entrygraph 0.1.0__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- entrygraph/__init__.py +87 -0
- entrygraph/__main__.py +8 -0
- entrygraph/_version.py +24 -0
- entrygraph/api.py +549 -0
- entrygraph/cli/__init__.py +0 -0
- entrygraph/cli/main.py +387 -0
- entrygraph/cli/render.py +136 -0
- entrygraph/data/sinks/csharp.toml +106 -0
- entrygraph/data/sinks/go.toml +87 -0
- entrygraph/data/sinks/java.toml +92 -0
- entrygraph/data/sinks/javascript.toml +112 -0
- entrygraph/data/sinks/lib_javascript.toml +34 -0
- entrygraph/data/sinks/lib_python.toml +39 -0
- entrygraph/data/sinks/php.toml +125 -0
- entrygraph/data/sinks/python.toml +160 -0
- entrygraph/data/sinks/ruby.toml +102 -0
- entrygraph/data/sinks/rust.toml +68 -0
- entrygraph/db/__init__.py +0 -0
- entrygraph/db/engine.py +34 -0
- entrygraph/db/meta.py +70 -0
- entrygraph/db/models.py +176 -0
- entrygraph/db/queries.py +155 -0
- entrygraph/detect/__init__.py +0 -0
- entrygraph/detect/entrypoints/__init__.py +22 -0
- entrygraph/detect/entrypoints/base.py +124 -0
- entrygraph/detect/entrypoints/configs.py +139 -0
- entrygraph/detect/entrypoints/csharp.py +156 -0
- entrygraph/detect/entrypoints/golang.py +158 -0
- entrygraph/detect/entrypoints/java.py +187 -0
- entrygraph/detect/entrypoints/javascript.py +211 -0
- entrygraph/detect/entrypoints/php.py +133 -0
- entrygraph/detect/entrypoints/python.py +335 -0
- entrygraph/detect/entrypoints/ruby.py +147 -0
- entrygraph/detect/entrypoints/rust.py +153 -0
- entrygraph/detect/frameworks.py +369 -0
- entrygraph/detect/manifests.py +234 -0
- entrygraph/detect/taint.py +224 -0
- entrygraph/errors.py +27 -0
- entrygraph/extract/__init__.py +0 -0
- entrygraph/extract/base.py +51 -0
- entrygraph/extract/csharp.py +502 -0
- entrygraph/extract/golang.py +342 -0
- entrygraph/extract/ir.py +105 -0
- entrygraph/extract/java.py +329 -0
- entrygraph/extract/javascript.py +400 -0
- entrygraph/extract/php.py +426 -0
- entrygraph/extract/python.py +390 -0
- entrygraph/extract/registry.py +43 -0
- entrygraph/extract/ruby.py +321 -0
- entrygraph/extract/rust.py +482 -0
- entrygraph/fs/__init__.py +0 -0
- entrygraph/fs/hashing.py +78 -0
- entrygraph/fs/lang.py +134 -0
- entrygraph/fs/walker.py +167 -0
- entrygraph/graph/__init__.py +0 -0
- entrygraph/graph/adjacency.py +146 -0
- entrygraph/graph/cte.py +123 -0
- entrygraph/graph/scoring.py +101 -0
- entrygraph/kinds.py +51 -0
- entrygraph/parsing/__init__.py +0 -0
- entrygraph/parsing/parsers.py +49 -0
- entrygraph/parsing/queries.py +39 -0
- entrygraph/pipeline/__init__.py +0 -0
- entrygraph/pipeline/scanner.py +506 -0
- entrygraph/pipeline/worker.py +49 -0
- entrygraph/pipeline/writer.py +41 -0
- entrygraph/py.typed +0 -0
- entrygraph/queries/csharp/calls.scm +4 -0
- entrygraph/queries/csharp/definitions.scm +29 -0
- entrygraph/queries/csharp/imports.scm +4 -0
- entrygraph/queries/go/calls.scm +2 -0
- entrygraph/queries/go/definitions.scm +24 -0
- entrygraph/queries/go/imports.scm +1 -0
- entrygraph/queries/java/calls.scm +2 -0
- entrygraph/queries/java/definitions.scm +14 -0
- entrygraph/queries/java/imports.scm +2 -0
- entrygraph/queries/javascript/calls.scm +4 -0
- entrygraph/queries/javascript/definitions.scm +4 -0
- entrygraph/queries/javascript/imports.scm +6 -0
- entrygraph/queries/php/calls.scm +8 -0
- entrygraph/queries/php/definitions.scm +24 -0
- entrygraph/queries/php/imports.scm +1 -0
- entrygraph/queries/python/calls.scm +2 -0
- entrygraph/queries/python/definitions.scm +11 -0
- entrygraph/queries/python/imports.scm +2 -0
- entrygraph/queries/ruby/calls.scm +4 -0
- entrygraph/queries/ruby/definitions.scm +20 -0
- entrygraph/queries/ruby/imports.scm +7 -0
- entrygraph/queries/rust/calls.scm +5 -0
- entrygraph/queries/rust/definitions.scm +26 -0
- entrygraph/queries/rust/imports.scm +4 -0
- entrygraph/resolve/__init__.py +0 -0
- entrygraph/resolve/externals.py +61 -0
- entrygraph/resolve/hierarchy.py +152 -0
- entrygraph/resolve/resolver.py +275 -0
- entrygraph/resolve/symbol_table.py +48 -0
- entrygraph/results.py +138 -0
- entrygraph-0.1.0.dist-info/METADATA +204 -0
- entrygraph-0.1.0.dist-info/RECORD +102 -0
- entrygraph-0.1.0.dist-info/WHEEL +4 -0
- entrygraph-0.1.0.dist-info/entry_points.txt +2 -0
- entrygraph-0.1.0.dist-info/licenses/LICENSE +21 -0
|
@@ -0,0 +1,48 @@
|
|
|
1
|
+
"""In-memory symbol index for pass-2 reference resolution."""
