allianceauth-oidc-provider-eveo7

v0.3.2 suspicious
4.0
Medium Risk

OpenID Connect / OAuth2 provider for Alliance Auth, layered on django-oauth-toolkit.

🤖 AI Analysis

Final verdict: SUSPICIOUS

The package shows low individual risks across various categories but raises concerns due to potential unreliability from the maintainer's history and repository activity.

  • Low risk in network, shell, obfuscation, and credential aspects.
  • Potential unreliability from maintainer history and repository activity.
Per-check LLM notes
  • Network: The observed network call pattern is likely part of the intended functionality for handling backchannel logout operations, which is common in authentication and authorization services.
  • Shell: No shell execution patterns detected, indicating no immediate risk related to unauthorized system command execution.
  • Obfuscation: No obfuscation patterns detected, indicating low risk.
  • Credentials: No credential harvesting patterns detected, indicating low risk.
  • Metadata: Low risk with no typosquatting or email domain flags, but concerns over repository activity and maintainer history suggest potential unreliability.

📦 Package Quality Overall: Medium (5.4/10)

○ Low Test Suite 1.0

No test suite detected

  • No test files or test-runner configuration detected
◈ Medium Documentation 5.0

Some documentation present

  • Detailed PyPI description (57221 chars)
✦ High Contributing Guide 9.0

Has contribution guidelines and governance files

  • Governance file: security.py
  • Separate author ("AaronKable") and maintainer ("Boris Talovikov") listed
◈ Medium Type Annotations 7.0

Partial type annotation coverage

  • Type checker (mypy / pyright / pytype) referenced in project
  • 128 type-annotated function signatures detected in source
◈ Medium Multiple Contributors 5.0

Limited contributor diversity

  • 1 unique contributor(s) across 100 commits in 6RUN0/allianceauth-oidc-provider
  • Single author but highly active (100 commits)

🔬 Heuristic Checks

⚠ Outbound Network Calls score 1.5

Found 1 network call pattern(s)

  • ) try: response = requests.post( application.backchannel_logout_uri,
✓ Code Obfuscation

No obfuscation patterns detected

✓ Shell / Subprocess Execution

No shell execution patterns detected

✓ Credential Harvesting

No credential harvesting patterns detected

✓ Typosquatting

No typosquatting candidates detected

✓ Registered Email Domain

Email domain looks legitimate: gmail.com>

⚠ Suspicious Page Links score 2.0

Found 1 suspicious link(s) on the package page

  • Non-HTTPS external link: http://`
⚠ Git Repository History score 2.5

Git history flags: Repository has zero stars and zero forks

  • Repository has zero stars and zero forks
⚠ Maintainer History score 2.0

1 maintainer concern(s) found

  • Author "AaronKable" appears to have only 1 package on PyPI (new or inactive account)
✓ Known CVE Vulnerabilities

No known vulnerabilities found in OSV database.

💡 AI App Starter Prompt

Use this prompt to build a project with allianceauth-oidc-provider-eveo7 
Develop a mini-application called 'EVE Online Authentication Gateway' which integrates with EVE Online using the 'allianceauth-oidc-provider-eveo7' package. This application will serve as a bridge between your personal or organizational website and the EVE Online universe, allowing users to authenticate via their EVE Online accounts. Here’s how you can structure your project and what it should accomplish:

1. **Setup**: Begin by setting up a Django environment with the 'allianceauth-oidc-provider-eveo7' package installed. Ensure you have all necessary dependencies and configurations for Django and the OIDC/OAuth2 provider ready.

2. **User Interface**: Design a simple yet effective user interface where users can initiate the authentication process through their EVE Online account. Include elements such as login buttons, status messages, and error handling interfaces.

3. **Authentication Flow**: Implement the authentication flow using the 'allianceauth-oidc-provider-eveo7'. This involves configuring the package to recognize and handle requests from EVE Online, securely exchanging tokens, and verifying user identities. Pay attention to security best practices throughout this process.

4. **User Management**: Upon successful authentication, the application should manage user sessions and provide a seamless transition to the main content area of your site or application. Users should also be able to log out and end their session securely.

5. **Advanced Features** (Optional): Consider adding advanced features such as linking multiple EVE Online accounts to a single user profile, customizing authentication prompts, or integrating with other services like Discord for cross-platform authentication.

6. **Testing and Deployment**: Thoroughly test your application to ensure it works as expected across different scenarios and devices. Deploy your application to a live server or a cloud platform of your choice.

The goal of this project is to create a robust, secure, and user-friendly authentication gateway that leverages the power of 'allianceauth-oidc-provider-eveo7' to connect your digital world with the EVE Online community.