anaplan-sdk

v0.5.16 suspicious
4.0
Medium Risk

Streamlined Python Interface for the Anaplan API.

🤖 AI Analysis

Final verdict: SUSPICIOUS

The package shows signs of potential credential mishandling and has a new or inactive maintainer, raising concerns about its reliability and security practices.

  • Potential credential risk due to 'keyring.get_password'
  • Incomplete maintainer profile
Per-check LLM notes
  • Obfuscation: No obfuscation patterns detected in the code snippet provided.
  • Credentials: The use of 'keyring.get_password' suggests potential credential handling, which could be legitimate but also poses a risk if not properly managed.
  • Metadata: The maintainer has an incomplete profile and seems to be new or inactive, which raises some concerns but does not strongly indicate malicious intent.

📦 Package Quality Overall: Medium (6.6/10)

✦ High Test Suite 9.0

Test suite present — 18 test file(s) found

  • Test runner config found: conftest.py
  • Test runner config found: conftest.py
  • Test runner config found: conftest.py
  • 18 test file(s) detected (e.g. conftest.py)
◈ Medium Documentation 7.0

Some documentation present

  • Documentation URL: "Documentation" -> https://vinzenzklass.github.io/anaplan-sdk/
  • Detailed PyPI description (3127 chars)
○ Low Contributing Guide 2.0

No contributing guide or governance files found

  • No CONTRIBUTING, CODE_OF_CONDUCT, or governance files found
◈ Medium Type Annotations 5.0

Partial type annotation coverage

  • 584 type-annotated function signatures detected in source
✦ High Multiple Contributors 10.0

Active multi-contributor project

  • 5 unique contributor(s) across 100 commits in VinzenzKlass/anaplan-sdk
  • Active community — 5 or more distinct contributors

🔬 Heuristic Checks

⚠ Outbound Network Calls score 7.5

Found 5 network call pattern(s)

  • on Token.") with httpx.Client(timeout=15.0) as client: self._parse_auth_r
  • ) with httpx.Client() as client: res = client.send(self._oauth.
  • try: async with httpx.AsyncClient() as client: response = await client.send(se
  • try: async with httpx.AsyncClient() as client: response = await client.get(
  • try: with httpx.Client() as client: response = client.send(self._to
✓ Code Obfuscation

No obfuscation patterns detected

✓ Shell / Subprocess Execution

No shell execution patterns detected

⚠ Credential Harvesting score 2.5

Found 1 credential access pattern(s)

  • g stored = keyring.get_password(self._service_name, self._service_name) if
✓ Typosquatting

No typosquatting candidates detected

✓ Registered Email Domain

Email domain looks legitimate: valantic.com>

✓ Suspicious Page Links

All external links appear legitimate

✓ Git Repository History

Repository VinzenzKlass/anaplan-sdk appears legitimate

⚠ Maintainer History score 4.0

2 maintainer concern(s) found

  • Author name is missing or very short
  • Author "" appears to have only 1 package on PyPI (new or inactive account)
✓ Known CVE Vulnerabilities

No known vulnerabilities found in OSV database.

💡 AI App Starter Prompt

Use this prompt to build a project with anaplan-sdk 
Your task is to develop a mini-application that streamlines data manipulation and analysis within the Anaplan platform using the 'anaplan-sdk' Python package. This application will serve as a bridge between your local environment and Anaplan, allowing you to automate tasks such as data import/export, model execution, and result retrieval.

**Application Overview:**
This application, named 'AnaplanSync', will provide users with a simple interface to interact with their Anaplan models. It will support the following core functionalities:
- **Data Import**: Ability to read data from various sources (CSV, Excel, SQL databases) and upload it into Anaplan models.
- **Model Execution**: Trigger specific actions or processes within Anaplan models programmatically.
- **Data Export**: Retrieve data from Anaplan models and save it locally in formats like CSV or Excel.
- **Real-time Monitoring**: Option to monitor the status of ongoing processes within Anaplan.

**Steps to Build the Application:**
1. **Setup Environment**: Install necessary packages including 'anaplan-sdk', pandas for data handling, and any other required libraries. Ensure your environment is configured to connect to Anaplan.
2. **Authentication & Connection**: Use 'anaplan-sdk' to authenticate and establish a connection to your Anaplan workspace and model. Implement secure handling of credentials.
3. **Data Import Module**: Develop functions to read data from different file types and databases. Utilize 'anaplan-sdk' methods to map and upload this data into appropriate modules within Anaplan.
4. **Model Execution Module**: Create a feature to execute specific tasks or workflows defined within Anaplan models. This could include running calculations, generating reports, etc.
5. **Data Export Module**: Implement functionality to download data from Anaplan back to your local system. Allow users to specify output format and destination.
6. **Monitoring Module**: Add real-time monitoring capabilities to track the progress and status of processes initiated within Anaplan.
7. **User Interface**: Design a simple command-line interface (CLI) for users to interact with the application. Include options to select operations, input parameters, and view results.
8. **Documentation & Testing**: Write comprehensive documentation detailing how to use each module and function. Conduct thorough testing to ensure all components work as expected.

**Utilizing 'anaplan-sdk':**
Throughout development, leverage 'anaplan-sdk' for its streamlined methods to connect, manage sessions, upload/download data, and execute model actions. Pay special attention to error handling and logging to maintain robustness.

This project aims to demonstrate the power of 'anaplan-sdk' in simplifying interactions with Anaplan, making it easier for developers and analysts to integrate Anaplan into their workflow.

💬 Discussion Feed

Leave a comment

No discussion yet. Be the first to share your thoughts!