entrygraph 0.1.0__py3-none-any.whl

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (102) hide show
  1. entrygraph/__init__.py +87 -0
  2. entrygraph/__main__.py +8 -0
  3. entrygraph/_version.py +24 -0
  4. entrygraph/api.py +549 -0
  5. entrygraph/cli/__init__.py +0 -0
  6. entrygraph/cli/main.py +387 -0
  7. entrygraph/cli/render.py +136 -0
  8. entrygraph/data/sinks/csharp.toml +106 -0
  9. entrygraph/data/sinks/go.toml +87 -0
  10. entrygraph/data/sinks/java.toml +92 -0
  11. entrygraph/data/sinks/javascript.toml +112 -0
  12. entrygraph/data/sinks/lib_javascript.toml +34 -0
  13. entrygraph/data/sinks/lib_python.toml +39 -0
  14. entrygraph/data/sinks/php.toml +125 -0
  15. entrygraph/data/sinks/python.toml +160 -0
  16. entrygraph/data/sinks/ruby.toml +102 -0
  17. entrygraph/data/sinks/rust.toml +68 -0
  18. entrygraph/db/__init__.py +0 -0
  19. entrygraph/db/engine.py +34 -0
  20. entrygraph/db/meta.py +70 -0
  21. entrygraph/db/models.py +176 -0
  22. entrygraph/db/queries.py +155 -0
  23. entrygraph/detect/__init__.py +0 -0
  24. entrygraph/detect/entrypoints/__init__.py +22 -0
  25. entrygraph/detect/entrypoints/base.py +124 -0
  26. entrygraph/detect/entrypoints/configs.py +139 -0
  27. entrygraph/detect/entrypoints/csharp.py +156 -0
  28. entrygraph/detect/entrypoints/golang.py +158 -0
  29. entrygraph/detect/entrypoints/java.py +187 -0
  30. entrygraph/detect/entrypoints/javascript.py +211 -0
  31. entrygraph/detect/entrypoints/php.py +133 -0
  32. entrygraph/detect/entrypoints/python.py +335 -0
  33. entrygraph/detect/entrypoints/ruby.py +147 -0
  34. entrygraph/detect/entrypoints/rust.py +153 -0
  35. entrygraph/detect/frameworks.py +369 -0
  36. entrygraph/detect/manifests.py +234 -0
  37. entrygraph/detect/taint.py +224 -0
  38. entrygraph/errors.py +27 -0
  39. entrygraph/extract/__init__.py +0 -0
  40. entrygraph/extract/base.py +51 -0
  41. entrygraph/extract/csharp.py +502 -0
  42. entrygraph/extract/golang.py +342 -0
  43. entrygraph/extract/ir.py +105 -0
  44. entrygraph/extract/java.py +329 -0
  45. entrygraph/extract/javascript.py +400 -0
  46. entrygraph/extract/php.py +426 -0
  47. entrygraph/extract/python.py +390 -0
  48. entrygraph/extract/registry.py +43 -0
  49. entrygraph/extract/ruby.py +321 -0
  50. entrygraph/extract/rust.py +482 -0
  51. entrygraph/fs/__init__.py +0 -0
  52. entrygraph/fs/hashing.py +78 -0
  53. entrygraph/fs/lang.py +134 -0
  54. entrygraph/fs/walker.py +167 -0
  55. entrygraph/graph/__init__.py +0 -0
  56. entrygraph/graph/adjacency.py +146 -0
  57. entrygraph/graph/cte.py +123 -0
  58. entrygraph/graph/scoring.py +101 -0
  59. entrygraph/kinds.py +51 -0
  60. entrygraph/parsing/__init__.py +0 -0
  61. entrygraph/parsing/parsers.py +49 -0
  62. entrygraph/parsing/queries.py +39 -0
  63. entrygraph/pipeline/__init__.py +0 -0
  64. entrygraph/pipeline/scanner.py +506 -0
  65. entrygraph/pipeline/worker.py +49 -0
  66. entrygraph/pipeline/writer.py +41 -0
  67. entrygraph/py.typed +0 -0
  68. entrygraph/queries/csharp/calls.scm +4 -0
  69. entrygraph/queries/csharp/definitions.scm +29 -0
  70. entrygraph/queries/csharp/imports.scm +4 -0
  71. entrygraph/queries/go/calls.scm +2 -0
  72. entrygraph/queries/go/definitions.scm +24 -0
  73. entrygraph/queries/go/imports.scm +1 -0
  74. entrygraph/queries/java/calls.scm +2 -0
  75. entrygraph/queries/java/definitions.scm +14 -0
  76. entrygraph/queries/java/imports.scm +2 -0
  77. entrygraph/queries/javascript/calls.scm +4 -0
  78. entrygraph/queries/javascript/definitions.scm +4 -0
  79. entrygraph/queries/javascript/imports.scm +6 -0
  80. entrygraph/queries/php/calls.scm +8 -0
  81. entrygraph/queries/php/definitions.scm +24 -0
  82. entrygraph/queries/php/imports.scm +1 -0
  83. entrygraph/queries/python/calls.scm +2 -0
  84. entrygraph/queries/python/definitions.scm +11 -0
  85. entrygraph/queries/python/imports.scm +2 -0
  86. entrygraph/queries/ruby/calls.scm +4 -0
  87. entrygraph/queries/ruby/definitions.scm +20 -0
  88. entrygraph/queries/ruby/imports.scm +7 -0
  89. entrygraph/queries/rust/calls.scm +5 -0
  90. entrygraph/queries/rust/definitions.scm +26 -0
  91. entrygraph/queries/rust/imports.scm +4 -0
  92. entrygraph/resolve/__init__.py +0 -0
  93. entrygraph/resolve/externals.py +61 -0
  94. entrygraph/resolve/hierarchy.py +152 -0
  95. entrygraph/resolve/resolver.py +275 -0
  96. entrygraph/resolve/symbol_table.py +48 -0
  97. entrygraph/results.py +138 -0
  98. entrygraph-0.1.0.dist-info/METADATA +204 -0
  99. entrygraph-0.1.0.dist-info/RECORD +102 -0
  100. entrygraph-0.1.0.dist-info/WHEEL +4 -0
  101. entrygraph-0.1.0.dist-info/entry_points.txt +2 -0
  102. entrygraph-0.1.0.dist-info/licenses/LICENSE +21 -0
@@ -0,0 +1,48 @@
1
+ """In-memory symbol index for pass-2 reference resolution."""
