apache / logging-log4j-auditSource Code Overview

Analysis scope, overview of main, test, generated, deployment, build, and other code.

Source Code Analysis Scope

Files includes and excluded from analyses

txt

properties

13 extensions are included in analyses: java, js, css, xml, less, md, sql, txt, json, html, properties, gitignore, groovy
9 criteria are used to exclude files from analysis:

exclude files with path like ".*/sokrates_.*?[.]json" (Sokrates conventions and configurations) (1 file).
exclude files with path like "(?i).*/jquery.*[.]js" (jQuery files) (28 files).
exclude files with path like ".*jquery[.].*[.]js" (jQuery library) (0 files).
exclude files with path like ".*[.]min[.]js" (Minimized JS library) (2 files).
exclude files with path like ".*/extern(al)?/.*" (Dependencies) (1 file).
exclude files with path like ".*/[.][a-zA-Z0-9_]+.*" (Hidden files and folders) (1 file).
exclude files with path like ".*/git[-]history[.]txt" (Git history) (1 file).
exclude files with path like ".*/git[-][a-zA-Z0-9_]+[.]txt" (Git data exports for sokrates analyses) (0 files).
exclude files with path like ".*/bootstrap[.](js|css|less|scss|styl)" (Bootstrap) (2 files).

The source code folder contains 392 files:

313 files are included in analyses.
79 files are excluded from analyses:

Overview of Analyzed Files

Basic stats on analyzed files

Intro

For analysis purposes we separate files in scope into several categories: main, test, generated, deployment and build, and other.

The main category contains all manually created source code files that are being used in the production.
Files in the main category are used as input for other analyses: logical decomposition, concerns, duplication, file size, unit size, and conditional complexity.
Test source code files are used only for testing of the product. These files are normally not deployed to production.
Build and deployment source code files are used to configure or support build and deployment process.
Generated source code files are automatically generated files that have not been manually changed after generation.
While a source code folder may contain a number of files, we are primarily interested in the source code files that are being written and maintained by developers.
Files containing binaries, documentation, or third-party libraries, for instance, are excluded from analysis. The exception are third-party libraries that have been changed by developers.

Main Code

All manually created or maintained source code that defines logic of the product that is run in a production environment.

Explore: circles | sunburst

The following criteria are used to filter files:

files with paths like ".*".

246 files match defined criteria (22,279 LOC, 100.0% vs. main code):

20 *.css files (8,394 LOC)
172 *.java files (8,105 LOC)
7 *.js files (2,085 LOC)
20 *.less files (1,778 LOC)
18 *.xml files (1,549 LOC)
3 *.sql files (278 LOC)
5 *.html files (88 LOC)
1 *.groovy files (2 LOC)

" *.css" is biggest, containing 37.68% of LOC.
" *.groovy" is smallest, containing 0.01% of LOC.

Test Code

Used only for testing of the product. Normally not deployed in a production environment.

Explore: circles | sunburst

The following criteria are used to filter files:

files with paths like ".*/[Tt]est/.*".

27 files match defined criteria (1,682 LOC, 7.5% vs. main code):

17 *.java files (1,270 LOC)
5 *.sql files (240 LOC)
5 *.xml files (172 LOC)

" *.java" is biggest, containing 75.51% of LOC.
" *.xml" is smallest, containing 10.23% of LOC.

Build and Deployment Code

Source code used to configure or support build and deployment process.

Explore: circles | sunburst

The following criteria are used to filter files:

files with paths like ".*/pom[.]xml".
files with paths like ".*/package[.]json".
files with paths like ".*/assembly/src[.]xml".
files with paths like ".*[.]git[a-z]+".
files with paths like ".*/[.]gitignore".

13 files match defined criteria (2,631 LOC, 11.8% vs. main code). All matches are in *.xml files.

Other Code

txt

properties

Explore: circles | sunburst

The following criteria are used to filter files:

files with paths like ".*[.]md".
files with paths like ".*[.]json".
files with paths like ".*[.]txt".
files with paths like ".*/LICENSE[.][a-z0-9]+".
files with paths like ".*[.]properties".
files with paths like ".*/checkstyle.*".
files with paths like ".*/README[.][a-z0-9]+".
files with paths like ".*/[.]gitignore".
files with paths like ".*/checkstyle[.]xml".

27 files match defined criteria (1,760 LOC, 7.9% vs. main code):

5 *.json files (674 LOC)
5 *.txt files (553 LOC)
12 *.md files (342 LOC)
3 *.xml files (158 LOC)
2 *.properties files (33 LOC)

" *.json" is biggest, containing 38.3% of LOC.
" *.properties" is smallest, containing 1.88% of LOC.

Analyzers

Info about analyzers used for source code examinations.

*.css files are analyzed with CssAnalyzer:

All basic standard analyses supported (source code overview, duplication, file size, concerns, findings, metrics, controls)

Advanced code cleaning (empty lines and comments removed for LOC calculations, additional cleaning for duplication calculations)

No unit size analysis

No conditional complexity analysis

No dependency analysis

*.java files are analyzed with JavaAnalyzer:

All basic standard analyses supported (source code overview, duplication, file size, concerns, findings, metrics, controls)

Advanced code cleaning (empty lines and comments removed for LOC calculations, additional cleaning for duplication calculations)

Unit size analysis

Conditional complexity analysis

Advanced heuristic dependency analysis (based on package names)

*.js files are analyzed with JavaScriptAnalyzer:

All basic standard analyses supported (source code overview, duplication, file size, concerns, findings, metrics, controls)

Advanced code cleaning (empty lines and comments removed for LOC calculations, additional cleaning for duplication calculations)

Unit size analysis

Conditional complexity analysis

No dependency analysis

*.less files are analyzed with LessAnalyzer:

All basic standard analyses supported (source code overview, duplication, file size, concerns, findings, metrics, controls)

Advanced code cleaning (empty lines and comments removed for LOC calculations, additional cleaning for duplication calculations)

No unit size analysis

No conditional complexity analysis

No dependency analysis

*.xml files are analyzed with XmlAnalyzer:

All basic standard analyses supported (source code overview, duplication, file size, concerns, findings, metrics, controls)

Advanced code cleaning (empty lines and comments removed for LOC calculations, additional cleaning for duplication calculations)

No unit size analysis

No conditional complexity analysis

No dependency analysis

*.sql files are analyzed with SqlAnalyzer:

All basic standard analyses supported (source code overview, duplication, file size, concerns, findings, metrics, controls)

Advanced code cleaning (empty lines and comments removed for LOC calculations, additional cleaning for duplication calculations)

No unit size analysis

No conditional complexity analysis

No dependency analysis

*.html files are analyzed with HtmlAnalyzer:

All basic standard analyses supported (source code overview, duplication, file size, concerns, findings, metrics, controls)

Advanced code cleaning (empty lines and comments removed for LOC calculations, additional cleaning for duplication calculations)

Unit size analysis

Conditional complexity analysis

Advanced heuristic dependency analysis

*.groovy files are analyzed with GroovyAnalyzer:

All basic standard analyses supported (source code overview, duplication, file size, concerns, findings, metrics, controls)

Advanced code cleaning (empty lines and comments removed for LOC calculations, additional cleaning for duplication calculations)

Unit size analysis

Conditional complexity analysis

Basic heuristic dependency analysis

2023-08-10 17:30