python-qv 0.1.2__py3-none-any.whl → 0.1.4__py3-none-any.whl

{python_qv-0.1.2.dist-info → python_qv-0.1.4.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: python-qv
-Version: 0.1.2
+Version: 0.1.4
 Summary: Diagnose why a Python project is unhealthy — explain root cause and suggest safe fixes.
 Project-URL: Homepage, https://github.com/inzamol/qv
 Project-URL: Repository, https://github.com/inzamol/qv
@@ -8,6 +8,7 @@ Project-URL: Documentation, https://inzamol.github.io/qv/
 Project-URL: Issues, https://github.com/inzamol/qv/issues
 Author: Inzamul Hoque
 License-Expression: MIT
+License-File: LICENSE
 Classifier: Development Status :: 3 - Alpha
 Classifier: Intended Audience :: Developers
 Classifier: License :: OSI Approved :: MIT License
@@ -49,7 +50,7 @@ Description-Content-Type: text/markdown
 [![CI Status](https://github.com/inzamol/qv/actions/workflows/ci.yml/badge.svg)](https://github.com/inzamol/qv/actions/workflows/ci.yml)
 [![License: MIT](https://img.shields.io/badge/License-MIT-green.svg)](https://opensource.org/licenses/MIT)
 
-[Installation](#-installation) • [Quick Start](#-quick-start) • [Interactive TUI](#-interactive-tui-explorer) • [Features](#-what-it-detects) • [CLI Commands](#-cli-commands) • [CI/CD Integration](#-cicd-integration) • [Documentation](docs/getting_started.md)
+[Installation](#-installation) • [Quick Start](#-quick-start) • [Interactive TUI](#-interactive-tui-explorer) • [Features](#-what-it-detects) • [CLI Commands](#-cli-commands) • [CI/CD Integration](#-cicd-integration) • [Documentation](https://inzamol.github.io/qv/)
 
 </div>
 
@@ -199,8 +200,10 @@ Run `qv inspect` (or `qv ui`) for a full terminal dashboard:
 | | `IMP-002` | Unresolved relative or internal module imports | `ERROR` |
 | **Packaging** | `PKG-001` | Missing PEP 621 metadata (name, version, etc.) | `WARNING` |
 | | `PKG-002` | Invalid syntax or malformed keys in `pyproject.toml` | `ERROR` |
+| **FastAPI Doctor** | `FAP-001`–`FAP-038` | Async blocking calls, CPU starvation in endpoints, insecure CORS, missing timeouts, lifecycle anti-patterns, Pydantic v2 migrations | `ERROR` / `WARNING` |
+| **SQL & Database** | `SQL-001`–`SQL-030` | N+1 queries in loops, session leaks, SQL injection, sync DB in async loop, missing eager loading, pool starvation, 2.0 syntax | `ERROR` / `WARNING` |
 
-👉 *See full explanations and remediation steps in the [Rules Catalog](docs/rules.md).*
+👉 *See all 80+ rules and remediation steps in the [Rules Catalog](docs/rules.md).*
 
