acidtest 0.8.0 → 1.0.1

package/dist/parsers/python-parser.js

@@ -0,0 +1,120 @@
+/**
+ * Python parser implementation using tree-sitter-python
+ * Extracts imports, functions, and variables from Python code
+ */
+import Parser from 'tree-sitter';
+import Python from 'tree-sitter-python';
+export class PythonParser {
+    parser;
+    constructor() {
+        this.parser = new Parser();
+        // For tree-sitter 0.21.x, Python is the language object itself
+        this.parser.setLanguage(Python);
+    }
+    /**
+     * Check if this parser can handle the given file
+     */
+    canParse(filePath) {
+        return /\.py$/i.test(filePath);
+    }
+    /**
+     * Parse Python file and extract information
+     */
+    parse(filePath, content) {
+        const tree = this.parser.parse(content);
+        const rootNode = tree.rootNode;
+        const imports = [];
+        const functions = [];
+        const variables = [];
+        // Traverse the AST
+        const traverse = (node) => {
+            // Extract import statements: import X, import Y
+            if (node.type === 'import_statement') {
+                const nameNode = node.childForFieldName('name');
+                if (nameNode) {
+                    const module = nameNode.text;
+                    const line = node.startPosition.row + 1;
+                    imports.push({ module, names: [], line });
+                }
+            }
+            // Extract from imports: from X import Y, Z
+            if (node.type === 'import_from_statement') {
+                const moduleNode = node.childForFieldName('module_name');
+                const module = moduleNode ? moduleNode.text : '';
+                const names = [];
+                const line = node.startPosition.row + 1;
+                // Get imported names
+                for (let i = 0; i < node.childCount; i++) {
+                    const child = node.child(i);
+                    if (child?.type === 'dotted_name' || child?.type === 'identifier') {
+                        // This might be the imported name
+                        const nameText = child.text;
+                        if (nameText !== module && !names.includes(nameText)) {
+                            names.push(nameText);
+                        }
+                    }
+                    else if (child?.type === 'aliased_import') {
+                        const nameChild = child.childForFieldName('name');
+                        if (nameChild) {
+                            names.push(nameChild.text);
+                        }
+                    }
+                }
+                imports.push({ module, names, line });
+            }
+            // Extract function definitions
+            if (node.type === 'function_definition') {
+                const nameNode = node.childForFieldName('name');
+                if (nameNode) {
+                    const name = nameNode.text;
+                    const params = [];
+                    const line = node.startPosition.row + 1;
+                    // Get parameters
+                    const parametersNode = node.childForFieldName('parameters');
+                    if (parametersNode) {
+                        for (let i = 0; i < parametersNode.childCount; i++) {
+                            const paramChild = parametersNode.child(i);
+                            if (paramChild?.type === 'identifier') {
+                                params.push(paramChild.text);
+                            }
+                            else if (paramChild?.type === 'typed_parameter' || paramChild?.type === 'default_parameter') {
+                                const paramName = paramChild.childForFieldName('name');
+                                if (paramName) {
+                                    params.push(paramName.text);
+                                }
+                            }
+                        }
+                    }
+                    functions.push({ name, params, line });
+                }
+            }
+            // Extract variable assignments at module level
+            if (node.type === 'assignment' && node.parent?.type === 'expression_statement') {
+                const leftNode = node.childForFieldName('left');
+                const rightNode = node.childForFieldName('right');
+                if (leftNode?.type === 'identifier') {
+                    const name = leftNode.text;
+                    const value = rightNode ? rightNode.text.substring(0, 100) : undefined;
+                    const line = node.startPosition.row + 1;
+                    variables.push({ name, value, line });
+                }
+            }
+            // Recursively traverse children
+            for (let i = 0; i < node.childCount; i++) {
+                const child = node.child(i);
+                if (child) {
+                    traverse(child);
+                }
+            }
+        };
+        traverse(rootNode);
+        return {
+            filePath,
+            ast: tree,
+            imports,
+            functions,
+            variables
+        };
+    }
+}
+//# sourceMappingURL=python-parser.js.map

