python-qv 0.1.0__py3-none-any.whl → 0.1.2__py3-none-any.whl

python_qv-0.1.2.dist-info/METADATA

@@ -0,0 +1,492 @@
+Metadata-Version: 2.5
+Name: python-qv
+Version: 0.1.2
+Summary: Diagnose why a Python project is unhealthy — explain root cause and suggest safe fixes.
+Project-URL: Homepage, https://github.com/inzamol/qv
+Project-URL: Repository, https://github.com/inzamol/qv
+Project-URL: Documentation, https://inzamol.github.io/qv/
+Project-URL: Issues, https://github.com/inzamol/qv/issues
+Author: Inzamul Hoque
+License-Expression: MIT
+Classifier: Development Status :: 3 - Alpha
+Classifier: Intended Audience :: Developers
+Classifier: License :: OSI Approved :: MIT License
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Topic :: Software Development :: Bug Tracking
+Classifier: Topic :: Software Development :: Quality Assurance
+Requires-Python: >=3.10
+Requires-Dist: click>=8.1.0
+Requires-Dist: packaging>=23.2
+Requires-Dist: pydantic>=2.5.0
+Requires-Dist: rich>=13.7.0
+Requires-Dist: tomli>=2.0.1; python_version < '3.11'
+Provides-Extra: dev
+Requires-Dist: pre-commit>=3.7.0; extra == 'dev'
+Requires-Dist: pyright>=1.1.350; extra == 'dev'
+Requires-Dist: pytest-cov>=4.1.0; extra == 'dev'
+Requires-Dist: pytest>=8.0.0; extra == 'dev'
+Requires-Dist: ruff>=0.4.0; extra == 'dev'
+Requires-Dist: tox-uv>=1.7.0; extra == 'dev'
+Requires-Dist: tox>=4.15.0; extra == 'dev'
+Provides-Extra: docs
+Requires-Dist: mkdocs-material>=9.5.0; extra == 'docs'
+Requires-Dist: mkdocs<2.0.0,>=1.6.0; extra == 'docs'
+Requires-Dist: pymdown-extensions>=10.7.0; extra == 'docs'
+Description-Content-Type: text/markdown
+
+# 🔍 qv
+
+<div align="center">
+
+**Diagnose why your Python project is unhealthy — understand the root cause and get safe, actionable fixes.**
+
+[![PyPI Version](https://img.shields.io/badge/pypi-v0.1.0-blue.svg)](https://pypi.org/project/python-qv/)
+[![Python Versions](https://img.shields.io/badge/python-3.10%20%7C%203.11%20%7C%203.12%20%7C%203.13-blue)](https://pypi.org/project/python-qv/)
+[![CI Status](https://github.com/inzamol/qv/actions/workflows/ci.yml/badge.svg)](https://github.com/inzamol/qv/actions/workflows/ci.yml)
+[![License: MIT](https://img.shields.io/badge/License-MIT-green.svg)](https://opensource.org/licenses/MIT)
+
+[Installation](#-installation) • [Quick Start](#-quick-start) • [Interactive TUI](#-interactive-tui-explorer) • [Features](#-what-it-detects) • [CLI Commands](#-cli-commands) • [CI/CD Integration](#-cicd-integration) • [Documentation](docs/getting_started.md)
+
+</div>
+
+---
+
+## 💡 Why qv?
+
+Python projects rarely fail because of Python syntax. They fail because of **ecosystem friction**:
+- Incompatible transitive dependency constraints that break your resolver.
+- Missing dependencies you forgot to add to `pyproject.toml`.
+- Docker containers running Python 3.10 while your team develops on 3.12.
+- Silent circular imports that only crash at runtime when certain modules load.
+
+Instead of parsing hundreds of lines of cryptic resolver logs, **`qv`** scans your project in milliseconds, pinpoints the root cause, shows the exact evidence, and gives you a copy-paste command to fix it.
+
+```text
+🔍 qv
+Project: payment-service
+Python:  3.12.7
+Package Manager: uv
+
+🔴 1 Errors   🟡 1 Warnings   🟢 48 Checks Passed
+
+┌────────────────── 🔴 DEP-001 Dependency constraint conflict ─────────────────┐
+│ celery 5.4.0 requires kombu<5.4.0,>=5.3.0, but installed is kombu 5.5.2.     │
+│                                                                              │
+│ Evidence:                                                                    │
+│   • celery declared requirement: kombu<5.4.0,>=5.3.0                         │
+│   • Installed kombu version: 5.5.2 in active environment                     │
+│                                                                              │