 ---
 
@@ -331,6 +334,11 @@ qv environment
 
 # Check AST & imports only (circular import loops, unresolvable modules)
 qv architecture
+
+# Check framework-specific issues (FastAPI, SQLAlchemy, SQLModel)
+qv framework
+qv framework --name fastapi
+qv framework --name sqlalchemy
 ```
 
 ---
@@ -477,13 +485,14 @@ repos:
 ---
 
 ## 📚 Complete Documentation
-
-- 🚀 [Getting Started Guide](docs/getting_started.md)
-- 📖 [CLI Reference](docs/cli_reference.md)
-- 📋 [Diagnostic Rules Catalog](docs/rules.md)
-- ⚙️ [Configuration Guide](docs/configuration.md)
-- 🤖 [CI/CD & SARIF Integration](docs/ci_integration.md)
-- 🤝 [Contributing Guidelines](docs/contributing.md)
+Online documentation is available at **[inzamol.github.io/qv](https://inzamol.github.io/qv/)**.
+
+- 🚀 [Getting Started Guide](https://inzamol.github.io/qv/getting_started/)
+- 📖 [CLI Reference](https://inzamol.github.io/qv/cli_reference/)
+- 📋 [Diagnostic Rules Catalog](https://inzamol.github.io/qv/rules/)
+- ⚙️ [Configuration Guide](https://inzamol.github.io/qv/configuration/)
+- 🤖 [CI/CD & SARIF Integration](https://inzamol.github.io/qv/ci_integration/)
+- 🤝 [Contributing Guidelines](https://inzamol.github.io/qv/contributing/)
 
 ---
 

{python_qv-0.1.2.dist-info → python_qv-0.1.4.dist-info}/RECORD

@@ -1,4 +1,4 @@
-qv/__init__.py,sha256=ytQrd73EtfTFFFPArsLrgOJNI9NNyUwp_B8_rlbd-Fg,100
+qv/__init__.py,sha256=XbmMZXW29dUN4PoZL_Q2RaC2sEqJ3Uk7VeM2iw3ZNpo,100
 qv/__main__.py,sha256=tG1eQDuox_m4xSLYLEC8KXwxKhL-IJno7CsCgdrw9Bs,112
 qv/analyzers/__init__.py,sha256=_d-1_NpNFMDu1cT-SqTKRBBeipboWZlRt5zZ0tsVPk0,25
 qv/analyzers/ci/__init__.py,sha256=W0Kr4IJBwjysEJPY-D3wNeDMWVFOFQzZt71LIzRDGfY,20
@@ -16,14 +16,17 @@ qv/analyzers/security/analyzer.py,sha256=DQAm3kex4v63ta8mFeI0gs4OCDvQYPfECLv1vza
 qv/analyzers/security/lockfile_parser.py,sha256=XkrJ-bwkv82wIojFsyzkqe4flCJWIliS1DEJNj9E59M,6565
 qv/analyzers/security/osv_client.py,sha256=Y9s8VeY3dSpUd-VBqOvdSSB8KgBzeti1K8niJY2G8IM,4961
 qv/cli/__init__.py,sha256=EUnPKm0L_oVbU1jAO_Icle4TXMCVGpd_aFTQ4iaueik,88
-qv/cli/main.py,sha256=aiDn3sjPVijPrNrW5YqyFBsO2KEL5h-V4rXhnNzzNP0,18806
+qv/cli/main.py,sha256=s4QT4HEkDroVZhuzdKokGzGImiEqqNOSscZIAKZswZM,21839
 qv/core/analyzer.py,sha256=FPiEjghPbi-RVCOxODE_BRlkvtMsnrgbakhq7-YORuc,503
 qv/core/config.py,sha256=0ARPWbLCV_RJhJZOVomldnuztxeLhkQPPkoiOrTO9Jw,3792
 qv/core/context.py,sha256=kAI_QENd6c9kRiIE5Ejt2Um4MZsQ3TL9ubkl3w5AJF0,2575
-qv/core/engine.py,sha256=foFddOmcSFuLWqmqYdcXWC-6vh_27IsgUF2l7XJrBJ4,4496
+qv/core/engine.py,sha256=xYpM4JKHKE5s1npD__R2Fm7JxAZ203AazMcF91hXEt4,4675
 qv/core/models.py,sha256=aQQTmyaBJsdof7oh8Onu2C2DLqQA6YbpLxQ0zB5utXw,4096
 qv/core/project.py,sha256=pHpDbjhYs_8iZiIluXUcj_zwTZPwbKHyXDIWfTxgCFM,18218
-qv/frameworks/__init__.py,sha256=5XnOOPd2Kyb9uG3Z7MjqZO1emDZs5F1sCAmI4yjWMPI,25
+qv/frameworks/__init__.py,sha256=VRsvKo42xj0OAz4e-bkIZC3fp-MW7NYmeMdUQKK_WZA,459
+qv/frameworks/base.py,sha256=4ue1HyXWXEtPF04u_AmUsrBY3xNJNlE6CQzXjUD8Mpc,691
+qv/frameworks/fastapi.py,sha256=uhn8F0DUdi02Y073oSyltHvkVC3JbRp6Q4HrbMW5cXU,118523
+qv/frameworks/sqlalchemy.py,sha256=aZF7yYgdBzeqrrmurzT-5X-K311OypFBuZyHDl61cHM,78946
 qv/integrations/__init__.py,sha256=xBWG_BBOAn4l43MnjXmhbu4qjiMdYq32pVjmDO0Q8iM,37
 qv/remediation/__init__.py,sha256=oHIxQraTgQVQUZ_kIorPR4t-YDVe7ygpn_dqXq_dmIU,252
 qv/remediation/engine.py,sha256=QkmrHqAyV7Zf1Z0OtWvxySJlzjUxKAmz63bJPiWHlsE,12741
@@ -35,12 +38,13 @@ qv/reporters/html_reporter.py,sha256=WZHYu_ND1GVNUHjgUK4ts97KPp1DqbkoYp3_-eOgnoU
 qv/reporters/json_reporter.py,sha256=RRzEZAMpOw8HGEVbYV8n_PCJ0PrIvFlOgAGptUxvtvY,446
 qv/reporters/sarif.py,sha256=CZEtjmqB7sNCc4qZJBLtm_7cT_gYa8frI1jl9JHzuyU,3062
