.1.5
javax.servlet:javax.servlet-api 4.0.1
org.apache.directory.api:api-ldap-client-all 2.1.0
org.apache.logging.log4j:log4j-api 2.14.1
org.apache.logging.log4j:log4j-core 2.14.1
org.apache.shiro:shiro-core 1.8.0
org.apache.velocity:velocity-engine-core 2.3
org.freemarker:freemarker 2.3.31
org.jboss.logging:jboss-logging 3.4.2.Final
org.owasp.esapi:esapi 2.2.3.1
org.slf4j:slf4j-api 2.0.0-alpha5
org.springframework.data:spring-data-commons 2.6.3
org.springframework.ldap:spring-ldap 1.3.1.RELEASE
org.springframework.ldap:spring-ldap-core 2.3.5.RELEASE
org.springframework:spring-context 5.3.18
org.springframework:spring-web 5.3.18
org.springframework:spring-webmvc 5.3.18
org.thymeleaf:thymeleaf 3.0.15.RELEASE

javascript/extractor/lib/typescript/package.json npm

@types/node 12.7.11 development
typescript 4.9.3

javascript/ql/experimental/adaptivethreatmodeling/test/modeled_apis/package.json npm

mongodb 2.2.33

javascript/ql/test/ApiGraphs/async-await/package.json npm

fs-extra *

javascript/ql/test/ApiGraphs/bound-args/package.json npm

foo *

javascript/ql/test/ApiGraphs/cyclic/package.json npm

foo *

javascript/ql/test/ApiGraphs/dynamic-prop-read/package.json npm

classes *

javascript/ql/test/ApiGraphs/namespaced-package/package.json npm

@myorg/myotherpkg *

javascript/ql/test/ApiGraphs/nonlocal/package.json npm

express *

javascript/ql/test/ApiGraphs/promises/package.json npm

fs-extra *

javascript/ql/test/ApiGraphs/promisify/package.json npm

bluebird *

javascript/ql/test/ApiGraphs/spread/package.json npm

something *

javascript/ql/test/ApiGraphs/typed/package.json npm

mongodb *
mongoose *

javascript/ql/test/library-tests/DependencyModuleImports/src/dir-with-complex-package-json/package.json npm

a ^1.0.0
c >=1.0.0

javascript/ql/test/library-tests/DependencyModuleImports/src/dir-with-package-json/package.json npm

a 1.0.0
b 1.0.0
c 1.0.0
d 1.0.0

javascript/ql/test/library-tests/DependencyModuleImports/src/package.json npm

b 1.2.0
d 0.2.0

javascript/ql/test/library-tests/Extend/package.json npm

deep ^0.0.2
deep-assign ^2.0.0
deep-extend ^0.6.0
deep-merge ^1.0.0
deepmerge ^2.1.1
defaults ^1.0.3
extend ^3.0.2
extend-shallow ^3.0.2
extend2 ^1.0.0
js-extend ^1.0.1
just-extend ^4.0.0
lodash ^4.17.10
lodash.defaultsdeep ^4.6.0
lodash.mergewith ^4.6.1
merge ^1.2.0
merge-deep ^3.0.2
merge-options ^1.0.1
mixin-deep ^2.0.0
mixin-object ^3.0.0
node.extend ^2.0.0
object-assign ^4.1.1
object.assign ^4.1.0
object.defaults ^1.1.0
ramda ^0.25.0
smart-extend ^1.7.3
util-extend ^1.0.3
utils-merge ^1.0.1
xtend ^4.0.1

javascript/ql/test/library-tests/HtmlSanitizers/package.json npm

ent ^2.2.0
entities ^1.1.1
escape-goat ^1.3.0
he ^1.1.1
html-entities ^1.2.1
lodash ^4.17.10
sanitize-html ^1.18.2
sanitizer ^0.1.3
underscore ^1.9.1
validator ^10.4.0
xss ^1.0.3
xss-filters ^1.2.7

