Collection of data-flow and usage slice samples for appthreat/atom.
Slices were generated using the following commands, where language is the programming language of the target project as listed in Sample Projects.
atom usages -l language -o app.atom -s usages.json .
atom reachables -l language -o app.atom -s reachables.json .
Java and javascript projects require cdxgen be run with the deep option for reachables
cdxgen -t java --deep .
Data-flow and usage commands for sample projects below.
| Project | Type |
|---|---|
| apolloconfig/apollo | java |
| avajs/ava | javascript |
| axios/axios | javascript |
| explosion/spaCy | python |
| karatelabs/karate | java |
| msiemens/tinydb | python |
| scrapy/scrapy | python |
| sequelize/sequelize | javascript |
| sqshq/piggymetrics | java |
| tornadoweb/tornado | python |
| videojs/video.js | javascript |
generate.py can be used to download the sample sources and generate slices in linux or Windows (via either MSYS2 or WSL), or from other sample repositories in a csv modeled on sources.csv.