ajo-cli

v2.0.2 suspicious
5.0
Medium Risk

Professional Django scaffolder with Cyberpunk TUI

🤖 AI Analysis

Final verdict: SUSPICIOUS

The package has low risks in terms of network, shell, obfuscation, and credential handling but exhibits signs of potential misuse due to suspicious git repository activity and maintainer history, raising concerns about possible supply-chain attack vectors.

  • Suspicious git repository activity
  • Maintainer history raises concerns
Per-check LLM notes
  • Network: No network calls detected, which is normal and expected.
  • Shell: The shell executions detected are likely for version checks of external tools, indicating benign behavior.
  • Obfuscation: No obfuscation patterns were detected in the provided code snippet.
  • Credentials: The observed pattern is likely part of a configuration setup where environment variables are used to manage sensitive information such as secret keys and debug flags, which is a common practice for security reasons.
  • Metadata: The package shows signs of potential misuse due to the suspicious git repository activity and maintainer history.

📦 Package Quality Overall: Low (3.8/10)

○ Low Test Suite 1.0

No test suite detected

  • No test files or test-runner configuration detected
◈ Medium Documentation 7.0

Some documentation present

  • Documentation URL: "Documentation" -> https://github.com/zaidejjo/ajo-cli#readme
  • Detailed PyPI description (1557 chars)
○ Low Contributing Guide 4.0

No contributing guide or governance files found

  • Development Status classifier >= Beta
◈ Medium Type Annotations 5.0

Partial type annotation coverage

  • 39 type-annotated function signatures detected in source
○ Low Multiple Contributors 2.0

Single-author or unverifiable project

  • 1 unique contributor(s) across 3 commits in zaidejjo/ajo-cli
  • Single author with few commits — possibly a personal or throwaway project

🔬 Heuristic Checks

✓ Outbound Network Calls

No suspicious network call patterns found

✓ Code Obfuscation

No obfuscation patterns detected

⚠ Shell / Subprocess Execution score 10.0

Found 6 shell execution pattern(s)

  • uv try: result = subprocess.run(["uv", "--version"], capture_output=True, text=True)
  • Git try: result = subprocess.run(["git", "--version"], capture_output=True, text=True)
  • CLI try: result = subprocess.run(["gh", "--version"], capture_output=True, text=True)
  • k GitHub CLI try: subprocess.run(["gh", "--version"], capture_output=True, text=True, check=T
  • # Check auth auth = subprocess.run(["gh", "auth", "status"], capture_output=True, text=True)
  • ) # Init git subprocess.run(["git", "init"], cwd=project_path, capture_output=True)
⚠ Credential Harvesting score 2.5

Found 1 credential access pattern(s)

  • ).parent.parent SECRET_KEY = os.getenv('SECRET_KEY') DEBUG = os.getenv('DEBUG', 'True') == 'True' ALLOWED_
✓ Typosquatting

No typosquatting candidates detected

✓ Registered Email Domain

Email domain looks legitimate: gmail.com>

✓ Suspicious Page Links

All external links appear legitimate

⚠ Git Repository History score 5.0

Git history flags: Single contributor with only 3 commit(s) — possibly throwaway account

  • Single contributor with only 3 commit(s) — possibly throwaway account
  • All 3 commits happened within 24 hours
⚠ Maintainer History score 4.0

2 maintainer concern(s) found

  • Author name is missing or very short
  • Author "" appears to have only 1 package on PyPI (new or inactive account)
✓ Known CVE Vulnerabilities

No known vulnerabilities found in OSV database.

💡 AI App Starter Prompt

Use this prompt to build a project with ajo-cli 
Your task is to develop a fully-functional mini-application using the 'ajo-cli' package, which is a professional Django scaffolder featuring a Cyberpunk-themed Text User Interface (TUI). This application will serve as a simple blog platform where users can create, read, update, and delete blog posts. Here’s a detailed breakdown of what your application should include and how to utilize the 'ajo-cli' package effectively:

1. **Project Setup**: Start by installing the 'ajo-cli' package if it isn't already installed. Use 'ajo-cli' to scaffold a new Django project with a custom configuration that suits the needs of a basic blogging platform.
2. **Model Creation**: Define models for 'User', 'Post', and 'Comment'. Ensure each model has appropriate fields such as title, content, author, date published, etc., for the 'Post' model.
3. **Views & Templates**: Create views that allow users to view all posts, view individual posts, create new posts, edit existing posts, and delete posts. Implement corresponding templates for these views.
4. **Customization with TUI**: Utilize the Cyberpunk TUI provided by 'ajo-cli' to enhance user interaction. For instance, allow users to navigate through posts, manage their accounts, and perform CRUD operations via the TUI interface.
5. **Security Measures**: Implement user authentication so only registered users can create, edit, and delete posts. Additionally, ensure that comments are moderated before they're publicly visible.
6. **Styling and Customization**: Customize the appearance of your blog to reflect a Cyberpunk aesthetic. This includes colors, fonts, and overall layout design.
7. **Testing**: Write unit tests for your models and views to ensure everything functions as expected.
8. **Deployment**: Prepare your application for deployment on a server of your choice. Consider using services like Heroku or AWS for hosting.

By following these steps and utilizing the powerful features of 'ajo-cli', you'll have a fully functional and visually appealing blog platform ready for use.

💬 Discussion Feed

Leave a comment

No discussion yet. Be the first to share your thoughts!