javascript/ql/test/library-tests/JsonParsers/package.json npm

fast-json-parse ^1.0.3
json-parse-better-errors ^1.0.2
json-parse-safe ^1.0.5
json-safe-parse ^0.0.2
parse-json ^4.0.0
safe-json-parse ^4.0.0

javascript/ql/test/library-tests/NPM/src/package.json npm

mocha 1.0 development
esprima *
foo ! garbage string we really can't parse %
something 1.2.3-alpha.beta

javascript/ql/test/library-tests/Portals/src/m3/package.json npm

m1 *
m2 *

javascript/ql/test/library-tests/Portals/src/m5/package.json npm

base-64 *

javascript/ql/test/library-tests/dependencies/src/package.json npm

mocha ~1.0 development
webpack * development
esprima ^0.9.0

javascript/ql/test/library-tests/frameworks/Next/package.json npm

next ^10.0.0
react 17.0.1
react-dom 17.0.1

javascript/ql/test/query-tests/Metrics/ExternalDependencies/src/package.json npm

lib1 1.0.2
lib2 ^1.0.0
lib3 *

javascript/ql/test/query-tests/Metrics/ExternalDependencies/src/sub/subsub/package.json npm

lib1 1.0.3

javascript/ql/test/query-tests/NodeJS/UnresolvableImport/src/package.json npm

bar * development
foo *

javascript/ql/test/query-tests/NodeJS/UnresolvableImport/src/sub/node_modules/othermod/package.json npm

fbjs *

javascript/ql/test/query-tests/NodeJS/UnusedDependency/src/package.json npm

who-knows-whether-this-is-used * development
acorn *
ejs *
eslint-plugin-babel 3.3.0
esprima *
jade *
lodash *
not-really-used-in-install-script-because-of-substring *
not_really_unused *
react *
used-first-in-install-script *
used-first-in-postinstall-script-dotslashed *
used-in-constant-template-require-string *
used-in-custom-script *
used-in-dynamic-template-require-string *
used-in-js-import *
used-in-js-require *
used-in-mjs-import *
used-in-mjs-require *
used-in-postinstall-script *
used-in-preinstall-script *
used-in-require-with-exclamation-mark-separator *
used-in-silly-template-require-string *
used-in-test-script *
used-last-in-install-script *
used-middle-in-install-script *
used-middle-in-install-script-with-some-slashes *

javascript/ql/test/query-tests/Security/CWE-079/DomBasedXss/package.json npm

next ^10.0.0
react 17.0.1
react-dom 17.0.1

javascript/ql/test/query-tests/Security/CWE-079/ReflectedXss/package.json npm

next ^10.0.0
react 17.0.1
react-dom 17.0.1

javascript/ql/test/query-tests/Security/CWE-200/lib/package.json npm

async 3.2.0

javascript/ql/test/query-tests/Security/CWE-300/package.json npm

bad3 http://example.org/foo development
bad4 ftp://example.org/foo development
bar * development
good2 https://example.org/foo development
bad1 http://example.org/foo
bad2 ftp://example.org/foo
foo *
good1 https://example.org/foo

javascript/ql/test/query-tests/Security/CWE-313/package.json npm

mysql *
password *

javascript/ql/test/query-tests/Security/CWE-915/PrototypePollutingMergeCall/src-non-vulnerable-lodash/package.json npm

lodash 4.17.12

javascript/ql/test/query-tests/Security/CWE-915/PrototypePollutingMergeCall/src-vulnerable-lodash/package.json npm

lodash 4.17.4

javascript/ql/test/query-tests/Summary/src/package.json npm

typescript * development

cpp/autobuilder/Semmle.Autobuild.Cpp/Semmle.Autobuild.Cpp.csproj nuget

Microsoft.Build 17.3.2

cpp/autobuilder/Semmle.Autobuild.Cpp.Tests/Semmle.Autobuild.Cpp.Tests.csproj nuget

xunit.runner.visualstudio 2.4.5 development
Microsoft.NET.Test.Sdk 17.4.0
System.IO.FileSystem 4.3.0
System.IO.FileSystem.Primitives 4.3.0
xunit 2.4.2