2
+
3
+ from __future__ import annotations
4
+
5
+ from collections import defaultdict
6
+
7
+ from entrygraph.kinds import SymbolKind
8
+
9
+
10
+ class SymbolTable:
11
+ def __init__(self) -> None:
12
+ self.by_fqn: dict[str, int] = {}
13
+ self.qname_of: dict[int, str] = {}
14
+ self.by_name: dict[str, list[int]] = defaultdict(list)
15
+ self.kinds: dict[int, SymbolKind] = {}
16
+ self.project_modules: set[str] = set()
17
+ self.module_symbol_ids: dict[str, int] = {} # module_path -> module symbol id
18
+ self.class_bases: dict[str, list[str]] = {} # class fqn -> raw base texts
19
+ # class fqn -> resolved parent FQNs (project or external), for the
20
+ # transitive ancestor walk and class-hierarchy analysis (see hierarchy.py).
21
+ self.class_parents: dict[str, list[str]] = {}
22
+ # re-export chains (barrel files): module -> {exported_name: (target_module, target_name)}
23
+ self.reexports: dict[str, dict[str, tuple[str, str]]] = {}
24
+ self.star_reexports: dict[str, list[str]] = {} # module -> [source modules]
25
+
26
+ def add_symbol(self, symbol_id: int, qname: str, name: str, kind: SymbolKind) -> None:
27
+ self.by_fqn[qname] = symbol_id
28
+ self.qname_of[symbol_id] = qname
29
+ self.by_name[name].append(symbol_id)
30
+ self.kinds[symbol_id] = kind
31
+
32
+ def add_module(self, module_path: str, symbol_id: int) -> None:
33
+ self.project_modules.add(module_path)
34
+ self.module_symbol_ids[module_path] = symbol_id
35
+ self.add_symbol(symbol_id, module_path, module_path.rsplit(".", 1)[-1], SymbolKind.MODULE)
36
+
37
+ def is_project_path(self, dotted: str) -> bool:
38
+ """True if a dotted path starts with any project module (prefix match)."""
39
+ if dotted in self.project_modules:
40
+ return True
41
+ parts = dotted.split(".")
42
+ return any(".".join(parts[:i]) in self.project_modules for i in range(1, len(parts)))
43
+
44
+ def unique_by_name(self, name: str, kinds: tuple[SymbolKind, ...] | None = None) -> int | None:
45
+ candidates = self.by_name.get(name, [])
46
+ if kinds is not None:
47
+ candidates = [c for c in candidates if self.kinds.get(c) in kinds]
48
+ return candidates[0] if len(candidates) == 1 else None
entrygraph/results.py ADDED
@@ -0,0 +1,138 @@
1
+ """Public result types.
2
+
3
+ All query results are frozen, slotted dataclasses detached from any ORM
4
+ session — safe to hold forever and free to serialize with dataclasses.asdict.
