GoTime

time package. time.Parse() with user-controlled layout strings is a denial-of-service risk (algorithmic complexity). Not a typical injection sink.

Other Methods

.Parse()Neutral

Signature

Parse(layout, value string) (Time, error)

Parses time string. Not an injection sink but DoS risk with user-controlled layout.

.After()Neutral

Signature

After(d Duration) <-chan Time

Returns channel that fires after d. DoS risk when d is user-controlled without bounds.

FQN	Field
time	fqns[0]

Wrong FQN → 0 findings. Verify with: change fqns to garbage → must produce 0 results.

go.mod

// standard library — no go.mod entry required

rule.py

from codepathfinder.go_rule import GoTime