+│ Suggested fix:                                                               │
+│   Upgrade celery or pin kombu to <5.4.0,>=5.3.0.                             │
+│   $ uv add 'kombu<5.4.0,>=5.3.0'                                             │
+└──────────────────────────────────────────────────────────────────────────────┘
+
+Health Score: 85/100
+```
+
+---
+
+## 📦 Installation
+
+Install `python-qv` into your virtual environment (provides the `qv` CLI):
+
+```bash
+# Using pip
+pip install python-qv
+
+# Using uv
+uv add python-qv --dev
+
+# Run directly without installing (via uvx or pipx)
+uvx python-qv scan
+# or
+pipx run python-qv scan
+```
+
+---
+
+## 🚀 Quick Start
+
+### 1. Run a Health Scan
+
+Run `qv scan` inside any Python repository:
+
+```bash
+qv scan
+```
+
+### 2. Launch the Interactive TUI Explorer
+
+Explore findings interactively with keyboard navigation, live details, dependency tree view, and 1-key remediation:
+
+```bash
+qv inspect
+# or
+qv ui
+```
+
+### 3. Generate a Self-Contained HTML Report
+
+Export a standalone, interactive HTML report with score meters, search filters, and dark/light modes:
+
+```bash
+qv scan --html report.html
+```
+
+### 4. Understand Any Flagged Issue
+
+Need more context on why a rule triggered? Run `explain`:
+
+```bash
+qv explain DEP-001
+```
+
+### 5. Add Project Configuration
+
+To add default configuration to your `pyproject.toml`:
+
+```bash
+qv init
+```
+
+---
+
+## 🖥️ Interactive TUI Explorer
+
+Run `qv inspect` (or `qv ui`) for a full terminal dashboard:
+
+```text
+┌────────────────────────────────────────────── qv Explorer ──────────────────────────────────────────────┐
+│  🔍 qv Explorer  •  Project: all-in-one-demo  •  Health Score: 40/100                                   │
+│  Python: 3.12.7  |  Package Manager: PIP  |  Errors: 3  |  Warnings: 3  |  Checks Passed: 49            │
+├────────────────────────── Findings (1/6) ──────────────────────────┬──────────────── Details: DEP-001 ──┤
+│     Sev   Rule     Title                                           │ [ERROR] DEP-001: Constraint conflict│
+│  👉 ERR   DEP-001  Dependency constraint conflict                  │ celery requires kombu<5.4.0,>=5.3.0│
+│     ERR   DEP-002  Missing dependency: httpx                       │ Location: pyproject.toml           │
+│     ERR   DEP-002  Missing dependency: pydantic                    │                                    │
+│     WARN  DEP-003  Unused declared dependency: requests            │ Remediation:                       │
+│     WARN  DEP-003  Unused declared dependency: pyyaml              │   👉 Pin kombu to <5.4.0,>=5.3.0   │
+│     ... 1 more below ...                                           │      $ pip install 'kombu<5.4.0'   │
+├────────────────────────────────────────────────────────────────────┴────────────────────────────────────┤
+│ [↑/k, ↓/j] Navigate  •  [Enter] Expand  •  [f] Apply Fix  •  [t] Tree View  •  [q] Quit                 │
+└─────────────────────────────────────────────────────────────────────────────────────────────────────────┘
+```
+
+- **`↑ / k` & `↓ / j`**: Scroll smoothly through findings.
+- **`f`**: Apply automated remediation fix for the active finding.
+- **`t`**: Toggle between Findings view and live Dependency Tree.
+- **`Enter`**: Expand details panel.
+
+---
+
+## 🔍 What It Detects
+
+| Category | Rule ID | Description | Default Severity |
+|---|---|---|---|
+| **Dependencies** | `DEP-001` | Incompatible package version constraints across dependency tree | `ERROR` |
+| | `DEP-002` | Third-party packages imported in code but missing from `pyproject.toml` | `ERROR` |
+| | `DEP-003` | Declared dependencies that are never imported anywhere in project | `WARNING` |
+| | `DEP-004` | Package requires a Python version incompatible with target runtime | `WARNING` |
