hmac/codeql | GitHub | Ecosyste.ms: Repos

Loading...

Readme

Loading...

ruby/ql/test/query-tests/security/cwe-300/Gemfile rubygems

jwt = 1.2.3

.github/workflows/close-stale.yml actions

actions/stale v3 composite

.github/workflows/codeql-analysis.yml actions

actions/checkout v2 composite
actions/setup-dotnet v1 composite
github/codeql-action/analyze main composite
github/codeql-action/init main composite

.github/workflows/csv-coverage-metrics.yml actions

./.github/actions/fetch-codeql * composite
actions/checkout v2 composite
actions/upload-artifact v2 composite
github/codeql-action/upload-sarif v1 composite

.github/workflows/csv-coverage-pr-artifacts.yml actions

actions/checkout v2 composite
actions/setup-python v2 composite
actions/upload-artifact v2 composite

.github/workflows/csv-coverage-pr-comment.yml actions

actions/checkout v2 composite
actions/setup-python v2 composite

.github/workflows/csv-coverage-timeseries.yml actions

actions/checkout v2 composite
actions/setup-python v2 composite
actions/upload-artifact v2 composite

.github/workflows/csv-coverage-update.yml actions

actions/checkout v2 composite
actions/setup-python v2 composite

.github/workflows/csv-coverage.yml actions

actions/checkout v2 composite
actions/setup-python v2 composite
actions/upload-artifact v2 composite

.github/workflows/js-ml-tests.yml actions

./.github/actions/fetch-codeql * composite
actions/checkout v2 composite

.github/workflows/labeler.yml actions

actions/labeler v2 composite

.github/workflows/mad_modelDiff.yml actions

./codeql-main/.github/actions/fetch-codeql * composite
actions/checkout v2 composite
actions/upload-artifact v2 composite

.github/workflows/mad_regenerate-models.yml actions

./.github/actions/fetch-codeql * composite
actions/checkout v2 composite
actions/upload-artifact v2 composite

.github/workflows/qhelp-pr-preview.yml actions

./.github/actions/fetch-codeql * composite
actions/checkout v2 composite
actions/upload-artifact v2 composite

.github/workflows/ql-for-ql-build.yml actions

actions/cache v2 composite
actions/checkout v2 composite
actions/download-artifact v2 composite
actions/upload-artifact v2 composite
github/codeql-action/analyze aa93aea877e5fb8841bcb1193f672abf6e9f2980 composite
github/codeql-action/init aa93aea877e5fb8841bcb1193f672abf6e9f2980 composite

.github/workflows/ql-for-ql-dataset_measure.yml actions

actions/cache v2 composite
actions/checkout v2 composite
actions/download-artifact v2 composite
actions/upload-artifact v2 composite
github/codeql-action/init aa93aea877e5fb8841bcb1193f672abf6e9f2980 composite

.github/workflows/ql-for-ql-tests.yml actions

actions/cache v2 composite
actions/checkout v2 composite
github/codeql-action/init aa93aea877e5fb8841bcb1193f672abf6e9f2980 composite

.github/workflows/query-list.yml actions

actions/checkout v2 composite
actions/setup-python v2 composite
actions/upload-artifact v2 composite
dsaltares/fetch-gh-release-asset aa37ae5c44d3c9820bc12fe675e8670ecd93bd1c composite

.github/workflows/ruby-build.yml actions

actions/cache v2 composite
actions/checkout v2 composite
actions/download-artifact v2 composite
actions/upload-artifact v2 composite

.github/workflows/ruby-dataset-measure.yml actions

./.github/actions/fetch-codeql * composite
./ruby/actions/create-extractor-pack * composite
actions/checkout v2 composite
actions/download-artifact v2 composite
actions/upload-artifact v2 composite

.github/workflows/ruby-qltest.yml actions

./.github/actions/fetch-codeql * composite
./ruby/actions/create-extractor-pack * composite
actions/checkout v2 composite

