I have read that Roslyn does not provide a native CFG implementation, nor a public inter- or intra-data-flow analysis. However that was a source based on Roslyn RC2 which is probably really old. Is it still the case today?

I am trying to do taint analysis, i.e. I should be able to trace a variable after it has been passed through functions or assigned to other variables.

Any help will be appreciated! Thanks!