Python Code Quality Analysis Tool - feed the results from 11 CQ tools straight into an LLM. Minimal tokens.
Project description
CQ - Python Code Quality Analysis Tool
Run 11+ code quality tools, aggregate results into one score, and surface the single most critical defect as a focused markdown prompt — ready to pipe to any LLM.
This can dramatically reduce the amount of noise for LLMs (and humans) and remove the need for them to know about these tools.
Note: It never edits your files. This is a job for you or an LLM. You may wish to run ruff check --fix and ruff format first.
cq check . -o llm # top defect as markdown, pipe to an LLM
cq check . # table overview of all scores
cq check . -o score # numeric score only, exits 1 on errors (CI gate)
Install
# install the `cq` command line tool from PyPi
uv tool install python-code-quality
# or, clone it then install
git clone https://github.com/rhiza-fr/py-cq.git
cd py-cq
uv tool install .
Tools
These tools are run in parallel except: When running '-o llm', we run sequentially and exit early at the first error.
| Order | Tool | Measures |
|---|---|---|
| 1 | compileall | Syntax errors |
| 2 | ruff | Lint / style |
| 3 | ty | Type errors |
| 4 | bandit | Security vulnerabilities |
| 5 | pytest | Test pass rate |
| 6 | coverage | Test coverage |
| 7 | radon cc | Cyclomatic complexity |
| 8 | radon mi | Maintainability index |
| 9 | radon hal | Halstead volume / bug estimate |
| 10 | vulture | Dead code |
| 11 | interrogate | Docstring coverage |
Diskcache is used to cache tool output for lightning fast re-runs. Sane defaults: <100 Mb, <5 days, No pickle risk.
Usage
cq check . # Table overview of scores for humans
cq check . -o llm # Top defect as markdown for LLMs
cq check . -o score # Numeric score only for CI
cq check . -o json # Detailed parsed JSON output for jq
cq check . -o raw # Raw tool output for debug
cq check path/to/file.py # Just one file (skips pytest and coverage)
cq check . --only ruff,ty # Run only specific tools
cq check . --skip bandit # Skip specific tools
cq check . --exclude demo # Exclude paths from all tools
cq check . --workers 1 # Run sequentially if you like things slow
cq check . --clear-cache # Clear cached results before running (rarely needed)
cq config path/to/project/ # Show effective tool configuration
Exit codes: cq check exits with code 1 if any tool metric falls below its error_threshold, making it suitable as a CI gate:
cq check . && deploy # block deploy on errors
cq check . -o score # print score, exit 1 on errors
Claude Code Integration
Add a stop hook to your project's .claude/settings.json so Claude automatically checks quality after each session and loops until clean:
{
"hooks": {
"Stop": [
{
"matcher": "",
"hooks": [
{
"type": "command",
"command": "cq check . -o score && echo 'CQ: all clear' || cq check . -o llm; true"
}
]
}
]
}
}
When the score passes, Claude sees CQ: all clear (~5 tokens). When it fails, Claude receives the targeted fix prompt and continues working. This automates the cq check . -o llm | claude -p "fix this" loop.
Note: Use project-level
.claude/settings.json, not global settings — this hook only makes sense in Python projects.
As a slash command (skill)
For manual invocation, create .claude/commands/cq-fix.md:
$(cq check . -o llm)
Then invoke it with /cq-fix in Claude Code. The $(...) embeds the live cq output directly into the prompt before Claude starts, so it sees the issue immediately without an extra tool call.
Hook vs skill:
- Stop hook — automatic, runs after every session, best for unattended loops
- Skill — manual
/cq-fix, gives you explicit control over when to check
Table output
> cq check .
