Skip to content

JS: ATM: New features for imports and for function parameters related to an endpoint#8740

Closed
kaeluka wants to merge 889 commits intogithub:esbena/improve-featuresfrom
kaeluka:atm-file-imports-feature
Closed

JS: ATM: New features for imports and for function parameters related to an endpoint#8740
kaeluka wants to merge 889 commits intogithub:esbena/improve-featuresfrom
kaeluka:atm-file-imports-feature

Conversation

@kaeluka
Copy link

@kaeluka kaeluka commented Apr 14, 2022 •
edited
Loading

This adds four new features that makes the imports in a file of an endpoint visible to the model.

Contained Features

Feature 1: fileImports

Example:

import * as FS from 'fs';
//                  ^^^^
import { test } from 'test';
//                   ^^^^^^

const pg = require('pg');
//                 ^^^^


...

In this file, any endpoint will have the value fs pg test for the fileImports feature.

Feature 2: calleeImports

This lists only the imports used in the callee of an invocation of which the endpoint is an argument or part of an argument.
This should, after experimentation has concluded it's OK, replace the currently existing calleeApiName feature — which is not stable (it's relying on API graphs; context: https://github.com/github/ml-ql-adaptive-threat-modeling/issues/1843).

Example

const f = require('lib3');

f(endpoint);
//^^^^^^^^ feature `calleeImports` = `lib3`

Feature 3: contextSurroundingFunctionParameters

Contains the parameters of all functions surrounding the endpoint.

Feature 4: contextFunctionInterfacesInFile

Interfaces (eg., name(param1, param2, param3)) of all functions in the same file.

Dependencies

This depends on #8586.

Review starting at the commit "ATM: new feature to list all imports in an endpoint's file".

@kaeluka kaeluka requested a review from a team April 14, 2022 12:47
@github-actions github-actions bot added the JS label Apr 14, 2022
@kaeluka kaeluka mentioned this pull request Apr 14, 2022
Closed
@kaeluka kaeluka marked this pull request as draft April 19, 2022 13:36
@kaeluka kaeluka changed the title JS: ATM: new feature for imports in the file of an endpoint JS: ATM: two new feature for imports in the file of an endpoint Apr 19, 2022
@kaeluka kaeluka changed the title JS: ATM: two new feature for imports in the file of an endpoint JS: ATM: two new features for imports related to an endpoint Apr 20, 2022
@esbena esbena force-pushed the esbena/improve-features branch 2 times, most recently from c8751ba to 94b0f1a Compare April 22, 2022 13:39
@kaeluka kaeluka mentioned this pull request Apr 22, 2022
Closed
@kaeluka kaeluka changed the title JS: ATM: two new features for imports related to an endpoint JS: ATM: New features for imports related to an endpoint Apr 22, 2022
@kaeluka kaeluka changed the title JS: ATM: New features for imports related to an endpoint JS: ATM: New features for imports and for function parameters related to an endpoint Apr 22, 2022
esbena
esbena reviewed Apr 26, 2022
View reviewed changes
@kaeluka kaeluka force-pushed the esbena/improve-features branch from 9a24ebd to a84e317 Compare April 29, 2022 14:59
@kaeluka
Copy link
Author

kaeluka commented May 10, 2022

did some long-needed housekeeping, hence the force pushes.

@tiferet
Copy link
Contributor

tiferet commented May 13, 2022

Experimentation being tracked here.

@tiferet
Copy link
Contributor

tiferet commented May 13, 2022

@kaeluka are stringConcatenatedWith and assignedToPropName specific to one query, or do you expect them to be informative for all queries?

When looking and SQL injection, stringConcatenatedWith seems to be absent for all endpoints.

assignedToPropName, OTOH, seems to be absent for all sinks (which makes sense from what you explained to me the other day), and exists for about half the non-sinks.

@tiferet
Copy link
Contributor

tiferet commented May 13, 2022

Also, contextFunctionInterfaces is often extremely long. Is that to be expected?

2022-05-13 00:28:03 [INFO] Found 1660735 sequences for feature contextFunctionInterfaces
2022-05-13 00:28:04 [INFO] - The shortest sequence length is 1
2022-05-13 00:28:04 [INFO] - The longest sequence length is 37581
2022-05-13 00:28:04 [INFO] - The mean sequence length is 374.0363832881224
2022-05-13 00:28:04 [INFO] - The standard deviation of sequence lengths is 1390.097579072184
2022-05-13 00:28:04 [INFO] - The median sequence length is 54.0
2022-05-13 00:28:04 [INFO] - The 90th percentile sequence length is 633.0
2022-05-13 00:28:05 [INFO] - The 95th percentile sequence length is 1575.0
2022-05-13 00:28:05 [INFO] - The 98th percentile sequence length is 4234.0
2022-05-13 00:28:05 [INFO] - The 99th percentile sequence length is 6307.0

@tiferet
Copy link
Contributor

tiferet commented May 13, 2022

Here's an example that I'm thinking might inspire more feature improvements:

I trained a model using a combination of the old and new features, but dropped the 5 old features that are supposed to be replaced by new features (argumentIndex, calleeName, calleeAccessPathWithStructuralInfo, calleeAccessPath, calleeApiName).

This endpoint ended up as a FP for SQL injection. It's missing all but 4 features: contextFunctionInterfaces, enclosingFunctionBody, enclosingFunctionName, and fileImports.

It looks like there's a TP SQL sink within the same function on line 35. The four features contextFunctionInterfaces, enclosingFunctionBody, enclosingFunctionName, and fileImports are of course identical for both endpoints, since they sit in the same function. (This sink actually involves the same variable as the FP, but in the TP the variable is used as input to db.query, whereas in the FP its value is simply being updated.)

Maybe we could expect the model to learn that if it has only these more global features it should classify the endpoint as NotASink, because real sinks generally have more features, but some sinks don't have all too many features either. I wonder whether there are features we could add that would help recognize more directly that this is not a SQL sink -- such as something that indicates that the endpoint is just being assigned to a variable.

At the same time, I'm hesitant to turn our features into a long list of heuristics that effectively try to distinguish between sinks and non-sinks, because that won't generalize or scale very well. Ideally we'd have a short, simple set of features, and let the model do the heavy lifting of learning patterns that distinguish sinks from non-sinks. That was the idea with the original feature, enclosingFunctionBody, but of course a single function often contains both sinks and non-sinks. That's why we tried to think of ways to define a more localized version of enclosingFunctionBody, but we never got anywhere good with that exploration. That's also why we wanted to give the model access to the full syntax in the function body rather than just the names of objects / functions....

Happy to do some brainstorming about whether we can write a smaller set of more general features that would contain enough information for the model to learn how to distinguish sinks from non-sinks.

@kaeluka
Copy link
Author

kaeluka commented May 14, 2022 •
edited
Loading

Thanks, Tiferet! It's good to see that our feedback loop is becoming faster!

One thing we've been trying to achieve here is to increase coverage of features, in other words: make sure that each endpoint has at least some features.

One thing I could try next week is to locally run some ad-hoc queries that show me endpoints with a low set of features and try to systematically improve the situation.

In regards to the specific example you gave: if all the model gets is values for contextFunctionInterfaces, enclosingFunctionBody, enclosingFunctionName, and fileImports, I'm not surprised it'll misclassify the endpoint. Those features are the same for each endpoint in that function/method and even in the most dangerous of methods, most endpoints are not sinks. Meaning: what you have found here is a bug in that there NEEDS to be better feature coverage in this instance.

@kaeluka
Copy link
Author

kaeluka commented May 14, 2022 •
edited
Loading

Btw, the alert on 25 is perhaps not perfect, but if that was the only alert a developer would see, it would still clearly point her to an actual vulnerability.

So even though this is, technically, an FP, it's also close enough to the TP to make it extremely valuable. A developer would not perceive this as FP but send us a thank you note.

Edit: note to self investigate if the varname in query += ... is the cause 😂 Done, and it seems like it was: https://github.slack.com/archives/CP9127VUK/p1652689391537829

@kaeluka
Copy link
Author

kaeluka commented May 16, 2022

Ok, here's some results from locally digging into this:

I was at first surprised that the stringConcatenatedWith feature would be effective here, but it turns out that in this special constellation (a compound assignment where the RHS is itself a concatenation) the existing feature implementation has a blind spot. I have a local PoC for a fix, but I think that this can possibly be done more in a more elegant way.

Additionally, I'm going to add a feature assignmentToVar (similar to assignmentToPropName) that will have the value query (after the variable name) in this case. This alone should be enough to prevent the FP in the future, as the model should be able to learn that var assignments never are sinks for our queries (but might be for future queries).

And I had forgotten to answer that question:

Also, contextFunctionInterfaces is often extremely long. Is that to be expected?

Yes, that's expected :)

@tiferet
Copy link
Contributor

tiferet commented May 16, 2022

@kaeluka Following up on our conversation today, here are two spreadsheets listing all the endpoints that have flow from a source in our evaluation set for Tainted Path Injections.

  • This spreadsheet is for a model trained with all the features we currently have other than the old ones that have been replaced by new ones (excludes argumentIndex, calleeName, calleeAccessPathWithStructuralInfo, calleeAccessPath, calleeApiName). This gives a total of 12 features, 3 old and 9 new.
  • This spreadsheet is for a model trained with only the original 8 old features, but the same data (same endpoints, different set of features), as a baseline.

According to our end-to-end evaluation, training with the new features + three of the old features does slightly worse on Tainted Path Injection than training with only the old features, but the change is not significant. For all four queries, we're seeing similar end-to-end metrics with the new features as the old ones.

The question is, do the new features really have little impact (seems unlikely), or do our metrics not reflect well the user experience (e.g. number of embarrassing FPs)?

NOTE: To make it easier to find interesting examples for manual inspection, I added a "classification" column (FN, FP, TN, TP), and sorted results first by this column and then by "num empty features", the number of features this endpoint is missing (out of either 12 or 8, depending on the experiment).

@kaeluka
Copy link
Author

kaeluka commented May 17, 2022 •
edited
Loading

Perfect, thank you!!

As always, looking at specific examples is great. I want to zoom in to one example that's present in both files and will show you how I think that the new features are a game changer here.

TL;DR: with the old features, the model can't be expected to make a correct decision here. It's blind. With the new feature, I'm certain the problem lies elsewhere.

I'm picking an example that is present in both datasets so we can evaluate what the change we're implementing is doing.

Example: https://github.com/mapbox/mapbox-studio-classic/blob/99d9084/lib/style.js#L440

If you look at the example, you'll agree with me, that this is an easy one. The model should really, really be able to figure that one out. I've pasted the code below and marked ^^^^^^ location for your convenience. As a programmer, I need no context here, this is highly likely to be a sink. After all, it's an input called path flowing into fstream.Reader...

var reader = fstream.Reader({
  path: uri.dirname,
//      ^^^^^^^^^^^
  type: 'Directory',
  ...
})

Results

In both datasets you've sent me, this example is classified as a (false) negative.

File Classification
8 features (old) FN
12 features (new) FN

On What Grounds are Those Misclassifications Made?

I computed the feature values locally on this file, and am listing their values here. This way, we can gain insights into where this misclassification is coming from. If the new features are not informative enough for a human to tell this is a sink — then we lack features. If they are — we have a problem in training data selection, ML model architecture, or who-knows-where.

Defined Feature Values (old)

As you can see, with the old features, the ML model has no way of making a good decision here. It's only getting an an unstructured representation of the function body and a name. It doesn't even have a way of knowing which endpoint it's being asked about (I'm making the endpoint bold for you to show you how impossible the ML model's task here is).

Location expression Feature Name Feature Value
style.js:440:19:440:29 uri.dirname enclosingFunctionName toPackage
style.js:440:19:440:29 uri.dirname enclosingFunctionBody id dest callback id callback Error id is required. dest string dest writable callback Error dest filepath or stream is required. style tmpid id callback Error temporary style must be saved first callback callback uri tm parse id dest writable dest setHeader basename path basename uri dirname .tm2 dest setHeader content-disposition attachment; filename=" basename .tm2z" style id err source err callback err style save source data err err callback err pack pack writer dest string fstream Writer path dest type File dest reader fstream Reader path uri dirname type Directory sort basename basename toLowerCase project.xml 1 1 filter info info 0 props basename 0 . false info 0 props basename 0 _ false info props type Directory true info props basename toLowerCase project.xml true extname path extname info props basename toLowerCase /.woff|.ttf|.otf|.ttc|.pfa|.pfb|.dfont/ test extname true extname .png true extname .jpg true extname .svg true pipe tar Pack noProprietary true pipe zlib Gzip pipe writer reader on error callback writer on error callback writer on end callback

Defined Feature Values (new)

Contrary to the old features, where the ML model was definitely not to blame, this misclassification makes no sense to me at ALL. I can see that the input goes into something named path as an argument, I can see that the call is to fstream.Reader, I can see that the import that goes into the callee is, indeed, to a library called fstream, etc, etc.

Something is wrong here that's beyond features. Any ideas, @tiferet?

Location expression Feature Name Feature Value
style.js:440:19:440:29 uri.dirname CalleeFlexibleAccessPath fstream.Reader
style.js:440:19:440:29 uri.dirname InputAccessPathFromCallee 0.path
style.js:440:19:440:29 uri.dirname assignedToPropName path
style.js:440:19:440:29 uri.dirname calleeImports fstream
style.js:440:19:440:29 uri.dirname contextFunctionInterfaces clear(id)\ncreateProg()\ndone(err, p)\nerror(id, err)\nfilter(info)\ninfo(id, callback)\ninteractivityvalidate(layers, interactivity)\nlayervalidate(layers)\nmapSaved()\npack()\nreadbookmarks()\nreadstyles()\nrefresh(data, callback)\nsave(rawdata, callback)\nsort(basename)\nstyle(arg, callback)\nthumb(id, callback)\nthumbSave(id, dest, callback)\ntmpid(id)\ntoPackage(id, dest, callback)\ntoXML(data, callback)\nupload(id, callback)
style.js:440:19:440:29 uri.dirname contextSurroundingFunctionParameters ()
style.js:440:19:440:29 uri.dirname enclosingFunctionBody id dest callback id callback Error id is required. dest string dest writable callback Error dest filepath or stream is required. style tmpid id callback Error temporary style must be saved first callback callback uri tm parse id dest writable dest setHeader basename path basename uri dirname .tm2 dest setHeader content-disposition attachment; filename=" basename .tm2z" style id err source err callback err style save source data err err callback err pack pack writer dest string fstream Writer path dest type File dest reader fstream Reader path uri dirname type Directory sort basename basename toLowerCase project.xml 1 1 filter info info 0 props basename 0 . false info 0 props basename 0 _ false info props type Directory true info props basename toLowerCase project.xml true extname path extname info props basename toLowerCase /.woff|.ttf|.otf|.ttc|.pfa|.pfb|.dfont/ test extname true extname .png true extname .jpg true extname .svg true pipe tar Pack noProprietary true pipe zlib Gzip pipe writer reader on error callback writer on error callback writer on end callback
style.js:440:19:440:29 uri.dirname enclosingFunctionName toPackage
style.js:440:19:440:29 uri.dirname fileImports ./task ./tm abaculus carto crypto fs fstream gazetteer js-yaml mapbox-machine-styles mapbox-upload mapnik mkdirp path sphericalmercator tar tilelive tilelive-vector underscore url zlib

edit: update selection of old/new features according to @tiferet's corrections

@tiferet
Copy link
Contributor

tiferet commented May 17, 2022

Example: https://github.com/coreybutler/fenix/blob/c001e4d/src/lib/api/server.js#L496:C33:L496:C70

I need to look at this, but I think this is the wrong URL? It doesn't match the code you're analyzing

@kaeluka
Copy link
Author

kaeluka commented May 17, 2022

Oh my! This is the line: https://github.com/mapbox/mapbox-studio-classic/blob/99d9084/lib/style.js#L440

Editing above!

