archgate

v0.43.0 safe
1.0
Low Risk

Enforce Architecture Decision Records as executable rules — for both humans and AI agents

🤖 AI Analysis

Final verdict: SAFE

The package has no detected obfuscation or credential harvesting patterns, indicating a low risk of malicious intent.

  • No obfuscation detected
  • No credential harvesting detected
Per-check LLM notes
  • Obfuscation: No obfuscation patterns detected, indicating low risk.
  • Credentials: No credential harvesting patterns detected, indicating low risk.

📦 Package Quality Overall: Medium (5.2/10)

◈ Medium Test Suite 6.0

Partial test coverage signals detected

  • 1 test file(s) detected (e.g. test_shim.py)
◈ Medium Documentation 7.0

Some documentation present

  • Documentation URL: "Documentation" -> https://cli.archgate.dev
  • Detailed PyPI description (3810 chars)
○ Low Contributing Guide 4.0

No contributing guide or governance files found

  • Development Status classifier >= Beta
○ Low Type Annotations 1.0

No type annotations detected

  • No type annotations, py.typed marker, or stub files detected
✦ High Multiple Contributors 8.0

Active multi-contributor project

  • 3 unique contributor(s) across 100 commits in archgate/cli
  • Small but multi-author team (3–4 contributors)

🔬 Heuristic Checks

✓ Outbound Network Calls

No suspicious network call patterns found

✓ Code Obfuscation

No obfuscation patterns detected

⚠ Shell / Subprocess Execution score 2.0

Found 1 shell execution pattern(s)

  • ile=sys.stderr) result = subprocess.run([str(binary)] + sys.argv[1:]) sys.exit(result.returncode
✓ Credential Harvesting

No credential harvesting patterns detected

✓ Typosquatting

No typosquatting candidates detected

✓ Registered Email Domain

No author email provided

✓ Suspicious Page Links

All external links appear legitimate

✓ Git Repository History

Repository archgate/cli appears legitimate

⚠ Maintainer History score 4.0

2 maintainer concern(s) found

  • Author name is missing or very short
  • Author "" appears to have only 1 package on PyPI (new or inactive account)
✓ Known CVE Vulnerabilities

No known vulnerabilities found in OSV database.

💡 AI App Starter Prompt

Use this prompt to build a project with archgate 
Create a mini-application called 'ArchChecker' that leverages the 'archgate' Python package to enforce architectural decisions within a software development environment. This tool should serve as a bridge between human developers and AI-driven development processes, ensuring that all code changes adhere to predefined architectural guidelines.

Step 1: Define a set of Architecture Decision Records (ADRs) that cover key aspects such as coding standards, database schema design, API design principles, and security protocols.

Step 2: Utilize the 'archgate' package to convert these ADRs into executable rules. These rules should be capable of being interpreted by both human developers through documentation and by AI tools through automated checks.

Step 3: Implement a command-line interface (CLI) for ArchChecker that allows developers to run automated checks on their codebase against the defined ADRs. The CLI should provide options to specify which ADRs to check against, as well as the path to the codebase.

Step 4: Develop a feature within ArchChecker that integrates with popular version control systems (like Git) to automatically run the ADR checks whenever changes are committed or merged into the main branch. This ensures continuous enforcement of architectural decisions throughout the development lifecycle.

Suggested Features:
- Detailed logging of violations found during ADR checks, including line numbers and suggestions for corrections.
- Integration with issue tracking systems (such as Jira or GitHub Issues) to automatically create tickets for ADR violations.
- Support for different levels of severity for ADR violations, allowing teams to prioritize critical issues over minor ones.
- A web-based dashboard that visualizes the health of the codebase according to the ADRs, providing insights into adherence rates and trends over time.

The 'archgate' package will play a crucial role in ArchChecker by enabling the creation and execution of these ADRs as rules. It will handle the parsing of ADR documents, conversion into executable formats, and the enforcement mechanisms that interact directly with the codebase. By leveraging 'archgate', ArchChecker aims to streamline the process of maintaining architectural integrity across large-scale projects, making it easier for both human and machine-driven development workflows to align with strategic architecture decisions.

💬 Discussion Feed

Leave a comment

No discussion yet. Be the first to share your thoughts!