.github/workflows/swift-qltest.yml actions

./.github/actions/fetch-codeql * composite
actions/checkout v2 composite

.github/workflows/sync-files.yml actions

actions/checkout v2 composite

.github/workflows/validate-change-notes.yml actions

./.github/actions/fetch-codeql * composite
actions/checkout v2 composite

ruby/actions/create-extractor-pack/action.yml actions

actions/cache v2 composite

python/tools/recorded-call-graph-metrics/setup.py pypi

lxml *

ruby/ql/test/library-tests/ast/gems/Gemfile rubygems

another_gem = 3.1.4
foo_gem ~> 2.0
my_gem = 1.0

.github/workflows/check-qldoc.yml actions

actions/checkout v2 composite

java/ql/test/experimental/query-tests/security/CWE-016/pom.xml maven

java/ql/test/query-tests/maven-dependencies/my-project/pom.xml maven

com.semmle:another-project ${project.version}
commons-lang:commons-lang
semmle-test:semmle-test 1.0

java/ql/test/query-tests/maven-dependencies/pom.xml maven

commons-lang:commons-lang 2.6
semmle-test:semmle-test 0.1

javascript/extractor/lib/typescript/package.json npm

@types/node 12.7.11 development
typescript 4.6.2

javascript/ql/experimental/adaptivethreatmodeling/test/modeled_apis/package.json npm

mongodb 2.2.33

javascript/ql/test/ApiGraphs/async-await/package.json npm

fs-extra *

javascript/ql/test/ApiGraphs/bound-args/package.json npm

foo *

javascript/ql/test/ApiGraphs/cyclic/package.json npm

foo *

javascript/ql/test/ApiGraphs/dynamic-prop-read/package.json npm

classes *

javascript/ql/test/ApiGraphs/namespaced-package/package.json npm

@myorg/myotherpkg *

javascript/ql/test/ApiGraphs/nonlocal/package.json npm

express *

javascript/ql/test/ApiGraphs/promises/package.json npm

fs-extra *

javascript/ql/test/ApiGraphs/promisify/package.json npm

bluebird *

javascript/ql/test/ApiGraphs/spread/package.json npm

something *

javascript/ql/test/ApiGraphs/typed/package.json npm

mongodb *
mongoose *

javascript/ql/test/library-tests/DependencyModuleImports/src/dir-with-complex-package-json/package.json npm

a ^1.0.0
c >=1.0.0

javascript/ql/test/library-tests/DependencyModuleImports/src/dir-with-package-json/package.json npm

a 1.0.0
b 1.0.0
c 1.0.0
d 1.0.0

javascript/ql/test/library-tests/DependencyModuleImports/src/package.json npm

b 1.2.0
d 0.2.0

javascript/ql/test/library-tests/Extend/package.json npm

deep ^0.0.2
deep-assign ^2.0.0
deep-extend ^0.6.0
deep-merge ^1.0.0
deepmerge ^2.1.1
defaults ^1.0.3
extend ^3.0.2
extend-shallow ^3.0.2
extend2 ^1.0.0
js-extend ^1.0.1
just-extend ^4.0.0
lodash ^4.17.10
lodash.defaultsdeep ^4.6.0
lodash.mergewith ^4.6.1
merge ^1.2.0
merge-deep ^3.0.2
merge-options ^1.0.1
mixin-deep ^2.0.0
mixin-object ^3.0.0
node.extend ^2.0.0
object-assign ^4.1.1
object.assign ^4.1.0
object.defaults ^1.1.0
ramda ^0.25.0
smart-extend ^1.7.3
util-extend ^1.0.3
utils-merge ^1.0.1
xtend ^4.0.1

javascript/ql/test/library-tests/HtmlSanitizers/package.json npm

ent ^2.2.0
entities ^1.1.1
escape-goat ^1.3.0
he ^1.1.1
html-entities ^1.2.1
lodash ^4.17.10
sanitize-html ^1.18.2
sanitizer ^0.1.3
underscore ^1.9.1
validator ^10.4.0
xss ^1.0.3
xss-filters ^1.2.7

javascript/ql/test/library-tests/JsonParsers/package.json npm

fast-json-parse ^1.0.3
json-parse-better-errors ^1.0.2
json-parse-safe ^1.0.5
json-safe-parse ^0.0.2
parse-json ^4.0.0
safe-json-parse ^4.0.0

javascript/ql/test/library-tests/NPM/src/package.json npm

mocha 1.0 development
esprima *
foo ! garbage string we really can't parse %
something 1.2.3-alpha.beta

javascript/ql/test/library-tests/Portals/src/m3/package.json npm

m1 *
m2 *

javascript/ql/test/library-tests/Portals/src/m5/package.json npm

base-64 *

javascript/ql/test/library-tests/dependencies/src/package.json npm

mocha ~1.0 development
webpack * development
esprima ^0.9.0

javascript/ql/test/library-tests/frameworks/Next/package.json npm

next ^10.0.0
react 17.0.1
react-dom 17.0.1

javascript/ql/test/query-tests/Metrics/ExternalDependencies/src/package.json npm

lib1 1.0.2
lib2 ^1.0.0
lib3 *

javascript/ql/test/query-tests/Metrics/ExternalDependencies/src/sub/subsub/package.json npm

