codeanalyzer-python 1.2.0__py3-none-any.whl → 1.4.0__py3-none-any.whl

codeanalyzer/options/options.py

@@ -37,8 +37,12 @@ class AnalysisOptions:
     rebuild_analysis: bool = False
     skip_tests: bool = True
     no_venv: bool = False
+    resolve_installed: bool = False
     file_name: Optional[Path] = None
     cache_dir: Optional[Path] = None
     clear_cache: bool = False
     verbosity: int = 0
     entrypoint_rules: Tuple[Path, ...] = ()
+    # Artifact text capture (#157 follow-up): whether to capture `source` at
+    # all. There is no byte cap -- `source` is the whole file or "" (#172).
+    artifact_text: bool = True

codeanalyzer/schema/ids.py

@@ -21,3 +21,24 @@ def callable_sig_segment(name: str, param_names: List[str]) -> str:
 
 def ordinal_id(callable_id: str, tag: str) -> str:
     return f"{callable_id}@{tag}"
+
+
+def artifact_id(app_name: str, rel_path: str) -> str:
+    """Language-neutral artifact id: ``can://artifact/<app>/<rel-path>``.
+
+    The first segment is a namespace (a language for code nodes, the literal
+    ``artifact`` for files), so sibling analyzers over the same repo emit the
+    same id for the same file."""
+    return f"can://artifact/{app_name}/{rel_path}"
+
+
+def config_key_id(artifact_id: str, dotted_key: str) -> str:
+    """A ``PyConfigKey`` extracted from an artifact: ``<artifact-id>@key/<dotted.key>``.
+    ``dotted_key`` uses numeric segments for array indices (e.g.
+    ``services.web.ports.0``); ids are opaque, do not re-split them."""
+    return f"{artifact_id}@key/{dotted_key}"
+
+
+def purl_pypi(name: str) -> str:
+    """Package URL for a (PEP 503 normalized) PyPI distribution name."""
+    return f"pkg:pypi/{name}"

codeanalyzer/schema/py_schema.py

@@ -306,6 +306,17 @@ class PyCallArgument(BaseModel):
 
     ast_kind: str
     inferred_type: Optional[str] = None
+    # Literal capture (#162): populated only for an `ast.Constant` argument
+    # whose value is str/int/float/bool/None, JSON-encoded (`json.dumps`) --
+    # decode with `json.loads` to recover the Python constant. `None` for
+    # every non-constant argument (and for a Constant of another type, e.g.
+    # bytes/complex/Ellipsis).
+    value: Optional[str] = None
+    # Bare-identifier capture (#162): the `id` of an `ast.Name` argument
+    # (e.g. `f(KEY)` -> `"KEY"`) -- ships alongside `value` as the dataflow
+    # tier's join point back to the variable's own definitions. `None` for
+    # every other argument shape.
+    name: Optional[str] = None
 
 
 # BodyNode.arguments forward-references PyCallArgument (defined later);
@@ -470,6 +481,103 @@ class PyExternalSymbol(BaseModel):
     module: Optional[str] = None  # best-effort owning module, e.g. "requests"
 