|
|
2
|
+
|
|
3
|
+
from __future__ import annotations
|
|
4
|
+
|
|
5
|
+
from collections import defaultdict
|
|
6
|
+
|
|
7
|
+
from entrygraph.kinds import SymbolKind
|
|
8
|
+
|
|
9
|
+
|
|
10
|
+
class SymbolTable:
|
|
11
|
+
def __init__(self) -> None:
|
|
12
|
+
self.by_fqn: dict[str, int] = {}
|
|
13
|
+
self.qname_of: dict[int, str] = {}
|
|
14
|
+
self.by_name: dict[str, list[int]] = defaultdict(list)
|
|
15
|
+
self.kinds: dict[int, SymbolKind] = {}
|
|
16
|
+
self.project_modules: set[str] = set()
|
|
17
|
+
self.module_symbol_ids: dict[str, int] = {} # module_path -> module symbol id
|
|
18
|
+
self.class_bases: dict[str, list[str]] = {} # class fqn -> raw base texts
|
|
19
|
+
# class fqn -> resolved parent FQNs (project or external), for the
|
|
20
|
+
# transitive ancestor walk and class-hierarchy analysis (see hierarchy.py).
|
|
21
|
+
self.class_parents: dict[str, list[str]] = {}
|
|
22
|
+
# re-export chains (barrel files): module -> {exported_name: (target_module, target_name)}
|
|
23
|
+
self.reexports: dict[str, dict[str, tuple[str, str]]] = {}
|
|
24
|
+
self.star_reexports: dict[str, list[str]] = {} # module -> [source modules]
|
|
25
|
+
|
|
26
|
+
def add_symbol(self, symbol_id: int, qname: str, name: str, kind: SymbolKind) -> None:
|
|
27
|
+
self.by_fqn[qname] = symbol_id
|
|
28
|
+
self.qname_of[symbol_id] = qname
|
|
29
|
+
self.by_name[name].append(symbol_id)
|
|
30
|
+
self.kinds[symbol_id] = kind
|
|
31
|
+
|
|
32
|
+
def add_module(self, module_path: str, symbol_id: int) -> None:
|
|
33
|
+
self.project_modules.add(module_path)
|
|
34
|
+
self.module_symbol_ids[module_path] = symbol_id
|
|
35
|
+
self.add_symbol(symbol_id, module_path, module_path.rsplit(".", 1)[-1], SymbolKind.MODULE)
|
|
36
|
+
|
|
37
|
+
def is_project_path(self, dotted: str) -> bool:
|
|
38
|
+
"""True if a dotted path starts with any project module (prefix match)."""
|
|
39
|
+
if dotted in self.project_modules:
|
|
40
|
+
return True
|
|
41
|
+
parts = dotted.split(".")
|
|
42
|
+
return any(".".join(parts[:i]) in self.project_modules for i in range(1, len(parts)))
|
|
43
|
+
|
|
44
|
+
def unique_by_name(self, name: str, kinds: tuple[SymbolKind, ...] | None = None) -> int | None:
|
|
45
|
+
candidates = self.by_name.get(name, [])
|
|
46
|
+
if kinds is not None:
|
|
47
|
+
candidates = [c for c in candidates if self.kinds.get(c) in kinds]
|
|
48
|
+
return candidates[0] if len(candidates) == 1 else None
|
entrygraph/results.py
ADDED
|
@@ -0,0 +1,138 @@
|
|
|
1
|
+
"""Public result types.
|
|
2
|
+
|
|
3
|
+
All query results are frozen, slotted dataclasses detached from any ORM
|
|
4
|
+
session — safe to hold forever and free to serialize with dataclasses.asdict.
|
|
5
|
+
"""
|
|
6
|
+
|
|
7
|
+
from __future__ import annotations
|
|
8
|
+
|
|
9
|
+
from dataclasses import dataclass, field
|
|
10
|
+
|
|
11
|
+
|
|
12
|
+
@dataclass(frozen=True, slots=True)
|
|
13
|
+
class Symbol:
|
|
14
|
+
id: int
|
|
15
|
+
kind: str
|
|
16
|
+
name: str
|
|
17
|
+
qname: str
|
|
18
|
+
file: str | None # repo-relative path; None for external placeholders
|
|
19
|
+
start_line: int
|
|
20
|
+
end_line: int
|
|
21
|
+
signature: str | None = None
|
|
22
|
+
docstring: str | None = None
|
|
23
|
+
is_exported: bool = True
|
|
24
|
+
|
|
25
|
+
@property
|
|
26
|
+
def is_external(self) -> bool:
|
|
27
|
+
return self.kind == "external"
|
|
28
|
+
|
|
29
|
+
|
|
30
|
+
@dataclass(frozen=True, slots=True)
|
|
31
|
+
class Edge:
|
|
32
|
+
id: int
|
|
33
|
+
kind: str
|
|
34
|
+
src_qname: str
|
|
35
|
+
dst_qname: str
|
|
36
|
+
resolved: bool
|
|
37
|
+
line: int
|
|
38
|
+
confidence: int
|
|
39
|
+
file: str | None = None
|
|
40
|
+
sink_id: str | None = None
|
|
41
|
+
arg_preview: str | None = None
|
|
42
|
+
|
|
43
|
+
|
|
44
|
+
@dataclass(frozen=True, slots=True)
|
|
45
|
+
class Entrypoint:
|
|
46
|
+
id: int
|
|
47
|
+
kind: str
|
|
48
|
+
framework: str | None
|
|
49
|
+
symbol: Symbol
|
|
50
|
+
route: str | None = None
|
|
51
|
+
http_method: str | None = None
|
|
52
|
+
extra: dict = field(default_factory=dict)
|
|
53
|
+
|
|
54
|
+
|
|
55
|
+
@dataclass(frozen=True, slots=True)
|
|
56
|
+
class FileInfo:
|
|
57
|
+
id: int
|
|
58
|
+
path: str
|
|
59
|
+
language: str | None
|
|
60
|
+
