knowledge/kotlin/ covers dev tooling (detekt, dokka, kotest, kotlin-test, ktlint) but no runtime libraries or frameworks.
Top dependencies of ~97k Kotlin artifacts on Maven Central (packages.ecosyste.ms, 5k random sample, latest version each, KMP target suffixes collapsed), excluding stdlib/reflect and entries already in knowledge/java/:
1175 org.jetbrains.kotlinx:kotlinx-coroutines-core
612 org.jetbrains.kotlinx:kotlinx-serialization-json
291 org.jetbrains.kotlinx:kotlinx-datetime
273 io.ktor:ktor-client-core
230 org.jetbrains.kotlinx:atomicfu
229 org.jetbrains.compose.runtime:runtime
103 org.jetbrains.kotlinx:kotlinx-io-core
Proposed additions:
kotlinx-coroutines.toml (library)
kotlinx-serialization.toml (library); sink: polymorphic decodeFromString CWE-502
kotlinx-datetime.toml (library)
atomicfu.toml (library)
kotlinx-io.toml (library); sink: SystemFileSystem.source/sink CWE-22
ktor.toml (build); sinks: HttpClient.get/request CWE-918, call.respondText with ContentType.Text.Html CWE-79
compose-multiplatform.toml (build); detect via plugin id org.jetbrains.compose or org.jetbrains.compose.* deps
kotlin-multiplatform.toml (build); detect via kotlin("multiplatform") / org.jetbrains.kotlin.multiplatform plugin id in build.gradle.kts
mockk.toml (test)
knowledge/java/okhttp.toml and gson.toml list ecosystems = ["java"] only; both are used by ~2.5% of the Kotlin sample and could add "kotlin".
knowledge/kotlin/covers dev tooling (detekt, dokka, kotest, kotlin-test, ktlint) but no runtime libraries or frameworks.Top dependencies of ~97k Kotlin artifacts on Maven Central (packages.ecosyste.ms, 5k random sample, latest version each, KMP target suffixes collapsed), excluding stdlib/reflect and entries already in
knowledge/java/:Proposed additions:
kotlinx-coroutines.toml(library)kotlinx-serialization.toml(library); sink: polymorphicdecodeFromStringCWE-502kotlinx-datetime.toml(library)atomicfu.toml(library)kotlinx-io.toml(library); sink:SystemFileSystem.source/sinkCWE-22ktor.toml(build); sinks:HttpClient.get/requestCWE-918,call.respondTextwithContentType.Text.HtmlCWE-79compose-multiplatform.toml(build); detect via plugin idorg.jetbrains.composeororg.jetbrains.compose.*depskotlin-multiplatform.toml(build); detect viakotlin("multiplatform")/org.jetbrains.kotlin.multiplatformplugin id inbuild.gradle.ktsmockk.toml(test)knowledge/java/okhttp.tomlandgson.tomllistecosystems = ["java"]only; both are used by ~2.5% of the Kotlin sample and could add"kotlin".