AI Analysis
Final verdict: SUSPICIOUS
While the package shows no immediate signs of malicious activity, the metadata risk score and lack of recent activity suggest potential issues with its legitimacy and maintenance.
- Metadata risk score of 6 out of 10
- Signs of low effort and possible inactivity
Per-check LLM notes
- Network: No network calls detected, which is normal for a package focused on local filesystem operations.
- Shell: No shell execution patterns detected, aligning with the expected behavior of a package not designed for system-level commands.
- Obfuscation: No obfuscation patterns detected, indicating low risk of malicious intent.
- Credentials: No credential harvesting patterns detected, suggesting legitimate use without secret theft concerns.
- Metadata: The package shows several signs of low effort and possible inactivity, raising concerns about its legitimacy and maintenance.
Package Quality Overall: Low (3.8/10)
◈ Medium
Test Suite
6.0
Partial test coverage signals detected
1 test file(s) detected (e.g. test_filesystem_server.py)
◈ Medium
Documentation
5.0
Some documentation present
Brief PyPI description (620 chars)
○ Low
Contributing Guide
2.0
No contributing guide or governance files found
No CONTRIBUTING, CODE_OF_CONDUCT, or governance files found
◈ Medium
Type Annotations
5.0
Partial type annotation coverage
31 type-annotated function signatures detected in source
○ Low
Multiple Contributors
1.0
Unable to verify contributor count: no GitHub repository found
No GitHub repository linked — contributor count unavailable
Heuristic Checks
Outbound Network Calls
No suspicious network call patterns found
Code Obfuscation
No obfuscation patterns detected
Shell / Subprocess Execution
No shell execution patterns detected
Credential Harvesting
No credential harvesting patterns detected
Typosquatting
No typosquatting candidates detected
Registered Email Domain
No author email provided
Suspicious Page Links
All external links appear legitimate
Git Repository History
No GitHub repository linked
No GitHub repository link found
Maintainer History
score 8.0
4 maintainer concern(s) found
Only one version has ever been released — brand new packageAuthor name is missing or very shortAuthor "" appears to have only 1 package on PyPI (new or inactive account)Package has no PyPI classifiers (low effort / metadata quality)
Known CVE Vulnerabilities
No known vulnerabilities found in OSV database.
AI App Starter Prompt
Use this prompt to build a project with aiomcp-server-filesystem
Create a file management utility named 'FileNexus' that leverages the 'aiomcp-server-filesystem' Python package to provide a robust, asynchronous file system interface over a network. This utility will serve as both a local and remote file manager, allowing users to perform operations such as uploading, downloading, listing files, and deleting files from a server via a command-line interface (CLI). The core functionality of 'FileNexus' includes: 1. User Authentication: Implement basic user authentication to ensure only authorized users can access the file system. 2. File Operations: Allow users to upload new files, download existing files, list all files in a directory, and delete files. 3. Directory Navigation: Enable users to navigate through directories on the server using commands similar to those found in a Unix shell. 4. Logging: Maintain logs of all file operations for auditing purposes. 5. Error Handling: Gracefully handle errors and exceptions that may occur during file operations, providing clear and informative messages to the user. To achieve these functionalities, you will utilize the 'aiomcp-server-filesystem' package to set up the server-side file system management. Specifically, you will use the package to: - Initialize a server instance that listens for incoming client connections. - Define endpoints for each file operation (upload, download, list, delete). - Handle asynchronous requests from clients using the capabilities provided by the package. - Ensure thread-safe operations when dealing with file systems. Your task is to design and implement the 'FileNexus' utility, ensuring it is well-documented and easy to extend for future enhancements.