 qv/reporters/terminal.py,sha256=H5c5-HMKSZ2PIHx-ZE4XA5bhMH826JHzBav0EKFqU44,4549
-qv/rules/registry.py,sha256=sz-S59_AAE0dzTe4wb77q2xymwQra0mXmEDrXf-FuMo,8596
+qv/rules/registry.py,sha256=8Uru3E-ljz3Z_rzfczUO1g5mb9OHY2ax665d9RoonQw,50143
 qv/tui/__init__.py,sha256=otEuHr1bZ6rRMF2WkgPmv6z2Ws1cmnvFqr9Semhe_6A,100
 qv/tui/app.py,sha256=Db08g5SMYsLZZ4ncrh_9ElIw_TyiRoh5gDiGkoF6mPI,11841
 qv/visualizers/__init__.py,sha256=0kMeoXfdUJalMeZms5EwrFEYMpXmx30dJxITr9ahLCU,132
 qv/visualizers/tree.py,sha256=Jf7w4HZzvxvmCIiGea1PzaUoCKN2ByAVdM8vXLHId-c,8043
-python_qv-0.1.2.dist-info/METADATA,sha256=P7c1fy7JlOGs60A338evg0PvW6EkUwBxhJAcwW_cuPU,16415
-python_qv-0.1.2.dist-info/WHEEL,sha256=W3fkpkm7-wf9vBI5Z-7s0eWkeM-spu78I8Neb98DeEg,87
-python_qv-0.1.2.dist-info/entry_points.txt,sha256=y0aZqfDPndkJ2yXxBM2RLL1qriH72zWEKSj4nJtc2q4,94
-python_qv-0.1.2.dist-info/RECORD,,
+python_qv-0.1.4.dist-info/METADATA,sha256=Ym3L7sA8JMuq5KCOVdA1oLe96DcEGOpPiLdBelT6sko,17206
+python_qv-0.1.4.dist-info/WHEEL,sha256=W3fkpkm7-wf9vBI5Z-7s0eWkeM-spu78I8Neb98DeEg,87
+python_qv-0.1.4.dist-info/entry_points.txt,sha256=y0aZqfDPndkJ2yXxBM2RLL1qriH72zWEKSj4nJtc2q4,94
+python_qv-0.1.4.dist-info/licenses/LICENSE,sha256=fNrhekSMdWyK_2XdiJjrAYoeGfyLdNMZ9hgW65gWzYs,1075
+python_qv-0.1.4.dist-info/RECORD,,

python_qv-0.1.4.dist-info/licenses/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2024-2026 Inzamul Hoque
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

qv/__init__.py

@@ -1,3 +1,3 @@
 """qv - Package-manager-agnostic diagnostic platform for Python projects."""
 
-__version__ = "0.1.2"
+__version__ = "0.1.4"

qv/cli/main.py

@@ -18,6 +18,7 @@ from qv.core.config import QvConfig
 from qv.core.engine import AnalysisEngine
 from qv.core.models import Severity
 from qv.core.project import ProjectDiscovery
+from qv.frameworks import AVAILABLE_FRAMEWORK_ANALYZERS
 from qv.remediation.engine import RemediationEngine
 from qv.reporters.github_annotator import GitHubAnnotator
 from qv.reporters.html_reporter import HtmlReporter
@@ -527,6 +528,89 @@ def graph_cmd(
     )
 
 
+@cli.command("framework")
+@click.argument(
+    "path",
+    default=".",
+    type=click.Path(exists=True, file_okay=False, dir_okay=True, path_type=Path),
+)
+@click.option(
+    "--name",
+    "-n",
+    type=str,
+    default=None,
+    help="Filter by framework plugin name (e.g. 'fastapi', 'sqlalchemy', 'sql').",
+)
+@click.option("--json", "as_json", is_flag=True, help="Output JSON results.")
+@click.option("--sarif", "as_sarif", is_flag=True, help="Output SARIF results.")
+def framework_cmd(path: Path, name: str | None, as_json: bool, as_sarif: bool) -> None:
+    """Run framework-specific doctors (FastAPI, SQLAlchemy, Celery, Django)."""
+    try:
+        pyproject_path = path / "pyproject.toml"
+        config = QvConfig.from_pyproject(pyproject_path if pyproject_path.exists() else None)
+        discovery = ProjectDiscovery(root=path, config=config)
+        context = discovery.discover_context()
+
+        # Select framework analyzers
+        analyzers_to_run = []
+        for cls in AVAILABLE_FRAMEWORK_ANALYZERS:
+            inst = cls()
+            if name:
+                target_name = name.lower()
+                if target_name in (inst.id.lower(), inst.name.lower()) or (
+                    target_name == "sql" and inst.id == "sqlalchemy"
+                ):
+                    analyzers_to_run.append(inst)
+            else:
+                analyzers_to_run.append(inst)
+
+        if not analyzers_to_run:
+            console.print(