@tiferet
Copy link
Contributor

tiferet commented May 17, 2022

@kaeluka A quick first observation: I don't know if you noticed, but with the new features this endpoint was misclassified as a SQL injection sink, not a non-sink. (You can see this by looking at the score columns in the spreadsheets, and finding the column with the highest score.) I assume there's no reasonable reason for the model to think that, right?

@tiferet
Copy link
Contributor

tiferet commented May 17, 2022

And another 🤔 : Why is enclosingFunctionName missing with the old features but present with the new ones?

@tiferet
Copy link
Contributor

tiferet commented May 17, 2022

And another 🤔 : Why is enclosingFunctionName missing with the old features but present with the new ones?

Not that this answers any of your questions, but I think the two old features that exist are enclosingFunctionName and enclosingFunctionBody. argumentIndex, the old version of InputArgumentIndex, is missing. At least that's what I'm seeing in the data fed into the classifier.

@tiferet
Copy link
Contributor

tiferet commented May 17, 2022 •
edited
Loading

Question

Why does the model misclassify https://github.com/mapbox/mapbox-studio-classic/blob/99d9084/lib/style.js#L440 as SqlInjectionSink rather than TaintedPathSink?

Hypothesis

@kaeluka is it possible that this type of sink is just too rare to be represented in our training data?

Reasoning: No similar features appear in training examples

I looped through all training data, looking for TaintedPath and SqlInjection sinks that contained either the token fstream (index 22271 in the vocab) or the token path (index 50 in the vocab) in one of the following features: 'CalleeFlexibleAccessPath', 'InputAccessPathFromCallee', 'assignedToPropName', 'calleeImports'.

I found no such examples for SqlInjection, which makes sense.

For TaintedPath, though, I also found no training examples that contained the token fstream, so the model couldn't have learned anything from the fact that the call is to fstream.Reader or that the import that goes into the callee is to a library called fstream. It has no way of knowing that it should associate fstream with TaintedPath.

The token path showed up in lots of TaintedPath samples, but not in either InputAccessPathFromCallee or assignedToPropName. It almost always shows up in calleeImports, together with the token fs (index 329 in the vocab). Since path doesn't show up in InputAccessPathFromCallee or assignedToPropName in the training data for TaintedPath, the model couldn't have learned anything from these features either that could help it detect this example.

TL;DR

If my analysis is correct, the reason the model misclassified this example is that none of the features that you found informative as an expert were informative to the model, because the training set included no examples with similar values in these features.

Reference code and data

Code is found in branch tiferet/new-features-FN-investigation.

Just for reference, here's the code I used to produce the list:

        # Find SQL sinks with `fstream` and/or `path` in the features of interest:
        relevant_features = [
            'CalleeFlexibleAccessPath', 'InputAccessPathFromCallee', 'assignedToPropName', 'calleeImports'
        ]
        if (dataset_description == 'training' or dataset_description == 'validation'):
            for feature_name in relevant_features:
                sequence = np.asarray(data['features'][feature_name])
                if 22271 in sequence or 50 in sequence:
                    if label == 3:
                        logger.warning(
                            f"label = {label} (SqlInjectionSink), {data['metadata']['url']}: {feature_name} = {sequence}, {dataset_description}"
                        )
                    elif label == 4:
                        logger.info(
                            f"label = {label} (TaintedPathSink), {data['metadata']['url']}: {feature_name} = {sequence}, {dataset_description}"
                        )

Here's the list I'm looking at: all training and validation sinks of type SqlInjectionSink or TaintedPathSink that contain the token fstream or path in one of the features 'CalleeFlexibleAccessPath', 'InputAccessPathFromCallee', 'assignedToPropName', 'calleeImports':

