amulet-map-editor

v0.10.56 suspicious
4.0
Medium Risk

A Minecraft world editor and converter that supports all versions since Java 1.12 and Bedrock 1.7.

🤖 AI Analysis

Final verdict: SUSPICIOUS

The package shows minimal signs of malicious intent but is flagged due to the maintainer's lack of an associated GitHub repository and having only one package, which could indicate less established or potentially suspicious behavior.

  • No obfuscation or credential harvesting detected
  • Maintainer has only one package and no associated GitHub repository
Per-check LLM notes
  • Obfuscation: No obfuscation patterns detected, indicating low risk of malicious intent.
  • Credentials: No credential harvesting patterns detected, indicating safe handling of secrets.
  • Metadata: The maintainer has only one package and no associated GitHub repository, which may indicate a less established or potentially suspicious activity.

📦 Package Quality Overall: Low (2.8/10)

○ Low Test Suite 1.0

No test suite detected

  • No test files or test-runner configuration detected
◈ Medium Documentation 5.0

Some documentation present

  • Detailed PyPI description (1409 chars)
○ Low Contributing Guide 2.0

No contributing guide or governance files found

  • No CONTRIBUTING, CODE_OF_CONDUCT, or governance files found
◈ Medium Type Annotations 5.0

Partial type annotation coverage

  • 157 type-annotated function signatures detected in source
○ Low Multiple Contributors 1.0

Unable to verify contributor count: no GitHub repository found

  • No GitHub repository linked — contributor count unavailable

🔬 Heuristic Checks

⚠ Outbound Network Calls score 1.5

Found 1 network call pattern(s)

  • return conn = urllib.request.urlopen(url, timeout=5) data = conn.read() d
✓ Code Obfuscation

No obfuscation patterns detected

⚠ Shell / Subprocess Execution score 10.0

Found 6 shell execution pattern(s)

  • v[1:] exit_code = subprocess.run(args).returncode else: exit_code = _app_
  • form == "darwin": subprocess.run(["open", log_dir]) else: subprocess.run(
  • r]) else: subprocess.run(["xdg-open", log_dir]) if getattr(sys, "frozen", Fal
  • pip is up to date subprocess.run([sys.executable, "-m", "pip", "install", "--upgrade", "pip"]
  • # run pip install subprocess.run( [sys.executable, "-m", "pip", "install", *p
  • installed = ( subprocess.check_output( [sys.executable, "-m", "pip", "freeze"]
✓ Credential Harvesting

No credential harvesting patterns detected

✓ Typosquatting

No typosquatting candidates detected

✓ Registered Email Domain

Email domain looks legitimate: gmail.com

✓ Suspicious Page Links

All external links appear legitimate

✓ Git Repository History

No GitHub repository linked

  • No GitHub repository link found
⚠ Maintainer History score 2.0

1 maintainer concern(s) found

  • Author "James Clare, Ben Gothard et al." appears to have only 1 package on PyPI (new or inactive account)
✓ Known CVE Vulnerabilities

No known vulnerabilities found in OSV database.

💡 AI App Starter Prompt

Use this prompt to build a project with amulet-map-editor 
Create a Minecraft world management tool using the 'amulet-map-editor' Python package. This tool should allow users to easily manage and manipulate their Minecraft worlds, including converting between different versions of Minecraft (Java and Bedrock), extracting and replacing specific chunks of terrain, and applying custom modifications to the world data.

Step 1: Set up the environment
- Ensure Python and the 'amulet-map-editor' package are installed.
- Create a virtual environment if necessary.

Step 2: Design the user interface
- Develop a simple command-line interface (CLI) or a basic graphical user interface (GUI) using a library like Tkinter.
- Include options for opening, saving, and exporting Minecraft worlds.

Step 3: Implement core functionalities
- Allow users to load and save Minecraft worlds.
- Provide options to convert between different versions of Minecraft.
- Enable extraction and replacement of specific chunks of terrain.
- Integrate a feature to apply custom modifications to the world data.

Step 4: Add advanced features
- Implement a terrain generator that allows users to add or remove terrain features programmatically.
- Include a feature to visualize changes made to the world data before applying them.
- Offer support for importing/exporting custom assets such as textures or blocks.

Step 5: Test the application
- Thoroughly test each functionality with various Minecraft world files.
- Ensure compatibility across different Minecraft versions.

The 'amulet-map-editor' package is utilized extensively throughout the development process. It provides the underlying tools for loading, saving, and manipulating Minecraft world data. Use its API to handle version conversion, chunk extraction/replacement, and world modification. Document any specific methods or classes from 'amulet-map-editor' that you use, and ensure your application adheres to best practices for error handling and performance optimization.

💬 Discussion Feed

Leave a comment

No discussion yet. Be the first to share your thoughts!