graphrag-codeproperty-graph 0.4.3__tar.gz → 0.4.4__tar.gz

graphrag_codeproperty_graph-0.4.4/.gitignore

@@ -0,0 +1,31 @@
+# Kiro
+.kiro/
+
+# Python
+__pycache__/
+*.py[cod]
+*$py.class
+*.egg-info/
+dist/
+build/
+*.egg
+.eggs/
+
+# Virtual environments
+.venv/
+venv/
+ENV/
+
+# IDE
+.idea/
+.vscode/
+*.swp
+
+# OS
+.DS_Store
+Thumbs.db
+
+# Testing
+.pytest_cache/
+.coverage
+htmlcov/

graphrag_codeproperty_graph-0.4.4/CHANGELOG.md

@@ -0,0 +1,16 @@
+# Changelog
+
+## [0.4.3] - 2026-08-03
+
+### Added
+- Initial public release
+- Joern/Semgrep CPG extraction and ingestion
+- Delta ingestion — skip-or-replace logic to minimize Neptune writes
+- Graph diff comparison between CPG states
+- S3-backed manifest management for repository state tracking
+- AI vulnerability enrichment and risk scoring
+- Tenant lifecycle management (create, purge, replace)
+- CPGNode and CPGEdge Pydantic models (Joern-specific types)
+
+### Dependencies
+- graphrag-document-graph>=3.0.8

graphrag_codeproperty_graph-0.4.4/CONTRIBUTING.md

@@ -0,0 +1,76 @@
+# Contributing
+
+Thank you for your interest in contributing! This project is maintained by [Kanjani AI Research](https://github.com/kanjani-ai-research).
+
+## Development Setup
+
+1. Clone the repository:
+   ```bash
+   git clone <repo-url>
+   cd <project-dir>
+   ```
+
+2. Create a virtual environment and install in editable mode with dev dependencies:
+   ```bash
+   python -m venv .venv
+   source .venv/bin/activate
+   pip install -e '.[dev]'
+   ```
+
+## Running Tests
+
+```bash
+pytest tests/
+```
+
+For coverage:
+```bash
+pytest tests/ --cov --cov-report=term-missing
+```
+
+## Code Style
+
+This project uses:
+- **[Black](https://github.com/psf/black)** for code formatting
+- **[Ruff](https://github.com/astral-sh/ruff)** for linting
+
+Before submitting, ensure your code passes:
+```bash
+black .
+ruff check .
+```
+
+## Submitting Pull Requests
+
+1. Fork the repository
+2. Create a feature branch from `main`:
+   ```bash
+   git checkout -b feature/your-feature
+   ```
+3. Make your changes, including tests
+4. Ensure all tests pass and code style checks are clean
+5. Commit with a clear, descriptive message
+6. Push and open a Pull Request against `main`
+
+### PR Guidelines
+
+- Keep PRs focused — one feature or fix per PR
+- Include tests for new functionality
+- Update documentation if behavior changes
+- Reference any related issues in the PR description
+
+## Reporting Issues
+
+Open an issue on GitHub with:
+- A clear description of the problem
+- Steps to reproduce
+- Expected vs actual behavior
+- Python version and OS
+
+## License
+
+By contributing, you agree that your contributions will be licensed under the [MIT License](LICENSE).
+
+## Organization
+
+This project is part of the [Kanjani AI Research](https://github.com/kanjani-ai-research) organization.

{graphrag_codeproperty_graph-0.4.3 → graphrag_codeproperty_graph-0.4.4}/PKG-INFO

@@ -1,8 +1,8 @@
 Metadata-Version: 2.4
 Name: graphrag-codeproperty-graph
-Version: 0.4.3
+Version: 0.4.4
 Summary: Code Property Graphs — Joern/Semgrep extraction, AI vulnerability enrichment, risk scoring
-Project-URL: Repository, https://github.com/RW-Lab/codeproperty-graph
+Project-URL: Repository, https://github.com/kanjani-ai-research/codeproperty-graph
 Author-email: Evan Erwee <evan@erwee.com>
 License-Expression: MIT
 License-File: LICENSE
@@ -13,30 +13,49 @@ Classifier: Intended Audience :: Developers
 Classifier: Topic :: Security
 Classifier: Topic :: Software Development :: Quality Assurance
 Requires-Python: >=3.11
-Requires-Dist: boto3>=1.26.0
-Requires-Dist: graphrag-document-graph>=3.0.8
+Requires-Dist: graphrag-document-graph>=3.0.9
 Provides-Extra: dev
+Requires-Dist: black; extra == 'dev'
 Requires-Dist: pytest-asyncio>=0.21.0; extra == 'dev'
 Requires-Dist: pytest-cov>=4.0; extra == 'dev'
 Requires-Dist: pytest>=7.0; extra == 'dev'
-Provides-Extra: graphrag
-Requires-Dist: graphrag-toolkit-lexical-graph>=3.18.0; extra == 'graphrag'
+Requires-Dist: ruff; extra == 'dev'
 Description-Content-Type: text/markdown
 