+| | `DEP-005` | Installed virtualenv version does not match declared manifest pin | `WARNING` |
+| **Environment** | `ENV-001` | Active interpreter version differs from project `requires-python` | `WARNING` |
+| | `ENV-002` | Dockerfile base image Python version differs from project runtime | `WARNING` |
+| | `ENV-003` | CI matrix does not cover the Python versions declared in project | `WARNING` |
+| **Architecture** | `IMP-001` | Circular import cycles across local modules | `ERROR` |
+| | `IMP-002` | Unresolved relative or internal module imports | `ERROR` |
+| **Packaging** | `PKG-001` | Missing PEP 621 metadata (name, version, etc.) | `WARNING` |
+| | `PKG-002` | Invalid syntax or malformed keys in `pyproject.toml` | `ERROR` |
+
+👉 *See full explanations and remediation steps in the [Rules Catalog](docs/rules.md).*
+
+---
+
+## 🛠️ CLI Commands & Examples
+
+### 1. `qv scan` — Full Project Diagnostics
+Run a comprehensive health audit scanning dependencies, runtime environment, imports, and packaging.
+
+```bash
+# Scan current repository
+qv scan
+
+# Scan a specific directory or microservice
+qv scan ./services/payment
+
+# Strict mode: fail CI if any warnings exist (exit code 1)
+qv scan --strict
+
+# Generate a self-contained interactive HTML dashboard
+qv scan --html report.html
+
+# Output SARIF format for GitHub Code Scanning / IDE integration
+qv scan --sarif -o results.sarif
+
+# Output machine-readable JSON
+qv scan --json -o results.json
+
+# Offline / Airgapped mode (skips remote package index checks)
+qv scan --offline
+
+# Emit GitHub Actions workflow command annotations (::error:: and ::warning::)
+qv scan --ci --github-annotations
+```
+
+---
+
+### 2. `qv inspect` (or `qv ui`) — Interactive Terminal Dashboard
+Explore diagnostic findings, view evidence, inspect circular import trees, and apply fixes interactively with keyboard shortcuts.
+
+```bash
+# Launch interactive dashboard for current repository
+qv inspect
+
+# Inspect another project
+qv inspect ../another-service
+
+# Airgapped / offline TUI
+qv inspect --offline
+```
+
+*Controls: `↑`/`k` and `↓`/`j` to navigate, `Enter` to expand details, `f` to apply fix, `t` to toggle dependency tree, `q` to quit.*
+
+---
+
+### 3. `qv fix` — Safe Automated Remediation
+Automatically generate and apply deterministic fixes to your project manifest and configuration.
+
+```bash
+# Interactive wizard (prompts before applying each fix)
+qv fix
+
+# Preview proposed file diffs and commands without modifying disk
+qv fix --dry-run
+
+# Automatically apply all safe fixes without prompting
+qv fix -y
+
+# Fix only a specific rule (e.g. missing dependencies)
+qv fix --rule DEP-002 -y
+
+# Apply fixes and execute package manager sync commands
+qv fix --sync -y
+```
+
+---
+
+### 4. `qv tree` (or `qv graph`) — Dependency & Architecture Visualizer
+Render color-coded visual trees of package dependencies and source module import graphs.
+
+```bash
+# Render complete overview (dependency tree + import architecture)
+qv tree
+
+# Visualize direct & transitive dependencies up to depth 2
+qv tree --dependencies --depth 2
+# or shorthand:
+qv tree -d -L 2
+
+# Visualize internal module import graph and circular import cycles
+qv tree --imports
+# or shorthand:
+qv tree -i
+
+# Export tree hierarchy and cycle statistics as JSON
+qv tree --json > tree.json
+```
+
+---
+
+### 5. `qv explain` — Rule Catalog & Fix Advice
+Look up detailed explanations, common causes, evidence criteria, and remediation advice for any diagnostic rule.
+
+```bash
+# Explain dependency constraint conflicts
+qv explain DEP-001
+
+# Explain missing undeclared imports
+qv explain DEP-002
+
+# Explain circular import loops
+qv explain IMP-001
+
+# Explain Python/Docker environment drift
+qv explain ENV-002
+```
+
+---
+
+### 6. Subsystem-Focused Scans
+Run focused audits on specific components when troubleshooting or in modular CI pipelines:
