ask-human-now

v0.2.1 suspicious
7.0
High Risk

Deprecated package name. Use ask-human instead.

🤖 AI Analysis

Final verdict: SUSPICIOUS

The package is deprecated and lacks maintainer information, with low repository activity, suggesting potential abandonment or misuse.

  • Deprecated package with no active maintenance
  • Low repository activity and missing maintainer information
Per-check LLM notes
  • Network: Network calls are common in packages that need to fetch external resources or communicate with servers.
  • Shell: Subprocess execution can be legitimate if the package needs to run scripts or commands. However, it could also indicate potential risks like executing arbitrary code.
  • Obfuscation: No obfuscation patterns detected, indicating low risk.
  • Credentials: No credential harvesting patterns detected, indicating low risk.
  • Metadata: The package shows signs of being potentially malicious due to lack of maintainer information and low repository activity.

📦 Package Quality Overall: Medium (6.2/10)

✦ High Test Suite 9.0

Test suite present — 16 test file(s) found

  • Test runner config found: conftest.py
  • Test runner config found: pyproject.toml
  • 16 test file(s) detected (e.g. __init__.py)
◈ Medium Documentation 5.0

Some documentation present

  • Detailed PyPI description (1640 chars)
○ Low Contributing Guide 2.0

No contributing guide or governance files found

  • No CONTRIBUTING, CODE_OF_CONDUCT, or governance files found
◈ Medium Type Annotations 7.0

Partial type annotation coverage

  • Type checker (mypy / pyright / pytype) referenced in project
  • 81 type-annotated function signatures detected in source
✦ High Multiple Contributors 8.0

Active multi-contributor project

  • 3 unique contributor(s) across 41 commits in alexchexes/ask-human
  • Small but multi-author team (3–4 contributors)

🔬 Heuristic Checks

Outbound Network Calls score 6.0

Found 4 network call pattern(s)

  • else {} request_obj = urllib.request.Request( request_url, data=request_d
  • try: with urllib.request.urlopen(request_obj, timeout=timeout) as response:
  • try: with urllib.request.urlopen(file_url, timeout=60) as response: w
  • utf-8") request_obj = urllib.request.Request( request_url, data=request_d
Code Obfuscation

No obfuscation patterns detected

Shell / Subprocess Execution score 8.0

Found 4 shell execution pattern(s)

  • ignore[attr-defined] subprocess.Popen( command, stdin=subprocess.DEVNULL,
  • ythonpath ) result = subprocess.run( [sys.executable, "-m", "ask_human_now", "--help"],
  • as a module.""" result = subprocess.run( [sys.executable, "-m", "ask_human_now", "--help"],
  • """ try: result = subprocess.run(["ask-human", "--help"], capture_output=True, text=True)
Credential Harvesting

No credential harvesting patterns detected

Typosquatting

No typosquatting candidates detected

Registered Email Domain

Email domain looks legitimate: gmail.com>

Suspicious Page Links

All external links appear legitimate

Git Repository History score 2.5

Git history flags: Repository has zero stars and zero forks

  • Repository has zero stars and zero forks
Maintainer History score 4.0

2 maintainer concern(s) found

  • Author name is missing or very short
  • Author "" appears to have only 1 package on PyPI (new or inactive account)
Known CVE Vulnerabilities

No known vulnerabilities found in OSV database.

💡 AI App Starter Prompt

Use this prompt to build a project with ask-human-now
Create a personalized task reminder app using the 'ask-human' Python package. This app will allow users to set up tasks with specific reminders and deadlines. When a deadline approaches, the app will use 'ask-human' to send a notification asking if the user wants to extend the deadline, complete the task, or cancel it. Here are the steps and features you should include:

1. **Setup**: Install necessary packages including 'ask-human'.
2. **User Interface**: Develop a simple command-line interface where users can add tasks, view their tasks, and manage deadlines.
3. **Task Management**: Allow users to create tasks with descriptions, due dates, and priorities.
4. **Reminder System**: Implement a system that triggers reminders based on the due date of each task.
5. **Decision Making**: When a reminder is triggered, use 'ask-human' to send a message to the user asking what action they want to take regarding the task (extend deadline, mark as completed, or cancel).
6. **Feedback Handling**: Based on the user's response via 'ask-human', update the task status accordingly in the app.
7. **Persistence**: Save task data locally so that it persists even after the app is closed.
8. **Notifications**: Enhance user experience by integrating notifications for reminders and updates.

This project aims to demonstrate how 'ask-human' can be used to make applications more interactive and user-centric.

💬 Discussion Feed

Leave a comment

No discussion yet. Be the first to share your thoughts!