5
+ """
6
+
7
+ from __future__ import annotations
8
+
9
+ from dataclasses import dataclass, field
10
+
11
+
12
+ @dataclass(frozen=True, slots=True)
13
+ class Symbol:
14
+ id: int
15
+ kind: str
16
+ name: str
17
+ qname: str
18
+ file: str | None # repo-relative path; None for external placeholders
19
+ start_line: int
20
+ end_line: int
21
+ signature: str | None = None
22
+ docstring: str | None = None
23
+ is_exported: bool = True
24
+
25
+ @property
26
+ def is_external(self) -> bool:
27
+ return self.kind == "external"
28
+
29
+
30
+ @dataclass(frozen=True, slots=True)
31
+ class Edge:
32
+ id: int
33
+ kind: str
34
+ src_qname: str
35
+ dst_qname: str
36
+ resolved: bool
37
+ line: int
38
+ confidence: int
39
+ file: str | None = None
40
+ sink_id: str | None = None
41
+ arg_preview: str | None = None
42
+
43
+
44
+ @dataclass(frozen=True, slots=True)
45
+ class Entrypoint:
46
+ id: int
47
+ kind: str
48
+ framework: str | None
49
+ symbol: Symbol
50
+ route: str | None = None
51
+ http_method: str | None = None
52
+ extra: dict = field(default_factory=dict)
53
+
54
+
55
+ @dataclass(frozen=True, slots=True)
56
+ class FileInfo:
57
+ id: int
58
+ path: str
59
+ language: str | None
60
+ size_bytes: int
61
+ symbol_count: int = 0
62
+ skip_reason: str | None = None
63
+
64
+
65
+ @dataclass(frozen=True, slots=True)
66
+ class PathEdge:
67
+ kind: str
68
+ line: int
69
+ confidence: int
70
+ sink_id: str | None = None
71
+ via: str | None = None # "cha" | "dynamic" | "reexport" | None
72
+ arg_preview: str | None = None
73
+ constant_args: bool = False # terminal hop: sink called with literal args only
74
+ sanitized_by: tuple[str, ...] = () # sanitizer ids matched on/around this hop
75
+
76
+
77
+ @dataclass(frozen=True, slots=True)
78
+ class CallPath:
79
+ symbols: tuple[Symbol, ...] # source ... sink, in order
80
+ edges: tuple[PathEdge, ...] # one per hop; len == len(symbols) - 1
81
+ risk_score: float | None = None # query-time heuristic, higher = riskier
82
+ may_continue: bool = False # a node on this path has out-edges the filter excluded
83
+
84
+ @property
85
+ def min_confidence(self) -> int:
86
+ return min((e.confidence for e in self.edges), default=0)
87
+
88
+ def render(self) -> str:
89
+ parts = [self.symbols[0].qname]
90
+ for edge, sym in zip(self.edges, self.symbols[1:]):
91
+ parts.append(f"-> {sym.qname} (line {edge.line})")
92
+ return " ".join(parts)
93
+
94
+
95
+ @dataclass(frozen=True, slots=True)
96
+ class DetectedLanguage:
97
+ name: str
98
+ file_count: int
99
+ byte_count: int
100
+ percent: float # by bytes, of recognized files
101
+
102
+
103
+ @dataclass(frozen=True, slots=True)
104
+ class DetectedFramework:
105
+ name: str
106
+ language: str
107
+ confidence: float
108
+ evidence: tuple[str, ...] = ()
109
+
110
+
111
+ @dataclass(frozen=True, slots=True)
112
+ class DetectionReport:
113
+ languages: tuple[DetectedLanguage, ...]
114
+ frameworks: tuple[DetectedFramework, ...]
115
+
116
+
117
+ @dataclass(frozen=True, slots=True)
118
+ class IndexStats:
119
+ files_scanned: int
120
+ files_indexed: int
121
+ files_skipped: int
122
+ files_deleted: int
123
+ symbols: int
124
+ edges: int
125
+ entrypoints: int
126
+ duration_seconds: float
127
+
128
+
129
+ @dataclass(frozen=True, slots=True)
130
+ class GraphStats:
131
+ repo_root: str
132
+ index_generation: int
133
+ files: int
134
+ symbols: int
135
+ edges: int
136
+ resolved_edges: int
137
+ entrypoints: int
138
+ sink_edges: int
@@ -0,0 +1,204 @@
1
+ Metadata-Version: 2.4
2
+ Name: entrygraph
3
+ Version: 0.1.0
4
+ Summary: Language-agnostic code graph: query symbols, entrypoints, and source-to-sink call paths from a SQLite index
5
+ Project-URL: Repository, https://github.com/brettbergin/entrygraph
6
+ Author-email: Brett Bergin <brettberginbc@yahoo.com>
7
+ License: MIT License
8
+
9
+ Copyright (c) 2026 Brett Bergin
10
+
11
+ Permission is hereby granted, free of charge, to any person obtaining a copy
12
+ of this software and associated documentation files (the "Software"), to deal
13
+ in the Software without restriction, including without limitation the rights
14
+ to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
15
+ copies of the Software, and to permit persons to whom the Software is
16
+ furnished to do so, subject to the following conditions:
17
+
18
+ The above copyright notice and this permission notice shall be included in all
19
+ copies or substantial portions of the Software.
20
+
21
+ THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
22
+ IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
23
+ FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
24
+ AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
25
+ LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
26
+ OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
27
+ SOFTWARE.
28
+ License-File: LICENSE
29
+ Keywords: call-graph,code-analysis,entrypoints,static-analysis,tree-sitter
30
+ Classifier: Development Status :: 3 - Alpha
31
+ Classifier: Intended Audience :: Developers
32
+ Classifier: Programming Language :: Python :: 3
33
+ Classifier: Programming Language :: Python :: 3.11
34
+ Classifier: Programming Language :: Python :: 3.12
35
+ Classifier: Programming Language :: Python :: 3.13
36
+ Classifier: Topic :: Software Development :: Quality Assurance
37
+ Requires-Python: >=3.11
38
+ Requires-Dist: pathspec<1.0,>=0.12
39
+ Requires-Dist: rich>=13.0
40
+ Requires-Dist: sqlalchemy<3.0,>=2.0.30
41
+ Requires-Dist: tree-sitter-language-pack>=1.10
42
+ Requires-Dist: tree-sitter<0.26,>=0.25
43
+ Provides-Extra: dev
44
+ Requires-Dist: pytest-cov; extra == 'dev'
45
+ Requires-Dist: pytest>=8.0; extra == 'dev'
46
+ Description-Content-Type: text/markdown
47
+
48
+ # entrygraph
49
+
50
+ Query your codebase like a graph. `entrygraph` indexes a repository into a
51
+ SQLite database (through the SQLAlchemy ORM) and answers questions about
52
+ **symbols**, **classes/methods**, **entrypoints** (HTTP routes, CLI commands,
53
+ main functions, tasks, lambda handlers), and **source → sink call-graph
54
+ reachability** ("can any HTTP route reach `subprocess.run`?").
