🤖 AI Analysis

Final verdict: SAFE

The package is deemed safe with minimal risks identified. While there are some network and shell execution risks, they are typical for bioinformatics packages that require external data downloads and local command executions.

moderate network risk
moderate shell risk

Per-check LLM notes

Network: Network calls to download files are common but should be verified against known good URLs.
Shell: Executing shell commands can introduce risks if not properly sanitized or validated.
Obfuscation: No obfuscation patterns detected, indicating low risk.
Credentials: No credential harvesting patterns detected, indicating low risk.
Metadata: The package shows some minor red flags but no strong evidence of malice or typosquatting.

🔬 Heuristic Checks

⚠ Outbound Network Calls score 3.0

Found 2 network call pattern(s)

path): response = requests.get(COMBINED_CM) with open(cm_gz_path, "wb") as f:
path): response = requests.get(SEPARATE_CM) with open(cm_gz_path, "wb") as f:

✓ Code Obfuscation

No obfuscation patterns detected

⚠ Shell / Subprocess Execution score 4.0

Found 2 shell execution pattern(s)

ion) try: subprocess.run(["cmpress", cm_path], check=True, capture_output=True)
name] completed = subprocess.run( command, check=True,

✓ Credential Harvesting

No credential harvesting patterns detected

✓ Typosquatting

No typosquatting candidates detected

⚠ Registered Email Domain score 3.0

Suspicious email domain flags: Very short email domain: cs.put.poznan.pl>

Very short email domain: cs.put.poznan.pl>

⚠ Suspicious Page Links score 2.0

Found 1 suspicious link(s) on the package page

Non-HTTPS external link: http://eddylab.org/infernal/

✓ Git Repository History

Repository tzok/rnapolis-py appears legitimate

⚠ Maintainer History score 2.0

1 maintainer concern(s) found

Author "Tomasz Zok" appears to have only 1 package on PyPI (new or inactive account)

✓ Known CVE Vulnerabilities

No known vulnerabilities found in OSV database.

💡 AI App Starter Prompt

Use this prompt to build a project with RNApolis

Create a mini-application named 'RNAAnalyzer' using the Python package 'RNApolis'. This application will serve as a comprehensive tool for RNA sequence analysis and manipulation. Here’s a detailed breakdown of the project requirements and functionalities:

1. **Project Setup**: Start by installing the required packages including RNApolis. Ensure your environment is set up correctly.
2. **Core Functionality**:
   - **Sequence Input**: Allow users to input RNA sequences either manually or via a file upload.
   - **Sequence Analysis**: Utilize RNApolis to perform basic analysis such as calculating GC content, identifying secondary structures, and predicting folding energy.
3. **Advanced Features**:
   - **Mutational Impact**: Implement a feature to simulate mutations at specified positions and analyze their impact on the RNA structure and stability.
   - **Sequence Comparison**: Provide functionality to compare two RNA sequences based on similarity and structural changes.
4. **User Interface**: Develop a simple but effective command-line interface (CLI) or a web-based interface using Flask or Django if you prefer.
5. **Output Presentation**: Ensure the results are presented clearly, possibly in a formatted text output or graphical representation depending on the complexity of the data.
6. **Documentation**: Write clear documentation explaining how to install, use, and contribute to the application.
7. **Testing**: Include unit tests to ensure the reliability of the application’s core functionalities.

Your task is to design and implement this application from scratch, leveraging the RNApolis package to handle all RNA-related computations. Focus on making the application user-friendly and efficient.