package/dist/parsers/python-parser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"python-parser.js","sourceRoot":"","sources":["../../src/parsers/python-parser.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,MAAM,MAAM,oBAAoB,CAAC;AAGxC,MAAM,OAAO,YAAY;IACf,MAAM,CAAS;IAEvB;QACE,IAAI,CAAC,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;QAC3B,+DAA+D;QAC/D,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,MAAa,CAAC,CAAC;IACzC,CAAC;IAED;;OAEG;IACH,QAAQ,CAAC,QAAgB;QACvB,OAAO,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACjC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,QAAgB,EAAE,OAAe;QACrC,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAE/B,MAAM,OAAO,GAAsB,EAAE,CAAC;QACtC,MAAM,SAAS,GAAyB,EAAE,CAAC;QAC3C,MAAM,SAAS,GAA0B,EAAE,CAAC;QAE5C,mBAAmB;QACnB,MAAM,QAAQ,GAAG,CAAC,IAAuB,EAAE,EAAE;YAC3C,gDAAgD;YAChD,IAAI,IAAI,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;gBACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;gBAChD,IAAI,QAAQ,EAAE,CAAC;oBACb,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC;oBAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,GAAG,CAAC,CAAC;oBACxC,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC5C,CAAC;YACH,CAAC;YAED,2CAA2C;YAC3C,IAAI,IAAI,CAAC,IAAI,KAAK,uBAAuB,EAAE,CAAC;gBAC1C,MAAM,UAAU,GAAG,IAAI,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAAC;gBACzD,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjD,MAAM,KAAK,GAAa,EAAE,CAAC;gBAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,GAAG,CAAC,CAAC;gBAExC,qBAAqB;gBACrB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC,EAAE,EAAE,CAAC;oBACzC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;oBAC5B,IAAI,KAAK,EAAE,IAAI,KAAK,aAAa,IAAI,KAAK,EAAE,IAAI,KAAK,YAAY,EAAE,CAAC;wBAClE,kCAAkC;wBAClC,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC;wBAC5B,IAAI,QAAQ,KAAK,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;4BACrD,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;wBACvB,CAAC;oBACH,CAAC;yBAAM,IAAI,KAAK,EAAE,IAAI,KAAK,gBAAgB,EAAE,CAAC;wBAC5C,MAAM,SAAS,GAAG,KAAK,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;wBAClD,IAAI,SAAS,EAAE,CAAC;4BACd,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;wBAC7B,CAAC;oBACH,CAAC;gBACH,CAAC;gBAED,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACxC,CAAC;YAED,+BAA+B;YAC/B,IAAI,IAAI,CAAC,IAAI,KAAK,qBAAqB,EAAE,CAAC;gBACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;gBAChD,IAAI,QAAQ,EAAE,CAAC;oBACb,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;oBAC3B,MAAM,MAAM,GAAa,EAAE,CAAC;oBAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,GAAG,CAAC,CAAC;oBAExC,iBAAiB;oBACjB,MAAM,cAAc,GAAG,IAAI,CAAC,iBAAiB,CAAC,YAAY,CAAC,CAAC;oBAC5D,IAAI,cAAc,EAAE,CAAC;wBACnB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,cAAc,CAAC,UAAU,EAAE,CAAC,EAAE,EAAE,CAAC;4BACnD,MAAM,UAAU,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;4BAC3C,IAAI,UAAU,EAAE,IAAI,KAAK,YAAY,EAAE,CAAC;gCACtC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;4BAC/B,CAAC;iCAAM,IAAI,UAAU,EAAE,IAAI,KAAK,iBAAiB,IAAI,UAAU,EAAE,IAAI,KAAK,mBAAmB,EAAE,CAAC;gCAC9F,MAAM,SAAS,GAAG,UAAU,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;gCACvD,IAAI,SAAS,EAAE,CAAC;oCACd,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;gCAC9B,CAAC;4BACH,CAAC;wBACH,CAAC;oBACH,CAAC;oBAED,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;gBACzC,CAAC;YACH,CAAC;YAED,+CAA+C;YAC/C,IAAI,IAAI,CAAC,IAAI,KAAK,YAAY,IAAI,IAAI,CAAC,MAAM,EAAE,IAAI,KAAK,sBAAsB,EAAE,CAAC;gBAC/E,MAAM,QAAQ,GAAG,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;gBAChD,MAAM,SAAS,GAAG,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;gBAElD,IAAI,QAAQ,EAAE,IAAI,KAAK,YAAY,EAAE,CAAC;oBACpC,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;oBAC3B,MAAM,KAAK,GAAG,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;oBACvE,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,GAAG,CAAC,CAAC;oBACxC,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBACxC,CAAC;YACH,CAAC;YAED,gCAAgC;YAChC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC,EAAE,EAAE,CAAC;gBACzC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBAC5B,IAAI,KAAK,EAAE,CAAC;oBACV,QAAQ,CAAC,KAAK,CAAC,CAAC;gBAClB,CAAC;YACH,CAAC;QACH,CAAC,CAAC;QAEF,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAEnB,OAAO;YACL,QAAQ;YACR,GAAG,EAAE,IAAI;YACT,OAAO;YACP,SAAS;YACT,SAAS;SACV,CAAC;IACJ,CAAC;CACF"}

