anchorpy3

v0.4.5 suspicious
3.0
Low Risk

The Python Anchor client with support for new Anchor IDL formats (fork of anchorpy by kevinheavey)

🤖 AI Analysis

Final verdict: SUSPICIOUS

The package shows no signs of direct malicious activity such as credential harvesting or code obfuscation. However, the missing author information and possibly inactive account raise concerns about its legitimacy.

  • Low risk for credential theft and code obfuscation
  • Suspicious metadata due to missing author details and potentially inactive account
Per-check LLM notes
  • Obfuscation: No obfuscation patterns detected, indicating low risk.
  • Credentials: No credential harvesting patterns detected, indicating low risk.
  • Metadata: The author's name is missing and the account seems new or inactive, raising some suspicion but not definitive evidence of malice.

📦 Package Quality Overall: Medium (5.4/10)

○ Low Test Suite 1.0

No test suite detected

  • No test files or test-runner configuration detected
◈ Medium Documentation 7.0

Some documentation present

  • Documentation URL: "Documentation" -> https://kevinheavey.github.io/anchorpy/
  • Detailed PyPI description (2155 chars)
○ Low Contributing Guide 4.0

No contributing guide or governance files found

  • Development Status classifier >= Beta
◈ Medium Type Annotations 5.0

Partial type annotation coverage

  • 268 type-annotated function signatures detected in source
✦ High Multiple Contributors 10.0

Active multi-contributor project

  • 7 unique contributor(s) across 100 commits in kakagri/anchorpy
  • Active community — 5 or more distinct contributors

🔬 Heuristic Checks

✓ Outbound Network Calls

No suspicious network call patterns found

✓ Code Obfuscation

No obfuscation patterns detected

⚠ Shell / Subprocess Execution score 8.0

Found 4 shell execution pattern(s)

  • popen_instance = subprocess.Popen( args, **popen_kwargs,
  • s None else build_cmd subprocess.run(actual_build_cmd, cwd=path, check=True, shell=True)
  • ld_cmd, cwd=path, check=True, shell=True) # ensure process is running and return its logfile
  • ld_cmd, cwd=path, check=True, shell=True) # ensure process is running _ = _fixed_xpr
✓ Credential Harvesting

No credential harvesting patterns detected

✓ Typosquatting

No typosquatting candidates detected

✓ Registered Email Domain

Email domain looks legitimate: gmail.com>

✓ Suspicious Page Links

All external links appear legitimate

✓ Git Repository History

Repository kakagri/anchorpy appears legitimate

⚠ Maintainer History score 4.0

2 maintainer concern(s) found

  • Author name is missing or very short
  • Author "" appears to have only 1 package on PyPI (new or inactive account)
✓ Known CVE Vulnerabilities

No known vulnerabilities found in OSV database.

💡 AI App Starter Prompt

Use this prompt to build a project with anchorpy3 
Create a decentralized finance (DeFi) application called 'Anchor Savings Tracker' using Python and the 'anchorpy3' library. This application will track user deposits into the Anchor Protocol's savings account on Solana blockchain and calculate interest earned over time. The app will also display the current interest rate and allow users to withdraw their funds along with the accrued interest.

Steps to develop the application:
1. Set up your development environment with Python and install the 'anchorpy3' package.
2. Connect to the Solana network using 'anchorpy3'. Choose whether to connect to the mainnet-beta or a local testnet for development purposes.
3. Implement a function to fetch the current interest rate from the Anchor Protocol using 'anchorpy3'. Display this information to the user.
4. Create a feature to deposit SOL tokens into the Anchor Protocol savings account through 'anchorpy3'. Ensure that users can specify the amount they wish to deposit.
5. Track the deposited amounts and the time elapsed since the last deposit. Use this data to calculate the interest earned based on the current and historical interest rates.
6. Develop a withdrawal feature that allows users to retrieve their initial deposit plus the accrued interest. This should be done through 'anchorpy3', ensuring transactions are properly signed and executed.
7. Add functionality to display a summary of all transactions, including deposits, withdrawals, and interest earned.
8. Optionally, implement a feature to simulate different deposit strategies and predict potential earnings over various time periods.
9. Ensure the application handles errors gracefully, providing informative messages to the user when something goes wrong.
10. Finally, document your code thoroughly and provide instructions on how others can run and extend the application.

Suggested Features:
- User authentication to secure individual accounts.
- Historical interest rate data visualization.
- Real-time notifications for changes in interest rates.
- Integration with other DeFi applications for more complex financial strategies.

💬 Discussion Feed

Leave a comment

No discussion yet. Be the first to share your thoughts!