 
+@builder
+class PyConfigKey(BaseModel):
+    """A configuration key flattened out of a config-bearing ``PyArtifact``
+    (#152). Graph vocabulary stays neutral (label ``ConfigKey``, edge
+    ``DEFINES_CONFIG``) -- the ``Py`` prefix here is only the ``PyArtifact``
+    naming precedent, not a Python-specific claim. L1 data, identical at
+    every analysis level; nested under the owning artifact, containment
+    mirrors ``DEFINES_CONFIG``."""
+
+    id: str = ""  # <artifact-id>@key/<dotted.key>
+    key: str  # dotted path; numeric segments for arrays, e.g. "services.web.ports.0"
+    namespace: str  # env|yaml|json|toml|ini|properties|dockerfile
+    value: Optional[str] = None  # populated only when options.artifact_text is on
+    span: Optional[Span] = None  # into the artifact's source; best-effort for yaml/json/toml
+    references: List[str] = []  # raw recognized tokens, order of appearance, deduplicated
+
+
+@builder
+class PyArtifact(BaseModel):
+    """Any non-`.py` project file (config, manifest, CI, container spec, or
+    plain data/binary) -- never dropped from the walk. Captured broadly (node
+    + verbatim ``source``); *meaning* is extracted narrowly -- only
+    ``dependency-manifest`` roles feed ``dependencies`` today. ``id`` is
+    language-neutral (``can://artifact/<app>/<path>``)."""
+
+    id: str = ""
+    kind: str = "artifact"
+    path: str  # repo-relative POSIX path (also the map key)
+    format: str  # toml|yaml|json|ini|properties|requirements|dockerfile|text|binary
+    roles: List[str] = []
+    size_bytes: int = 0
+    sha256: str = ""  # always the full file's hash, even when source is empty
+    source: str = ""  # the WHOLE file, or "" for binary / when capture is disabled -- never a prefix
+    extraction: str = "none"  # none|partial|full
+    config_keys: List[PyConfigKey] = []  # flattened config keys (#152); [] when not namespace-eligible
+
+
+@builder
+class PyConfigUseEdge(BaseModel):
+    """One resolved config read (#162): a detector-matched call's key
+    argument closed on exactly one string literal that matches a declared
+    ``PyConfigKey``. ``src`` is the call's GLOBAL ordinal id
+    (``<callable-id>@<local-id>``); ``dst`` is the matched ``PyConfigKey.id``
+    -- application scope, mirroring ``param_in`` (endpoints span callables/
+    artifacts). Superset-monotonic across levels, same additive contract as
+    the DDG's ``prov`` widening: literal (``-a 2``+) subset of +dataflow
+    (``-a 3``/``-a 4``)."""
+
+    src: str
+    dst: str
+    prov: List[Literal["literal", "dataflow"]] = []
+
+
+@builder
+class PyConfigRead(BaseModel):
+    """A detector-matched call whose key did not close on exactly one string
+    literal -- first-class so a config read nobody can trace is as visible
+    as one that resolves (#162). ``key`` is the decoded literal text only
+    when it IS a literal but matches no declared ``PyConfigKey``
+    (``reason="undefined-key"``); ``None`` for a key that never closed on a
+    literal at all (``reason="non-literal"``). ``prov`` lists every tier
+    that was attempted before giving up."""
+
+    site: str  # GLOBAL ordinal id
+    callee: str  # external id (can://.../@external/<module>/<name>)
+    key: Optional[str] = None
+    reason: Literal["non-literal", "undefined-key"]
+    prov: List[Literal["literal", "dataflow"]] = []
+
+
+@builder
+class PyDependency(BaseModel):
+    """One declared third-party dependency, evidence-tagged via ``prov``."""
+
+    name: str  # PEP 503 normalized
+    ecosystem: str = "pypi"  # SDK symmetry with purl (#152 rider); the only ecosystem this analyzer emits
+    spec: str = ""
+    kind: str = "runtime"  # runtime|dev|optional|build
+    extras: List[str] = []
+    declared_in: str = ""  # PyArtifact id
+    # False for lockfile-only (transitive) dependencies -- pinned in a lock
+    # with no manifest declaration (#152 reconciliation).
+    direct: bool = True
+    locked_version: Optional[str] = None
+    provides_imports: List[str] = []
+    prov: List[str] = []  # declared|lockfile|installed-metadata|heuristic
+
+
+@builder
+class PyImportBinding(BaseModel):
+    """A top-level import no declared dependency accounts for."""
+
+    module: str
+    bound_to: Optional[str] = None  # best-effort distribution name
+    prov: List[str] = []
+
+
 @builder
 class PyRepositoryInfo(BaseModel):
     """Where the analyzed source came from: git provenance captured at analysis time."""
@@ -502,6 +610,11 @@ class PyApplication(BaseModel):
     # builtin members), keyed by signature. Populated by the analyzer so every
     # backend (JSON and Neo4j) shares one authoritative external-symbol set.
     external_symbols: Dict[str, PyExternalSymbol] = {}
+    # Non-code artifacts, declared dependencies, and undeclared imports
+    # (spec 2026-08-27). L1 data: identical at every analysis level.
+    artifacts: Dict[str, PyArtifact] = {}
+    dependencies: List[PyDependency] = []
+    unresolved_imports: List[PyImportBinding] = []
     # Coverage/failure record for the entrypoint pass; see PyEntrypointReport (#27).
     entrypoint_report: PyEntrypointReport = PyEntrypointReport()
     # Git provenance of the analyzed checkout, captured at analysis time.
@@ -509,6 +622,10 @@ class PyApplication(BaseModel):
     # Interprocedural parameter-passing edges (formal↔actual); populated at L4.
     param_in: List[ParamEdge] = []
     param_out: List[ParamEdge] = []
+    # config_use (#162): PY_USES_CONFIG edges + first-class unresolved reads.
+    # Literal tier from L2; dataflow tiers widen the set at L3/L4 (additive).
+    config_uses: List[PyConfigUseEdge] = []
+    config_reads_unresolved: List[PyConfigRead] = []
 
