anthropics / claude-code-security-review Source Code Overview |
Analysis scope, overview of main, test, generated, deployment, build, and other code.
Source Code Analysis Scope
Files includes and excluded from analyses
- 8 extensions are included in analyses: py, md, txt, yaml, js, ini, gitignore, json
- 3 criteria are used to exclude files from analysis:
- exclude files with path like ".*/docs/.*" (Documentation) (2 files).
- exclude files with path like ".*/git[-]history[.]txt" (Git history) (1 file).
- exclude files with path like ".*/git[-][a-zA-Z0-9_]+[.]txt" (Git data exports for sokrates analyses) (0 files).
- The source code folder contains 43 files:
- 36 files are included in analyses.
- 7 files are excluded from analyses:
Overview of Analyzed Files
Basic stats on analyzed files
Intro
For analysis purposes we separate files in scope into several categories: main, test, generated, deployment and build, and other.
- The main category contains all manually created source code files that are being used in the production.
- Files in the main category are used as input for other analyses: logical decomposition, concerns, duplication, file size, unit size, and conditional complexity.
- Test source code files are used only for testing of the product. These files are normally not deployed to production.
- Build and deployment source code files are used to configure or support build and deployment process.
- Generated source code files are automatically generated files that have not been manually changed after generation.
- While a source code folder may contain a number of files, we are primarily interested in the source code files that are being written and maintained by developers.
- Files containing binaries, documentation, or third-party libraries, for instance, are excluded from analysis. The exception are third-party libraries that have been changed by developers.
Main Code
All manually created or maintained source code that defines logic of the product that is run in a production environment.
- The following criteria are used to filter files:
- files with paths like ".*".
- 14 files match defined criteria (1,515 LOC, 100.0% vs. main code):
- 13 *.py files (1,320 LOC)
- 1 *.js files (195 LOC)
- " *.py" is biggest, containing 87.13% of LOC.
- " *.js" is smallest, containing 12.87% of LOC.
Test Code
Used only for testing of the product. Normally not deployed in a production environment.
- The following criteria are used to filter files:
- files with paths like ".*[.][Tt]est[.].*".
- files with paths like ".*[.]test[.].*".
- files with paths like ".*/test_.*".
- 13 files match defined criteria (3,595 LOC, 237.3% vs. main code):
- 12 *.py files (3,101 LOC)
- 1 *.js files (494 LOC)
- " *.py" is biggest, containing 86.26% of LOC.
- " *.js" is smallest, containing 13.74% of LOC.
Build and Deployment Code
Source code used to configure or support build and deployment process.
- The following criteria are used to filter files:
- files with paths like ".*/package[.]json".
- files with paths like ".*[.]git[a-z]+".
- files with paths like ".*/[.]gitignore".
- files with paths like ".*/requirements[a-zA-Z0-9._-]*[.]txt".
- 1 file matches defined criteria (18 LOC, 1.2% vs. main code). All matches are in *.gitignore files.
Other Code
- The following criteria are used to filter files:
- files with paths like ".*[.]json".
- files with paths like ".*[.]md".
- files with paths like ".*/README[.][a-z0-9]+".
- files with paths like ".*[.]txt".
- files with paths like ".*[.]ini".
- files with paths like ".*/[Ee]xamples/.*".
- 8 files match defined criteria (389 LOC, 25.7% vs. main code):
- 3 *.md files (312 LOC)
- 3 *.txt files (62 LOC)
- 1 *.json files (9 LOC)
- 1 *.ini files (6 LOC)
- " *.md" is biggest, containing 80.21% of LOC.
- " *.ini" is smallest, containing 1.54% of LOC.
Analyzers
Info about analyzers used for source code examinations.
- *.py files are analyzed with PythonAnalyzer:
- All basic standard analyses supported (source code overview, duplication, file size, concerns, findings, metrics, controls)
- Advanced code cleaning (empty lines and comments removed for LOC calculations, additional cleaning for duplication calculations)
- Unit size analysis
- Conditional complexity analysis
- Basic heuristic dependency analysis
- *.js files are analyzed with JavaScriptAnalyzer:
- All basic standard analyses supported (source code overview, duplication, file size, concerns, findings, metrics, controls)
- Advanced code cleaning (empty lines and comments removed for LOC calculations, additional cleaning for duplication calculations)
- Unit size analysis
- Conditional complexity analysis
- No dependency analysis
2026-06-24 10:45