pyproject.toml

[project]
name = "analyzer-service"
version = "0.1.0"
description = "Static vulnerability analyzer for JavaScript/TypeScript code"
requires-python = ">=3.12"
dependencies = [
    "fastapi>=0.141.0",
    "uvicorn[standard]>=0.52.0",
    "pydantic>=2.13",
    "pydantic-settings>=2.15",
    "tree-sitter>=0.26,<0.27",
    "tree-sitter-javascript>=0.25",
    "tree-sitter-typescript>=0.23.2",
    # Avoid celery[redis] → kombu[redis] pin redis<6.5; transport is in kombu.
    # Allow redis-py 8.x; keep <9 until we validate the next major.
    "celery>=5.6",
    "redis>=7.4,<9",
    "sqlalchemy>=2.0.51",
    "alembic>=1.19",
    "psycopg2-binary>=2.9.12",
    "httpx>=0.28",
]

[project.optional-dependencies]
dev = [
    "pyyaml>=6.0.3",
    "pytest>=9.0",
    "pytest-asyncio>=1.0",
    "pytest-cov>=7.0",
    "ruff>=0.16",
    "mypy>=2.0",
    "pip-audit>=2.9",
    "pre-commit>=4.0",
]

[build-system]
requires = ["setuptools>=75.0"]
build-backend = "setuptools.build_meta"

[tool.setuptools.packages.find]
where = ["src"]

[tool.pytest.ini_options]
testpaths = ["tests"]
asyncio_mode = "auto"
pythonpath = ["src", "."]

[tool.coverage.run]
source = ["analyzer"]
branch = false

[tool.coverage.report]
fail_under = 84
show_missing = true

[tool.ruff]
# Syntax/lint baseline; runtime and CI use 3.14 (see Dockerfile / ci.yml).
target-version = "py312"
line-length = 100
src = ["src", "tests", "eval"]

[tool.ruff.lint]
select = ["E", "F", "W", "I", "N", "UP", "B", "SIM", "TCH"]

[tool.mypy]
python_version = "3.14"
strict = true
plugins = ["pydantic.mypy"]
mypy_path = "src"

[[tool.mypy.overrides]]
module = ["celery.*", "tree_sitter.*", "tree_sitter_javascript.*", "tree_sitter_typescript.*"]
ignore_missing_imports = true