🤖 AI Analysis

Final verdict: SAFE

The package exhibits minimal risk indicators, with no network calls, shell executions, obfuscations, or credential harvesting attempts. The metadata risk is slightly elevated due to potential novelty or lesser activity, but there are no clear signs of malicious intent.

No network calls or shell executions detected
Minimal metadata risks

Per-check LLM notes

Network: No network calls detected, which is normal unless the package requires internet access to function properly.
Shell: No shell execution detected, indicating that the package does not execute system commands, which is generally safe.
Obfuscation: No obfuscation patterns detected, indicating low risk.
Credentials: No credential harvesting patterns detected, indicating low risk.
Metadata: The package has some non-secure links and an author with a single package, suggesting it may be new or less active, but no clear signs of malice or typosquatting.

📦 Package Quality Overall: Low (3.6/10)

○ Low Test Suite 1.0

No test suite detected

No test files or test-runner configuration detected

◈ Medium Documentation 5.0

Some documentation present

Detailed PyPI description (4084 chars)

○ Low Contributing Guide 4.0

No contributing guide or governance files found

Development Status classifier >= Beta

◈ Medium Type Annotations 7.0

Partial type annotation coverage

Type checker (mypy / pyright / pytype) referenced in project
3 type-annotated function signatures (partial)

○ Low Multiple Contributors 1.0

Unable to verify contributor count: no GitHub repository found

No GitHub repository linked — contributor count unavailable

🔬 Heuristic Checks

✓ Outbound Network Calls

No suspicious network call patterns found

✓ Code Obfuscation

No obfuscation patterns detected

✓ Shell / Subprocess Execution

No shell execution patterns detected

✓ Credential Harvesting

No credential harvesting patterns detected

✓ Typosquatting

No typosquatting candidates detected

✓ Registered Email Domain

Email domain looks legitimate: pythonconsulting.com>

⚠ Suspicious Page Links score 8.0

Found 4 suspicious link(s) on the package page

Non-HTTPS external link: http://velocity.apache.org/engine/devel/user-guide.html
Non-HTTPS external link: http://www.cheetahtemplate.org/
Non-HTTPS external link: http://velocity.apache.org/engine/releases/velocity-1.7/user-guide.html
Non-HTTPS external link: http://www.sanityinc.com/

✓ Git Repository History

No GitHub repository linked

No GitHub repository link found

⚠ Maintainer History score 2.0

1 maintainer concern(s) found

Author "Chris Tarttelin" appears to have only 1 package on PyPI (new or inactive account)

✓ Known CVE Vulnerabilities

No known vulnerabilities found in OSV database.

💡 AI App Starter Prompt

Use this prompt to build a project with airspeed

Create a dynamic content generator tool using the Python package 'airspeed'. This tool will allow users to create personalized emails or documents by filling in placeholders within templates with user-specific data. Here’s a step-by-step guide on how to build it:

1. **Setup**: Begin by setting up your development environment. Ensure you have Python installed and install the 'airspeed' package via pip.
2. **Template Creation**: Design a template for the email or document. Use 'airspeed' syntax to define placeholders where user-specific information such as name, address, or order details will be inserted.
3. **Data Input**: Develop a simple interface or script that allows users to input their specific data. This could be through command-line arguments, a simple form, or even reading from a CSV file.
4. **Rendering**: Implement the logic to render the template using the provided data. Utilize 'airspeed' to fill in the placeholders dynamically.
5. **Output**: Display or save the rendered output. Options include saving to a file or sending the generated content as an email.
6. **Enhancements**: Consider adding features like template management (create, edit, delete), support for multiple languages, or integration with external data sources.

Ensure that the application showcases the flexibility and power of 'airspeed', especially its ability to handle complex templating needs similar to those found in Java's Velocity library.