New Case Study:See how Anthropic automated 95% of dependency reviews with Socket.Learn More
Socket
Sign inDemoInstall
Socket

py2cfg

Package Overview
Dependencies
Maintainers
2
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

py2cfg

From any python3 source code, generate Control Flow Graph (CFG).

  • 1.0.5
  • PyPI
  • Socket score

Maintainers
2

py2cfg

Python3 control flow graph generator

py2cfg is a package that can be used to produce control flow graphs (CFGs) for Python 3 programs. The CFGs it generates can be easily visualised with graphviz. That graphical analysis is the main purpose of the module.

Examples

Below is an example of a piece of code that generates the Fibonacci sequence and the CFG produced for it with py2cfg:

# fib.py

def fib():
    a, b = 0, 1
    while True:
        yield a
        a, b = b, a + b

fib_gen = fib()
for _ in range(10):
    next(fib_gen)

See the ast: examples/fib.ast

class Sort:
    def merge(self, l, r):
        i = 0
        j = 0
        arr = []
        size = len(l) + len(r)
        for k in range(0, size):
            lSentinel = i == len(l)
            rSentinel = j == len(r)
            if i == len(l):
                arr.append(r[j])
                j += 1
            elif j == len(r):
                arr.append(l[i])
                i += 1
            elif l[i] <= r[j]:
                arr.append(l[i])
                i += 1
            else:
                arr.append(r[j])
                j += 1

        return arr

    def merge_sort(self, src):
        n = len(src) / 2
        l = src[0:n]
        r = src[n:]
        if len(l) > 1:
            l = self.merge_sort(l)
        if len(r) > 1:
            r = self.merge_sort(r)

        src = self.merge(l, r)
        return src

    def insertion_sort(self, src):
        j = 1
        for j in range(1, len(src)):
            i = j - 1
            key = src[j]
        while i >= 0 and src[i] >= key:
            src[i + 1] = src[i]
            i = i - 1
            src[i + 1] = key
        return src

See the ast: examples/speed_sort.ast

It can also be used interactively with python's pudb debugger, which opens a browser to view the CFG, which then changes as you step through the code.

More examples

After cloning, see ./examples/ for some code snippets to run this on. To generate .svg or .png or .pdf images for each example, clone this repo and run the following command in the repo root directory:

git clone repourl
cd intorepodirectory
./generate_examples.sh

Installation via pip3

Note: installation is not required, but is handy.

To install simply run

pip3 install py2cfg --user

or clone this repo and pip install locally

git clone <url>
cd intoprojectdirectory
pip3 install . --user
# or to hack on this project:
pip3 install --editable . --user

Usage

#!/bin/bash

# Install
pip3 install py2cfg --user

# Generage flow-chart
py2cfg <yourcode.py> --short --format svg --outfile <filename>

# To also generate a diffable ast file (can help in grading, for example):
py2cfg <yourcode.py> --short --diffable --format svg --outfile <filename>

# To trace code in pudb while stepping through flow-char:
py2cfg <yourcode.py> --debug

It can be used three ways:

Run via shell command

If you have installed, then the default command is py2cfg:

py2cfg <file.py> --outfile <filename>

This will create a <file>.svg file, which contains the colored cfg of the file. If you don't want to install via pip, the innards of the py2cfg command can be run right from the repo:

Run with pudb3

py2cfg <file.py> --debug

Via wrapper

If you have not installed, then you can run a script present in the repo, py2cfg/_runner.py, to directly generate a CFG of a Python program and visualise it:

cd intoreporootdir
python3 py2cfg/_runner.py <path_to_my_code.py> --outfile <filename>

Via import

Whether or not you have installed (easier if you have), to use py2cfg in your own python code, simply import the module in your Python interpreter or program. Then use the py2cfg.CFGBuilder class to build CFGs. For example, to build the CFG of a program defined in a file with the path ./example.py, the following code can be used:

from py2cfg import CFGBuilder

cfg = CFGBuilder().build_from_file('example', './example.py')

This returns the CFG for the code in ./example.py in the cfg variable. The first parameter of build_from_file is the desired name for the CFG, and the second one is the path to the file containing the source code. The produced CFG can then be visualised with:

cfg.build_visual('exampleCFG', 'pdf')

The first paramter of build_visual is the desired name for the DOT file produced by the method, and the second one is the format to use for the visualisation.

Contributing

Issues

Modifications and improvements to this project are driven via Gitlab-Issues. Check them out to create one, or fix one.

Unit tests

Our minimal tests are run via Gitlab-CI. Make sure you don't break them!

Type hinting

Note: any new additions to the project should adhere to type-hinting standards enforced by:

mypy --strict --disallow-any-explicit *.py
  • This is a current issue -- yes we need to fix some things...

Style

To maximize the ability of version control to pin down changes, and keep the style consistent, before you make any commit to the project, run this strict code auto-formatter:

black py2cfg/*.py

Do so automatically with pre-commit: https://black.readthedocs.io/en/stable/version_control_integration.html

Project history

Note: py2cfg took it's original inspiration from an older cfg project, though has long since diverged:

FAQs


Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts

SocketSocket SOC 2 Logo

Product

  • Package Alerts
  • Integrations
  • Docs
  • Pricing
  • FAQ
  • Roadmap
  • Changelog

Packages

npm

Stay in touch

Get open source security insights delivered straight into your inbox.


  • Terms
  • Privacy
  • Security

Made with ⚡️ by Socket Inc