Hello,
with one cache file per source file, the cquery service can literally parse and write thousands of small files, looking suspicious to malware protection. Is the cache database architecture governed by libclang? I see other services using lightweight database libs f.e.