AI Analysis
Final verdict: SUSPICIOUS
The package shows minimal risk in terms of network activity, shell execution, and obfuscation. However, the metadata risk is slightly elevated due to the author's limited presence on the PyPI platform.
- Author has only one published package
- Metadata risk noted but insufficient for high-risk classification
Per-check LLM notes
- Network: No network calls detected, which is normal unless the package is expected to communicate with external services.
- Shell: No shell execution patterns detected, indicating no direct system command execution from the package.
- Obfuscation: No obfuscation patterns detected, indicating low risk.
- Credentials: No credential harvesting patterns detected, indicating low risk.
- Metadata: The author has only one package, which may indicate a new or less active account, raising some suspicion but not conclusive evidence of malice.
Heuristic Checks
Outbound Network Calls
No suspicious network call patterns found
Code Obfuscation
No obfuscation patterns detected
Shell / Subprocess Execution
No shell execution patterns detected
Credential Harvesting
No credential harvesting patterns detected
Typosquatting
No typosquatting candidates detected
Registered Email Domain
Email domain looks legitimate: mathewmoon.net
Suspicious Page Links
All external links appear legitimate
Git Repository History
Repository mathewmoon/dynamojo appears legitimate
Maintainer History
score 2.0
1 maintainer concern(s) found
Author "Mathew Moon" appears to have only 1 package on PyPI (new or inactive account)
Known CVE Vulnerabilities
No known vulnerabilities found in OSV database.
AI App Starter Prompt
Use this prompt to build a project with Dynamojo
Create a mini-application called 'Bookshelf' using the Python package 'Dynamojo', which is an ORM for DynamoDB. This application will serve as a personal book tracking system where users can manage their collection of books. The app should allow users to add new books, update existing ones, delete books from the shelf, and search for specific books by title or author. Additionally, implement a feature that allows users to mark books as 'read' or 'unread'. Each book entry should store the following details: Title, Author, Publication Year, Genre, and Read Status. To utilize 'Dynamojo', first set up your DynamoDB table using the provided schema that includes all necessary fields. Then, use 'Dynamojo' to create models that map directly to these table structures, allowing for easy querying and manipulation of data through Python code. Ensure that the application provides a simple command-line interface (CLI) for interacting with the database, making it user-friendly for managing the book collection. As you develop the application, focus on leveraging 'Dynamojo's capabilities to simplify interactions with DynamoDB, such as handling complex queries efficiently and managing data relationships seamlessly. This project aims to demonstrate the power of 'Dynamojo' in building robust and scalable applications that interact with NoSQL databases.