lang-parsing-substrate
A shared language-parsing substrate for static-analysis tools: tree-sitter grammar
dispatch, language detection, and a growing set of language-agnostic analysis
primitives (import/call graphs, control-flow graphs, structural fingerprinting,
suppression comments) built on top of a unified LanguageInfo registry across
16 languages — compiled in at build time via Cargo feature flags.
What's in the substrate
| Module | Provides |
|---|---|
registry |
Language detection by extension, the LanguageInfo table, SLOC comment-style metadata |
classify |
Cheap heuristic pre-parse file classification from a bounded byte prefix + size: SourceText / Binary / Oversize / Empty, so consumers can skip a 2 GB zip named .c before it reaches tree-sitter |
query |
Iterative (non-recursive) tree-sitter traversal helpers: find_descendants, find_first_descendant, node_text, ancestor lookups |
imports |
Per-file import/use-statement extraction, for building efferent-coupling (Ce) edges |
calls |
Per-file call-graph edge extraction (caller → callee), with external-call detection |
cfg |
Control-flow graph / basic-block construction for a function body (c, cpp, rust) |
c_standard |
Best-effort lower bound on the C standard (C99/C11/C23) a file's syntax requires |
fingerprint |
Structural hashing of function-like subtrees, for duplicate/clone detection across a corpus |
regions |
tools:off / tools:on ignored-region markers |
suppressions |
tools:suppress TOOL:RULE single-line suppression comments |
dead_code |
Preprocessor dead-code regions for C/C++ (#if 0, __cplusplus-gated branches, locally-provable macro definedness) |
dead_code_swift |
Dead-code regions for Swift's #if/#elseif/#else conditional compilation (compile-time-constant boolean conditions only — see module docs for why the C/C++ macro-definedness sub-problem doesn't apply to Swift) |
dead_code_csharp |
Dead-code regions for C#'s #if/#elif/#else conditional compilation — AST-based like dead_code_swift, but ports both C/C++ sub-problems (constant conditions and locally-provable #define/#undef symbol definedness) since C# has real nested preprocessor nodes and real #define |
path_ignore |
Compiled glob ignore-pattern sets for path filtering |
Everything below the registry is deliberately per-file: a module extracts what one parse tree contains, and leaves assembling a corpus-wide graph, dedup report, or coupling metric to the caller. This keeps the substrate's job narrow (one authoritative, correct answer per file) and lets each consumer choose its own storage model (in-memory, SQLite, whatever) without the substrate needing to know about it.
Language coverage varies by module — the registry knows about all 16
languages, but modules like cfg only model the languages they've been
built out for. A module never fabricates a result for a language it doesn't
support; it returns None (or an empty result) instead of guessing.
Feature flags
Not every consumer needs all 16 languages. Each language is an optional Cargo
feature; the all-languages convenience feature (enabled by default) pulls in
the full set.
| Feature | Language | Grammar crate |
|---|---|---|
lang-c |
C | tree-sitter-c |
lang-cpp |
C++ | tree-sitter-cpp |
lang-rust |
Rust | tree-sitter-rust |
lang-python |
Python | tree-sitter-python |
lang-javascript |
JavaScript | tree-sitter-javascript |
lang-typescript |
TypeScript | tree-sitter-typescript |
lang-go |
Go | tree-sitter-go |
lang-java |
Java | tree-sitter-java |
lang-csharp |
C# | tree-sitter-c-sharp |
lang-kotlin |
Kotlin | tree-sitter-kotlin-ng |
lang-swift |
Swift | tree-sitter-swift |
lang-php |
PHP | tree-sitter-php |
lang-ada |
Ada | tree-sitter-ada |
lang-fortran |
Fortran (free-form) | tree-sitter-fortran |
lang-scala |
Scala | tree-sitter-scala |
lang-lua |
Lua | tree-sitter-lua |
all-languages |
All of the above | — |
A consumer that only cares about C/C++, for example, would declare:
lang-parsing-substrate = { version = "0.5", default-features = false, features = ["lang-c", "lang-cpp"] }
Usage
# Cargo.toml — full language set (default)
lang-parsing-substrate = "0.5"
# Cargo.toml — C/C++ only
lang-parsing-substrate = { version = "0.5", default-features = false, features = ["lang-c", "lang-cpp"] }
use lang_parsing_substrate::{language_for_file, languages, supported_languages_report};
use std::path::Path;
// Detect language for a file
if let Some(lang) = language_for_file(Path::new("main.c")) {
let mut parser = tree_sitter::Parser::new();
parser.set_language(&lang).unwrap();
// parse...
