AI Analysis
Final verdict: SUSPICIOUS
The package has a low risk for direct malicious activities like network exploitation or credential theft but shows signs of being new and potentially poorly maintained, which raises concerns about its integrity and long-term reliability.
- Metadata risk score is high due to poor maintenance迹象表明该项目可能较新且维护不足
- No direct malicious activity detected in terms of network calls, shell execution, or obfuscation
Per-check LLM notes
- Network: No network calls detected, which is normal unless the package requires network interaction.
- Shell: No shell execution detected, which is also normal unless the package needs to run system commands.
- Obfuscation: No obfuscation patterns detected, indicating low risk of malicious intent related to code obfuscation.
- Credentials: No credential harvesting patterns detected, suggesting no immediate risk of secret or sensitive information being stolen.
- Metadata: The package shows signs of being new and poorly maintained, which could indicate potential risk.
Heuristic Checks
Outbound Network Calls
No suspicious network call patterns found
Code Obfuscation
No obfuscation patterns detected
Shell / Subprocess Execution
No shell execution patterns detected
Credential Harvesting
No credential harvesting patterns detected
Typosquatting
No typosquatting candidates detected
Registered Email Domain
Email domain looks legitimate: gmail.com>
Suspicious Page Links
All external links appear legitimate
Git Repository History
No GitHub repository linked
No GitHub repository link found
Maintainer History
score 6.0
3 maintainer concern(s) found
Only one version has ever been released — brand new packageAuthor name is missing or very shortAuthor "" appears to have only 1 package on PyPI (new or inactive account)
Known CVE Vulnerabilities
No known vulnerabilities found in OSV database.
AI App Starter Prompt
Use this prompt to build a project with agentfac
Create a cross-platform task management application using the 'agentfac' package. This application will allow users to create, manage, and track tasks in a highly declarative manner. The app should support features such as adding new tasks, setting due dates, marking tasks as completed, and categorizing tasks into different projects or categories. Additionally, it should provide a feature to set reminders for upcoming tasks via notifications. Utilize 'agentfac' to handle the underlying logic of managing these tasks efficiently and declaratively, leveraging its agentic framework capabilities. The application should be designed to run on multiple platforms, ensuring a seamless user experience across different devices and operating systems. Implement a clean and intuitive UI/UX design, and ensure the application is responsive and easy to navigate. As part of the project, document each step of the development process, including how 'agentfac' is integrated and utilized within the application.