2022-05-17 20:03:05 [INFO] Reading in and preprocessing training files
2022-05-17 20:03:15 [INFO] label = 4 (TaintedPathSink), https://github.com/tutros/node-course-2-todo-api/blob/c985f9f/node_modules_orig/nconf/lib/nconf/stores/file.js#L86:C10:L86:C18: calleeImports = [329  50], training
2022-05-17 20:03:15 [INFO] label = 4 (TaintedPathSink), https://github.com/tutros/node-course-2-todo-api/blob/c985f9f/node_modules_orig/nconf/lib/nconf/stores/file.js#L124:C19:L124:C27: calleeImports = [329  50], training
2022-05-17 20:03:15 [INFO] label = 4 (TaintedPathSink), https://github.com/tutros/node-course-2-todo-api/blob/c985f9f/node_modules_orig/require_optional/index.js#L14:C16:L14:C41: calleeImports = [329  50], training
2022-05-17 20:03:19 [INFO] label = 4 (TaintedPathSink), https://github.com/x-orpheus/nei-toolkit/blob/04f424d/lib/nei/mobile.oc.pbx.js#L169:C47:L169:C50: calleeImports = [329  50], training
2022-05-17 20:03:19 [INFO] label = 4 (TaintedPathSink), https://github.com/x-orpheus/nei-toolkit/blob/04f424d/lib/util/file.js#L343:C47:L343:C50: calleeImports = [329  50], training
2022-05-17 20:03:27 [INFO] label = 4 (TaintedPathSink), https://github.com/1602/roco/blob/9d7c7f9/lib/rockout.js#L110:C20:L110:C30: calleeImports = [329  50], training
2022-05-17 20:03:27 [INFO] label = 4 (TaintedPathSink), https://github.com/1602/roco/blob/9d7c7f9/lib/rockout.js#L130:C24:L130:C47: calleeImports = [329  50], training
2022-05-17 20:03:27 [INFO] label = 4 (TaintedPathSink), https://github.com/1602/roco/blob/9d7c7f9/lib/rockout.js#L304:C21:L304:C24: calleeImports = [329  50], training
2022-05-17 20:03:31 [INFO] label = 4 (TaintedPathSink), https://github.com/kanso/kanso/blob/2b0e74f/lib/cache.js#L39:C16:L39:C23: CalleeFlexibleAccessPath = [ 50 764], training
2022-05-17 20:03:31 [INFO] label = 4 (TaintedPathSink), https://github.com/kanso/kanso/blob/2b0e74f/lib/cache.js#L39:C16:L39:C23: calleeImports = [329  50], training
2022-05-17 20:03:31 [INFO] label = 4 (TaintedPathSink), https://github.com/kanso/kanso/blob/2b0e74f/lib/commands/install.js#L370:C16:L370:C16: CalleeFlexibleAccessPath = [ 50 764], training
2022-05-17 20:03:31 [INFO] label = 4 (TaintedPathSink), https://github.com/kanso/kanso/blob/2b0e74f/lib/commands/install.js#L370:C16:L370:C16: calleeImports = [329  50], training
2022-05-17 20:03:31 [INFO] label = 4 (TaintedPathSink), https://github.com/kanso/kanso/blob/2b0e74f/lib/commands/push.js#L47:C16:L47:C18: CalleeFlexibleAccessPath = [ 50 764], training
2022-05-17 20:03:31 [INFO] label = 4 (TaintedPathSink), https://github.com/kanso/kanso/blob/2b0e74f/lib/commands/push.js#L47:C16:L47:C18: calleeImports = [329  50], training
2022-05-17 20:03:31 [INFO] label = 4 (TaintedPathSink), https://github.com/kanso/kanso/blob/2b0e74f/lib/kansorc.js#L99:C16:L99:C16: CalleeFlexibleAccessPath = [ 50 764], training
2022-05-17 20:03:31 [INFO] label = 4 (TaintedPathSink), https://github.com/kanso/kanso/blob/2b0e74f/lib/kansorc.js#L99:C16:L99:C16: calleeImports = [329  50], training
2022-05-17 20:03:31 [INFO] label = 4 (TaintedPathSink), https://github.com/kanso/kanso/blob/2b0e74f/lib/packages.js#L447:C20:L447:C45: CalleeFlexibleAccessPath = [ 50 764], training
2022-05-17 20:03:31 [INFO] label = 4 (TaintedPathSink), https://github.com/kanso/kanso/blob/2b0e74f/lib/packages.js#L447:C20:L447:C45: calleeImports = [329  50], training
2022-05-17 20:03:31 [INFO] label = 4 (TaintedPathSink), https://github.com/kanso/kanso/blob/2b0e74f/lib/tar.js#L92:C20:L92:C29: CalleeFlexibleAccessPath = [ 50 764], training
2022-05-17 20:03:31 [INFO] label = 4 (TaintedPathSink), https://github.com/kanso/kanso/blob/2b0e74f/lib/tar.js#L92:C20:L92:C29: calleeImports = [329  50], training
2022-05-17 20:03:33 [INFO] label = 4 (TaintedPathSink), https://github.com/nodester/nodester-cli/blob/1121a89/lib/config.js#L31:C16:L31:C16: calleeImports = [329  50], training
2022-05-17 20:03:33 [INFO] label = 4 (TaintedPathSink), https://github.com/nodester/nodester-cli/blob/1121a89/lib/config.js#L140:C21:L140:C26: calleeImports = [329  50], training
2022-05-17 20:03:33 [INFO] label = 4 (TaintedPathSink), https://github.com/nodester/nodester-cli/blob/1121a89/lib/config.js#L156:C14:L156:C28: calleeImports = [329  50], training
2022-05-17 20:03:33 [INFO] label = 4 (TaintedPathSink), https://github.com/nodester/nodester-cli/blob/1121a89/lib/user.js#L79:C15:L79:C17: calleeImports = [329  50], training
2022-05-17 20:03:33 [INFO] label = 4 (TaintedPathSink), https://github.com/nodester/nodester-cli/blob/1121a89/lib/user.js#L159:C29:L159:C69: calleeImports = [329  50], training
2022-05-17 20:03:44 [INFO] label = 4 (TaintedPathSink), https://github.com/Filirom1/findup/blob/f8ea4e9/index.js#L31:C23:L31:C42: calleeImports = [329  50], training
2022-05-17 20:03:44 [INFO] label = 4 (TaintedPathSink), https://github.com/Filirom1/findup/blob/f8ea4e9/index.js#L90:C27:L90:C46: calleeImports = [329  50], training
2022-05-17 20:03:45 [INFO] label = 4 (TaintedPathSink), https://github.com/GetStream/stream-node-orm/blob/fd4787e/src/config.js#L30:C31:L30:C41: calleeImports = [329  50], training
2022-05-17 20:03:45 [INFO] label = 4 (TaintedPathSink), https://github.com/mhevery/jasmine-node/blob/9d138cc/lib/jasmine-node/cli.js#L97:C24:L97:C28: calleeImports = [329  50], training
2022-05-17 20:03:45 [INFO] label = 4 (TaintedPathSink), https://github.com/mhevery/jasmine-node/blob/9d138cc/lib/jasmine-node/index.js#L117:C20:L117:C39: calleeImports = [329  50], training
2022-05-17 20:03:48 [INFO] label = 4 (TaintedPathSink), https://github.com/flatiron/flatiron/blob/2c34fe7/lib/flatiron/cli/create.js#L16:C19:L16:C26: calleeImports = [329  50], training
2022-05-17 20:03:48 [INFO] label = 4 (TaintedPathSink), https://github.com/flatiron/flatiron/blob/2c34fe7/lib/flatiron/plugins/resourceful.js#L66:C18:L66:C33: calleeImports = [329  50], training
2022-05-17 20:03:49 [INFO] label = 4 (TaintedPathSink), https://github.com/remy/nodemon/blob/d33f5f4/lib/cli/parse.js#L53:C41:L53:C47: calleeImports = [329  50], training
2022-05-17 20:03:49 [INFO] label = 4 (TaintedPathSink), https://github.com/remy/nodemon/blob/d33f5f4/lib/config/load.js#L135:C10:L135:C19: calleeImports = [329  50], training
2022-05-17 20:03:58 [INFO] label = 4 (TaintedPathSink), https://github.com/DAB0mB/Appfairy/blob/44931e0/src/utils/requireText.js#L7:C27:L7:C30: CalleeFlexibleAccessPath = [294  50 327], training
2022-05-17 20:03:58 [INFO] label = 4 (TaintedPathSink), https://github.com/DAB0mB/Appfairy/blob/44931e0/src/utils/requireText.js#L13:C15:L13:C18: CalleeFlexibleAccessPath = [294  50], training
2022-05-17 20:04:00 [INFO] label = 4 (TaintedPathSink), https://github.com/rstacruz/pomo.js/blob/bb67ae0/lib/helpers.js#L36:C16:L36:C18: calleeImports = [329  50], training
2022-05-17 20:04:02 [INFO] label = 4 (TaintedPathSink), https://github.com/Froguard/json-toy/blob/2fdd7b9/bin/main.js#L191:C27:L191:C34: calleeImports = [329  50], training
2022-05-17 20:04:06 [INFO] label = 4 (TaintedPathSink), https://github.com/trueinteractions/tint2/blob/8ec9ad7/modules/Bridge/import.js#L164:C17:L164:C32: calleeImports = [329  50], training
2022-05-17 20:04:06 [INFO] label = 4 (TaintedPathSink), https://github.com/trueinteractions/tint2/blob/8ec9ad7/modules/Bridge/import.js#L282:C18:L282:C20: calleeImports = [329  50], training
2022-05-17 20:04:09 [INFO] label = 4 (TaintedPathSink), https://github.com/DamonOehlman/scaffolder/blob/dfe95b6/helpers/find-package.js#L9:C11:L9:C47: calleeImports = [329  50], training
2022-05-17 20:04:09 [INFO] label = 4 (TaintedPathSink), https://github.com/DamonOehlman/scaffolder/blob/dfe95b6/plugins/copy.js#L28:C15:L28:C17: calleeImports = [329  50], training
2022-05-17 20:04:10 [INFO] label = 4 (TaintedPathSink), https://github.com/logicalparadox/matcha/blob/4942f30/bin/_matcha#L67:C17:L67:C43: calleeImports = [329  50], training
2022-05-17 20:04:21 [INFO] label = 4 (TaintedPathSink), https://github.com/projectkudu/kudu/blob/74ab567/Kudu.Core/Scripts/selectNodeVersion.js#L51:C25:L51:C35: calleeImports = [329  50], training
2022-05-17 20:04:22 [INFO] label = 4 (TaintedPathSink), https://github.com/YahooArchive/mojito/blob/9ed1490/lib/app/addons/rs/config.js#L91:C29:L91:C36: calleeImports = [329  50], training
2022-05-17 20:04:22 [INFO] label = 4 (TaintedPathSink), https://github.com/YahooArchive/mojito/blob/9ed1490/lib/app/addons/rs/config.js#L324:C29:L324:C32: calleeImports = [329  50], training
2022-05-17 20:04:22 [INFO] label = 4 (TaintedPathSink), https://github.com/YahooArchive/mojito/blob/9ed1490/lib/app/autoload/package-walker.server.js#L90:C20:L90:C30: calleeImports = [329  50], training
2022-05-17 20:04:30 [INFO] label = 4 (TaintedPathSink), https://github.com/apla/dataflo.ws/blob/d05d6ea/task/fs.js#L113:C11:L113:C17: calleeImports = [329  50], training
2022-05-17 20:04:30 [INFO] label = 4 (TaintedPathSink), https://github.com/publicclass/express-partials/blob/5e613c0/index.js#L73:C22:L73:C29: calleeImports = [329  50], training
2022-05-17 20:04:30 [INFO] label = 4 (TaintedPathSink), https://github.com/publicclass/express-partials/blob/5e613c0/index.js#L199:C14:L199:C17: calleeImports = [329  50], training
2022-05-17 20:04:31 [INFO] label = 4 (TaintedPathSink), https://github.com/artemp/vector-tile-server/blob/fa37ed5/server.js#L208:C12:L208:C19: calleeImports = [329  50], training
2022-05-17 20:04:31 [INFO] label = 4 (TaintedPathSink), https://github.com/ForbesLindesay/QEJS/blob/2763673/lib/filesystem.js#L44:C16:L44:C16: calleeImports = [329  50], training
2022-05-17 20:04:34 [INFO] label = 4 (TaintedPathSink), https://github.com/jaredhanson/bootable/blob/87d4b3f/lib/phases/initializers.js#L42:C21:L42:C23: calleeImports = [329  50], training
2022-05-17 20:04:34 [INFO] label = 4 (TaintedPathSink), https://github.com/jaredhanson/bootable/blob/87d4b3f/lib/phases/routes.js#L39:C21:L39:C26: calleeImports = [329  50], training
2022-05-17 20:04:39 [INFO] label = 4 (TaintedPathSink), https://github.com/c9/vfs-local/blob/9569c00/localfs.js#L594:C20:L594:C22: calleeImports = [329  50], training
2022-05-17 20:04:39 [INFO] label = 4 (TaintedPathSink), https://github.com/c9/vfs-local/blob/9569c00/localfs.js#L658:C24:L658:C29: calleeImports = [329  50], training
2022-05-17 20:04:42 [INFO] label = 4 (TaintedPathSink), https://github.com/taoyuan/needs/blob/93f77a8/lib/needs.js#L123:C28:L123:C29: calleeImports = [329  50], training
2022-05-17 20:04:49 [INFO] label = 4 (TaintedPathSink), https://github.com/biggora/caminte/blob/1d75b68/lib/schema.js#L120:C27:L120:C65: calleeImports = [329  50], training
2022-05-17 20:05:01 [INFO] label = 4 (TaintedPathSink), https://github.com/LonelyPriest/sdiablo_back/blob/98ecf2e/plugins-src/diablo/diablo_controller/hdoc/public/assets/metronic/plugins/jquery-file-upload/server/node/server.js#L170:C28:L170:C62: calleeImports = [329  50], training
2022-05-17 20:05:01 [INFO] label = 4 (TaintedPathSink), https://github.com/LonelyPriest/sdiablo_back/blob/98ecf2e/plugins-src/diablo/diablo_controller/hdoc/public/assets/metronic/plugins/jquery-file-upload/server/node/server.js#L182:C25:L182:C75: calleeImports = [329  50], training
2022-05-17 20:05:10 [INFO] label = 4 (TaintedPathSink), https://github.com/cutting-room-floor/tilestream/blob/61e85fc/lib/bootstrap.js#L11:C47:L11:C63: calleeImports = [329  50], training
2022-05-17 20:05:10 [INFO] label = 4 (TaintedPathSink), https://github.com/tapjs/tap-mocha-reporter/blob/5c8846f/lib/utils.js#L573:C15:L573:C18: calleeImports = [329  50], training
2022-05-17 20:05:13 [INFO] label = 4 (TaintedPathSink), https://github.com/antvis/tools/blob/0726f85/packages/istanbul/lib/command/common/run-with-cover.js#L106:C21:L106:C23: calleeImports = [329  50], training
2022-05-17 20:05:13 [INFO] label = 4 (TaintedPathSink), https://github.com/antvis/tools/blob/0726f85/packages/istanbul/lib/command/common/run-with-cover.js#L172:C37:L172:C52: calleeImports = [329  50], training
2022-05-17 20:05:13 [INFO] label = 4 (TaintedPathSink), https://github.com/antvis/tools/blob/0726f85/packages/istanbul/lib/config.js#L421:C25:L421:C28: calleeImports = [329  50], training
2022-05-17 20:05:14 [INFO] label = 4 (TaintedPathSink), https://github.com/source-foundry/code-corpora/blob/d44f6f4/javascript/mocha/utils.js#L620:C15:L620:C18: calleeImports = [329  50], training
2022-05-17 20:05:39 [INFO] label = 4 (TaintedPathSink), https://github.com/Azure-App-Service/KuduLite/blob/2962023/Kudu.Core/Scripts/selectNodeVersion.js#L24:C21:L24:C27: calleeImports = [329  50], training
2022-05-17 20:05:39 [INFO] label = 4 (TaintedPathSink), https://github.com/Azure-App-Service/KuduLite/blob/2962023/Kudu.Core/Scripts/selectNodeVersion.js#L51:C25:L51:C35: calleeImports = [329  50], training
2022-05-17 20:05:39 [INFO] label = 4 (TaintedPathSink), https://github.com/Azure-App-Service/KuduLite/blob/2962023/Kudu.Core/Scripts/selectNodeVersion.js#L97:C24:L97:C40: calleeImports = [329  50], training
2022-05-17 20:05:39 [INFO] label = 4 (TaintedPathSink), https://github.com/Azure-App-Service/KuduLite/blob/2962023/Kudu.Core/Scripts/selectNodeVersion.js#L110:C60:L110:C102: calleeImports = [329  50], training
2022-05-17 20:05:39 [INFO] label = 4 (TaintedPathSink), https://github.com/Azure-App-Service/KuduLite/blob/2962023/Kudu.Core/Scripts/selectNodeVersion.js#L130:C60:L130:C119: calleeImports = [329  50], training
2022-05-17 20:05:39 [INFO] label = 4 (TaintedPathSink), https://github.com/Azure-App-Service/KuduLite/blob/2962023/Kudu.Core/Scripts/selectNodeVersion.js#L157:C21:L157:C33: calleeImports = [329  50], training
2022-05-17 20:05:39 [INFO] label = 4 (TaintedPathSink), https://github.com/Azure-App-Service/KuduLite/blob/2962023/Kudu.Core/Scripts/selectNodeVersion.js#L264:C32:L264:C40: calleeImports = [329  50], training
2022-05-17 20:05:44 [INFO] label = 4 (TaintedPathSink), https://github.com/g0v/moedict-webkit/blob/35af25f/static-here.js#L77:C30:L77:C37: calleeImports = [329  50], training
2022-05-17 20:05:53 [INFO] label = 4 (TaintedPathSink), https://github.com/ericabouaf/wireit/blob/7d4fa91/src/wireit-loader/scripts/meta_join.js#L20:C16:L20:C16: calleeImports = [329  50], training
2022-05-17 20:05:53 [INFO] label = 4 (TaintedPathSink), https://github.com/ericabouaf/wireit/blob/7d4fa91/src/wireit-loader/scripts/meta_join.js#L119:C24:L119:C27: calleeImports = [329  50], training
2022-05-17 20:06:01 [INFO] label = 4 (TaintedPathSink), https://github.com/fex-team/fis-kernel/blob/f02a331/lib/util.js#L225:C24:L225:C27: calleeImports = [329  50], training
2022-05-17 20:06:01 [INFO] label = 4 (TaintedPathSink), https://github.com/fex-team/fis-kernel/blob/f02a331/lib/util.js#L263:C20:L263:C23: calleeImports = [329  50], training
2022-05-17 20:06:01 [INFO] label = 4 (TaintedPathSink), https://github.com/fex-team/fis-kernel/blob/f02a331/lib/util.js#L267:C20:L267:C23: calleeImports = [329  50], training
2022-05-17 20:06:01 [INFO] label = 4 (TaintedPathSink), https://github.com/fex-team/fis-kernel/blob/f02a331/lib/util.js#L272:C16:L272:C19: calleeImports = [329  50], training
2022-05-17 20:06:01 [INFO] label = 4 (TaintedPathSink), https://github.com/fex-team/fis-kernel/blob/f02a331/lib/util.js#L279:C17:L279:C20: calleeImports = [329  50], training
2022-05-17 20:06:01 [INFO] label = 4 (TaintedPathSink), https://github.com/fex-team/fis-kernel/blob/f02a331/lib/util.js#L350:C16:L350:C19: calleeImports = [329  50], training
2022-05-17 20:06:01 [INFO] label = 4 (TaintedPathSink), https://github.com/fex-team/fis-kernel/blob/f02a331/lib/util.js#L352:C29:L352:C32: calleeImports = [329  50], training
2022-05-17 20:06:01 [INFO] label = 4 (TaintedPathSink), https://github.com/fex-team/fis-kernel/blob/f02a331/lib/util.js#L445:C16:L445:C19: calleeImports = [329  50], training
2022-05-17 20:06:01 [INFO] label = 4 (TaintedPathSink), https://github.com/fex-team/fis-kernel/blob/f02a331/lib/util.js#L457:C17:L457:C20: calleeImports = [329  50], training
2022-05-17 20:06:01 [INFO] label = 4 (TaintedPathSink), https://github.com/fex-team/fis-kernel/blob/f02a331/lib/util.js#L593:C35:L593:C40: calleeImports = [329  50], training
2022-05-17 20:06:03 [INFO] label = 4 (TaintedPathSink), https://github.com/datagovsg/etherdocs/blob/8b1b670/src/node/handler/ImportHandler.js#L300:C23:L300:C29: calleeImports = [329  50], training
2022-05-17 20:06:07 [INFO] label = 4 (TaintedPathSink), https://github.com/bahmutov/pre-git/blob/b996064/src/install.js#L81:C17:L81:C19: calleeImports = [329  50], training
2022-05-17 20:06:07 [INFO] label = 4 (TaintedPathSink), https://github.com/bahmutov/pre-git/blob/b996064/src/install.js#L89:C19:L89:C23: calleeImports = [329  50], training
