FTL-Extract

v0.11.0 suspicious
4.0
Medium Risk

Extract fluent keys from python code and organize them in .ftl files

🤖 AI Analysis

Final verdict: SUSPICIOUS

While the package does not exhibit any immediate signs of malicious activity, such as network calls or shell executions, the incomplete maintainer profile and new account suggest potential risks. Further investigation into the package's origin and purpose is recommended.

  • Incomplete maintainer profile and new account raise suspicion.
  • No detected network calls, shell executions, obfuscation, or credential harvesting.
Per-check LLM notes
  • Network: No network calls detected, which is normal unless the package requires internet access for its functionality.
  • Shell: No shell execution detected, indicating no direct system command execution by the package.
  • Obfuscation: No obfuscation patterns detected, indicating low risk.
  • Credentials: No credential harvesting patterns detected, indicating low risk.
  • Metadata: The maintainer has an incomplete profile and a new account, which raises some suspicion but does not conclusively indicate malice.

🔬 Heuristic Checks

✓ Outbound Network Calls

No suspicious network call patterns found

✓ Code Obfuscation

No obfuscation patterns detected

✓ Shell / Subprocess Execution

No shell execution patterns detected

✓ Credential Harvesting

No credential harvesting patterns detected

✓ Typosquatting

No typosquatting candidates detected

✓ Registered Email Domain

Email domain looks legitimate: kusbot.com>

✓ Suspicious Page Links

All external links appear legitimate

✓ Git Repository History

Repository andrew000/FTL-Extract appears legitimate

⚠ Maintainer History score 4.0

2 maintainer concern(s) found

  • Author name is missing or very short
  • Author "" appears to have only 1 package on PyPI (new or inactive account)
✓ Known CVE Vulnerabilities

No known vulnerabilities found in OSV database.

💡 AI App Starter Prompt

Use this prompt to build a project with FTL-Extract 
Your task is to develop a localization tool called 'LocalizationMaster' using the Python package 'FTL-Extract'. This tool will help developers and localization teams manage and extract strings marked for translation within their Python applications, organizing these strings into .ftl (Fluent Translation Language) files. The goal is to streamline the process of preparing your application for internationalization and localization.

Step-by-step instructions:
1. **Setup**: Create a Python virtual environment and install 'FTL-Extract' along with any other necessary packages such as Flask for web framework.
2. **User Interface**: Design a simple web interface where users can input their Python code snippets or upload entire Python files.
3. **Code Parsing**: Implement functionality to parse the uploaded Python code, identifying all strings marked for translation based on certain patterns or annotations defined by the user.
4. **Fluent Key Extraction**: Utilize 'FTL-Extract' to extract these identified strings and generate corresponding .ftl files containing the fluent keys.
5. **File Management**: Provide options for users to download the generated .ftl files directly from the web interface.
6. **Customization Options**: Allow users to customize the extraction process by specifying regex patterns for identifying strings meant for translation, or by providing custom annotations.
7. **Error Handling & Feedback**: Ensure robust error handling and provide clear feedback messages to the user regarding any issues encountered during the parsing or extraction process.
8. **Documentation**: Write comprehensive documentation explaining how to use the 'LocalizationMaster' tool effectively, including examples and best practices for marking strings for translation.

Suggested Features:
- Support for multiple file uploads at once.
- Option to specify directories for scanning Python files.
- Ability to configure output directory for .ftl files.
- Integration with popular version control systems like Git for automatic commit after successful extraction.
- Real-time preview of extracted fluent keys before downloading.
- Detailed logs of the extraction process available for review.

By following these steps and incorporating the suggested features, you'll create a powerful and user-friendly tool that significantly simplifies the process of preparing Python applications for localization.