AI Analysis
The package exhibits minimal risks across all categories with no signs of malicious behavior. While it has a low maintainer activity level, there is no evidence to suggest a supply-chain attack.
- Low network risk
- No shell execution or obfuscation detected
- Safe handling of credentials
Per-check LLM notes
- Network: Network calls are typical for packages needing to fetch data from external sources, but should be reviewed for legitimacy and necessity.
- Shell: No shell execution patterns detected, which is expected and safe.
- Obfuscation: No obfuscation patterns detected, suggesting legitimate use without risk of malicious obfuscation.
- Credentials: No credential harvesting patterns detected, indicating safe handling of secrets and credentials.
- Metadata: The package shows signs of low maintainer activity and metadata quality, but there are no clear indications of malicious intent.
Package Quality Overall: Low (4.6/10)
Partial test coverage signals detected
Test runner config found: pyproject.toml
Some documentation present
Detailed PyPI description (3566 chars)
No contributing guide or governance files found
No CONTRIBUTING, CODE_OF_CONDUCT, or governance files found
Partial type annotation coverage
34 type-annotated function signatures detected in source
Limited contributor diversity
1 unique contributor(s) across 32 commits in Muffinman75/agience-flare-dkg-integrationSingle author but highly active (32 commits)
Heuristic Checks
Found 6 network call pattern(s)
try: with httpx.Client(timeout=self._timeout) as http: r = http.getnse. """ with httpx.Client(timeout=self._timeout) as http: init_r = http.pocp-session-id") with httpx.Client(timeout=httpx.Timeout(self._timeout, read=None)) as http:try: with httpx.Client(timeout=5.0) as http: r = http.get(f"{self.bDict[str, Any]: with httpx.Client(timeout=self._timeout) as http: r = http.post(f"Dict[str, Any]: with httpx.Client(timeout=self._timeout) as http: r = http.get(f"{
No obfuscation patterns detected
No shell execution patterns detected
No credential harvesting patterns detected
No typosquatting candidates detected
Email domain looks legitimate: outlook.com>
All external links appear legitimate
Repository Muffinman75/agience-flare-dkg-integration appears legitimate
3 maintainer concern(s) found
Author name is missing or very shortAuthor "" appears to have only 1 package on PyPI (new or inactive account)Package has no PyPI classifiers (low effort / metadata quality)
No known vulnerabilities found in OSV database.
AI App Starter Prompt
Build a simple Python application using the agience-flare-dkg-integration package to demonstrate its core features.