 
 @builder

codeanalyzer/syntactic_analysis/symbol_table_builder.py

@@ -1,5 +1,6 @@
 import ast
 import hashlib
+import json
 import os
 import tokenize
 from ast import AST, ClassDef
@@ -786,6 +787,16 @@ class SymbolTableBuilder:
                 PyCallArgument(
                     ast_kind=type(arg).__name__,
                     inferred_type=self._infer_type(script, arg.lineno, arg.col_offset),
+                    # Literal/name capture (#162): value JSON-encoded for a
+                    # Constant of a JSON-safe type; name for a bare Name --
+                    # never both, per the AST shapes involved.
+                    value=(
+                        json.dumps(arg.value)
+                        if isinstance(arg, ast.Constant)
+                        and isinstance(arg.value, (str, int, float, bool, type(None)))
+                        else None
+                    ),
+                    name=arg.id if isinstance(arg, ast.Name) else None,
                 )
                 for arg in node.args
             ]

{codeanalyzer_python-1.2.0.dist-info → codeanalyzer_python-1.4.0.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: codeanalyzer-python
-Version: 1.2.0
+Version: 1.4.0
 Summary: Static analysis for Python — canonical schema v2 (symbol table, call graph, and native CFG/PDG/SDG dataflow) as analysis.json or a Neo4j property graph.
 Author-email: Rahul Krishna <i.m.ralk@gmail.com>
 License-File: LICENSE
@@ -21,6 +21,7 @@ Requires-Dist: ray==2.0.0; python_version < '3.11'
 Requires-Dist: requests<3.0.0,>=2.20.0; python_version >= '3.11'
 Requires-Dist: rich<14.0.0,>=12.6.0; python_version < '3.11'
 Requires-Dist: rich<15.0.0,>=14.0.0; python_version >= '3.11'
+Requires-Dist: tomli>=2.0; python_version < '3.11'
 Requires-Dist: typer<1.0.0,>=0.9.0; python_version < '3.11'
 Requires-Dist: typer<2.0.0,>=0.9.0; python_version >= '3.11'
 Requires-Dist: typing-extensions<5.0.0,>=4.0.0; python_version < '3.11'
@@ -98,7 +99,9 @@ needs.
   **interprocedural SDG** (synthetic parameter vertices, `param_in`/`param_out`/`summary`,
   alias-aware DDG) at level 4 — all built in-process from the stdlib `ast`.
 - **Neo4j output** — project the analysis into a labeled property graph: a self-contained
-  `graph.cypher` snapshot, or an **incremental** push to a live database over Bolt.
+  `graph.cypher` snapshot, or an **incremental** push to a live database over Bolt. A push is
+  **additive by default** and never deletes: `--eager` is what permits it to remove declarations
+  and edges the source no longer has.
 - **Versioned schema** — a machine-readable, version-stamped Neo4j schema contract (`--emit schema`),
   checked in as `schema.neo4j.json` (`2.0.0`) and shipped with every release.
 - **Incremental cache** — per-file results are cached under `.codeanalyzer`; `--lazy` (default)
@@ -299,7 +302,19 @@ $ canpy --help
 │ --eager                --lazy                               Enable eager or  │
 │                                                             lazy analysis.   │
 │                                                             Defaults to      │
-│                                                             lazy.            │
+│                                                             lazy. Also gates │
+│                                                             every            │
+│                                                             destructive step │
+│                                                             of a '--emit     │
+│                                                             neo4j' Bolt      │
+│                                                             push: a lazy     │
+│                                                             push only adds   │
+│                                                             and updates, an  │
+│                                                             eager one also   │
+│                                                             removes          │
+│                                                             declarations and │
+│                                                             edges the source │
+│                                                             no longer has.   │
 │                                                             [default: lazy]  │
 │ --skip-tests           --include-tests                      Skip test files  │
 │                                                             in analysis.     │
@@ -315,6 +330,16 @@ $ canpy --help
 │                                                             environment      │
 │                                                             instead.         │
 │                                                             [default: venv]  │
+│ --resolve-instal…                                           Additionally     │
+│                                                             bind imports via │
+│                                                             the project      │
+│                                                             venv's installed │
+│                                                             metadata         │
+│                                                             (*.dist-info);   │
+│                                                             output becomes   │
+│                                                             machine-depende… │
+│                                                             (prov:           │
+│                                                             installed-metad… │
