Myahr2088/codeql | GitHub | Ecosyste.ms: Repos

Loading...

Readme

Loading...

ruby/ql/test/query-tests/security/cwe-300/Gemfile rubygems

jwt = 1.2.3

.github/workflows/check-implicit-this.yml actions

actions/checkout v3 composite

.github/workflows/check-qldoc.yml actions

./.github/actions/fetch-codeql * composite
actions/checkout v3 composite

.github/workflows/check-query-ids.yml actions

actions/checkout v3 composite

.github/workflows/close-stale.yml actions

actions/stale v8 composite

.github/workflows/codeql-analysis.yml actions

actions/checkout v3 composite
actions/setup-dotnet v3 composite
github/codeql-action/analyze main composite
github/codeql-action/init main composite

.github/workflows/compile-queries.yml actions

./.github/actions/cache-query-compilation * composite
./.github/actions/fetch-codeql * composite
actions/checkout v3 composite

.github/workflows/csharp-qltest.yml actions

./.github/actions/cache-query-compilation * composite
./.github/actions/fetch-codeql * composite
./csharp/actions/create-extractor-pack * composite
actions/checkout v3 composite
actions/setup-dotnet v3 composite

.github/workflows/csv-coverage-metrics.yml actions

./.github/actions/fetch-codeql * composite
actions/checkout v3 composite
actions/upload-artifact v3 composite
github/codeql-action/upload-sarif main composite

.github/workflows/csv-coverage-pr-artifacts.yml actions

./merge/.github/actions/fetch-codeql * composite
actions/checkout v3 composite
actions/setup-python v4 composite
actions/upload-artifact v3 composite

.github/workflows/csv-coverage-pr-comment.yml actions

actions/checkout v3 composite
actions/setup-python v4 composite

.github/workflows/csv-coverage-timeseries.yml actions

./script/.github/actions/fetch-codeql * composite
actions/checkout v3 composite
actions/setup-python v4 composite
actions/upload-artifact v3 composite

.github/workflows/csv-coverage-update.yml actions

./ql/.github/actions/fetch-codeql * composite
actions/checkout v3 composite
actions/setup-python v4 composite

.github/workflows/csv-coverage.yml actions

./script/.github/actions/fetch-codeql * composite
actions/checkout v3 composite
actions/setup-python v4 composite
actions/upload-artifact v3 composite

.github/workflows/fast-forward.yml actions

actions/checkout v3 composite

.github/workflows/go-tests-other-os.yml actions

./.github/actions/cache-query-compilation * composite
./.github/actions/fetch-codeql * composite
actions/checkout v2 composite
actions/setup-go v4 composite

.github/workflows/go-tests.yml actions

./.github/actions/cache-query-compilation * composite
./.github/actions/fetch-codeql * composite
actions/checkout v2 composite
actions/setup-go v4 composite
actions/upload-artifact v3 composite

.github/workflows/js-ml-tests.yml actions

./.github/actions/cache-query-compilation * composite
./.github/actions/fetch-codeql * composite
actions/checkout v3 composite

.github/workflows/labeler.yml actions

actions/labeler v4 composite

.github/workflows/mad_modelDiff.yml actions

./codeql-main/.github/actions/fetch-codeql * composite
actions/checkout v3 composite
actions/upload-artifact v3 composite

.github/workflows/mad_regenerate-models.yml actions

./.github/actions/fetch-codeql * composite
actions/checkout v3 composite
actions/upload-artifact v3 composite

.github/workflows/qhelp-pr-preview.yml actions

./.github/actions/fetch-codeql * composite
actions/checkout v3 composite
actions/upload-artifact v3 composite

.github/workflows/ql-for-ql-build.yml actions

./.github/actions/cache-query-compilation * composite
./.github/actions/os-version * composite
actions/cache v3 composite
actions/checkout v3 composite
actions/upload-artifact v3 composite
github/codeql-action/init v2 composite
github/codeql-action/upload-sarif v2 composite

.github/workflows/ql-for-ql-dataset_measure.yml actions

./.github/actions/os-version * composite
actions/cache v3 composite
actions/checkout v3 composite
actions/download-artifact v3 composite
actions/upload-artifact v3 composite
github/codeql-action/init v2 composite

.github/workflows/ql-for-ql-tests.yml actions

./.github/actions/cache-query-compilation * composite
./.github/actions/os-version * composite
actions/cache v3 composite
actions/checkout v3 composite
github/codeql-action/init v2 composite

.github/workflows/query-list.yml actions

./codeql/.github/actions/fetch-codeql * composite
actions/checkout v3 composite
actions/setup-python v4 composite
actions/upload-artifact v3 composite

.github/workflows/ruby-build.yml actions

./.github/actions/cache-query-compilation * composite
./.github/actions/fetch-codeql * composite
./.github/actions/os-version * composite
actions/cache v3 composite
actions/checkout v3 composite
actions/download-artifact v3 composite
actions/upload-artifact v3 composite

.github/workflows/ruby-dataset-measure.yml actions

./.github/actions/fetch-codeql * composite
./ruby/actions/create-extractor-pack * composite
actions/checkout v3 composite
actions/download-artifact v3 composite
actions/upload-artifact v3 composite

.github/workflows/ruby-qltest.yml actions

./.github/actions/cache-query-compilation * composite
./.github/actions/fetch-codeql * composite
./ruby/actions/create-extractor-pack * composite
actions/checkout v3 composite

.github/workflows/swift.yml actions

./.github/actions/fetch-codeql * composite
./swift/actions/build-and-test * composite
./swift/actions/database-upgrade-scripts * composite
./swift/actions/run-integration-tests * composite
./swift/actions/run-ql-tests * composite
actions/checkout v3 composite
actions/setup-python v4 composite
actions/upload-artifact v3 composite
bazelbuild/setup-bazelisk v2 composite
pre-commit/action v3.0.0 composite

.github/workflows/sync-files.yml actions

actions/checkout v3 composite

.github/workflows/tree-sitter-extractor-test.yml actions

actions/checkout v3 composite

.github/workflows/validate-change-notes.yml actions

./.github/actions/fetch-codeql * composite
actions/checkout v3 composite

csharp/actions/create-extractor-pack/action.yml actions

actions/setup-dotnet v3 composite

javascript/ql/test/query-tests/Security/CWE-094/ExpressionInjection/action2/action.yml actions

Dockerfile * docker

ruby/actions/create-extractor-pack/action.yml actions

./.github/actions/os-version * composite
actions/cache v3 composite

swift/actions/build-and-test/action.yml actions

./swift/actions/share-extractor-pack * composite
actions/cache v3 composite
actions/cache/restore v3 composite
actions/setup-python v4 composite
bazelbuild/setup-bazelisk v2 composite

swift/actions/run-integration-tests/action.yml actions

./.github/actions/cache-query-compilation * composite
./.github/actions/fetch-codeql * composite
./swift/actions/share-extractor-pack * composite
actions/setup-python v4 composite
actions/upload-artifact v3 composite
swift-actions/setup-swift 65540b95f51493d65f5e59e97dcef9629ddf11bf composite

swift/actions/run-ql-tests/action.yml actions

./.github/actions/cache-query-compilation * composite
./.github/actions/fetch-codeql * composite
./swift/actions/share-extractor-pack * composite

swift/actions/share-extractor-pack/action.yml actions

actions/cache v3 composite

javascript/ql/test/query-tests/Security/CWE-915/PrototypePollutingMergeCall/src-non-vulnerable-lodash/package.json npm

lodash 4.17.12

javascript/ql/test/query-tests/Security/CWE-915/PrototypePollutingMergeCall/src-vulnerable-lodash/package.json npm

lodash 4.17.4

javascript/ql/test/query-tests/Summary/src/package.json npm

typescript * development

ql/buramu/tree-sitter-blame/package.json npm

tree-sitter-cli ^0.20.7 development
nan ^2.12.1

cpp/autobuilder/Semmle.Autobuild.Cpp/Semmle.Autobuild.Cpp.csproj nuget

Microsoft.Build 17.3.2

cpp/autobuilder/Semmle.Autobuild.Cpp.Tests/Semmle.Autobuild.Cpp.Tests.csproj nuget

