aletheia-safety

v0.9.0 suspicious
6.0
Medium Risk

Python SDK for the ALETHEIA Safety Database API — chemical safety data for 1,886+ compounds with typed responses

🤖 AI Analysis

Final verdict: SUSPICIOUS

The package makes network calls to external URLs and the maintainer has only one package, raising concerns about its legitimacy and potential for misuse.

  • Network risk due to external HTTP requests
  • Single-package maintainer raises suspicion
Per-check LLM notes
  • Network: The observed network calls suggest the package is making HTTP requests to external URLs, which could be for legitimate purposes like fetching updates or sending analytics data.
  • Shell: No shell execution patterns were detected, indicating low risk of direct command execution from the package.
  • Obfuscation: No obfuscation patterns detected, indicating low risk.
  • Credentials: No credential harvesting patterns detected, indicating low risk.
  • Metadata: The repository is not found and the maintainer has only one package, which raises suspicion but does not confirm malice.

📦 Package Quality Overall: Low (4.6/10)

◈ Medium Test Suite 6.0

Partial test coverage signals detected

  • 2 test file(s) detected (e.g. test_client.py)
◈ Medium Documentation 7.0

Some documentation present

  • Documentation URL: "Documentation" -> https://api.aletheia.holisticquality.io/api/openapi
  • Detailed PyPI description (4600 chars)
○ Low Contributing Guide 4.0

No contributing guide or governance files found

  • Development Status classifier >= Beta
◈ Medium Type Annotations 5.0

Partial type annotation coverage

  • 209 type-annotated function signatures detected in source
○ Low Multiple Contributors 1.0

Could not retrieve contributor data from GitHub

  • GitHub API error: 404

🔬 Heuristic Checks

⚠ Outbound Network Calls score 7.5

Found 5 network call pattern(s)

  • n range(3): req = urllib.request.Request(url) req.add_header("User-Agent", f"alet
  • try: with urllib.request.urlopen(req, timeout=self.timeout) as resp:
  • data).encode() req = urllib.request.Request(url, data=payload, method="POST") req.add_he
  • try: with urllib.request.urlopen(req, timeout=self.timeout) as resp:
  • code(filtered) req = urllib.request.Request(url, method="DELETE") req.add_header("User-A
✓ Code Obfuscation

No obfuscation patterns detected

✓ Shell / Subprocess Execution

No shell execution patterns detected

✓ Credential Harvesting

No credential harvesting patterns detected

✓ Typosquatting

No typosquatting candidates detected

✓ Registered Email Domain

No author email provided

✓ Suspicious Page Links

All external links appear legitimate

⚠ Git Repository History score 3.0

Repository not found (deleted or private)

  • Repository not found (deleted or private)
⚠ Maintainer History score 2.0

1 maintainer concern(s) found

  • Author "Holistic Quality LLC" appears to have only 1 package on PyPI (new or inactive account)
✓ Known CVE Vulnerabilities

No known vulnerabilities found in OSV database.

💡 AI App Starter Prompt

Use this prompt to build a project with aletheia-safety 
Create a desktop application using Python that allows users to search for chemical safety information from the ALETHEIA Safety Database. This application should utilize the 'aletheia-safety' package to fetch detailed safety data for various chemicals. Here’s a step-by-step guide on what the application should achieve:

1. **User Interface Design**: Design a simple yet intuitive GUI using Tkinter or PyQt5 where users can input the name of a chemical.
2. **Chemical Search Functionality**: Implement a function that takes user input and queries the ALETHEIA Safety Database via the 'aletheia-safety' package to retrieve relevant safety data.
3. **Data Display**: Present the retrieved data in a structured format within the GUI. Include sections such as physical properties, health effects, first aid measures, and storage recommendations.
4. **Error Handling**: Ensure the application handles cases where no data is found for a given chemical name gracefully, providing informative feedback to the user.
5. **Advanced Features** (Optional): Add features like saving the queried data into a local database for future reference, allowing users to compare safety data between multiple chemicals, or integrating a feature that suggests safer alternatives based on the chemical’s hazards.

By completing this project, you will not only enhance your skills in developing desktop applications but also deepen your understanding of chemical safety information and its practical application.

💬 Discussion Feed

Leave a comment

No discussion yet. Be the first to share your thoughts!