csharp/autobuilder/Semmle.Autobuild.CSharp/Semmle.Autobuild.CSharp.csproj nuget

Microsoft.Build 17.3.2
Newtonsoft.Json 13.0.2

csharp/autobuilder/Semmle.Autobuild.CSharp.Tests/Semmle.Autobuild.CSharp.Tests.csproj nuget

xunit.runner.visualstudio 2.4.5 development
Microsoft.NET.Test.Sdk 17.4.0
System.IO.FileSystem 4.3.0
System.IO.FileSystem.Primitives 4.3.0
xunit 2.4.2

csharp/autobuilder/Semmle.Autobuild.Shared/Semmle.Autobuild.Shared.csproj nuget

Microsoft.Build 17.3.2

csharp/extractor/Semmle.Extraction/Semmle.Extraction.csproj nuget

GitInfo 2.2.0
Microsoft.CodeAnalysis 4.4.0

csharp/extractor/Semmle.Extraction.CIL/Semmle.Extraction.CIL.csproj nuget

Microsoft.DiaSymReader 1.4.0
Microsoft.DiaSymReader.Native 1.7.0
Microsoft.DiaSymReader.PortablePdb 1.6.0

csharp/extractor/Semmle.Extraction.CSharp/Semmle.Extraction.CSharp.csproj nuget

Microsoft.Build 17.3.2
Microsoft.CodeAnalysis.CSharp 4.4.0

csharp/extractor/Semmle.Extraction.CSharp.Standalone/Semmle.Extraction.CSharp.Standalone.csproj nuget

csharp/extractor/Semmle.Extraction.Tests/Semmle.Extraction.Tests.csproj nuget

xunit.runner.visualstudio 2.4.5 development
Microsoft.NET.Test.Sdk 17.4.0
System.IO.FileSystem 4.3.0
System.IO.FileSystem.Primitives 4.3.0
xunit 2.4.2

csharp/extractor/Semmle.Util/Semmle.Util.csproj nuget

Mono.Posix.NETStandard 1.0.0

csharp/extractor/Semmle.Util.Tests/Semmle.Util.Tests.csproj nuget

xunit.runner.visualstudio 2.4.5 development
Microsoft.NET.Test.Sdk 17.4.0
xunit 2.4.2

csharp/ql/integration-tests/posix-only/dotnet_test/dotnet_test.csproj nuget

python/tools/recorded-call-graph-metrics/requirements.txt pypi

ql/Cargo.lock cargo

adler 1.0.2
aho-corasick 0.7.18
ansi_term 0.12.1
atty 0.2.14
autocfg 1.1.0
bitflags 1.3.2
cc 1.0.73
cfg-if 1.0.0
clap 2.34.0
crc32fast 1.3.2
crossbeam-channel 0.5.5
crossbeam-deque 0.8.1
crossbeam-epoch 0.9.9
crossbeam-utils 0.8.10
either 1.7.0
flate2 1.0.24
hermit-abi 0.1.19
itoa 1.0.2
lazy_static 1.4.0
libc 0.2.126
log 0.4.17
matchers 0.1.0
memchr 2.5.0
memoffset 0.6.5
miniz_oxide 0.5.3
num_cpus 1.13.1
once_cell 1.13.0
pin-project-lite 0.2.9
proc-macro2 1.0.40
quote 1.0.20
rayon 1.5.3
rayon-core 1.9.3
regex 1.6.0
regex-automata 0.1.10
regex-syntax 0.6.27
ryu 1.0.10
scopeguard 1.1.0
serde 1.0.140
serde_derive 1.0.140
serde_json 1.0.82
sharded-slab 0.1.4
smallvec 1.9.0
strsim 0.8.0
syn 1.0.98
textwrap 0.11.0
thread_local 1.1.4
tracing 0.1.35
tracing-attributes 0.1.22
tracing-core 0.1.28
tracing-log 0.1.3
tracing-subscriber 0.3.15
tree-sitter 0.20.8
unicode-ident 1.0.2
unicode-width 0.1.9
valuable 0.1.0
vec_map 0.8.2
winapi 0.3.9
winapi-i686-pc-windows-gnu 0.4.0
winapi-x86_64-pc-windows-gnu 0.4.0