package/dist/parsers/typescript-parser.d.ts

@@ -0,0 +1,16 @@
+/**
+ * TypeScript/JavaScript parser implementation
+ * Extracts imports, functions, and variables from TypeScript/JavaScript code
+ */
+import type { Parser, ParsedFile } from './parser-interface.js';
+export declare class TypeScriptParser implements Parser {
+    /**
+     * Check if this parser can handle the given file
+     */
+    canParse(filePath: string): boolean;
+    /**
+     * Parse TypeScript/JavaScript file and extract information
+     */
+    parse(filePath: string, content: string): ParsedFile;
+}
+//# sourceMappingURL=typescript-parser.d.ts.map

package/dist/parsers/typescript-parser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"typescript-parser.d.ts","sourceRoot":"","sources":["../../src/parsers/typescript-parser.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,KAAK,EAAE,MAAM,EAAE,UAAU,EAA4D,MAAM,uBAAuB,CAAC;AAE1H,qBAAa,gBAAiB,YAAW,MAAM;IAC7C;;OAEG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAInC;;OAEG;IACH,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,UAAU;CA+GrD"}

package/dist/parsers/typescript-parser.js

@@ -0,0 +1,112 @@
+/**
+ * TypeScript/JavaScript parser implementation
+ * Extracts imports, functions, and variables from TypeScript/JavaScript code
+ */
+import ts from 'typescript';
+export class TypeScriptParser {
+    /**
+     * Check if this parser can handle the given file
+     */
+    canParse(filePath) {
+        return /\.(ts|js|mjs|cjs)$/i.test(filePath);
+    }
+    /**
+     * Parse TypeScript/JavaScript file and extract information
+     */
+    parse(filePath, content) {
+        const sourceFile = ts.createSourceFile(filePath, content, ts.ScriptTarget.Latest, true);
+        const imports = [];
+        const functions = [];
+        const variables = [];
+        // Traverse AST to extract imports, functions, and variables
+        const visit = (node) => {
+            // Extract import statements
+            if (ts.isImportDeclaration(node)) {
+                const importClause = node.importClause;
+                const moduleSpecifier = node.moduleSpecifier;
+                if (ts.isStringLiteral(moduleSpecifier)) {
+                    const module = moduleSpecifier.text;
+                    const names = [];
+                    // Named imports
+                    if (importClause?.namedBindings) {
+                        if (ts.isNamedImports(importClause.namedBindings)) {
+                            for (const element of importClause.namedBindings.elements) {
+                                names.push(element.name.text);
+                            }
+                        }
+                        else if (ts.isNamespaceImport(importClause.namedBindings)) {
+                            names.push(importClause.namedBindings.name.text);
+                        }
+                    }
+                    // Default import
+                    if (importClause?.name) {
+                        names.push(importClause.name.text);
+                    }
+                    const line = sourceFile.getLineAndCharacterOfPosition(node.getStart()).line + 1;
+                    imports.push({ module, names, line });
+                }
+            }
+            // Extract require() calls
+            if (ts.isCallExpression(node)) {
+                const expression = node.expression;
+                if (ts.isIdentifier(expression) && expression.text === 'require') {
+                    if (node.arguments.length > 0) {
+                        const arg = node.arguments[0];
+                        if (ts.isStringLiteral(arg)) {
+                            const module = arg.text;
+                            const line = sourceFile.getLineAndCharacterOfPosition(node.getStart()).line + 1;
+                            imports.push({ module, names: [], line });
+                        }
+                    }
+                }
+            }
+            // Extract function declarations
+            if (ts.isFunctionDeclaration(node) && node.name) {
+                const name = node.name.text;
+                const params = node.parameters.map(p => {
+                    if (ts.isIdentifier(p.name)) {
+                        return p.name.text;
+                    }
+                    return p.name.getText(sourceFile);
+                });
+                const line = sourceFile.getLineAndCharacterOfPosition(node.getStart()).line + 1;
+                functions.push({ name, params, line });
+            }
+            // Extract arrow functions assigned to variables
+            if (ts.isVariableStatement(node)) {
+                for (const declaration of node.declarationList.declarations) {
+                    if (ts.isIdentifier(declaration.name) && declaration.initializer) {
+                        const name = declaration.name.text;
+                        const line = sourceFile.getLineAndCharacterOfPosition(declaration.getStart()).line + 1;
+                        // Check if it's a function
+                        if (ts.isArrowFunction(declaration.initializer) || ts.isFunctionExpression(declaration.initializer)) {
+                            const funcNode = declaration.initializer;
+                            const params = funcNode.parameters.map(p => {
+                                if (ts.isIdentifier(p.name)) {
+                                    return p.name.text;
+                                }
+                                return p.name.getText(sourceFile);
+                            });
+                            functions.push({ name, params, line });
+                        }
+                        else {
+                            // Regular variable
+                            const value = declaration.initializer.getText(sourceFile).substring(0, 100);
+                            variables.push({ name, value, line });
+                        }
+                    }
+                }
+            }
+            ts.forEachChild(node, visit);
+        };
+        visit(sourceFile);
+        return {
+            filePath,
+            ast: sourceFile,
+            imports,
+            functions,
+            variables
+        };
+    }
+}
+//# sourceMappingURL=typescript-parser.js.map