}
// Enumerate compiled-in languages (reflects feature flags)
for info in languages() {
println!("{}: {:?}", info.name, info.extensions);
}
// Human-readable summary (for --supported-languages flags)
print!("{}", supported_languages_report());
Grammar crates are re-exported so consumers reach them transitively:
// No direct tree-sitter-rust dependency needed in your Cargo.toml
use lang_parsing_substrate::tree_sitter_rust;
Early exit before parsing
language_for_file trusts the extension. To skip archives, executables,
images and oversized files before they reach tree-sitter, classify first —
it reads only a bounded prefix, never the whole file:
use lang_parsing_substrate::{classify_file, ClassifyLimits, FileClass};
// The size limit is the caller's policy; the default is no limit.
let limits = ClassifyLimits { max_size: Some(16 << 20), ..Default::default() };
match classify_file(path, &limits)? {
FileClass::SourceText(_) => { /* parse it */ }
FileClass::Binary { kind, mime } => { /* skip-and-report, or try anyway */ }
FileClass::Oversize { size, limit } => { /* caller's call */ }
_ => { /* Empty, or a future variant */ }
}
The result is a heuristic and can be wrong in both directions (see the
classify module docs). Magic numbers come from the dependency-free
infer crate. Short ASCII-looking
signatures such as MZ or BM only count when the bytes also look binary.
classify(path, prefix, size, &limits) is the I/O-free core, for callers
that have already read the bytes.
The thresholds are calibrated in docs/classify-calibration.md; re-run
that check on a new corpus with cargo run --release --example classify_calibrate -- ROOT....
Analysis primitives
use lang_parsing_substrate::{call_edges, import_sources, build_function_cfg, structural_hash};
// Call-graph edges for every named function/macro in a parsed file
let edges = call_edges(tree.root_node(), source);
// Import/use-statement sources, for Ce/Ca coupling metrics
let imports = import_sources(&tree, source.as_bytes(), "rust");
// Control-flow graph for a single function body (c/cpp/rust)
if let Some(cfg) = build_function_cfg(func_node, source, "rust") {
println!("{} basic blocks", cfg.block_count());
}
// Best-effort lower bound on the C standard a file requires
if let Some(standard) = detect_min_c_standard(&tree, source.as_bytes()) {
println!("requires at least {standard:?}");
}
API
languages() -> &'static [LanguageInfo]— compiled-in language setlanguage_for_file(path: &Path) -> Option<Language>— grammar dispatch by extensionlanguage_for_key(key: &str) -> Option<Language>— grammar dispatch by registry keylanguage_info_for_file(path: &Path) -> Option<&'static LanguageInfo>classify/classify_file/FileClass/BinaryKind/TextEncoding/SourceText/ClassifyLimits— heuristic pre-parse file classification (classify)is_source_extension/is_parseable_extension(ext: &OsStr) -> bool— recursive-discovery gatessupported_languages_report() -> String— human-readable language summaryLanguageInfo/SlocMode— registry metadata and comment-style enum (drives SLOC calculation)find_descendants/find_first_descendant/find_ancestor/node_textand friends — traversal helpers (query)import_sources/distinct_import_count— import extraction (imports)call_edges/CallEdge/is_function_kind/get_function_name— call-graph extraction (calls)build_function_cfg/FunctionCfg/BasicBlock/CfgEdge— control-flow graphs (cfg)detect_min_c_standard/CStandard— C standard lower-bound detection (c_standard)function_fingerprints/duplicate_groups/Fingerprint/CorpusFingerprint— structural hashing (fingerprint)ignored_regions/IgnoredRegion—tools:off/tools:onmarkers (regions)suppressions/Suppression—tools:suppresscomments (suppressions)dead_code_ranges/DeadCodeRegion/DeadCodeReason— preprocessor dead-code regions, C/C++ only (dead_code)swift_dead_code_regions/SwiftDeadCodeRegion— Swift#if/#elseif/#elsedead-code regions (dead_code_swift)csharp_dead_code_regions/CSharpDeadCodeRegion— C##if/#elif/#elsedead-code regions (dead_code_csharp)PathIgnore— compiled glob ignore sets (path_ignore)
Building
cargo build # all languages (default)
cargo build --no-default-features --features lang-c,lang-cpp # subset
cargo test
Requires no C compiler — tree-sitter grammar crates ship pre-generated C sources
and compile via the cc crate.
