🤖 AI Analysis

Final verdict: SUSPICIOUS

The package shows significant obfuscation and metadata risks, suggesting potential attempts to hide its true functionality or intentions. Given the limited history of the maintainer and the lack of a discoverable repository, this package warrants further scrutiny before use.

High obfuscation risk
Repository not found
Limited maintainer history

Per-check LLM notes

Network: No network calls detected, which is normal if the package does not require external API interactions.
Shell: No shell execution patterns detected, indicating no immediate signs of executing system commands.
Obfuscation: The observed obfuscation patterns suggest an attempt to obscure code logic, which could indicate malicious intent but may also be part of a non-malicious obfuscation technique used to protect intellectual property.
Credentials: No clear patterns indicative of credential harvesting were detected.
Metadata: The repository is not found, and the maintainer has limited history with PyPI, which raises concerns.

📦 Package Quality Overall: Low (4.6/10)

◈ Medium Test Suite 6.0

Partial test coverage signals detected

1 test file(s) detected (e.g. test_import.py)

◈ Medium Documentation 7.0

Some documentation present

Documentation URL: "Documentation" -> https://agi-transformer.readthedocs.io
Detailed PyPI description (1327 chars)

○ Low Contributing Guide 4.0

No contributing guide or governance files found

Development Status classifier >= Beta

◈ Medium Type Annotations 5.0

Partial type annotation coverage

15 type-annotated function signatures detected in source

○ Low Multiple Contributors 1.0

Could not retrieve contributor data from GitHub

GitHub API error: 404

🔬 Heuristic Checks

✓ Outbound Network Calls

No suspicious network call patterns found

⚠ Code Obfuscation score 4.0

Found 2 obfuscation pattern(s)

emperature=1.0): self.eval() for _ in range(max_new_tokens): logits
Transformer(config) model.eval() x = torch.randint(0, 100, (1, 5)) with torch.no_gr

✓ Shell / Subprocess Execution

No shell execution patterns detected

✓ Credential Harvesting

No credential harvesting patterns detected

✓ Typosquatting

No typosquatting candidates detected

✓ Registered Email Domain

No author email provided

✓ Suspicious Page Links

All external links appear legitimate

⚠ Git Repository History score 3.0

Repository not found (deleted or private)

Repository not found (deleted or private)

⚠ Maintainer History score 4.0

2 maintainer concern(s) found

Only one version has ever been released — brand new package
Author "AGi Architecture Framework" appears to have only 1 package on PyPI (new or inactive account)

✓ Known CVE Vulnerabilities

No known vulnerabilities found in OSV database.

💡 AI App Starter Prompt

Use this prompt to build a project with agi-transformer

Create a real-time audio processing application using the 'agi-transformer' package. This application will serve as a tool for musicians and sound engineers to experiment with advanced audio transformations in real-time. The application should include the following features:

1. Real-time audio input from a microphone or an external audio source.
2. A graphical user interface (GUI) that allows users to adjust parameters such as volume, pitch, and effects like reverb and delay.
3. Utilize the 'agi-transformer' package's advanced features including FP4-E2M1 quantization, parallel blocks, Mamba acceleration, and double buffering to enhance the performance and quality of the audio transformations.
4. Implement a feature that saves the processed audio to a file.
5. Include a visualization component that shows the frequency spectrum of the input and output audio in real-time.

The application should be designed to showcase the capabilities of the 'agi-transformer' package in handling complex audio transformations efficiently. It should also provide a user-friendly interface for non-technical users to interact with these advanced functionalities.