 │ --file-name                               <path>            Analyze only the │
 │                                                             specified file   │
 │                                                             (relative to     │
@@ -346,6 +371,22 @@ $ canpy --help
 │                                                             shipped rules. A │
 │                                                             malformed file   │
 │                                                             is an error.     │
+│ --artifact-text        --no-artifact-…                      Capture verbatim │
+│                                                             `source` text on │
+│                                                             discovered       │
+│                                                             artifacts.       │
+│                                                             `source` is the  │
+│                                                             whole file;      │
+│                                                             --no-artifact-t… │
+│                                                             empties it       │
+│                                                             everywhere       │
+│                                                             (inventory       │
+│                                                             unchanged).      │
+│                                                             sha256/size_byt… │
+│                                                             always reflect   │
+│                                                             the full file.   │
+│                                                             [default:        │
+│                                                             artifact-text]   │
 │ --help                                                      Show this        │
 │                                                             message and      │
 │                                                             exit.            │
@@ -517,14 +558,29 @@ A **callable** (function or method) carries its own CPG, keyed by node id:
 }
 ```
 
+The application envelope also contains three substrate sections:
+
+- **`artifacts`** — discovered non-code files (manifests, configs, Docker files, CI workflows,
+  packaging files, scripts, docs, and legal files) with extraction status (`none`, `partial`, or
+  `full`; default `none`), keyed by relative path; each artifact carries the
+  `can://artifact/<app>/<path>` id namespace. Config files carry extracted `config_keys`
+  (keys, values, namespaces, and references) and `DEFINES_CONFIG` Neo4j edges.
+- **`dependencies`** — declared packages with kind (`runtime`/`dev`/`optional`/`build`), spec,
+  locked version, and provenance (`prov`): where each binding came from (manifest file, lock file,
+  installed metadata).
+- **`unresolved_imports`** — modules imported but not resolvable in the declared dependency set,
+  one entry per module.
+
 Notable properties:
 
 - **Durable `can://` ids** identify every node at callable granularity and above
   (`can://python/<app>/<file>/<callable-sig>`); nodes below a callable use ordinal ids
   (`@entry`, `@exit`, `line:col`, `@formal_in:N`, `line:col/actual_in:N`).
 - **`source` lives once per module**; every node's text is the `module.source[span.bytes]` slice.
-- **Cross-function edges** — `call_graph`, `param_in`, `param_out` — live at **application** scope;
+- **Cross-function edges** — `call_graph`, `param_in`, `param_out`, `config_uses` — live at **application** scope;
   the intraprocedural `cfg`/`cdg`/`ddg` and the `summary` edges live **on the callable**.
+  `config_uses` resolve from call-site key arguments to `ConfigKey` nodes; unresolved reads
+  go to `config_reads_unresolved`.
 - **No dangling endpoints** — every `call_graph` `src`/`dst` joins the id space: declared
   callables by their tree id, imported/builtin targets by a `…/@external/<module>/<name>` id
   homed in `application.external_symbols`.
@@ -545,9 +601,13 @@ binary format).
 
 ### Neo4j graph
 
-`--emit neo4j` projects the same schema v2.0.0 analysis into a labeled property graph. Every node
-label is `Py`-prefixed and every relationship type is `PY_`-prefixed (e.g. `:PyClass`, `PY_CALLS`)
-so multiple language analyzers can share one database without label or relationship-type collisions.
+`--emit neo4j` projects the same schema v2.0.0 analysis into a labeled property graph. Every
+Python-specific node label is `Py`-prefixed and every Python-specific relationship type is
+`PY_`-prefixed (e.g. `:PyClass`, `PY_CALLS`) so multiple language analyzers can share one database
+without label or relationship-type collisions. The one deliberate exception is the language-neutral
+`Artifact`/`Package` subgraph (non-code files and third-party dependencies) — those nodes carry no
+`Py` prefix, since they are meant as cross-language merge targets: a sibling-language analyzer over
+the same repo should land on the same `Artifact`/`Package` nodes, not a per-language duplicate.
 Declarations are keyed by their **`can://` id** under a shared `:PySymbol` label; calls, imports,
 inheritance, decorators, and call sites are relationships. At `-a 3`/`-a 4` the projection gains the
 **CPG overlay** — `:PyBodyNode` nodes (statements, and at level 4 the parameter vertices) wired by
@@ -608,6 +668,56 @@ runtime (Docker or Podman) and is enabled with an environment variable:
 RUN_CONTAINER_TESTS=1 uv run pytest test/test_neo4j_bolt.py -s
 ```
 