Python bindings
The pyo3 Cargo feature (off by default) exposes the substrate's
language-agnostic analysis primitives as a Python extension module, published
to PyPI as prebuilt abi3 wheels (CPython 3.10+, one wheel per platform —
see docs/releasing.md):
pip install lang-parsing-substrate
Building it yourself from source uses maturin:
pip install maturin
maturin build --release # writes target/wheels/lang_parsing_substrate-*.whl
pip install target/wheels/lang_parsing_substrate-*.whl
import lang_parsing_substrate as lps
src = "fn helper(x: i32) -> i32 { x + 1 }\nfn main() { helper(41); }\n"
edges = lps.call_edges("rust", src) # [CallEdge(caller='main', callee='helper', ...)]
cfg = lps.function_cfg("rust", src, "main") # FunctionCfg | None
fps = lps.function_fingerprints("rust", src, min_nodes=1)
Python can't hand this crate a tree_sitter::Node/Tree directly — this
crate's tree-sitter version has no ABI relationship to tree-sitter's own,
separate Python bindings — so every bound function takes (language_key, source), parses internally, and returns owned data (CallEdge,
FunctionCfg, Fingerprint, Suppression, IgnoredRegion, LanguageInfo,
all plain attribute-holding classes). A consumer that also needs to walk the
tree itself (e.g. for domain-specific semantics this crate doesn't model)
still parses separately with a language-specific tree-sitter Python package;
the bindings here only cover the substrate's own primitives.
invoke build-wheel builds the wheel locally for testing. The actual PyPI
release happens in CI on a vX.Y.Z tag push, via Trusted Publishing (OIDC,
no API token) — see docs/releasing.md.
License
MIT — see LICENSE.
Metadata
Release files for lang-parsing-substrate 0.10.0
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | |
|---|---|---|---|---|
| lang_parsing_substrate-0.10.0.tar.gz | 155.2 kB | With provenance | Details |
Built distributions (wheels)
| File | Reset | |||
|---|---|---|---|---|
| lang_parsing_substrate-0.10.0-cp310-abi3-win_amd64.whl | CPython 3.10 | abi3 | Windows x86-64 | Details |
| lang_parsing_substrate-0.10.0-cp310-abi3-musllinux_1_2_x86_64.whl | CPython 3.10 | abi3 | Linux musl 1.2+ x86-64 | Details |
| lang_parsing_substrate-0.10.0-cp310-abi3-musllinux_1_2_aarch64.whl | CPython 3.10 | abi3 | Linux musl 1.2+ ARM64 | Details |
| lang_parsing_substrate-0.10.0-cp310-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl | CPython 3.10 | abi3 | Linux glibc 2.17+ x86-64 | Details |
| lang_parsing_substrate-0.10.0-cp310-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl | CPython 3.10 | abi3 | Linux glibc 2.17+ ARM64 | Details |
| lang_parsing_substrate-0.10.0-cp310-abi3-macosx_11_0_arm64.whl | CPython 3.10 | abi3 | macOS 11.0+ ARM64 | Details |
| lang_parsing_substrate-0.10.0-cp310-abi3-macosx_10_12_x86_64.whl | CPython 3.10 | abi3 | macOS 10.12+ x86-64 | Details |
Total release size: 24.7 MB
Release files / lang_parsing_substrate-0.10.0.tar.gz
| Download URL | lang_parsing_substrate-0.10.0.tar.gz |
|---|---|
| Size | 155.2 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
9e57a8518af390ea7ae6e3d831fae526f684b8667cfe3e31118d067de5bf15b1
|
|
BLAKE2b-256 checksum How to use checksums |
f4b515044f0c41a5c7a5cf94a85b6143e5547d766d4b8a1e2fc429b8ff7234aa
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Oct 6, 2026.
Transparency logRelease files / lang_parsing_substrate-0.10.0-cp310-abi3-win_amd64.whl
| Download URL | lang_parsing_substrate-0.10.0-cp310-abi3-win_amd64.whl |
|---|---|
| Size | 3.2 MB |
| Tags | CPython 3.10 Windows x86-64 abi3 |
|
SHA-256 checksum How to use checksums |
acb84519305531da3d703c75da41ed7d651d90316725fb87c65cdef6b21ffcaa
|
|
BLAKE2b-256 checksum How to use checksums |
6701368fe9459f187c9551b62911c1be5afdc737963e2d0e5e258f4a779290db
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Oct 6, 2026.
