🤖 AI Analysis

Final verdict: SUSPICIOUS

The package has low risks in terms of network usage, shell execution, and obfuscation. However, it exhibits signs of low effort in its metadata, which raises suspicion.

Low metadata quality
Lack of maintainer history

Per-check LLM notes

Network: No network calls detected, which is normal if the package does not require external communications.
Shell: No shell execution patterns detected, indicating no immediate signs of executing system commands.
Obfuscation: No obfuscation patterns detected, indicating low risk.
Credentials: No credential harvesting patterns detected, indicating low risk.
Metadata: The package shows signs of low effort and could potentially be suspicious due to the lack of maintainer history and missing author information.

📦 Package Quality Overall: Low (4.6/10)

○ Low Test Suite 1.0

No test suite detected

No test files or test-runner configuration detected

◈ Medium Documentation 5.0

Some documentation present

Documentation URL: "Documentation" -> https://thalesgroup.github.io/agilab

○ Low Contributing Guide 2.0

No contributing guide or governance files found

No CONTRIBUTING, CODE_OF_CONDUCT, or governance files found

◈ Medium Type Annotations 5.0

Partial type annotation coverage

26 type-annotated function signatures detected in source

✦ High Multiple Contributors 10.0

Active multi-contributor project

5 unique contributor(s) across 69 commits in ThalesGroup/agilab
Active community — 5 or more distinct contributors

🔬 Heuristic Checks

✓ Outbound Network Calls

No suspicious network call patterns found

✓ Code Obfuscation

No obfuscation patterns detected

✓ Shell / Subprocess Execution

No shell execution patterns detected

✓ Credential Harvesting

No credential harvesting patterns detected

✓ Typosquatting

No typosquatting candidates detected

✓ Registered Email Domain

No author email provided

✓ Suspicious Page Links

All external links appear legitimate

✓ Git Repository History

Repository ThalesGroup/agilab appears legitimate

⚠ Maintainer History score 8.0

4 maintainer concern(s) found

Only one version has ever been released — brand new package
Author name is missing or very short
Author "" appears to have only 1 package on PyPI (new or inactive account)
Package has no PyPI classifiers (low effort / metadata quality)

✓ Known CVE Vulnerabilities

No known vulnerabilities found in OSV database.

💡 AI App Starter Prompt

Use this prompt to build a project with agi-page-network-map

Develop a comprehensive network-aware geospatial analysis tool using the 'agi-page-network-map' package. This tool will enable users to visualize and analyze the interconnections between various geographical locations based on network data. The application should allow users to upload a dataset containing geographical coordinates and network connectivity information. Upon uploading, the app will generate an interactive map that highlights the connections between these points, providing insights into network efficiency and potential bottlenecks. Key features of the application include:

1. **Data Upload**: Users can upload CSV files containing latitude, longitude, and network connection status.
2. **Interactive Map**: Display an interactive map where nodes represent geographical locations and edges represent network connections.
3. **Network Analysis**: Implement basic network analysis functionalities such as calculating shortest paths, identifying clusters, and visualizing centrality measures.
4. **Customization Options**: Allow users to customize the appearance of the map, including color schemes, node sizes, and edge thicknesses.
5. **Export Functionality**: Provide options to export the generated map as an image or a PDF file.

Utilize the 'agi-page-network-map' package to handle the core geospatial and network visualization tasks. Ensure the application is user-friendly, efficient, and visually appealing. Additionally, consider integrating additional Python libraries like 'geopandas' for enhanced geospatial data manipulation and 'networkx' for advanced network analysis capabilities.