55
+
56
+ Language-agnostic via [tree-sitter](https://tree-sitter.github.io/); first-class
57
+ support for **Python, JavaScript/TypeScript, Go, Java, Ruby, C#, PHP, and
58
+ Rust**, with language *and* framework detection.
59
+
60
+ Reachability is a heuristic taint tier, not just call-edge closure: paths are
61
+ **risk-ranked**, **sanitizers** prune or discount them, **class-hierarchy
62
+ analysis** recovers virtual dispatch, and confidence flags trade recall for
63
+ precision. Entrypoints include decorator/attribute routes, call-based route
64
+ registration, middleware, and config-file handlers (serverless, SAM, Procfile,
65
+ Dockerfile).
66
+
67
+ ## Install
68
+
69
+ ```bash
70
+ pip install entrygraph # or: uv pip install entrygraph
71
+ ```
72
+
73
+ Requires Python ≥ 3.11. Depends on `sqlalchemy`, `tree-sitter`,
74
+ `tree-sitter-language-pack`, and `pathspec`.
75
+
76
+ ## Python API
77
+
78
+ ```python
79
+ from entrygraph import CodeGraph
80
+
81
+ # Index a repo (creates <repo>/.entrygraph.db by default)
82
+ graph = CodeGraph.index("/path/to/repo")
83
+
84
+ # ...or open an existing index
85
+ graph = CodeGraph.open("graph.db")
86
+
87
+ # Symbols — glob on name or qualified name, filter by kind or file
88
+ graph.symbols(kind="class", name="User*")
89
+ graph.symbol("app.services.Runner.execute") # exact; raises if missing
90
+
91
+ # Detection
92
+ report = graph.detect()
93
+ report.languages # -> [DetectedLanguage(name="python", percent=96.7, ...), ...]
94
+ report.frameworks # -> [DetectedFramework(name="flask", confidence=0.94, ...), ...]
95
+
96
+ # Entrypoints
97
+ graph.entrypoints(framework="flask")
98
+ graph.entrypoints(kind="http_route", route="/api/*")
99
+
100
+ # Call graph
101
+ graph.callers("app.services.run_report") # who calls it
102
+ graph.callees("app.services.run_report", depth=3) # what it (transitively) calls
103
+ graph.references("app.models.CONST") # inbound edges of any kind
104
+
105
+ # Source -> sink reachability (paths are risk-ranked, highest first)
106
+ paths = graph.paths(source="app.routes.*", sink_category="command_exec")
107
+ for p in paths:
108
+ print(p.risk_score, p.render(), "(+may continue)" if p.may_continue else "")
109
+ # 0.72 app.routes.create_report -> app.services.run_report (line 20)
110
+ # -> ...ReportRunner.render_and_execute (line 17) -> py:subprocess.run (line 22)
111
+
112
+ graph.reachable(source="app.routes.upload", sink="py:subprocess.run") # -> bool
113
+
114
+ # Precision/recall dial. By default only EXACT/IMPORT and unique-name FUZZY
115
+ # edges are traversed. Opt into wider (noisier) traversal:
116
+ graph.paths(source="app.routes.*", sink_category="sql",
117
+ include_unresolved=True) # follow py:*.execute wildcard-sink guesses
118
+ graph.paths(source="app.routes.*", sink_category="command_exec",
119
+ include_fuzzy=True) # follow speculative class-hierarchy (CHA) edges
120
+ graph.paths(source="app.routes.*", sink_category="command_exec",
121
+ prune_sanitized=True) # drop paths neutralized by a shlex.quote etc.
122
+
123
+ # Incremental re-index (only changed/added/deleted files are reparsed)
124
+ graph.refresh()
125
+
126
+ # Escape hatches
127
+ graph.session() # raw SQLAlchemy Session
128
+ graph.sql("SELECT ...") # textual query -> list[dict]
129
+ ```
130
+
131
+ Every result is a frozen, immutable dataclass detached from the DB session, so
132
+ results are safe to hold and trivial to serialize.
133
+
134
+ ## CLI
135
+
136
+ Human-readable output is rendered with [Rich](https://github.com/Textualize/rich) —
137
+ colored tables, language/confidence bars, a progress spinner while indexing, and
138
+ risk-ranked reachability rendered as call trees (sink nodes highlighted, per-hop
139
+ confidence, sanitizer/const-arg badges). Piped or `--json` output stays plain.
