internal/

Package interproc provides interprocedural analysis capabilities for context-sensitive call graph analysis and taint tracking.

Package priority computes composite risk scores combining capability, reachability, CVE, and taint analysis signals.

Package taint identifies packages that act as source→sink conduits — the highest-signal supply-chain finding: capabilities that both receive untrusted input and perform a dangerous operation.