size_bytes: int
|
|
61
|
+
symbol_count: int = 0
|
|
62
|
+
skip_reason: str | None = None
|
|
63
|
+
|
|
64
|
+
|
|
65
|
+
@dataclass(frozen=True, slots=True)
|
|
66
|
+
class PathEdge:
|
|
67
|
+
kind: str
|
|
68
|
+
line: int
|
|
69
|
+
confidence: int
|
|
70
|
+
sink_id: str | None = None
|
|
71
|
+
via: str | None = None # "cha" | "dynamic" | "reexport" | None
|
|
72
|
+
arg_preview: str | None = None
|
|
73
|
+
constant_args: bool = False # terminal hop: sink called with literal args only
|
|
74
|
+
sanitized_by: tuple[str, ...] = () # sanitizer ids matched on/around this hop
|
|
75
|
+
|
|
76
|
+
|
|
77
|
+
@dataclass(frozen=True, slots=True)
|
|
78
|
+
class CallPath:
|
|
79
|
+
symbols: tuple[Symbol, ...] # source ... sink, in order
|
|
80
|
+
edges: tuple[PathEdge, ...] # one per hop; len == len(symbols) - 1
|
|
81
|
+
risk_score: float | None = None # query-time heuristic, higher = riskier
|
|
82
|
+
may_continue: bool = False # a node on this path has out-edges the filter excluded
|
|
83
|
+
|
|
84
|
+
@property
|
|
85
|
+
def min_confidence(self) -> int:
|
|
86
|
+
return min((e.confidence for e in self.edges), default=0)
|
|
87
|
+
|
|
88
|
+
def render(self) -> str:
|
|
89
|
+
parts = [self.symbols[0].qname]
|
|
90
|
+
for edge, sym in zip(self.edges, self.symbols[1:]):
|
|
91
|
+
parts.append(f"-> {sym.qname} (line {edge.line})")
|
|
92
|
+
return " ".join(parts)
|
|
93
|
+
|
|
94
|
+
|
|
95
|
+
@dataclass(frozen=True, slots=True)
|
|
96
|
+
class DetectedLanguage:
|
|
97
|
+
name: str
|
|
98
|
+
file_count: int
|
|
99
|
+
byte_count: int
|
|
100
|
+
percent: float # by bytes, of recognized files
|
|
101
|
+
|
|
102
|
+
|
|
103
|
+
@dataclass(frozen=True, slots=True)
|
|
104
|
+
class DetectedFramework:
|
|
105
|
+
name: str
|
|
106
|
+
language: str
|
|
107
|
+
confidence: float
|
|
108
|
+
evidence: tuple[str, ...] = ()
|
|
109
|
+
|
|
110
|
+
|
|
111
|
+
@dataclass(frozen=True, slots=True)
|
|
112
|
+
class DetectionReport:
|
|
113
|
+
languages: tuple[DetectedLanguage, ...]
|
|
114
|
+
frameworks: tuple[DetectedFramework, ...]
|
|
115
|
+
|
|
116
|
+
|
|
117
|
+
@dataclass(frozen=True, slots=True)
|
|
118
|
+
class IndexStats:
|
|
119
|
+
files_scanned: int
|
|
120
|
+
files_indexed: int
|
|
121
|
+
files_skipped: int
|
|
122
|
+
files_deleted: int
|
|
123
|
+
symbols: int
|
|
124
|
+
edges: int
|
|
125
|
+
entrypoints: int
|
|
126
|
+
duration_seconds: float
|
|
127
|
+
|
|
128
|
+
|
|
129
|
+
@dataclass(frozen=True, slots=True)
|
|
130
|
+
class GraphStats:
|
|
131
|
+
repo_root: str
|
|
132
|
+
index_generation: int
|
|
133
|
+
files: int
|
|
134
|
+
symbols: int
|
|
135
|
+
edges: int
|
|
136
|
+
resolved_edges: int
|
|
137
|
+
entrypoints: int
|
|
138
|
+
sink_edges: int
|
|
@@ -0,0 +1,204 @@
|
|
|
1
|
+
Metadata-Version: 2.4
|
|
2
|
+
Name: entrygraph
|
|
3
|
+
Version: 0.1.0
|
|
4
|
+
Summary: Language-agnostic code graph: query symbols, entrypoints, and source-to-sink call paths from a SQLite index
|
|
5
|
+
Project-URL: Repository, https://github.com/brettbergin/entrygraph
|
|
6
|
+
Author-email: Brett Bergin <brettberginbc@yahoo.com>
|
|
7
|
+
License: MIT License
|
|
8
|
+
|
|
9
|
+
Copyright (c) 2026 Brett Bergin
|
|
10
|
+
|
|
11
|
+
Permission is hereby granted, free of charge, to any person obtaining a copy
|
|
12
|
+
of this software and associated documentation files (the "Software"), to deal
|
|
13
|
+
in the Software without restriction, including without limitation the rights
|
|
14
|
+
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
|
|
15
|
+
copies of the Software, and to permit persons to whom the Software is
|
|
16
|
+
furnished to do so, subject to the following conditions:
|
|
17
|
+
|
|
18
|
+
The above copyright notice and this permission notice shall be included in all
|
|
19
|
+
copies or substantial portions of the Software.
|
|
20
|
+
|
|
21
|
+
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
|
|
22
|
+
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
|
|
23
|
+
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
|
|
24
|
+
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
|
|
25
|
+
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
|
|
26
|
+
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
|
|
27
|
+
SOFTWARE.
