🤖 AI Analysis

Final verdict: SUSPICIOUS

The package exhibits moderate risk due to its high obfuscation risk and the novelty of the developer's account. While there are no immediate signs of malicious activity, the dynamic importing and single-package developer profile raise concerns about potential supply-chain risks.

High obfuscation risk
Single-package developer profile

Per-check LLM notes

Network: Network calls appear to be used for legitimate purposes such as fetching updates or external resources.
Shell: No shell execution patterns detected, indicating no direct system command execution risk.
Obfuscation: The code pattern suggests an attempt to dynamically import modules which may indicate obfuscation or evasion techniques.
Credentials: No clear patterns indicative of credential harvesting were found.
Metadata: The author has only one package, suggesting a new or less active account which may warrant further investigation.

🔬 Heuristic Checks

⚠ Outbound Network Calls score 3.0

Found 2 network call pattern(s)

est with urllib.request.urlopen(REMOTE_URL, timeout=10) as response:
try: response = requests.get(API_URL, timeout=5) if response.status_code == 200:

⚠ Code Obfuscation score 2.0

Found 1 obfuscation pattern(s)

try: return __import__(mod_name, fromlist=("dummy",)) except Exception: continue return

✓ Shell / Subprocess Execution

No shell execution patterns detected

✓ Credential Harvesting

No credential harvesting patterns detected

✓ Typosquatting

No typosquatting candidates detected

✓ Registered Email Domain

No author email provided

✓ Suspicious Page Links

All external links appear legitimate

✓ Git Repository History

Repository WitchMithras/aetherfield appears legitimate

⚠ Maintainer History score 2.0

1 maintainer concern(s) found

Author "WitchMithras" appears to have only 1 package on PyPI (new or inactive account)

✓ Known CVE Vulnerabilities

No known vulnerabilities found in OSV database.

💡 AI App Starter Prompt

Use this prompt to build a project with aetherfield

Create a fully-functional mini-app called 'StellarNavigator' that leverages the Python package 'aetherfield' to provide real-time ephemeris data for celestial bodies. This app will allow users to input specific dates and times, along with their geographic location, to retrieve accurate positions of planets, moons, stars, and other astronomical objects relative to their position on Earth. The application should include the following features:

1. User-friendly interface where users can input their geographical coordinates (latitude and longitude).
2. Ability to select specific celestial bodies from a dropdown menu.
3. Input field for specifying date and time in UTC format.
4. Output displaying the calculated position of the selected celestial body at the specified time and location.
5. Optional feature to plot the trajectory of the celestial body over a period of days or weeks based on user input.
6. Integration of error handling to manage invalid inputs and exceptions gracefully.

The 'aetherfield' package will be utilized to calculate the ephemeris data based on the user-provided information. Specifically, you will use the package's functions to fetch the necessary orbital elements and apply them to compute the position of celestial bodies at the requested time and location. Ensure that your code is well-documented and includes comments explaining how each part of the process works, especially regarding the integration of 'aetherfield'. Additionally, consider including a brief tutorial within the documentation to help others understand how to use the 'StellarNavigator' app effectively.