Awesome
atom-samples
Collection of data-flow and usage slice samples for appthreat/atom.
Slice Generation
Slices were generated using the following commands, where language is the programming language of the target project as listed in Sample Projects.
atom usages -l language -o app.atom -s usages.json .
atom reachables -l language -o app.atom -s reachables.json .
Java and javascript projects require cdxgen be run with the deep option for reachables
cdxgen -t java --deep .
Sample Projects
Data-flow and usage commands for sample projects below.
Project | Type |
---|---|
apolloconfig/apollo | java |
avajs/ava | javascript |
axios/axios | javascript |
explosion/spaCy | python |
karatelabs/karate | java |
msiemens/tinydb | python |
scrapy/scrapy | python |
sequelize/sequelize | javascript |
sqshq/piggymetrics | java |
tornadoweb/tornado | python |
videojs/video.js | javascript |
Generation Script
generate.py can be used to download the sample sources and generate slices in linux or Windows (via either MSYS2 or WSL), or from other sample repositories in a csv modeled on sources.csv.