AI Analysis
Final verdict: SUSPICIOUS
The package shows potential signs of being a legitimate tool with some suspicious elements, primarily due to the newness of the maintainer account and the package itself, alongside recent activity that may indicate premature or malicious intent.
- Metadata risk score of 7 out of 10 due to the newness of the maintainer and package.
- Suspicious recent activity in the repository.
Per-check LLM notes
- Network: No network calls detected.
- Shell: Shell execution is used for installing dependencies and building the package, which is common but should be reviewed for legitimacy.
- Obfuscation: No obfuscation patterns detected, indicating low risk.
- Credentials: No credential harvesting patterns detected, indicating low risk.
- Metadata: The repository's recent activity and the newness of both the maintainer account and the package raise suspicion.
Heuristic Checks
Outbound Network Calls
No suspicious network call patterns found
Code Obfuscation
No obfuscation patterns detected
Shell / Subprocess Execution
score 4.0
Found 2 shell execution pattern(s)
") try: subprocess.run( ["uv", "pip", "install", "cython", "setuptld_dir) result = subprocess.run( ["uv", "run", "python", "setup.py", "build
Credential Harvesting
No credential harvesting patterns detected
Typosquatting
No typosquatting candidates detected
Registered Email Domain
No author email provided
Suspicious Page Links
All external links appear legitimate
Git Repository History
score 5.0
Git history flags: Repository has zero stars and zero forks
Repository has zero stars and zero forksAll 6 commits happened within 24 hours
Maintainer History
score 4.0
2 maintainer concern(s) found
Only one version has ever been released — brand new packageAuthor "CyBuilder Contributors" appears to have only 1 package on PyPI (new or inactive account)
Known CVE Vulnerabilities
No known vulnerabilities found in OSV database.
AI App Starter Prompt
Use this prompt to build a project with CyBuilder
构建一个名为 'CodeShield' 的小型应用程序，该应用利用 Python 包 'CyBuilder' 来保护和优化用户的 Python 脚本。CodeShield 应用程序旨在接收用户提供的 Python (.py) 文件作为输入，并通过 CyBuilder 将其编译成 .pyd 或 .so 格式的二进制文件，从而保护源代码免受逆向工程攻击，并提高脚本的运行效率。 步骤如下： 1. 用户界面设计：创建一个简单的图形用户界面（GUI），允许用户选择要转换的 Python 脚本文件。 2. 文件读取与验证：实现一个功能，读取用户指定的 Python 脚本文件，并检查其是否为有效的 Python 脚本。 3. 使用 CyBuilder 编译：使用 CyBuilder 将验证后的 Python 脚本编译为二进制格式（.pyd 或 .so）。 4. 输出与反馈：将生成的二进制文件保存在指定位置，并提供用户友好的反馈信息，如成功消息或错误提示。 5. 性能测试：集成一个简单的方法来比较原始 Python 脚本和编译后二进制文件的执行时间，以直观展示性能提升。 建议特性包括但不限于： - 支持多平台（Windows, Linux, macOS） - 提供详细的日志记录和错误报告功能 - 实现一个简单的帮助文档系统，指导用户如何使用 CodeShield