2022-05-17 20:06:07 [INFO] label = 4 (TaintedPathSink), https://github.com/bahmutov/pre-git/blob/b996064/src/install.js#L122:C18:L122:C24: calleeImports = [329  50], training
2022-05-17 20:06:07 [INFO] label = 4 (TaintedPathSink), https://github.com/bahmutov/pre-git/blob/b996064/src/install.js#L165:C19:L165:C26: calleeImports = [329  50], training
2022-05-17 20:06:18 [INFO] label = 4 (TaintedPathSink), https://github.com/sdepold/node-imageable/blob/5e0fa00/lib/image-magick.js#L176:C12:L176:C16: calleeImports = [329  50], training
2022-05-17 20:06:18 [INFO] label = 4 (TaintedPathSink), https://github.com/sdepold/node-imageable/blob/5e0fa00/lib/image-magick.js#L184:C12:L184:C18: calleeImports = [329  50], training
2022-05-17 20:06:18 [INFO] label = 4 (TaintedPathSink), https://github.com/sdepold/node-imageable/blob/5e0fa00/lib/image-magick.js#L258:C14:L258:C20: calleeImports = [329  50], training
2022-05-17 20:06:34 [INFO] label = 4 (TaintedPathSink), https://github.com/itay/node-cover/blob/a0982a0/bin/cover#L72:C20:L72:C33: calleeImports = [329  50], training
2022-05-17 20:06:34 [INFO] label = 4 (TaintedPathSink), https://github.com/itay/node-cover/blob/a0982a0/bin/cover#L104:C21:L104:C30: calleeImports = [329  50], training
2022-05-17 20:06:34 [INFO] label = 4 (TaintedPathSink), https://github.com/itay/node-cover/blob/a0982a0/bin/cover#L179:C21:L179:C24: calleeImports = [329  50], training
2022-05-17 20:06:34 [INFO] label = 4 (TaintedPathSink), https://github.com/itay/node-cover/blob/a0982a0/bin/cover#L252:C21:L252:C33: calleeImports = [329  50], training
2022-05-17 20:06:34 [INFO] label = 4 (TaintedPathSink), https://github.com/itay/node-cover/blob/a0982a0/bin/cover#L302:C21:L302:C33: calleeImports = [329  50], training
2022-05-17 20:06:34 [INFO] label = 4 (TaintedPathSink), https://github.com/itay/node-cover/blob/a0982a0/bin/cover#L345:C21:L345:C28: calleeImports = [329  50], training
2022-05-17 20:06:34 [INFO] label = 4 (TaintedPathSink), https://github.com/itay/node-cover/blob/a0982a0/bin/cover#L401:C25:L401:C32: calleeImports = [329  50], training
2022-05-17 20:06:34 [INFO] label = 4 (TaintedPathSink), https://github.com/itay/node-cover/blob/a0982a0/bin/cover#L471:C24:L471:C36: calleeImports = [329  50], training
2022-05-17 20:06:34 [INFO] label = 4 (TaintedPathSink), https://github.com/itay/node-cover/blob/a0982a0/bin/cover#L572:C25:L572:C38: calleeImports = [329  50], training
2022-05-17 20:06:34 [INFO] label = 4 (TaintedPathSink), https://github.com/mozilla/browserid-crypto/blob/6fef104/scripts/bundle.js#L21:C16:L21:C21: calleeImports = [329  50], training
2022-05-17 20:06:34 [INFO] label = 4 (TaintedPathSink), https://github.com/mozilla/browserid-crypto/blob/6fef104/scripts/package.js#L44:C17:L44:C23: calleeImports = [329  50], training
2022-05-17 20:06:35 [INFO] label = 4 (TaintedPathSink), https://github.com/yui/yuicompressor/blob/cf0497e/nodejs/index.js#L33:C12:L33:C14: calleeImports = [329  50], training
2022-05-17 20:06:44 [INFO] label = 4 (TaintedPathSink), https://github.com/tilemill-project/tilemill/blob/353317a/index.js#L31:C16:L31:C21: calleeImports = [329  50], training
2022-05-17 20:06:44 [INFO] label = 4 (TaintedPathSink), https://github.com/tilemill-project/tilemill/blob/353317a/lib/create_files.js#L6:C21:L6:C34: calleeImports = [329  50], training
2022-05-17 20:06:44 [INFO] label = 4 (TaintedPathSink), https://github.com/tilemill-project/tilemill/blob/353317a/lib/create_files.js#L18:C25:L18:C27: calleeImports = [329  50], training
2022-05-17 20:06:44 [INFO] label = 4 (TaintedPathSink), https://github.com/tilemill-project/tilemill/blob/353317a/lib/fsutil.js#L79:C24:L79:C30: calleeImports = [329  50], training
2022-05-17 20:06:49 [INFO] label = 4 (TaintedPathSink), https://github.com/lloyd/node-compute-cluster/blob/f3b6557/lib/compute-cluster.js#L15:C19:L15:C32: calleeImports = [329  50], training
2022-05-17 20:06:50 [INFO] label = 4 (TaintedPathSink), https://github.com/TooTallNate/NodObjC/blob/e4710fb/lib/import.js#L153:C15:L153:C30: calleeImports = [329  50], training
2022-05-17 20:06:50 [INFO] label = 4 (TaintedPathSink), https://github.com/TooTallNate/NodObjC/blob/e4710fb/lib/import.js#L259:C16:L259:C18: calleeImports = [329  50], training
2022-05-17 20:07:00 [INFO] label = 4 (TaintedPathSink), https://github.com/nithinpgit/express-mvc-basic/blob/5513949/tmp/npm-393-eEFrSdzW/1484331162405-0.7173141778912395/package/lib/cli/parse.js#L53:C41:L53:C47: calleeImports = [329  50], training
2022-05-17 20:07:00 [INFO] label = 4 (TaintedPathSink), https://github.com/nithinpgit/express-mvc-basic/blob/5513949/tmp/npm-393-eEFrSdzW/1484331162405-0.7173141778912395/package/lib/config/load.js#L121:C10:L121:C19: calleeImports = [329  50], training
2022-05-17 20:07:00 [INFO] label = 4 (TaintedPathSink), https://github.com/jriecken/asset-smasher/blob/c627449/lib/asset-smasher.js#L178:C24:L178:C36: calleeImports = [329  50], training
2022-05-17 20:07:00 [INFO] label = 4 (TaintedPathSink), https://github.com/jriecken/asset-smasher/blob/c627449/lib/discovery/manifest.js#L201:C22:L201:C24: calleeImports = [329  50], training
2022-05-17 20:07:00 [INFO] label = 4 (TaintedPathSink), https://github.com/jriecken/asset-smasher/blob/c627449/lib/discovery/manifest.js#L288:C22:L288:C28: calleeImports = [329  50], training
2022-05-17 20:07:05 [INFO] label = 4 (TaintedPathSink), https://github.com/fjakobs/async.js/blob/f34fd13/lib/plugins/fs-node.js#L78:C20:L78:C23: calleeImports = [329  50], training
2022-05-17 20:07:05 [INFO] label = 4 (TaintedPathSink), https://github.com/fjakobs/async.js/blob/f34fd13/lib/plugins/fs-node.js#L202:C20:L202:C23: calleeImports = [329  50], training
2022-05-17 20:07:05 [INFO] label = 4 (TaintedPathSink), https://github.com/fjakobs/async.js/blob/f34fd13/lib/plugins/fs-node.js#L289:C20:L289:C23: calleeImports = [329  50], training
2022-05-17 20:07:05 [INFO] label = 4 (TaintedPathSink), https://github.com/fjakobs/async.js/blob/f34fd13/lib/plugins/fs-node.js#L338:C24:L338:C31: calleeImports = [329  50], training
2022-05-17 20:07:05 [INFO] label = 4 (TaintedPathSink), https://github.com/fjakobs/async.js/blob/f34fd13/lib/plugins/fs-node.js#L374:C16:L374:C23: calleeImports = [329  50], training
2022-05-17 20:07:07 [INFO] label = 4 (TaintedPathSink), https://github.com/Kolyaj/Yaxy/blob/e3a5b99/lib/yaxy.js#L407:C20:L407:C24: calleeImports = [329  50], training
2022-05-17 20:07:11 [INFO] label = 4 (TaintedPathSink), https://github.com/EnotionZ/gpio/blob/2336386/lib/gpio.js#L46:C12:L46:C30: calleeImports = [329  50], training
2022-05-17 20:07:14 [INFO] label = 4 (TaintedPathSink), https://github.com/jgallen23/markx/blob/f5c5bef/lib/utils/read.js#L7:C10:L7:C14: calleeImports = [329  50], training
2022-05-17 20:07:21 [INFO] label = 4 (TaintedPathSink), https://github.com/nodejitsu/jitsu/blob/b4a4060/lib/jitsu/commands/install.js#L173:C12:L173:C32: calleeImports = [329  50], training
2022-05-17 20:07:21 [INFO] label = 4 (TaintedPathSink), https://github.com/nodejitsu/jitsu/blob/b4a4060/lib/jitsu/package.js#L750:C20:L750:C25: calleeImports = [329  50], training
2022-05-17 20:07:24 [INFO] label = 4 (TaintedPathSink), https://github.com/firewalla/fnm.node8.x86_64/blob/0868598/mocha/lib/utils.js#L628:C15:L628:C18: calleeImports = [329  50], training
2022-05-17 20:07:24 [INFO] label = 4 (TaintedPathSink), https://github.com/firewalla/fnm.node8.x86_64/blob/0868598/node-pre-gyp/lib/clean.js#L24:C16:L24:C24: calleeImports = [329  50], training
2022-05-17 20:07:24 [INFO] label = 4 (TaintedPathSink), https://github.com/firewalla/fnm.node8.x86_64/blob/0868598/node-pre-gyp/lib/install.js#L227:C21:L227:C33: calleeImports = [329  50], training
2022-05-17 20:07:24 [INFO] label = 4 (TaintedPathSink), https://github.com/firewalla/fnm.node8.x86_64/blob/0868598/node-pre-gyp/lib/pre-binding.js#L17:C20:L17:C36: calleeImports = [329  50], training
2022-05-17 20:07:24 [INFO] label = 4 (TaintedPathSink), https://github.com/firewalla/fnm.node8.x86_64/blob/0868598/node-pre-gyp/lib/package.js#L24:C17:L24:C29: calleeImports = [329  50], training
2022-05-17 20:07:24 [INFO] label = 4 (TaintedPathSink), https://github.com/firewalla/fnm.node8.x86_64/blob/0868598/node-pre-gyp/lib/publish.js#L23:C17:L23:C23: calleeImports = [329  50], training
2022-05-17 20:07:24 [INFO] label = 4 (TaintedPathSink), https://github.com/firewalla/fnm.node8.x86_64/blob/0868598/node-pre-gyp/lib/testpackage.js#L22:C17:L22:C23: calleeImports = [329  50], training
2022-05-17 20:07:24 [INFO] label = 4 (TaintedPathSink), https://github.com/firewalla/fnm.node8.x86_64/blob/0868598/node-pre-gyp/lib/util/compile.js#L23:C26:L23:C37: calleeImports = [329  50], training
2022-05-17 20:07:30 [INFO] label = 4 (TaintedPathSink), https://github.com/cpsubrian/node-etc/blob/bd1746e/etc.js#L129:C18:L129:C21: calleeImports = [329  50], training
2022-05-17 20:07:37 [INFO] label = 4 (TaintedPathSink), https://github.com/TooTallNate/node-bindings/blob/c8033dc/bindings.js#L205:C14:L205:C38: calleeImports = [329  50], training
2022-05-17 20:07:41 [INFO] label = 4 (TaintedPathSink), https://github.com/vesln/temporary/blob/48948f9/lib/generator.js#L33:C22:L33:C35: calleeImports = [329  50], training
2022-05-17 20:07:46 [INFO] label = 4 (TaintedPathSink), https://github.com/frogo/blog/blob/30f19ce/libs/uploader.js#L43:C27:L43:C56: calleeImports = [329  50], training
2022-05-17 20:07:48 [INFO] label = 4 (TaintedPathSink), https://github.com/substack/node-confuse/blob/51fde55/index.js#L32:C28:L32:C31: calleeImports = [329  50], training
2022-05-17 20:07:52 [INFO] label = 4 (TaintedPathSink), https://github.com/dtao/autodoc/blob/6742cf1/bin/autodoc#L55:C45:L55:C52: calleeImports = [329  50], training
2022-05-17 20:07:54 [INFO] label = 4 (TaintedPathSink), https://github.com/yui/yogi/blob/3b0f424/lib/config.js#L25:C24:L25:C42: calleeImports = [329  50], training
2022-05-17 20:07:54 [INFO] label = 4 (TaintedPathSink), https://github.com/yui/yogi/blob/3b0f424/lib/util.js#L124:C21:L124:C24: calleeImports = [329  50], training
2022-05-17 20:07:54 [INFO] label = 4 (TaintedPathSink), https://github.com/yui/yogi/blob/3b0f424/lib/util.js#L181:C20:L181:C23: calleeImports = [329  50], training
2022-05-17 20:07:54 [INFO] label = 4 (TaintedPathSink), https://github.com/yui/yogi/blob/3b0f424/lib/util.js#L384:C25:L384:C27: calleeImports = [329  50], training
2022-05-17 20:07:57 [INFO] label = 4 (TaintedPathSink), https://github.com/thlorenz/valiquire/blob/8e4bad5/validate-requires.js#L71:C10:L71:C25: calleeImports = [329  50], training
2022-05-17 20:07:59 [INFO] label = 4 (TaintedPathSink), https://github.com/aFarkas/webshim/blob/1600cc6/Gruntfile.js#L342:C94:L342:C123: calleeImports = [329  50], training
2022-05-17 20:08:14 [INFO] label = 4 (TaintedPathSink), https://github.com/mapnik/node-mapnik/blob/f83bff5/bin/mapnik-inspect.js#L22:C13:L22:C15: calleeImports = [329  50], training
2022-05-17 20:08:14 [INFO] label = 4 (TaintedPathSink), https://github.com/mapnik/node-mapnik/blob/f83bff5/lib/mapnik.js#L69:C20:L69:C20: calleeImports = [329  50], training
2022-05-17 20:08:14 [INFO] label = 4 (TaintedPathSink), https://github.com/mapnik/node-mapnik/blob/f83bff5/lib/mapnik.js#L83:C20:L83:C20: calleeImports = [329  50], training
2022-05-17 20:08:16 [INFO] label = 4 (TaintedPathSink), https://github.com/israelroldan/grunt-ssh/blob/7175b55/tasks/sftp.js#L254:C32:L254:C34: calleeImports = [329  50], training
2022-05-17 20:08:22 [INFO] label = 4 (TaintedPathSink), https://github.com/substack/pushover/blob/3729f71/index.js#L36:C32:L36:C48: calleeImports = [329  50], training
2022-05-17 20:08:27 [INFO] label = 4 (TaintedPathSink), https://github.com/mozilla/connect-cachify/blob/41fcdc4/lib/connect-cachify.js#L100:C25:L100:C33: calleeImports = [329  50], training
2022-05-17 20:08:33 [INFO] label = 4 (TaintedPathSink), https://github.com/estools/esmangle/blob/90bf707/tools/generate-tests.js#L56:C21:L56:C24: calleeImports = [329  50], training
2022-05-17 20:08:41 [INFO] label = 4 (TaintedPathSink), https://github.com/calmh/node-inpath/blob/f6fb6a5/lib/inpath.js#L20:C24:L20:C26: calleeImports = [329  50], training
2022-05-17 20:08:42 [INFO] label = 4 (TaintedPathSink), https://github.com/adohe-zz/ImageServer/blob/68e2aeb/lib/_file_info.js#L26:C11:L26:C61: calleeImports = [329  50], training
2022-05-17 20:08:42 [INFO] label = 4 (TaintedPathSink), https://github.com/adohe-zz/ImageServer/blob/68e2aeb/lib/_file_info.js#L38:C24:L38:C58: calleeImports = [329  50], training
2022-05-17 20:08:42 [INFO] label = 4 (TaintedPathSink), https://github.com/yui/yeti/blob/8a32325/scripts/fetch_deps.js#L145:C40:L145:C65: calleeImports = [329  50], training
2022-05-17 20:08:45 [INFO] label = 4 (TaintedPathSink), https://github.com/thenativeweb/node-viewmodel/blob/575071f/lib/repository.js#L19:C18:L19:C24: calleeImports = [329  50], training
2022-05-17 20:08:52 [INFO] label = 4 (TaintedPathSink), https://github.com/janthiemen/nisi/blob/346eacd/application/enyo/tools/minifier/minify.js#L143:C35:L143:C43: calleeImports = [329  50], training
2022-05-17 20:09:19 [INFO] label = 4 (TaintedPathSink), https://github.com/yui/yuitest/blob/2b1e62f/javascript/build/yuitest/npm/cli.js#L50:C20:L50:C23: calleeImports = [329  50], training
2022-05-17 20:09:19 [INFO] label = 4 (TaintedPathSink), https://github.com/yui/yuitest/blob/2b1e62f/javascript/src/cli/CLI-node.js#L49:C20:L49:C23: calleeImports = [329  50], training
2022-05-17 20:09:19 [INFO] label = 4 (TaintedPathSink), https://github.com/yui/yuitest/blob/2b1e62f/nodejs-coverage/lib/index.js#L32:C12:L32:C14: calleeImports = [329  50], training
2022-05-17 20:09:21 [INFO] label = 4 (TaintedPathSink), https://github.com/joshfire/joshfire-framework/blob/609a7f1/scripts/optimize.js#L168:C16:L168:C70: calleeImports = [329  50], training
2022-05-17 20:09:31 [INFO] label = 4 (TaintedPathSink), https://github.com/aleafs/pm/blob/e6d7cef/lib/master.js#L21:C42:L21:C44: calleeImports = [329  50], training
2022-05-17 20:09:37 [INFO] label = 4 (TaintedPathSink), https://github.com/be5invis/eido/blob/1835425/bin/eidoc#L34:C16:L34:C54: calleeImports = [329  50], training
2022-05-17 20:09:40 [INFO] label = 4 (TaintedPathSink), https://github.com/putaoshu/jdf/blob/3c721db/lib/livereloadServer.js#L100:C22:L100:C25: calleeImports = [329  50], training
2022-05-17 20:09:58 [INFO] label = 4 (TaintedPathSink), https://github.com/mysql/mysql-js/blob/d39c1ab/database-jones/Adapter/api/jones.js#L180:C19:L180:C22: calleeImports = [329  50], training
2022-05-17 20:09:58 [INFO] label = 4 (TaintedPathSink), https://github.com/mysql/mysql-js/blob/d39c1ab/jones-mysql/impl/MySQLDictionary.js#L502:C17:L502:C21: calleeImports = [329  50], training
2022-05-17 20:09:59 [INFO] label = 4 (TaintedPathSink), https://github.com/mapbox/tilelive-vector/blob/c4e7adf/index.js#L428:C12:L428:C30: calleeImports = [329  50], training
2022-05-17 20:10:00 [INFO] label = 4 (TaintedPathSink), https://github.com/amark/gun/blob/8b9f891/lib/file.js#L18:C71:L18:C78: calleeImports = [329  50], training
2022-05-17 20:10:00 [INFO] label = 4 (TaintedPathSink), https://github.com/amark/gun/blob/8b9f891/lib/memdisk.js#L12:C71:L12:C78: calleeImports = [329  50], training
2022-05-17 20:10:04 [INFO] label = 4 (TaintedPathSink), https://github.com/coveraje/coveraje/blob/f8072b8/lib/helper/index.js#L44:C54:L44:C63: calleeImports = [329  50], training
2022-05-17 20:10:04 [INFO] label = 4 (TaintedPathSink), https://github.com/coveraje/coveraje/blob/f8072b8/lib/webserver.js#L165:C48:L165:C51: calleeImports = [329  50], training
2022-05-17 20:10:06 [INFO] label = 4 (TaintedPathSink), https://github.com/bermi/sauce-connect-launcher/blob/efaf722/lib/sauce-connect-launcher.js#L265:C14:L265:C16: calleeImports = [329  50], training
2022-05-17 20:10:06 [INFO] label = 4 (TaintedPathSink), https://github.com/bermi/sauce-connect-launcher/blob/efaf722/lib/sauce-connect-launcher.js#L318:C14:L318:C25: calleeImports = [329  50], training
2022-05-17 20:10:18 [INFO] label = 4 (TaintedPathSink), https://github.com/erlantostes/plone/blob/3a5fb75/buildout-cache/eggs/Products.CMFPlone-5.0.4-py2.7.egg/Products/CMFPlone/static/components/r.js/build/jslib/x.js#L84:C34:L84:C41: calleeImports = [329  50], training
2022-05-17 20:10:21 [INFO] label = 4 (TaintedPathSink), https://github.com/balderdashy/sails/blob/d492825/lib/hooks/views/default-view-rendering-fn.js#L189:C14:L189:C20: calleeImports = [329  50], training
2022-05-17 20:10:24 [INFO] label = 4 (TaintedPathSink), https://github.com/uxebu/bonsai/blob/464091f/src/bootstrapper/context/node/requirejs.js#L31:C16:L31:C18: calleeImports = [329  50], training