┏━━━━━━━━━━━━━━━━━━┳━━━━━━━━━━┳━━━━━━━━━━━━━━━━━━━━━━━━━━━┳━━━━━━━━━┳━━━━━━━━━━┓
┃ Tool ┃ Time ┃ Metric ┃ Score ┃ Status ┃
┡━━━━━━━━━━━━━━━━━━╇━━━━━━━━━━╇━━━━━━━━━━━━━━━━━━━━━━━━━━━╇━━━━━━━━━╇━━━━━━━━━━┩
│ compile │ 0.42s │ compile │ 1.000 │ OK │
│ ruff │ 0.17s │ lint │ 1.000 │ OK │
│ ty │ 0.33s │ type_check │ 1.000 │ OK │
│ bandit │ 0.56s │ security │ 1.000 │ OK │
│ pytest │ 0.91s │ tests │ 1.000 │ OK │
│ coverage │ 1.26s │ coverage │ 0.910 │ OK │
│ radon cc │ 0.32s │ simplicity │ 0.982 │ OK │
│ radon mi │ 0.38s │ maintainability │ 0.869 │ OK │
│ radon hal │ 0.30s │ file_bug_free │ 0.928 │ OK │
│ radon hal │ │ file_smallness │ 0.851 │ OK │
│ radon hal │ │ functions_bug_free │ 0.913 │ OK │
│ radon hal │ │ functions_smallness │ 0.724 │ OK │
│ vulture │ 0.32s │ dead_code │ 1.000 │ OK │
│ interrogate │ 0.36s │ doc_coverage │ 1.000 │ OK │
│ │ │ Score │ 0.965 │ │
└──────────────────┴──────────┴───────────────────────────┴─────────┴──────────┘
Single score output
> cq check . -o score
0.9662730667181059 # this is designed to approach but not reach 1.0
Json output
> cq check . -o json
[
{
"tool_name": "compile",
"metrics": {
"compile": 1.0
},
"details": {},
"duration_s": 0.05611889995634556
}
...
]
Raw output
> cq check . -o raw
[
{
"tool_name": "compile",
"command": "D:\\ai\\py-cq\\.venv\\Scripts\\python.exe -m compileall -r 10 -j 8 . -x .*venv",
"stdout": "",
"stderr": "",
"return_code": 0,
"timestamp": "2026-02-20 10:01:22"
}
...
]
Both json and raw output pipe cleanly to jq:
# Get the coverage section
cq check . -o raw | jq '.[] | select(.tool_name == "coverage")'
# Get parsed coverage metrics only
cq check . -o json | jq '.[] | select(.tool_name == "coverage") | .metrics'
Configuration
Add a [tool.cq] section to your project's pyproject.toml:
[tool.cq]
# Skip tools that are slow or not relevant to your project
disable = ["coverage", "interrogate"]
# Exclude paths from all tools (merged with --exclude CLI flag)
exclude = ["demo", "docs"]
# Lines of source context shown around each defect in LLM output (default: 15)
context_lines = 15
# Override warning/error thresholds per tool
[tool.cq.thresholds.coverage]
warning = 0.9
error = 0.7
Tool IDs match the keys in config/config.yaml: compile, ruff, ty, bandit, pytest, coverage, radon-cc, radon-mi, radon-hal, vulture, interrogate.
Default config
python:
compile:
command: "{python} -m compileall -r 10 -j 8 \"{context_path}\" -x .*venv"
parser: "CompileParser"
order: 1
warning_threshold: 0.9999
error_threshold: 0.9999
ruff:
command: "{python} -m ruff check --output-format concise --no-cache \"{context_path}\"{exclude}"
exclude_format: " --exclude {path}"
parser: "RuffParser"
order: 2
warning_threshold: 0.9999
error_threshold: 0.9
ty:
command: "{python} -m ty check --output-format concise --color never \"{context_path}\"{exclude}"
exclude_format: " --exclude {path}"
parser: "TyParser"
order: 3
warning_threshold: 0.9999
error_threshold: 0.8
run_in_target_env: true
extra_deps:
- ty
bandit:
command: "{python} -m bandit -r \"{context_path}\" -f json -q -s B101 --severity-level medium --exclude \"{input_path_posix}/.venv,{input_path_posix}/tests{exclude}\""
exclude_format: ",{input_path_posix}/{path}"
parser: "BanditParser"
order: 4
warning_threshold: 0.9999
error_threshold: 0.8
pytest:
command: "{python} -m pytest -v \"{context_path}\"{exclude}"
exclude_format: " --ignore {path}"
parser: "PytestParser"
order: 5
warning_threshold: 1.0
error_threshold: 1.0
run_in_target_env: true
extra_deps:
- pytest
coverage:
command: "{python} -m coverage run --omit=*/tests/*,*/test_*.py -m pytest \"{context_path}\" && {python} -m coverage report --omit=*/tests/*,*/test_*.py"
parser: "CoverageParser"
order: 6
warning_threshold: 0.9
error_threshold: 0.5
run_in_target_env: true
extra_deps:
- coverage
- pytest
radon-cc:
command: "{python} -m radon cc --json \"{context_path}\""
parser: "ComplexityParser"
order: 7
warning_threshold: 0.6
error_threshold: 0.4
radon-mi:
command: "{python} -m radon mi -s --json \"{context_path}\""
parser: "MaintainabilityParser"
order: 8
warning_threshold: 0.6
error_threshold: 0.4
radon-hal:
command: "{python} -m radon hal -f --json \"{context_path}\""
parser: "HalsteadParser"
order: 9
warning_threshold: 0.5
error_threshold: 0.3
vulture:
command: "{python} -m vulture \"{context_path}\" --min-confidence 80 --exclude .venv,dist,.*_cache,docs,.git{exclude}"
exclude_format: ",{path}"
parser: "VultureParser"
order: 10
warning_threshold: 0.9999
error_threshold: 0.8
interrogate:
command: "{python} -m interrogate \"{context_path}\" -e tests{exclude} -v --fail-under 0"
exclude_format: " -e {path}"
parser: "InterrogateParser"
order: 11
warning_threshold: 0.8
error_threshold: 0.3
Respect
Many thanks to all the wonderful maintainers of :
Project details
Release history Release notifications | RSS feed
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Filter files by name, interpreter, ABI, and platform.