+## Graph query cookbook
+
+Example Cypher over the projected graph (`--emit neo4j`, then load `graph.cypher` or push via Bolt).
+
+```cypher
+// who calls this function? (direct callers)
+MATCH (c:PyCallable)-[:PY_CALLS]->(t:PyCallable {name: "process_payment"})
+RETURN c.id
+
+// every callable that reaches a given library, via the external ghosts
+MATCH (c:PyCallable)-[:PY_CALLS]->(e:PyExternal)
+WHERE e.id CONTAINS "/@external/requests/"
+RETURN DISTINCT c.id
+
+// entrypoints and the frameworks that invoke them
+MATCH (m:PyCallable {is_entrypoint: true})
+RETURN m.id, m.entrypoint_frameworks
+
+// data dependences into one statement (level 3+)
+MATCH (s:PyBodyNode {id: $stmt})<-[d:PY_DDG]-(src:PyBodyNode)
+RETURN src.id, d.var, d.prov
+
+// interprocedural flow through a parameter (level 4)
+MATCH (a:PyBodyNode)-[:PY_PARAM_IN]->(f:PyBodyNode)
+WHERE f.id STARTS WITH "can://python/myapp/src/api.py"
+RETURN a.id, f.id
+```
+
+Artifact and dependency queries (1.3.0+):
+
+```cypher
+// all container/orchestration configs in the app
+MATCH (a:PyApplication)-[:HAS_ARTIFACT]->(f:Artifact)
+WHERE any(r IN f.roles WHERE r IN ["service-topology", "container-image"])
+RETURN f.id, f.format
+
+// every callable that reaches code from a declared package
+MATCH (c:PyCallable)-[:PY_CALLS]->(:PyExternal)<-[:PY_PROVIDES]-(p:Package {id: "pkg:pypi/requests"})
+RETURN c.id
+
+// undeclared imports (dependency hygiene)
+MATCH (a:PyApplication)-[u:PY_UNRESOLVED_IMPORT]->(e:PyExternal)
+WHERE NOT (e)<-[:PY_PROVIDES]-(:Package)
+RETURN e.id, u.prov
+
+// which lock file pins this package, and to what
+MATCH (f:Artifact)-[l:LOCKS]->(p:Package {id: "pkg:pypi/numpy"})
+RETURN f.id, l.version
+```
+
 ## License
 
 Apache 2.0 — see [LICENSE](./LICENSE).

{codeanalyzer_python-1.2.0.dist-info → codeanalyzer_python-1.4.0.dist-info}/RECORD

