Struct ModuleInfo 

pub struct ModuleInfo {

    pub file_id: FileId,
    pub exports: Vec<ExportInfo>,
    pub imports: Vec<ImportInfo>,
    pub re_exports: Vec<ReExportInfo>,
    pub dynamic_imports: Vec<DynamicImportInfo>,
    pub dynamic_import_patterns: Vec<DynamicImportPattern>,
    pub require_calls: Vec<RequireCallInfo>,
    pub package_path_references: Vec<String>,
    pub member_accesses: Vec<MemberAccess>,
    pub whole_object_uses: Vec<String>,
    pub has_cjs_exports: bool,
    pub has_angular_component_template_url: bool,
    pub content_hash: u64,
    pub suppressions: Vec<Suppression>,
    pub unknown_suppression_kinds: Vec<UnknownSuppressionKind>,
    pub unused_import_bindings: Vec<String>,
    pub type_referenced_import_bindings: Vec<String>,
    pub value_referenced_import_bindings: Vec<String>,
    pub line_offsets: Vec<u32>,
    pub complexity: Vec<FunctionComplexity>,
    pub flag_uses: Vec<FlagUse>,
    pub class_heritage: Vec<ClassHeritageInfo>,
    pub injection_tokens: Vec<(String, String)>,
    pub local_type_declarations: Vec<LocalTypeDeclaration>,
    pub public_signature_type_references: Vec<PublicSignatureTypeReference>,
    pub namespace_object_aliases: Vec<NamespaceObjectAlias>,
    pub iconify_prefixes: Vec<String>,
    pub iconify_icon_names: Vec<String>,
    pub auto_import_candidates: Vec<String>,
    pub directives: Vec<String>,
    pub security_sinks: Vec<SinkSite>,
    pub security_sinks_skipped: u32,
    pub tainted_bindings: Vec<TaintedBinding>,
    pub sanitized_sink_args: Vec<SanitizedSinkArg>,
    pub security_control_sites: Vec<SecurityControlSite>,
}

Extracted module information from a single file.

Fields

file_id: FileId

Unique identifier for this file.

exports: Vec<ExportInfo>

All export declarations in this module.

imports: Vec<ImportInfo>

All import declarations in this module.

re_exports: Vec<ReExportInfo>

All re-export declarations (e.g., export { foo } from './bar').

dynamic_imports: Vec<DynamicImportInfo>

All dynamic import() calls with string literal sources.

dynamic_import_patterns: Vec<DynamicImportPattern>

Dynamic import patterns.

require_calls: Vec<RequireCallInfo>

All require() calls.

package_path_references: Vec<String>

Package names statically referenced through package path resolution.

member_accesses: Vec<MemberAccess>

Static member access expressions (e.g., Status.Active).

whole_object_uses: Vec<String>

Identifiers used in whole-object access patterns.

has_cjs_exports: bool

Whether this module uses CommonJS exports.

has_angular_component_template_url: bool

Whether this module declares an Angular component templateUrl.

content_hash: u64

xxh3 hash of the file content for incremental caching.

suppressions: Vec<Suppression>

Inline suppression directives parsed from comments.

unknown_suppression_kinds: Vec<UnknownSuppressionKind>

Suppression tokens that did not parse to any known IssueKind. Surfaced as StaleSuppression findings via find_stale so users see typos or obsolete kind names instead of having the entire marker silently discarded. See issue #449.

unused_import_bindings: Vec<String>

Local names of import bindings that are never referenced in this file. Populated via oxc_semantic scope analysis. Used at graph-build time to skip adding references for imports whose binding is never read, improving unused-export detection precision.

type_referenced_import_bindings: Vec<String>

Local import bindings that are referenced from TypeScript type positions. Used to distinguish value-namespace and type-namespace references when a module exports both const X and type X.

value_referenced_import_bindings: Vec<String>

Local import bindings referenced from runtime/value positions.

line_offsets: Vec<u32>

Pre-computed byte offsets where each line starts.

complexity: Vec<FunctionComplexity>

Per-function complexity metrics.

flag_uses: Vec<FlagUse>

Feature flag use sites.

class_heritage: Vec<ClassHeritageInfo>

Heritage metadata for exported classes that declare implements.

injection_tokens: Vec<(String, String)>

Angular InjectionToken<Interface> declarations, as (token_export_name, interface_name) pairs. Recorded only for new InjectionToken<I>(...) initializers whose InjectionToken is imported from @angular/core. The analyze layer follows the token’s interface type argument to the classes that implement it so a template member call through inject(TOKEN) credits the concrete implementation. See issue #920 (follow-up to #911 / #913).

local_type_declarations: Vec<LocalTypeDeclaration>

Local type-capable declarations.

public_signature_type_references: Vec<PublicSignatureTypeReference>

Type references in exported public signatures.

namespace_object_aliases: Vec<NamespaceObjectAlias>

Aliases of namespace imports re-exported through an object literal.

iconify_prefixes: Vec<String>

Deduped Iconify collection prefixes found in static icon props.

iconify_icon_names: Vec<String>

Deduped Nuxt UI i-<collection>-<icon> icon class suffixes found in static script-side icon properties.

auto_import_candidates: Vec<String>

Bare identifiers that may be resolved by framework auto-imports.

directives: Vec<String>

File-level string directives in source order (e.g. "use client", "use server", "use strict"). Captured from Program::directives. Consumed by the security client-server-leak detector to identify React Server Component client boundaries.

security_sinks: Vec<SinkSite>

Captured security sink sites (category-blind). Consumed by the catalogue-driven tainted_sink detector. Captured only by JS/TS extraction; empty for CSS/MDX/etc. See security_matchers.toml.

security_sinks_skipped: u32

Count of sink-shaped nodes whose callee could not be flattened to a static path (dynamic dispatch, computed members, aliased bindings). Surfaced in-band so an empty catalogue result with a non-zero count is not a clean bill.

tainted_bindings: Vec<TaintedBinding>

Local bindings whose initializer (or destructured object) is a flattened member-access path. Used by the security tainted_sink detector to back-trace a sink argument to a known untrusted source: the analyze layer matches each binding’s source_path against the data-driven source catalogue (security_matchers.toml [[source]] rows) and treats the matching local names as source-tainted. Intra-module and name-based (no scope analysis); a conservative association, never a taint proof.

sanitized_sink_args: Vec<SanitizedSinkArg>

Sink arguments that were recognized as sanitizer calls at extraction time. Used for direct sink calls such as el.innerHTML = DOMPurify.sanitize(input).

security_control_sites: Vec<SecurityControlSite>

Known defensive control call sites found in this module. Consumed only by the fallow security --surface agent JSON path.

Implementations

impl ModuleInfo

pub fn release_resolution_payload(&mut self)

Release extraction payload that resolution has already copied into the graph.

This keeps fields needed by analysis, health, security, LSP, coverage, and hash drift checks, while dropping vectors that otherwise duplicate data owned by ResolvedModule or already credited into the module graph.

Trait Implementations

impl Clone for ModuleInfo

fn clone(&self) -> ModuleInfo

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ModuleInfo

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.