arclet-entari

v0.17.4 suspicious
5.0
Medium Risk

Simple IM Framework based on satori-python

🤖 AI Analysis

Final verdict: SUSPICIOUS

The package exhibits moderate obfuscation and has incomplete author metadata, suggesting potential for hidden malicious functionality. However, it does not exhibit any immediate risks like network calls or shell execution.

  • obfuscation risk of 6/10
  • incomplete author metadata
Per-check LLM notes
  • Network: No network calls detected, which is normal unless the package requires internet access to function.
  • Shell: No shell execution patterns detected, indicating no immediate risk of unauthorized system command execution.
  • Obfuscation: The code shows signs of obfuscation through unconventional syntax and control flow which could be used to hide functionality.
  • Credentials: No direct patterns indicative of credential harvesting were found in the provided code snippet.
  • Metadata: The author information is incomplete and the account seems new or inactive, raising some suspicion.

📦 Package Quality Overall: Low (4.2/10)

○ Low Test Suite 1.0

No test suite detected

  • No test files or test-runner configuration detected
◈ Medium Documentation 5.0

Some documentation present

  • Detailed PyPI description (4673 chars)
○ Low Contributing Guide 2.0

No contributing guide or governance files found

  • No CONTRIBUTING, CODE_OF_CONDUCT, or governance files found
◈ Medium Type Annotations 5.0

Partial type annotation coverage

  • 417 type-annotated function signatures detected in source
✦ High Multiple Contributors 8.0

Active multi-contributor project

  • 4 unique contributor(s) across 100 commits in ArcletProject/Entari
  • Small but multi-author team (3–4 contributors)

🔬 Heuristic Checks

✓ Outbound Network Calls

No suspicious network call patterns found

⚠ Code Obfuscation score 8.0

Found 4 obfuscation pattern(s)

  • try: return bool(s.eval(expr)) except (simpleeval.InvalidExpression, TypeError,
  • else: parent = __import__(_current, fromlist=["__path__"]) enter_plugin = False _current += "."
  • parent = __import__(_current, fromlist=["__path__"]) _current += "." continue
  • alse parent = __import__(_current, fromlist=["__path__"]) _current += "." if parent is None:
✓ Shell / Subprocess Execution

No shell execution patterns detected

✓ Credential Harvesting

No credential harvesting patterns detected

✓ Typosquatting

No typosquatting candidates detected

⚠ Registered Email Domain score 3.0

Suspicious email domain flags: Very short email domain: qq.com>

  • Very short email domain: qq.com>
✓ Suspicious Page Links

All external links appear legitimate

✓ Git Repository History

Repository ArcletProject/Entari appears legitimate

⚠ Maintainer History score 4.0

2 maintainer concern(s) found

  • Author name is missing or very short
  • Author "" appears to have only 1 package on PyPI (new or inactive account)
✓ Known CVE Vulnerabilities

No known vulnerabilities found in OSV database.

💡 AI App Starter Prompt

Use this prompt to build a project with arclet-entari 
Develop a real-time messaging application using the 'arclet-entari' package, which is built on top of the satori-python framework. This application will allow users to create accounts, log in, send messages to both individual contacts and groups, and receive notifications for new messages in real-time. Additionally, implement a feature that allows users to search for other users within the application. The application should have a simple yet intuitive user interface.

Steps:
1. Set up the development environment with Python and install the necessary dependencies including 'arclet-entari'.
2. Design and implement the user authentication system, allowing users to register, log in, and log out securely.
3. Create a chat functionality that supports one-on-one conversations and group chats. Ensure that messages are delivered in real-time.
4. Implement a notification system that alerts users when they receive new messages, even if the application is not actively being used.
5. Develop a search feature that enables users to find other registered users within the application.
6. Test the application thoroughly to ensure all functionalities work as expected.
7. Deploy the application to a server or cloud platform so it can be accessed over the internet.

How 'arclet-entari' is utilized:
- Use 'arclet-entari' for handling the real-time communication between clients and the server.
- Leverage its event-driven architecture to manage user sessions and message delivery efficiently.
- Utilize 'arclet-entari' to handle the scalability and reliability of the messaging service, ensuring smooth performance even under high load conditions.

💬 Discussion Feed

Leave a comment

No discussion yet. Be the first to share your thoughts!