xunit.runner.visualstudio 2.4.5 development
Microsoft.NET.Test.Sdk 17.4.0
System.IO.FileSystem 4.3.0
System.IO.FileSystem.Primitives 4.3.0
xunit 2.4.2

csharp/autobuilder/Semmle.Autobuild.CSharp/Semmle.Autobuild.CSharp.csproj nuget

Microsoft.Build 17.3.2
Newtonsoft.Json 13.0.2

csharp/autobuilder/Semmle.Autobuild.CSharp.Tests/Semmle.Autobuild.CSharp.Tests.csproj nuget

xunit.runner.visualstudio 2.4.5 development
Microsoft.NET.Test.Sdk 17.4.0
System.IO.FileSystem 4.3.0
System.IO.FileSystem.Primitives 4.3.0
xunit 2.4.2

csharp/autobuilder/Semmle.Autobuild.Shared/Semmle.Autobuild.Shared.csproj nuget

Microsoft.Build 17.3.2

csharp/extractor/Semmle.Extraction/Semmle.Extraction.csproj nuget

GitInfo 2.2.0
Microsoft.CodeAnalysis 4.4.0

csharp/extractor/Semmle.Extraction.CIL/Semmle.Extraction.CIL.csproj nuget

Microsoft.DiaSymReader 1.4.0
Microsoft.DiaSymReader.Native 1.7.0
Microsoft.DiaSymReader.PortablePdb 1.6.0

csharp/extractor/Semmle.Extraction.CSharp/Semmle.Extraction.CSharp.csproj nuget

Microsoft.Build 17.3.2
Microsoft.CodeAnalysis.CSharp 4.4.0

csharp/extractor/Semmle.Extraction.CSharp.Standalone/Semmle.Extraction.CSharp.Standalone.csproj nuget

csharp/extractor/Semmle.Extraction.Tests/Semmle.Extraction.Tests.csproj nuget

xunit.runner.visualstudio 2.4.5 development
Microsoft.NET.Test.Sdk 17.4.0
System.IO.FileSystem 4.3.0
System.IO.FileSystem.Primitives 4.3.0
xunit 2.4.2

csharp/extractor/Semmle.Util/Semmle.Util.csproj nuget

Mono.Posix.NETStandard 1.0.0
Newtonsoft.Json 13.0.2

csharp/extractor/Semmle.Util.Tests/Semmle.Util.Tests.csproj nuget

xunit.runner.visualstudio 2.4.5 development
Microsoft.NET.Test.Sdk 17.4.0
xunit 2.4.2

csharp/ql/integration-tests/posix-only/dotnet_test/dotnet_test.csproj nuget

csharp/ql/integration-tests/posix-only/dotnet_test_mstest/dotnet_test_mstest.csproj nuget

misc/codegen/requirements.txt pypi

python/tools/recorded-call-graph-metrics/requirements.txt pypi

python/tools/recorded-call-graph-metrics/setup.py pypi

lxml *

ruby/ql/test/library-tests/ast/gems/Gemfile rubygems

another_gem = 3.1.4
foo_gem ~> 2.0
my_gem = 1.0

ruby/ql/test/library-tests/frameworks/Twirp/Gemfile rubygems

rack >= 0
twirp >= 0
webrick >= 0

.github/actions/cache-query-compilation/action.yml actions

actions/cache v3 composite
actions/cache/restore v3 composite
actions/github-script v6 composite

shared/tree-sitter-extractor/Cargo.toml cargo

rand 0.8.5 development
chrono 0.4.19
encoding 0.2
flate2 1.0
lazy_static 1.4.0
num_cpus 1.14.0
rayon 1.5.0
regex 1.7.1
serde 1.0
serde_json 1.0
tracing 0.1
tree-sitter 0.20

.devcontainer/swift/Dockerfile docker

mcr.microsoft.com/vscode/devcontainers/cpp 0-ubuntu-22.04 build

go/go.mod go

golang.org/x/mod v0.8.0
golang.org/x/sys v0.5.0
golang.org/x/tools v0.6.0
golang.org/x/xerrors v0.0.0-20200804184101-5ec99f83aff1

go/ql/integration-tests/all-platforms/go/bazel-sample-1/go.mod go

golang.org/x/net v0.0.0-20200505041828-1ed23360d12c

go/ql/integration-tests/all-platforms/go/bazel-sample-2/go.mod go

golang.org/x/net v0.0.0-20200505041828-1ed23360d12c

go/ql/integration-tests/all-platforms/go/diagnostics/package-not-found-with-go-mod/work/go.mod go

github.com/linode/linode-docs-theme v0.0.0-20220622135843-166f108e1933

go/ql/integration-tests/all-platforms/go/go-mod-sample/go.mod go

golang.org/x/net v0.0.0-20200505041828-1ed23360d12c

go/ql/integration-tests/all-platforms/go/make-sample/go.mod go

golang.org/x/net v0.0.0-20200505041828-1ed23360d12c

go/ql/integration-tests/all-platforms/go/ninja-sample/go.mod go

golang.org/x/net v0.0.0-20200505041828-1ed23360d12c

go/ql/integration-tests/all-platforms/go/single-go-mod-and-go-files-not-under-it/subdir/go.mod go

golang.org/x/net v0.0.0-20200505041828-1ed23360d12c

go/ql/integration-tests/all-platforms/go/single-go-mod-in-root/go.mod go

golang.org/x/net v0.0.0-20200505041828-1ed23360d12c

go/ql/integration-tests/all-platforms/go/single-go-mod-not-in-root/subdir/go.mod go

golang.org/x/net v0.0.0-20200505041828-1ed23360d12c

go/ql/integration-tests/all-platforms/go/single-go-work-not-in-root/modules/subdir1/go.mod go

golang.org/x/net v0.0.0-20200505041828-1ed23360d12c

go/ql/integration-tests/all-platforms/go/single-go-work-not-in-root/modules/subdir2/go.mod go

golang.org/x/net v0.0.0-20200505041828-1ed23360d12c

go/ql/integration-tests/all-platforms/go/two-go-mods-nested-none-in-root/subdir0/go.mod go

golang.org/x/net v0.0.0-20200505041828-1ed23360d12c

go/ql/integration-tests/all-platforms/go/two-go-mods-nested-none-in-root/subdir0/subdir1/go.mod go

golang.org/x/net v0.0.0-20200505041828-1ed23360d12c

go/ql/integration-tests/all-platforms/go/two-go-mods-nested-one-in-root/go.mod go

golang.org/x/net v0.0.0-20200505041828-1ed23360d12c

go/ql/integration-tests/all-platforms/go/two-go-mods-nested-one-in-root/subdir1/go.mod go

golang.org/x/net v0.0.0-20200505041828-1ed23360d12c

go/ql/integration-tests/all-platforms/go/two-go-mods-not-nested/subdir1/go.mod go

golang.org/x/net v0.0.0-20200505041828-1ed23360d12c

go/ql/integration-tests/all-platforms/go/two-go-mods-not-nested/subdir2/go.mod go

golang.org/x/net v0.0.0-20200505041828-1ed23360d12c

go/ql/integration-tests/linux-only/go/glide-sample/work/glide.yaml go

golang.org/x/time *

go/ql/test/experimental/CWE-090/go.mod go

github.com/go-ldap/ldap v3.0.3+incompatible
github.com/go-ldap/ldap/v3 v3.4.1
github.com/jtblin/go-ldap-client v0.0.0-20170223121919-b73f66626b33
gopkg.in/asn1-ber.v1 v1.0.0-20181015200546-f715ec2f112d
gopkg.in/ldap.v2 v2.5.1

go/ql/test/experimental/CWE-090/vendor/gopkg.in/ldap.v2/depstubber_reflect_635541987/go.mod go

