As-A-Person

v0.1.2 safe
4.0
Medium Risk

A simple Python library for converting URLs to citable people

🤖 AI Analysis

Final verdict: SAFE

The package appears to serve its intended purpose without significant indicators of malicious activity. However, the low repository activity and missing author information warrant caution.

  • Low network, shell, obfuscation, and credential risks.
  • Moderate metadata risk due to low repository activity and missing author information.
Per-check LLM notes
  • Network: The observed network calls appear to be making HTTP GET requests, possibly to validate or retrieve information based on ISNI identifiers, which could be legitimate for certain applications.
  • Shell: No shell execution patterns were detected in the provided code snippets.
  • Obfuscation: No obfuscation patterns detected, indicating low risk of malicious intent.
  • Credentials: No credential harvesting patterns detected, suggesting secure handling of secrets.
  • Metadata: The repository's low activity and missing author information raise concerns but do not definitively indicate malicious intent.

🔬 Heuristic Checks

⚠ Outbound Network Calls score 4.5

Found 3 network call pattern(s)

  • "ISNI": isni}) response = requests.get(url) if not response.ok: raise ValueError(f"Inva
  • tch(url: str): response = requests.get(url, headers={"Accept": "application/json"}) if not resp
  • dFormat, str]: response = requests.get(url) if not response.ok: raise ValueError(f"Inva
✓ Code Obfuscation

No obfuscation patterns detected

✓ Shell / Subprocess Execution

No shell execution patterns detected

✓ Credential Harvesting

No credential harvesting patterns detected

✓ Typosquatting

No typosquatting candidates detected

✓ Registered Email Domain

Email domain looks legitimate: certusinnovations.com>

⚠ Suspicious Page Links score 2.0

Found 1 suspicious link(s) on the package page

  • Non-HTTPS external link: http://semver.org/
⚠ Git Repository History score 2.5

Git history flags: Repository has zero stars and zero forks

  • Repository has zero stars and zero forks
⚠ Maintainer History score 4.0

2 maintainer concern(s) found

  • Author name is missing or very short
  • Author "" appears to have only 1 package on PyPI (new or inactive account)
✓ Known CVE Vulnerabilities

No known vulnerabilities found in OSV database.

💡 AI App Starter Prompt

Use this prompt to build a project with As-A-Person 
Build a simple Python application using the As-A-Person package to demonstrate its core features.