If you're not sure about the file name format, learn more about wheel file names.
Copy a direct link to the current filters
File details
Details for the file python_code_quality-0.1.16.tar.gz.
File metadata
- Download URL: python_code_quality-0.1.16.tar.gz
- Upload date:
- Size: 33.2 kB
- Tags: Source
- Uploaded using Trusted Publishing? Yes
- Uploaded via: twine/6.1.0 CPython/3.13.12
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
5e65991a5c620505afd934a63a69ccd02e15550e05edf21fe55f214b878e6ed5
|
|
| MD5 |
0f723c5c6cd8e6365a37b1f31bca48aa
|
|
| BLAKE2b-256 |
100b4682a2dad5b818468527589d0ccacc98af54f7a91c29765fe5f0d7e6aed2
|
Provenance
The following attestation bundles were made for python_code_quality-0.1.16.tar.gz:
Publisher:
python-publish.yml on rhiza-fr/py-cq
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
python_code_quality-0.1.16.tar.gz -
Subject digest:
5e65991a5c620505afd934a63a69ccd02e15550e05edf21fe55f214b878e6ed5 - Sigstore transparency entry: 1392578631
- Sigstore integration time:
-
Permalink:
rhiza-fr/py-cq@5c22f37ddbe46565e99a8233bbb865bcdf00d880 -
Branch / Tag:
refs/tags/v0.1.16 - Owner: https://github.com/rhiza-fr
-
Access:
public
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
python-publish.yml@5c22f37ddbe46565e99a8233bbb865bcdf00d880 -
Trigger Event:
release
-
Statement type:
File details
Details for the file python_code_quality-0.1.16-py3-none-any.whl.
File metadata
- Download URL: python_code_quality-0.1.16-py3-none-any.whl
- Upload date:
- Size: 48.2 kB
- Tags: Python 3
- Uploaded using Trusted Publishing? Yes
- Uploaded via: twine/6.1.0 CPython/3.13.12
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
bd6c3b975c10dad9566d886046ba2269615853a516d8b536856b4ca0a28d87c9
|
|
| MD5 |
d2aa701b372ed4533d3c084058d6a304
|
|
| BLAKE2b-256 |
687f187f796e7fccf0fbca4e08b69c48aa61fed7b84feac85478f27c44b78502
|
Provenance
The following attestation bundles were made for python_code_quality-0.1.16-py3-none-any.whl:
Publisher:
python-publish.yml on rhiza-fr/py-cq
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
python_code_quality-0.1.16-py3-none-any.whl -
Subject digest:
bd6c3b975c10dad9566d886046ba2269615853a516d8b536856b4ca0a28d87c9 - Sigstore transparency entry: 1392578633
- Sigstore integration time:
-
Permalink:
rhiza-fr/py-cq@5c22f37ddbe46565e99a8233bbb865bcdf00d880 -
Branch / Tag:
refs/tags/v0.1.16 - Owner: https://github.com/rhiza-fr
-
Access:
public
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
python-publish.yml@5c22f37ddbe46565e99a8233bbb865bcdf00d880 -
Trigger Event:
release
-
Statement type: