Search

Composite Recipes

Recipes that include further recipes, often including the individual recipes below.

• Find concurrency primitives
• Find data-flow sink positions
• Find data-flow source positions
• Find database-query seeds
• Find filesystem-operation seeds
• Find hardcoded literals and error-handling smells
• Find hotspots and complexity points
• Find outbound-networking seeds
• Find public-API and binary-stability surface
• Find reflection and runtime introspection
• Find reflection seeds
• Find serialization seeds
• Find test-surface positions
• Surface impact-analysis findings

Recipes

• Find !! not-null assertions
• Find @Disabled / @Ignore test annotations
• Find @DisplayName(...) test annotations
• Find @JvmField annotations
• Find @JvmOverloads annotations
• Find @JvmStatic annotations
• Find @OptIn(...) annotations
• Find @ParameterizedTest annotations
• Find @Volatile properties
• Find AccessibleObject.setAccessible(true) calls
• Find Android ClipboardManager access
• Find AssertJ assertThat(...) assertion chains
• Find AtomicReference/AtomicInteger/AtomicLong/AtomicBoolean allocations
• Find Class.forName(...) calls
• Find Class.getDeclaredField / Class.getField calls
• Find Color(0xFF...) color-literal constructions
• Find CompletableFuture / FutureTask allocations
• Find EntityManager.createQuery(...) calls
• Find Executors.newXxxThreadPool factory calls
• Find File.readBytes() calls
• Find File.readText() calls
• Find File.writeText(...) calls
• Find Files.copy(...) calls
• Find Files.delete(...) / Files.deleteIfExists(...) calls
• Find Files.newBufferedWriter(...) calls
• Find Files.writeString(...) calls
• Find HTTP client construction sites
• Find HttpServletRequest.getParameter/getHeader/getCookies reads
• Find HttpURLConnection references
• Find Jackson ObjectMapper.readValue(...) calls
• Find Jackson ObjectMapper.writeValue*(...) calls
• Find KClass.constructors access
• Find KClass.declaredFunctions / declaredMemberFunctions access
• Find KClass.members / memberFunctions / memberProperties access
• Find Kotest spec classes
• Find Kotlin reflection (KClass.memberFunctions, KClass.members, etc.)
• Find ObjectOutputStream.writeObject(...) calls
• Find ReentrantLock() / ReentrantReadWriteLock() allocations
• Find SQL execution sinks (Statement.execute*, prepareStatement, createNativeQuery)
• Find Semaphore / CountDownLatch / CyclicBarrier allocations
• Find ServiceLoader.load(...) calls
• Find Statement.executeQuery(sql) calls
• Find Statement.executeUpdate(sql) calls
• Find System.getenv(...) / System.getProperty(...) reads
• Find Thread(...) constructor calls
• Find ThreadLocal() allocations
• Find bare as casts (unsafe)
• Find build- and source-hygiene smells
• Find catch (e: Exception) and catch (e: Throwable) clauses
• Find catch blocks with empty bodies
• Find classes with more than 200 statements
• Find classes with more than 25 methods
• Find cryptographic primitive entries (KeyGenerator.generateKey, Cipher.getInstance, etc.)
• Find declarations annotated @Deprecated
• Find declarations annotated @RequiresOptIn
• Find filesystem read calls (File.readText, Files.readString, etc.)
• Find filesystem write calls (File.writeText, Files.write, etc.)
• Find functions with empty bodies
• Find functions with more than 30 statements
• Find functions with more than 5 parameters
• Find functions with nesting depth greater than 4
• Find import x.* wildcard imports
• Find java.lang.reflect.Field.get/set calls
• Find java.lang.reflect.Method.invoke(...) calls
• Find logger write calls (info/warn/error/debug)
• Find mockk<X>() / mockk(...) calls
• Find non-cryptographic random sources (Math.random, kotlin.random.Random, java.util.Random)
• Find numeric literals other than 0, 1, -1
• Find okhttp3.OkHttpClient constructions
• Find okhttp3.Request.Builder() constructions
• Find outbound-network sinks (URL.openConnection, OkHttpClient.newCall, etc.)
• Find process-execution sinks (Runtime.exec, ProcessBuilder.start)
• Find public const val declarations
• Find public lateinit var declarations
• Find readLine() / Scanner.next*() calls
• Find recursive functions not marked tailrec
• Find synchronized(lock) \{ ... \} calls
• Find tests tagged @Tag("slow")
• Find throw Exception(...) and throw RuntimeException(...) calls
• Find when expressions with more than 10 branches