lib1 1.0.3

javascript/ql/test/query-tests/NodeJS/UnresolvableImport/src/package.json npm

bar * development
foo *

javascript/ql/test/query-tests/NodeJS/UnresolvableImport/src/sub/node_modules/othermod/package.json npm

fbjs *

javascript/ql/test/query-tests/NodeJS/UnusedDependency/src/package.json npm

who-knows-whether-this-is-used * development
acorn *
ejs *
eslint-plugin-babel 3.3.0
esprima *
jade *
lodash *
not-really-used-in-install-script-because-of-substring *
not_really_unused *
react *
used-first-in-install-script *
used-first-in-postinstall-script-dotslashed *
used-in-constant-template-require-string *
used-in-custom-script *
used-in-dynamic-template-require-string *
used-in-js-import *
used-in-js-require *
used-in-mjs-import *
used-in-mjs-require *
used-in-postinstall-script *
used-in-preinstall-script *
used-in-require-with-exclamation-mark-separator *
used-in-silly-template-require-string *
used-in-test-script *
used-last-in-install-script *
used-middle-in-install-script *
used-middle-in-install-script-with-some-slashes *

javascript/ql/test/query-tests/Security/CWE-079/ReflectedXss/package.json npm

next ^10.0.0
react 17.0.1
react-dom 17.0.1

javascript/ql/test/query-tests/Security/CWE-200/lib/package.json npm

async 3.2.0

javascript/ql/test/query-tests/Security/CWE-300/package.json npm

bad3 http://example.org/foo development
bad4 ftp://example.org/foo development
bar * development
good2 https://example.org/foo development
bad1 http://example.org/foo
bad2 ftp://example.org/foo
foo *
good1 https://example.org/foo

javascript/ql/test/query-tests/Security/CWE-313/package.json npm

mysql *
password *

javascript/ql/test/query-tests/Security/CWE-915/PrototypePollutingMergeCall/src-non-vulnerable-lodash/package.json npm

lodash 4.17.12

javascript/ql/test/query-tests/Security/CWE-915/PrototypePollutingMergeCall/src-vulnerable-lodash/package.json npm

lodash 4.17.4

javascript/ql/test/query-tests/Security/Summaries/package.json npm

libxmljs 0.19.1
mysql 2.15.0
xpath 0.0.27

javascript/ql/test/query-tests/Summary/src/package.json npm

typescript * development

cpp/autobuilder/Semmle.Autobuild.Cpp/Semmle.Autobuild.Cpp.csproj nuget

Microsoft.Build 16.11.0

cpp/autobuilder/Semmle.Autobuild.Cpp.Tests/Semmle.Autobuild.Cpp.Tests.csproj nuget

xunit.runner.visualstudio 2.4.1 development
System.IO.FileSystem 4.3.0
System.IO.FileSystem.Primitives 4.3.0
xunit 2.4.1

csharp/autobuilder/Semmle.Autobuild.CSharp/Semmle.Autobuild.CSharp.csproj nuget

Microsoft.Build 16.11.0
Newtonsoft.Json 13.0.1

csharp/autobuilder/Semmle.Autobuild.CSharp.Tests/Semmle.Autobuild.CSharp.Tests.csproj nuget

xunit.runner.visualstudio 2.4.3 development
Microsoft.NET.Test.Sdk 17.0.0
System.IO.FileSystem 4.3.0
System.IO.FileSystem.Primitives 4.3.0
xunit 2.4.1

csharp/autobuilder/Semmle.Autobuild.Shared/Semmle.Autobuild.Shared.csproj nuget

Microsoft.Build 16.11.0

csharp/extractor/Semmle.Extraction/Semmle.Extraction.csproj nuget

GitInfo 2.2.0
Microsoft.CodeAnalysis 4.0.1

csharp/extractor/Semmle.Extraction.CIL/Semmle.Extraction.CIL.csproj nuget

Microsoft.DiaSymReader 1.3.0
Microsoft.DiaSymReader.Native 1.7.0
Microsoft.DiaSymReader.PortablePdb 1.6.0

csharp/extractor/Semmle.Extraction.CSharp/Semmle.Extraction.CSharp.csproj nuget

Microsoft.Build 16.11.0
Microsoft.CodeAnalysis.CSharp 4.0.1

csharp/extractor/Semmle.Extraction.CSharp.Standalone/Semmle.Extraction.CSharp.Standalone.csproj nuget