@@ -1,12 +1,19 @@
 codeanalyzer/__init__.py,sha256=BZ3Kuwl-F_F-8H8cepLnVJ4Ku4NNUjjqg0Y6ujPQSsI,108
-codeanalyzer/__main__.py,sha256=hmuIKxpW7TFfGaBGb1HiHCFS02dCQxVhG7FkruXECWQ,14954
-codeanalyzer/core.py,sha256=vkU8djqKmyX4mXmb5rOz3oRjlMWYjMB7dWB_toIHnu4,42140
+codeanalyzer/__main__.py,sha256=o5_9ct61l3T7ryIsag8bz304NabVV-el_ooGD8tnbhA,15968
+codeanalyzer/core.py,sha256=tk_3dz81ECXXv8CEciWTIVfBAHHIfTVCsZte1GAZ080,46620
 codeanalyzer/provenance.py,sha256=DT-DqwdVwO7g-GyK3sC0_4vDNCUjZYEY1fyYCt-7VRM,2306
 codeanalyzer/py.typed,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
+codeanalyzer/artifacts/__init__.py,sha256=317sEeZLS1AYsfYDYIk7tLR3AdDFwWw_cmkeZDabkJo,906
+codeanalyzer/artifacts/config_keys.py,sha256=ovwptAErLYutlCzUwvyim2kH6-6vUKxuRcBV2KJS71Y,26843
+codeanalyzer/artifacts/config_use.py,sha256=1-jGacW249dwF7b6DOrTFuJ7sA5Ho9khgrgZqND0nro,27173
+codeanalyzer/artifacts/config_use_rules.yml,sha256=fNgI6IceOsj78LYmgoDH-vQ4-Mfb2ZFGKIQhLuoL4ik,1483
+codeanalyzer/artifacts/dependencies.py,sha256=h_-XV5KhrT-1Ytguw0c4fyI9zSFzn9Aj7kR66omvL3M,10853
+codeanalyzer/artifacts/discovery.py,sha256=cUVRSdV82G2hVGhkRGV7u24-tEAxUBmH9nkTg24ur0Y,5968
+codeanalyzer/artifacts/parsers.py,sha256=xOjC53tT0Mv0k7ONGwzl5XUvpBLnZlEcGmyrX5DS45k,9035
 codeanalyzer/dataflow/__init__.py,sha256=HCNOH24rAGLUMG94N9aC-2SsAWSntk3uys7e39ipU5o,1725
 codeanalyzer/dataflow/access_paths.py,sha256=wC8Q9qD-RZzkoFWMVvu_6uNNmYP8z48OGp9h9v3F1d4,23623
 codeanalyzer/dataflow/alias.py,sha256=ZYKY0DiR3GHv6YJr7C001Lode9rZsk6-gxdomUyIvwg,3928
-codeanalyzer/dataflow/builder.py,sha256=sCngN3MWfCbHteSHiue8l7AUVQNttETJInsgVMy_xkY,31317
+codeanalyzer/dataflow/builder.py,sha256=KiISa2bIuBf_0N0v_PzlgMGm0sFtMICEwA-Y6DFXiM4,32687
 codeanalyzer/dataflow/cfg.py,sha256=u5YXJjAaDshdgv-9kWWITbBJFP-MwXKq6hbNh0fhDm8,25307
 codeanalyzer/dataflow/defuse.py,sha256=LrX1ToOZzR79NlAGg5T647UAFkpiEqEnT7t0K5RXOiI,4377
 codeanalyzer/dataflow/dominance.py,sha256=X7Ki1QRdVqaseYsJtiUL7m9MbcC2WHEv9b8bczSLFUA,5086
@@ -14,9 +21,9 @@ codeanalyzer/dataflow/identity.py,sha256=WAIal6XchmQqdnXbvbEgu8J6vJdXNRdie1KHz1v
 codeanalyzer/dataflow/pdg.py,sha256=1Bm7AnoRqXBryZulII2idPw0feV8eZQ1VqqprQ8PW-g,3731
 codeanalyzer/dataflow/scalpel_oracle.py,sha256=FxRadKrTWar0VKHyQJM40n3cq25sld3Sj4lMdOm5NFk,11494
 codeanalyzer/dataflow/scc.py,sha256=Doa_0-5f3agCu_5UmeEDlCUErg34TtniKIv8Uqd7Jiw,3493
-codeanalyzer/dataflow/sdg.py,sha256=sTUUlYMB9uTKg9Yxiw-ScTBXogaQKcrSP6vksKXG14M,17841
+codeanalyzer/dataflow/sdg.py,sha256=taDXkIg0BZUtDEJUjRJB_dxrFl6tKNOUdFyj0zCiso0,18533