package/dist/parsers/typescript-parser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"typescript-parser.js","sourceRoot":"","sources":["../../src/parsers/typescript-parser.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,MAAM,YAAY,CAAC;AAG5B,MAAM,OAAO,gBAAgB;IAC3B;;OAEG;IACH,QAAQ,CAAC,QAAgB;QACvB,OAAO,qBAAqB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC9C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,QAAgB,EAAE,OAAe;QACrC,MAAM,UAAU,GAAG,EAAE,CAAC,gBAAgB,CACpC,QAAQ,EACR,OAAO,EACP,EAAE,CAAC,YAAY,CAAC,MAAM,EACtB,IAAI,CACL,CAAC;QAEF,MAAM,OAAO,GAAsB,EAAE,CAAC;QACtC,MAAM,SAAS,GAAyB,EAAE,CAAC;QAC3C,MAAM,SAAS,GAA0B,EAAE,CAAC;QAE5C,4DAA4D;QAC5D,MAAM,KAAK,GAAG,CAAC,IAAa,EAAE,EAAE;YAC9B,4BAA4B;YAC5B,IAAI,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC;gBACjC,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;gBACvC,MAAM,eAAe,GAAG,IAAI,CAAC,eAAe,CAAC;gBAE7C,IAAI,EAAE,CAAC,eAAe,CAAC,eAAe,CAAC,EAAE,CAAC;oBACxC,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,CAAC;oBACpC,MAAM,KAAK,GAAa,EAAE,CAAC;oBAE3B,gBAAgB;oBAChB,IAAI,YAAY,EAAE,aAAa,EAAE,CAAC;wBAChC,IAAI,EAAE,CAAC,cAAc,CAAC,YAAY,CAAC,aAAa,CAAC,EAAE,CAAC;4BAClD,KAAK,MAAM,OAAO,IAAI,YAAY,CAAC,aAAa,CAAC,QAAQ,EAAE,CAAC;gCAC1D,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;4BAChC,CAAC;wBACH,CAAC;6BAAM,IAAI,EAAE,CAAC,iBAAiB,CAAC,YAAY,CAAC,aAAa,CAAC,EAAE,CAAC;4BAC5D,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;wBACnD,CAAC;oBACH,CAAC;oBAED,iBAAiB;oBACjB,IAAI,YAAY,EAAE,IAAI,EAAE,CAAC;wBACvB,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBACrC,CAAC;oBAED,MAAM,IAAI,GAAG,UAAU,CAAC,6BAA6B,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC;oBAChF,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBACxC,CAAC;YACH,CAAC;YAED,0BAA0B;YAC1B,IAAI,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC9B,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;gBACnC,IAAI,EAAE,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;oBACjE,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;wBAC9B,IAAI,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC;4BAC5B,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC;4BACxB,MAAM,IAAI,GAAG,UAAU,CAAC,6BAA6B,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC;4BAChF,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;wBAC5C,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;YAED,gCAAgC;YAChC,IAAI,EAAE,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;gBAChD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;gBAC5B,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;oBACrC,IAAI,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;wBAC5B,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;oBACrB,CAAC;oBACD,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;gBACpC,CAAC,CAAC,CAAC;gBACH,MAAM,IAAI,GAAG,UAAU,CAAC,6BAA6B,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC;gBAChF,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YACzC,CAAC;YAED,gDAAgD;YAChD,IAAI,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC;gBACjC,KAAK,MAAM,WAAW,IAAI,IAAI,CAAC,eAAe,CAAC,YAAY,EAAE,CAAC;oBAC5D,IAAI,EAAE,CAAC,YAAY,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,WAAW,CAAC,WAAW,EAAE,CAAC;wBACjE,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC;wBACnC,MAAM,IAAI,GAAG,UAAU,CAAC,6BAA6B,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC;wBAEvF,2BAA2B;wBAC3B,IAAI,EAAE,CAAC,eAAe,CAAC,WAAW,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,oBAAoB,CAAC,WAAW,CAAC,WAAW,CAAC,EAAE,CAAC;4BACpG,MAAM,QAAQ,GAAG,WAAW,CAAC,WAAW,CAAC;4BACzC,MAAM,MAAM,GAAG,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;gCACzC,IAAI,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;oCAC5B,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;gCACrB,CAAC;gCACD,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;4BACpC,CAAC,CAAC,CAAC;4BACH,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;wBACzC,CAAC;6BAAM,CAAC;4BACN,mBAAmB;4BACnB,MAAM,KAAK,GAAG,WAAW,CAAC,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;4BAC5E,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;wBACxC,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;YAED,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC/B,CAAC,CAAC;QAEF,KAAK,CAAC,UAAU,CAAC,CAAC;QAElB,OAAO;YACL,QAAQ;YACR,GAAG,EAAE,UAAU;YACf,OAAO;YACP,SAAS;YACT,SAAS;SACV,CAAC;IACJ,CAAC;CACF"}