+
+```bash
+# Check dependencies only (conflicts, missing, unused, incompatible Python)
+qv dependency
+
+# Check environment drift only (interpreter version, Dockerfile, CI matrix)
+qv environment
+
+# Check AST & imports only (circular import loops, unresolvable modules)
+qv architecture
+```
+
+---
+
+### 7. `qv init` — Project Configuration Setup
+Initialize or update `pyproject.toml` with default `[tool.qv]` configuration rules and path exclusions without overwriting existing settings.
+
+```bash
+# Initialize [tool.qv] in pyproject.toml
+qv init
+```
+
+---
+
+### 8. `qv version` — Version Information
+```bash
+qv version
+# or
+qv --version
+```
+
+👉 *See full option matrices in the [CLI Reference](docs/cli_reference.md).*
+
+---
+
+## ⚙️ Configuration
+
+Configure `qv` in your `pyproject.toml`:
+
+```toml
+[tool.qv]
+
+# Override severity for any rule (error, warning, info, off)
+[tool.qv.rules]
+DEP-001 = "error"
+DEP-003 = "warning"
+ENV-002 = "info"
+
+# Ignore specific rules
+[tool.qv.ignore]
+rules = ["DEP-004"]
+
+# Exclude directories from scanning
+[tool.qv.paths]
+exclude = [
+    ".venv",
+    "build",
+    "dist",
+    "legacy_scripts",
+]
+
+# Set expected target Python version
+[tool.qv.runtime]
+python = "3.12"
+```
+
+👉 *Learn more in the [Configuration Guide](docs/configuration.md).*
+
+---
+
+## 🤖 CI/CD Integration
+
+### Official GitHub Action
+
+You can use the official `qv` GitHub Action directly in `.github/workflows/ci.yml`:
+
+```yaml
+name: Health & Dependency Scan
+
+on: [push, pull_request]
+
+jobs:
+  qv:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - name: Run qv Health Scan
+        uses: inzamol/qv@v1
+        with:
+          strict: true
+          html_report: report.html
+          sarif_report: qv.sarif
+          github_annotations: true
+```
+
+### GitHub Actions (Manual setup with SARIF code scanning)
+
+```yaml
+name: Health & Dependency Scan
+
+on: [push, pull_request]
+
+jobs:
+  qv:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: astral-sh/setup-uv@v3
+
+      # Run scan with PR annotations
+      - name: Run qv
+        run: uv run qv scan --ci --github-annotations
+
+      # Generate SARIF report for GitHub Code Scanning
+      - name: Generate SARIF report
+        run: uv run qv scan --sarif -o qv.sarif
+        if: always()
+
+      - name: Upload SARIF to GitHub Security
+        uses: github/codeql-action/upload-sarif@v3
+        with:
+          sarif_file: qv.sarif
+        if: always()
+```
+
+### Pre-commit Hook Integration
+
+Add `qv` directly to your `.pre-commit-config.yaml` to catch dependency drift and circular imports before committing:
+
+```yaml
+repos:
+  - repo: https://github.com/inzamol/qv
+    rev: v0.1.0
+    hooks:
+      # Diagnose health before committing
+      - id: qv-scan
+        args: [--strict, --offline]
+
+      # Optional: Auto-remediate safe issues on commit
+      # - id: qv-fix
+```
+
+👉 *See full details in [CI/CD & Pre-commit Integration](docs/ci_integration.md).*
+
+---
+
+## 🎯 Design Principles
+
+- **Diagnose first. Explain second. Fix safely.**
+- **No destructive auto-mutations**: Remediations provide the exact commands/diffs for you to review and apply.
+- **Local-first & Blazing fast**: Zero network calls required; scans complete in under a second.
+- **Package-manager agnostic**: Works out of the box with `uv`, Poetry, `pip`, PDM, and Pipenv.
+
+---
+
+## 📚 Complete Documentation
+
+- 🚀 [Getting Started Guide](docs/getting_started.md)
+- 📖 [CLI Reference](docs/cli_reference.md)
+- 📋 [Diagnostic Rules Catalog](docs/rules.md)
+- ⚙️ [Configuration Guide](docs/configuration.md)
+- 🤖 [CI/CD & SARIF Integration](docs/ci_integration.md)
+- 🤝 [Contributing Guidelines](docs/contributing.md)
+
+---
+
+## 📄 License
+
+Distributed under the [MIT License](LICENSE).