|
|
28
|
+
License-File: LICENSE
|
|
29
|
+
Keywords: call-graph,code-analysis,entrypoints,static-analysis,tree-sitter
|
|
30
|
+
Classifier: Development Status :: 3 - Alpha
|
|
31
|
+
Classifier: Intended Audience :: Developers
|
|
32
|
+
Classifier: Programming Language :: Python :: 3
|
|
33
|
+
Classifier: Programming Language :: Python :: 3.11
|
|
34
|
+
Classifier: Programming Language :: Python :: 3.12
|
|
35
|
+
Classifier: Programming Language :: Python :: 3.13
|
|
36
|
+
Classifier: Topic :: Software Development :: Quality Assurance
|
|
37
|
+
Requires-Python: >=3.11
|
|
38
|
+
Requires-Dist: pathspec<1.0,>=0.12
|
|
39
|
+
Requires-Dist: rich>=13.0
|
|
40
|
+
Requires-Dist: sqlalchemy<3.0,>=2.0.30
|
|
41
|
+
Requires-Dist: tree-sitter-language-pack>=1.10
|
|
42
|
+
Requires-Dist: tree-sitter<0.26,>=0.25
|
|
43
|
+
Provides-Extra: dev
|
|
44
|
+
Requires-Dist: pytest-cov; extra == 'dev'
|
|
45
|
+
Requires-Dist: pytest>=8.0; extra == 'dev'
|
|
46
|
+
Description-Content-Type: text/markdown
|
|
47
|
+
|
|
48
|
+
# entrygraph
|
|
49
|
+
|
|
50
|
+
Query your codebase like a graph. `entrygraph` indexes a repository into a
|
|
51
|
+
SQLite database (through the SQLAlchemy ORM) and answers questions about
|
|
52
|
+
**symbols**, **classes/methods**, **entrypoints** (HTTP routes, CLI commands,
|
|
53
|
+
main functions, tasks, lambda handlers), and **source → sink call-graph
|
|
54
|
+
reachability** ("can any HTTP route reach `subprocess.run`?").
|
|
55
|
+
|
|
56
|
+
Language-agnostic via [tree-sitter](https://tree-sitter.github.io/); first-class
|
|
57
|
+
support for **Python, JavaScript/TypeScript, Go, Java, Ruby, C#, PHP, and
|
|
58
|
+
Rust**, with language *and* framework detection.
|
|
59
|
+
|
|
60
|
+
Reachability is a heuristic taint tier, not just call-edge closure: paths are
|
|
61
|
+
**risk-ranked**, **sanitizers** prune or discount them, **class-hierarchy
|
|
62
|
+
analysis** recovers virtual dispatch, and confidence flags trade recall for
|
|
63
|
+
precision. Entrypoints include decorator/attribute routes, call-based route
|
|
64
|
+
registration, middleware, and config-file handlers (serverless, SAM, Procfile,
|
|
65
|
+
Dockerfile).
|
|
66
|
+
|
|
67
|
+
## Install
|
|
68
|
+
|
|
69
|
+
```bash
|
|
70
|
+
pip install entrygraph # or: uv pip install entrygraph
|
|
71
|
+
```
|
|
72
|
+
|
|
73
|
+
Requires Python ≥ 3.11. Depends on `sqlalchemy`, `tree-sitter`,
|
|
74
|
+
`tree-sitter-language-pack`, and `pathspec`.
|
|
75
|
+
|
|
76
|
+
## Python API
|
|
77
|
+
|
|
78
|
+
```python
|
|
79
|
+
from entrygraph import CodeGraph
|
|
80
|
+
|
|
81
|
+
# Index a repo (creates <repo>/.entrygraph.db by default)
|
|
82
|
+
graph = CodeGraph.index("/path/to/repo")
|
|
83
|
+
|
|
84
|
+
# ...or open an existing index
|
|
85
|
+
graph = CodeGraph.open("graph.db")
|
|
86
|
+
|
|
87
|
+
# Symbols — glob on name or qualified name, filter by kind or file
|
|
88
|
+
graph.symbols(kind="class", name="User*")
|
|
89
|
+
graph.symbol("app.services.Runner.execute") # exact; raises if missing
|
|
90
|
+
|
|
91
|
+
# Detection
|
|
92
|
+
report = graph.detect()
|
|
93
|
+
report.languages # -> [DetectedLanguage(name="python", percent=96.7, ...), ...]
|
|
94
|
+
report.frameworks # -> [DetectedFramework(name="flask", confidence=0.94, ...), ...]
|
|
95
|
+
|
|
96
|
+
# Entrypoints
|
|
97
|
+
graph.entrypoints(framework="flask")
|
|
98
|
+
graph.entrypoints(kind="http_route", route="/api/*")
|
|
99
|
+
|
|
100
|
+
# Call graph
|
|
101
|
+
graph.callers("app.services.run_report") # who calls it
|
|
102
|
+
graph.callees("app.services.run_report", depth=3) # what it (transitively) calls
|
|
103
|
+
graph.references("app.models.CONST") # inbound edges of any kind
|
|
104
|
+
|
|
105
|
+
# Source -> sink reachability (paths are risk-ranked, highest first)
|
|
106
|
+
paths = graph.paths(source="app.routes.*", sink_category="command_exec")
|
|
107
|
+
for p in paths:
|
|
108
|
+
print(p.risk_score, p.render(), "(+may continue)" if p.may_continue else "")
|
|
109
|
+
# 0.72 app.routes.create_report -> app.services.run_report (line 20)
|
|
110
|
+
# -> ...ReportRunner.render_and_execute (line 17) -> py:subprocess.run (line 22)
|
|
111
|
+
|
|
112
|
+
graph.reachable(source="app.routes.upload", sink="py:subprocess.run") # -> bool
|
|
113
|
+
|
|
114
|
+
# Precision/recall dial. By default only EXACT/IMPORT and unique-name FUZZY
|
|
115
|
+
# edges are traversed. Opt into wider (noisier) traversal:
|
|
116
|
+
graph.paths(source="app.routes.*", sink_category="sql",
|
|
117
|
+
include_unresolved=True) # follow py:*.execute wildcard-sink guesses
|
|
118
|
+
graph.paths(source="app.routes.*", sink_category="command_exec",
|
|
119
|
+
include_fuzzy=True) # follow speculative class-hierarchy (CHA) edges
|
|
120
|
+
graph.paths(source="app.routes.*", sink_category="command_exec",
|
|
121
|
+
prune_sanitized=True) # drop paths neutralized by a shlex.quote etc.