Transparency logRelease files / lang_parsing_substrate-0.10.0-cp310-abi3-musllinux_1_2_x86_64.whl
| Download URL | lang_parsing_substrate-0.10.0-cp310-abi3-musllinux_1_2_x86_64.whl |
|---|---|
| Size | 3.7 MB |
| Tags | CPython 3.10 Linux musl 1.2+ x86-64 abi3 |
|
SHA-256 checksum How to use checksums |
6fae715ab99241c09097bf96d278159ac18ecda06b2214ea68cba0b808bba95c
|
|
BLAKE2b-256 checksum How to use checksums |
d468cb20286673eb9df043602d3671d072b9db541a07451aa1eca539b69386d6
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Oct 6, 2026.
Transparency logRelease files / lang_parsing_substrate-0.10.0-cp310-abi3-musllinux_1_2_aarch64.whl
| Download URL | lang_parsing_substrate-0.10.0-cp310-abi3-musllinux_1_2_aarch64.whl |
|---|---|
| Size | 3.6 MB |
| Tags | CPython 3.10 Linux musl 1.2+ ARM64 abi3 |
|
SHA-256 checksum How to use checksums |
781cf9ee421bade6df105e82e1716ded3e7ca1c97ed793a123f68089d8f2219d
|
|
BLAKE2b-256 checksum How to use checksums |
4617778dc139c54128e04cc796fb85c605e72a3d250c6e733b80789fa5da1c7a
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Oct 6, 2026.
Transparency logRelease files / lang_parsing_substrate-0.10.0-cp310-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl
| Download URL | lang_parsing_substrate-0.10.0-cp310-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl |
|---|---|
| Size | 3.5 MB |
| Tags | CPython 3.10 Linux glibc 2.17+ x86-64 abi3 |
|
SHA-256 checksum How to use checksums |
03f0d44980f1c222a5b0d999ea6c3a097cc7d2b87ac801af1aca4bf346050c8e
|
|
BLAKE2b-256 checksum How to use checksums |
42f16069807fe19fad7a7be651b3cdb730a12f435c998cab813a1fca91f3df5c
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Oct 6, 2026.
Transparency logRelease files / lang_parsing_substrate-0.10.0-cp310-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl
| Download URL | lang_parsing_substrate-0.10.0-cp310-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl |
|---|---|
| Size | 3.6 MB |
| Tags | CPython 3.10 Linux glibc 2.17+ ARM64 abi3 |
|
SHA-256 checksum How to use checksums |
278a1d0088a86ca0b6abf83df9c3aad6d4f21458def59bc5d63b18e414f6121f
|
|
BLAKE2b-256 checksum How to use checksums |
0e5dbea296d25fbe4319fdeb437d2df8228632443dbfb6102c60025c752d079b
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Oct 6, 2026.
Transparency logRelease files / lang_parsing_substrate-0.10.0-cp310-abi3-macosx_11_0_arm64.whl
| Download URL | lang_parsing_substrate-0.10.0-cp310-abi3-macosx_11_0_arm64.whl |
|---|---|
| Size | 3.6 MB |
| Tags | CPython 3.10 abi3 macOS 11.0+ ARM64 |
|
SHA-256 checksum How to use checksums |
e48cb97378abd8052caecf29739a3ea06c1465f22c00643ee84bbae319cd2f53
|
|
BLAKE2b-256 checksum How to use checksums |
eccd315e69b196eda5a5d4411063bb4d18f3c723b8018d2a203383ed63c035c7
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Oct 6, 2026.
Transparency logRelease files / lang_parsing_substrate-0.10.0-cp310-abi3-macosx_10_12_x86_64.whl
| Download URL | lang_parsing_substrate-0.10.0-cp310-abi3-macosx_10_12_x86_64.whl |
|---|---|
| Size | 3.4 MB |
| Tags | CPython 3.10 abi3 macOS 10.12+ x86-64 |
|
SHA-256 checksum How to use checksums |
3ddaa30573ee2f70760afb7c5baee8c7338eca6d87a1083f8a36414c11e4dea9
|
|
BLAKE2b-256 checksum How to use checksums |
1b60ba87451cdc26a1f141ebbb980ca35b88edaf40a1482aeaed8e8c74918e13
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Oct 6, 2026.
Transparency logSecurity for lang-parsing-substrate 0.10.0
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
Full provenance
All 8 files in this release have been uploaded with provenance metadata.
Attestation for lang_parsing_substrate-0.10.0.tar.gz
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Oct 6, 2026.
Transparency logA note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.