github.com/go-ldap/ldap v3.0.3+incompatible
github.com/go-ldap/ldap/v3 v3.4.1
github.com/jtblin/go-ldap-client v0.0.0-20170223121919-b73f66626b33
gopkg.in/asn1-ber.v1 v1.0.0-20181015200546-f715ec2f112d
gopkg.in/ldap.v2 v2.5.1

go/ql/test/experimental/CWE-1004/go.mod go

github.com/gin-gonic/gin v1.7.1
github.com/gorilla/sessions v1.2.1

go/ql/test/experimental/CWE-285/go.mod go

github.com/msteinert/pam v1.0.0

go/ql/test/experimental/CWE-321/go.mod go

github.com/BurntSushi/toml v1.2.1
github.com/CloudyKit/fastprinter v0.0.0-20200109182630-33d98a066a53
github.com/CloudyKit/jet/v6 v6.2.0
github.com/Joker/jade v1.1.3
github.com/Shopify/goreferrer v0.0.0-20220729165902-8cddb4f5de06
github.com/andybalholm/brotli v1.0.5
github.com/appleboy/gin-jwt/v2 v2.8.0
github.com/aymerick/douceur v0.2.0
github.com/cespare/xxhash/v2 v2.1.2
github.com/clbanning/mxj/v2 v2.5.5
github.com/cristalhq/jwt/v3 v3.1.0
github.com/davecgh/go-spew v1.1.1
github.com/dgryski/go-rendezvous v0.0.0-20200823014737-9f7001d12a5f
github.com/eknkc/amber v0.0.0-20171010120322-cdade1c07385
github.com/fatih/color v1.13.0
github.com/fatih/structs v1.1.0
github.com/flosch/pongo2/v4 v4.0.2
github.com/fsnotify/fsnotify v1.5.4
github.com/gin-contrib/sse v0.1.0
github.com/gin-gonic/gin v1.7.7
github.com/go-kit/kit v0.12.0
github.com/go-kit/log v0.2.0
github.com/go-logfmt/logfmt v0.5.1
github.com/go-playground/locales v0.13.0
github.com/go-playground/universal-translator v0.17.0
github.com/go-playground/validator/v10 v10.4.1
github.com/go-redis/redis/v8 v8.11.5
github.com/go-sql-driver/mysql v1.6.0
github.com/gogf/gf-jwt/v2 v2.0.1
github.com/gogf/gf/v2 v2.0.0-rc3
github.com/golang-jwt/jwt/v4 v4.5.0
github.com/golang/protobuf v1.5.2
github.com/golang/snappy v0.0.4
github.com/google/uuid v1.3.0
github.com/gorilla/css v1.0.0
github.com/gorilla/websocket v1.5.0
github.com/grokify/html-strip-tags-go v0.0.1
github.com/iris-contrib/middleware/jwt v0.0.0-20230311205048-b568fe9b470f
github.com/iris-contrib/schema v0.0.6
github.com/josharian/intern v1.0.0
github.com/json-iterator/go v1.1.12
github.com/kataras/blocks v0.0.7
github.com/kataras/golog v0.1.8
github.com/kataras/iris/v12 v12.2.0
github.com/kataras/jwt v0.1.8
github.com/kataras/pio v0.0.11
github.com/kataras/sitemap v0.0.6
github.com/kataras/tunnel v0.0.4
github.com/klauspost/compress v1.16.0
github.com/leodido/go-urn v1.2.0
github.com/lestrrat/go-jwx v0.9.1
github.com/lestrrat/go-pdebug v0.0.0-20180220043741-569c97477ae8
github.com/mailgun/raymond/v2 v2.0.48
github.com/mailru/easyjson v0.7.7
github.com/mattn/go-colorable v0.1.9
github.com/mattn/go-isatty v0.0.17
github.com/mattn/go-runewidth v0.0.9
github.com/microcosm-cc/bluemonday v1.0.23
github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd
github.com/modern-go/reflect2 v1.0.2
github.com/olekukonko/tablewriter v0.0.5
github.com/pkg/errors v0.9.1
github.com/russross/blackfriday/v2 v2.1.0
github.com/schollz/closestmatch v2.1.0+incompatible
github.com/sirupsen/logrus v1.8.1
github.com/square/go-jose/v3 v3.0.0-20200630053402-0a67ce9b0693
github.com/tdewolff/minify/v2 v2.12.4
github.com/tdewolff/parse/v2 v2.6.4
github.com/ugorji/go/codec v1.1.7
github.com/valyala/bytebufferpool v1.0.0
github.com/vmihailenco/msgpack/v5 v5.3.5
github.com/vmihailenco/tagparser/v2 v2.0.0
github.com/yosssi/ace v0.0.5
go.opentelemetry.io/otel v1.0.0
go.opentelemetry.io/otel/sdk v1.0.0
go.opentelemetry.io/otel/trace v1.0.0
golang.org/x/crypto v0.7.0
golang.org/x/net v0.8.0
golang.org/x/sys v0.6.0
golang.org/x/text v0.8.0
golang.org/x/time v0.3.0
google.golang.org/genproto v0.0.0-20210917145530-b395a37504d4
google.golang.org/grpc v1.40.0
google.golang.org/protobuf v1.29.0
gopkg.in/ini.v1 v1.67.0
gopkg.in/square/go-jose.v2 v2.6.0
gopkg.in/yaml.v2 v2.4.0
gopkg.in/yaml.v3 v3.0.1

go/ql/test/experimental/CWE-400/go.mod go

gorm.io/gorm v1.21.12

go/ql/test/experimental/CWE-918/go.mod go

github.com/gin-gonic/gin v1.6.3
github.com/go-chi/chi v4.1.2+incompatible
github.com/gorilla/mux v1.8.0
github.com/gorilla/websocket v1.4.2
github.com/kr/text v0.2.0
github.com/niemeyer/pretty v0.0.0-20200227124842-a10e7caefd8e
github.com/stretchr/testify v1.6.0
golang.org/x/net v0.0.0-20210405180319-a5a99cb37ef4
gopkg.in/check.v1 v1.0.0-20200227125254-8fa46927fb4f

go/ql/test/experimental/InconsistentCode/go.mod go

gorm.io/gorm v1.21.12

go/ql/test/experimental/frameworks/CleverGo/go.mod go

clevergo.tech/clevergo v0.5.2

go/ql/test/experimental/frameworks/Fiber/go.mod go

github.com/gofiber/fiber v1.14.6
github.com/gofiber/utils v0.0.10

go/ql/test/library-tests/semmle/go/Files/go.mod go

github.com/github/nonexistent v0.0.0

go/ql/test/library-tests/semmle/go/Function/go.mod go

github.com/anotherpkg v0.0.0-20200203000000-0000000000000

go/ql/test/library-tests/semmle/go/GoModExpr/go.mod go

github.com/Masterminds/squirrel v1.2.0
github.com/Sirupsen/logrus v1.4.1
github.com/github/codeql-go v1.23.2-0.20200302182241-5e71a04fdf30
github.com/gorilla/mux v1.7.4
golang.org/x/tools v0.0.0-20200109174759-ac4f524c1612

go/ql/test/library-tests/semmle/go/Packages/go.mod go

github.com/nonexistent-test-pkg v0.0.0-20200203000000-0000000000000

go/ql/test/library-tests/semmle/go/concepts/LoggerCall/go.mod go

github.com/golang/glog v0.0.0-20160126235308-23def4e6c14b
github.com/sirupsen/logrus v1.7.0
k8s.io/klog v1.0.0

go/ql/test/library-tests/semmle/go/dataflow/ExternalFlow/go.mod go

github.com/nonexistent/test v0.0.0-20200203000000-0000000000000

go/ql/test/library-tests/semmle/go/dataflow/ExternalFlowVarArgs/go.mod go

github.com/nonexistent/test v0.0.0-20200203000000-0000000000000

go/ql/test/library-tests/semmle/go/dataflow/VarArgsWithFunctionModels/go.mod go

github.com/nonexistent/test v0.0.0-20200203000000-0000000000000

go/ql/test/library-tests/semmle/go/dependencies/codeql-go/go.mod go

golang.org/x/mod v0.2.0
golang.org/x/tools v0.0.0-20200302225559-9b52d559c609

go/ql/test/library-tests/semmle/go/dependencies/fabric-snaps/go.mod go

github.com/DATA-DOG/godog v0.7.4
github.com/cactus/go-statsd-client v3.1.1+incompatible
github.com/cloudflare/cfssl v0.0.0-20180323000720-5d63dbd981b5
github.com/facebookgo/clock v0.0.0-20150410010913-600d898af40a
github.com/fsouza/go-dockerclient v1.3.0
github.com/go-kit/kit v0.7.0
github.com/go-logfmt/logfmt v0.4.0
github.com/golang/protobuf v1.2.0
github.com/google/certificate-transparency-go v0.0.0-20180219093839-391726f8973d
github.com/hyperledger/fabric v1.4.0
github.com/hyperledger/fabric-sdk-go v0.0.0-20190125204638-b490519efff9
github.com/onsi/gomega v1.5.0
github.com/op/go-logging v0.0.0-20160315200505-970db520ece7
github.com/pkg/errors v0.8.1
github.com/rs/xid v0.0.0-20170604230408-02dd45c33376
github.com/securekey/fabric-snaps/membershipsnap/pkg/membership v0.0.0
github.com/securekey/fabric-snaps/util/rolesmgr v0.4.0
github.com/securekey/fabric-snaps/util/statemgr v0.4.0
github.com/spf13/cobra v0.0.3
github.com/spf13/pflag v1.0.3
github.com/spf13/viper v0.0.0-20171227194143-aafc9e6bc7b7
github.com/stretchr/testify v1.3.0
github.com/uber-go/tally v3.3.2+incompatible
github.com/xeipuuv/gojsonpointer v0.0.0-20170225233418-6fe8760cad35
github.com/xeipuuv/gojsonreference v0.0.0-20150808065054-e02fc20de94c
github.com/xeipuuv/gojsonschema v0.0.0-20170528113821-0c8571ac0ce1
golang.org/x/crypto v0.0.0-20181001203147-e3636079e1a4
golang.org/x/net v0.0.0-20181003013248-f5e5bdd77824
golang.org/x/tools v0.0.0-20181026183834-f60e5f99f081
google.golang.org/grpc v1.17.0

go/ql/test/library-tests/semmle/go/dependencies/hrm-profile-tool/go.mod go

github.com/ajstarks/svgo v0.0.0-20180830174826-7338bd80e790
github.com/clj/hrm-profile-tool/cmd/hrm v0.0.0
github.com/clj/hrm-profile-tool/instructions v0.0.0
github.com/clj/hrm-profile-tool/profile v0.0.0
github.com/clj/hrm-profile-tool/render v0.0.0

go/ql/test/library-tests/semmle/go/dependencies/sweb/go.mod go

github.com/Joker/jade v1.0.0
github.com/Shopify/goreferrer v0.0.0-20181106222321-ec9c9a553398
github.com/aymerick/raymond v2.0.2+incompatible
github.com/eknkc/amber v0.0.0-20171010120322-cdade1c07385
github.com/fatih/structs v1.1.0
github.com/flosch/pongo2 v0.0.0-20190707114632-bbf5a6c351f4
github.com/iris-contrib/blackfriday v2.0.0+incompatible
github.com/iris-contrib/formBinder v0.0.0-20190104093907-fbd5963f41e1
github.com/iris-contrib/go.uuid v2.0.0+incompatible
github.com/json-iterator/go v1.1.6
github.com/kataras/golog v0.0.0-20190624001437-99c81de45f40
github.com/kataras/iris v11.1.1+incompatible
github.com/kataras/pio v0.0.0-20190103105442-ea782b38602d
github.com/klauspost/compress v1.7.2
github.com/klauspost/cpuid v1.2.1
github.com/microcosm-cc/bluemonday v1.0.2
github.com/mitchellh/go-homedir v1.1.0
github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd
github.com/modern-go/reflect2 v1.0.1
github.com/ryanuber/columnize v2.1.0+incompatible
github.com/shurcooL/sanitized_anchor_name v1.0.0
github.com/spf13/cobra v0.0.5
github.com/spf13/viper v1.4.0

go/ql/test/library-tests/semmle/go/frameworks/Beego/go.mod go

github.com/astaxie/beego v1.12.3

go/ql/test/library-tests/semmle/go/frameworks/BeegoOrm/go.mod go

github.com/astaxie/beego v1.12.3

go/ql/test/library-tests/semmle/go/frameworks/Chi/go.mod go

github.com/go-chi/chi v4.1.2+incompatible

go/ql/test/library-tests/semmle/go/frameworks/CouchbaseV1/go.mod go

github.com/golang/snappy v0.0.2
github.com/google/uuid v1.1.4
github.com/opentracing/opentracing-go v1.2.0
github.com/pkg/errors v0.9.1
golang.org/x/net v0.0.0-20201224014010-6772e930b67b
golang.org/x/sync v0.0.0-20201020160332-67f06af15bc9
gopkg.in/couchbase/gocb.v1 v1.6.7
gopkg.in/couchbase/gocbcore.v7 v7.1.18
gopkg.in/couchbaselabs/gocbconnstr.v1 v1.0.4
gopkg.in/couchbaselabs/gojcbmock.v1 v1.0.4
gopkg.in/couchbaselabs/jsonx.v1 v1.0.0

go/ql/test/library-tests/semmle/go/frameworks/Echo/go.mod go

github.com/labstack/echo/v4 v4.1.17

go/ql/test/library-tests/semmle/go/frameworks/ElazarlGoproxy/go.mod go

github.com/elazarl/goproxy v0.0.0-20201021153353-00ad82a08272
github.com/github/depstubber v0.0.0-20201214172518-12c3da4b7c9d

go/ql/test/library-tests/semmle/go/frameworks/Email/go.mod go

github.com/sendgrid/sendgrid-go v3.5.0+incompatible

go/ql/test/library-tests/semmle/go/frameworks/Encoding/go.mod go

github.com/json-iterator/go v1.1.10

go/ql/test/library-tests/semmle/go/frameworks/EvanphxJsonPatch/go.mod go

github.com/evanphx/json-patch/v5 v5.1.0

go/ql/test/library-tests/semmle/go/frameworks/Gin/go.mod go

github.com/gin-gonic/gin v1.6.2

go/ql/test/library-tests/semmle/go/frameworks/GoKit/go.mod go

github.com/go-kit/kit v0.10.0

go/ql/test/library-tests/semmle/go/frameworks/GoMicro/go.mod go

go-micro.dev/v4 v4.10.2
google.golang.org/protobuf v1.28.1

go/ql/test/library-tests/semmle/go/frameworks/Gorestful/go.mod go

github.com/emicklei/go-restful/v3 v3.2.0
github.com/json-iterator/go v1.1.10

go/ql/test/library-tests/semmle/go/frameworks/K8sIoApiCoreV1/go.mod go

k8s.io/api v0.20.0
k8s.io/apimachinery v0.20.0

go/ql/test/library-tests/semmle/go/frameworks/K8sIoApimachineryPkgRuntime/go.mod go

k8s.io/apimachinery v0.19.4

go/ql/test/library-tests/semmle/go/frameworks/K8sIoClientGo/go.mod go

github.com/github/depstubber v0.0.0-20201022140002-ee3b8f2acc53
github.com/google/gofuzz v1.2.0
golang.org/x/crypto v0.0.0-20201208171446-5f87f3452ae9
golang.org/x/net v0.0.0-20201207224615-747e23833adb
golang.org/x/oauth2 v0.0.0-20201208152858-08078c50e5b5
golang.org/x/time v0.0.0-20201208040808-7e3f01d25324
k8s.io/client-go v0.19.0
k8s.io/utils v0.0.0-20201110183641-67b214c5f920

go/ql/test/library-tests/semmle/go/frameworks/Macaron/go.mod go

gopkg.in/macaron.v1 v1.3.5

go/ql/test/library-tests/semmle/go/frameworks/Mux/go.mod go

github.com/gorilla/mux v1.7.4

go/ql/test/library-tests/semmle/go/frameworks/NoSQL/go.mod go

github.com/couchbase/gocb/v2 v2.2.0
github.com/google/uuid v1.1.4
github.com/opentracing/opentracing-go v1.2.0
go.mongodb.org/mongo-driver v1.3.2
gopkg.in/couchbase/gocb.v1 v1.6.7
gopkg.in/couchbase/gocbcore.v7 v7.1.18
gopkg.in/couchbaselabs/gocbconnstr.v1 v1.0.4
gopkg.in/couchbaselabs/gojcbmock.v1 v1.0.4
gopkg.in/couchbaselabs/jsonx.v1 v1.0.0

go/ql/test/library-tests/semmle/go/frameworks/Protobuf/go.mod go

github.com/golang/protobuf v1.4.2
google.golang.org/protobuf v1.23.0

go/ql/test/library-tests/semmle/go/frameworks/Revel/go.mod go

go/ql/test/library-tests/semmle/go/frameworks/SQL/Gorm/go.mod go

github.com/jinzhu/gorm v1.9.16
gorm.io/gorm v1.20.0

go/ql/test/library-tests/semmle/go/frameworks/SQL/Sqlx/go.mod go

github.com/jmoiron/sqlx v1.2.0

go/ql/test/library-tests/semmle/go/frameworks/SQL/bun/go.mod go

github.com/dustin/go-humanize v1.0.1
github.com/google/uuid v1.3.0
github.com/jinzhu/inflection v1.0.0
github.com/kballard/go-shellquote v0.0.0-20180428030007-95032a82bc51
github.com/mattn/go-isatty v0.0.19
github.com/mattn/go-sqlite3 v1.14.16
github.com/remyoudompheng/bigfft v0.0.0-20230129092748-24d4a6f8daec
github.com/tmthrgd/go-hex v0.0.0-20190904060850-447a3041c3bc
github.com/uptrace/bun v1.1.14
github.com/uptrace/bun/dialect/sqlitedialect v1.1.14
github.com/uptrace/bun/driver/sqliteshim v1.1.14
github.com/vmihailenco/msgpack/v5 v5.3.5
github.com/vmihailenco/tagparser/v2 v2.0.0
golang.org/x/mod v0.10.0
golang.org/x/sys v0.8.0
golang.org/x/tools v0.9.1
lukechampine.com/uint128 v1.3.0
modernc.org/cc/v3 v3.40.0
modernc.org/ccgo/v3 v3.16.13
modernc.org/libc v1.22.6
modernc.org/mathutil v1.5.0
modernc.org/memory v1.5.0
modernc.org/opt v0.1.3
modernc.org/sqlite v1.22.1
modernc.org/strutil v1.1.3
modernc.org/token v1.1.0

go/ql/test/library-tests/semmle/go/frameworks/SQL/go.mod go

github.com/Masterminds/squirrel v1.1.0
github.com/go-pg/pg v8.0.6+incompatible
github.com/go-pg/pg/v9 v9.1.3
github.com/go-sql-driver/mysql v1.6.0
github.com/go-xorm/xorm v0.7.9
github.com/kr/text v0.2.0
github.com/lib/pq v1.10.2
github.com/uptrace/bun v1.1.14
github.com/uptrace/bun/dialect/sqlitedialect v1.1.14
github.com/uptrace/bun/driver/sqliteshim v1.1.14
xorm.io/xorm v1.1.0

go/ql/test/library-tests/semmle/go/frameworks/SQL/gogf/go.mod go

github.com/BurntSushi/toml v0.3.1
github.com/clbanning/mxj v1.8.5-0.20200714211355-ff02cfb8ea28
github.com/fatih/color v1.12.0
github.com/fsnotify/fsnotify v1.4.9
github.com/go-sql-driver/mysql v1.6.0
github.com/gogf/gf v1.16.9
github.com/gomodule/redigo v1.8.5
github.com/gorilla/websocket v1.4.2
github.com/grokify/html-strip-tags-go v0.0.1
github.com/mattn/go-colorable v0.1.8
github.com/mattn/go-isatty v0.0.12
github.com/mattn/go-runewidth v0.0.9
github.com/olekukonko/tablewriter v0.0.5
go.opentelemetry.io/otel v1.0.0
go.opentelemetry.io/otel/trace v1.0.0
golang.org/x/net v0.0.0-20210520170846-37e1c6afe023
golang.org/x/sys v0.0.0-20210423082822-04245dca01da
golang.org/x/text v0.3.6
gopkg.in/yaml.v3 v3.0.0-20210107192922-496545a6307b

go/ql/test/library-tests/semmle/go/frameworks/SQL/gorqlite/go.mod go

github.com/rqlite/gorqlite v0.0.0-20220528150909-c4e99ae96be6

go/ql/test/library-tests/semmle/go/frameworks/Spew/go.mod go

github.com/davecgh/go-spew v1.1.1
github.com/github/depstubber v0.0.0-20200916130315-f3217697abd4

go/ql/test/library-tests/semmle/go/frameworks/StdlibTaintFlow/go.mod go

golang.org/x/net v0.0.0-20201010224723-4f7140c49acb

go/ql/test/library-tests/semmle/go/frameworks/SystemCommandExecutors/go.mod go

github.com/codeskyblue/go-sh v0.0.0-20190412065543-76bd3d59ff27
golang.org/x/crypto v0.0.0-20200323165209-0ec3e9974c59

go/ql/test/library-tests/semmle/go/frameworks/Twirp/go.mod go

github.com/pkg/errors v0.9.1
github.com/twitchtv/twirp v8.1.3+incompatible
google.golang.org/protobuf v1.28.1

go/ql/test/library-tests/semmle/go/frameworks/WebSocket/go.mod go

github.com/gobwas/ws v1.0.3
github.com/gorilla/websocket v1.4.2
github.com/sacOO7/gowebsocket v0.0.0-20180719182212-1436bb906a4e
golang.org/x/net v0.0.0-20200505041828-1ed23360d12c
nhooyr.io/websocket v1.8.5

go/ql/test/library-tests/semmle/go/frameworks/XNetHtml/go.mod go

golang.org/x/net v0.0.0-20201010224723-4f7140c49acb

go/ql/test/library-tests/semmle/go/frameworks/Yaml/go.mod go

gopkg.in/yaml.v1 v1.0.0-20140924161607-9f9df34309c0
gopkg.in/yaml.v2 v2.4.0
gopkg.in/yaml.v3 v3.0.0-20210107192922-496545a6307b

go/ql/test/library-tests/semmle/go/frameworks/Zap/go.mod go

go.uber.org/zap v1.16.0

go/ql/test/library-tests/semmle/go/frameworks/gqlgen/go.mod go

github.com/99designs/gqlgen v0.17.3
github.com/agnivade/levenshtein v1.1.1
github.com/cpuguy83/go-md2man/v2 v2.0.2
github.com/gorilla/websocket v1.5.0
github.com/hashicorp/golang-lru v0.5.0
github.com/kr/text v0.2.0
github.com/matryer/moq v0.2.3
github.com/mitchellh/mapstructure v1.5.0
github.com/niemeyer/pretty v0.0.0-20200227124842-a10e7caefd8e
github.com/russross/blackfriday/v2 v2.1.0
github.com/stretchr/testify v1.6.0
github.com/urfave/cli/v2 v2.25.5
github.com/vektah/gqlparser/v2 v2.5.4
github.com/xrash/smetrics v0.0.0-20201216005158-039620a65673
golang.org/x/mod v0.6.0-dev
golang.org/x/sys v0.8.0
golang.org/x/tools v0.1.9
golang.org/x/xerrors v0.0.0-20200804184101-5ec99f83aff1
gopkg.in/check.v1 v1.0.0-20200227125254-8fa46927fb4f
gopkg.in/yaml.v2 v2.4.0

