AI Analysis
The package has low risks across all evaluated categories, including network, shell, obfuscation, and credential risks. However, the metadata risk suggests potential issues with maintenance and community support.
- Low risk in network, shell, obfuscation, and credential areas.
- Potential low maintenance and lack of community support indicated by metadata.
Per-check LLM notes
- Network: No network calls detected, which is normal for most Python packages unless they require external services.
- Shell: No shell execution patterns detected, indicating the package does not attempt to execute system commands.
- Obfuscation: No obfuscation patterns detected, indicating low risk.
- Credentials: No credential harvesting patterns detected, indicating low risk.
- Metadata: The package shows signs of low maintenance and potential lack of community support.
Package Quality Overall: Low (3.0/10)
No test suite detected
No test files or test-runner configuration detected
Some documentation present
Detailed PyPI description (827 chars)
No contributing guide or governance files found
No CONTRIBUTING, CODE_OF_CONDUCT, or governance files found
Partial type annotation coverage
4 type-annotated function signatures (partial)
Single-author or unverifiable project
1 unique contributor(s) across 11 commits in gregatm/apache-airflow-providers-mqttSingle author with few commits — possibly a personal or throwaway project
Heuristic Checks
No suspicious network call patterns found
No obfuscation patterns detected
No shell execution patterns detected
No credential harvesting patterns detected
No typosquatting candidates detected
Email domain looks legitimate: users.noreply.github.com>
All external links appear legitimate
Git history flags: Repository has zero stars and zero forks
Repository has zero stars and zero forks
3 maintainer concern(s) found
Author name is missing or very shortAuthor "" appears to have only 1 package on PyPI (new or inactive account)Package has no PyPI classifiers (low effort / metadata quality)
No known vulnerabilities found in OSV database.
AI App Starter Prompt
Build a simple Python application using the apache-airflow-providers-mqtt package to demonstrate its core features.