140
+
141
+ ```bash
142
+ entrygraph index PATH [--full] [--paranoid] # incremental by default
143
+ entrygraph detect
144
+ entrygraph symbols --kind class --name 'User*'
145
+ entrygraph entrypoints --framework flask
146
+ entrygraph callers app.services.run_report --depth 2
147
+ entrygraph callees app.services.run_report
148
+ entrygraph paths --source 'app.routes.*' --sink-category command_exec
149
+ entrygraph stats
150
+ ```
151
+
152
+ Add `--json` to any query command for machine-readable output. `entrygraph paths`
153
+ exits 0 when a path is found and 1 when none is — handy in CI:
154
+
155
+ ```bash
156
+ entrygraph paths --source '*' --sink-category command_exec && echo "reachable!"
157
+ ```
158
+
159
+ ## How it works
160
+
161
+ 1. **Walk** — `os.scandir` with hard-pruned junk dirs (`node_modules`, `.venv`,
162
+ …), `.gitignore` rules, and size/binary/minified gates. Every skip is recorded
163
+ with a reason.
164
+ 2. **Extract** — tree-sitter `.scm` queries harvest definitions/imports/calls;
165
+ small per-language "shaper" modules build qualified names, import maps, and
166
+ receiver info. Parsing runs across a process pool for large repos.
167
+ 3. **Resolve** — a two-pass resolver binds references to symbols with a
168
+ confidence level (`exact` / `import` / `fuzzy` / `unresolved`). External
169
+ callees (`subprocess.run`, `child_process.exec`, …) become placeholder nodes
170
+ so sinks are real graph terminals.
171
+ 4. **Detect** — frameworks are scored from manifest dependencies plus code
172
+ signals (noisy-or); entrypoint rules map framework patterns to route/command
173
+ records.
174
+ 5. **Store** — everything persists to SQLite via the SQLAlchemy 2.0 ORM with
175
+ bulk inserts and app-assigned keys. Re-indexing is incremental and
176
+ content-hash driven.
177
+ 6. **Query** — reachability runs over an in-memory adjacency cache (BFS/DFS with
178
+ cycle handling); a recursive-CTE SQL engine is available as a fallback
179
+ (`engine="sql"`).
180
+
181
+ ## Extending
182
+
183
+ - **Custom sinks/sources/sanitizers** — drop an `entrygraph.toml` in the repo
184
+ root with `[[sink]]` / `[[source]]` / `[[sanitizer]]` tables (same schema as
185
+ the built-in `data/sinks/*.toml`), or call
186
+ `entrygraph.detect.taint.register_sink(...)` / `register_sanitizer(...)`. A
187
+ `[[sanitizer]]` with `effect = "neutralizes"` prunes a path for its category;
188
+ `effect = "reduces"` only discounts the risk score. Third-party wrapper
189
+ libraries that reach a sink internally are covered by `data/sinks/lib_*.toml`
190
+ "library summaries" (same schema, with a `library = "..."` tag).
191
+ - **New frameworks / entrypoints** — register a `FrameworkSpec` and an
192
+ `EntrypointRule`; adding a framework is usually a few lines.
193
+ - **New languages** — add a `<lang>/{definitions,imports,calls}.scm` query set
194
+ and a shaper implementing the `LanguageExtractor` protocol.
195
+
196
+ ## Releasing
197
+
198
+ Merging to `main` auto-bumps the patch version (via a git tag) and publishes to
199
+ PyPI through Trusted Publishing — see [RELEASING.md](RELEASING.md). The package
200
+ version is derived from git tags by `hatch-vcs`, so it's never hand-edited.
201
+
202
+ ## License
203
+
204
+ MIT
@@ -0,0 +1,102 @@
1
+ entrygraph/__init__.py,sha256=44r5IEkXSoE6ReFDAbQ5C_--yX327RBfIYt_ILvsOWA,2253
2
+ entrygraph/__main__.py,sha256=ZqvsbMeW_cgA0PI8C05d4Z_q38cJiBZokTsApVRZGV8,210