 # Code Property Graph
 
-Code Property Graphs — Joern/Semgrep extraction, AI vulnerability enrichment, risk scoring.
+[![PyPI version](https://img.shields.io/pypi/v/graphrag-codeproperty-graph.svg)](https://pypi.org/project/graphrag-codeproperty-graph/)
+[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
 
-> **This package depends on AWS GraphRAG Toolkit (graphrag-toolkit-lexical-graph) for graph storage, vector indexing, and retrieval.**
+**Code Property Graphs — Joern/Semgrep extraction, AI vulnerability enrichment, risk scoring.**
 
-## Quick Start
+> **This package depends on AWS GraphRAG Toolkit (graphrag-toolkit-lexical-graph) for graph storage, vector indexing, and retrieval.**
 
-### Install
+## Installation
 
 ```bash
-pip install codeproperty-graph
+pip install graphrag-codeproperty-graph
 ```
 
+## Dependencies
+
+- `graphrag-document-graph>=3.0.8` — Document graph infrastructure (typed nodes, Cypher builders, multi-tenancy)
+
+This package does **not** depend on `bona`.
+
+## Dependency Chain
+
+```
+graphrag-codeproperty-graph
+└── graphrag-document-graph>=3.0.8
+    └── graphrag-toolkit-lexical-graph>=3.18.0  (AWS foundation)
+        ├── Neptune graph storage
+        ├── OpenSearch Serverless vector indexing
+        └── Entity resolution & retrieval
+```
+
+## Quick Start
+
 ### Python API Example
 
 ```python
@@ -49,8 +68,8 @@ result = await ingestor.ingest(
     repo="my-service",
     job_id="build-456",
     tenant_id="tenant_abc123",
-    nodes_data=joern_nodes,       # Joern CPG export
-    edges_data=joern_edges,       # Joern CPG export
+    nodes_data=joern_nodes,
+    edges_data=joern_edges,
     nodes_path="s3://bucket/cpg-exports/my-service/build-456/nodes.json",
     edges_path="s3://bucket/cpg-exports/my-service/build-456/edges.json",
     graph_store=neptune_store,
@@ -113,7 +132,7 @@ src/codeproperty_graph/
 │         codeproperty-graph (this package)            │
 │  Joern/Semgrep CPG, delta ingestion, risk scoring   │
 ├─────────────────────────────────────────────────────┤
-│              document-graph (infra)                  │
+│              document-graph                          │
 │  Node, Edge, CypherBuilder, PipelineExecutor        │
 │  Multi-tenancy, batch operations                    │
 ├─────────────────────────────────────────────────────┤
@@ -144,22 +163,9 @@ from graphrag_toolkit.document_graph import Node, Edge
 from codeproperty_graph import CPGNode, CPGEdge
 ```
 
-### AI Vulnerability Enrichment
-
-After CPG ingestion, enrich with AI-powered vulnerability analysis:
-
-```python
-# Query Neptune for high-risk patterns
-# Score methods by complexity, dependency depth, and known CVE proximity
-# Annotate graph with risk scores for downstream consumption
-```
-
-## Requirements
+## Contributing
 
-- Python >= 3.11
-- `document-graph >= 0.1.0`
-- `boto3 >= 1.26.0`
-- Optional: `graphrag-toolkit-lexical-graph >= 3.18.0`
+See [CONTRIBUTING.md](CONTRIBUTING.md) for development setup, testing, and PR guidelines.
 
 ## License
 

{graphrag_codeproperty_graph-0.4.3 → graphrag_codeproperty_graph-0.4.4}/README.md

@@ -1,17 +1,37 @@
 # Code Property Graph
 
-Code Property Graphs — Joern/Semgrep extraction, AI vulnerability enrichment, risk scoring.
+[![PyPI version](https://img.shields.io/pypi/v/graphrag-codeproperty-graph.svg)](https://pypi.org/project/graphrag-codeproperty-graph/)
+[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
 
-> **This package depends on AWS GraphRAG Toolkit (graphrag-toolkit-lexical-graph) for graph storage, vector indexing, and retrieval.**
+**Code Property Graphs — Joern/Semgrep extraction, AI vulnerability enrichment, risk scoring.**
 
