analyzers/

Package backenderror prevents configured backend errors from crossing exported API boundaries without an explicit classification step.

Package blockingcontext requires context on configured blocking APIs.

Package cleanupownership detects discarded cleanup results from configured constructors.

Package constructorgoroutine forbids hidden goroutine startup in constructors.

Package forbiddenapi enforces organization-specific API migrations.

Package globalgoroutine detects goroutines started by package initialization.

Package goroutinefanout detects goroutine launches repeated by loops without a statically proven organization-approved bound.

Package httpclienttimeout requires explicit timeout ownership for HTTP clients.

Package importboundary enforces configured package dependency direction.

Package interfacenaming enforces configured names for exported value interfaces.

Package interfaceplacement enforces consumer-owned public interfaces in configured provider package trees.

Package lockacrosscall detects configured calls made while locks are held.

Package metriccardinality detects configured high-cardinality typed values passed to configured metric label positions.

Package mutableglobal reports package variables that hold shared mutable state rather than immutable scalar values.

Package nobackground restricts root context creation to composition roots.

Package nodefaulthttp forbids process-global HTTP clients and transports.

Package noinit requires explicit construction instead of package init.

Package noprocesscontrol restricts process termination to entrypoints.

Package nostoredcontext forbids context lifecycle storage in structs.

Package nounsafe forbids unsafe, cgo, and go:linkname in production policy.

Package sensitivesink detects typed sensitive values passed to configured sinks.

Package transactionrollback enforces immediate rollback ownership for configured transaction constructors.