AI Analysis
Final verdict: SUSPICIOUS
The package has low risks in terms of network, shell, obfuscation, and credential misuse, but its metadata raises concerns due to low activity and lack of maintainer history.
- Metadata risk score of 7 out of 10
- Low activity and minimal contributions suggest potential unreliability or malicious intent
Per-check LLM notes
- Network: The use of httpx.Client and httpx.AsyncClient suggests the package is designed to make network requests, which is common for many applications.
- Shell: No shell execution patterns were detected, indicating low risk for direct system command execution.
- Obfuscation: No obfuscation patterns detected, indicating low risk.
- Credentials: No credential harvesting patterns detected, indicating low risk.
- Metadata: The package shows signs of being potentially malicious due to low activity, lack of maintainer history, and minimal contributions.
Heuristic Checks
Outbound Network Calls
score 3.0
Found 2 network call pattern(s)
self._client = client or httpx.Client(timeout=timeout) @property def base_url(self) -> stself._client = client or httpx.AsyncClient(timeout=timeout) @property def base_url(self) -> st
Code Obfuscation
No obfuscation patterns detected
Shell / Subprocess Execution
No shell execution patterns detected
Credential Harvesting
No credential harvesting patterns detected
Typosquatting
No typosquatting candidates detected
Registered Email Domain
Email domain looks legitimate: seatecnologia.com.br>
Suspicious Page Links
All external links appear legitimate
Git Repository History
score 7.5
Git history flags: Repository has zero stars and zero forks
Repository has zero stars and zero forksVery few commits: 1 totalSingle contributor with only 1 commit(s) — possibly throwaway account
Maintainer History
score 6.0
3 maintainer concern(s) found
Only one version has ever been released — brand new packageAuthor name is missing or very shortAuthor "" appears to have only 1 package on PyPI (new or inactive account)
Known CVE Vulnerabilities
No known vulnerabilities found in OSV database.
AI App Starter Prompt
Use this prompt to build a project with abacapython
Create a simple e-commerce checkout system using the 'abacapython' package. This mini-application will allow users to purchase products through AbacatePay's payment gateway, supporting both one-time payments and subscriptions. The app will also handle webhooks to notify the backend about successful transactions, failed attempts, and subscription updates. Steps: 1. Set up a basic Flask web server to host the application. 2. Integrate the 'abacapython' package to initialize the AbacatePay client with your API keys. 3. Design a product listing page where users can view different products and their prices. 4. Implement a checkout process that generates a unique checkout link for each item, using Abacapython's checkout creation methods. 5. Create a subscription management feature allowing users to sign up for recurring payments. 6. Add webhook handling logic to receive notifications from AbacatePay regarding payment statuses and subscription changes. 7. Ensure all interactions with AbacatePay are secure, including handling sensitive information such as API keys and user data. 8. Provide a dashboard for administrators to monitor transactions and manage products. Features: - Product listings with images and descriptions. - Secure checkout process for one-time purchases. - Subscription management for recurring payments. - Real-time transaction status updates via webhooks. - Administrator dashboard for managing products and viewing transaction history. Utilization of 'abacapython': - Use the package to authenticate and create instances of AbacatePay's services. - Leverage the checkout module to generate unique checkout links for each product. - Implement the subscription module to enable recurring payments. - Utilize the webhook module to listen for and process real-time updates from AbacatePay. - Ensure all operations comply with best practices for security and privacy.