python_qv-0.1.2.dist-info/RECORD

@@ -0,0 +1,46 @@
+qv/__init__.py,sha256=ytQrd73EtfTFFFPArsLrgOJNI9NNyUwp_B8_rlbd-Fg,100
+qv/__main__.py,sha256=tG1eQDuox_m4xSLYLEC8KXwxKhL-IJno7CsCgdrw9Bs,112
+qv/analyzers/__init__.py,sha256=_d-1_NpNFMDu1cT-SqTKRBBeipboWZlRt5zZ0tsVPk0,25
+qv/analyzers/ci/__init__.py,sha256=W0Kr4IJBwjysEJPY-D3wNeDMWVFOFQzZt71LIzRDGfY,20
+qv/analyzers/dependencies/__init__.py,sha256=AfzPubOgDrmbfPVe8I5egJ6tswolYzWsDwXjW-Maqhg,129
+qv/analyzers/dependencies/analyzer.py,sha256=ENQPbqhzb7YxNqqz9rStoii2TMTLEEB1BXK9uc9ghAc,15022
+qv/analyzers/docker/__init__.py,sha256=zQsRHV9IiRbjpb9AKmKzaMPtlXp1iSQCBSvyKDo-2q8,24
+qv/analyzers/environment/__init__.py,sha256=5EtSq3sQIJJxKAfpwWiCul3VHWMA94y3-QBi5pjHVb8,128
+qv/analyzers/environment/drift.py,sha256=ZPWCsGMr-vLjIoOnt97fCSgQfwsL_C8z36OfxGiyw-g,10267
+qv/analyzers/imports/__init__.py,sha256=bShRWSwJunl5mbkHI738-jTut0RGStVQhtdzCae-fuo,112
+qv/analyzers/imports/analyzer.py,sha256=a6pOHZ35SK6fpZwiSg0oup60yObPk-Tk80CP_KRA_tA,14580
+qv/analyzers/packaging/__init__.py,sha256=owgIeiZUNwhn-gPLbho1jCqA72cg1f8u_6wsqDqsgdk,123
+qv/analyzers/packaging/analyzer.py,sha256=-57OYQPsS6uIN8u_1LR2CQRT8sOcDmYYCtGkgFo4jo0,4776
+qv/analyzers/security/__init__.py,sha256=VOpkxOxoC_7HpyuSKJi35y88ErKMtQ9w31HXDkaxhi4,384
+qv/analyzers/security/analyzer.py,sha256=DQAm3kex4v63ta8mFeI0gs4OCDvQYPfECLv1vzaujIQ,4629
+qv/analyzers/security/lockfile_parser.py,sha256=XkrJ-bwkv82wIojFsyzkqe4flCJWIliS1DEJNj9E59M,6565
+qv/analyzers/security/osv_client.py,sha256=Y9s8VeY3dSpUd-VBqOvdSSB8KgBzeti1K8niJY2G8IM,4961
+qv/cli/__init__.py,sha256=EUnPKm0L_oVbU1jAO_Icle4TXMCVGpd_aFTQ4iaueik,88
+qv/cli/main.py,sha256=aiDn3sjPVijPrNrW5YqyFBsO2KEL5h-V4rXhnNzzNP0,18806
+qv/core/analyzer.py,sha256=FPiEjghPbi-RVCOxODE_BRlkvtMsnrgbakhq7-YORuc,503
+qv/core/config.py,sha256=0ARPWbLCV_RJhJZOVomldnuztxeLhkQPPkoiOrTO9Jw,3792
+qv/core/context.py,sha256=kAI_QENd6c9kRiIE5Ejt2Um4MZsQ3TL9ubkl3w5AJF0,2575
