🤖 AI Analysis

Final verdict: SAFE

The package primarily deals with geolocation services through Azure Maps, with no indications of malicious activity or supply-chain attacks.

Low risk of shell execution
No signs of obfuscation or credential harvesting
Potential concern over network calls for legitimacy verification

Per-check LLM notes

Network: The network call pattern indicates the package uses HTTP requests, possibly for geolocation services, which is common but should be reviewed for legitimacy and security.
Shell: No shell execution patterns detected, indicating low risk of direct system command execution.
Obfuscation: No obfuscation patterns detected, indicating low risk.
Credentials: No credential harvesting patterns detected, indicating low risk.
Metadata: The maintainer has only one package, which might indicate a new or less active account, but there are no other red flags.

🔬 Heuristic Checks

⚠ Outbound Network Calls score 1.5

Found 1 network call pattern(s)

ns=20) self._client = httpx.AsyncClient(timeout=timeout, limits=limits, transport=transport)

✓ Code Obfuscation

No obfuscation patterns detected

✓ Shell / Subprocess Execution

No shell execution patterns detected

✓ Credential Harvesting

No credential harvesting patterns detected

✓ Typosquatting

No typosquatting candidates detected

✓ Registered Email Domain

Email domain looks legitimate: autobridgesystems.com

✓ Suspicious Page Links

All external links appear legitimate

✓ Git Repository History

No GitHub repository linked

No GitHub repository link found

⚠ Maintainer History score 2.0

1 maintainer concern(s) found

Author "AutoBridgeSystems" appears to have only 1 package on PyPI (new or inactive account)

✓ Known CVE Vulnerabilities

No known vulnerabilities found in OSV database.

💡 AI App Starter Prompt

Use this prompt to build a project with abs-geolocation-core

Create a Python-based mini-application called 'GeoFriend' that helps users find the nearest coffee shops around them using Azure Maps Location Service via the 'abs-geolocation-core' package. The application should allow users to input their current location either through manual entry of latitude and longitude or by allowing the app to access the user's device location if available. Once the location is provided, GeoFriend will query the Azure Maps Location Service to fetch nearby coffee shops within a specified radius (default set to 1 km). The application should then display a list of these coffee shops along with their names, addresses, and distances from the user's location.

Key Features:
1. User-friendly interface for entering location data.
2. Option to automatically detect the user's location.
3. Querying Azure Maps Location Service to fetch nearby points of interest (POIs).
4. Display results in a readable format including name, address, and distance.
5. Optional feature: Integration with a map service (such as Bing Maps) to visualize the locations on a map.

Utilizing 'abs-geolocation-core':
- Use the package to establish a connection to Azure Maps services.
- Leverage the package's capabilities to perform geolocation queries and handle responses efficiently.
- Ensure that all geographical operations like distance calculations and location lookups are performed using the functionalities provided by 'abs-geolocation-core'.