🤖 AI Analysis

Final verdict: SAFE

The package shows very low risk indicators with no network calls, shell executions, obfuscations, or credential risks. The metadata risk is slightly elevated due to the maintainer having only one package, but this alone does not suggest a supply-chain attack.

Low network and shell execution risks
No signs of obfuscation or credential harvesting
Maintainer has only one package

Per-check LLM notes

Network: No network calls suggest the package does not engage in external communications which is normal unless it's designed to work offline or locally.
Shell: No shell execution suggests there are no direct system command invocations, reducing risk of unauthorized system access.
Obfuscation: No obfuscation patterns detected, indicating low risk.
Credentials: No credential harvesting patterns detected, indicating low risk.
Metadata: The maintainer has only one package, suggesting they may be new or less active, but no other red flags are present.

🔬 Heuristic Checks

✓ Outbound Network Calls

No suspicious network call patterns found

✓ Code Obfuscation

No obfuscation patterns detected

✓ Shell / Subprocess Execution

No shell execution patterns detected

✓ Credential Harvesting

No credential harvesting patterns detected

✓ Typosquatting

No typosquatting candidates detected

✓ Registered Email Domain

No author email provided

✓ Suspicious Page Links

All external links appear legitimate

✓ Git Repository History

Repository sudoDeVinci/AsyncShipStation appears legitimate

⚠ Maintainer History score 2.0

1 maintainer concern(s) found

Author "sudoDeVinci" appears to have only 1 package on PyPI (new or inactive account)

✓ Known CVE Vulnerabilities

No known vulnerabilities found in OSV database.

💡 AI App Starter Prompt

Use this prompt to build a project with AsyncShipStation

Create a comprehensive shipping management tool using the AsyncShipStation Python package. This tool will allow users to manage their shipments more efficiently by integrating key functionalities of the ShipStation API into a user-friendly interface. Here are the steps and features to implement:

1. **Setup and Authentication**: Begin by setting up your environment with Python and installing the AsyncShipStation package. Configure the application to authenticate with the ShipStation API using your credentials.

2. **User Interface Design**: Design a simple but effective command-line interface (CLI) or a basic web interface using Flask. The UI should allow users to perform actions such as viewing orders, creating shipments, and managing carriers.

3. **Order Management**: Implement functionality to fetch, view, and filter orders based on various criteria such as date range, order status, and customer details. Users should be able to easily navigate through different pages of orders if there are many.

4. **Shipment Creation**: Enable users to create shipments directly from the app. Include options to select carriers, enter shipping addresses, and specify shipment contents. The app should automatically calculate shipping rates based on the selected carrier and package dimensions.

5. **Carrier Management**: Provide tools to add, edit, and remove carriers from the system. Users should be able to configure carrier settings and view performance metrics like delivery times and costs.

6. **Reporting and Analytics**: Integrate reporting capabilities that allow users to generate reports on shipment performance, including metrics like average delivery time, total cost of shipments, and carrier reliability. These reports should be exportable to CSV or PDF formats.

7. **Error Handling and Logging**: Ensure robust error handling and logging mechanisms are in place to capture and report any issues encountered during API interactions or other operations.

8. **Documentation and Help**: Create comprehensive documentation for both developers and end-users. Include examples of how to use each feature and troubleshoot common issues.

Throughout the development process, leverage the AsyncShipStation package to handle all communication with the ShipStation API asynchronously, ensuring smooth and efficient operation even when dealing with large volumes of data or multiple concurrent requests.