package/dist/patterns/dangerous-calls-python.json

@@ -0,0 +1,220 @@
+{
+  "category": "dangerous-calls",
+  "patterns": [
+    {
+      "id": "pycall-001",
+      "name": "subprocess-shell-true",
+      "description": "Uses subprocess with shell=True, enabling shell injection",
+      "severity": "CRITICAL",
+      "match": {
+        "type": "regex",
+        "value": "subprocess\\.(run|call|Popen|check_output|check_call)\\s*\\([^)]*shell\\s*=\\s*True",
+        "flags": "g"
+      },
+      "layer": "code",
+      "remediation": {
+        "title": "Remove shell=True from subprocess calls",
+        "suggestions": [
+          "Use explicit argument lists: subprocess.run(['cmd', 'arg1', 'arg2'])",
+          "Never set shell=True, especially with user input",
+          "Use shlex.quote() if you must construct shell commands",
+          "Consider using pathlib or os.path for file operations instead",
+          "Validate and sanitize all arguments before passing to subprocess"
+        ]
+      }
+    },
+    {
+      "id": "pycall-002",
+      "name": "os-system-call",
+      "description": "Uses os.system() for direct shell command execution",
+      "severity": "CRITICAL",
+      "match": {
+        "type": "regex",
+        "value": "os\\.system\\s*\\(",
+        "flags": "g"
+      },
+      "layer": "code",
+      "remediation": {
+        "title": "Replace os.system() with subprocess",
+        "suggestions": [
+          "Use subprocess.run() with explicit arguments instead",
+          "Never use os.system() with user-controlled input",
+          "Consider using built-in Python APIs for file/path operations",
+          "If shell commands are needed, use subprocess without shell=True"
+        ]
+      }
+    },
+    {
+      "id": "pycall-003",
+      "name": "os-popen-call",
+      "description": "Uses os.popen() for shell command execution",
+      "severity": "CRITICAL",
+      "match": {
+        "type": "regex",
+        "value": "os\\.popen[234]?\\s*\\(",
+        "flags": "g"
+      },
+      "layer": "code"
+    },
+    {
+      "id": "pycall-004",
+      "name": "os-exec-family",
+      "description": "Uses os.exec* family for program execution",
+      "severity": "HIGH",
+      "match": {
+        "type": "regex",
+        "value": "os\\.(execl|execle|execlp|execlpe|execv|execve|execvp|execvpe)\\s*\\(",
+        "flags": "g"
+      },
+      "layer": "code"
+    },
+    {
+      "id": "pycall-005",
+      "name": "os-spawn-family",
+      "description": "Uses os.spawn* family for process spawning",
+      "severity": "HIGH",
+      "match": {
+        "type": "regex",
+        "value": "os\\.(spawnl|spawnle|spawnlp|spawnlpe|spawnv|spawnve|spawnvp|spawnvpe)\\s*\\(",
+        "flags": "g"
+      },
+      "layer": "code"
+    },
+    {
+      "id": "pycall-006",
+      "name": "pickle-loads-call",
+      "description": "Uses pickle.loads() which can execute arbitrary code",
+      "severity": "CRITICAL",
+      "match": {
+        "type": "regex",
+        "value": "pickle\\.(loads?|Unpickler)\\s*\\(",
+        "flags": "g"
+      },
+      "layer": "code",
+      "remediation": {
+        "title": "Avoid unpickling untrusted data",
+        "suggestions": [
+          "Use json.loads() for deserializing JSON data instead",
+          "Never unpickle data from untrusted or user-controlled sources",
+          "If pickle is required, verify data integrity with HMAC signatures",
+          "Consider using safer formats like JSON, msgpack, or protobuf",