2022-05-17 20:10:29 [INFO] label = 4 (TaintedPathSink), https://github.com/zhewangjoe/ember-precompile-brunch/blob/ec6dcd7/setup.js#L21:C12:L21:C41: calleeImports = [329  50], training
2022-05-17 20:10:29 [INFO] label = 4 (TaintedPathSink), https://github.com/rapidpro/rapidpro/blob/9c4e17c/static/bower/less/bin/lessc#L127:C21:L127:C23: calleeImports = [329  50], training
2022-05-17 20:10:33 [INFO] label = 4 (TaintedPathSink), https://github.com/sergeyksv/tinyhook/blob/e70cbb6/bin/forever-shim#L15:C18:L15:C25: calleeImports = [329  50], training
2022-05-17 20:10:33 [INFO] label = 4 (TaintedPathSink), https://github.com/sergeyksv/tinyhook/blob/e70cbb6/hook.js#L583:C21:L583:C28: calleeImports = [329  50], training
2022-05-17 20:10:35 [INFO] label = 4 (TaintedPathSink), https://github.com/heapsource/mongoose-attachments/blob/db7726e/lib/attachments.js#L161:C14:L161:C32: calleeImports = [329  50], training
2022-05-17 20:10:37 [INFO] label = 4 (TaintedPathSink), https://github.com/nodejitsu/require-analyzer/blob/234fed5/lib/require-analyzer.js#L345:C18:L345:C21: calleeImports = [329  50], training
2022-05-17 20:10:50 [INFO] label = 4 (TaintedPathSink), https://github.com/christkv/require_optional/blob/c11c4ec/index.js#L14:C16:L14:C41: calleeImports = [329  50], training
2022-05-17 20:10:56 [INFO] label = 4 (TaintedPathSink), https://github.com/jgallen23/clientjade/blob/50725c5/lib/compile.js#L20:C14:L20:C20: calleeImports = [329  50], training
2022-05-17 20:10:58 [INFO] label = 4 (TaintedPathSink), https://github.com/davglass/lcov-parse/blob/80d0395/lib/index.js#L113:C12:L113:C15: calleeImports = [329  50], training
2022-05-17 20:11:02 [INFO] label = 4 (TaintedPathSink), https://github.com/jaredhanson/electrolyte/blob/64cbfbf/lib/sources/dir.js#L45:C21:L45:C26: calleeImports = [329  50], training
2022-05-17 20:11:05 [INFO] label = 4 (TaintedPathSink), https://github.com/dflourusso/pre-push/blob/cc3c0d1/install.js#L26:C15:L26:C17: calleeImports = [329  50], training
2022-05-17 20:11:05 [INFO] label = 4 (TaintedPathSink), https://github.com/dflourusso/pre-push/blob/cc3c0d1/install.js#L48:C12:L48:C14: calleeImports = [329  50], training
2022-05-17 20:11:06 [INFO] label = 4 (TaintedPathSink), https://github.com/1602/jugglingdb/blob/be76ced/lib/railway.js#L88:C24:L88:C40: calleeImports = [329  50], training
2022-05-17 20:11:06 [INFO] label = 4 (TaintedPathSink), https://github.com/1602/jugglingdb/blob/be76ced/lib/schema.js#L91:C27:L91:C65: calleeImports = [329  50], training
2022-05-17 20:11:17 [INFO] label = 4 (TaintedPathSink), https://github.com/substack/propagit/blob/242d1ba/index.js#L316:C16:L316:C18: calleeImports = [329  50], training
2022-05-17 20:11:18 [INFO] label = 4 (TaintedPathSink), https://github.com/c9/architect/blob/aee3404/architect.js#L193:C29:L193:C35: calleeImports = [329  50], training
2022-05-17 20:11:18 [INFO] label = 4 (TaintedPathSink), https://github.com/c9/architect/blob/aee3404/architect.js#L229:C20:L229:C26: calleeImports = [329  50], training
2022-05-17 20:11:18 [INFO] label = 4 (TaintedPathSink), https://github.com/c9/architect/blob/aee3404/architect.js#L256:C20:L256:C26: calleeImports = [329  50], training
2022-05-17 20:11:20 [INFO] label = 4 (TaintedPathSink), https://github.com/tjanczuk/git-azure/blob/2293d96/src/cli/commands/app.js#L138:C20:L138:C28: calleeImports = [329  50], training
2022-05-17 20:11:20 [INFO] label = 4 (TaintedPathSink), https://github.com/tjanczuk/git-azure/blob/2293d96/src/cli/commands/app.js#L156:C18:L156:C34: calleeImports = [329  50], training
2022-05-17 20:11:20 [INFO] label = 4 (TaintedPathSink), https://github.com/tjanczuk/git-azure/blob/2293d96/src/cli/commands/app.js#L172:C21:L172:C53: calleeImports = [329  50], training
2022-05-17 20:11:20 [INFO] label = 4 (TaintedPathSink), https://github.com/tjanczuk/git-azure/blob/2293d96/src/cli/commands/app.js#L214:C19:L214:C32: calleeImports = [329  50], training
2022-05-17 20:11:20 [INFO] label = 4 (TaintedPathSink), https://github.com/tjanczuk/git-azure/blob/2293d96/src/cli/commands/app.js#L231:C18:L231:C34: calleeImports = [329  50], training
2022-05-17 20:11:20 [INFO] label = 4 (TaintedPathSink), https://github.com/tjanczuk/git-azure/blob/2293d96/src/cli/commands/app.js#L249:C18:L249:C34: calleeImports = [329  50], training
2022-05-17 20:11:20 [INFO] label = 4 (TaintedPathSink), https://github.com/tjanczuk/git-azure/blob/2293d96/src/cli/commands/app.js#L277:C18:L277:C27: calleeImports = [329  50], training
2022-05-17 20:11:20 [INFO] label = 4 (TaintedPathSink), https://github.com/tjanczuk/git-azure/blob/2293d96/src/cli/commands/app.js#L293:C20:L293:C58: calleeImports = [329  50], training
2022-05-17 20:11:20 [INFO] label = 4 (TaintedPathSink), https://github.com/tjanczuk/git-azure/blob/2293d96/src/cli/commands/app.js#L353:C18:L353:C58: calleeImports = [329  50], training
2022-05-17 20:11:20 [INFO] label = 4 (TaintedPathSink), https://github.com/tjanczuk/git-azure/blob/2293d96/src/cli/commands/app.js#L367:C18:L367:C31: calleeImports = [329  50], training
2022-05-17 20:11:20 [INFO] label = 4 (TaintedPathSink), https://github.com/tjanczuk/git-azure/blob/2293d96/src/cli/commands/app.js#L462:C51:L462:C63: calleeImports = [329  50], training
2022-05-17 20:11:25 [INFO] label = 4 (TaintedPathSink), https://github.com/webinos/Webinos-Platform/blob/27e549a/webinos/core/api/applauncher/lib/applauncher.js#L71:C20:L71:C29: calleeImports = [329  50], training
2022-05-17 20:11:25 [INFO] label = 4 (TaintedPathSink), https://github.com/webinos/Webinos-Platform/blob/27e549a/webinos/core/api/vehicle/contrib/vb-sim/vs.js#L239:C23:L239:C30: CalleeFlexibleAccessPath = [ 37  50 114 764], training
2022-05-17 20:11:25 [INFO] label = 4 (TaintedPathSink), https://github.com/webinos/Webinos-Platform/blob/27e549a/webinos/core/api/vehicle/contrib/vb-sim/vs.js#L239:C23:L239:C30: calleeImports = [329  50], training
2022-05-17 20:11:25 [INFO] label = 4 (TaintedPathSink), https://github.com/webinos/Webinos-Platform/blob/27e549a/webinos/core/manager/context_manager/lib/storageCheck.js#L35:C24:L35:C83: CalleeFlexibleAccessPath = [ 37  50 114 764 327], training
2022-05-17 20:11:25 [INFO] label = 4 (TaintedPathSink), https://github.com/webinos/Webinos-Platform/blob/27e549a/webinos/core/manager/context_manager/lib/storageCheck.js#L35:C24:L35:C83: calleeImports = [329  50], training
2022-05-17 20:11:25 [INFO] label = 4 (TaintedPathSink), https://github.com/webinos/Webinos-Platform/blob/27e549a/webinos/core/manager/context_manager/lib/storageCheck.js#L106:C28:L106:C36: CalleeFlexibleAccessPath = [ 37  50 114 764 327], training
2022-05-17 20:11:25 [INFO] label = 4 (TaintedPathSink), https://github.com/webinos/Webinos-Platform/blob/27e549a/webinos/core/manager/context_manager/lib/storageCheck.js#L106:C28:L106:C36: calleeImports = [329  50], training
2022-05-17 20:11:25 [INFO] label = 4 (TaintedPathSink), https://github.com/webinos/Webinos-Platform/blob/27e549a/webinos/core/manager/policy_manager/lib/decisionstorage.js#L52:C18:L52:C38: calleeImports = [329  50], training
2022-05-17 20:11:25 [INFO] label = 4 (TaintedPathSink), https://github.com/webinos/Webinos-Platform/blob/27e549a/webinos/core/manager/storage/lib/securestore.js#L138:C31:L138:C39: CalleeFlexibleAccessPath = [ 37  50 114 764 327], training
2022-05-17 20:11:25 [INFO] label = 4 (TaintedPathSink), https://github.com/webinos/Webinos-Platform/blob/27e549a/webinos/core/manager/storage/lib/securestore.js#L138:C31:L138:C39: calleeImports = [329  50], training
2022-05-17 20:11:25 [INFO] label = 4 (TaintedPathSink), https://github.com/webinos/Webinos-Platform/blob/27e549a/webinos/core/manager/storage/lib/securestore.js#L155:C27:L155:C33: CalleeFlexibleAccessPath = [ 37  50 114 764 327], training
2022-05-17 20:11:25 [INFO] label = 4 (TaintedPathSink), https://github.com/webinos/Webinos-Platform/blob/27e549a/webinos/core/manager/storage/lib/securestore.js#L155:C27:L155:C33: calleeImports = [329  50], training
2022-05-17 20:11:25 [INFO] label = 4 (TaintedPathSink), https://github.com/webinos/Webinos-Platform/blob/27e549a/webinos/core/manager/storage/lib/zipHelper.js#L107:C28:L107:C36: CalleeFlexibleAccessPath = [ 37  50 114 764 327], training
2022-05-17 20:11:25 [INFO] label = 4 (TaintedPathSink), https://github.com/webinos/Webinos-Platform/blob/27e549a/webinos/core/manager/storage/lib/zipHelper.js#L107:C28:L107:C36: calleeImports = [329  50], training
2022-05-17 20:11:25 [INFO] label = 4 (TaintedPathSink), https://github.com/webinos/Webinos-Platform/blob/27e549a/webinos/core/manager/storage/lib/zipHelper.js#L127:C32:L127:C42: CalleeFlexibleAccessPath = [ 37  50 114 764 327], training
2022-05-17 20:11:25 [INFO] label = 4 (TaintedPathSink), https://github.com/webinos/Webinos-Platform/blob/27e549a/webinos/core/manager/storage/lib/zipHelper.js#L127:C32:L127:C42: calleeImports = [329  50], training
2022-05-17 20:11:25 [INFO] label = 4 (TaintedPathSink), https://github.com/webinos/Webinos-Platform/blob/27e549a/webinos/core/manager/widget_manager/lib/managerutils.js#L54:C35:L54:C41: CalleeFlexibleAccessPath = [ 37  50 114 764 327], training
2022-05-17 20:11:25 [INFO] label = 4 (TaintedPathSink), https://github.com/webinos/Webinos-Platform/blob/27e549a/webinos/core/manager/widget_manager/lib/managerutils.js#L54:C35:L54:C41: calleeImports = [329  50], training
2022-05-17 20:11:25 [INFO] label = 4 (TaintedPathSink), https://github.com/webinos/Webinos-Platform/blob/27e549a/webinos/core/manager/widget_manager/lib/managerutils.js#L102:C32:L102:C37: CalleeFlexibleAccessPath = [ 37  50 114 764 327], training
2022-05-17 20:11:25 [INFO] label = 4 (TaintedPathSink), https://github.com/webinos/Webinos-Platform/blob/27e549a/webinos/core/manager/widget_manager/lib/managerutils.js#L102:C32:L102:C37: calleeImports = [329  50], training
2022-05-17 20:11:25 [INFO] label = 4 (TaintedPathSink), https://github.com/webinos/Webinos-Platform/blob/27e549a/webinos/core/manager/widget_manager/lib/widgetmanager/widgetmanager.js#L142:C36:L142:C43: CalleeFlexibleAccessPath = [ 37  50 114 764 327], training
2022-05-17 20:11:25 [INFO] label = 4 (TaintedPathSink), https://github.com/webinos/Webinos-Platform/blob/27e549a/webinos/core/manager/widget_manager/lib/widgetmanager/widgetmanager.js#L142:C36:L142:C43: calleeImports = [329  50], training
2022-05-17 20:11:25 [INFO] label = 4 (TaintedPathSink), https://github.com/webinos/Webinos-Platform/blob/27e549a/webinos/core/manager/widget_manager/lib/widgetmanager/widgetstorage.js#L58:C26:L58:C28: CalleeFlexibleAccessPath = [ 37  50 114 764 327], training
2022-05-17 20:11:25 [INFO] label = 4 (TaintedPathSink), https://github.com/webinos/Webinos-Platform/blob/27e549a/webinos/core/manager/widget_manager/lib/widgetmanager/widgetstorage.js#L58:C26:L58:C28: calleeImports = [329  50], training
2022-05-17 20:11:25 [INFO] label = 4 (TaintedPathSink), https://github.com/webinos/Webinos-Platform/blob/27e549a/webinos/core/manager/widget_manager/lib/widgetmanager/widgetstorage.js#L94:C44:L94:C54: CalleeFlexibleAccessPath = [ 37  50 114 764 327], training
2022-05-17 20:11:25 [INFO] label = 4 (TaintedPathSink), https://github.com/webinos/Webinos-Platform/blob/27e549a/webinos/core/manager/widget_manager/lib/widgetmanager/widgetstorage.js#L94:C44:L94:C54: calleeImports = [329  50], training
2022-05-17 20:11:25 [INFO] label = 4 (TaintedPathSink), https://github.com/webinos/Webinos-Platform/blob/27e549a/webinos/core/manager/widget_manager/lib/widgetmanager/widgetstorage.js#L126:C27:L126:C34: CalleeFlexibleAccessPath = [ 37  50 114 764 327], training
2022-05-17 20:11:25 [INFO] label = 4 (TaintedPathSink), https://github.com/webinos/Webinos-Platform/blob/27e549a/webinos/core/manager/widget_manager/lib/widgetmanager/widgetstorage.js#L126:C27:L126:C34: calleeImports = [329  50], training
2022-05-17 20:11:25 [INFO] label = 4 (TaintedPathSink), https://github.com/webinos/Webinos-Platform/blob/27e549a/webinos/core/manager/widget_manager/lib/widgetmanager/widgetstorage.js#L169:C27:L169:C29: CalleeFlexibleAccessPath = [ 37  50 114 764 327], training
2022-05-17 20:11:25 [INFO] label = 4 (TaintedPathSink), https://github.com/webinos/Webinos-Platform/blob/27e549a/webinos/core/manager/widget_manager/lib/widgetmanager/widgetstorage.js#L169:C27:L169:C29: calleeImports = [329  50], training
2022-05-17 20:11:25 [INFO] label = 4 (TaintedPathSink), https://github.com/webinos/Webinos-Platform/blob/27e549a/webinos/core/util/lib/configuration.js#L191:C33:L191:C40: calleeImports = [329  50], training
2022-05-17 20:11:25 [INFO] label = 4 (TaintedPathSink), https://github.com/webinos/Webinos-Platform/blob/27e549a/webinos/core/util/lib/configuration.js#L209:C30:L209:C41: calleeImports = [329  50], training
2022-05-17 20:11:25 [INFO] label = 4 (TaintedPathSink), https://github.com/webinos/Webinos-Platform/blob/27e549a/webinos/core/util/lib/configuration.js#L226:C34:L226:C37: calleeImports = [329  50], training
2022-05-17 20:11:25 [INFO] label = 4 (TaintedPathSink), https://github.com/webinos/Webinos-Platform/blob/27e549a/webinos/core/util/lib/logging.js#L140:C40:L140:C47: calleeImports = [329  50], training
2022-05-17 20:11:31 [INFO] label = 4 (TaintedPathSink), https://github.com/joyent/node-workflow/blob/8a2aa60/lib/runner.js#L228:C16:L228:C23: calleeImports = [329  50], training
2022-05-17 20:11:32 [INFO] label = 4 (TaintedPathSink), https://github.com/marcuswestin/require/blob/7d13921/lib/resolve.js#L58:C18:L58:C22: calleeImports = [329  50], training
2022-05-17 20:11:34 [INFO] label = 4 (TaintedPathSink), https://github.com/thenativeweb/node-eventstore/blob/904fbf6/index.js#L19:C18:L19:C24: calleeImports = [329  50], training
2022-05-17 20:11:53 [INFO] label = 4 (TaintedPathSink), https://github.com/mklabs/node-build-script/blob/c5cbcab/tasks/img.js#L98:C16:L98:C22: calleeImports = [329  50], training
2022-05-17 20:11:56 [INFO] label = 4 (TaintedPathSink), https://github.com/webpack-contrib/config-loader/blob/8d384a0/lib/load.js#L42:C38:L42:C43: CalleeFlexibleAccessPath = [294  50], training
2022-05-17 20:12:10 [INFO] label = 4 (TaintedPathSink), https://github.com/brianloveswords/habitat/blob/c03954b/index.js#L274:C49:L274:C52: calleeImports = [329  50], training
2022-05-17 20:12:13 [INFO] label = 4 (TaintedPathSink), https://github.com/substack/node-deputy/blob/5de9561/index.js#L13:C20:L13:C28: calleeImports = [329  50], training
2022-05-17 20:12:24 [INFO] label = 4 (TaintedPathSink), https://github.com/curist/grunt-bower/blob/fbd5b22/tasks/lib/helpers.js#L52:C23:L52:C31: calleeImports = [329  50], training
2022-05-17 20:12:31 [INFO] label = 4 (TaintedPathSink), https://github.com/samxxu/ensureDir/blob/067f803/index.js#L28:C12:L28:C14: calleeImports = [329  50], training
2022-05-17 20:12:44 [INFO] label = 4 (TaintedPathSink), https://github.com/tj/node-growl/blob/ad24aca/lib/growl.js#L23:C16:L23:C18: calleeImports = [329  50], training
2022-05-17 20:12:44 [INFO] label = 4 (TaintedPathSink), https://github.com/indexzero/nconf/blob/f1ca5f0/lib/nconf/stores/file.js#L109:C10:L109:C18: calleeImports = [329  50], training
2022-05-17 20:12:44 [INFO] label = 4 (TaintedPathSink), https://github.com/indexzero/nconf/blob/f1ca5f0/lib/nconf/stores/file.js#L146:C19:L146:C27: calleeImports = [329  50], training
2022-05-17 20:12:54 [INFO] label = 4 (TaintedPathSink), https://github.com/thenativeweb/node-cqrs-domain/blob/06e8947/lib/bumper/index.js#L17:C18:L17:C24: calleeImports = [329  50], training
2022-05-17 20:13:05 [INFO] label = 4 (TaintedPathSink), https://github.com/mapbox/carto/blob/3051072/bin/carto#L58:C17:L58:C21: calleeImports = [329  50], training
2022-05-17 20:13:07 [INFO] label = 4 (TaintedPathSink), https://github.com/arvindr21/blueimp-file-upload-expressjs/blob/0afb98b/lib/fileinfo.js#L47:C24:L47:C63: calleeImports = [329  50], training
2022-05-17 20:13:07 [INFO] label = 4 (TaintedPathSink), https://github.com/arvindr21/blueimp-file-upload-expressjs/blob/0afb98b/lib/fileinfo.js#L62:C29:L62:C84: calleeImports = [329  50], training
2022-05-17 20:13:17 [INFO] label = 4 (TaintedPathSink), https://github.com/inaes-tic/mbc-caspa/blob/087d0b5/utils.js#L26:C22:L26:C25: calleeImports = [329  50], training
2022-05-17 20:13:17 [INFO] label = 4 (TaintedPathSink), https://github.com/inaes-tic/mbc-caspa/blob/087d0b5/utils.js#L49:C24:L49:C27: calleeImports = [329  50], training
2022-05-17 20:13:17 [INFO] label = 4 (TaintedPathSink), https://github.com/inaes-tic/mbc-caspa/blob/087d0b5/utils.js#L104:C28:L104:C31: calleeImports = [329  50], training
2022-05-17 20:13:17 [INFO] label = 4 (TaintedPathSink), https://github.com/inaes-tic/mbc-caspa/blob/087d0b5/utils.js#L186:C14:L186:C23: calleeImports = [329  50], training
