asoftime

v0.1.0 suspicious
7.0
High Risk

Temporal-awareness skill for tool-using LLMs. Surfaces freshness verdicts on in-context data so stale information doesn't poison fresh reasoning.

🤖 AI Analysis

Final verdict: SUSPICIOUS

The package shows signs of potential malicious behavior due to its capability to perform network calls and execute shell commands, which can be exploited for unauthorized actions.

  • Network risk 7/10
  • Shell risk 8/10
Per-check LLM notes
  • Network: The network call pattern suggests the package might be performing external HTTP requests which could potentially be used for unauthorized purposes like exfiltrating data.
  • Shell: The shell execution pattern indicates the package may execute arbitrary Python modules, posing a significant risk if it runs untrusted code.
  • Metadata: The package is newly created with low activity indicators, suggesting potential risk but not definitive proof of malice.

📦 Package Quality Overall: Medium (5.0/10)

◈ Medium Test Suite 6.0

Partial test coverage signals detected

  • 2 test file(s) detected (e.g. test_antigravity_hook.py)
◈ Medium Documentation 7.0

Some documentation present

  • Documentation URL: "Documentation" -> https://github.com/amatayomosley-web/asof/tree/main/docs
  • Detailed PyPI description (7500 chars)
○ Low Contributing Guide 2.0

No contributing guide or governance files found

  • No CONTRIBUTING, CODE_OF_CONDUCT, or governance files found
◈ Medium Type Annotations 5.0

Partial type annotation coverage

  • 78 type-annotated function signatures detected in source
◈ Medium Multiple Contributors 5.0

Limited contributor diversity

  • 1 unique contributor(s) across 47 commits in amatayomosley-web/asof
  • Single author but highly active (47 commits)

🔬 Heuristic Checks

⚠ Outbound Network Calls score 3.0

Found 2 network call pattern(s)

  • """ try: req = urllib.request.Request(url, method="HEAD") req.add_header("User-Age
  • eshness check)") with urllib.request.urlopen(req, timeout=timeout) as resp: headers =
⚠ Code Obfuscation score 2.0

Found 1 obfuscation pattern(s)

  • [name] try: mod = __import__(f"asof_core.patterns.domains.{name}", fromlist=["PATTERNS"]) patterns = getattr(mod, "PATTERNS", []) _DO
⚠ Shell / Subprocess Execution score 2.0

Found 1 shell execution pattern(s)

  • ule try: result = subprocess.run( [sys.executable, "-m", f"adapters.{adapter}.ins
✓ Credential Harvesting

No credential harvesting patterns detected

✓ Typosquatting

No typosquatting candidates detected

✓ Registered Email Domain

No author email provided

✓ Suspicious Page Links

All external links appear legitimate

⚠ Git Repository History score 2.5

Git history flags: Repository has zero stars and zero forks

  • Repository has zero stars and zero forks
⚠ Maintainer History score 4.0

2 maintainer concern(s) found

  • Only one version has ever been released — brand new package
  • Author "Maximillian Mosley" appears to have only 1 package on PyPI (new or inactive account)
✓ Known CVE Vulnerabilities

No known vulnerabilities found in OSV database.

💡 AI App Starter Prompt

Use this prompt to build a project with asoftime 
Develop a mini-application called 'FreshFeed' that helps users consume news articles from multiple sources while ensuring they are getting the freshest content possible. This app will fetch headlines from various news APIs, display them to the user, and use the 'asoftime' package to assess the recency of each article. Users should be able to specify a time threshold (e.g., 'articles published within the last hour') and receive only those articles that meet this criterion. Here's how the application will work:

1. **Setup**: Install necessary packages including 'requests', 'asoftime', and any other required libraries.
2. **Data Fetching**: Write a function to fetch news articles from different APIs. Each API call should return a list of dictionaries, where each dictionary contains at least 'title', 'description', 'url', and 'publishedAt'.
3. **Recency Assessment**: Utilize the 'asoftime' package to evaluate the recency of each article based on its 'publishedAt' timestamp. Implement logic to filter out articles that are older than the specified time threshold.
4. **User Interface**: Create a simple command-line interface where users can input their preferred news categories and the recency threshold. Display the filtered list of articles in a readable format.
5. **Advanced Features**: Consider adding features such as saving the most recent articles to a local file, allowing users to set up regular updates, and providing statistics on the number of fresh vs. stale articles fetched over time.

The 'asoftime' package plays a crucial role in this application by enabling accurate temporal assessments of article freshness, thus enhancing the overall utility and relevance of the news feed.

💬 Discussion Feed

Leave a comment

No discussion yet. Be the first to share your thoughts!