 codeanalyzer/dataflow/slicing.py,sha256=lWZ7jHhlR8m7rECWJQXvwfs5GNZeJY55Cud3Ji5UbNU,3654
-codeanalyzer/dataflow/summaries.py,sha256=DOgesiymL6WgePrtkQBiS_Rd7SuCr3McD4Eq05Msb50,8023
+codeanalyzer/dataflow/summaries.py,sha256=TLtc5h4bLBC4lViuMhMlEp5rp_nBpDPOl4_wfBuRUY4,9210
 codeanalyzer/dataflow/syntactic.py,sha256=AbHyXjKX_1xkGgKH48BpXYCWBauActGUwSMF_OD-uys,1124
 codeanalyzer/dataflow/scalpel/LICENSE,sha256=xx0jnfkXJvxRnG63LTGOxlggYnIysveWIZ6H3PNdCrQ,11357
 codeanalyzer/dataflow/scalpel/README.md,sha256=YN-LxqYYDekIdhx39AG28sg9UySMmqvLQJivTvR2Fz8,1543
@@ -38,34 +45,34 @@ codeanalyzer/entrypoints/rules.yml,sha256=rgDglVOcUNXnQ5FXLMfnJbfI7xHRiRmegTP5bm
 codeanalyzer/jedi/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 codeanalyzer/jedi/jedi.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 codeanalyzer/neo4j/__init__.py,sha256=8Ei6uThTOqmul6GhnKoGOjLXJZbyDwF5Jo-8I8NxnAk,1574
-codeanalyzer/neo4j/bolt.py,sha256=qEBtQlBjaMPpLQPUCOAR9jEqLxpXYJG5mtxdYAhjtMI,10134
+codeanalyzer/neo4j/bolt.py,sha256=wobEBSQn5z9uCER3fNtTl98Q1z5WuXG-O1rPRoFwFWI,11949
 codeanalyzer/neo4j/cypher.py,sha256=a7YSmxxDbPcYc5gI4TW9sM6_WOE3RgLXTGBR9K8W8kw,5321
-codeanalyzer/neo4j/emit.py,sha256=QdrZWG3_IQHMcKCX4bFINpXvqZU2Qfsi9beIJovC2p4,3493
-codeanalyzer/neo4j/project.py,sha256=LFj8O_2DYA_dvMTbSYK_PYxmnP2UJ4h_3J8rCIoK1w8,25927
+codeanalyzer/neo4j/emit.py,sha256=OBCO77TDTaNpqk9Di3JIQzBouLpHPdgoXuPSs44iJuU,3587
+codeanalyzer/neo4j/project.py,sha256=U-2ZurR3aYFY0k8WGpEIYTE4YEET2pJeOyxqb9i_Xyo,35044
 codeanalyzer/neo4j/rows.py,sha256=med0XFa63PPUVUhJMq1TtVcJxgaVW39sgxBRZJDIJ_w,7811
-codeanalyzer/neo4j/schema.py,sha256=kx134hxG_Uv6b5PkHFfkX7L1STpxSaW4pGTDe_Wruf0,10768
+codeanalyzer/neo4j/schema.py,sha256=88F_biHRhd4NV1RSNvFCwLa062gKJb12_P_-vV6L-rE,15379
 codeanalyzer/options/__init__.py,sha256=6NewN0a-1HAEgKcxQjYyVn2WEDLrhax8h3WLgZddeqI,94
-codeanalyzer/options/options.py,sha256=5gmKNxb51vWmIknE4e8kyT9nJRchL0VYspZxe_PAsws,1389
+codeanalyzer/options/options.py,sha256=2jDCcs74iSEOhz90LoRGts6PC8yV9IDPVxnLPNmonOA,1609
 codeanalyzer/schema/__init__.py,sha256=hIyz02abUJNPW8yUgguaeKflZjTmOZWbDiKICNBD7yk,4141
 codeanalyzer/schema/assign_ids.py,sha256=pQHluLaO5a6hFREp3vjVRsUeAfTYSJ95RXS9TZvnoys,1590
 codeanalyzer/schema/call_graph_ids.py,sha256=mWAhJDBsW8i-siJiINOHCXEm4qM6F_5se9-HuHWIFqU,568
-codeanalyzer/schema/ids.py,sha256=G5NGPjJ3UdJ1k0opy2MrvgWRWNBZgKU1PwY1MR6hDT4,829
+codeanalyzer/schema/ids.py,sha256=aOzsgVaOo6x72dnRgNxlnt6b5wbZzhTm0JOz6pdI57I,1672
 codeanalyzer/schema/l1_body.py,sha256=5Su347kwAPNflJDf7SvBR3sNXx9PVdGEml2pOpQCwo0,1684
