allianceauth-pve

v1.17.0 suspicious
4.0
Medium Risk

PvE tool for AllianceAuth

🤖 AI Analysis

Final verdict: SUSPICIOUS

The package shows minimal risk in terms of network, shell, obfuscation, and credential risks. However, the metadata risk due to the maintainer's new and inactive account status is noteworthy, raising suspicion about the package's origin and intent.

  • Low network, shell, obfuscation, and credential risks
  • Maintainer has a new or inactive account with incomplete author information
Per-check LLM notes
  • Network: No network calls detected, which is normal unless the package requires external services.
  • Shell: No shell execution patterns detected, indicating no direct system command execution observed.
  • Obfuscation: No obfuscation patterns detected, indicating low risk.
  • Credentials: No credential harvesting patterns detected, indicating low risk.
  • Metadata: The maintainer has a new or inactive account and lacks a full author name, which raises some suspicion but does not strongly indicate malice.

📦 Package Quality Overall: Medium (5.8/10)

✦ High Test Suite 9.0

Test suite present — 8 test file(s) found

  • 8 test file(s) detected (e.g. test_actions.py)
◈ Medium Documentation 5.0

Some documentation present

  • Detailed PyPI description (9314 chars)
○ Low Contributing Guide 4.0

No contributing guide or governance files found

  • Development Status classifier >= Beta
◈ Medium Type Annotations 5.0

Partial type annotation coverage

  • 8 type-annotated function signatures (partial)
◈ Medium Multiple Contributors 6.0

Limited contributor diversity

  • 2 unique contributor(s) across 100 commits in Maestro-Zacht/allianceauth-pve
  • Two distinct contributors found

🔬 Heuristic Checks

Outbound Network Calls

No suspicious network call patterns found

Code Obfuscation

No obfuscation patterns detected

Shell / Subprocess Execution

No shell execution patterns detected

Credential Harvesting

No credential harvesting patterns detected

Typosquatting

No typosquatting candidates detected

Registered Email Domain

Email domain looks legitimate: yahoo.it>

Suspicious Page Links

All external links appear legitimate

Git Repository History

Repository Maestro-Zacht/allianceauth-pve appears legitimate

Maintainer History score 4.0

2 maintainer concern(s) found

  • Author name is missing or very short
  • Author "" appears to have only 1 package on PyPI (new or inactive account)
Known CVE Vulnerabilities

No known vulnerabilities found in OSV database.

💡 AI App Starter Prompt

Use this prompt to build a project with allianceauth-pve
Build a simple Python application using the allianceauth-pve package to demonstrate its core features.

💬 Discussion Feed

Leave a comment

No discussion yet. Be the first to share your thoughts!