3
+ entrygraph/_version.py,sha256=n_5vdJsPNu7wZ57LGuRL585uvll-hiuvZUBWzdG0RQU,520
4
+ entrygraph/api.py,sha256=w9U7bMJCeoHnM8mmlLo8JLneEfoSVDbNI_FcENFWEXU,22625
5
+ entrygraph/errors.py,sha256=C9FQoCWMdPUmUWzTw3ffWhQX8gn16tjK2n00VHFLoO0,714
6
+ entrygraph/kinds.py,sha256=GN_Z5Sj-uwRvPVwH27FRxTGkTwxLRo5SWGn65_aGO-o,1408
7
+ entrygraph/py.typed,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
8
+ entrygraph/results.py,sha256=3xe-q2F_q_o0W5w5g-uWF5Z3ewK0S3CF1NmtNERt6Sw,3358
9
+ entrygraph/cli/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
10
+ entrygraph/cli/main.py,sha256=eir985PXzTcfaQjiWF3rVro3IPj99BXZj82KxDMQR_k,13712
11
+ entrygraph/cli/render.py,sha256=AJEXJc-umHWxwYHogWN0E7zYQoRk8HJ5DlZG-42eVaQ,4060
12
+ entrygraph/data/sinks/csharp.toml,sha256=6eT00T4v6fp16kbPcKzwx9zDEPdkpzmzYG-8VGg2Lrs,3523
13
+ entrygraph/data/sinks/go.toml,sha256=tq9q9Es5w6kTn7yt5AH9OZMLkTH2bRz3nntP8Fdh21w,2418
14
+ entrygraph/data/sinks/java.toml,sha256=C43YXjlTVK5e_R7Nh5X1lSrC-5RHTXGrDJ0hXGYQuQo,2934
15
+ entrygraph/data/sinks/javascript.toml,sha256=WTIK52OPiUFw4qP025ir116fP5OSviIgCfmtbYCXFx8,3144
16
+ entrygraph/data/sinks/lib_javascript.toml,sha256=pRK5NvTbY7Tmze9YEB4XrLx-H7kUKScBnRoKI79qMys,855
17
+ entrygraph/data/sinks/lib_python.toml,sha256=r1XrKSQSc4mMF41qS1VoIfwJusMTrZIc3A0QyyKQ008,1319
18
+ entrygraph/data/sinks/php.toml,sha256=zCH343Vrnagv0yms9E61qgU6ILfgtOYO2CglmXevO00,3469
19
+ entrygraph/data/sinks/python.toml,sha256=rqePUOptZfZoD64UViLHyZBEhShtesDEiqMgCpCz9nw,4537
20
+ entrygraph/data/sinks/ruby.toml,sha256=krGofste9lwQamGEemGL162dUa3YHR-z_B1Etmn4ujQ,2883
21
+ entrygraph/data/sinks/rust.toml,sha256=Oh1aiCFB-odrxU6VNT4q6IoqF9DUdPdGzH3LgqnoV7o,2273
22
+ entrygraph/db/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
23
+ entrygraph/db/engine.py,sha256=xmGl1YnTZTgjir-rTHYnRmWAPtxa6X1QoBvtDb42FqM,1003
24
+ entrygraph/db/meta.py,sha256=sEtLd_x6p69Lg1xAtDb-TTPg5knWc5PKt5HJFnOYO6E,2338
25
+ entrygraph/db/models.py,sha256=DYR54qyFGn0whw0-BPREcb-w5kvAo7TZ2e7sSfb6DUo,7388
26
+ entrygraph/db/queries.py,sha256=mX0ahxPLeJOHN92PuNVRzcRDPoJg3Azd36xf_VjIlYM,4815
27
+ entrygraph/detect/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
28
+ entrygraph/detect/frameworks.py,sha256=kg0M642QqeDJWtLG1-tOgFy78f61w6kFuKKvyrQKmeU,13961
29
+ entrygraph/detect/manifests.py,sha256=OjNvcT3NTS6085TE9rGpiQHKmrO113UvEFppgd58NyU,8031
30
+ entrygraph/detect/taint.py,sha256=wBIgqfydgIks9ostRunNcdinJvXT46x7BHTYYYfd3p8,7999
31
+ entrygraph/detect/entrypoints/__init__.py,sha256=RMdraEnOsWVQN1p-8YvOLiXy2KpERuPUwQ-If7DqUGQ,721
32
+ entrygraph/detect/entrypoints/base.py,sha256=Ij0A2i_1_3OJnJi7AUDtPKei2sZKsbrQ3ak68Om-SMc,4035
33
+ entrygraph/detect/entrypoints/configs.py,sha256=wf-wNCyXVRPT_6tBy1CrEiG0obPjKbew5JHeTxogCfE,5093
34
+ entrygraph/detect/entrypoints/csharp.py,sha256=1utRdPv2NGtDdmYRaWP_oeUou1x7vQFuxFtjpKv4R0U,5108
35
+ entrygraph/detect/entrypoints/golang.py,sha256=jC_31R__VrBlDnOThwHqO1rXbExYyxB_tX0Hq1WGZPE,6083
36
+ entrygraph/detect/entrypoints/java.py,sha256=__in3xGMwCEtxV3aFwuP7u52MDStaVqtDsqE-y_bBGc,6979
37
+ entrygraph/detect/entrypoints/javascript.py,sha256=oDVaJ6Ff51iZcWx1ySz7VPlqTUq0Nenb4RGlSOUN7o8,8678
38
+ entrygraph/detect/entrypoints/php.py,sha256=Ja-XAB6p7NE2ROBAIzmyojeDyQYlFIq_ktYZ67pKR8U,5227
39
+ entrygraph/detect/entrypoints/python.py,sha256=6qpVLP_HHv8_pnR-czYvt4aXFUoul5hA-BgDuJruG2A,14046
40
+ entrygraph/detect/entrypoints/ruby.py,sha256=ST_QN1RG7JO9cWmiu9tRs0Izr8EmE6hU-XKrv8SA3Rk,6040
41
