agi-app-multi-dag

v2026.6.4 suspicious
5.0
Medium Risk

AGILAB cross-app DAG preview showing artifact handoffs between demo projects

🤖 AI Analysis

Final verdict: SUSPICIOUS

The package shows no immediate signs of malicious activity, but the metadata risk score is elevated due to the maintainer's limited history with PyPI.

  • Metadata risk score is 4 out of 10
  • Maintainer has limited history with PyPI
Per-check LLM notes
  • Network: No network calls detected, which is normal unless the package requires external services.
  • Shell: No shell execution patterns detected, indicating no direct system command execution.
  • Obfuscation: No obfuscation patterns detected, indicating low risk.
  • Credentials: No credential harvesting patterns detected, indicating low risk.
  • Metadata: The package is new and the maintainer has limited history with PyPI, raising some suspicion but not conclusive evidence of malice.

📦 Package Quality Overall: Medium (6.4/10)

◈ Medium Test Suite 6.0

Partial test coverage signals detected

  • Test runner config found: pyproject.toml
◈ Medium Documentation 7.0

Some documentation present

  • Documentation URL: "Documentation" -> https://thalesgroup.github.io/agilab
  • Detailed PyPI description (2480 chars)
○ Low Contributing Guide 4.0

No contributing guide or governance files found

  • Development Status classifier >= Beta
◈ Medium Type Annotations 5.0

Partial type annotation coverage

  • 3 type-annotated function signatures (partial)
✦ High Multiple Contributors 10.0

Active multi-contributor project

  • 5 unique contributor(s) across 69 commits in ThalesGroup/agilab
  • Active community — 5 or more distinct contributors

🔬 Heuristic Checks

✓ Outbound Network Calls

No suspicious network call patterns found

✓ Code Obfuscation

No obfuscation patterns detected

✓ Shell / Subprocess Execution

No shell execution patterns detected

✓ Credential Harvesting

No credential harvesting patterns detected

✓ Typosquatting

No typosquatting candidates detected

✓ Registered Email Domain

No author email provided

✓ Suspicious Page Links

All external links appear legitimate

✓ Git Repository History

Repository ThalesGroup/agilab appears legitimate

⚠ Maintainer History score 6.0

3 maintainer concern(s) found

  • Only one version has ever been released — brand new package
  • Package is very new: uploaded 3 day(s) ago
  • Author "Jean-Pierre Morard" appears to have only 1 package on PyPI (new or inactive account)
✓ Known CVE Vulnerabilities

No known vulnerabilities found in OSV database.

💡 AI App Starter Prompt

Use this prompt to build a project with agi-app-multi-dag 
Create a mini-application called 'ArtifactFlowViewer' using the Python package 'agi-app-multi-dag'. This application will serve as a visual tool for developers and project managers to understand the flow of artifacts between different demo projects within the AGILAB framework. The primary goal is to provide an interactive and clear representation of Directed Acyclic Graphs (DAGs) that illustrate how artifacts are handed off from one project to another.

**Steps to Build the Application:**
1. **Setup Environment**: Begin by setting up a Python environment with all necessary dependencies, including 'agi-app-multi-dag'. Ensure you have a clear understanding of the package's API and how it handles DAGs and artifact handoffs.
2. **Design User Interface**: Design a user-friendly interface that allows users to input details about their projects and the artifacts they handle. Include options to add nodes representing projects and edges representing artifact handoffs.
3. **Integrate 'agi-app-multi-dag'**: Utilize 'agi-app-multi-dag' to generate and visualize the DAG based on the inputs provided by the user. Ensure that the visualization clearly shows each project node and the artifact handoff paths between them.
4. **Implement Interactive Features**: Add interactive features such as tooltips for each node to display more information about the project and its artifacts. Allow users to click on nodes or edges to see detailed information or modify the DAG.
5. **Save and Share**: Implement functionality to save the created DAGs and share them via URLs or download options. Users should be able to load previously saved DAGs and continue editing or viewing them.
6. **Testing and Feedback**: Conduct thorough testing to ensure the application works as expected and is user-friendly. Gather feedback from potential users and make necessary adjustments.

**Suggested Features:**
- Support for multiple projects and artifact types.
- Real-time updates and visualizations as changes are made.
- Detailed logs and history tracking for each DAG modification.
- Export options for visualizations in various formats (PNG, SVG).
- Collaboration features allowing multiple users to work on the same DAG simultaneously.

By following these steps and implementing the suggested features, you'll create a powerful yet easy-to-use tool that enhances collaboration and transparency across multiple projects within the AGILAB ecosystem.