AI Analysis
Final verdict: SUSPICIOUS
The package shows significant obfuscation and a potential for network activity through SMTP, raising concerns about its legitimacy and purpose.
- High obfuscation risk due to eval() usage
- Potential for unauthorized email sending via SMTP
Per-check LLM notes
- Network: The use of SMTP suggests the package may be sending emails, which could be legitimate if it's intended to send notifications or messages.
- Shell: No shell execution patterns were detected, indicating low risk.
- Obfuscation: The use of eval() with complex strings suggests an attempt to obfuscate code, which is often used for malicious purposes.
- Credentials: No clear signs of credential harvesting detected.
- Metadata: The author has only one package, which might indicate a new or less active account, raising some suspicion but not conclusive evidence of malice.
Package Quality Overall: Medium (5.0/10)
○ Low
Test Suite
1.0
No test suite detected
No test files or test-runner configuration detected
◈ Medium
Documentation
5.0
Some documentation present
Detailed PyPI description (3495 chars)
○ Low
Contributing Guide
4.0
No contributing guide or governance files found
Development Status classifier >= Beta
◈ Medium
Type Annotations
7.0
Partial type annotation coverage
Classifier: Typing :: Typed210 type-annotated function signatures detected in source
✦ High
Multiple Contributors
8.0
Active multi-contributor project
3 unique contributor(s) across 100 commits in asozialesnetzwerk/an-websiteSmall but multi-author team (3–4 contributors)
Heuristic Checks
Outbound Network Calls
score 1.5
Found 1 network call pattern(s)
".join(recipients) with smtplib.SMTP(server, port) as smtp: smtp.set_debuglevel(sys.flags
Code Obfuscation
score 10.0
Found 6 obfuscation pattern(s)
result = eval( # pylint: disable=eval-used # nosec: B307"uvloop").new_event_loop E = eval( # pylint: disable=eval-used # nosec: B307 "eval(repr(eval-used # nosec: B307 "eval(repr((_:=[],_.append(_))[0]))[0][0]" ) ErrorTuple: TypeAliahy and not hy.eval( hy.read( '(* (- (* (+ 0 1) 2 3except SyntaxError: compile(code, "", "exec", flags, cast(bool, 0x5F3759DF), 0) return "exec"body = send_to_remote("__import__('hy')", mode="exec") if not (isinstance(body, dict) a
Shell / Subprocess Execution
No shell execution patterns detected
Credential Harvesting
No credential harvesting patterns detected
Typosquatting
No typosquatting candidates detected
Registered Email Domain
Email domain looks legitimate: asozial.org
Suspicious Page Links
All external links appear legitimate
Git Repository History
Repository asozialesnetzwerk/an-website appears legitimate
Maintainer History
score 2.0
1 maintainer concern(s) found
Author "Das Asoziale Netzwerk" appears to have only 1 package on PyPI (new or inactive account)
Known CVE Vulnerabilities
No known vulnerabilities found in OSV database.
AI App Starter Prompt
Use this prompt to build a project with an-website
Create a fully-functional mini-app called 'WorldsBestWebsiteGenerator' using the Python package 'an-website'. This app will allow users to easily create and customize their own websites with minimal effort. The goal is to streamline the website creation process, making it accessible to those without extensive coding knowledge. Here are the key steps and features for your project: 1. **User Interface**: Develop a simple and intuitive UI where users can input basic information about their desired website such as title, description, and content. 2. **Theme Customization**: Utilize 'an-website' to provide a variety of pre-designed themes that users can choose from. These themes should include options for color schemes, layout styles, and font types. 3. **Content Management**: Allow users to add text, images, and links directly through the app interface. Ensure that the content can be organized into different sections like Home, About Us, Services, etc. 4. **Preview Functionality**: Implement a feature that allows users to preview their website in real-time as they make changes. 5. **Export Option**: Once satisfied, users should be able to export their website as a set of HTML files or even publish it online if 'an-website' supports such functionality. 6. **SEO Optimization**: Include basic SEO tools within the app to help users optimize their website for search engines. 7. **Analytics Integration**: If possible, integrate basic analytics tracking so users can monitor traffic and engagement on their newly created sites. To achieve these goals, you'll need to dive deep into 'an-website' documentation to understand its capabilities and limitations. Focus on leveraging its core functionalities to enhance user experience and simplify web development tasks. Your final product should not only be functional but also visually appealing and easy to use.