github.com/prometheus-community/postgres_exporter

Capability analysis allows users to understand what privileged functionality a software library (or its dependencies) might use, to highlight unexpected or sensitive capabilities. This analysis uses Capslock callgraph analysis to identify callsites with access to privileged standard library operations.