annot8

v0.12.5 suspicious
4.0
Medium Risk

Python package to annotate files with headers.

🤖 AI Analysis

Final verdict: SUSPICIOUS

The package is assessed as suspicious due to the maintainer's lack of a proper author name and potentially inactive account, suggesting possible oversight or low effort in maintaining the package.

  • Metadata risk - Maintainer's account appears new or inactive
  • Low engagement from the maintainer
Per-check LLM notes
  • Network: No network calls detected, indicating low risk.
  • Shell: Shell executions are likely for version control operations and pose minimal risk.
  • Obfuscation: No obfuscation patterns detected, indicating low risk.
  • Credentials: No credential harvesting patterns detected, indicating low risk.
  • Metadata: The maintainer has a new or inactive account and lacks a proper author name, which may indicate low effort or oversight.

📦 Package Quality Overall: Medium (5.6/10)

◈ Medium Test Suite 6.0

Partial test coverage signals detected

  • Test runner config found: pyproject.toml
◈ Medium Documentation 5.0

Some documentation present

  • Detailed PyPI description (30584 chars)
○ Low Contributing Guide 4.0

No contributing guide or governance files found

  • Development Status classifier >= Beta
◈ Medium Type Annotations 7.0

Partial type annotation coverage

  • Type checker (mypy / pyright / pytype) referenced in project
  • 59 type-annotated function signatures detected in source
◈ Medium Multiple Contributors 6.0

Limited contributor diversity

  • 2 unique contributor(s) across 80 commits in soulwax/annot8
  • Two distinct contributors found

🔬 Heuristic Checks

✓ Outbound Network Calls

No suspicious network call patterns found

✓ Code Obfuscation

No obfuscation patterns detected

⚠ Shell / Subprocess Execution score 10.0

Found 6 shell execution pattern(s)

  • " try: result = subprocess.run( ["git", "rev-parse", "--show-toplevel"],
  • try: result = subprocess.run( ["git", "ls-files"], cwd=git_root
  • try: result = subprocess.run( ["git", "diff", "--cached", "--name-only", "--
  • " try: result = subprocess.run( ["git", "config", "user.name"], c
  • " try: result = subprocess.run( ["git", "config", "user.email"],
  • o(git_root) result = subprocess.run( ["git", "log", "-1", "--format=%an", "--", str
✓ Credential Harvesting

No credential harvesting patterns detected

✓ Typosquatting

No typosquatting candidates detected

✓ Registered Email Domain

Email domain looks legitimate: nandcore.com>

✓ Suspicious Page Links

All external links appear legitimate

✓ Git Repository History

Repository soulwax/annot8 appears legitimate

⚠ Maintainer History score 4.0

2 maintainer concern(s) found

  • Author name is missing or very short
  • Author "" appears to have only 1 package on PyPI (new or inactive account)
✓ Known CVE Vulnerabilities

No known vulnerabilities found in OSV database.

💡 AI App Starter Prompt

Use this prompt to build a project with annot8 
Your task is to create a simple yet powerful file annotation utility using the Python package 'annot8'. This utility will allow users to easily add metadata headers to various types of files such as images, documents, or audio files. The utility should be user-friendly and provide both command-line and graphical interfaces for interaction. Here are the steps and features you should include in your project:

1. **Setup**: Begin by installing the necessary packages including 'annot8' and any other dependencies required for handling different file types.
2. **Core Functionality**: Implement the main functionality of adding metadata headers to files. Use 'annot8' to manage and apply annotations to the files based on user input.
3. **User Interface**: Develop two interfaces - a command-line interface (CLI) for power users who prefer simplicity and speed, and a graphical user interface (GUI) for ease of use and accessibility.
4. **File Type Support**: Ensure your utility supports at least three different file types (e.g., JPEG, PDF, MP3). Each type should have specific metadata fields relevant to its content.
5. **Custom Metadata Fields**: Allow users to define custom metadata fields if the default ones do not suffice for their needs.
6. **Preview and Edit Capabilities**: Before applying changes, let users preview the annotated file and make adjustments if necessary.
7. **Batch Processing**: Add the ability to process multiple files at once, streamlining workflows for large datasets.
8. **Error Handling and Logging**: Implement robust error handling and logging mechanisms to ensure stability and help diagnose issues.
9. **Documentation and Help Resources**: Provide comprehensive documentation and a help section within the GUI to guide new users through the process.

This project aims to showcase the versatility and power of 'annot8' while providing a practical tool for users who need to manage metadata across various file types.

💬 Discussion Feed

Leave a comment

No discussion yet. Be the first to share your thoughts!