animpy

v2.5.0 suspicious
4.0
Medium Risk

A simple terminal animation library

🤖 AI Analysis

Final verdict: SUSPICIOUS

The package shows low risk in terms of network activity, obfuscation, and credential handling. However, the use of shell execution for clearing the screen introduces some risk, and the package appears to be a typosquatting attempt targeting 'numpy', which raises suspicion.

  • Potential typosquatting
  • Use of shell commands
Per-check LLM notes
  • Network: No network calls detected, indicating low risk for data exfiltration or C2.
  • Shell: Shell execution is used to clear the screen, which is benign but could potentially be exploited if not sanitized properly.
  • Obfuscation: No obfuscation patterns detected, indicating low risk of malicious intent.
  • Credentials: No credential harvesting patterns detected, indicating low risk of unauthorized access.
  • Metadata: The low number of packages by the author and lack of PyPI classifiers suggest potential low effort or newness, but no clear signs of malice.
  • ⚠ Typosquatting target: numpy

📦 Package Quality Overall: Medium (5.6/10)

✦ High Test Suite 9.0

Test suite present — 7 test file(s) found

  • 7 test file(s) detected (e.g. test_animation.py)
◈ Medium Documentation 7.0

Some documentation present

  • Documentation URL: "Documentation" -> https://13DoesPython.github.io/animpy/
  • Detailed PyPI description (14845 chars)
○ Low Contributing Guide 2.0

No contributing guide or governance files found

  • No CONTRIBUTING, CODE_OF_CONDUCT, or governance files found
◈ Medium Type Annotations 5.0

Partial type annotation coverage

  • 6 type-annotated function signatures (partial)
◈ Medium Multiple Contributors 5.0

Limited contributor diversity

  • 1 unique contributor(s) across 69 commits in 13DoesPython/animpy
  • Single author but highly active (69 commits)

🔬 Heuristic Checks

✓ Outbound Network Calls

No suspicious network call patterns found

✓ Code Obfuscation

No obfuscation patterns detected

⚠ Shell / Subprocess Execution score 4.0

Found 2 shell execution pattern(s)

  • sys.stdout.flush() os.system("") def clear_screen(): os.system("cls" if os.name =
  • ) def clear_screen(): os.system("cls" if os.name == "nt" else "clear") def print_panel(te
✓ Credential Harvesting

No credential harvesting patterns detected

⚠ Typosquatting score 3.0

Possible typosquat of: numpy

  • "animpy" is 2 edit(s) from "numpy"
✓ Registered Email Domain

No author email provided

✓ Suspicious Page Links

All external links appear legitimate

✓ Git Repository History

Repository 13DoesPython/animpy appears legitimate

⚠ Maintainer History score 4.0

2 maintainer concern(s) found

  • Author "Samin Riyaz" appears to have only 1 package on PyPI (new or inactive account)
  • Package has no PyPI classifiers (low effort / metadata quality)
✓ Known CVE Vulnerabilities

No known vulnerabilities found in OSV database.

💡 AI App Starter Prompt

Use this prompt to build a project with animpy 
Create a command-line utility named 'TerminalAnimator' using the Python package 'animpy'. This utility should allow users to generate various types of animations directly in their terminal. Here's a detailed breakdown of the project requirements:

1. **User Interface**: Design a simple yet intuitive command-line interface where users can input commands to start different types of animations.
2. **Supported Animations**: Implement at least three different types of animations such as spinning wheels, loading bars, and fireworks displays. Each animation should have unique characteristics and visual effects.
3. **Customization Options**: Allow users to customize their animations by specifying parameters like speed, color, and size. Users should also be able to choose the type of animation they want to display.
4. **Animation Control**: Include functionality for users to pause, resume, and stop animations manually.
5. **Error Handling**: Ensure that your utility handles errors gracefully, providing clear messages to users if they input invalid commands or parameters.
6. **Documentation**: Provide comprehensive documentation on how to use the utility, including examples of valid commands and expected outputs.
7. **Utilizing 'animpy' Package**: Use the 'animpy' package to create the animations. Explore its core features thoroughly to maximize its potential in your utility. For instance, utilize 'animpy' functions to control the timing, appearance, and behavior of each animation effectively.
8. **Testing**: Write tests to ensure that all functionalities work as intended, especially focusing on error handling and customization options.

This project aims to showcase the versatility and ease of use of the 'animpy' package while providing a practical and engaging tool for users who enjoy terminal-based visual experiences.

💬 Discussion Feed

Leave a comment

No discussion yet. Be the first to share your thoughts!