Ecosyste.ms: Repos

An open API service providing repository metadata for many open source software ecosystems.

GitHub / r4b3rt / codeql

CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security (code scanning), LGTM.com, and LGTM Enterprise

JSON API: https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/r4b3rt%2Fcodeql

Fork of github/codeql
Stars: 0
Forks: 0
Open Issues: 1

License: mit
Language: CodeQL
Repo Size: 79.5 MB
Dependencies: 198

Created: about 3 years ago
Updated: over 2 years ago
Last pushed: about 14 hours ago
Last synced: about 9 hours ago

Files

Readme

Dependencies

python/tools/recorded-call-graph-metrics/setup.py pypi

lxml *

.github/workflows/codeql-analysis.yml actions

actions/checkout v2 composite
github/codeql-action/analyze main composite
github/codeql-action/init main composite

.github/workflows/csv-coverage-pr-artifacts.yml actions

actions/checkout v2 composite
actions/setup-python v2 composite
actions/upload-artifact v2 composite

.github/workflows/csv-coverage-pr-comment.yml actions

actions/checkout v2 composite
actions/setup-python v2 composite

.github/workflows/csv-coverage-timeseries.yml actions

actions/checkout v2 composite
actions/setup-python v2 composite
actions/upload-artifact v2 composite

.github/workflows/csv-coverage-update.yml actions

actions/checkout v2 composite
actions/setup-python v2 composite

.github/workflows/csv-coverage.yml actions

actions/checkout v2 composite
actions/setup-python v2 composite
actions/upload-artifact v2 composite

.github/workflows/labeler.yml actions

actions/labeler v2 composite

.github/workflows/query-list.yml actions

actions/checkout v2 composite
actions/setup-python v2 composite
actions/upload-artifact v2 composite
dsaltares/fetch-gh-release-asset aa37ae5c44d3c9820bc12fe675e8670ecd93bd1c composite

java/ql/test/experimental/query-tests/security/CWE-016/pom.xml maven

java/ql/test/query-tests/maven-dependencies/my-project/pom.xml maven

com.semmle:another-project ${project.version}
commons-lang:commons-lang
semmle-test:semmle-test 1.0

java/ql/test/query-tests/maven-dependencies/pom.xml maven

commons-lang:commons-lang 2.6
semmle-test:semmle-test 0.1

javascript/extractor/lib/typescript/package.json npm

@types/node 12.7.11 development
typescript 4.4.2

.github/workflows/close-stale.yml actions

actions/stale v3 composite

javascript/ql/test/ApiGraphs/async-await/package.json npm

fs-extra *

javascript/ql/test/ApiGraphs/bound-args/package.json npm

foo *

javascript/ql/test/ApiGraphs/cyclic/package.json npm

foo *

javascript/ql/test/ApiGraphs/dynamic-prop-read/package.json npm

classes *

javascript/ql/test/ApiGraphs/namespaced-package/package.json npm

@myorg/myotherpkg *

javascript/ql/test/ApiGraphs/nonlocal/package.json npm

express *

javascript/ql/test/ApiGraphs/promises/package.json npm

fs-extra *

javascript/ql/test/ApiGraphs/promisify/package.json npm

bluebird *

javascript/ql/test/ApiGraphs/spread/package.json npm

something *

javascript/ql/test/ApiGraphs/typed/package.json npm

mongodb *
mongoose *

javascript/ql/test/library-tests/DependencyModuleImports/src/dir-with-complex-package-json/package.json npm

a ^1.0.0
c >=1.0.0

javascript/ql/test/library-tests/DependencyModuleImports/src/dir-with-package-json/package.json npm

a 1.0.0
b 1.0.0
c 1.0.0
d 1.0.0

javascript/ql/test/library-tests/DependencyModuleImports/src/package.json npm

b 1.2.0
d 0.2.0

javascript/ql/test/library-tests/Extend/package.json npm

deep ^0.0.2
deep-assign ^2.0.0
deep-extend ^0.6.0
deep-merge ^1.0.0
deepmerge ^2.1.1
defaults ^1.0.3
extend ^3.0.2
extend-shallow ^3.0.2
extend2 ^1.0.0
js-extend ^1.0.1
just-extend ^4.0.0
lodash ^4.17.10
lodash.defaultsdeep ^4.6.0
lodash.mergewith ^4.6.1
merge ^1.2.0
merge-deep ^3.0.2
merge-options ^1.0.1
mixin-deep ^2.0.0
mixin-object ^3.0.0
node.extend ^2.0.0
object-assign ^4.1.1
object.assign ^4.1.0
object.defaults ^1.1.0
ramda ^0.25.0
smart-extend ^1.7.3
util-extend ^1.0.3
utils-merge ^1.0.1
xtend ^4.0.1

javascript/ql/test/library-tests/HtmlSanitizers/package.json npm

ent ^2.2.0
entities ^1.1.1
escape-goat ^1.3.0
he ^1.1.1
html-entities ^1.2.1
lodash ^4.17.10
sanitize-html ^1.18.2
sanitizer ^0.1.3
underscore ^1.9.1
validator ^10.4.0
xss ^1.0.3
xss-filters ^1.2.7

javascript/ql/test/library-tests/JsonParsers/package.json npm

fast-json-parse ^1.0.3
json-parse-better-errors ^1.0.2
json-parse-safe ^1.0.5
json-safe-parse ^0.0.2
parse-json ^4.0.0
safe-json-parse ^4.0.0

javascript/ql/test/library-tests/NPM/src/package.json npm

mocha 1.0 development
esprima *
foo ! garbage string we really can't parse %
something 1.2.3-alpha.beta