go/ql/test/query-tests/InconsistentCode/WrappedErrorAlwaysNil/go.mod go

github.com/pkg/errors v0.9.1

go/ql/test/query-tests/Security/CWE-020/IncompleteHostnameRegexp/go.mod go

github.com/elazarl/goproxy v0.0.0-20201021153353-00ad82a08272

go/ql/test/query-tests/Security/CWE-079/go.mod go

github.com/gobwas/ws v1.0.3
github.com/gorilla/websocket v1.4.2
golang.org/x/net v0.0.0-20200505041828-1ed23360d12c
nhooyr.io/websocket v1.8.5

go/ql/test/query-tests/Security/CWE-089/go.mod go

github.com/Masterminds/squirrel v1.1.0
go.mongodb.org/mongo-driver v1.3.3

go/ql/test/query-tests/Security/CWE-117/go.mod go

github.com/astaxie/beego v1.12.3
github.com/elazarl/goproxy v0.0.0-20211114080932-d06c3be7c11b
github.com/golang/glog v0.0.0-20160126235308-23def4e6c14b
github.com/kr/text v0.2.0
github.com/sirupsen/logrus v1.8.1
github.com/stretchr/testify v1.6.0
golang.org/x/sys v0.0.0-20200930185726-fdedc70b468f
k8s.io/klog v1.0.0

go/ql/test/query-tests/Security/CWE-312/go.mod go

github.com/golang/glog v0.0.0-20160126235308-23def4e6c14b
github.com/golang/protobuf v1.4.2
github.com/sirupsen/logrus v1.5.0
google.golang.org/protobuf v1.23.0
k8s.io/klog v1.0.0

go/ql/test/query-tests/Security/CWE-322/go.mod go

github.com/github/depstubber v0.0.0-20200618063247-cc37722ad494
golang.org/x/crypto v0.0.0-20200622213623-75b288015ac9

go/ql/test/query-tests/Security/CWE-352/go.mod go

golang.org/x/oauth2 v0.0.0-20200107190931-bf48bf16ab8d

go/ql/test/query-tests/Security/CWE-640/go.mod go

github.com/sendgrid/sendgrid-go v3.5.0+incompatible

go/ql/test/query-tests/Security/CWE-643/go.mod go

github.com/ChrisTrenkamp/goxpath v0.0.0-20190607011252-c5096ec8773d
github.com/antchfx/htmlquery v1.2.2
github.com/antchfx/jsonquery v1.1.2
github.com/antchfx/xmlquery v1.2.3
github.com/antchfx/xpath v1.1.5
github.com/go-xmlpath/xmlpath v0.0.0-20150820204837-860cbeca3ebc
github.com/jbowtie/gokogiri v0.0.0-20190301021639-37f655d3078f
github.com/santhosh-tekuri/xpathparser v1.0.0

go/ql/test/query-tests/Security/CWE-918/go.mod go

github.com/gobwas/ws v1.0.3
github.com/gorilla/websocket v1.4.2
github.com/sacOO7/gowebsocket v0.0.0-20180719182212-1436bb906a4e
golang.org/x/net v0.0.0-20200421231249-e086a090c8fd
nhooyr.io/websocket v1.8.5

go/ql/test/query-tests/Summary/go.mod go

github.com/github/codeql-go v1.27.0

go/ql/test/query-tests/filters/ClassifyFiles/go.mod go

github.com/onsi/ginkgo v1.12.0
github.com/onsi/gomega v1.9.0

java/kotlin-extractor/build.gradle maven

org.jetbrains.kotlin:kotlin-compiler * compileOnly
org.jetbrains.kotlin:kotlin-stdlib * implementation

java/ql/integration-tests/all-platforms/java/diagnostics/compilation-error/pom.xml maven

junit:junit 4.11 test

java/ql/integration-tests/all-platforms/java/diagnostics/dependency-error/pom.xml maven

junit:junit-nonesuch 4.11 test

java/ql/integration-tests/all-platforms/java/diagnostics/java-version-too-old/build.gradle maven

org.slf4j:slf4j-api 1.7.21 compile
junit:junit 4.12 testCompile
org.testng:testng 6.8.1 testCompile

java/ql/integration-tests/all-platforms/java/diagnostics/maven-http-repository/pom.xml maven

junit-nonesuch:junit-nonesuch 4.11 test

java/ql/integration-tests/all-platforms/java/diagnostics/multiple-candidate-builds/maven-project-1/pom.xml maven

junit:junit 4.11 test

java/ql/integration-tests/all-platforms/java/diagnostics/multiple-candidate-builds/maven-project-2/pom.xml maven

junit:junit 4.11 test

java/ql/integration-tests/all-platforms/java/diagnostics/no-gradle-wrapper/build.gradle maven

org.slf4j:slf4j-api 1.7.21 compile
junit:junit 4.12 testCompile
org.testng:testng 6.8.1 testCompile

java/ql/integration-tests/all-platforms/java/gradle-sample/build.gradle maven

org.slf4j:slf4j-api 1.7.21 compile
junit:junit 4.12 testCompile
org.testng:testng 6.8.1 testCompile

java/ql/integration-tests/all-platforms/java/gradle-sample-kotlin-script/app/build.gradle.kts maven

com.google.guava:guava 31.0.1-jre implementation
junit:junit 4.13.2 testImplementation

java/ql/integration-tests/all-platforms/java/java-web-jsp/pom.xml maven

javax.servlet:javax.servlet-api 3.1.0
org.eclipse.jetty:apache-jsp 9.3.3.v20150827
org.eclipse.jetty:apache-jstl 9.3.3.v20150827
org.eclipse.jetty:jetty-annotations 9.3.3.v20150827
org.eclipse.jetty:jetty-webapp 9.3.3.v20150827
org.owasp.encoder:encoder 1.2
org.owasp.encoder:encoder-jsp 1.2
org.springframework:spring-webmvc 4.0.2.RELEASE

java/ql/integration-tests/all-platforms/java/maven-sample/pom.xml maven

junit:junit 4.11 test

java/ql/integration-tests/all-platforms/java/maven-sample-extract-properties/pom.xml maven

junit:junit 4.11 test

java/ql/integration-tests/all-platforms/java/maven-sample-large-xml-files/pom.xml maven

junit:junit 4.11 test

java/ql/integration-tests/all-platforms/java/maven-sample-small-xml-files/pom.xml maven

junit:junit 4.11 test

java/ql/integration-tests/all-platforms/java/maven-sample-xml-mode-all/pom.xml maven

junit:junit 4.11 test

java/ql/integration-tests/all-platforms/java/maven-sample-xml-mode-byname/pom.xml maven

junit:junit 4.11 test

java/ql/integration-tests/all-platforms/java/maven-sample-xml-mode-disabled/pom.xml maven

junit:junit 4.11 test

java/ql/integration-tests/all-platforms/java/maven-sample-xml-mode-smart/pom.xml maven

junit:junit 4.11 test

java/ql/integration-tests/all-platforms/java/partial-gradle-sample/build.gradle maven

org.slf4j:slf4j-api 1.7.21 compile
junit:junit 4.12 testCompile
org.testng:testng 6.8.1 testCompile

java/ql/integration-tests/all-platforms/kotlin/gradle_kotlinx_serialization/app/build.gradle maven

org.jetbrains.kotlin:kotlin-serialization 1.6.10 implementation
org.jetbrains.kotlinx:kotlinx-serialization-json 1.3.2 implementation

java/ql/test/experimental/query-tests/security/CWE-016/pom.xml maven

java/ql/test/query-tests/maven-dependencies/my-project/pom.xml maven

com.semmle:another-project ${project.version}
commons-lang:commons-lang
semmle-test:semmle-test 1.0

