Java signatures. These are drawn from experience consulting, CERT, and OWASP. It's not complete by any means, but it is the top things to look at to start navigating the code where things could go wrong, entrypoints, misuse, etc.

Of note: I have not added these to the all.db.