AI Analysis
Final verdict: SAFE
The package does not exhibit any network or shell risks. However, the metadata risk due to incomplete author information and potential inactivity of the maintainer warrants caution.
- No network calls detected
- No shell executions detected
- Incomplete author information and potential maintainer inactivity
Per-check LLM notes
- Network: No network calls detected, which is normal for a utility package like argclz.
- Shell: No shell executions detected, aligning with the expected behavior of a command-line argument processing tool.
- Metadata: The author information is incomplete and the maintainer seems new or inactive, which raises some concern but not enough to conclusively label it as malicious.
Package Quality Overall: Medium (5.0/10)
○ Low
Test Suite
1.0
No test suite detected
No test files or test-runner configuration detected
◈ Medium
Documentation
7.0
Some documentation present
Documentation URL: "Documentation" -> https://argclz.readthedocs.io/en/latest/Detailed PyPI description (4441 chars)
○ Low
Contributing Guide
2.0
No contributing guide or governance files found
No CONTRIBUTING, CODE_OF_CONDUCT, or governance files found
◈ Medium
Type Annotations
7.0
Partial type annotation coverage
Classifier: Typing :: Typed141 type-annotated function signatures detected in source
✦ High
Multiple Contributors
8.0
Active multi-contributor project
3 unique contributor(s) across 87 commits in ytsimon2004/argclzSmall but multi-author team (3–4 contributors)
Heuristic Checks
Outbound Network Calls
No suspicious network call patterns found
Code Obfuscation
No obfuscation patterns detected
Shell / Subprocess Execution
No shell execution patterns detected
Credential Harvesting
No credential harvesting patterns detected
Typosquatting
No typosquatting candidates detected
Registered Email Domain
Email domain looks legitimate: gmail.com>
Suspicious Page Links
All external links appear legitimate
Git Repository History
Repository ytsimon2004/argclz appears legitimate
Maintainer History
score 4.0
2 maintainer concern(s) found
Author name is missing or very shortAuthor "" appears to have only 1 package on PyPI (new or inactive account)
Known CVE Vulnerabilities
No known vulnerabilities found in OSV database.
AI App Starter Prompt
Use this prompt to build a project with argclz
Create a fully-functional mini-application called 'FileSorter' using the Python package 'argclz'. This application will help users organize their files by sorting them into different directories based on file extensions. The goal is to demonstrate how 'argclz' simplifies the creation of command-line interfaces through its dataclass-like approach. Step-by-Step Instructions: 1. Define the structure of your application, focusing on how it will accept command-line arguments using 'argclz'. 2. Use 'argclz' to create a dataclass-like structure for parsing command-line arguments such as source directory, destination directory, and file extensions to sort. 3. Implement functionality to read files from the source directory and move them to corresponding subdirectories in the destination directory based on their file extensions. 4. Add error handling for scenarios like invalid paths, missing files, or unsupported file types. 5. Include a help option in the command-line interface that provides usage instructions and lists available options. 6. Test your application thoroughly with various file types and directory structures to ensure robustness. Suggested Features: - Support for multiple file extensions in a single run. - Option to exclude certain file types from being moved. - Logging of actions performed during execution. - Ability to resume operations if interrupted. - User-friendly output messages indicating success or failure of operations.