AI Analysis
Final verdict: SUSPICIOUS
The package has no immediate signs of malicious behavior but exhibits some metadata anomalies, raising concerns about its origin and maintenance.
- Suspicious links in metadata suggest potential affiliation with unreliable sources.
- Lack of maintainer history indicates possible abandonment or misuse.
Per-check LLM notes
- Network: No network calls detected, which is normal for a package not requiring external communications.
- Shell: No shell execution patterns detected, indicating the package does not execute system commands.
- Obfuscation: No obfuscation patterns detected, suggesting low risk of malicious obfuscation.
- Credentials: No credential harvesting patterns detected, indicating low risk of malicious activity.
- Metadata: Suspicious links and lack of maintainer history suggest potential risk.
Package Quality Overall: Low (2.0/10)
○ Low
Test Suite
1.0
No test suite detected
No test files or test-runner configuration detected
◈ Medium
Documentation
5.0
Some documentation present
Detailed PyPI description (899 chars)
○ Low
Contributing Guide
2.0
No contributing guide or governance files found
No CONTRIBUTING, CODE_OF_CONDUCT, or governance files found
○ Low
Type Annotations
1.0
No type annotations detected
No type annotations, py.typed marker, or stub files detected
○ Low
Multiple Contributors
1.0
Unable to verify contributor count: no GitHub repository found
No GitHub repository linked — contributor count unavailable
Heuristic Checks
Outbound Network Calls
No suspicious network call patterns found
Code Obfuscation
No obfuscation patterns detected
Shell / Subprocess Execution
No shell execution patterns detected
Credential Harvesting
No credential harvesting patterns detected
Typosquatting
No typosquatting candidates detected
Registered Email Domain
No author email provided
Suspicious Page Links
score 6.0
Found 3 suspicious link(s) on the package page
Non-HTTPS external link: http://185.68.244.71/dima/ascii2ext_asciiNon-HTTPS external link: http://185.68.244.71/dima/ascii2ext_ascii/issuesNon-HTTPS external link: http://185.68.244.71/dima/ascii2ext_ascii.git
Git Repository History
No GitHub repository linked
No GitHub repository link found
Maintainer History
score 6.0
3 maintainer concern(s) found
Author name is missing or very shortAuthor "" appears to have only 1 package on PyPI (new or inactive account)Package has no PyPI classifiers (low effort / metadata quality)
Known CVE Vulnerabilities
No known vulnerabilities found in OSV database.
AI App Starter Prompt
Use this prompt to build a project with ascii2ext_ascii
Create a fun and quirky mini-application called 'Cursed Trademarks Generator'. This app will take plain text input from users and transform it into a stylized, 'cursed' trademark using the Python package 'ascii2ext_ascii'. The application should have a simple graphical user interface (GUI) built with Tkinter for ease of use. Here’s a step-by-step guide on how to build the app:
1. **Setup**: Begin by installing the required packages ('ascii2ext_ascii', 'tkinter').
2. **Design the GUI**: Use Tkinter to design a simple window with two main components - a text box where users can input their text and a button labeled 'Generate Cursed Trademark'.
3. **Implement Functionality**: When the button is clicked, the app should pass the text from the text box through the 'ascii2ext_ascii' package and display the transformed text in a new label or text box.
4. **Enhance User Experience**: Add features like copy-to-clipboard functionality for the output, error handling for invalid inputs, and a reset button to clear the input and output fields.
5. **Styling**: Customize the GUI with colors and fonts that match the theme of 'cursed' or 'retro' aesthetics to enhance the user experience.
6. **Testing**: Ensure the app works as expected with various types of input texts and that all added features function correctly.
7. **Documentation**: Write a README file explaining how to install and run the application, along with any additional notes or instructions.
This project not only leverages the unique capabilities of the 'ascii2ext_ascii' package but also provides an engaging way for users to experiment with text transformations in a playful context.
💬 Discussion Feed
No discussion yet. Be the first to share your thoughts!
Report Abuse / Security Issue