AI Analysis
Final verdict: SUSPICIOUS
The package has low direct risks but exhibits potential signs of typosquatting and lacks critical metadata such as the author's name. These factors raise concerns about its legitimacy.
- Potential typosquatting targeting 'amqp'
- Missing author information and inactive account
Per-check LLM notes
- Network: Network calls appear to be for authentication and API interaction, which is common for packages dealing with external services.
- Shell: Use of os.system for clearing the console is low risk but generally discouraged; it's more likely for user interface purposes rather than malicious activity.
- Obfuscation: No obfuscation patterns detected, indicating low risk of malicious intent.
- Credentials: No credential harvesting patterns detected, indicating low risk of secret theft.
- Metadata: The author's name is missing and the account seems new or inactive, which raises some suspicion.
- ⚠ Typosquatting target: amqp
Heuristic Checks
Outbound Network Calls
score 6.0
Found 4 network call pattern(s)
logic self.session = requests.Session() retry_strategy = Retry( total=self.r} response = requests.post( config["oauthTokenEndpointV1"], data=oauth} response = requests.post( config["oauthTokenEndpointV2"], data=oauthes/{filePath}" res = requests.patch(self.endpoint + path, data=data, headers=privateHeader, veri
Code Obfuscation
No obfuscation patterns detected
Shell / Subprocess Execution
score 2.0
Found 1 shell execution pattern(s)
s, 'posix' for Mac/Linux os.system('cls' if os.name == 'nt' else 'clear') console = Console(
Credential Harvesting
No credential harvesting patterns detected
Typosquatting
score 3.0
Possible typosquat of: amqp
"aepp" is 2 edit(s) from "amqp"
Registered Email Domain
Email domain looks legitimate: gmail.com>
Suspicious Page Links
All external links appear legitimate
Git Repository History
Repository adobe/aepp appears legitimate
Maintainer History
score 4.0
2 maintainer concern(s) found
Author name is missing or very shortAuthor "" appears to have only 1 package on PyPI (new or inactive account)
Known CVE Vulnerabilities
No known vulnerabilities found in OSV database.
AI App Starter Prompt
Use this prompt to build a project with aepp
Create a Python-based mini-application that integrates with Adobe Experience Platform (AEP) using the 'aepp' package. Your goal is to develop a tool that allows users to manage their AEP APIs more efficiently. Here are the key steps and features you need to implement: 1. **Setup**: Begin by installing the 'aepp' package and setting up your environment. Ensure you have the necessary credentials and permissions to interact with AEP APIs. 2. **User Interface**: Design a simple command-line interface (CLI) that prompts users to input their AEP credentials securely. 3. **Endpoint Management**: Utilize the 'aepp' package to manage different API endpoints within AEP. Implement functionality to list all available endpoints, select specific endpoints based on user input, and retrieve detailed information about each endpoint. 4. **Helper Functions**: Leverage the helper functions provided by the 'aepp' package to perform common tasks such as authentication, error handling, and logging. Integrate these functionalities seamlessly into your CLI tool. 5. **Data Operations**: Enable basic CRUD operations (Create, Read, Update, Delete) for data management through the selected API endpoints. This includes adding new datasets, fetching existing ones, updating dataset properties, and deleting datasets when necessary. 6. **Customization & Configuration**: Allow users to customize and configure their interactions with AEP APIs through command-line options or configuration files. This could include setting default endpoints, specifying preferred output formats, or enabling verbose logging. 7. **Security Measures**: Implement robust security measures to protect user credentials and sensitive data. Use encryption for storing and transmitting credentials, and ensure that no plain-text passwords are saved locally. 8. **Testing & Documentation**: Thoroughly test your application to ensure it works correctly with various AEP configurations. Provide comprehensive documentation detailing how to install, configure, and use your CLI tool effectively. Your final product should be a reliable and user-friendly CLI tool that simplifies working with AEP APIs through the 'aepp' package. It should demonstrate proficiency in Python programming, understanding of AEP APIs, and best practices in software development.