ariadne

v1.0.1 suspicious
4.0
Medium Risk

Ariadne is a Python library for implementing GraphQL servers.

🤖 AI Analysis

Final verdict: SUSPICIOUS

The package shows minimal risks in terms of network, shell, and obfuscation activities. However, the metadata risk score of 3 out of 10 due to incomplete author information and possibly new or inactive accounts warrants further investigation.

  • Incomplete author information
  • Possibly new or inactive author account
Per-check LLM notes
  • Network: No network calls detected, which is normal for most utility packages.
  • Shell: No shell execution patterns detected, indicating no immediate signs of malicious activities.
  • Obfuscation: No obfuscation patterns detected, indicating low risk of malicious activity.
  • Credentials: No credential harvesting patterns detected, suggesting safe handling of secrets and credentials.
  • Metadata: The author's information is incomplete and the account seems new or inactive, which raises some concern. However, no other suspicious activities were detected.

📦 Package Quality Overall: Medium (6.0/10)

◈ Medium Test Suite 6.0

Partial test coverage signals detected

  • Test runner config found: pyproject.toml
◈ Medium Documentation 5.0

Some documentation present

  • Detailed PyPI description (5805 chars)
○ Low Contributing Guide 4.0

No contributing guide or governance files found

  • Development Status classifier >= Beta
◈ Medium Type Annotations 5.0

Partial type annotation coverage

  • 365 type-annotated function signatures detected in source
✦ High Multiple Contributors 10.0

Active multi-contributor project

  • 5 unique contributor(s) across 100 commits in mirumee/ariadne
  • Active community — 5 or more distinct contributors

🔬 Heuristic Checks

Outbound Network Calls

No suspicious network call patterns found

Code Obfuscation

No obfuscation patterns detected

Shell / Subprocess Execution

No shell execution patterns detected

Credential Harvesting

No credential harvesting patterns detected

Typosquatting

No typosquatting candidates detected

Registered Email Domain

Email domain looks legitimate: mirumee.com>

Suspicious Page Links score 6.0

Found 3 suspicious link(s) on the package page

  • Non-HTTPS external link: http://graphql.github.io/
  • Non-HTTPS external link: http://www.uvicorn.org/
  • Non-HTTPS external link: http://mirumee.com
Git Repository History

Repository mirumee/ariadne appears legitimate

Maintainer History score 4.0

2 maintainer concern(s) found

  • Author name is missing or very short
  • Author "" appears to have only 1 package on PyPI (new or inactive account)
Known CVE Vulnerabilities

No known vulnerabilities found in OSV database.

💡 AI App Starter Prompt

Use this prompt to build a project with ariadne
Build a simple Python application using the ariadne package to demonstrate its core features.

💬 Discussion Feed

Leave a comment

No discussion yet. Be the first to share your thoughts!