java/ql/test/query-tests/maven-dependencies/pom.xml maven

commons-lang:commons-lang 2.6
semmle-test:semmle-test 0.1

java/ql/test/utils/flowtestcasegenerator/pom.xml maven

com.hubspot.jinjava:jinjava 2.6.0
com.squareup.okhttp3:okhttp 4.9.3
com.squareup.retrofit2:retrofit 2.9.0
com.unboundid:unboundid-ldapsdk 6.0.3
io.pebbletemplates:pebble 3.1.5
javax.servlet:javax.servlet-api 4.0.1
org.apache.directory.api:api-ldap-client-all 2.1.0
org.apache.logging.log4j:log4j-api 2.14.1
org.apache.logging.log4j:log4j-core 2.14.1
org.apache.shiro:shiro-core 1.8.0
org.apache.velocity:velocity-engine-core 2.3
org.freemarker:freemarker 2.3.31
org.jboss.logging:jboss-logging 3.4.2.Final
org.owasp.esapi:esapi 2.2.3.1
org.slf4j:slf4j-api 2.0.0-alpha5
org.springframework.data:spring-data-commons 2.6.3
org.springframework.ldap:spring-ldap 1.3.1.RELEASE
org.springframework.ldap:spring-ldap-core 2.3.5.RELEASE
org.springframework:spring-context 5.3.18
org.springframework:spring-web 5.3.18
org.springframework:spring-webmvc 5.3.18
org.thymeleaf:thymeleaf 3.0.15.RELEASE

javascript/extractor/lib/typescript/package.json npm

@types/node 18.15.3 development
typescript 5.1.3

javascript/ql/experimental/adaptivethreatmodeling/test/modeled_apis/package.json npm

mongodb 2.2.33

javascript/ql/test/ApiGraphs/async-await/package.json npm

fs-extra *

javascript/ql/test/ApiGraphs/bound-args/package.json npm

foo *

javascript/ql/test/ApiGraphs/cyclic/package.json npm

foo *

javascript/ql/test/ApiGraphs/dynamic-prop-read/package.json npm

classes *

javascript/ql/test/ApiGraphs/namespaced-package/package.json npm

@myorg/myotherpkg *

javascript/ql/test/ApiGraphs/nonlocal/package.json npm

express *

javascript/ql/test/ApiGraphs/promises/package.json npm

fs-extra *

javascript/ql/test/ApiGraphs/promisify/package.json npm

bluebird *

javascript/ql/test/ApiGraphs/spread/package.json npm

something *

javascript/ql/test/ApiGraphs/typed/package.json npm

mongodb *
mongoose *

javascript/ql/test/library-tests/DependencyModuleImports/src/dir-with-complex-package-json/package.json npm

a ^1.0.0
c >=1.0.0

javascript/ql/test/library-tests/DependencyModuleImports/src/dir-with-package-json/package.json npm

a 1.0.0
b 1.0.0
c 1.0.0
d 1.0.0

javascript/ql/test/library-tests/DependencyModuleImports/src/package.json npm

b 1.2.0
d 0.2.0

javascript/ql/test/library-tests/Extend/package.json npm

deep ^0.0.2
deep-assign ^2.0.0
deep-extend ^0.6.0
deep-merge ^1.0.0
deepmerge ^2.1.1
defaults ^1.0.3
extend ^3.0.2
extend-shallow ^3.0.2
extend2 ^1.0.0
js-extend ^1.0.1
just-extend ^4.0.0
lodash ^4.17.10
lodash.defaultsdeep ^4.6.0
lodash.mergewith ^4.6.1
merge ^1.2.0
merge-deep ^3.0.2
merge-options ^1.0.1
mixin-deep ^2.0.0
mixin-object ^3.0.0
node.extend ^2.0.0
object-assign ^4.1.1
object.assign ^4.1.0
object.defaults ^1.1.0
ramda ^0.25.0
smart-extend ^1.7.3
util-extend ^1.0.3
utils-merge ^1.0.1
xtend ^4.0.1

javascript/ql/test/library-tests/HtmlSanitizers/package.json npm

ent ^2.2.0
entities ^1.1.1
escape-goat ^1.3.0
he ^1.1.1
html-entities ^1.2.1
lodash ^4.17.10
sanitize-html ^1.18.2
sanitizer ^0.1.3
underscore ^1.9.1
validator ^10.4.0
xss ^1.0.3
xss-filters ^1.2.7

javascript/ql/test/library-tests/JsonParsers/package.json npm

fast-json-parse ^1.0.3
json-parse-better-errors ^1.0.2
json-parse-safe ^1.0.5
json-safe-parse ^0.0.2
parse-json ^4.0.0
safe-json-parse ^4.0.0

javascript/ql/test/library-tests/NPM/src/package.json npm

mocha 1.0 development
esprima *
foo ! garbage string we really can't parse %
something 1.2.3-alpha.beta

javascript/ql/test/library-tests/Portals/src/m3/package.json npm

m1 *
m2 *

javascript/ql/test/library-tests/Portals/src/m5/package.json npm

base-64 *

javascript/ql/test/library-tests/dependencies/src/package.json npm

mocha ~1.0 development
webpack * development
esprima ^0.9.0

javascript/ql/test/library-tests/frameworks/Next/package.json npm

next ^10.0.0
react 17.0.1
react-dom 17.0.1

javascript/ql/test/query-tests/Metrics/ExternalDependencies/src/package.json npm

lib1 1.0.2
lib2 ^1.0.0
lib3 *

javascript/ql/test/query-tests/Metrics/ExternalDependencies/src/sub/subsub/package.json npm

lib1 1.0.3

javascript/ql/test/query-tests/NodeJS/UnresolvableImport/src/package.json npm

bar * development
foo *

javascript/ql/test/query-tests/NodeJS/UnresolvableImport/src/sub/node_modules/othermod/package.json npm

fbjs *

javascript/ql/test/query-tests/NodeJS/UnusedDependency/src/package.json npm

who-knows-whether-this-is-used * development
acorn *
ejs *
eslint-plugin-babel 3.3.0
esprima *
jade *
lodash *
not-really-used-in-install-script-because-of-substring *
not_really_unused *
react *
used-first-in-install-script *
used-first-in-postinstall-script-dotslashed *
used-in-constant-template-require-string *
used-in-custom-script *
used-in-dynamic-template-require-string *
used-in-js-import *
used-in-js-require *
used-in-mjs-import *
used-in-mjs-require *
used-in-postinstall-script *
used-in-preinstall-script *
used-in-require-with-exclamation-mark-separator *
used-in-silly-template-require-string *
used-in-test-script *
used-last-in-install-script *
used-middle-in-install-script *
used-middle-in-install-script-with-some-slashes *

javascript/ql/test/query-tests/Security/CWE-079/DomBasedXss/package.json npm

next ^10.0.0
react 17.0.1
react-dom 17.0.1

javascript/ql/test/query-tests/Security/CWE-079/ReflectedXss/package.json npm

next ^10.0.0
react 17.0.1
react-dom 17.0.1

javascript/ql/test/query-tests/Security/CWE-200/lib/package.json npm

async 3.2.0

javascript/ql/test/query-tests/Security/CWE-300/package.json npm

bad3 http://example.org/foo development
bad4 ftp://example.org/foo development
bar * development
good2 https://example.org/foo development
bad1 http://example.org/foo
bad2 ftp://example.org/foo
foo *
good1 https://example.org/foo

javascript/ql/test/query-tests/Security/CWE-313/package.json npm

mysql *
password *

ql/Cargo.lock cargo

129 dependencies

ruby/extractor/Cargo.lock cargo

127 dependencies

go/ql/test/library-tests/semmle/go/frameworks/Twirp/vendor/github.com/twitchtv/twirp/Gopkg.lock go

