AI Analysis
Final verdict: SUSPICIOUS
The package exhibits a moderate level of risk due to high credential risk and limited maintainer metadata. While network and shell risks are low, the credential harvesting behavior raises concerns about potential misuse.
- High credential risk
- Limited maintainer metadata
Per-check LLM notes
- Network: The network call pattern suggests legitimate API interaction or data fetching.
- Shell: No shell execution patterns detected.
- Obfuscation: No obfuscation patterns detected in the provided code snippet.
- Credentials: The code snippet appears to be harvesting credentials through a prompt for an email and password, which could indicate potential credential theft if not properly secured.
- Metadata: The maintainer has only one package, and there's no linked GitHub repository, which could indicate a less experienced or potentially suspicious maintainer.
Package Quality Overall: Low (2.8/10)
○ Low
Test Suite
1.0
No test suite detected
No test files or test-runner configuration detected
◈ Medium
Documentation
5.0
Some documentation present
Detailed PyPI description (15300 chars)
○ Low
Contributing Guide
2.0
No contributing guide or governance files found
No CONTRIBUTING, CODE_OF_CONDUCT, or governance files found
◈ Medium
Type Annotations
5.0
Partial type annotation coverage
24 type-annotated function signatures detected in source
○ Low
Multiple Contributors
1.0
Unable to verify contributor count: no GitHub repository found
No GitHub repository linked — contributor count unavailable
Heuristic Checks
Outbound Network Calls
score 1.5
Found 1 network call pattern(s)
try: res = requests.get(url, timeout=self.timeout) res.raise_for_status(
Code Obfuscation
No obfuscation patterns detected
Shell / Subprocess Execution
No shell execution patterns detected
Credential Harvesting
score 2.5
Found 1 credential access pattern(s)
('Email:') password = getpass.getpass(prompt='Password:') data = { 'email': em
Typosquatting
No typosquatting candidates detected
Registered Email Domain
Email domain looks legitimate: akinon.com
Suspicious Page Links
All external links appear legitimate
Git Repository History
No GitHub repository linked
No GitHub repository link found
Maintainer History
score 2.0
1 maintainer concern(s) found
Author "Akinon" appears to have only 1 package on PyPI (new or inactive account)
Known CVE Vulnerabilities
No known vulnerabilities found in OSV database.
AI App Starter Prompt
Use this prompt to build a project with akinoncli
Create a Python-based mini-application named 'AkinonProductFetcher' that integrates with the 'aknoncli' package to fetch product information from Akinon Cloud Commerce. This application should allow users to interact through a command-line interface (CLI) to retrieve product details based on various criteria such as category, price range, or availability status. Here are the steps and features you should implement: 1. **Setup**: Begin by installing the 'aknoncli' package and setting up your development environment. Ensure you have access credentials to Akinon Cloud Commerce API. 2. **CLI Interface**: Develop a CLI interface using Python's argparse module to accept user inputs for search parameters like product category, minimum and maximum prices, and stock status. 3. **Fetch Products**: Utilize the 'aknoncli' package's core functions to fetch product data from Akinon Cloud Commerce based on the specified criteria provided by the user. 4. **Display Results**: Once the products are fetched, display them in a readable format showing key details such as product name, price, category, and stock status. 5. **Error Handling**: Implement robust error handling to manage cases where the API returns errors or no products match the given criteria. 6. **Optional Features**: - Add support for exporting the fetched product list to CSV or JSON files. - Include a feature to monitor changes in product listings over time by storing previous results and comparing them with new fetches. 7. **Documentation**: Provide comprehensive documentation for the application, including setup instructions, usage examples, and troubleshooting tips. Your task is to design and develop a functional and user-friendly tool that showcases the capabilities of the 'aknoncli' package while offering practical value to end-users.
💬 Discussion Feed
No discussion yet. Be the first to share your thoughts!
Report Abuse / Security Issue