+                f"[bold red]Unknown framework '{name}'. Available: fastapi, sqlalchemy[/bold red]"
+            )
+            sys.exit(2)
+
+        engine = AnalysisEngine(config=config, analyzers=analyzers_to_run)
+        result = engine.run(context)
+
+        if as_json:
+            reporter = JsonReporter()
+            click.echo(reporter.render(result))
+        elif as_sarif:
+            reporter = SarifReporter()
+            click.echo(reporter.render(result))
+        else:
+            TerminalReporter(console=console).print_result(result)
+
+        if result.has_blocking_errors:
+            sys.exit(1)
+        sys.exit(0)
+    except click.ClickException:
+        raise
+    except SystemExit:
+        raise
+    except Exception as e:
+        console.print(f"[bold red]Error running framework analysis: {e}[/bold red]")
+        sys.exit(3)
+
+
+@cli.command("frameworks")
+@click.argument(
+    "path",
+    default=".",
+    type=click.Path(exists=True, file_okay=False, dir_okay=True, path_type=Path),
+)
+@click.option("--name", "-n", type=str, default=None, help="Filter by framework plugin name.")
+@click.option("--json", "as_json", is_flag=True, help="Output JSON results.")
+@click.option("--sarif", "as_sarif", is_flag=True, help="Output SARIF results.")
+@click.pass_context
+def frameworks_cmd(
+    ctx: click.Context, path: Path, name: str | None, as_json: bool, as_sarif: bool
+) -> None:
+    """Alias for 'qv framework' command."""
+    ctx.invoke(framework_cmd, path=path, name=name, as_json=as_json, as_sarif=as_sarif)
+
+
 @cli.command("inspect")
 @click.argument(
     "path",

qv/core/engine.py

@@ -13,6 +13,8 @@ from qv.core.analyzer import Analyzer
 from qv.core.config import QvConfig
 from qv.core.context import ProjectContext
 from qv.core.models import Diagnostic, RootCause, ScanResult, Suggestion
+from qv.frameworks.fastapi import FastApiAnalyzer
+from qv.frameworks.sqlalchemy import SqlAlchemyAnalyzer
 
 
 class AnalysisEngine:
@@ -33,6 +35,8 @@ class AnalysisEngine:
                 DependencyAnalyzer(),
                 ImportAnalyzer(),
                 SecurityAnalyzer(),
+                FastApiAnalyzer(),
+                SqlAlchemyAnalyzer(),
             ]
 
     def run(self, context: ProjectContext) -> ScanResult:

qv/frameworks/__init__.py

@@ -1 +1,19 @@
-"""Framework plugins."""
+"""Framework analyzers for qv."""
+
+from __future__ import annotations
+
+from qv.frameworks.base import FrameworkPlugin
+from qv.frameworks.fastapi import FastApiAnalyzer
+from qv.frameworks.sqlalchemy import SqlAlchemyAnalyzer
+
+AVAILABLE_FRAMEWORK_ANALYZERS: list[type[FrameworkPlugin]] = [
+    FastApiAnalyzer,
+    SqlAlchemyAnalyzer,
+]
+
+__all__ = [
+    "FrameworkPlugin",
+    "FastApiAnalyzer",
+    "SqlAlchemyAnalyzer",
+    "AVAILABLE_FRAMEWORK_ANALYZERS",
+]

qv/frameworks/base.py

@@ -0,0 +1,25 @@
+"""Base protocol and registry for framework-specific analyzers."""
+
+from __future__ import annotations
+
+from typing import Protocol, runtime_checkable
+
+from qv.core.context import ProjectContext
+from qv.core.models import Diagnostic
+
+
+@runtime_checkable
+class FrameworkPlugin(Protocol):
+    """Protocol for framework-specific diagnostic plugins."""
+
+    id: str
+    name: str
+    description: str
+
+    def detect(self, context: ProjectContext) -> bool:
+        """Detect if this framework is actively used in the project."""
+        ...
+
+    def analyze(self, context: ProjectContext) -> list[Diagnostic]:
+        """Analyze the project context for framework-specific issues."""
+        ...