github.com/davecgh/go-spew 346938d642f2ec3594ed81d874461961cd0faa76
github.com/pkg/errors 645ef00459ed84a119197bfb8d8205042c6df63d
github.com/pmezard/go-difflib 792786c7400a136282c1664665ae0a8db921c6c2
github.com/stretchr/testify b91bfb9ebec76498946beb6af7c0230c7cc7ba6c
google.golang.org/protobuf f2d1f6cbe10b90d22296ea09a7217081c2798009

go/ql/integration-tests/all-platforms/go/single-go-work-not-in-root/modules/subdir1/go.sum go

golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2
golang.org/x/net v0.0.0-20200505041828-1ed23360d12c
golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a
golang.org/x/sys v0.0.0-20200323222414-85ca7c5b95cd
golang.org/x/text v0.3.0

go/ql/integration-tests/all-platforms/go/two-go-mods-not-nested/subdir1/go.sum go

golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2
golang.org/x/net v0.0.0-20200505041828-1ed23360d12c
golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a
golang.org/x/sys v0.0.0-20200323222414-85ca7c5b95cd
golang.org/x/text v0.3.0

go/go.sum go

github.com/yuin/goldmark v1.3.5
golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2
golang.org/x/crypto v0.0.0-20191011191535-87dc89f01550
golang.org/x/mod v0.4.2
golang.org/x/mod v0.5.0
golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4
golang.org/x/mod v0.8.0
golang.org/x/net v0.0.0-20190404232315-eb5bcb51f2a3
golang.org/x/net v0.0.0-20190620200207-3b0461eec859
golang.org/x/net v0.0.0-20210405180319-a5a99cb37ef4
golang.org/x/sync v0.0.0-20190423024810-112230192c58
golang.org/x/sync v0.0.0-20210220032951-036812b2e83c
golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a
golang.org/x/sys v0.0.0-20190412213103-97732733099d
golang.org/x/sys v0.0.0-20201119102817-f84b799fce68
golang.org/x/sys v0.0.0-20210330210617-4fbd30eecc44
golang.org/x/sys v0.0.0-20210510120138-977fb7262007
golang.org/x/sys v0.0.0-20220722155257-8c9f86f7a55f
golang.org/x/sys v0.5.0
golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1
golang.org/x/text v0.3.0
golang.org/x/text v0.3.3
golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e
golang.org/x/tools v0.0.0-20191119224855-298f0cb1881e
golang.org/x/tools v0.1.5
golang.org/x/tools v0.1.12
golang.org/x/tools v0.6.0
golang.org/x/xerrors v0.0.0-20190717185122-a985d3407aa7
golang.org/x/xerrors v0.0.0-20191011141410-1b5146add898
golang.org/x/xerrors v0.0.0-20200804184101-5ec99f83aff1

go/ql/integration-tests/all-platforms/go/single-go-work-not-in-root/modules/subdir2/go.sum go

golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2
golang.org/x/net v0.0.0-20200505041828-1ed23360d12c
golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a
golang.org/x/sys v0.0.0-20200323222414-85ca7c5b95cd
golang.org/x/text v0.3.0

go/ql/integration-tests/all-platforms/go/bazel-sample-1/go.sum go

golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2
golang.org/x/net v0.0.0-20200505041828-1ed23360d12c
golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a
golang.org/x/sys v0.0.0-20200323222414-85ca7c5b95cd
golang.org/x/text v0.3.0

javascript/extractor/lib/typescript/yarn.lock npm

@types/node 18.15.3
typescript 5.1.3

go/ql/integration-tests/all-platforms/go/bazel-sample-2/go.sum go

golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2
golang.org/x/net v0.0.0-20200505041828-1ed23360d12c
golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a
golang.org/x/sys v0.0.0-20200323222414-85ca7c5b95cd
golang.org/x/text v0.3.0

go/ql/integration-tests/all-platforms/go/two-go-mods-nested-none-in-root/subdir0/go.sum go

golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2
golang.org/x/net v0.0.0-20200505041828-1ed23360d12c
golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a
golang.org/x/sys v0.0.0-20200323222414-85ca7c5b95cd
golang.org/x/text v0.3.0

go/ql/integration-tests/all-platforms/go/diagnostics/package-not-found-with-go-mod/work/go.sum go

github.com/linode/linode-docs-theme v0.0.0-20220622135843-166f108e1933

go/ql/integration-tests/all-platforms/go/two-go-mods-not-nested/subdir2/go.sum go

golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2
golang.org/x/net v0.0.0-20200505041828-1ed23360d12c
golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a
golang.org/x/sys v0.0.0-20200323222414-85ca7c5b95cd
golang.org/x/text v0.3.0

go/ql/integration-tests/all-platforms/go/go-mod-sample/go.sum go

golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2
golang.org/x/net v0.0.0-20200505041828-1ed23360d12c
golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a
golang.org/x/sys v0.0.0-20200323222414-85ca7c5b95cd
golang.org/x/text v0.3.0

go/ql/integration-tests/all-platforms/go/two-go-mods-nested-none-in-root/subdir0/subdir1/go.sum go

golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2
golang.org/x/net v0.0.0-20200505041828-1ed23360d12c
golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a
golang.org/x/sys v0.0.0-20200323222414-85ca7c5b95cd
golang.org/x/text v0.3.0

go/ql/integration-tests/all-platforms/go/make-sample/go.sum go

golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2
golang.org/x/net v0.0.0-20200505041828-1ed23360d12c
golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a
golang.org/x/sys v0.0.0-20200323222414-85ca7c5b95cd
golang.org/x/text v0.3.0

go/ql/integration-tests/linux-only/go/dep-sample/work/Gopkg.lock go

golang.org/x/time 3af7569d3a1e776fc2a3c1cec133b43105ea9c2e

go/ql/integration-tests/all-platforms/go/ninja-sample/go.sum go

golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2
golang.org/x/net v0.0.0-20200505041828-1ed23360d12c
golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a
golang.org/x/sys v0.0.0-20200323222414-85ca7c5b95cd
golang.org/x/text v0.3.0

go/ql/integration-tests/all-platforms/go/two-go-mods-nested-one-in-root/go.sum go

golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2
golang.org/x/net v0.0.0-20200505041828-1ed23360d12c
golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a
golang.org/x/sys v0.0.0-20200323222414-85ca7c5b95cd
golang.org/x/text v0.3.0

go/ql/integration-tests/all-platforms/go/single-go-mod-and-go-files-not-under-it/subdir/go.sum go

golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2
golang.org/x/net v0.0.0-20200505041828-1ed23360d12c
golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a
golang.org/x/sys v0.0.0-20200323222414-85ca7c5b95cd
golang.org/x/text v0.3.0

go/ql/integration-tests/linux-only/go/glide-sample/work/glide.lock go

golang.org/x/time 3af7569d3a1e776fc2a3c1cec133b43105ea9c2e

go/ql/integration-tests/all-platforms/go/single-go-mod-in-root/go.sum go

golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2
golang.org/x/net v0.0.0-20200505041828-1ed23360d12c
golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a
golang.org/x/sys v0.0.0-20200323222414-85ca7c5b95cd
golang.org/x/text v0.3.0

go/ql/integration-tests/all-platforms/go/two-go-mods-nested-one-in-root/subdir1/go.sum go

golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2
golang.org/x/net v0.0.0-20200505041828-1ed23360d12c
golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a
golang.org/x/sys v0.0.0-20200323222414-85ca7c5b95cd
golang.org/x/text v0.3.0

go/ql/integration-tests/all-platforms/go/single-go-mod-not-in-root/subdir/go.sum go

golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2
golang.org/x/net v0.0.0-20200505041828-1ed23360d12c
golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a
golang.org/x/sys v0.0.0-20200323222414-85ca7c5b95cd
golang.org/x/text v0.3.0

Ecosyste.ms: Repos

GitHub / Myahr2088 / codeql

Files

Dependencies