fleshing out SOURCE/SINK categories, highlighting code on callgraph node click