AI Analysis
Final verdict: SAFE
The package appears to be safe based on the low risk scores for network, shell, and credential risks. The moderate obfuscation and metadata risks do not strongly indicate malicious activity.
- Low risk scores for network, shell, and credential risks.
- Moderate obfuscation and metadata risks without strong evidence of malicious intent.
Per-check LLM notes
- Network: No network calls detected, which is normal if the package does not require internet access.
- Shell: No shell executions detected, indicating the package likely does not execute external commands.
- Obfuscation: The observed obfuscation pattern seems to be related to package extension and might not indicate malicious intent.
- Credentials: No suspicious patterns for credential harvesting were detected.
- Metadata: The package shows some red flags such as an author with a missing or short name and a single package on PyPI, but there are no clear signs of typosquatting or malicious intent.
Heuristic Checks
Outbound Network Calls
No suspicious network call patterns found
Code Obfuscation
score 2.0
Found 1 obfuscation pattern(s)
2.0 License. """ __path__ = __import__("pkgutil").extend_path(__path__, __name__) from .core import enums fr
Shell / Subprocess Execution
No shell execution patterns detected
Credential Harvesting
No credential harvesting patterns detected
Typosquatting
No typosquatting candidates detected
Registered Email Domain
Email domain looks legitimate: nasa.gov>
Suspicious Page Links
score 2.0
Found 1 suspicious link(s) on the package page
Non-HTTPS external link: http://www.apache.org/licenses/LICENSE-2.0
Git Repository History
Repository NASA-ACROSS/across-tools appears legitimate
Maintainer History
score 4.0
2 maintainer concern(s) found
Author name is missing or very shortAuthor "" appears to have only 1 package on PyPI (new or inactive account)
Known CVE Vulnerabilities
No known vulnerabilities found in OSV database.
AI App Starter Prompt
Use this prompt to build a project with across-tools
Create a Python-based mini-application that utilizes the 'across-tools' package to analyze and visualize data from NASA's ACROSS mission. The application should allow users to input specific dates and parameters related to the mission to retrieve and display relevant scientific data. Here are the key features and steps to implement the application: 1. **Data Retrieval**: Utilize 'across-tools' to fetch historical and real-time data from NASA's ACROSS mission databases. This includes satellite telemetry, environmental conditions, and other mission-specific metrics. 2. **User Interface**: Develop a simple yet effective command-line interface (CLI) for the application. Users should be able to interact with the app through commands to specify the date range and types of data they're interested in. 3. **Data Analysis**: Implement basic analytical functions using 'across-tools'. These could include calculating averages, identifying anomalies, or comparing data points over time. Ensure the analysis provides meaningful insights into the mission's data. 4. **Visualization**: Integrate visualization capabilities into the application to help users better understand the data. Use libraries such as matplotlib or seaborn alongside 'across-tools' to create graphs, charts, and plots. 5. **Documentation and Testing**: Write comprehensive documentation detailing how to use the application, including setup instructions and examples of commands. Also, develop unit tests to ensure each feature works as expected. By following these steps and utilizing 'across-tools', you'll create a valuable tool for anyone interested in exploring the data from NASA's ACROSS mission.