scaninfo

type Info struct {
	// Target is what was scanned, for the report masthead.
	Target string

	Files   int // source files under the frontends' own selection policy
	Skipped int // of those, how many a frontend could not lower
	Lines   int // their physical line count, blanks and comments included

	Packages  int
	Functions int // call-graph nodes

	// RulesLive is the subset of Rules the engine seeded, which is only the
	// dataflow rules — every `kind: secret` and `kind: dangerous-call` rule is
	// excluded yet is genuinely evaluated by the other passes.
	Rules     int
	RulesLive int

	// SourceSites and SinkSites count call sites whose callee matches a source or
	// sink glob. A workload figure, not a bound on findings: it ignores `#idx`
	// pinning and `when:` guards, and misses seeding that is not a call at all.
	SourceSites int
	SinkSites   int

	// Wall is the whole scan. Convert and Analysis partition most of it; Index,
	// RuleSel and Taint are disjoint sub-spans of Analysis. What is left of
	// Analysis is the passes that run CONCURRENTLY with the taint engine and so
	// add no measurable wall time of their own.
	Wall     time.Duration
	Convert  time.Duration
	Analysis time.Duration
	Index    time.Duration
	RuleSel  time.Duration
	Taint    time.Duration

	// PeakBytes is runtime.MemStats.Sys — a Go-runtime high-water mark, not RSS.
	// Sys only grows, so a single late sample is a true peak; HeapAlloc is the
	// post-GC live heap and TotalAlloc is cumulative. Filled by the CLI, not by
	// the scan: reading it stops the world, which a library call made in a loop
	// must not do. Zero when nobody sampled.
	PeakBytes uint64
}