AI Analysis
Final verdict: SUSPICIOUS
The package shows minimal risks in terms of network, shell, obfuscation, and credential handling but raises some concerns due to sparse metadata and untraceable repository.
- Metadata risk noted due to lack of repository details and sparse maintainer information.
- Package establishes network connections, which is necessary for its functionality.
Per-check LLM notes
- Network: The package establishes network connections which is likely for API calls to report anomalies or fetch configurations.
- Shell: No shell execution patterns were detected, indicating low risk.
- Obfuscation: No obfuscation patterns detected, indicating low risk.
- Credentials: No credential harvesting patterns detected, indicating low risk.
- Metadata: The repository is not found and the maintainer's information is sparse, raising concerns about the legitimacy of the package.
Package Quality Overall: Medium (5.2/10)
✦ High
Test Suite
9.0
Test suite present — 12 test file(s) found
12 test file(s) detected (e.g. __init__.py)
◈ Medium
Documentation
7.0
Some documentation present
Documentation URL: "Documentation" -> https://docs.anomalyarmor.comDetailed PyPI description (2632 chars)
○ Low
Contributing Guide
4.0
No contributing guide or governance files found
Development Status classifier >= Beta
◈ Medium
Type Annotations
5.0
Partial type annotation coverage
292 type-annotated function signatures detected in source
○ Low
Multiple Contributors
1.0
Could not retrieve contributor data from GitHub
GitHub API error: 404
Heuristic Checks
Outbound Network Calls
score 1.5
Found 1 network call pattern(s)
P client self._http = httpx.Client( base_url=self._api_url, headers={
Code Obfuscation
No obfuscation patterns detected
Shell / Subprocess Execution
No shell execution patterns detected
Credential Harvesting
No credential harvesting patterns detected
Typosquatting
No typosquatting candidates detected
Registered Email Domain
Email domain looks legitimate: anomalyarmor.com>
Suspicious Page Links
All external links appear legitimate
Git Repository History
score 3.0
Repository not found (deleted or private)
Repository not found (deleted or private)
Maintainer History
score 4.0
2 maintainer concern(s) found
Author name is missing or very shortAuthor "" appears to have only 1 package on PyPI (new or inactive account)
Known CVE Vulnerabilities
No known vulnerabilities found in OSV database.
AI App Starter Prompt
Use this prompt to build a project with anomalyarmor-cli
Build a simple Python application using the anomalyarmor-cli package to demonstrate its core features.
💬 Discussion Feed
No discussion yet. Be the first to share your thoughts!
Report Abuse / Security Issue