🤖 AI Analysis

Final verdict: SUSPICIOUS

The package appears to integrate GoodMem with Microsoft Agent Framework but has a high metadata risk due to lack of maintainer history and recent creation, which raises concerns about its legitimacy.

High metadata risk
Recently created package

Per-check LLM notes

Network: The presence of network calls suggests the package may be communicating with an external service, which could be legitimate if it's part of its intended functionality.
Shell: No shell execution patterns detected, indicating no immediate risk from command execution.
Obfuscation: No obfuscation patterns detected, indicating low risk.
Credentials: No credential harvesting patterns detected, indicating low risk.
Metadata: The package shows signs of being newly created and lacks maintainer history, raising suspicion.

🔬 Heuristic Checks

⚠ Outbound Network Calls score 1.5

Found 1 network call pattern(s)

api_key self._http = httpx.AsyncClient( base_url=self._base_url, headers={

✓ Code Obfuscation

No obfuscation patterns detected

✓ Shell / Subprocess Execution

No shell execution patterns detected

✓ Credential Harvesting

No credential harvesting patterns detected

✓ Typosquatting

No typosquatting candidates detected

✓ Registered Email Domain

Email domain looks legitimate: goodmem.ai>

✓ Suspicious Page Links

All external links appear legitimate

⚠ Git Repository History score 3.0

Repository not found (deleted or private)

Repository not found (deleted or private)

⚠ Maintainer History score 6.0

3 maintainer concern(s) found

Only one version has ever been released — brand new package
Author name is missing or very short
Author "" appears to have only 1 package on PyPI (new or inactive account)

✓ Known CVE Vulnerabilities

No known vulnerabilities found in OSV database.

💡 AI App Starter Prompt

Use this prompt to build a project with agent-framework-goodmem

Create a personal digital memory assistant application using Python's 'agent-framework-goodmem' package. This app will integrate GoodMem's capabilities into the Microsoft Agent Framework to help users manage their digital memories more effectively. The goal is to create a user-friendly interface where users can input events, thoughts, or any other form of data they wish to remember, and the app will store it securely while allowing easy retrieval through various filters such as date, keyword, or sentiment analysis.

Steps to develop the application:
1. Set up your development environment with Python and install the necessary packages including 'agent-framework-goodmem'.
2. Design a simple user interface (UI) using a library like Tkinter or PyQt for inputting new memories and searching existing ones.
3. Implement functionality to capture user inputs and use the 'agent-framework-goodmem' package to process these inputs, storing them securely with GoodMem.
4. Develop a search feature within the UI that allows users to filter their memories based on different criteria.
5. Integrate sentiment analysis into the application so that users can sort their memories based on the emotional tone of the event.
6. Add an option for users to export their memories to a file or another service.
7. Ensure the application handles errors gracefully and provides informative feedback to the user.
8. Test the application thoroughly with various types of inputs and searches to ensure reliability and performance.

Suggested Features:
- User authentication for secure access to their personal memories.
- Support for multimedia inputs like images and audio notes.
- Integration with calendar applications for automatic memory logging.
- Periodic reminders based on stored memories (e.g., anniversaries).
- A dashboard showing statistics about the user's memory usage over time.