Skip to content

Kotlin: add knowledge tomls for kotlinx.*, Ktor, Compose Multiplatform #185

Description

@andrew

knowledge/kotlin/ covers dev tooling (detekt, dokka, kotest, kotlin-test, ktlint) but no runtime libraries or frameworks.

Top dependencies of ~97k Kotlin artifacts on Maven Central (packages.ecosyste.ms, 5k random sample, latest version each, KMP target suffixes collapsed), excluding stdlib/reflect and entries already in knowledge/java/:

1175  org.jetbrains.kotlinx:kotlinx-coroutines-core
 612  org.jetbrains.kotlinx:kotlinx-serialization-json
 291  org.jetbrains.kotlinx:kotlinx-datetime
 273  io.ktor:ktor-client-core
 230  org.jetbrains.kotlinx:atomicfu
 229  org.jetbrains.compose.runtime:runtime
 103  org.jetbrains.kotlinx:kotlinx-io-core

Proposed additions:

  • kotlinx-coroutines.toml (library)
  • kotlinx-serialization.toml (library); sink: polymorphic decodeFromString CWE-502
  • kotlinx-datetime.toml (library)
  • atomicfu.toml (library)
  • kotlinx-io.toml (library); sink: SystemFileSystem.source/sink CWE-22
  • ktor.toml (build); sinks: HttpClient.get/request CWE-918, call.respondText with ContentType.Text.Html CWE-79
  • compose-multiplatform.toml (build); detect via plugin id org.jetbrains.compose or org.jetbrains.compose.* deps
  • kotlin-multiplatform.toml (build); detect via kotlin("multiplatform") / org.jetbrains.kotlin.multiplatform plugin id in build.gradle.kts
  • mockk.toml (test)

knowledge/java/okhttp.toml and gson.toml list ecosystems = ["java"] only; both are used by ~2.5% of the Kotlin sample and could add "kotlin".

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    enhancementNew feature or request

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions