AI Analysis
The package shows signs of potential misuse due to the use of eval() with untrusted inputs, indicating a high risk of code injection. Additionally, the repository's metadata suggests a new or less active account.
- High obfuscation risk due to eval() usage
- Repository metadata raises concerns about the account's activity level
Per-check LLM notes
- Network: No network calls detected, which is normal if the package does not require internet access.
- Shell: Execution of shell commands might be necessary for the package's functionality, but requires scrutiny to ensure it's not being misused.
- Obfuscation: The use of eval() with untrusted input is highly suspicious and indicates potential code obfuscation or injection risks.
- Credentials: No clear evidence of credential harvesting patterns detected.
- Metadata: The repository is not found and the maintainer has a single package, which may indicate a new or less active account.
Package Quality Overall: Low (3.4/10)
Partial test coverage signals detected
Test runner config found: pyproject.toml
No documentation detected
No documentation URL, doc files, or meaningful description found
No contributing guide or governance files found
Development Status classifier >= Beta
Partial type annotation coverage
68 type-annotated function signatures detected in source
Could not retrieve contributor data from GitHub
GitHub API error: 404
Heuristic Checks
No suspicious network call patterns found
Found 6 obfuscation pattern(s)
) functions_dict = eval(backend_functions_dict) for ( key,) hotfix_dict = eval(hotfix_functions_dict[command_file_version]) funG, ) for x in eval(backend_stubs_list): self.log_core() doc_strings_dict = eval(doc_strings_str) for key in doc_strings_dict.keys():BUG, ) return eval(doc_strings_str) def query_doc_defaults( self,BUG, ) return eval(doc_strings_str) def get_rules(self) -> str: ""
Found 1 shell execution pattern(s)
self.engine_proc = subprocess.Popen( args_list, stdout=self.proc
No credential harvesting patterns detected
No typosquatting candidates detected
Email domain looks legitimate: ansys.com
All external links appear legitimate
Repository not found (deleted or private)
Repository not found (deleted or private)
1 maintainer concern(s) found
Author "ANSYS, Inc." appears to have only 1 package on PyPI (new or inactive account)
No known vulnerabilities found in OSV database.
AI App Starter Prompt
Build a simple Python application using the ansys-turbogrid-api package to demonstrate its core features.
💬 Discussion Feed
No discussion yet. Be the first to share your thoughts!
Report Abuse / Security Issue