📣 New Release: codeanalyzer-python 1.5.4

[github-actions[bot]]

codeanalyzer-python 1.5.4 fixes two errors in entrypoint and interprocedural dataflow results.

No breaking changes. The JSON schema and Neo4j schema remain at 2.0.0.

WebSocket entrypoints report only HTTP methods (#219)

WebSocket routes remain in the entrypoint results, but http_methods is now empty for them. It no longer reports WEBSOCKET as an HTTP method. HTTP routes still report their methods, such as GET.

Dataflow now crosses calls for parameters (#221)

The SDG now connects a caller’s parameter value to the matching argument port. Forward slices and flow queries can follow values across calls, and taint analysis can return the path instead of reporting an empty, complete result.

Install or upgrade:

pip install -U "codeanalyzer-python==1.5.4"

• GitHub release v1.5.4
• CHANGELOG.md
• PR #219 · PR #221