|
|
122
|
+
|
|
123
|
+
# Incremental re-index (only changed/added/deleted files are reparsed)
|
|
124
|
+
graph.refresh()
|
|
125
|
+
|
|
126
|
+
# Escape hatches
|
|
127
|
+
graph.session() # raw SQLAlchemy Session
|
|
128
|
+
graph.sql("SELECT ...") # textual query -> list[dict]
|
|
129
|
+
```
|
|
130
|
+
|
|
131
|
+
Every result is a frozen, immutable dataclass detached from the DB session, so
|
|
132
|
+
results are safe to hold and trivial to serialize.
|
|
133
|
+
|
|
134
|
+
## CLI
|
|
135
|
+
|
|
136
|
+
Human-readable output is rendered with [Rich](https://github.com/Textualize/rich) —
|
|
137
|
+
colored tables, language/confidence bars, a progress spinner while indexing, and
|
|
138
|
+
risk-ranked reachability rendered as call trees (sink nodes highlighted, per-hop
|
|
139
|
+
confidence, sanitizer/const-arg badges). Piped or `--json` output stays plain.
|
|
140
|
+
|
|
141
|
+
```bash
|
|
142
|
+
entrygraph index PATH [--full] [--paranoid] # incremental by default
|
|
143
|
+
entrygraph detect
|
|
144
|
+
entrygraph symbols --kind class --name 'User*'
|
|
145
|
+
entrygraph entrypoints --framework flask
|
|
146
|
+
entrygraph callers app.services.run_report --depth 2
|
|
147
|
+
entrygraph callees app.services.run_report
|
|
148
|
+
entrygraph paths --source 'app.routes.*' --sink-category command_exec
|
|
149
|
+
entrygraph stats
|
|
150
|
+
```
|
|
151
|
+
|
|
152
|
+
Add `--json` to any query command for machine-readable output. `entrygraph paths`
|
|
153
|
+
exits 0 when a path is found and 1 when none is — handy in CI:
|
|
154
|
+
|
|
155
|
+
```bash
|
|
156
|
+
entrygraph paths --source '*' --sink-category command_exec && echo "reachable!"
|
|
157
|
+
```
|
|
158
|
+
|
|
159
|
+
## How it works
|
|
160
|
+
|
|
161
|
+
1. **Walk** — `os.scandir` with hard-pruned junk dirs (`node_modules`, `.venv`,
|
|
162
|
+
…), `.gitignore` rules, and size/binary/minified gates. Every skip is recorded
|
|
163
|
+
with a reason.
|
|
164
|
+
2. **Extract** — tree-sitter `.scm` queries harvest definitions/imports/calls;
|
|
165
|
+
small per-language "shaper" modules build qualified names, import maps, and
|
|
166
|
+
receiver info. Parsing runs across a process pool for large repos.
|
|
167
|
+
3. **Resolve** — a two-pass resolver binds references to symbols with a
|
|
168
|
+
confidence level (`exact` / `import` / `fuzzy` / `unresolved`). External
|
|
169
|
+
callees (`subprocess.run`, `child_process.exec`, …) become placeholder nodes
|
|
170
|
+
so sinks are real graph terminals.
|
|
171
|
+
4. **Detect** — frameworks are scored from manifest dependencies plus code
|
|
172
|
+
signals (noisy-or); entrypoint rules map framework patterns to route/command
|
|
173
|
+
records.
|
|
174
|
+
5. **Store** — everything persists to SQLite via the SQLAlchemy 2.0 ORM with
|
|
175
|
+
bulk inserts and app-assigned keys. Re-indexing is incremental and
|
|
176
|
+
content-hash driven.
|
|
177
|
+
6. **Query** — reachability runs over an in-memory adjacency cache (BFS/DFS with
|
|
178
|
+
cycle handling); a recursive-CTE SQL engine is available as a fallback
|
|
179
|
+
(`engine="sql"`).
|
|
180
|
+
|
|
181
|
+
## Extending
|
|
182
|
+
|
|
183
|
+
- **Custom sinks/sources/sanitizers** — drop an `entrygraph.toml` in the repo
|
|
184
|
+
root with `[[sink]]` / `[[source]]` / `[[sanitizer]]` tables (same schema as
|
|
185
|
+
the built-in `data/sinks/*.toml`), or call
|
|
186
|
+
`entrygraph.detect.taint.register_sink(...)` / `register_sanitizer(...)`. A
|
|
187
|
+
`[[sanitizer]]` with `effect = "neutralizes"` prunes a path for its category;
|
|
188
|
+
`effect = "reduces"` only discounts the risk score. Third-party wrapper
|
|
189
|
+
libraries that reach a sink internally are covered by `data/sinks/lib_*.toml`
|
|
190
|
+
"library summaries" (same schema, with a `library = "..."` tag).
|
|
191
|
+
- **New frameworks / entrypoints** — register a `FrameworkSpec` and an
|
|
192
|
+
`EntrypointRule`; adding a framework is usually a few lines.
|
|
193
|
+
- **New languages** — add a `<lang>/{definitions,imports,calls}.scm` query set
|
|
194
|
+
and a shaper implementing the `LanguageExtractor` protocol.
|
|
195
|
+
|
|
196
|
+
## Releasing
|
|
197
|
+
|
|
198
|
+
Merging to `main` auto-bumps the patch version (via a git tag) and publishes to
|
|
199
|
+
PyPI through Trusted Publishing — see [RELEASING.md](RELEASING.md). The package
|
|
200
|
+
version is derived from git tags by `hatch-vcs`, so it's never hand-edited.