2022-05-17 20:13:17 [INFO] label = 4 (TaintedPathSink), https://github.com/inaes-tic/mbc-caspa/blob/087d0b5/utils.js#L191:C18:L191:C65: calleeImports = [329  50], training
2022-05-17 20:13:20 [INFO] label = 4 (TaintedPathSink), https://github.com/Froguard/wt/blob/6c4d01c/index.js#L99:C23:L99:C25: calleeImports = [329  50], training
2022-05-17 20:13:27 [INFO] label = 4 (TaintedPathSink), https://github.com/jfromaniello/winser/blob/586d585/bin/winser#L147:C47:L147:C85: calleeImports = [329  50], training
2022-05-17 20:13:27 [INFO] label = 4 (TaintedPathSink), https://github.com/mozilla/awsbox/blob/a4060b8/awsbox.js#L407:C25:L407:C30: calleeImports = [329  50], training
2022-05-17 20:13:28 [INFO] label = 4 (TaintedPathSink), https://github.com/observing/pre-commit/blob/a84bdc8/install.js#L26:C15:L26:C17: calleeImports = [329  50], training
2022-05-17 20:13:32 [INFO] label = 4 (TaintedPathSink), https://github.com/thlorenz/find-parent-dir/blob/cb72631/index.js#L24:C12:L24:C29: calleeImports = [329  50], training
2022-05-17 20:13:32 [INFO] label = 4 (TaintedPathSink), https://github.com/thlorenz/find-parent-dir/blob/cb72631/index.js#L40:C29:L40:C46: calleeImports = [329  50], training
2022-05-17 20:13:48 [INFO] label = 4 (TaintedPathSink), https://github.com/adrai/node-queue/blob/1955708/lib/queue.js#L21:C15:L21:C20: calleeImports = [329  50], training
2022-05-17 20:13:55 [INFO] label = 4 (TaintedPathSink), https://github.com/zedapp/zed/blob/661ba3a/app/dep/architect.js#L178:C32:L178:C38: calleeImports = [329  50], training
2022-05-17 20:13:55 [INFO] label = 4 (TaintedPathSink), https://github.com/zedapp/zed/blob/661ba3a/app/dep/architect.js#L210:C24:L210:C30: calleeImports = [329  50], training
2022-05-17 20:13:55 [INFO] label = 4 (TaintedPathSink), https://github.com/zedapp/zed/blob/661ba3a/app/dep/architect.js#L236:C24:L236:C30: calleeImports = [329  50], training
2022-05-17 20:13:58 [INFO] label = 4 (TaintedPathSink), https://github.com/mapbox/node-pre-gyp/blob/9267e52/lib/clean.js#L23:C12:L23:C20: calleeImports = [329  50], training
2022-05-17 20:13:58 [INFO] label = 4 (TaintedPathSink), https://github.com/mapbox/node-pre-gyp/blob/9267e52/lib/install.js#L201:C17:L201:C29: calleeImports = [329  50], training
2022-05-17 20:13:58 [INFO] label = 4 (TaintedPathSink), https://github.com/mapbox/node-pre-gyp/blob/9267e52/lib/package.js#L37:C15:L37:C27: calleeImports = [329  50], training
2022-05-17 20:13:58 [INFO] label = 4 (TaintedPathSink), https://github.com/mapbox/node-pre-gyp/blob/9267e52/lib/pre-binding.js#L18:C19:L18:C35: calleeImports = [329  50], training
2022-05-17 20:13:58 [INFO] label = 4 (TaintedPathSink), https://github.com/mapbox/node-pre-gyp/blob/9267e52/lib/publish.js#L21:C15:L21:C21: calleeImports = [329  50], training
2022-05-17 20:13:58 [INFO] label = 4 (TaintedPathSink), https://github.com/mapbox/node-pre-gyp/blob/9267e52/lib/testpackage.js#L22:C15:L22:C21: calleeImports = [329  50], training
2022-05-17 20:13:59 [INFO] label = 4 (TaintedPathSink), https://github.com/imonology/scalra/blob/3c41cf9/modules/ejs-wrapper.js#L156:C17:L156:C22: calleeImports = [329  50], training
2022-05-17 20:13:59 [INFO] label = 4 (TaintedPathSink), https://github.com/imonology/scalra/blob/3c41cf9/modules/ejs-wrapper.js#L243:C13:L243:C19: calleeImports = [329  50], training
2022-05-17 20:14:00 [INFO] label = 4 (TaintedPathSink), https://github.com/yui/grunt-yui-contrib/blob/f7e2c19/tasks/dist.js#L194:C24:L194:C30: calleeImports = [329  50], training
2022-05-17 20:14:00 [INFO] label = 4 (TaintedPathSink), https://github.com/yui/grunt-yui-contrib/blob/f7e2c19/tasks/dist.js#L223:C24:L223:C28: calleeImports = [329  50], training
2022-05-17 20:14:00 [INFO] label = 4 (TaintedPathSink), https://github.com/yui/grunt-yui-contrib/blob/f7e2c19/tasks/npm-build.js#L117:C21:L117:C25: calleeImports = [329  50], training
2022-05-17 20:14:05 [INFO] label = 4 (TaintedPathSink), https://github.com/fouber/pmui/blob/95cf14a/routes/util.js#L7:C20:L7:C23: calleeImports = [329  50], training
2022-05-17 20:14:05 [INFO] label = 4 (TaintedPathSink), https://github.com/fouber/pmui/blob/95cf14a/routes/util.js#L11:C20:L11:C23: calleeImports = [329  50], training
2022-05-17 20:14:07 [INFO] label = 4 (TaintedPathSink), https://github.com/marijaselakovic/JavaScriptIssuesStudy/blob/c2f6306/serverIssues/MochaIssues/issues/issue_701/mocha_after/bin/_mocha#L148:C20:L148:C22: calleeImports = [329  50], training
2022-05-17 20:14:07 [INFO] label = 4 (TaintedPathSink), https://github.com/marijaselakovic/JavaScriptIssuesStudy/blob/c2f6306/serverIssues/MochaIssues/issues/issue_701/mocha_after/bin/_mocha#L391:C15:L391:C18: calleeImports = [329  50], training
2022-05-17 20:14:07 [INFO] label = 4 (TaintedPathSink), https://github.com/marijaselakovic/JavaScriptIssuesStudy/blob/c2f6306/serverIssues/MochaIssues/issues/issue_763/mocha_after/bin/_mocha#L147:C20:L147:C22: calleeImports = [329  50], training
2022-05-17 20:14:07 [INFO] label = 4 (TaintedPathSink), https://github.com/marijaselakovic/JavaScriptIssuesStudy/blob/c2f6306/serverIssues/MochaIssues/issues/issue_763/mocha_after/bin/_mocha#L389:C15:L389:C18: calleeImports = [329  50], training
2022-05-17 20:14:11 [INFO] label = 4 (TaintedPathSink), https://github.com/Froguard/mihawk/blob/2c4e60e/mockServer.js#L49:C15:L49:C20: calleeImports = [329  50], training
2022-05-17 20:14:13 [INFO] label = 4 (TaintedPathSink), https://github.com/admc/wd/blob/e74df30/lib/tmp.js#L97:C12:L97:C15: calleeImports = [329  50], training
2022-05-17 20:14:19 [INFO] label = 4 (TaintedPathSink), https://github.com/StudioDeTelevision/admiraljs/blob/5846378/lib/fileserver/index.js#L52:C24:L52:C76: calleeImports = [329  50], training
2022-05-17 20:14:19 [INFO] label = 4 (TaintedPathSink), https://github.com/StudioDeTelevision/admiraljs/blob/5846378/lib/fileserver/index.js#L64:C21:L64:C89: calleeImports = [329  50], training
2022-05-17 20:14:21 [INFO] label = 4 (TaintedPathSink), https://github.com/jcoglan/vault/blob/c239074/node/cli.js#L105:C32:L105:C42: calleeImports = [329  50], training
2022-05-17 20:14:24 [INFO] label = 4 (TaintedPathSink), https://github.com/Jac96/Tesi/blob/57188dd/Tesi-DPDK/mysql-8.0.21/storage/ndb/nodejs/jones-ndb/impl/ndb/NdbMetadataManager.js#L43:C17:L43:C21: calleeImports = [329  50], training
2022-05-17 20:14:24 [INFO] label = 4 (TaintedPathSink), https://github.com/Jac96/Tesi/blob/57188dd/Tesi-DPDK/mysql-8.0.21/storage/ndb/nodejs/jones-ndb/impl/ndb/path_config.js#L41:C24:L41:C29: calleeImports = [329  50], training
2022-05-17 20:14:24 [INFO] label = 4 (TaintedPathSink), https://github.com/Jac96/Tesi/blob/57188dd/Tesi-DPDK/mysql-8.0.21/storage/ndb/nodejs/jones-ndb/impl/ndb/ndb_service_provider.js#L64:C19:L64:C29: calleeImports = [329  50], training
2022-05-17 20:14:52 [INFO] label = 4 (TaintedPathSink), https://github.com/c9/core/blob/7e1ac98/plugins/c9.ide.collab/server/collab-server.js#L3206:C12:L3206:C15: calleeImports = [329  50], training
2022-05-17 20:15:02 [INFO] label = 4 (TaintedPathSink), https://github.com/tjanczuk/iisnode/blob/8657944/src/scripts/interceptor.js#L44:C25:L44:C27: calleeImports = [329  50], training
2022-05-17 20:15:12 [INFO] label = 4 (TaintedPathSink), https://github.com/twobit/gear/blob/e8d66cc/lib/blob.js#L130:C20:L130:C26: calleeImports = [329  50], training
2022-05-17 20:15:13 [INFO] label = 4 (TaintedPathSink), https://github.com/gotwarlost/istanbul-middleware/blob/d09c92e/lib/handlers.js#L159:C25:L159:C32: calleeImports = [329  50], training
2022-05-17 20:15:23 [INFO] label = 4 (TaintedPathSink), https://github.com/mailru/fest/blob/c286ad1/lib/build.js#L53:C17:L53:C19: calleeImports = [329  50], training
2022-05-17 20:15:23 [INFO] label = 4 (TaintedPathSink), https://github.com/mailru/fest/blob/c286ad1/lib/build.js#L141:C26:L141:C28: calleeImports = [329  50], training
2022-05-17 20:15:23 [INFO] label = 4 (TaintedPathSink), https://github.com/mailru/fest/blob/c286ad1/lib/compile_file.js#L47:C17:L47:C24: calleeImports = [329  50], training
2022-05-17 20:15:23 [INFO] label = 4 (TaintedPathSink), https://github.com/mailru/fest/blob/c286ad1/lib/compile_file.js#L83:C17:L83:C33: calleeImports = [329  50], training
2022-05-17 20:15:23 [INFO] label = 4 (TaintedPathSink), https://github.com/mailru/fest/blob/c286ad1/lib/render.js#L46:C18:L46:C29: calleeImports = [329  50], training
2022-05-17 20:15:24 [INFO] label = 4 (TaintedPathSink), https://github.com/clutchski/coffeelint/blob/99f56ed/bin/coffeelint#L21:C15:L21:C25: calleeImports = [329  50], training
2022-05-17 20:15:33 [INFO] label = 4 (TaintedPathSink), https://github.com/legend80s/commit-msg-linter/blob/97af713/uninstall.js#L26:C13:L26:C25: calleeImports = [329  50], training
2022-05-17 20:15:45 [INFO] label = 4 (TaintedPathSink), https://github.com/interviewstreet/vfs-local/blob/43a6dfd/localfs.js#L595:C20:L595:C22: calleeImports = [329  50], training
2022-05-17 20:15:45 [INFO] label = 4 (TaintedPathSink), https://github.com/interviewstreet/vfs-local/blob/43a6dfd/localfs.js#L659:C24:L659:C29: calleeImports = [329  50], training
2022-05-17 20:15:48 [INFO] label = 4 (TaintedPathSink), https://github.com/jaredhanson/amd-resolve/blob/67934e2/lib/index.js#L11:C21:L11:C24: calleeImports = [329  50], training
2022-05-17 20:15:50 [INFO] label = 4 (TaintedPathSink), https://github.com/WeijuNB/PyF5/blob/17ef322/pyf5/bundled/less/bin/lessc#L184:C21:L184:C23: calleeImports = [329  50], training
2022-05-17 20:15:54 [INFO] label = 4 (TaintedPathSink), https://github.com/cowboy/node-glob-whatev/blob/facc12d/lib/glob.js#L58:C21:L58:C27: calleeImports = [329  50], training
2022-05-17 20:15:54 [INFO] label = 4 (TaintedPathSink), https://github.com/mapnik/mapnik-reference/blob/06460d6/scripts/make-datasource-ref.js#L64:C20:L64:C27: calleeImports = [329  50], training
2022-05-17 20:16:12 [INFO] label = 4 (TaintedPathSink), https://github.com/heldr/ftpm/blob/45907f8/ftpm.js#L150:C32:L150:C107: calleeImports = [329  50], training
2022-05-17 20:16:12 [INFO] label = 4 (TaintedPathSink), https://github.com/cpsubrian/node-views/blob/dac1ae3/views.js#L245:C18:L245:C21: calleeImports = [329  50], training
2022-05-17 20:16:12 [INFO] label = 4 (TaintedPathSink), https://github.com/cpsubrian/node-views/blob/dac1ae3/views.js#L307:C24:L307:C27: calleeImports = [329  50], training
2022-05-17 20:16:12 [INFO] label = 4 (TaintedPathSink), https://github.com/cpsubrian/node-views/blob/dac1ae3/views.js#L353:C24:L353:C27: calleeImports = [329  50], training
2022-05-17 20:16:17 [INFO] label = 4 (TaintedPathSink), https://github.com/substack/covert/blob/b2f79d7/bin/cmd.js#L16:C20:L16:C20: calleeImports = [329  50], training
2022-05-17 20:16:21 [INFO] label = 4 (TaintedPathSink), https://github.com/es-shims/es-shim-api/blob/d2b2ff2/api.js#L38:C18:L38:C28: calleeImports = [329  50], training
2022-05-17 20:16:22 [INFO] label = 4 (TaintedPathSink), https://github.com/jsoverson/grunt-strip/blob/a49b3d2/tasks/helpers/index.js#L15:C24:L15:C27: calleeImports = [329  50], training
2022-05-17 20:16:23 [INFO] label = 4 (TaintedPathSink), https://github.com/pifantastic/grunt-s3/blob/26cf3fb/tasks/lib/s3.js#L109:C21:L109:C23: calleeImports = [329  50], training
2022-05-17 20:16:31 [INFO] label = 4 (TaintedPathSink), https://github.com/BarryYan/pre-commit/blob/328dbf0/install.js#L11:C17:L11:C19: calleeImports = [329  50], training
2022-05-17 20:16:31 [INFO] label = 4 (TaintedPathSink), https://github.com/BarryYan/pre-commit/blob/328dbf0/install.js#L37:C13:L37:C17: calleeImports = [329  50], training
2022-05-17 20:16:31 [INFO] label = 4 (TaintedPathSink), https://github.com/BarryYan/pre-commit/blob/328dbf0/uninstall.js#L12:C13:L12:C21: calleeImports = [329  50], training
2022-05-17 20:16:40 [INFO] label = 4 (TaintedPathSink), https://github.com/jaredhanson/kerouac/blob/ab47948/lib/layout.js#L27:C14:L27:C17: calleeImports = [329  50], training
2022-05-17 20:16:43 [INFO] label = 4 (TaintedPathSink), https://github.com/yahoo/preceptor/blob/061ffec/lib/task/client/mocha.js#L507:C17:L507:C27: calleeImports = [329  50], training
2022-05-17 20:16:54 [INFO] label = 4 (TaintedPathSink), https://github.com/gregwebs/hamlet.js/blob/f3517f8/bin/hamlet.js#L61:C14:L61:C24: calleeImports = [329  50], training
2022-05-17 20:16:58 [INFO] label = 4 (TaintedPathSink), https://github.com/substack/node-figc/blob/7ced8db/index.js#L18:C21:L18:C30: calleeImports = [329  50], training
2022-05-17 20:17:19 [INFO] label = 4 (TaintedPathSink), https://github.com/azproduction/lmd/blob/03410c3/lib/lmd_common.js#L592:C36:L592:C52: calleeImports = [329  50], training
2022-05-17 20:17:19 [INFO] label = 4 (TaintedPathSink), https://github.com/azproduction/lmd/blob/03410c3/lib/lmd_common.js#L1254:C28:L1254:C37: calleeImports = [329  50], training
2022-05-17 20:17:20 [INFO] Reading in and preprocessing validation files
2022-05-17 20:17:21 [INFO] label = 4 (TaintedPathSink), https://github.com/Spote/ismailia/blob/2dda82f/src/instrumenter.js#L150:C37:L150:C44: calleeImports = [329  50], validation
2022-05-17 20:17:24 [INFO] label = 4 (TaintedPathSink), https://github.com/robinfehr/sessionstore/blob/81de8c7/lib/sessionstore.js#L16:C18:L16:C24: calleeImports = [329  50], validation
2022-05-17 20:17:26 [INFO] label = 4 (TaintedPathSink), https://github.com/DoubleSpout/rrestjs/blob/2e45593/lib/RestClusterPlus.js#L23:C15:L23:C27: calleeImports = [329  50], validation
2022-05-17 20:17:26 [INFO] label = 4 (TaintedPathSink), https://github.com/DoubleSpout/rrestjs/blob/2e45593/lib/RestRes404.js#L16:C16:L16:C34: calleeImports = [329  50], validation
2022-05-17 20:17:26 [INFO] label = 4 (TaintedPathSink), https://github.com/DoubleSpout/rrestjs/blob/2e45593/lib/createFolders.js#L35:C21:L35:C30: calleeImports = [329  50], validation
2022-05-17 20:17:37 [INFO] label = 4 (TaintedPathSink), https://github.com/kamicane/wrapup/blob/404e669/lib/wrapup.js#L361:C24:L361:C27: calleeImports = [329  50], validation
2022-05-17 20:17:39 [INFO] label = 4 (TaintedPathSink), https://github.com/nathanboktae/mocha-phantomjs/blob/7703447/bin/mocha-phantomjs#L50:C15:L50:C21: calleeImports = [329  50], validation
2022-05-17 20:17:39 [INFO] label = 4 (TaintedPathSink), https://github.com/nathanboktae/mocha-phantomjs/blob/7703447/bin/mocha-phantomjs#L103:C14:L103:C16: calleeImports = [329  50], validation
2022-05-17 20:17:39 [INFO] label = 4 (TaintedPathSink), https://github.com/nathanboktae/mocha-phantomjs/blob/7703447/bin/mocha-phantomjs#L133:C15:L133:C25: calleeImports = [329  50], validation
2022-05-17 20:17:40 [INFO] label = 4 (TaintedPathSink), https://github.com/thlorenz/docme/blob/4dcd56a/index.js#L46:C10:L46:C11: calleeImports = [329  50], validation
2022-05-17 20:17:45 [INFO] label = 4 (TaintedPathSink), https://github.com/saebekassebil/mingler/blob/f58cd77/lib/mingler.js#L47:C20:L47:C27: calleeImports = [329  50], validation
2022-05-17 20:17:45 [INFO] label = 4 (TaintedPathSink), https://github.com/saebekassebil/mingler/blob/f58cd77/lib/mingler.js#L157:C10:L157:C13: calleeImports = [329  50], validation
2022-05-17 20:17:48 [INFO] label = 4 (TaintedPathSink), https://github.com/caolan/jam/blob/befa3f2/lib/cache.js#L43:C16:L43:C23: CalleeFlexibleAccessPath = [ 50 764], validation
2022-05-17 20:17:48 [INFO] label = 4 (TaintedPathSink), https://github.com/caolan/jam/blob/befa3f2/lib/cache.js#L43:C16:L43:C23: calleeImports = [329  50], validation
2022-05-17 20:17:48 [INFO] label = 4 (TaintedPathSink), https://github.com/caolan/jam/blob/befa3f2/lib/commands/link.js#L102:C16:L102:C21: CalleeFlexibleAccessPath = [ 50 764], validation
2022-05-17 20:17:48 [INFO] label = 4 (TaintedPathSink), https://github.com/caolan/jam/blob/befa3f2/lib/commands/link.js#L102:C16:L102:C21: calleeImports = [329  50], validation
2022-05-17 20:17:48 [INFO] label = 4 (TaintedPathSink), https://github.com/caolan/jam/blob/befa3f2/lib/commands/install.js#L440:C16:L440:C16: CalleeFlexibleAccessPath = [ 50 764], validation
2022-05-17 20:17:48 [INFO] label = 4 (TaintedPathSink), https://github.com/caolan/jam/blob/befa3f2/lib/commands/install.js#L440:C16:L440:C16: calleeImports = [329  50], validation
2022-05-17 20:17:48 [INFO] label = 4 (TaintedPathSink), https://github.com/caolan/jam/blob/befa3f2/lib/commands/install.js#L683:C16:L683:C16: CalleeFlexibleAccessPath = [ 50 764], validation
2022-05-17 20:17:48 [INFO] label = 4 (TaintedPathSink), https://github.com/caolan/jam/blob/befa3f2/lib/commands/install.js#L683:C16:L683:C16: calleeImports = [329  50], validation
2022-05-17 20:17:48 [INFO] label = 4 (TaintedPathSink), https://github.com/caolan/jam/blob/befa3f2/lib/jamrc.js#L74:C16:L74:C23: CalleeFlexibleAccessPath = [ 50 764], validation
