utils.js

const cds = require("@sap/cds");

const { decodeURI, decodeURIComponent, local, exists, isdir, isfile, read, readdir, append, write, copy, stat, find, mkdirp, rmdir, rimraf, rm } = cds.utils

let uri = decodeURI("%E0%A4%A") // taint step

let uri2 = decodeURIComponent("%E0%A4%A") // taint step

let uri3 = local("%E0%A4%A") // taint step

let uri4 = exists("%E0%A4%A") // NOT a taint step - returns a boolean

let dir = isdir('app') // taint step

let file = isfile('package.json') // taint step

let pkg = await read('package.json') // sink

let pdir = await readdir('package.json') // sink

let s = await stat('package.json') // sink

let f = await find('package.json') // sink

await append('db/data').to('dist/db/data')  // sink
await append('db/data', 'dist/db/data')  // sink

await copy('db/data').to('dist/db/data')  // sink
await copy('db/data', 'dist/db/data')  // sink

await write({ foo: 'bar' }).to('some/file.json') // sink
await write('some/file.json', { foo: 'bar' }) // sink

await mkdirp('dist', 'db', 'data') // sink
await mkdirp('dist/db/data') // sink

await rmdir('dist', 'db', 'data') // sink
await rmdir('dist/db/data') // sink

await rimraf('dist', 'db', 'data') // sink
await rimraf('dist/db/data') // sink

await rm('dist', 'db', 'data') // sink
await rm('dist/db/data') // sink