+qv/core/engine.py,sha256=foFddOmcSFuLWqmqYdcXWC-6vh_27IsgUF2l7XJrBJ4,4496
+qv/core/models.py,sha256=aQQTmyaBJsdof7oh8Onu2C2DLqQA6YbpLxQ0zB5utXw,4096
+qv/core/project.py,sha256=pHpDbjhYs_8iZiIluXUcj_zwTZPwbKHyXDIWfTxgCFM,18218
+qv/frameworks/__init__.py,sha256=5XnOOPd2Kyb9uG3Z7MjqZO1emDZs5F1sCAmI4yjWMPI,25
+qv/integrations/__init__.py,sha256=xBWG_BBOAn4l43MnjXmhbu4qjiMdYq32pVjmDO0Q8iM,37
+qv/remediation/__init__.py,sha256=oHIxQraTgQVQUZ_kIorPR4t-YDVe7ygpn_dqXq_dmIU,252
+qv/remediation/engine.py,sha256=QkmrHqAyV7Zf1Z0OtWvxySJlzjUxKAmz63bJPiWHlsE,12741
+qv/remediation/models.py,sha256=y8zWfbbhjWCjiBks1cpcvLODNavvnj2sR_uqR1TbjYw,1600
+qv/reporters/__init__.py,sha256=c5HE52PVODdUwtCb_06bugj4aZ9gHqqJ0QaOCt1R1es,381
+qv/reporters/base.py,sha256=LvtGAy5xocwB8gqYuAvFEIO73ov7BwXa06Azj_Pnuu4,329
+qv/reporters/github_annotator.py,sha256=o8Msz9hIhXYtIrqdhCk9aq64sgZjZyz6Yr1cda7ruCI,3480
+qv/reporters/html_reporter.py,sha256=WZHYu_ND1GVNUHjgUK4ts97KPp1DqbkoYp3_-eOgnoU,18142
+qv/reporters/json_reporter.py,sha256=RRzEZAMpOw8HGEVbYV8n_PCJ0PrIvFlOgAGptUxvtvY,446
+qv/reporters/sarif.py,sha256=CZEtjmqB7sNCc4qZJBLtm_7cT_gYa8frI1jl9JHzuyU,3062
+qv/reporters/terminal.py,sha256=H5c5-HMKSZ2PIHx-ZE4XA5bhMH826JHzBav0EKFqU44,4549
+qv/rules/registry.py,sha256=sz-S59_AAE0dzTe4wb77q2xymwQra0mXmEDrXf-FuMo,8596
+qv/tui/__init__.py,sha256=otEuHr1bZ6rRMF2WkgPmv6z2Ws1cmnvFqr9Semhe_6A,100
+qv/tui/app.py,sha256=Db08g5SMYsLZZ4ncrh_9ElIw_TyiRoh5gDiGkoF6mPI,11841
+qv/visualizers/__init__.py,sha256=0kMeoXfdUJalMeZms5EwrFEYMpXmx30dJxITr9ahLCU,132
+qv/visualizers/tree.py,sha256=Jf7w4HZzvxvmCIiGea1PzaUoCKN2ByAVdM8vXLHId-c,8043
+python_qv-0.1.2.dist-info/METADATA,sha256=P7c1fy7JlOGs60A338evg0PvW6EkUwBxhJAcwW_cuPU,16415
+python_qv-0.1.2.dist-info/WHEEL,sha256=W3fkpkm7-wf9vBI5Z-7s0eWkeM-spu78I8Neb98DeEg,87
+python_qv-0.1.2.dist-info/entry_points.txt,sha256=y0aZqfDPndkJ2yXxBM2RLL1qriH72zWEKSj4nJtc2q4,94
+python_qv-0.1.2.dist-info/RECORD,,