2022-05-17 20:17:48 [INFO] label = 4 (TaintedPathSink), https://github.com/caolan/jam/blob/befa3f2/lib/jamrc.js#L74:C16:L74:C23: calleeImports = [329  50], validation
2022-05-17 20:17:48 [INFO] label = 4 (TaintedPathSink), https://github.com/caolan/jam/blob/befa3f2/lib/jamrc.js#L156:C16:L156:C16: CalleeFlexibleAccessPath = [ 50 764], validation
2022-05-17 20:17:48 [INFO] label = 4 (TaintedPathSink), https://github.com/caolan/jam/blob/befa3f2/lib/jamrc.js#L156:C16:L156:C16: calleeImports = [329  50], validation
2022-05-17 20:17:48 [INFO] label = 4 (TaintedPathSink), https://github.com/caolan/jam/blob/befa3f2/lib/packages.js#L157:C20:L157:C47: CalleeFlexibleAccessPath = [ 50 764], validation
2022-05-17 20:17:48 [INFO] label = 4 (TaintedPathSink), https://github.com/caolan/jam/blob/befa3f2/lib/packages.js#L157:C20:L157:C47: calleeImports = [329  50], validation
2022-05-17 20:17:48 [INFO] label = 4 (TaintedPathSink), https://github.com/caolan/jam/blob/befa3f2/lib/project.js#L41:C16:L41:C23: CalleeFlexibleAccessPath = [ 50 764], validation
2022-05-17 20:17:48 [INFO] label = 4 (TaintedPathSink), https://github.com/caolan/jam/blob/befa3f2/lib/project.js#L41:C16:L41:C23: calleeImports = [329  50], validation
2022-05-17 20:17:48 [INFO] label = 4 (TaintedPathSink), https://github.com/caolan/jam/blob/befa3f2/lib/utils.js#L345:C16:L345:C18: CalleeFlexibleAccessPath = [ 50 764], validation
2022-05-17 20:17:48 [INFO] label = 4 (TaintedPathSink), https://github.com/caolan/jam/blob/befa3f2/lib/utils.js#L345:C16:L345:C18: calleeImports = [329  50], validation
2022-05-17 20:17:50 [INFO] label = 4 (TaintedPathSink), https://github.com/gundb/gun/blob/0ee3229/lib/file.js#L15:C71:L15:C79: calleeImports = [329  50], validation
2022-05-17 20:17:54 [INFO] label = 4 (TaintedPathSink), https://github.com/cmtt/publicsuffixlist/blob/9505517/delete_list.js#L13:C19:L13:C29: calleeImports = [329  50], validation
2022-05-17 20:17:54 [INFO] label = 4 (TaintedPathSink), https://github.com/cmtt/publicsuffixlist/blob/9505517/download_list.js#L14:C28:L14:C34: calleeImports = [329  50], validation
2022-05-17 20:17:55 [INFO] label = 4 (TaintedPathSink), https://github.com/Tencent/omi/blob/19e3772/packages/cax-omip/scripts/taro-cli/src/util/npm.js#L20:C19:L20:C33: CalleeFlexibleAccessPath = [294  50], validation
2022-05-17 20:17:55 [INFO] label = 4 (TaintedPathSink), https://github.com/Tencent/omi/blob/19e3772/packages/cax-omip/scripts/taro-cli/src/util/npm.js#L35:C36:L35:C45: CalleeFlexibleAccessPath = [294  50 327], validation
2022-05-17 20:17:55 [INFO] label = 4 (TaintedPathSink), https://github.com/Tencent/omi/blob/19e3772/packages/cax-omip/scripts/taro-cli/src/util/resolve_npm_files.js#L50:C29:L50:C35: CalleeFlexibleAccessPath = [294  50 327], validation
2022-05-17 20:17:55 [INFO] label = 4 (TaintedPathSink), https://github.com/Tencent/omi/blob/19e3772/packages/cax-omip/scripts/taro-cli/src/util/index.js#L598:C34:L598:C58: CalleeFlexibleAccessPath = [294  50 327], validation
2022-05-17 20:17:57 [INFO] label = 4 (TaintedPathSink), https://github.com/matthewrobb/six/blob/05ac683/lib/command.js#L377:C14:L377:C19: calleeImports = [329  50], validation
2022-05-17 20:17:57 [INFO] label = 4 (TaintedPathSink), https://github.com/matthewrobb/six/blob/05ac683/lib/command.js#L408:C12:L408:C16: calleeImports = [329  50], validation
2022-05-17 20:17:57 [INFO] label = 4 (TaintedPathSink), https://github.com/matthewrobb/six/blob/05ac683/lib/sake.js#L86:C20:L86:C45: calleeImports = [329  50], validation
2022-05-17 20:17:57 [INFO] label = 4 (TaintedPathSink), https://github.com/ashleynolan/christmas-tracker/blob/58cde80/_node_modules/jade/bin/jade.js#L65:C14:L65:C24: calleeImports = [329  50], validation
2022-05-17 20:17:57 [INFO] label = 4 (TaintedPathSink), https://github.com/ashleynolan/christmas-tracker/blob/58cde80/_node_modules/newrelic/lib/config.js#L168:C17:L168:C24: calleeImports = [329  50], validation
2022-05-17 20:17:57 [INFO] label = 4 (TaintedPathSink), https://github.com/ashleynolan/christmas-tracker/blob/58cde80/_node_modules/newrelic/lib/environment.js#L16:C15:L16:C21: calleeImports = [329  50], validation
2022-05-17 20:17:57 [INFO] label = 4 (TaintedPathSink), https://github.com/ashleynolan/christmas-tracker/blob/58cde80/_node_modules/newrelic/lib/environment.js#L83:C20:L83:C58: calleeImports = [329  50], validation
2022-05-17 20:17:57 [INFO] label = 4 (TaintedPathSink), https://github.com/ashleynolan/christmas-tracker/blob/58cde80/_node_modules/newrelic/lib/environment.js#L118:C20:L118:C28: calleeImports = [329  50], validation
2022-05-17 20:17:57 [INFO] label = 4 (TaintedPathSink), https://github.com/ashleynolan/christmas-tracker/blob/58cde80/_node_modules/newrelic/lib/environment.js#L167:C14:L167:C17: calleeImports = [329  50], validation
2022-05-17 20:18:10 [INFO] label = 4 (TaintedPathSink), https://github.com/davglass/yui-local/blob/5b676f6/lib/index.js#L14:C17:L14:C17: calleeImports = [329  50], validation
2022-05-17 20:18:10 [INFO] label = 4 (TaintedPathSink), https://github.com/davglass/yui-local/blob/5b676f6/lib/seed.js#L16:C21:L16:C24: calleeImports = [329  50], validation
2022-05-17 20:18:16 [INFO] label = 4 (TaintedPathSink), https://github.com/mozilla/persona/blob/59827a4/lib/db/json.js#L82:C18:L82:C23: calleeImports = [329  50], validation
2022-05-17 20:18:16 [INFO] label = 4 (TaintedPathSink), https://github.com/mozilla/persona/blob/59827a4/lib/i18n_client_check.js#L40:C23:L40:C59: calleeImports = [329  50], validation
2022-05-17 20:18:16 [INFO] label = 4 (TaintedPathSink), https://github.com/mozilla/persona/blob/59827a4/scripts/create_templates.js#L25:C28:L25:C37: calleeImports = [329  50], validation
2022-05-17 20:18:16 [INFO] label = 4 (TaintedPathSink), https://github.com/mozilla/persona/blob/59827a4/scripts/generate_ephemeral_keys.js#L25:C16:L25:C19: calleeImports = [329  50], validation
2022-05-17 20:18:16 [INFO] label = 4 (TaintedPathSink), https://github.com/mozilla/persona/blob/59827a4/scripts/generate_ephemeral_keys.js#L46:C19:L46:C21: calleeImports = [329  50], validation
2022-05-17 20:18:16 [INFO] label = 4 (TaintedPathSink), https://github.com/mozilla/persona/blob/59827a4/scripts/l10n-update.js#L54:C17:L54:C26: calleeImports = [329  50], validation
2022-05-17 20:18:16 [INFO] label = 4 (TaintedPathSink), https://github.com/mozilla/persona/blob/59827a4/scripts/l10n-update.js#L65:C19:L65:C32: calleeImports = [329  50], validation
2022-05-17 20:18:19 [INFO] label = 4 (TaintedPathSink), https://github.com/bahmutov/post-merge-make/blob/cdb0672/install.js#L50:C17:L50:C19: calleeImports = [329  50], validation
2022-05-17 20:18:19 [INFO] label = 4 (TaintedPathSink), https://github.com/bahmutov/post-merge-make/blob/cdb0672/install.js#L56:C19:L56:C23: calleeImports = [329  50], validation
2022-05-17 20:18:19 [INFO] label = 4 (TaintedPathSink), https://github.com/bahmutov/post-merge-make/blob/cdb0672/install.js#L75:C18:L75:C25: calleeImports = [329  50], validation
2022-05-17 20:18:20 [INFO] label = 4 (TaintedPathSink), https://github.com/natesilva/jayschema/blob/53a77b0/bin/validate.js#L30:C17:L30:C24: calleeImports = [329  50], validation
2022-05-17 20:18:22 [INFO] label = 4 (TaintedPathSink), https://github.com/sffc/socketio-file-upload/blob/8a82cb7/demo/app.js#L19:C29:L19:C36: calleeImports = [329  50], validation
2022-05-17 20:18:23 [INFO] label = 4 (TaintedPathSink), https://github.com/AlexRogalskiy/electron-cryptor/blob/d303cc4/server/tmp.js#L159:C12:L159:C15: calleeImports = [329  50], validation
2022-05-17 20:18:23 [INFO] label = 4 (TaintedPathSink), https://github.com/AlexRogalskiy/electron-cryptor/blob/d303cc4/server/tmp.js#L192:C21:L192:C24: calleeImports = [329  50], validation
2022-05-17 20:18:27 [INFO] label = 4 (TaintedPathSink), https://github.com/fouber/page-monitor/blob/de012b6/index.js#L25:C16:L25:C19: calleeImports = [329  50], validation
2022-05-17 20:18:27 [INFO] label = 4 (TaintedPathSink), https://github.com/fouber/page-monitor/blob/de012b6/index.js#L27:C29:L27:C32: calleeImports = [329  50], validation
2022-05-17 20:18:28 [INFO] label = 4 (TaintedPathSink), https://github.com/quylk2906/radiant-best-nodejs-app/blob/c4289cf/node_modules__/bindings/bindings.js#L153:C16:L153:C40: calleeImports = [329  50], validation
2022-05-17 20:18:28 [INFO] label = 4 (TaintedPathSink), https://github.com/quylk2906/radiant-best-nodejs-app/blob/c4289cf/node_modules__/node-pre-gyp/lib/clean.js#L16:C12:L16:C20: calleeImports = [329  50], validation
2022-05-17 20:18:28 [INFO] label = 4 (TaintedPathSink), https://github.com/quylk2906/radiant-best-nodejs-app/blob/c4289cf/node_modules__/node-pre-gyp/lib/install.js#L179:C25:L179:C37: calleeImports = [329  50], validation
2022-05-17 20:18:28 [INFO] label = 4 (TaintedPathSink), https://github.com/quylk2906/radiant-best-nodejs-app/blob/c4289cf/node_modules__/node-pre-gyp/lib/package.js#L21:C17:L21:C29: calleeImports = [329  50], validation
2022-05-17 20:18:28 [INFO] label = 4 (TaintedPathSink), https://github.com/quylk2906/radiant-best-nodejs-app/blob/c4289cf/node_modules__/node-pre-gyp/lib/pre-binding.js#L16:C20:L16:C36: calleeImports = [329  50], validation
2022-05-17 20:18:28 [INFO] label = 4 (TaintedPathSink), https://github.com/quylk2906/radiant-best-nodejs-app/blob/c4289cf/node_modules__/node-pre-gyp/lib/publish.js#L21:C17:L21:C23: calleeImports = [329  50], validation
2022-05-17 20:18:28 [INFO] label = 4 (TaintedPathSink), https://github.com/quylk2906/radiant-best-nodejs-app/blob/c4289cf/node_modules__/node-pre-gyp/lib/testpackage.js#L20:C17:L20:C23: calleeImports = [329  50], validation
2022-05-17 20:18:28 [INFO] label = 4 (TaintedPathSink), https://github.com/quylk2906/radiant-best-nodejs-app/blob/c4289cf/node_modules__/require_optional/index.js#L13:C16:L13:C41: calleeImports = [329  50], validation
2022-05-17 20:18:38 [INFO] label = 4 (TaintedPathSink), https://github.com/hughsk/reqursive/blob/09ba90b/index.js#L31:C53:L31:C59: calleeImports = [329  50], validation
2022-05-17 20:18:38 [INFO] label = 4 (TaintedPathSink), https://github.com/yui/yuglify/blob/7792e58/bin/yuglify#L98:C20:L98:C23: calleeImports = [329  50], validation
2022-05-17 20:18:40 [INFO] label = 4 (TaintedPathSink), https://github.com/cs-au-dk/NoRegrets/blob/cf30652/ci/mocha/bin/_mocha#L182:C20:L182:C22: calleeImports = [329  50], validation
2022-05-17 20:18:40 [INFO] label = 4 (TaintedPathSink), https://github.com/cs-au-dk/NoRegrets/blob/cf30652/ci/mocha/lib/utils.js#L660:C15:L660:C18: calleeImports = [329  50], validation
2022-05-17 20:18:41 [INFO] label = 4 (TaintedPathSink), https://github.com/modjs/mod/blob/e1215bd/lib/tasks/watch.js#L160:C43:L160:C50: calleeImports = [329  50], validation
2022-05-17 20:18:41 [INFO] label = 4 (TaintedPathSink), https://github.com/modjs/mod/blob/e1215bd/lib/utils/file.js#L546:C20:L546:C27: calleeImports = [329  50], validation
2022-05-17 20:18:44 [INFO] label = 4 (TaintedPathSink), https://github.com/substack/fleet/blob/bf167e5/lib/remote.js#L10:C16:L10:C24: calleeImports = [329  50], validation
2022-05-17 20:18:44 [INFO] label = 4 (TaintedPathSink), https://github.com/substack/fleet/blob/bf167e5/lib/git.js#L51:C24:L51:C36: calleeImports = [329  50], validation
2022-05-17 20:18:45 [INFO] label = 4 (TaintedPathSink), https://github.com/kartotherian/kartotherian/blob/f3e4af3/packages/tilelive-vector/index.js#L508:C12:L508:C30: calleeImports = [329  50], validation
2022-05-17 20:18:47 [INFO] label = 4 (TaintedPathSink), https://github.com/google/mysql-protobuf/blob/467cda6/storage/ndb/nodejs/Adapter/impl/SPI.js#L38:C35:L38:C48: calleeImports = [329  50], validation
2022-05-17 20:18:47 [INFO] label = 4 (TaintedPathSink), https://github.com/google/mysql-protobuf/blob/467cda6/storage/ndb/nodejs/Adapter/impl/ndb/ndb_service_provider.js#L59:C19:L59:C24: calleeImports = [329  50], validation
2022-05-17 20:18:54 [INFO] label = 4 (TaintedPathSink), https://github.com/shane-tomlinson/connect-fonts/blob/83ccd76/lib/font-pack-configurator.js#L86:C23:L86:C30: calleeImports = [329  50], validation
2022-05-17 20:18:56 [INFO] label = 4 (TaintedPathSink), https://github.com/yeoman/yeoman-assert/blob/2457f60/index.js#L55:C29:L55:C32: CalleeFlexibleAccessPath = [ 50 764], validation
2022-05-17 20:18:56 [INFO] label = 4 (TaintedPathSink), https://github.com/yeoman/yeoman-assert/blob/2457f60/index.js#L76:C29:L76:C32: CalleeFlexibleAccessPath = [ 50 764], validation
2022-05-17 20:18:58 [INFO] label = 4 (TaintedPathSink), https://github.com/dresende/node-orm-old/blob/c2fee9b/lib/orm.js#L631:C10:L631:C15: calleeImports = [329  50], validation
2022-05-17 20:19:02 [INFO] label = 4 (TaintedPathSink), https://github.com/proverma/arrow/blob/9c79d7b/lib/proxy/proxymanager.js#L318:C57:L318:C78: calleeImports = [329  50], validation
2022-05-17 20:19:02 [INFO] label = 4 (TaintedPathSink), https://github.com/proverma/arrow/blob/9c79d7b/lib/session/testsession.js#L302:C29:L302:C62: calleeImports = [329  50], validation
2022-05-17 20:19:02 [INFO] label = 4 (TaintedPathSink), https://github.com/proverma/arrow/blob/9c79d7b/lib/session/testsession.js#L321:C36:L321:C55: calleeImports = [329  50], validation
2022-05-17 20:19:02 [INFO] label = 4 (TaintedPathSink), https://github.com/proverma/arrow/blob/9c79d7b/lib/session/testsession.js#L338:C40:L338:C60: calleeImports = [329  50], validation
2022-05-17 20:19:02 [INFO] label = 4 (TaintedPathSink), https://github.com/proverma/arrow/blob/9c79d7b/lib/util/fileutil.js#L41:C20:L41:C26: calleeImports = [329  50], validation
2022-05-17 20:19:02 [INFO] label = 4 (TaintedPathSink), https://github.com/proverma/arrow/blob/9c79d7b/lib/util/fileutil.js#L69:C24:L69:C31: calleeImports = [329  50], validation
2022-05-17 20:19:02 [INFO] label = 4 (TaintedPathSink), https://github.com/proverma/arrow/blob/9c79d7b/lib/util/reportmanager.js#L359:C29:L359:C35: calleeImports = [329  50], validation
2022-05-17 20:19:25 [INFO] label = 4 (TaintedPathSink), https://github.com/agnat/node_mdns/blob/43f7256/utils/testrun#L30:C22:L30:C24: calleeImports = [329  50], validation
2022-05-17 20:19:26 [INFO] label = 4 (TaintedPathSink), https://github.com/jquery/jquery-migrate/blob/8c61bf7/build/release.js#L98:C46:L98:C56: calleeImports = [329  50], validation
2022-05-17 20:19:29 [INFO] label = 4 (TaintedPathSink), https://github.com/1602/compound/blob/7c5dabe/lib/compound.js#L135:C24:L135:C41: calleeImports = [329  50], validation
2022-05-17 20:19:29 [INFO] label = 4 (TaintedPathSink), https://github.com/1602/compound/blob/7c5dabe/lib/compound.js#L288:C20:L288:C35: calleeImports = [329  50], validation
2022-05-17 20:19:29 [INFO] label = 4 (TaintedPathSink), https://github.com/1602/compound/blob/7c5dabe/lib/helpers.js#L257:C24:L257:C31: calleeImports = [329  50], validation
2022-05-17 20:19:46 [INFO] label = 4 (TaintedPathSink), https://github.com/substack/travisify/blob/65e2534/bin/cmd.js#L41:C29:L41:C48: calleeImports = [329  50], validation
2022-05-17 20:19:46 [INFO] label = 4 (TaintedPathSink), https://github.com/substack/travisify/blob/65e2534/lib/config.js#L26:C16:L26:C19: calleeImports = [329  50], validation
2022-05-17 20:19:46 [INFO] label = 4 (TaintedPathSink), https://github.com/substack/travisify/blob/65e2534/lib/git_dir.js#L10:C24:L10:C34: calleeImports = [329  50], validation
2022-05-17 20:19:56 [INFO] label = 4 (TaintedPathSink), https://github.com/jaredhanson/locomotive/blob/c1af028/lib/boot/di/routes.js#L31:C21:L31:C26: calleeImports = [329  50], validation
2022-05-17 20:19:56 [INFO] label = 4 (TaintedPathSink), https://github.com/jaredhanson/locomotive/blob/c1af028/lib/boot/routes.js#L39:C21:L39:C26: calleeImports = [329  50], validation
2022-05-17 20:19:56 [INFO] label = 4 (TaintedPathSink), https://github.com/jaredhanson/locomotive/blob/c1af028/lib/resolvers/node/controller.js#L51:C22:L51:C27: calleeImports = [329  50], validation
2022-05-17 20:20:22 [INFO] label = 4 (TaintedPathSink), https://github.com/twitter/recess/blob/146143b/bin/recess#L54:C58:L54:C63: calleeImports = [329  50], validation
2022-05-17 20:20:23 [INFO] label = 4 (TaintedPathSink), https://github.com/substack/browser-launcher/blob/d31d796/lib/config.js#L18:C40:L18:C49: calleeImports = [329  50], validation
2022-05-17 20:20:31 [INFO] label = 4 (TaintedPathSink), https://github.com/vesln/package/blob/446c9a8/lib/package.js#L49:C16:L49:C41: calleeImports = [329  50], validation
2022-05-17 20:20:35 [INFO] label = 4 (TaintedPathSink), https://github.com/shepherdwind/velocity.js/blob/93245a5/bin/velocity-cli.js#L67:C16:L67:C23: calleeImports = [329  50], validation

