[medium] setup.py-only monorepo packages are never scanned

[EdmundHee]

setup.py-only monorepo packages are never scanned

Severity	medium
Kind	logic-bug
Location	src/frameworks/detector.ts → hasAnyDependencyFile
Module	src/frameworks
Finding ID	f-322199

Failure scenario

hasPythonDependency explicitly supports setup.py, but hasAnyDependencyFile only recognizes package.json, requirements.txt, and pyproject.toml. An immediate monorepo subdirectory whose sole manifest is setup.py containing install_requires=['fastapi'] is skipped, so detectFrameworks omits "fastapi".

Suggested test

Create a root with packages/api/setup.py containing FastAPI in install_requires and no other manifest; expect detectFrameworks(root) to contain "fastapi".

---

How to work this issue

Open a Claude Code session in this repo and say
"work the dev-cli finding f-322199 in src/frameworks/detector.ts".

If this is not a real defect, close the issue with the false-positive label — dev-cli
records the fingerprint and will never raise it again. Closing it without that label marks the
finding fixed instead.

_{Raised by dev-cli · repo codemap-cli · scan 2026-08-15T05-14-42 · fingerprint 32219933fadb}