qv/__init__.py

@@ -1,3 +1,3 @@
 """qv - Package-manager-agnostic diagnostic platform for Python projects."""
 
-__version__ = "0.1.0"
+__version__ = "0.1.2"

qv/__main__.py

@@ -0,0 +1,6 @@
+"""Entrypoint for python -m qv execution."""
+
+from qv.cli.main import cli
+
+if __name__ == "__main__":
+    cli()

qv/analyzers/dependencies/analyzer.py

@@ -12,11 +12,70 @@ from qv.core.context import ProjectContext
 from qv.core.models import Diagnostic, Evidence, Suggestion
 from qv.rules.registry import get_rule_definition
 
+PEP594_REMOVED_MODULES = {
+    "distutils",
+    "imp",
+    "cgi",
+    "pipes",
+    "asyncore",
+    "asynchat",
+    "smtpd",
+    "crypt",
+    "chunk",
+    "telnetlib",
+    "mailcap",
+    "nntplib",
+    "audioop",
+}
+
+ALL_PYTHON_3_STDLIB = {
+    "tomllib",  # Added in Python 3.11
+    "zoneinfo",  # Added in Python 3.9
+    "wsgiref",
+    "concurrent",
+    "ctypes",
+    "curses",
+    "email",
+    "html",
+    "mimetypes",
+    "tarfile",
+    "zipfile",
+    "gzip",
+    "bz2",
+    "lzma",
+    "venv",
+    "ensurepip",
+    "trace",
+    "tracemalloc",
+    "secrets",
+    "token",
+    "tokenize",
+    "profile",
+    "cProfile",
+    "pstats",
+    "timeit",
+    "gc",
+    "signal",
+    "errno",
+    "selectors",
+    "sched",
+    "queue",
+    "site",
+    "stat",
+    "reprlib",
+    "copy",
+    "copyreg",
+    "fnmatch",
+    "linecache",
+    "posixpath",
+    "ntpath",
+    "genericpath",
+}
+
 # Known Python standard library modules (Python 3.10+)
 STDLIB_MODULES = (
-    set(sys.stdlib_module_names)
-    if hasattr(sys, "stdlib_module_names")
-    else {
+    (set(sys.stdlib_module_names) if hasattr(sys, "stdlib_module_names") else set())
+    | {
         "abc",
         "argparse",
         "ast",
@@ -70,6 +129,8 @@ STDLIB_MODULES = (
         "zipfile",
         "__future__",
     }
+    | ALL_PYTHON_3_STDLIB
+    | PEP594_REMOVED_MODULES
 )
 
 # Known tools/packages that may not be imported directly in application code
@@ -185,7 +246,7 @@ class DependencyAnalyzer:
             context.project_name.lower(),
         }
         for sf in context.source_files:
-            parts = sf.relative_path.parts
+            parts = list(sf.relative_path.parts)
             if parts:
                 if parts[0] in ("src", "lib") and len(parts) > 1:
                     local_modules.add(parts[1].replace(".py", "").lower().replace("-", "_"))