🤖 AI Analysis

Final verdict: SUSPICIOUS

The package exhibits moderate obfuscation and lacks detailed metadata, suggesting potential for hidden functionality or malicious intent.

Moderate obfuscation risk
Low metadata quality

Per-check LLM notes

Network: No network calls detected, which is normal unless the package requires external services.
Shell: No shell execution patterns detected, indicating no immediate signs of malicious shell command execution.
Obfuscation: The presence of encoded strings with specific patterns suggests possible obfuscation techniques, but without further context, it's uncertain if this is malicious.
Credentials: No clear indicators of credential harvesting were detected.
Metadata: The package shows low effort in metadata and maintainer history, raising some suspicion but not conclusive evidence of malice.

🔬 Heuristic Checks

✓ Outbound Network Calls

No suspicious network call patterns found

⚠ Code Obfuscation score 10.0

Found 6 obfuscation pattern(s)

term_api.AccountSummaryReply\"\x17\x82\xd3\xe4\x93\x02\x11\x12\x0f/AccountSummary\x12i\n\x0cOrderHistory\x12!.mt5_term_api.Ord
api.OpenedOrdersTicketsReply\"\x1c\x82\xd3\xe4\x93\x02\x16\x12\x14/OpenedOrdersTickets\x12y\n\x10SymbolParamsMany\x12%.mt5_ter
rm_api.SymbolParamsManyReply\"\x19\x82\xd3\xe4\x93\x02\x13\x12\x11/SymbolParamsMany\x12}\n\x11TickValueWithSize\x12&.mt5_term_
m_api.TickValueWithSizeReply\"\x1a\x82\xd3\xe4\x93\x02\x14\x12\x12/TickValueWithSize\x12y\n\x10PositionsHistory\x12%.mt5_term_
rm_api.PositionsHistoryReply\"\x19\x82\xd3\xe4\x93\x02\x13\x12\x11/PositionsHistory\x12y\n\x10\x41llHistoryOrders\x12%.mt5_ter
rm_api.AllHistoryOrdersReply\"\x19\x82\xd3\xe4\x93\x02\x13\x12\x11/AllHistoryOrdersBBZ1git.mtapi.io/root/mrpc-proto.git/mt5/li

✓ Shell / Subprocess Execution

No shell execution patterns detected

✓ Credential Harvesting

No credential harvesting patterns detected

✓ Typosquatting

No typosquatting candidates detected

✓ Registered Email Domain

Email domain looks legitimate: mrpc.pro>

✓ Suspicious Page Links

All external links appear legitimate

✓ Git Repository History

No GitHub repository linked

No GitHub repository link found

⚠ Maintainer History score 6.0

3 maintainer concern(s) found

Author name is missing or very short
Author "" appears to have only 1 package on PyPI (new or inactive account)
Package has no PyPI classifiers (low effort / metadata quality)

✓ Known CVE Vulnerabilities

No known vulnerabilities found in OSV database.

💡 AI App Starter Prompt

Use this prompt to build a project with MetaRpcMT5

Your task is to develop a real-time financial market data monitoring tool using the MetaRpcMT5 Python package. This tool will allow users to subscribe to various financial instruments and receive live price updates via the MetaTrader 5 (MT5) platform's gRPC API. The application should provide a user-friendly interface where users can select different symbols (e.g., EURUSD, GBPUSD) and visualize the price movements in real time.

### Core Features:
1. **Symbol Subscription**: Users should be able to select one or more financial symbols to monitor. The application will use the MetaRpcMT5 package to connect to the MT5 server and subscribe to these symbols.
2. **Real-Time Data Streaming**: Once subscribed, the application should continuously fetch the latest price updates for the selected symbols. The MetaRpcMT5 package will facilitate this by establishing a persistent connection with the MT5 server and handling the streaming of data.
3. **Visualization**: Implement a simple graphical user interface (GUI) using a library like PyQt or Tkinter to display the real-time price updates for each symbol in a chart format. Users should be able to see the price movements over time.
4. **Alert System**: Integrate an alert system that notifies users when certain price thresholds are reached. For example, if the price of EURUSD drops below a specified level, the application should send a notification.
5. **Logging and Error Handling**: Ensure that the application logs all important events such as subscription successes/failures, price updates, and alerts. Proper error handling should be implemented to gracefully manage any issues that arise during runtime.

### Utilization of MetaRpcMT5 Package:
- **Connecting to MT5 Server**: Use the MetaRpcMT5 package to establish a connection with the MT5 server. This involves setting up the necessary credentials and parameters required by the gRPC API.
- **Subscribing to Symbols**: Leverage the MetaRpcMT5 functions to subscribe to the desired financial symbols. This might involve calling specific methods provided by the package to initiate the subscription process.
- **Handling Real-Time Data**: Implement a mechanism within your application to continuously listen for incoming price updates from the MT5 server. The MetaRpcMT5 package will handle the communication details, allowing you to focus on processing the received data.
- **Data Processing and Visualization**: Once the data is received, process it appropriately and feed it into your chosen visualization component. The MetaRpcMT5 package simplifies the interaction with the MT5 API, enabling efficient data retrieval and processing.

This project aims to demonstrate the power of the MetaRpcMT5 package in building robust, real-time applications that interact with financial markets. By completing this task, you will gain valuable experience in integrating third-party APIs, handling real-time data streams, and developing interactive applications.