🤖 AI Analysis

Final verdict: SAFE

The package exhibits low risks across multiple checks, with no signs of obfuscation or credential mishandling. While metadata suggests it might be from a less experienced maintainer, this alone does not indicate any malicious activity.

Low obfuscation risk
Safe handling of credentials
Potential new maintainer

Per-check LLM notes

Obfuscation: No obfuscation patterns detected, indicating low risk of malicious intent.
Credentials: No credential harvesting patterns detected, suggesting safe handling of sensitive information.
Metadata: The package shows some signs of low effort and could be from a new maintainer, but there are no clear red flags.

📦 Package Quality Overall: Low (4.2/10)

○ Low Test Suite 1.0

No test suite detected

No test files or test-runner configuration detected

◈ Medium Documentation 5.0

Some documentation present

Detailed PyPI description (2384 chars)

○ Low Contributing Guide 2.0

No contributing guide or governance files found

No CONTRIBUTING, CODE_OF_CONDUCT, or governance files found

◈ Medium Type Annotations 5.0

Partial type annotation coverage

310 type-annotated function signatures detected in source

✦ High Multiple Contributors 8.0

Active multi-contributor project

4 unique contributor(s) across 44 commits in ppp-one/alpaca-simulators
Small but multi-author team (3–4 contributors)

🔬 Heuristic Checks

✓ Outbound Network Calls

No suspicious network call patterns found

✓ Code Obfuscation

No obfuscation patterns detected

✓ Shell / Subprocess Execution

No shell execution patterns detected

✓ Credential Harvesting

No credential harvesting patterns detected

✓ Typosquatting

No typosquatting candidates detected

✓ Registered Email Domain

No author email provided

✓ Suspicious Page Links

All external links appear legitimate

✓ Git Repository History

Repository ppp-one/alpaca-simulators appears legitimate

⚠ Maintainer History score 6.0

3 maintainer concern(s) found

Only one version has ever been released — brand new package
Author "Peter Pedersen, David Degen" appears to have only 1 package on PyPI (new or inactive account)
Package has no PyPI classifiers (low effort / metadata quality)

✓ Known CVE Vulnerabilities

No known vulnerabilities found in OSV database.

💡 AI App Starter Prompt

Use this prompt to build a project with alpaca-simulators

Create a Python-based mini-application called 'AstroSim' that leverages the 'alpaca-simulators' package to simulate an observatory control environment. AstroSim will serve as a testing ground for developers working on ASCOM Alpaca-compatible software without needing access to actual telescopes or other hardware. Here’s a detailed breakdown of what AstroSim should accomplish:

1. **Setup Environment**: Ensure that AstroSim can be installed via pip and requires Python 3.8 or later. Include setup instructions in your README.md.
2. **Simulation Capabilities**: Utilize 'alpaca-simulators' to create virtual devices such as a telescope, camera, and mount. Each device should mimic real-world functionalities like pointing to celestial coordinates, taking exposures, and tracking objects.
3. **User Interface**: Develop a simple command-line interface (CLI) for users to interact with the simulated devices. The CLI should allow commands like 'point', 'take-exposure', and 'track'.
4. **Configuration Management**: Allow users to configure simulation settings such as initial device positions, weather conditions, and observational parameters through a configuration file.
5. **Logging and Debugging**: Implement logging for all interactions and events within the simulation. This will help in debugging and understanding the behavior of the simulated devices.
6. **Testing Suite**: Create a suite of automated tests using pytest to ensure that each simulated device functions correctly according to its specifications.
7. **Documentation**: Provide comprehensive documentation on how to use AstroSim, including examples of typical workflows and troubleshooting tips.

By completing this project, you'll not only gain experience with 'alpaca-simulators' but also contribute a valuable tool for the astronomy software development community.