|
|
201
|
+
|
|
202
|
+
## License
|
|
203
|
+
|
|
204
|
+
MIT
|
|
@@ -0,0 +1,102 @@
|
|
|
1
|
+
entrygraph/__init__.py,sha256=44r5IEkXSoE6ReFDAbQ5C_--yX327RBfIYt_ILvsOWA,2253
|
|
2
|
+
entrygraph/__main__.py,sha256=ZqvsbMeW_cgA0PI8C05d4Z_q38cJiBZokTsApVRZGV8,210
|
|
3
|
+
entrygraph/_version.py,sha256=n_5vdJsPNu7wZ57LGuRL585uvll-hiuvZUBWzdG0RQU,520
|
|
4
|
+
entrygraph/api.py,sha256=w9U7bMJCeoHnM8mmlLo8JLneEfoSVDbNI_FcENFWEXU,22625
|
|
5
|
+
entrygraph/errors.py,sha256=C9FQoCWMdPUmUWzTw3ffWhQX8gn16tjK2n00VHFLoO0,714
|
|
6
|
+
entrygraph/kinds.py,sha256=GN_Z5Sj-uwRvPVwH27FRxTGkTwxLRo5SWGn65_aGO-o,1408
|
|
7
|
+
entrygraph/py.typed,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
|
|
8
|
+
entrygraph/results.py,sha256=3xe-q2F_q_o0W5w5g-uWF5Z3ewK0S3CF1NmtNERt6Sw,3358
|
|
9
|
+
entrygraph/cli/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
|
|
10
|
+
entrygraph/cli/main.py,sha256=eir985PXzTcfaQjiWF3rVro3IPj99BXZj82KxDMQR_k,13712
|
|
11
|
+
entrygraph/cli/render.py,sha256=AJEXJc-umHWxwYHogWN0E7zYQoRk8HJ5DlZG-42eVaQ,4060
|
|
12
|
+
entrygraph/data/sinks/csharp.toml,sha256=6eT00T4v6fp16kbPcKzwx9zDEPdkpzmzYG-8VGg2Lrs,3523
|
|
13
|
+
entrygraph/data/sinks/go.toml,sha256=tq9q9Es5w6kTn7yt5AH9OZMLkTH2bRz3nntP8Fdh21w,2418
|
|
14
|
+
entrygraph/data/sinks/java.toml,sha256=C43YXjlTVK5e_R7Nh5X1lSrC-5RHTXGrDJ0hXGYQuQo,2934
|
|
15
|
+
entrygraph/data/sinks/javascript.toml,sha256=WTIK52OPiUFw4qP025ir116fP5OSviIgCfmtbYCXFx8,3144
|
|
16
|
+
entrygraph/data/sinks/lib_javascript.toml,sha256=pRK5NvTbY7Tmze9YEB4XrLx-H7kUKScBnRoKI79qMys,855
|
|
17
|
+
entrygraph/data/sinks/lib_python.toml,sha256=r1XrKSQSc4mMF41qS1VoIfwJusMTrZIc3A0QyyKQ008,1319
|
|
18
|
+
entrygraph/data/sinks/php.toml,sha256=zCH343Vrnagv0yms9E61qgU6ILfgtOYO2CglmXevO00,3469
|
|
19
|
+
entrygraph/data/sinks/python.toml,sha256=rqePUOptZfZoD64UViLHyZBEhShtesDEiqMgCpCz9nw,4537
|
|
20
|
+
entrygraph/data/sinks/ruby.toml,sha256=krGofste9lwQamGEemGL162dUa3YHR-z_B1Etmn4ujQ,2883
|
|
21
|
+
entrygraph/data/sinks/rust.toml,sha256=Oh1aiCFB-odrxU6VNT4q6IoqF9DUdPdGzH3LgqnoV7o,2273
|
|
22
|
+
entrygraph/db/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
|
|
23
|
+
entrygraph/db/engine.py,sha256=xmGl1YnTZTgjir-rTHYnRmWAPtxa6X1QoBvtDb42FqM,1003
|
|
24
|
+
entrygraph/db/meta.py,sha256=sEtLd_x6p69Lg1xAtDb-TTPg5knWc5PKt5HJFnOYO6E,2338
|
|
25
|
+
entrygraph/db/models.py,sha256=DYR54qyFGn0whw0-BPREcb-w5kvAo7TZ2e7sSfb6DUo,7388
|
|
26
|
+
entrygraph/db/queries.py,sha256=mX0ahxPLeJOHN92PuNVRzcRDPoJg3Azd36xf_VjIlYM,4815
|
|
27
|
+
entrygraph/detect/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
|
|
28
|
+
entrygraph/detect/frameworks.py,sha256=kg0M642QqeDJWtLG1-tOgFy78f61w6kFuKKvyrQKmeU,13961
|
|
29
|
+
entrygraph/detect/manifests.py,sha256=OjNvcT3NTS6085TE9rGpiQHKmrO113UvEFppgd58NyU,8031
|
|
30
|
+
entrygraph/detect/taint.py,sha256=wBIgqfydgIks9ostRunNcdinJvXT46x7BHTYYYfd3p8,7999
|
|
31
|
+
entrygraph/detect/entrypoints/__init__.py,sha256=RMdraEnOsWVQN1p-8YvOLiXy2KpERuPUwQ-If7DqUGQ,721
|
|
32
|
+
entrygraph/detect/entrypoints/base.py,sha256=Ij0A2i_1_3OJnJi7AUDtPKei2sZKsbrQ3ak68Om-SMc,4035
|
|
33
|
+
entrygraph/detect/entrypoints/configs.py,sha256=wf-wNCyXVRPT_6tBy1CrEiG0obPjKbew5JHeTxogCfE,5093
|
|
34
|
+
entrygraph/detect/entrypoints/csharp.py,sha256=1utRdPv2NGtDdmYRaWP_oeUou1x7vQFuxFtjpKv4R0U,5108
|
|
35
|
+
entrygraph/detect/entrypoints/golang.py,sha256=jC_31R__VrBlDnOThwHqO1rXbExYyxB_tX0Hq1WGZPE,6083
|
|
36
|
+
entrygraph/detect/entrypoints/java.py,sha256=__in3xGMwCEtxV3aFwuP7u52MDStaVqtDsqE-y_bBGc,6979
|
|
37
|
+
entrygraph/detect/entrypoints/javascript.py,sha256=oDVaJ6Ff51iZcWx1ySz7VPlqTUq0Nenb4RGlSOUN7o8,8678
|
|
38
|
+
entrygraph/detect/entrypoints/php.py,sha256=Ja-XAB6p7NE2ROBAIzmyojeDyQYlFIq_ktYZ67pKR8U,5227