ruby/Cargo.lock cargo

adler 1.0.2
aho-corasick 0.7.18
ansi_term 0.12.1
atty 0.2.14
autocfg 1.0.1
bitflags 1.3.2
cc 1.0.72
cfg-if 1.0.0
clap 3.0.12
crc32fast 1.3.0
crossbeam-channel 0.5.1
crossbeam-deque 0.8.1
crossbeam-epoch 0.9.5
crossbeam-utils 0.8.8
either 1.6.1
encoding 0.2.33
encoding-index-japanese 1.20141219.5
encoding-index-korean 1.20141219.5
encoding-index-simpchinese 1.20141219.5
encoding-index-singlebyte 1.20141219.5
encoding-index-tradchinese 1.20141219.5
encoding_index_tests 0.1.4
flate2 1.0.22
hashbrown 0.11.2
hermit-abi 0.1.19
indexmap 1.8.0
itoa 0.4.8
lazy_static 1.4.0
libc 0.2.111
log 0.4.14
matchers 0.1.0
memchr 2.4.1
memoffset 0.6.5
miniz_oxide 0.4.4
num_cpus 1.13.0
once_cell 1.8.0
os_str_bytes 6.0.0
pin-project-lite 0.2.7
proc-macro2 1.0.33
quote 1.0.10
rayon 1.5.1
rayon-core 1.9.1
regex 1.5.5
regex-automata 0.1.10
regex-syntax 0.6.25
ryu 1.0.9
scopeguard 1.1.0
serde 1.0.131
serde_derive 1.0.131
serde_json 1.0.72
sharded-slab 0.1.4
smallvec 1.7.0
strsim 0.10.0
syn 1.0.82
termcolor 1.1.2
textwrap 0.14.2
thread_local 1.1.4
tracing 0.1.29
tracing-attributes 0.1.18
tracing-core 0.1.21
tracing-log 0.1.2
tracing-subscriber 0.3.3
tree-sitter 0.19.5
unicode-xid 0.2.2
winapi 0.3.9
winapi-i686-pc-windows-gnu 0.4.0
winapi-util 0.1.5
winapi-x86_64-pc-windows-gnu 0.4.0

go/go.sum go

github.com/yuin/goldmark v1.3.5
golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2
golang.org/x/crypto v0.0.0-20191011191535-87dc89f01550
golang.org/x/mod v0.4.2
golang.org/x/mod v0.5.0
golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4
golang.org/x/net v0.0.0-20190404232315-eb5bcb51f2a3
golang.org/x/net v0.0.0-20190620200207-3b0461eec859
golang.org/x/net v0.0.0-20210405180319-a5a99cb37ef4
golang.org/x/sync v0.0.0-20190423024810-112230192c58
golang.org/x/sync v0.0.0-20210220032951-036812b2e83c
golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a
golang.org/x/sys v0.0.0-20190412213103-97732733099d
golang.org/x/sys v0.0.0-20201119102817-f84b799fce68
golang.org/x/sys v0.0.0-20210330210617-4fbd30eecc44
golang.org/x/sys v0.0.0-20210510120138-977fb7262007
golang.org/x/sys v0.0.0-20220722155257-8c9f86f7a55f
golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1
golang.org/x/text v0.3.0
golang.org/x/text v0.3.3
golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e
golang.org/x/tools v0.0.0-20191119224855-298f0cb1881e
golang.org/x/tools v0.1.5
golang.org/x/tools v0.1.12
golang.org/x/xerrors v0.0.0-20190717185122-a985d3407aa7
golang.org/x/xerrors v0.0.0-20191011141410-1b5146add898
golang.org/x/xerrors v0.0.0-20200804184101-5ec99f83aff1

javascript/extractor/lib/typescript/yarn.lock npm

@types/node 12.7.11
typescript 4.9.3

Ecosyste.ms: Repos

GitHub / JLLeitschuh / ql

Files

Dependencies