AI Analysis
The package shows no signs of malicious activity and poses minimal risk based on the analysis. The metadata risk slightly increases due to the maintainer's single package history, but this alone does not indicate a supply-chain attack.
- No network calls or shell executions detected
- Low obfuscation and credential risk
- Maintainer has only one package
Per-check LLM notes
- Network: No network calls detected, which is normal unless the package requires network functionality.
- Shell: No shell execution patterns detected, indicating no immediate signs of malicious activity.
- Obfuscation: No obfuscation patterns detected, indicating low risk of malicious intent related to code obfuscation.
- Credentials: No credential harvesting patterns detected, suggesting no immediate threat of secret or sensitive information being stolen.
- Metadata: The maintainer has only one package, which may indicate a new or less active account, but no other red flags were identified.
Package Quality Overall: Low (3.8/10)
Partial test coverage signals detected
1 test file(s) detected (e.g. test_job.py)
Some documentation present
Detailed PyPI description (1193 chars)
No contributing guide or governance files found
No CONTRIBUTING, CODE_OF_CONDUCT, or governance files found
Partial type annotation coverage
13 type-annotated function signatures detected in source
Unable to verify contributor count: no GitHub repository found
No GitHub repository linked — contributor count unavailable
Heuristic Checks
No suspicious network call patterns found
No obfuscation patterns detected
No shell execution patterns detected
No credential harvesting patterns detected
No typosquatting candidates detected
No author email provided
All external links appear legitimate
No GitHub repository linked
No GitHub repository link found
1 maintainer concern(s) found
Author "Allen Institute for Neural Dynamics" appears to have only 1 package on PyPI (new or inactive account)
No known vulnerabilities found in OSV database.
AI App Starter Prompt
Build a simple Python application using the allen-asset-creation-library package to demonstrate its core features.
💬 Discussion Feed
No discussion yet. Be the first to share your thoughts!
Report Abuse / Security Issue