AI Analysis
Final verdict: SAFE
The package appears to be safe with no network calls or shell executions detected. While there is some obfuscation and metadata risks, these do not strongly indicate malicious intent.
- No network calls or shell executions detected
- Some obfuscation observed, but common in similar packages
Per-check LLM notes
- Network: No network calls detected, which is normal for a utility package like Qt.py that primarily serves to simplify the import of PyQt or PySide libraries.
- Shell: No shell execution patterns detected, consistent with a package focused on providing a simplified interface for GUI development.
- Obfuscation: The observed patterns suggest an attempt to dynamically import modules, which could be used for obfuscation but is also common in legitimate codebases.
- Credentials: No clear indicators of credential harvesting or secret storage were detected.
- Metadata: The maintainer's author information is incomplete and the package links to non-HTTPS sites, which could indicate poor maintenance practices.
Heuristic Checks
Outbound Network Calls
No suspicious network call patterns found
Code Obfuscation
score 4.0
Found 2 obfuscation pattern(s)
import_module""" module = __import__(module.__name__ + "." + name) for level in name.split("."): module = getattr(. submodule = __import__(name) except ImportError as e2: _warn
Shell / Subprocess Execution
No shell execution patterns detected
Credential Harvesting
No credential harvesting patterns detected
Typosquatting
No typosquatting candidates detected
Registered Email Domain
Email domain looks legitimate: gmail.com>
Suspicious Page Links
score 10.0
Found 21 suspicious link(s) on the package page
Non-HTTPS external link: http://www.atomicfiction.com/Non-HTTPS external link: http://www.blackstudios.se/Non-HTTPS external link: http://www.blur.comNon-HTTPS external link: http://cgru.info/Non-HTTPS external link: http://www.colorbleed.nl/Non-HTTPS external link: http://fido.se/
Git Repository History
Repository mottosso/Qt appears legitimate
Maintainer History
score 4.0
2 maintainer concern(s) found
Author name is missing or very shortAuthor "" appears to have only 1 package on PyPI (new or inactive account)
Known CVE Vulnerabilities
No known vulnerabilities found in OSV database.
AI App Starter Prompt
Use this prompt to build a project with Qt.py
Create a simple desktop application using Python and the Qt.py package that functions as a basic task manager. This application should allow users to add tasks with a title, description, due date, and priority level. Users should also be able to edit and delete tasks. Additionally, implement a feature that sorts the tasks based on their priority or due date. The application should have a clean, user-friendly interface with different sections for adding tasks, viewing all tasks, and editing/deleting tasks. Use Qt.py to manage the integration of Qt5 or Qt6 bindings (PySide2, PySide6, PyQt5, or PyQt6), ensuring your application is compatible with both versions of Qt. Start by setting up the project structure, then design the UI layout using Qt Designer or code it directly in Python. Next, implement the backend logic to handle task management operations. Finally, test the application thoroughly to ensure it works as expected across different Qt versions.