airflow-pytest-operator

v0.4.2 suspicious
7.0
High Risk

Run pytest suites as Airflow tasks, with structured results in XCom.

🤖 AI Analysis

Final verdict: SUSPICIOUS

The package exhibits high obfuscation risk, suggesting potential malicious intent, despite having no evident network or credential risks. This combination warrants further investigation.

  • High obfuscation risk
  • Potential for executing arbitrary commands
Per-check LLM notes
  • Network: No network calls detected, which is normal and expected.
  • Shell: Subprocess execution appears to be related to running pytest for testing purposes, which is typical for a package focused on pytest integration with Apache Airflow.
  • Obfuscation: The code pattern suggests an attempt to execute arbitrary commands, which is indicative of malicious intent rather than legitimate obfuscation.
  • Credentials: No clear patterns of credential harvesting were detected.
  • Metadata: The author has only one package on PyPI, which could indicate a new or less active account.

📦 Package Quality Overall: Medium (7.2/10)

✦ High Test Suite 9.0

Test suite present — 9 test file(s) found

  • Test runner config found: conftest.py
  • Test runner config found: pyproject.toml
  • 9 test file(s) detected (e.g. conftest.py)
  • Classifier: Framework :: Pytest
◈ Medium Documentation 5.0

Some documentation present

  • Detailed PyPI description (24159 chars)
◈ Medium Contributing Guide 7.0

Some contribution signals present

  • Contributing link: "Contributing" -> https://github.com/IKrysanov/airflow-pytest-operator/blob/ma
  • Development Status classifier >= Beta
◈ Medium Type Annotations 7.0

Partial type annotation coverage

  • Type checker (mypy / pyright / pytype) referenced in project
  • 42 type-annotated function signatures detected in source
✦ High Multiple Contributors 8.0

Active multi-contributor project

  • 3 unique contributor(s) across 46 commits in IKrysanov/airflow-pytest-operator
  • Small but multi-author team (3–4 contributors)

🔬 Heuristic Checks

✓ Outbound Network Calls

No suspicious network call patterns found

⚠ Code Obfuscation score 4.0

Found 2 obfuscation pattern(s)

  • itrary code (unlike # eval()), and refuses anything that isn't a Python literal.
  • "longrepr": "__import__('os').system('echo pwned')", }, },
⚠ Shell / Subprocess Execution score 6.0

Found 3 shell execution pattern(s)

  • try: proc = subprocess.Popen( cmd, cwd=effective_cwd,
  • t_request(str(tmp_path)) subprocess.run( [sys.executable, "-m", "pytest", str(suite), *spec.
  • rt_request(str(tmp_path)) subprocess.run( [ sys.executable, "-m",
✓ Credential Harvesting

No credential harvesting patterns detected

✓ Typosquatting

No typosquatting candidates detected

✓ Registered Email Domain

No author email provided

✓ Suspicious Page Links

All external links appear legitimate

✓ Git Repository History

Repository IKrysanov/airflow-pytest-operator appears legitimate

⚠ Maintainer History score 2.0

1 maintainer concern(s) found

  • Author "Ilya Krysanov" appears to have only 1 package on PyPI (new or inactive account)
✓ Known CVE Vulnerabilities

No known vulnerabilities found in OSV database.

💡 AI App Starter Prompt

Use this prompt to build a project with airflow-pytest-operator 
Build a simple Python application using the airflow-pytest-operator package to demonstrate its core features.