Glymur

v0.14.8 suspicious
5.0
Medium Risk

Read and write JPEG 2000 files

🤖 AI Analysis

Final verdict: SUSPICIOUS

The package has a moderate risk score due to potential obfuscation techniques and unclear maintainer information.

  • High obfuscation risk due to use of 'eval' with 'repr'
  • Missing or short maintainer's author name
Per-check LLM notes
  • Network: No network calls detected, which is normal unless the package requires internet access for its functionality.
  • Shell: No shell executions detected, indicating the package does not execute system commands, which is safe.
  • Obfuscation: The use of 'eval' with 'repr' may indicate an attempt to obfuscate code or bypass certain checks, which is suspicious but could also be part of legitimate functionality.
  • Credentials: No clear patterns indicative of credential harvesting were detected.
  • Metadata: The maintainer's author name is missing or very short and seems to be new or inactive, which could indicate potential risk.

🔬 Heuristic Checks

✓ Outbound Network Calls

No suspicious network call patterns found

⚠ Code Obfuscation score 10.0

Found 6 obfuscation pattern(s)

  • SOCsegment() newseg = eval(repr(segment)) self.assertEqual(newseg.marker_id, "S
  • nt(**kwargs) newseg = eval(repr(segment)) self.assertEqual(newseg.marker_id, "S
  • esc, resd]) newbox = eval(repr(res_super_box)) self.assertEqual(newbox.box_id
  • stantiation. newbox = eval(repr(jp2k)) self.assertTrue(isinstance(newbox, glymu
  • stantiation. newbox = eval(repr(box)) self.assertTrue(isinstance(newbox, glymur
  • stantiation. newbox = eval(repr(box)) self.assertEqual(bpc, newbox.bpc)
✓ Shell / Subprocess Execution

No shell execution patterns detected

✓ Credential Harvesting

No credential harvesting patterns detected

✓ Typosquatting

No typosquatting candidates detected

✓ Registered Email Domain

Email domain looks legitimate: proton.me>

✓ Suspicious Page Links

All external links appear legitimate

✓ Git Repository History

Repository quintusdias/glymur appears legitimate

⚠ Maintainer History score 4.0

2 maintainer concern(s) found

  • Author name is missing or very short
  • Author "" appears to have only 1 package on PyPI (new or inactive account)
✓ Known CVE Vulnerabilities

No known vulnerabilities found in OSV database.

💡 AI App Starter Prompt

Use this prompt to build a project with Glymur 
Create a Python-based image viewer and editor application that specializes in handling JPEG 2000 images using the 'Glymur' package. This application will serve as a user-friendly tool for viewing, resizing, and exporting JPEG 2000 files. Here’s a detailed breakdown of what the application should include:

1. **Image Viewer**: Allow users to open and view JPEG 2000 files. Utilize the 'Glymur' package to read the JPEG 2000 files efficiently.
2. **Thumbnail Generation**: Automatically generate thumbnails for each opened JPEG 2000 file, which can be displayed alongside the full-sized image.
3. **Resizing Tool**: Implement a feature where users can resize their JPEG 2000 images either by specifying new dimensions or choosing from predefined size options (e.g., small, medium, large).
4. **Export Functionality**: Enable users to export the resized images back into the JPEG 2000 format or convert them into other common formats like JPEG or PNG.
5. **Metadata Viewer**: Display basic metadata information about the JPEG 2000 files such as creation date, resolution, and color depth.
6. **Batch Processing**: Add a batch processing feature where users can select multiple files and apply the same operations (resizing, exporting) to all selected files at once.

The application should be built using Python, with 'Glymur' being the primary package for reading and writing JPEG 2000 files. Additionally, consider using a GUI toolkit like Tkinter or PyQt for the graphical interface. Ensure the application is well-documented and includes a README file explaining how to install dependencies and run the application.