SciQLopPlots

v0.26.0 suspicious
4.0
Medium Risk

SciQLop plot API based on QCustomPlot

🤖 AI Analysis

Final verdict: SUSPICIOUS

The package shows potential for altering runtime behavior through shell commands and has minor red flags in its metadata, raising concerns about its integrity.

  • Shell commands modify shared object files
  • Minor red flags in metadata
Per-check LLM notes
  • Network: No network calls detected.
  • Shell: Shell commands modify shared object files, potentially altering runtime behavior; however, without additional context, it's unclear if this is malicious.
  • Obfuscation: No obfuscation patterns detected, indicating low risk.
  • Credentials: No credential harvesting patterns detected, indicating low risk.
  • Metadata: The package has some minor red flags, but no clear signs of malice.

🔬 Heuristic Checks

✓ Outbound Network Calls

No suspicious network call patterns found

✓ Code Obfuscation

No obfuscation patterns detected

⚠ Shell / Subprocess Execution score 10.0

Found 6 shell execution pattern(s)

  • opPlotsBindings.*.so')[0] subprocess.run( ['install_name_tool', '-add_rpath', '@loader_path/P
  • check=True ) subprocess.run( ['install_name_tool', '-add_rpath', '@loader_path/P
  • check=True ) subprocess.run( ['install_name_tool', '-add_rpath', '@loader_path/s
  • opPlotsBindings.*.so')[0] subprocess.run( ['patchelf', '--remove-rpath', so_file], ch
  • check=True ) subprocess.run( ['patchelf', '--set-rpath', ":".join([PySide_mod_rp
  • aryDirectory() as tmpdir: subprocess.run( ['wheel', 'unpack','-d', tmpdir, args.wheel_file],
✓ Credential Harvesting

No credential harvesting patterns detected

✓ Typosquatting

No typosquatting candidates detected

✓ Registered Email Domain

Email domain looks legitimate: member.fsf.org>

⚠ Suspicious Page Links score 2.0

Found 1 suspicious link(s) on the package page

  • Non-HTTPS external link: http://www.cdpp.eu/
✓ Git Repository History

Repository SciQLop/SciQLopPlots appears legitimate

⚠ Maintainer History score 4.0

2 maintainer concern(s) found

  • Author name is missing or very short
  • Author "" appears to have only 1 package on PyPI (new or inactive account)
✓ Known CVE Vulnerabilities

No known vulnerabilities found in OSV database.

💡 AI App Starter Prompt

Use this prompt to build a project with SciQLopPlots 
Create a scientific data visualization tool using the SciQLopPlots package, which is based on QCustomPlot. This tool will enable users to easily visualize and analyze complex datasets in a variety of plots such as line graphs, scatter plots, and histograms. The application should include the following key features:

1. **Data Import**: Allow users to import their own dataset from CSV files. The tool should support basic data cleaning and preprocessing, including handling missing values.
2. **Plot Generation**: Utilize SciQLopPlots to generate various types of plots. Ensure that users can choose the type of plot they want to create (line graph, scatter plot, histogram, etc.).
3. **Customization Options**: Provide customization options for the plots such as changing colors, adding titles, labels, legends, and adjusting axis scales.
4. **Interactive Features**: Implement interactive features like zooming and panning to help users explore their data more closely.
5. **Export Functionality**: Enable users to export their visualizations in common formats such as PNG, PDF, and SVG.
6. **Real-time Data Update**: If possible, integrate a feature where users can input real-time data streams and see the plots update dynamically.

The goal is to create a user-friendly interface where non-expert users can quickly visualize their data without needing extensive programming knowledge. Focus on leveraging SciQLopPlots' capabilities to ensure the plots are high-quality and customizable.