python

Documentation

Overview

Package python implements a gorisk analyzer for Python projects. It supports pyproject.toml/poetry.lock, Pipfile.lock, and requirements.txt.

Index

• func BuildIRGraph(g *graph.DependencyGraph) ir.IRGraph
• func Detect(dir string) capability.CapabilitySet
• func DetectFunctions(dir, pkgName string, files []string) (map[string]ir.FunctionCaps, []ir.CallEdge, error)
• type Adapter
  • func (a *Adapter) Load(dir string) (*graph.DependencyGraph, error)
  • func (a *Adapter) Name() string
• type PythonPackage
  • func Load(dir string) (pkgs []PythonPackage, retErr error)

Functions

func BuildIRGraph

func BuildIRGraph(g *graph.DependencyGraph) ir.IRGraph

BuildIRGraph builds a function-level IR graph for a Python dependency graph.

func Detect

func Detect(dir string) capability.CapabilitySet

Detect walks .py files in dir and returns the combined capability set.

func DetectFunctions

func DetectFunctions(dir, pkgName string, files []string) (map[string]ir.FunctionCaps, []ir.CallEdge, error)

DetectFunctions parses Python files and returns per-function capability sets and call edges.

Types

type Adapter

type Adapter struct{}

Adapter implements the analyzer.Analyzer interface for Python projects.

func (*Adapter) Load

func (a *Adapter) Load(dir string) (*graph.DependencyGraph, error)

Load parses the Python dependency lockfile in dir, detects capabilities from each installed package's source (if site-packages is present), and returns a *graph.DependencyGraph.

func (*Adapter) Name

func (a *Adapter) Name() string

type PythonPackage

type PythonPackage struct {
	Name         string
	Version      string
	Dir          string // path to site-packages/<name>; empty if not installed
	Dependencies []string
	Direct       bool
}

PythonPackage represents a Python dependency extracted from a lockfile.

func Load

func Load(dir string) (pkgs []PythonPackage, retErr error)

Load detects and parses the Python dependency lockfile in dir. Detection order: pyproject.toml+poetry.lock → Pipfile.lock → requirements.txt Load never panics; it returns a structured error on failure.