 codeanalyzer/schema/l2_callees.py,sha256=CTcBeGoO04DstDC6h-1sHMbbIrHDEOMxP01U9VLBcfc,2327
-codeanalyzer/schema/py_schema.py,sha256=VwwRqr_jFolkbRKi8ytiwUScKZmscJBZvh16Y2tDbII,18449
+codeanalyzer/schema/py_schema.py,sha256=5G8K6uqBopU5iLwlUW30AE5A8jgTEdNaQmOeizhccag,23885
 codeanalyzer/semantic_analysis/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 codeanalyzer/semantic_analysis/call_graph.py,sha256=6YEB_wTn5-oQYLrbIhJYE0BsHl4fpWPoy5Hwd9mTnGc,11918
 codeanalyzer/semantic_analysis/defuse_linker.py,sha256=bSn1rCun28OQqSd2NOc9aVBSm47Gt9Iul4r_gwfqO1w,64930
 codeanalyzer/syntactic_analysis/__init__.py,sha256=EUQkJEh6wHjWx2qTTKbTbUgwSbfKeNieKHNy7RknVXA,476
 codeanalyzer/syntactic_analysis/exceptions.py,sha256=whs_n0vIu655Jkk1a7iOoXY6iIca4pZqJnU40V9Ejaw,537
 codeanalyzer/syntactic_analysis/import_resolver.py,sha256=Q8noZwSdDNt4P4NMqDTB9FaS-M0_d4ASK9GnJop9MDI,2751
-codeanalyzer/syntactic_analysis/symbol_table_builder.py,sha256=2bp9S5Z9Atx0Ovd70nMzAbutoNx_FD0VYBY397GAAVo,47343
+codeanalyzer/syntactic_analysis/symbol_table_builder.py,sha256=eTknBDlUuuQd3JEwbRtJt5pGVU89kOnzfmT4D5J_GKQ,47917
 codeanalyzer/utils/__init__.py,sha256=hC6VWdR5rerSqBxzu9KQHTASWqwrrYJv-CMDwrTlzkc,137
 codeanalyzer/utils/logging.py,sha256=Fw0tattPAOMs3o0JMjjXhRVLIF64f-SCcygUXF9jqeg,904
 codeanalyzer/utils/progress_bar.py,sha256=C9JtzVdd10lIxTv-KA6PebqjKWueC_vMGwVzAtHuHIw,2818
-codeanalyzer_python-1.2.0.dist-info/METADATA,sha256=Un9ZuyLWDpzfB_CNuAXiXGvM8eN0HQmr_0r2jGsBqqA,36319
-codeanalyzer_python-1.2.0.dist-info/WHEEL,sha256=zOwg4jB6zX2kU910N-cMawjivD6tO8NEWvE12je1bVk,87
-codeanalyzer_python-1.2.0.dist-info/entry_points.txt,sha256=v4Vux0Nnx7sOntVk_CH7W9RX6SkIkvR1FQYq73oVlCQ,105
-codeanalyzer_python-1.2.0.dist-info/licenses/LICENSE,sha256=xx0jnfkXJvxRnG63LTGOxlggYnIysveWIZ6H3PNdCrQ,11357
-codeanalyzer_python-1.2.0.dist-info/licenses/NOTICE,sha256=MdVkNYqHJ20on2FmWvgD4WpMsX5mir33xdyPvTXd0A0,1223
-codeanalyzer_python-1.2.0.dist-info/RECORD,,
+codeanalyzer_python-1.4.0.dist-info/METADATA,sha256=DJKj-64VCcSuUoxUbwsesDi7jSkBv69YSrsePcgAzGM,42786
+codeanalyzer_python-1.4.0.dist-info/WHEEL,sha256=zOwg4jB6zX2kU910N-cMawjivD6tO8NEWvE12je1bVk,87
+codeanalyzer_python-1.4.0.dist-info/entry_points.txt,sha256=v4Vux0Nnx7sOntVk_CH7W9RX6SkIkvR1FQYq73oVlCQ,105
+codeanalyzer_python-1.4.0.dist-info/licenses/LICENSE,sha256=xx0jnfkXJvxRnG63LTGOxlggYnIysveWIZ6H3PNdCrQ,11357
+codeanalyzer_python-1.4.0.dist-info/licenses/NOTICE,sha256=MdVkNYqHJ20on2FmWvgD4WpMsX5mir33xdyPvTXd0A0,1223
+codeanalyzer_python-1.4.0.dist-info/RECORD,,