alchemical

v1.0.3 suspicious
4.0
Medium Risk

Modern SQLAlchemy simplified

🤖 AI Analysis

Final verdict: SUSPICIOUS

The package shows some potential risks, primarily due to shell execution and the maintainer's metadata lacking proper information, which together raise concerns about its trustworthiness.

  • Shell execution detected
  • Maintainer metadata is incomplete
Per-check LLM notes
  • Network: No network calls detected, which is normal unless the package is expected to communicate with external services.
  • Shell: Shell execution detected may be for configuration purposes but could pose a risk if commands are not properly sanitized or controlled.
  • Obfuscation: No obfuscation patterns detected, indicating low risk.
  • Credentials: No credential harvesting patterns detected, indicating low risk.
  • Metadata: The maintainer has a new or inactive account and lacks a proper author name, which may indicate a low-risk but suspicious activity.

📦 Package Quality Overall: Medium (5.4/10)

✦ High Test Suite 9.0

Test suite present — 8 test file(s) found

  • 8 test file(s) detected (e.g. aioapp1.py)
◈ Medium Documentation 7.0

Some documentation present

  • 1 documentation file(s) (e.g. conf.py)
  • Brief PyPI description (536 chars)
○ Low Contributing Guide 2.0

No contributing guide or governance files found

  • No CONTRIBUTING, CODE_OF_CONDUCT, or governance files found
○ Low Type Annotations 1.0

No type annotations detected

  • No type annotations, py.typed marker, or stub files detected
✦ High Multiple Contributors 8.0

Active multi-contributor project

  • 4 unique contributor(s) across 100 commits in miguelgrinberg/alchemical
  • Small but multi-author team (3–4 contributors)

🔬 Heuristic Checks

✓ Outbound Network Calls

No suspicious network call patterns found

✓ Code Obfuscation

No obfuscation patterns detected

⚠ Shell / Subprocess Execution score 4.0

Found 2 shell execution pattern(s)

  • ttest def run_cmd(cmd): subprocess.run(cmd, shell=True, check=True) def configure_alembic(alchemi
  • cmd): subprocess.run(cmd, shell=True, check=True) def configure_alembic(alchemical_db): wi
✓ Credential Harvesting

No credential harvesting patterns detected

✓ Typosquatting

No typosquatting candidates detected

✓ Registered Email Domain

Email domain looks legitimate: gmail.com>

✓ Suspicious Page Links

All external links appear legitimate

✓ Git Repository History

Repository miguelgrinberg/alchemical appears legitimate

⚠ Maintainer History score 4.0

2 maintainer concern(s) found

  • Author name is missing or very short
  • Author "" appears to have only 1 package on PyPI (new or inactive account)
✓ Known CVE Vulnerabilities

No known vulnerabilities found in OSV database.

💡 AI App Starter Prompt

Use this prompt to build a project with alchemical 
Create a mini-application called 'Bookshelf' which allows users to manage their personal collection of books. This application will utilize the 'alchemical' package to simplify database interactions using SQLAlchemy under the hood. Your task is to design and implement the following functionalities:

1. User Authentication: Users should be able to register, log in, and log out.
2. Book Management: Users can add, remove, and update books in their collection. Each book entry should include fields such as title, author, publication year, and a brief description.
3. Search Functionality: Implement a search feature where users can find books by typing keywords related to the title, author, or description.
4. Advanced Search Filters: Allow users to filter books based on specific criteria like publication year range or genre.
5. Display Book Collections: Provide a user-friendly interface to display all books in a user's collection.
6. Data Persistence: Ensure that all data entered by the user is saved and retrieved correctly using the 'alchemical' package.
7. Error Handling: Implement proper error handling to ensure a smooth user experience even when errors occur.
8. Security Measures: Use secure methods for storing passwords and handling user data.

The 'alchemical' package simplifies working with SQLAlchemy, allowing you to focus more on your application logic rather than the complexities of database operations. Utilize its ORM capabilities to define models for users and books, handle transactions, and perform CRUD operations efficiently. Additionally, explore how 'alchemical' can help streamline the process of setting up a database connection and managing sessions.

💬 Discussion Feed

Leave a comment

No discussion yet. Be the first to share your thoughts!