|
|
39
|
+
entrygraph/detect/entrypoints/python.py,sha256=6qpVLP_HHv8_pnR-czYvt4aXFUoul5hA-BgDuJruG2A,14046
|
|
40
|
+
entrygraph/detect/entrypoints/ruby.py,sha256=ST_QN1RG7JO9cWmiu9tRs0Izr8EmE6hU-XKrv8SA3Rk,6040
|
|
41
|
+
entrygraph/detect/entrypoints/rust.py,sha256=RO0euL_JH8O8wX8HW-0NndWt5J16qHnjTVLTh1i9RDU,6003
|
|
42
|
+
entrygraph/extract/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
|
|
43
|
+
entrygraph/extract/base.py,sha256=BvUmz-W7XGSJekdGD5gFzgdZKs-quaHsXeGS103Wcyc,1455
|
|
44
|
+
entrygraph/extract/csharp.py,sha256=0AUP1IXbqC5gzjWpaw72V5UV962ZtIv7RwsNzjzl48U,19846
|
|
45
|
+
entrygraph/extract/golang.py,sha256=-qS9rOuUjF86-tsDLcGDW9DNoxiznzeVepykCYN1Wl4,14172
|
|
46
|
+
entrygraph/extract/ir.py,sha256=izyL150jhFPBNxbcjdCb68CTB_24N52LC3tGhwCRE-M,3832
|
|
47
|
+
entrygraph/extract/java.py,sha256=hOYRKuDRSBmizFgVSCLv56GiOLYhYoV_PnOF19hrsdQ,14466
|
|
48
|
+
entrygraph/extract/javascript.py,sha256=H-l6wyvp7nd5OozGC1ABoGwzNsc3qWprg2VR7QW5AZc,18360
|
|
49
|
+
entrygraph/extract/php.py,sha256=71GK7hjXrmHtey7jctGGbRBso9Zx1oAdLQMYVQOrrUU,18402
|
|
50
|
+
entrygraph/extract/python.py,sha256=4eS3YCEfx1VDkXW2hIzluH7Rg7Yc3p3CjRNUK55Fuf4,16471
|
|
51
|
+
entrygraph/extract/registry.py,sha256=_gIqguYEjlg90YnAyQzm2HA_SI-McPCymchiEpF63Ew,1475
|
|
52
|
+
entrygraph/extract/ruby.py,sha256=7td-dPeUpuZ9OiHYzf30BSfrDtqSPwVSIYa840xK0Qc,13581
|
|
53
|
+
entrygraph/extract/rust.py,sha256=Hva5RIDQHxARwxeGCvMxygQKvgfw86ujTeD6bDRarNY,20189
|
|
54
|
+
entrygraph/fs/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
|
|
55
|
+
entrygraph/fs/hashing.py,sha256=FGkLUBKwyKGoAJpF_jDSOv31eldx9qLnYktsL2rd8yg,2269
|
|
56
|
+
entrygraph/fs/lang.py,sha256=qIO4kvOYxdLiHa2xs7rZ5ma5Q2V9risde6mzEKQsqMk,3614
|
|
57
|
+
entrygraph/fs/walker.py,sha256=caYkSdX1W4UHqpZQgNLp-MS2ZAQekNmAEmrXKqwFIoA,5943
|
|
58
|
+
entrygraph/graph/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
|
|
59
|
+
entrygraph/graph/adjacency.py,sha256=897wzWqZso83e6Rodj6ZAZNGLIXdq--w8MaliU3Nx3A,5401
|
|
60
|
+
entrygraph/graph/cte.py,sha256=tvJ3FrbNM5iD7JNKzfzNy96OFVWvk0Jjezqiagj9AVY,5298
|
|
61
|
+
entrygraph/graph/scoring.py,sha256=abDBgSLsDwcp0sV_LaSwFP7NMXiqzPCAHSFvLTEzbxQ,3328
|
|
62
|
+
entrygraph/parsing/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
|
|
63
|
+
entrygraph/parsing/parsers.py,sha256=Iqqchki4XKldtpp2WyZs6p7lxc2mlxDD2JO7cvfa6h4,1218
|
|
64
|
+
entrygraph/parsing/queries.py,sha256=vim4IY-WTmiFZgubb4dcvenqDauKE0OrQCHwFn_ATAk,1455
|
|
65
|
+
entrygraph/pipeline/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
|
|
66
|
+
entrygraph/pipeline/scanner.py,sha256=Zlm4KreFXDBXtGsiK59INlyPd1JK_FOlhFodVA_iGEU,20312
|
|
67
|
+
entrygraph/pipeline/worker.py,sha256=CC9Nmmhyp-cCf9FsI6I9y0jYAPlncgOoot-sZ6ikNM8,1694
|
|
68
|
+
entrygraph/pipeline/writer.py,sha256=nzuXGDZ3IBDPXHDdYQdxn9Q18PUgYCGrlZ4CbhU9bvA,1385
|
|
69
|
+
entrygraph/queries/csharp/calls.scm,sha256=DfBWCoDw1QtA0s280titsOpxWTEzhM5y1v8URYLcVlo,211
|
|
70
|
+
entrygraph/queries/csharp/definitions.scm,sha256=JkXuWtJMAdjjL2TZ-lMh1Y_Aq86E8k-OtMrbujbheXg,759
|
|
71
|
+
entrygraph/queries/csharp/imports.scm,sha256=RF7I3saHlcJPym2PBSyUmRPm7fA_LtHlkSaquAyAslU,220
|
|
72
|
+
entrygraph/queries/go/calls.scm,sha256=ZDTfKTiR-6W0C1ioViHm-l3vV7Tn6Ck62qZDdEgWWqc,94
|
|
73
|
+
entrygraph/queries/go/definitions.scm,sha256=Zot2zZgqeQAAvbgLqya1oBxSMTAiicZTmjQ3nFkHgIQ,679
|
|
74
|
+
entrygraph/queries/go/imports.scm,sha256=xdnkdEC6AEfA7elWPwsOyMAF3SvGYoUuy8_-ncgruGk,29
|
|
75
|
+
entrygraph/queries/java/calls.scm,sha256=2Fy4oCvxy8kC8eFCBGv0HiFh86u61OtT_tInZf7BF34,60
|
|
76
|
+
entrygraph/queries/java/definitions.scm,sha256=eT2OGjy-xRIq8o2xo4tlJ_66FDAe2VS6nNJoPAHnUbs,387
|
|
77
|
+
entrygraph/queries/java/imports.scm,sha256=lRsMKoCEdifRBRoZROXWdy_QA94k9aJzLEm4xXbVYiQ,60