-## Quick Start
+> **This package depends on AWS GraphRAG Toolkit (graphrag-toolkit-lexical-graph) for graph storage, vector indexing, and retrieval.**
 
-### Install
+## Installation
 
 ```bash
-pip install codeproperty-graph
+pip install graphrag-codeproperty-graph
 ```
 
+## Dependencies
+
+- `graphrag-document-graph>=3.0.8` — Document graph infrastructure (typed nodes, Cypher builders, multi-tenancy)
+
+This package does **not** depend on `bona`.
+
+## Dependency Chain
+
+```
+graphrag-codeproperty-graph
+└── graphrag-document-graph>=3.0.8
+    └── graphrag-toolkit-lexical-graph>=3.18.0  (AWS foundation)
+        ├── Neptune graph storage
+        ├── OpenSearch Serverless vector indexing
+        └── Entity resolution & retrieval
+```
+
+## Quick Start
+
 ### Python API Example
 
 ```python
@@ -24,8 +44,8 @@ result = await ingestor.ingest(
     repo="my-service",
     job_id="build-456",
     tenant_id="tenant_abc123",
-    nodes_data=joern_nodes,       # Joern CPG export
-    edges_data=joern_edges,       # Joern CPG export
+    nodes_data=joern_nodes,
+    edges_data=joern_edges,
     nodes_path="s3://bucket/cpg-exports/my-service/build-456/nodes.json",
     edges_path="s3://bucket/cpg-exports/my-service/build-456/edges.json",
     graph_store=neptune_store,
@@ -88,7 +108,7 @@ src/codeproperty_graph/
 │         codeproperty-graph (this package)            │
 │  Joern/Semgrep CPG, delta ingestion, risk scoring   │
 ├─────────────────────────────────────────────────────┤
-│              document-graph (infra)                  │
+│              document-graph                          │
 │  Node, Edge, CypherBuilder, PipelineExecutor        │
 │  Multi-tenancy, batch operations                    │
 ├─────────────────────────────────────────────────────┤
@@ -119,22 +139,9 @@ from graphrag_toolkit.document_graph import Node, Edge
 from codeproperty_graph import CPGNode, CPGEdge
 ```
 
-### AI Vulnerability Enrichment
-
-After CPG ingestion, enrich with AI-powered vulnerability analysis:
-
-```python
-# Query Neptune for high-risk patterns
-# Score methods by complexity, dependency depth, and known CVE proximity
-# Annotate graph with risk scores for downstream consumption
-```
-
-## Requirements
+## Contributing
 
-- Python >= 3.11
-- `document-graph >= 0.1.0`
-- `boto3 >= 1.26.0`
-- Optional: `graphrag-toolkit-lexical-graph >= 3.18.0`
+See [CONTRIBUTING.md](CONTRIBUTING.md) for development setup, testing, and PR guidelines.
 
 ## License
 

{graphrag_codeproperty_graph-0.4.3 → graphrag_codeproperty_graph-0.4.4}/pyproject.toml

@@ -7,7 +7,7 @@ packages = ["src/codeproperty_graph"]
 
 [project]
 name = "graphrag-codeproperty-graph"
-version = "0.4.3"
+version = "0.4.4"
 description = "Code Property Graphs — Joern/Semgrep extraction, AI vulnerability enrichment, risk scoring"
 readme = "README.md"
 requires-python = ">=3.11"
@@ -22,22 +22,20 @@ classifiers = [
 ]
 
 dependencies = [
-  "graphrag-document-graph>=3.0.8",
-  "boto3>=1.26.0",
+    "graphrag-document-graph>=3.0.9",
 ]
 
 [project.optional-dependencies]
-graphrag = [
-  "graphrag-toolkit-lexical-graph>=3.18.0",
-]
 dev = [
-  "pytest>=7.0",
-  "pytest-cov>=4.0",
-  "pytest-asyncio>=0.21.0",
+    "pytest>=7.0",
+    "pytest-cov>=4.0",
+    "pytest-asyncio>=0.21.0",
+    "black",
+    "ruff",
 ]
 
 [project.urls]
-Repository = "https://github.com/RW-Lab/codeproperty-graph"
+Repository = "https://github.com/kanjani-ai-research/codeproperty-graph"
 
 [tool.pytest.ini_options]
 testpaths = ["tests"]

graphrag_codeproperty_graph-0.4.3/.gitignore

@@ -1,5 +0,0 @@
-.venv/
-dist/
-*.egg-info/
-__pycache__/
-.pytest_cache/