csharp/extractor/Semmle.Extraction.Tests/Semmle.Extraction.Tests.csproj nuget

xunit.runner.visualstudio 2.4.3 development
Microsoft.NET.Test.Sdk 17.0.0
System.IO.FileSystem 4.3.0
System.IO.FileSystem.Primitives 4.3.0
xunit 2.4.1

csharp/extractor/Semmle.Util/Semmle.Util.csproj nuget

Mono.Posix.NETStandard 1.0.0

csharp/extractor/Semmle.Util.Tests/Semmle.Util.Tests.csproj nuget

xunit.runner.visualstudio 2.4.3 development
Microsoft.NET.Test.Sdk 17.0.0
xunit 2.4.1

python/tools/recorded-call-graph-metrics/requirements.txt pypi

ql/Cargo.lock cargo

adler 1.0.2
aho-corasick 0.7.18
ansi_term 0.12.1
atty 0.2.14
autocfg 1.0.1
bitflags 1.3.2
cc 1.0.72
cfg-if 1.0.0
clap 2.34.0
crc32fast 1.3.0
crossbeam-channel 0.5.1
crossbeam-deque 0.8.1
crossbeam-epoch 0.9.5
crossbeam-utils 0.8.5
either 1.6.1
flate2 1.0.22
hermit-abi 0.1.19
itoa 1.0.1
lazy_static 1.4.0
libc 0.2.112
log 0.4.14
matchers 0.1.0
memchr 2.4.1
memoffset 0.6.5
miniz_oxide 0.4.4
num_cpus 1.13.0
once_cell 1.9.0
pin-project-lite 0.2.7
proc-macro2 1.0.34
quote 1.0.10
rayon 1.5.1
rayon-core 1.9.1
regex 1.5.4
regex-automata 0.1.10
regex-syntax 0.6.25
ryu 1.0.9
scopeguard 1.1.0
serde 1.0.132
serde_derive 1.0.132
serde_json 1.0.73
sharded-slab 0.1.4
smallvec 1.7.0
strsim 0.8.0
syn 1.0.82
textwrap 0.11.0
thread_local 1.1.3
tracing 0.1.29
tracing-attributes 0.1.18
tracing-core 0.1.21
tracing-log 0.1.2
tracing-subscriber 0.3.3
tree-sitter 0.19.5
unicode-width 0.1.9
unicode-xid 0.2.2
vec_map 0.8.2
winapi 0.3.9
winapi-i686-pc-windows-gnu 0.4.0
winapi-x86_64-pc-windows-gnu 0.4.0

ruby/Cargo.lock cargo

adler 1.0.2
aho-corasick 0.7.18
ansi_term 0.12.1
atty 0.2.14
autocfg 1.0.1
bitflags 1.3.2
cc 1.0.72
cfg-if 1.0.0
clap 3.0.12
crc32fast 1.3.0
crossbeam-channel 0.5.1
crossbeam-deque 0.8.1
crossbeam-epoch 0.9.5
crossbeam-utils 0.8.5
either 1.6.1
flate2 1.0.22
hashbrown 0.11.2
hermit-abi 0.1.19
indexmap 1.8.0
itoa 0.4.8
lazy_static 1.4.0
libc 0.2.111
log 0.4.14
matchers 0.1.0
memchr 2.4.1
memoffset 0.6.5
miniz_oxide 0.4.4
num_cpus 1.13.0
once_cell 1.8.0
os_str_bytes 6.0.0
pin-project-lite 0.2.7
proc-macro2 1.0.33
quote 1.0.10
rayon 1.5.1
rayon-core 1.9.1
regex 1.5.4
regex-automata 0.1.10
regex-syntax 0.6.25
ryu 1.0.9
scopeguard 1.1.0
serde 1.0.131
serde_derive 1.0.131
serde_json 1.0.72
sharded-slab 0.1.4
smallvec 1.7.0
strsim 0.10.0
syn 1.0.82
termcolor 1.1.2
textwrap 0.14.2
thread_local 1.1.3
tracing 0.1.29
tracing-attributes 0.1.18
tracing-core 0.1.21
tracing-log 0.1.2
tracing-subscriber 0.3.3
tree-sitter 0.19.5
tree-sitter-embedded-template 0.19.0
unicode-xid 0.2.2
winapi 0.3.9
winapi-i686-pc-windows-gnu 0.4.0
winapi-util 0.1.5
winapi-x86_64-pc-windows-gnu 0.4.0

javascript/extractor/lib/typescript/yarn.lock npm

@types/node 12.7.11
typescript 4.6.2

Ecosyste.ms: Repos

GitHub / hmac / codeql

Files

Dependencies