|
|
78
|
+
entrygraph/queries/javascript/calls.scm,sha256=BEsbJzu-nX_hmk_NFKJlUyWUHnP5muWNx8BC5cK0HfM,249
|
|
79
|
+
entrygraph/queries/javascript/definitions.scm,sha256=h1n4LSwQ_O_PDq-Dlye2wDj5sP7HNwn-Z09G_vOeCCk,231
|
|
80
|
+
entrygraph/queries/javascript/imports.scm,sha256=VWIvO-cetnyGMa4kvs_axucylz5uCY-Ds9R88M94BeI,280
|
|
81
|
+
entrygraph/queries/php/calls.scm,sha256=cGQ1pNUJgFK655Vr2qULvmHwFiCWxX2hcRLNqfMpQAU,273
|
|
82
|
+
entrygraph/queries/php/definitions.scm,sha256=JyGbdUb4fw9rmNPLMtzDzmh6PEV4axE5lHj9OSMqh24,582
|
|
83
|
+
entrygraph/queries/php/imports.scm,sha256=Xw3s7C9zg2g2wqfXQBuQIPyK-jHssltlWNkdmKb1k6U,36
|
|
84
|
+
entrygraph/queries/python/calls.scm,sha256=Wsk8tKMF0VUKrpP-esO_gjVxgENYGMBG_DrK7cM23j4,36
|
|
85
|
+
entrygraph/queries/python/definitions.scm,sha256=nPUab2zd4NNQlIPCzd7JdW_-IxmJL0EM3lKvebTKEg4,326
|
|
86
|
+
entrygraph/queries/python/imports.scm,sha256=_yr7Nyl7dqlKvIy0ytv6lGO9j4FPz_eIXVZyELSfgPg,64
|
|
87
|
+
entrygraph/queries/ruby/calls.scm,sha256=E-nTwNWzVfNdE-TkHtD_PfurKBJOdDZMYIFbblpyBvY,192
|
|
88
|
+
entrygraph/queries/ruby/definitions.scm,sha256=70N4UQl4qQqzmMm1lRpJ8MhWjF8W6zHpR6_QyPaUkGg,471
|
|
89
|
+
entrygraph/queries/ruby/imports.scm,sha256=8ku0XF6fUflZmKkhBd1cpMx26zBgd22gIBeISSm3klU,278
|
|
90
|
+
entrygraph/queries/rust/calls.scm,sha256=l3pAxfSf2V4ljX2nLq4XFklM8qdNGkFtPjw03jfJBBw,205
|
|
91
|
+
entrygraph/queries/rust/definitions.scm,sha256=KWZ5D_XucNGqTAGaxuc0F822U6g45PqKY2FIty1PmSw,603
|
|
92
|
+
entrygraph/queries/rust/imports.scm,sha256=j-9jeyrDjWEsarSAY8vKjXbbsWRUHHbE9Qlg9D5IaMo,144
|
|
93
|
+
entrygraph/resolve/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
|
|
94
|
+
entrygraph/resolve/externals.py,sha256=F0kox4-9IK9wvJdoAsGVcthXCjqAWGx8ei3YqF2Wr-Y,1907
|
|
95
|
+
entrygraph/resolve/hierarchy.py,sha256=zXD189hbCq1UM-nDzCW5yVGkAt0nbMpdWq2nz409fTg,6126
|
|
96
|
+
entrygraph/resolve/resolver.py,sha256=dQVY12LGoKzYWH4NFT_kjxfblybVaOiNbOXg7UFvFVw,12180
|
|
97
|
+
entrygraph/resolve/symbol_table.py,sha256=d69fqlOYOAMXqvYk6Xnbw7-RcqoOe9ajpxOil1fmRTs,2280
|
|
98
|
+
entrygraph-0.1.0.dist-info/METADATA,sha256=AQL8QtA18e_wvlr1UBevQSm808fEFHXy6yKfMDFTBqw,9228
|
|
99
|
+
entrygraph-0.1.0.dist-info/WHEEL,sha256=mffPy8wBnZQn2VnJUU5jE99KsxaSfiyMHV9Yt0aLVxs,87
|
|
100
|
+
entrygraph-0.1.0.dist-info/entry_points.txt,sha256=y8Sitwv8ki0DqKj89yfTcavZZL6Chv7SaaRylLs7MRE,56
|
|
101
|
+
entrygraph-0.1.0.dist-info/licenses/LICENSE,sha256=yowSBdgg1AkXtU1Ui5fd4gC8JLxsMWY1jovGzCfrDp4,1069
|
|
102
|
+
entrygraph-0.1.0.dist-info/RECORD,,
|
|
@@ -0,0 +1,21 @@
|
|
|
1
|
+
MIT License
|
|
2
|
+
|
|
3
|
+
Copyright (c) 2026 Brett Bergin
|
|
4
|
+
|
|
5
|
+
Permission is hereby granted, free of charge, to any person obtaining a copy
|
|
6
|
+
of this software and associated documentation files (the "Software"), to deal
|
|
7
|
+
in the Software without restriction, including without limitation the rights
|
|
8
|
+
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
|
|
9
|
+
copies of the Software, and to permit persons to whom the Software is
|
|
10
|
+
furnished to do so, subject to the following conditions:
|
|
11
|
+
|
|
12
|
+
The above copyright notice and this permission notice shall be included in all
|
|
13
|
+
copies or substantial portions of the Software.
|
|
14
|
+
|
|
15
|
+
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
|
|
16
|
+
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
|
|
17
|
+
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
|
|
18
|
+
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
|
|
19
|
+
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
|
|
20
|
+
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
|
|
21
|
+
SOFTWARE.
|