@kaeluka kaeluka marked this pull request as ready for review May 17, 2022 21:09
esbena and others added 18 commits June 30, 2022 12:39
@esbena
fix semantic merge conflict
42ff869
@esbena @henrymercer
Apply suggestions from code review
6b0caf9 
Co-authored-by: Henry Mercer <henrymercer@github.com>
@esbena
address review comments
b76a11a
add docstring examples
cf0614e
remove Input_ArgumentIndexAndAccessPathFromCallee
0ffeb6a
use proper import instead of inlining
36fcd66
ATM: new feature to list all imports in an endpoint's file
c47d8fc
documentation for new feature
b128705
documentation for calleeImports ATM feature
abbf1b0
add functionInterfacesInFile and surroundingFunctionParameters features
9b9b690
add documentations and rename a feature
71409c6
use ? for unknown parameternames
f7a5992
performance fixes
7248620
fix bug in InputArgumentIndex feature
b76be24
add assignedToPropName feature to let the model improve number of fal…
477ed25 
…se positives for XSS query
add stringConcatenatedWith feature to help the model learn that strin…
2196be6 
…g concatenation leaves are usually not sinks
enable new features for experimentation
f9773cd
@esbena
use experimental ATM ML model
5d272f8
@kaeluka kaeluka closed this by deleting the head repository Aug 31, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@esbena esbena esbena left review comments

Copilot code review Copilot Awaiting requested review from Copilot Copilot will automatically review once the pull request is marked ready for review

Assignees

No one assigned

Labels

C# C++ documentation Go Java JS Kotlin Python QL-for-QL Ruby Swift

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.