apilenss

v0.1.8 suspicious
4.0
Medium Risk

API Lens Python SDK with OpenTelemetry-based ingest forwarding

🤖 AI Analysis

Final verdict: SUSPICIOUS

The package shows signs of legitimate functionality but raises concerns due to incomplete metadata and a potentially new or inactive maintainer.

  • Metadata risk due to missing maintainer information
  • Suspicion regarding the maintainer's account activity
Per-check LLM notes
  • Network: The network calls suggest legitimate data sending behavior, possibly for logging or analytics purposes.
  • Shell: No shell execution patterns detected.
  • Obfuscation: No obfuscation patterns detected, indicating low risk.
  • Credentials: No credential harvesting patterns detected, indicating low risk.
  • Metadata: The maintainer's author name is missing and the account seems new or inactive, raising some suspicion.

📦 Package Quality Overall: Low (4.0/10)

○ Low Test Suite 1.0

No test suite detected

  • No test files or test-runner configuration detected
◈ Medium Documentation 7.0

Some documentation present

  • Documentation URL: "Documentation" -> https://apilens.ai
  • Detailed PyPI description (6411 chars)
○ Low Contributing Guide 2.0

No contributing guide or governance files found

  • No CONTRIBUTING, CODE_OF_CONDUCT, or governance files found
◈ Medium Type Annotations 5.0

Partial type annotation coverage

  • 37 type-annotated function signatures detected in source
◈ Medium Multiple Contributors 5.0

Limited contributor diversity

  • 1 unique contributor(s) across 100 commits in apilens/apilens
  • Single author but highly active (100 commits)

🔬 Heuristic Checks

Outbound Network Calls score 3.0

Found 2 network call pattern(s)

  • /"), ) req = urllib.request.Request( ingest_url, method="POST",
  • oqa: SLF001 with urllib.request.urlopen(req, timeout=self.config.timeout, context=ssl_contex
Code Obfuscation

No obfuscation patterns detected

Shell / Subprocess Execution

No shell execution patterns detected

Credential Harvesting

No credential harvesting patterns detected

Typosquatting

No typosquatting candidates detected

Registered Email Domain

Email domain looks legitimate: apilens.ai>

Suspicious Page Links

All external links appear legitimate

Git Repository History

Repository apilens/apilens appears legitimate

Maintainer History score 4.0

2 maintainer concern(s) found

  • Author name is missing or very short
  • Author "" appears to have only 1 package on PyPI (new or inactive account)
Known CVE Vulnerabilities

No known vulnerabilities found in OSV database.

💡 AI App Starter Prompt

Use this prompt to build a project with apilenss
Build a simple Python application using the apilenss package to demonstrate its core features.

💬 Discussion Feed

Leave a comment

No discussion yet. Be the first to share your thoughts!