🤖 AI Analysis

Final verdict: SAFE

The package shows minimal risk indicators with no network calls, shell executions, obfuscations, or credential harvesting attempts. The metadata risk is slightly elevated due to low effort and potential lack of maintenance, but it does not indicate malicious intent.

Low network and shell risk
No signs of obfuscation or credential harvesting
Metadata suggests low effort and potential lack of maintenance

Per-check LLM notes

Network: No network calls detected, which is normal unless the package requires external API interactions.
Shell: No shell execution patterns detected, indicating no immediate signs of executing system commands.
Obfuscation: No obfuscation patterns detected, indicating low risk.
Credentials: No credential harvesting patterns detected, indicating low risk.
Metadata: The package shows signs of low effort and potential lack of maintenance, but there are no clear indications of malicious intent.

📦 Package Quality Overall: Low (2.4/10)

○ Low Test Suite 1.0

No test suite detected

No test files or test-runner configuration detected

◈ Medium Documentation 7.0

Some documentation present

Documentation URL: "Documentation" -> https://archetypes.run
Brief PyPI description (359 chars)

○ Low Contributing Guide 2.0

No contributing guide or governance files found

No CONTRIBUTING, CODE_OF_CONDUCT, or governance files found

○ Low Type Annotations 1.0

No type annotations detected

No type annotations, py.typed marker, or stub files detected

○ Low Multiple Contributors 1.0

Unable to verify contributor count: no GitHub repository found

No GitHub repository linked — contributor count unavailable

🔬 Heuristic Checks

✓ Outbound Network Calls

No suspicious network call patterns found

✓ Code Obfuscation

No obfuscation patterns detected

✓ Shell / Subprocess Execution

No shell execution patterns detected

✓ Credential Harvesting

No credential harvesting patterns detected

✓ Typosquatting

No typosquatting candidates detected

✓ Registered Email Domain

No author email provided

✓ Suspicious Page Links

All external links appear legitimate

✓ Git Repository History

No GitHub repository linked

No GitHub repository link found

⚠ Maintainer History score 6.0

3 maintainer concern(s) found

Only one version has ever been released — brand new package
Author "Sara Loera" appears to have only 1 package on PyPI (new or inactive account)
Package has no PyPI classifiers (low effort / metadata quality)

✓ Known CVE Vulnerabilities

No known vulnerabilities found in OSV database.

💡 AI App Starter Prompt

Use this prompt to build a project with archetypes-run

Create a command-line utility called 'Archetype Manager' using the Python package 'archetypes-run'. This utility will allow users to manage different types of software projects by leveraging predefined archetypes. An archetype represents a template or blueprint for a specific type of project, such as a web application, a library, or a microservice.

The core functionality of 'Archetype Manager' includes:
- Listing all available archetypes from a remote repository or local directory.
- Creating new projects based on selected archetypes.
- Updating existing projects to match the latest version of their respective archetype.
- Deleting projects or reverting them to their original archetype state.
- Customizing archetypes by adding or modifying files and directories.
- Searching for archetypes by keyword or category.

To utilize the 'archetypes-run' package, you will need to:
1. Install the package via pip if it's not already installed: `pip install archetypes-run`
2. Use the package's API to interact with the archetypes repository, such as fetching a list of available archetypes or downloading an archetype definition.
3. Implement functions within your utility that leverage these APIs to perform the operations described above.
4. Ensure that the user interface is intuitive and provides clear feedback during each operation.
5. Add error handling to gracefully manage issues like network failures or invalid archetype requests.

Optional advanced features could include:
- Support for versioning of archetypes and projects.
- Integration with cloud services for storing and sharing archetypes.
- A graphical user interface (GUI) alongside the CLI for visual learners.
- Automated testing of projects after they've been created or updated.

Your goal is to create a robust, user-friendly tool that simplifies the process of starting and maintaining software projects using predefined archetypes.