codaviz 0.5.0__tar.gz

codaviz-0.5.0/LICENSE

@@ -0,0 +1,202 @@
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

codaviz-0.5.0/PKG-INFO

@@ -0,0 +1,133 @@
+Metadata-Version: 2.4
+Name: codaviz
+Version: 0.5.0
+Summary: Analyze and visualize complexity hotspots in Python codebases.
+Author: Stefane Fermigier
+Author-email: Stefane Fermigier <sf@abilian.com>
+License-Expression: Apache-2.0
+License-File: LICENSE
+Requires-Dist: cognitive-complexity>=1.3
+Requires-Dist: cyclopts>=3.0
+Requires-Dist: jinja2>=3.1
+Requires-Dist: mccabe>=0.7
+Requires-Dist: radon>=6.0
+Requires-Python: >=3.12
+Description-Content-Type: text/markdown
+
+# codaviz
+
+A lightweight CLI that analyzes complexity in Python codebases and emits a single, self-contained, interactive HTML report — a simpler, local alternative to SonarQube for spotting where to refactor.
+
+Point it at a repo and it ranks **complexity hotspots**, draws a **treemap** (sized by lines of code, colored by a metric you pick), lets you **drill into any module** to read its functions and source, and flags **circular imports** and **over-threshold functions**. No server, no database, no network — the report is one HTML file you can open offline or email to a teammate.
+
+![codaviz interactive report — treemap, top-modules chart, and per-function drill-down with cyclomatic + cognitive complexity](docs/images/screenshot.png)
+
+## Quick start
+
+codaviz is a [uv](https://docs.astral.sh/uv/) project. From a checkout:
+
+```bash
+uv sync                          # install
+uv run codaviz /path/to/project  # writes ./report.html
+open report.html                 # (macOS; use xdg-open on Linux)
+```
+
+Try it on codaviz itself:
+
+```bash
+uv run codaviz . && open report.html
+```
+
+To install it as a standalone command:
+
+```bash
+uv tool install .        # then, anywhere: codaviz /path/to/project
+```
+
+## Usage
+
+```
+codaviz [OPTIONS] [PATH]
+
+  PATH                 Project directory to analyze (default: current dir)
+
+  -f, --format         html | json | csv          (default: html)
+  -o, --output FILE    Output file
+                       (html → report.html; json/csv → stdout unless set)
+      --no-source      Omit embedded source snippets (smaller, shareable report)
+      --version        Show version and exit
+  -h, --help           Show help and exit
+```
+
+Examples:
+
+```bash
+codaviz ~/src/myapp                     # interactive report.html
+codaviz ~/src/myapp -o myapp.html       # custom output path
+codaviz ~/src/myapp --no-source -o share.html   # no source embedded
+codaviz ~/src/myapp -f json > data.json # raw entity data
+codaviz ~/src/myapp -f csv  > data.csv  # one row per package/module/function
+```
+
+## The report
+
+- **Treemap** — every module is a tile sized by lines of code and colored by the selected metric (greener = better, redder = worse). Click a package to zoom in.
+- **Metric selector** — switch between **Maintainability index** (default), **max/total cyclomatic**, **max/total cognitive**, and **lines of code**; the treemap, bar chart, and table all re-rank instantly.
+- **Hotspots table** — every module sorted by the selected metric, with LOC / MI / max & total cyclomatic / max & total cognitive / function count.
+- **Function detail** — click a tile, bar, or row to see that module's functions, each with a **CC** (cyclomatic) and **Cog** (cognitive) badge, line number, and source snippet. Functions over either threshold get a "consider extracting" / "hard to follow" hint.
+- **Circular imports** — modules that import each other (statically detected) are listed as cycles.