+          "Implement a restricted unpickler with custom find_class() method"
+        ]
+      }
+    },
+    {
+      "id": "pycall-007",
+      "name": "marshal-loads-call",
+      "description": "Uses marshal.loads() for deserialization",
+      "severity": "HIGH",
+      "match": {
+        "type": "regex",
+        "value": "marshal\\.loads?\\s*\\(",
+        "flags": "g"
+      },
+      "layer": "code"
+    },
+    {
+      "id": "pycall-008",
+      "name": "yaml-unsafe-load",
+      "description": "Uses yaml.load() without safe loader, enabling arbitrary code execution",
+      "severity": "CRITICAL",
+      "match": {
+        "type": "regex",
+        "value": "yaml\\.load\\s*\\([^,)]*\\)",
+        "flags": "g"
+      },
+      "layer": "code",
+      "remediation": {
+        "title": "Use yaml.safe_load() instead",
+        "suggestions": [
+          "Replace yaml.load() with yaml.safe_load()",
+          "If you need custom tags, use yaml.load(data, Loader=yaml.SafeLoader)",
+          "Never use yaml.load() with untrusted input",
+          "Consider validating YAML structure after loading"
+        ]
+      }
+    },
+    {
+      "id": "pycall-009",
+      "name": "code-object-exec",
+      "description": "Executes code objects from compile()",
+      "severity": "HIGH",
+      "match": {
+        "type": "regex",
+        "value": "exec\\s*\\(\\s*compile\\s*\\(",
+        "flags": "g"
+      },
+      "layer": "code"
+    },
+    {
+      "id": "pycall-010",
+      "name": "file-write-operations",
+      "description": "Opens files in write mode which could overwrite data",
+      "severity": "MEDIUM",
+      "match": {
+        "type": "regex",
+        "value": "open\\s*\\([^)]*['\"]w",
+        "flags": "g"
+      },
+      "layer": "code"
+    },
+    {
+      "id": "pycall-011",
+      "name": "os-remove-operations",
+      "description": "Deletes files or directories",
+      "severity": "MEDIUM",
+      "match": {
+        "type": "regex",
+        "value": "os\\.(remove|unlink|rmdir|removedirs)\\s*\\(",
+        "flags": "g"
+      },
+      "layer": "code"
+    },
+    {
+      "id": "pycall-012",
+      "name": "shutil-rmtree",
+      "description": "Recursively deletes directory trees",
+      "severity": "HIGH",
+      "match": {
+        "type": "regex",
+        "value": "shutil\\.rmtree\\s*\\(",
+        "flags": "g"
+      },
+      "layer": "code"
+    },
+    {
+      "id": "pycall-013",
+      "name": "tempfile-mktemp",
+      "description": "Uses deprecated mktemp() which has security issues",
+      "severity": "MEDIUM",
+      "match": {
+        "type": "regex",
+        "value": "tempfile\\.mktemp\\s*\\(",
+        "flags": "g"
+      },
+      "layer": "code",
+      "remediation": {
+        "title": "Replace mktemp() with safer alternatives",
+        "suggestions": [
+          "Use tempfile.mkstemp() which creates files securely",
+          "Use tempfile.TemporaryFile() for automatic cleanup",
+          "Use tempfile.NamedTemporaryFile() if you need a file name",
+          "Never use mktemp() as it's vulnerable to race conditions"
+        ]
+      }
+    },
+    {
+      "id": "pycall-014",
+      "name": "assert-statement",
+      "description": "Uses assert statements which are removed in optimized bytecode",
+      "severity": "LOW",
+      "match": {
+        "type": "regex",
+        "value": "\\bassert\\s+",
+        "flags": "g"
+      },
+      "layer": "code"
+    }
+  ]
+}