+ entrygraph/detect/entrypoints/rust.py,sha256=RO0euL_JH8O8wX8HW-0NndWt5J16qHnjTVLTh1i9RDU,6003
42
+ entrygraph/extract/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
43
+ entrygraph/extract/base.py,sha256=BvUmz-W7XGSJekdGD5gFzgdZKs-quaHsXeGS103Wcyc,1455
44
+ entrygraph/extract/csharp.py,sha256=0AUP1IXbqC5gzjWpaw72V5UV962ZtIv7RwsNzjzl48U,19846
45
+ entrygraph/extract/golang.py,sha256=-qS9rOuUjF86-tsDLcGDW9DNoxiznzeVepykCYN1Wl4,14172
46
+ entrygraph/extract/ir.py,sha256=izyL150jhFPBNxbcjdCb68CTB_24N52LC3tGhwCRE-M,3832
47
+ entrygraph/extract/java.py,sha256=hOYRKuDRSBmizFgVSCLv56GiOLYhYoV_PnOF19hrsdQ,14466
48
+ entrygraph/extract/javascript.py,sha256=H-l6wyvp7nd5OozGC1ABoGwzNsc3qWprg2VR7QW5AZc,18360
49
+ entrygraph/extract/php.py,sha256=71GK7hjXrmHtey7jctGGbRBso9Zx1oAdLQMYVQOrrUU,18402
50
+ entrygraph/extract/python.py,sha256=4eS3YCEfx1VDkXW2hIzluH7Rg7Yc3p3CjRNUK55Fuf4,16471
51
+ entrygraph/extract/registry.py,sha256=_gIqguYEjlg90YnAyQzm2HA_SI-McPCymchiEpF63Ew,1475
52
+ entrygraph/extract/ruby.py,sha256=7td-dPeUpuZ9OiHYzf30BSfrDtqSPwVSIYa840xK0Qc,13581
53
+ entrygraph/extract/rust.py,sha256=Hva5RIDQHxARwxeGCvMxygQKvgfw86ujTeD6bDRarNY,20189
54
+ entrygraph/fs/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
55
+ entrygraph/fs/hashing.py,sha256=FGkLUBKwyKGoAJpF_jDSOv31eldx9qLnYktsL2rd8yg,2269
56
+ entrygraph/fs/lang.py,sha256=qIO4kvOYxdLiHa2xs7rZ5ma5Q2V9risde6mzEKQsqMk,3614
57
+ entrygraph/fs/walker.py,sha256=caYkSdX1W4UHqpZQgNLp-MS2ZAQekNmAEmrXKqwFIoA,5943
58
+ entrygraph/graph/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
59
+ entrygraph/graph/adjacency.py,sha256=897wzWqZso83e6Rodj6ZAZNGLIXdq--w8MaliU3Nx3A,5401
60
+ entrygraph/graph/cte.py,sha256=tvJ3FrbNM5iD7JNKzfzNy96OFVWvk0Jjezqiagj9AVY,5298
61
+ entrygraph/graph/scoring.py,sha256=abDBgSLsDwcp0sV_LaSwFP7NMXiqzPCAHSFvLTEzbxQ,3328
62
+ entrygraph/parsing/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
63
+ entrygraph/parsing/parsers.py,sha256=Iqqchki4XKldtpp2WyZs6p7lxc2mlxDD2JO7cvfa6h4,1218
64
+ entrygraph/parsing/queries.py,sha256=vim4IY-WTmiFZgubb4dcvenqDauKE0OrQCHwFn_ATAk,1455
65
+ entrygraph/pipeline/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
66
+ entrygraph/pipeline/scanner.py,sha256=Zlm4KreFXDBXtGsiK59INlyPd1JK_FOlhFodVA_iGEU,20312
67
+ entrygraph/pipeline/worker.py,sha256=CC9Nmmhyp-cCf9FsI6I9y0jYAPlncgOoot-sZ6ikNM8,1694
68
+ entrygraph/pipeline/writer.py,sha256=nzuXGDZ3IBDPXHDdYQdxn9Q18PUgYCGrlZ4CbhU9bvA,1385
69
+ entrygraph/queries/csharp/calls.scm,sha256=DfBWCoDw1QtA0s280titsOpxWTEzhM5y1v8URYLcVlo,211
70
+ entrygraph/queries/csharp/definitions.scm,sha256=JkXuWtJMAdjjL2TZ-lMh1Y_Aq86E8k-OtMrbujbheXg,759
71
+ entrygraph/queries/csharp/imports.scm,sha256=RF7I3saHlcJPym2PBSyUmRPm7fA_LtHlkSaquAyAslU,220
72
+ entrygraph/queries/go/calls.scm,sha256=ZDTfKTiR-6W0C1ioViHm-l3vV7Tn6Ck62qZDdEgWWqc,94
73
+ entrygraph/queries/go/definitions.scm,sha256=Zot2zZgqeQAAvbgLqya1oBxSMTAiicZTmjQ3nFkHgIQ,679
74
+ entrygraph/queries/go/imports.scm,sha256=xdnkdEC6AEfA7elWPwsOyMAF3SvGYoUuy8_-ncgruGk,29
75
+ entrygraph/queries/java/calls.scm,sha256=2Fy4oCvxy8kC8eFCBGv0HiFh86u61OtT_tInZf7BF34,60
76
+ entrygraph/queries/java/definitions.scm,sha256=eT2OGjy-xRIq8o2xo4tlJ_66FDAe2VS6nNJoPAHnUbs,387
77
+ entrygraph/queries/java/imports.scm,sha256=lRsMKoCEdifRBRoZROXWdy_QA94k9aJzLEm4xXbVYiQ,60
78
+ entrygraph/queries/javascript/calls.scm,sha256=BEsbJzu-nX_hmk_NFKJlUyWUHnP5muWNx8BC5cK0HfM,249
79