+
+## What gets analyzed
+
+Inside a git repo, codaviz analyzes the Python files git knows about — tracked **and** uncommitted — while honoring `.gitignore` (so `.venv`, build output, and ignored trees are skipped). Outside a repo, it walks the directory. On top of that it always skips common noise: virtualenvs, caches, `build/`, `dist/`, `node_modules/`, `site-packages/`, `migrations/`, and test files (`tests/`, `test_*.py`, `*_test.py`, `conftest.py`) unless you opt in.
+
+## Metrics
+
+| Metric | Meaning | Direction |
+|---|---|---|
+| **Cyclomatic (CC)** | McCabe complexity — branch/loop count + 1. Per function. Matches Ruff's C901 / `python -m mccabe`. | higher = worse |
+| **Cognitive (Cog)** | SonarSource cognitive complexity — penalises *nesting*, ignores shorthand humans read easily. The better "how hard to understand" signal. Per function. | higher = worse |
+| **Maintainability index (MI)** | radon's 0–100 composite (≥20 = A/good, 10–19 = B, <10 = C). Per module. Kept as the familiar number. | lower = worse |
+| **SLOC** | Source lines of code (excludes blanks/comments). | — (used for tile size) |
+
+Cyclomatic complexity comes from [`mccabe`](https://github.com/PyCQA/mccabe) (so the numbers match Ruff), cognitive from [`cognitive_complexity`](https://github.com/Melevir/cognitive_complexity), MI + SLOC from [`radon`](https://radon.readthedocs.io/), and circular imports from a static `ast` import graph (no code is executed).
+
+## Configuration
+
+Optional `[tool.codaviz]` table in the analyzed project's `pyproject.toml`:
+
+```toml
+[tool.codaviz]
+exclude = ["generated/*.py", "vendor/**"]  # extra glob patterns to skip
+max-complexity = 15                         # cyclomatic threshold for hints
+max-cognitive = 15                          # cognitive threshold for hints
+include-tests = false                       # set true to analyze test files too
+```
+
+## Known limitations
+
+- **Nested defs**: closures and methods of function-local classes are folded into their enclosing function's score rather than listed separately — matching how Ruff/mccabe report the outer function.
+- **Circular imports**: resolution favors false negatives over false positives — unusual layouts (some `src/` setups, namespace packages) may under-report. Relative imports always resolve correctly.
+- **Color scale**: the badness ramp is green→amber→red with a "better → worse" legend and a numeric table as non-color channels; a fully colorblind-safe palette is a planned option.
+
+## Development
+
+```bash
+make test     # uv run pytest
+make lint     # ruff check + format check + type checks
+make format   # ruff format + autofix
+```
+
+The test suite spans unit / integration / end-to-end tiers, including in-browser execution of the report's JavaScript via Node.
+
+## Status
+
+**0.5.0 — first public release.** Stable and usable: hotspots, treemap, drill-down, cyclomatic + cognitive complexity, maintainability index, circular imports, threshold hints, and HTML/JSON/CSV output. Planned next (in rough order): **churn-weighted hotspots** (complexity × git change-frequency), **coupling metrics** (afferent/efferent, instability), and **trends over time**. See [`notes/`](notes/) for the vision, spec, and implementation plan, and [`CHANGES.md`](CHANGES.md) for the changelog.
+
+## Non-goals
+
+Security scanning (use Bandit), runtime profiling (use `cProfile`/`scalene`), and test coverage (use `pytest-cov`) are out of scope — codaviz focuses on structural complexity.
+
+## License
+
+Apache License 2.0 — see [`LICENSE`](LICENSE).