javascript/ql/test/library-tests/Portals/src/m3/package.json npm

m1 *
m2 *

javascript/ql/test/library-tests/Portals/src/m5/package.json npm

base-64 *

javascript/ql/test/library-tests/dependencies/src/package.json npm

mocha ~1.0 development
webpack * development
esprima ^0.9.0

javascript/ql/test/library-tests/frameworks/Next/package.json npm

next ^10.0.0
react 17.0.1
react-dom 17.0.1

javascript/ql/test/query-tests/Metrics/ExternalDependencies/src/package.json npm

lib1 1.0.2
lib2 ^1.0.0
lib3 *

javascript/ql/test/query-tests/Metrics/ExternalDependencies/src/sub/subsub/package.json npm

lib1 1.0.3

javascript/ql/test/query-tests/NodeJS/UnresolvableImport/src/package.json npm

bar * development
foo *

javascript/ql/test/query-tests/NodeJS/UnresolvableImport/src/sub/node_modules/othermod/package.json npm

fbjs *

javascript/ql/test/query-tests/NodeJS/UnusedDependency/src/package.json npm

who-knows-whether-this-is-used * development
acorn *
ejs *
eslint-plugin-babel 3.3.0
esprima *
jade *
lodash *
not-really-used-in-install-script-because-of-substring *
not_really_unused *
react *
used-first-in-install-script *
used-first-in-postinstall-script-dotslashed *
used-in-constant-template-require-string *
used-in-custom-script *
used-in-dynamic-template-require-string *
used-in-js-import *
used-in-js-require *
used-in-mjs-import *
used-in-mjs-require *
used-in-postinstall-script *
used-in-preinstall-script *
used-in-require-with-exclamation-mark-separator *
used-in-silly-template-require-string *
used-in-test-script *
used-last-in-install-script *
used-middle-in-install-script *
used-middle-in-install-script-with-some-slashes *

javascript/ql/test/query-tests/Security/CWE-079/ReflectedXss/package.json npm

next ^10.0.0
react 17.0.1
react-dom 17.0.1

javascript/ql/test/query-tests/Security/CWE-200/lib/package.json npm

async 3.2.0

javascript/ql/test/query-tests/Security/CWE-313/package.json npm

mysql *
password *

javascript/ql/test/query-tests/Security/CWE-915/PrototypePollutingMergeCall/src-non-vulnerable-lodash/package.json npm

lodash 4.17.12

javascript/ql/test/query-tests/Security/CWE-915/PrototypePollutingMergeCall/src-vulnerable-lodash/package.json npm

lodash 4.17.4

javascript/ql/test/query-tests/Security/Summaries/package.json npm

libxmljs 0.19.1
mysql 2.15.0
xpath 0.0.27

javascript/ql/test/query-tests/Summary/src/package.json npm

typescript * development

cpp/autobuilder/Semmle.Autobuild.Cpp/Semmle.Autobuild.Cpp.csproj nuget

Microsoft.Build 16.9.0

cpp/autobuilder/Semmle.Autobuild.Cpp.Tests/Semmle.Autobuild.Cpp.Tests.csproj nuget

xunit.runner.visualstudio 2.4.1 development
System.IO.FileSystem 4.3.0
System.IO.FileSystem.Primitives 4.3.0
xunit 2.4.1

csharp/autobuilder/Semmle.Autobuild.CSharp/Semmle.Autobuild.CSharp.csproj nuget

Microsoft.Build 16.9.0
Newtonsoft.Json 13.0.1

csharp/autobuilder/Semmle.Autobuild.CSharp.Tests/Semmle.Autobuild.CSharp.Tests.csproj nuget

xunit.runner.visualstudio 2.4.3 development
Microsoft.NET.Test.Sdk 16.9.1
System.IO.FileSystem 4.3.0
System.IO.FileSystem.Primitives 4.3.0
xunit 2.4.1

csharp/autobuilder/Semmle.Autobuild.Shared/Semmle.Autobuild.Shared.csproj nuget

Microsoft.Build 16.9.0

csharp/extractor/Semmle.Extraction/Semmle.Extraction.csproj nuget

GitInfo 2.1.2
Microsoft.CodeAnalysis 3.9.0

csharp/extractor/Semmle.Extraction.CIL/Semmle.Extraction.CIL.csproj nuget

Microsoft.DiaSymReader 1.3.0
Microsoft.DiaSymReader.Native 1.7.0
Microsoft.DiaSymReader.PortablePdb 1.5.0

csharp/extractor/Semmle.Extraction.CSharp/Semmle.Extraction.CSharp.csproj nuget

Microsoft.Build 16.9.0
Microsoft.CodeAnalysis.CSharp 3.9.0

csharp/extractor/Semmle.Extraction.CSharp.Standalone/Semmle.Extraction.CSharp.Standalone.csproj nuget

csharp/extractor/Semmle.Extraction.Tests/Semmle.Extraction.Tests.csproj nuget

xunit.runner.visualstudio 2.4.3 development
Microsoft.NET.Test.Sdk 16.9.1
System.IO.FileSystem 4.3.0
System.IO.FileSystem.Primitives 4.3.0
xunit 2.4.1

csharp/extractor/Semmle.Util/Semmle.Util.csproj nuget

Mono.Posix.NETStandard 1.0.0

csharp/extractor/Semmle.Util.Tests/Semmle.Util.Tests.csproj nuget

xunit.runner.visualstudio 2.4.3 development
Microsoft.NET.Test.Sdk 16.9.1
xunit 2.4.1

python/tools/recorded-call-graph-metrics/requirements.txt pypi

javascript/extractor/lib/typescript/yarn.lock npm

@types/node 12.7.11
typescript 4.4.2