+ entrygraph/queries/javascript/definitions.scm,sha256=h1n4LSwQ_O_PDq-Dlye2wDj5sP7HNwn-Z09G_vOeCCk,231
80
+ entrygraph/queries/javascript/imports.scm,sha256=VWIvO-cetnyGMa4kvs_axucylz5uCY-Ds9R88M94BeI,280
81
+ entrygraph/queries/php/calls.scm,sha256=cGQ1pNUJgFK655Vr2qULvmHwFiCWxX2hcRLNqfMpQAU,273
82
+ entrygraph/queries/php/definitions.scm,sha256=JyGbdUb4fw9rmNPLMtzDzmh6PEV4axE5lHj9OSMqh24,582
83
+ entrygraph/queries/php/imports.scm,sha256=Xw3s7C9zg2g2wqfXQBuQIPyK-jHssltlWNkdmKb1k6U,36
84
+ entrygraph/queries/python/calls.scm,sha256=Wsk8tKMF0VUKrpP-esO_gjVxgENYGMBG_DrK7cM23j4,36
85
+ entrygraph/queries/python/definitions.scm,sha256=nPUab2zd4NNQlIPCzd7JdW_-IxmJL0EM3lKvebTKEg4,326
86
+ entrygraph/queries/python/imports.scm,sha256=_yr7Nyl7dqlKvIy0ytv6lGO9j4FPz_eIXVZyELSfgPg,64
87
+ entrygraph/queries/ruby/calls.scm,sha256=E-nTwNWzVfNdE-TkHtD_PfurKBJOdDZMYIFbblpyBvY,192
88
+ entrygraph/queries/ruby/definitions.scm,sha256=70N4UQl4qQqzmMm1lRpJ8MhWjF8W6zHpR6_QyPaUkGg,471
89
+ entrygraph/queries/ruby/imports.scm,sha256=8ku0XF6fUflZmKkhBd1cpMx26zBgd22gIBeISSm3klU,278
90
+ entrygraph/queries/rust/calls.scm,sha256=l3pAxfSf2V4ljX2nLq4XFklM8qdNGkFtPjw03jfJBBw,205
91
+ entrygraph/queries/rust/definitions.scm,sha256=KWZ5D_XucNGqTAGaxuc0F822U6g45PqKY2FIty1PmSw,603
92
+ entrygraph/queries/rust/imports.scm,sha256=j-9jeyrDjWEsarSAY8vKjXbbsWRUHHbE9Qlg9D5IaMo,144
93
+ entrygraph/resolve/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
94
+ entrygraph/resolve/externals.py,sha256=F0kox4-9IK9wvJdoAsGVcthXCjqAWGx8ei3YqF2Wr-Y,1907
95
+ entrygraph/resolve/hierarchy.py,sha256=zXD189hbCq1UM-nDzCW5yVGkAt0nbMpdWq2nz409fTg,6126
96
+ entrygraph/resolve/resolver.py,sha256=dQVY12LGoKzYWH4NFT_kjxfblybVaOiNbOXg7UFvFVw,12180
97
+ entrygraph/resolve/symbol_table.py,sha256=d69fqlOYOAMXqvYk6Xnbw7-RcqoOe9ajpxOil1fmRTs,2280
98
+ entrygraph-0.1.0.dist-info/METADATA,sha256=AQL8QtA18e_wvlr1UBevQSm808fEFHXy6yKfMDFTBqw,9228
99
+ entrygraph-0.1.0.dist-info/WHEEL,sha256=mffPy8wBnZQn2VnJUU5jE99KsxaSfiyMHV9Yt0aLVxs,87
100
+ entrygraph-0.1.0.dist-info/entry_points.txt,sha256=y8Sitwv8ki0DqKj89yfTcavZZL6Chv7SaaRylLs7MRE,56
101
+ entrygraph-0.1.0.dist-info/licenses/LICENSE,sha256=yowSBdgg1AkXtU1Ui5fd4gC8JLxsMWY1jovGzCfrDp4,1069
102
+ entrygraph-0.1.0.dist-info/RECORD,,
@@ -0,0 +1,4 @@
1
+ Wheel-Version: 1.0
2
+ Generator: hatchling 1.30.1
3
+ Root-Is-Purelib: true
4
+ Tag: py3-none-any
@@ -0,0 +1,2 @@
1
+ [console_scripts]
2
+ entrygraph = entrygraph.cli.main:main
@@ -0,0 +1,21 @@
1
+ MIT License
2
+
3
+ Copyright (c) 2026 Brett Bergin
4
+
5
+ Permission is hereby granted, free of charge, to any person obtaining a copy
6
+ of this software and associated documentation files (the "Software"), to deal
7
+ in the Software without restriction, including without limitation the rights
8
+ to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
9
+ copies of the Software, and to permit persons to whom the Software is
10
+ furnished to do so, subject to the following conditions:
11
+
12
+ The above copyright notice and this permission notice shall be included in all
13
+ copies or substantial portions of the Software.
14
+
15
+ THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
16
+ IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
17
+ FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
18
+ AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
19
+ LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
20
+ OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
21
+ SOFTWARE.