codaviz-0.5.0/README.md

@@ -0,0 +1,117 @@
+# codaviz
+
+A lightweight CLI that analyzes complexity in Python codebases and emits a single, self-contained, interactive HTML report — a simpler, local alternative to SonarQube for spotting where to refactor.
+
+Point it at a repo and it ranks **complexity hotspots**, draws a **treemap** (sized by lines of code, colored by a metric you pick), lets you **drill into any module** to read its functions and source, and flags **circular imports** and **over-threshold functions**. No server, no database, no network — the report is one HTML file you can open offline or email to a teammate.
+
+![codaviz interactive report — treemap, top-modules chart, and per-function drill-down with cyclomatic + cognitive complexity](docs/images/screenshot.png)
+
+## Quick start
+
+codaviz is a [uv](https://docs.astral.sh/uv/) project. From a checkout:
+
+```bash
+uv sync                          # install
+uv run codaviz /path/to/project  # writes ./report.html
+open report.html                 # (macOS; use xdg-open on Linux)
+```
+
+Try it on codaviz itself:
+
+```bash
+uv run codaviz . && open report.html
+```
+
+To install it as a standalone command:
+
+```bash
+uv tool install .        # then, anywhere: codaviz /path/to/project
+```
+
+## Usage
+
+```
+codaviz [OPTIONS] [PATH]
+
+  PATH                 Project directory to analyze (default: current dir)
+
+  -f, --format         html | json | csv          (default: html)
+  -o, --output FILE    Output file
+                       (html → report.html; json/csv → stdout unless set)
+      --no-source      Omit embedded source snippets (smaller, shareable report)
+      --version        Show version and exit
+  -h, --help           Show help and exit
+```
+
+Examples:
+
+```bash
+codaviz ~/src/myapp                     # interactive report.html
+codaviz ~/src/myapp -o myapp.html       # custom output path
+codaviz ~/src/myapp --no-source -o share.html   # no source embedded
+codaviz ~/src/myapp -f json > data.json # raw entity data
+codaviz ~/src/myapp -f csv  > data.csv  # one row per package/module/function
+```
+
+## The report
+
+- **Treemap** — every module is a tile sized by lines of code and colored by the selected metric (greener = better, redder = worse). Click a package to zoom in.
+- **Metric selector** — switch between **Maintainability index** (default), **max/total cyclomatic**, **max/total cognitive**, and **lines of code**; the treemap, bar chart, and table all re-rank instantly.
+- **Hotspots table** — every module sorted by the selected metric, with LOC / MI / max & total cyclomatic / max & total cognitive / function count.
+- **Function detail** — click a tile, bar, or row to see that module's functions, each with a **CC** (cyclomatic) and **Cog** (cognitive) badge, line number, and source snippet. Functions over either threshold get a "consider extracting" / "hard to follow" hint.
+- **Circular imports** — modules that import each other (statically detected) are listed as cycles.
+
+## What gets analyzed
+
+Inside a git repo, codaviz analyzes the Python files git knows about — tracked **and** uncommitted — while honoring `.gitignore` (so `.venv`, build output, and ignored trees are skipped). Outside a repo, it walks the directory. On top of that it always skips common noise: virtualenvs, caches, `build/`, `dist/`, `node_modules/`, `site-packages/`, `migrations/`, and test files (`tests/`, `test_*.py`, `*_test.py`, `conftest.py`) unless you opt in.
+
+## Metrics
+
+| Metric | Meaning | Direction |
+|---|---|---|
+| **Cyclomatic (CC)** | McCabe complexity — branch/loop count + 1. Per function. Matches Ruff's C901 / `python -m mccabe`. | higher = worse |
+| **Cognitive (Cog)** | SonarSource cognitive complexity — penalises *nesting*, ignores shorthand humans read easily. The better "how hard to understand" signal. Per function. | higher = worse |
+| **Maintainability index (MI)** | radon's 0–100 composite (≥20 = A/good, 10–19 = B, <10 = C). Per module. Kept as the familiar number. | lower = worse |
+| **SLOC** | Source lines of code (excludes blanks/comments). | — (used for tile size) |
+
+Cyclomatic complexity comes from [`mccabe`](https://github.com/PyCQA/mccabe) (so the numbers match Ruff), cognitive from [`cognitive_complexity`](https://github.com/Melevir/cognitive_complexity), MI + SLOC from [`radon`](https://radon.readthedocs.io/), and circular imports from a static `ast` import graph (no code is executed).
+
+## Configuration
+
+Optional `[tool.codaviz]` table in the analyzed project's `pyproject.toml`:
+
+```toml
+[tool.codaviz]
+exclude = ["generated/*.py", "vendor/**"]  # extra glob patterns to skip
+max-complexity = 15                         # cyclomatic threshold for hints
+max-cognitive = 15                          # cognitive threshold for hints
+include-tests = false                       # set true to analyze test files too
+```
+
+## Known limitations
+
+- **Nested defs**: closures and methods of function-local classes are folded into their enclosing function's score rather than listed separately — matching how Ruff/mccabe report the outer function.
+- **Circular imports**: resolution favors false negatives over false positives — unusual layouts (some `src/` setups, namespace packages) may under-report. Relative imports always resolve correctly.
+- **Color scale**: the badness ramp is green→amber→red with a "better → worse" legend and a numeric table as non-color channels; a fully colorblind-safe palette is a planned option.
+
+## Development
+
+```bash
+make test     # uv run pytest
+make lint     # ruff check + format check + type checks
+make format   # ruff format + autofix
+```
+
+The test suite spans unit / integration / end-to-end tiers, including in-browser execution of the report's JavaScript via Node.
+
+## Status
+
+**0.5.0 — first public release.** Stable and usable: hotspots, treemap, drill-down, cyclomatic + cognitive complexity, maintainability index, circular imports, threshold hints, and HTML/JSON/CSV output. Planned next (in rough order): **churn-weighted hotspots** (complexity × git change-frequency), **coupling metrics** (afferent/efferent, instability), and **trends over time**. See [`notes/`](notes/) for the vision, spec, and implementation plan, and [`CHANGES.md`](CHANGES.md) for the changelog.
+
+## Non-goals
+
+Security scanning (use Bandit), runtime profiling (use `cProfile`/`scalene`), and test coverage (use `pytest-cov`) are out of scope — codaviz focuses on structural complexity.
+
+## License
+
+Apache License 2.0 — see [`LICENSE`](LICENSE).

