🤖 AI Analysis

Final verdict: SAFE

The package appears to be legitimate with low risks in credential harvesting, obfuscation, and shell execution. However, the low maintainer activity and poor metadata quality raise some concerns about its long-term viability and management.

Low risk in credential harvesting and obfuscation
Potential network risks mitigated by legitimate use of CAPTCHA
Concerns about package maintenance and metadata quality

Per-check LLM notes

Network: The network call to Cloudflare Turnstile suggests legitimate use for CAPTCHA verification.
Shell: Subprocess calls to manage.py commands are typical for Django applications but could potentially be exploited if not properly sanitized.
Obfuscation: No obfuscation patterns detected, indicating low risk.
Credentials: No credential harvesting patterns detected, indicating low risk.
Metadata: The package shows signs of low maintainer activity and poor metadata quality, which may indicate it could be abandoned or poorly managed.

🔬 Heuristic Checks

⚠ Outbound Network Calls score 1.5

Found 1 network call pattern(s)

try: response = requests.post("https://challenges.cloudflare.com/turnstile/v0/siteverify",

✓ Code Obfuscation

No obfuscation patterns detected

⚠ Shell / Subprocess Execution score 8.0

Found 4 shell execution pattern(s)

"--clear", ] subprocess.run(cmd_static, env=create_env(),
abase migrations...") subprocess.run( [sys.executable, manage_py_path, "migrate"],
eating superuser...") subprocess.run( [sys.executable, manage_py_path, "createsuperus
the command's context subprocess.run( [sys.executable, manage_py_path, "runserver", f

✓ Credential Harvesting

No credential harvesting patterns detected

✓ Typosquatting

No typosquatting candidates detected

✓ Registered Email Domain

No author email provided

✓ Suspicious Page Links

All external links appear legitimate

✓ Git Repository History

No GitHub repository linked

No GitHub repository link found

⚠ Maintainer History score 6.0

3 maintainer concern(s) found

Author name is missing or very short
Author "" appears to have only 1 package on PyPI (new or inactive account)
Package has no PyPI classifiers (low effort / metadata quality)

✓ Known CVE Vulnerabilities

No known vulnerabilities found in OSV database.

💡 AI App Starter Prompt

Use this prompt to build a project with Dreamy-admin

Create a fully-functional mini-application called 'TherapyAdmin' using the Python package 'Dreamy-admin'. This application will serve as an administrative tool for therapists to manage their schedules, patient records, and billing. Here’s a step-by-step guide on what your application should do and how it should utilize the 'Dreamy-admin' package:

1. **User Authentication**: Implement user registration and login functionalities. Users (therapists) should be able to create accounts and securely log in. Use 'Dreamy-admin' to set up the necessary authentication routes and models.
2. **Dashboard**: Develop a dashboard where therapists can view their upcoming appointments, patient lists, and financial summaries. Customize the layout using 'Dreamy-admin' templates and integrate real-time data fetching.
3. **Appointment Management**: Allow therapists to add, edit, and delete appointments. Each appointment should include details such as date, time, patient name, and notes. Utilize 'Dreamy-admin' models and forms to manage these entries efficiently.
4. **Patient Records**: Create a feature to maintain detailed patient records including medical history, treatment plans, and progress notes. Ensure these records are easily searchable and accessible. Use 'Dreamy-admin' to design and manage complex record structures.
5. **Billing System**: Integrate a simple billing system where therapists can track payments made by patients for sessions. Include options to generate invoices and mark payments as received. Leverage 'Dreamy-admin' for database management and transaction logging.
6. **Notifications**: Implement a notification system that alerts therapists of upcoming appointments and overdue payments via email or SMS. Use 'Dreamy-admin' hooks and services to trigger these notifications automatically.
7. **Customization Options**: Provide customization options for therapists to personalize their experience, such as changing themes or setting default preferences. Use 'Dreamy-admin' configurations to enable these settings.

Ensure the application is responsive and user-friendly, making use of 'Dreamy-admin' components and utilities for a seamless interface. Additionally, document each step of development clearly, explaining how 'Dreamy-admin' features were utilized to achieve specific functionalities.