archextractor

v0.2.0 suspicious
4.0
Medium Risk

A module for extracting archive files, which wraps the patoolib library, can recursively process nested compressed package files.

🤖 AI Analysis

Final verdict: SUSPICIOUS

The package shows low risk in terms of network usage, shell execution, and obfuscation but raises some concerns due to the maintainer's new or inactive account and lack of proper identification.

  • New or inactive maintainer account
  • Lack of proper author name
Per-check LLM notes
  • Network: No network calls detected, which is normal unless the package requires external services.
  • Shell: No shell execution patterns detected, indicating no direct system command execution.
  • Obfuscation: No obfuscation patterns detected, indicating low risk.
  • Credentials: No credential harvesting patterns detected, indicating low risk.
  • Metadata: The maintainer has a new or inactive account and lacks a proper author name, which could indicate potential risk.

📦 Package Quality Overall: Low (4.8/10)

◈ Medium Test Suite 6.0

Partial test coverage signals detected

  • 1 test file(s) detected (e.g. test_archextractor.py)
◈ Medium Documentation 5.0

Some documentation present

  • Detailed PyPI description (1398 chars)
○ Low Contributing Guide 2.0

No contributing guide or governance files found

  • No CONTRIBUTING, CODE_OF_CONDUCT, or governance files found
◈ Medium Type Annotations 5.0

Partial type annotation coverage

  • 11 type-annotated function signatures detected in source
◈ Medium Multiple Contributors 6.0

Limited contributor diversity

  • 2 unique contributor(s) across 11 commits in 2513502304/ArchExtractor
  • Two distinct contributors found

🔬 Heuristic Checks

✓ Outbound Network Calls

No suspicious network call patterns found

✓ Code Obfuscation

No obfuscation patterns detected

✓ Shell / Subprocess Execution

No shell execution patterns detected

✓ Credential Harvesting

No credential harvesting patterns detected

✓ Typosquatting

No typosquatting candidates detected

✓ Registered Email Domain

Email domain looks legitimate: gmail.com>

✓ Suspicious Page Links

All external links appear legitimate

✓ Git Repository History

Repository 2513502304/ArchExtractor appears legitimate

⚠ Maintainer History score 4.0

2 maintainer concern(s) found

  • Author name is missing or very short
  • Author "" appears to have only 1 package on PyPI (new or inactive account)
✓ Known CVE Vulnerabilities

No known vulnerabilities found in OSV database.

💡 AI App Starter Prompt

Use this prompt to build a project with archextractor 
Create a command-line utility called 'ArchiveUnpacker' using Python and the 'archextractor' package. This utility will allow users to extract multiple types of archive files (such as ZIP, RAR, TAR, etc.) into a specified directory. The tool should be able to handle nested archives, meaning if an extracted file is itself an archive, it should automatically extract that too.

Step-by-Step Instructions:
1. Install the required packages including 'archextractor'.
2. Design a simple user interface where users can input the path to their archive file(s) and specify the destination folder for extraction.
3. Implement functionality to detect and support various types of archives using the 'archextractor' package.
4. Add a feature to automatically detect and extract nested archives.
5. Ensure error handling is in place to manage issues such as invalid file paths or unsupported archive types.
6. Optionally, include logging to keep track of extraction progress and any errors encountered during the process.
7. Test the utility thoroughly with different types of archives and scenarios.

Suggested Features:
- Support for batch processing of multiple files at once.
- Option to set password protection for encrypted archives.
- Progress bar to show extraction status.
- Detailed logs and error messages for debugging purposes.