codaviz-0.5.0/pyproject.toml

@@ -0,0 +1,58 @@
+[project]
+name = "codaviz"
+version = "0.5.0"
+description = "Analyze and visualize complexity hotspots in Python codebases."
+readme = "README.md"
+license = "Apache-2.0"
+license-files = ["LICENSE"]
+authors = [
+    { name = "Stefane Fermigier", email = "sf@abilian.com" }
+]
+requires-python = ">=3.12"
+dependencies = [
+    "cognitive-complexity>=1.3",
+    "cyclopts>=3.0",
+    "jinja2>=3.1",
+    "mccabe>=0.7",
+    "radon>=6.0",
+]
+
+[project.scripts]
+codaviz = "codaviz.cli:main"
+
+[build-system]
+requires = ["uv_build>=0.11.16,<0.12.0"]
+build-backend = "uv_build"
+
+[dependency-groups]
+dev = [
+    "mypy>=2.1.0",
+    "nox>=2026.4.10",
+    "pre-commit>=4.6.0",
+    "pyrefly>=1.0.0",
+    "pytest>=9.0.3",
+    "pytest-cov>=7.1.0",
+    "ruff>=0.15.16",
+    "ty>=0.0.47",
+]
+
+[tool.pytest.ini_options]
+markers = [
+    "unit: fast, isolated unit tests (no I/O)",
+    "integration: component-interaction tests (file I/O)",
+    "e2e: full CLI workflow tests",
+]
+
+[tool.codaviz]
+# Extra glob patterns to exclude from analysis (in addition to smart defaults).
+exclude = []
+# Cyclomatic-complexity threshold above which a function is flagged.
+max-complexity = 15
+# Cognitive-complexity threshold above which a function is flagged.
+max-cognitive = 15
+
+[tool.mypy]
+# These ship no type stubs / py.typed marker.
+[[tool.mypy.overrides]]
+module = ["radon.*", "mccabe", "cognitive_complexity.*"]
+ignore_missing_imports = true

codaviz-0.5.0/src/codaviz/__init__.py

@@ -0,0 +1,7 @@
+"""codaviz — analyze and visualize complexity hotspots in Python codebases."""
+
+from __future__ import annotations
+
+from codaviz._version import __version__
+
+__all__ = ["__version__"]

codaviz-0.5.0/src/codaviz/_version.py

@@ -0,0 +1,10 @@
+"""Resolve the installed package version (single source of truth: pyproject)."""
+
+from __future__ import annotations
+
+from importlib.metadata import PackageNotFoundError, version
+
+try:
+    __version__ = version("codaviz")
+except PackageNotFoundError:  # running from a source tree without an install
+    __version__ = "0.0.0"

codaviz-0.5.0/src/codaviz/analysis/__init__.py

@@ -0,0 +1,12 @@
+"""Analysis orchestration: turn discovered files into a flat entity list.
+
+Builds PACKAGE, MODULE (SLOC + maintainability index), and FUNCTION (cyclomatic
+complexity) entities. Circular-import findings are computed separately by
+``analysis.imports`` (static AST, surfaced in the HTML report).
+"""
+
+from __future__ import annotations
+
+from codaviz.analysis.project import analyze_project
+
+__all__ = ["analyze_project"]

codaviz-0.5.0/src/codaviz/analysis/complexity.py

@@ -0,0 +1,63 @@
+"""Per-function complexity: cyclomatic (mccabe) + cognitive (SonarSource).
+
+Cyclomatic complexity comes from the ``mccabe`` library, so the numbers match
+Ruff's C901 and ``python -m mccabe``. Cognitive complexity comes from the
+``cognitive_complexity`` library. End lines (for source snippets) come from the
+AST, joined to mccabe's per-function results by line number.
+
+Like Ruff/mccabe, nested closures and function-local-class methods are folded
+into their enclosing function rather than listed separately.
+"""
+
+from __future__ import annotations
+
+import ast
+from dataclasses import dataclass
+
+from cognitive_complexity.api import get_cognitive_complexity
+from mccabe import PathGraphingAstVisitor
+
+
+@dataclass(frozen=True)
+class FunctionInfo:
+    """Complexity for a single function or method."""
+
+    name: str  # qualified name, e.g. "A.method"
+    lineno: int
+    endline: int
+    complexity: int  # cyclomatic (mccabe)
+    cognitive: int  # cognitive (SonarSource)
+
+
+def function_infos(source: str) -> list[FunctionInfo]:
+    """Return complexity records for the functions/methods in ``source``.
+
+    Raises ``SyntaxError`` if ``source`` is not valid Python.
+    """
+    tree = ast.parse(source)
+
+    visitor = PathGraphingAstVisitor()
+    visitor.preorder(tree, visitor)
+    cyclomatic = {g.lineno: (g.entity, g.complexity()) for g in visitor.graphs.values()}
+
+    nodes: dict[int, ast.FunctionDef | ast.AsyncFunctionDef] = {
+        node.lineno: node
+        for node in ast.walk(tree)
+        if isinstance(node, (ast.FunctionDef, ast.AsyncFunctionDef))
+    }
+
+    infos = []
+    for lineno, (name, complexity) in sorted(cyclomatic.items()):
+        node = nodes.get(lineno)
+        if node is None:
+            continue
+        infos.append(
+            FunctionInfo(
+                name=name,
+                lineno=lineno,
+                endline=node.end_lineno or lineno,
+                complexity=complexity,
+                cognitive=get_cognitive_complexity(node),
+            ),
+        )
+    return infos