asp-chef-cli

v0.5.3 suspicious
5.0
Medium Risk

A simple CLI to run ASP Chef recipes

🤖 AI Analysis

Final verdict: SUSPICIOUS

The package shows some signs of potential risk due to its high shell execution frequency, which could potentially be exploited if not properly sanitized. However, the low network and metadata risks suggest it is likely benign.

  • High shell risk due to multiple subprocess spawns
  • No significant network or metadata risks identified
Per-check LLM notes
  • Network: The network call pattern is relatively benign and might be used for legitimate purposes like fetching resources or communicating with a service.
  • Shell: Multiple instances of spawning subprocesses could indicate the package is executing external programs, which may pose a risk if not properly sanitized or controlled.
  • Metadata: The maintainer has only one package, which may indicate a new or less active account, but there are no other red flags.

📦 Package Quality Overall: Low (2.8/10)

○ Low Test Suite 1.0

No test suite detected

  • No test files or test-runner configuration detected
◈ Medium Documentation 5.0

Some documentation present

  • Detailed PyPI description (3596 chars)
○ Low Contributing Guide 2.0

No contributing guide or governance files found

  • No CONTRIBUTING, CODE_OF_CONDUCT, or governance files found
◈ Medium Type Annotations 5.0

Partial type annotation coverage

  • 14 type-annotated function signatures detected in source
○ Low Multiple Contributors 1.0

Unable to verify contributor count: no GitHub repository found

  • No GitHub repository linked — contributor count unavailable

🔬 Heuristic Checks

⚠ Outbound Network Calls score 1.5

Found 1 network call pattern(s)

  • _stream(): async with httpx.AsyncClient(timeout=None) as client: async with client.strea
✓ Code Obfuscation

No obfuscation patterns detected

⚠ Shell / Subprocess Execution score 8.0

Found 4 shell execution pattern(s)

  • )] clingo_process[uuid] = subprocess.Popen(cmd, stdin=subprocess.PIPE, stdout=subprocess.PIPE, stderr=s
  • json["program"] result = subprocess.check_output( ["./run.sh"], input=program.encode(),
  • ") pyqasp_process[uuid] = subprocess.Popen(cmd, stdin=subprocess.PIPE, stdout=subprocess.PIPE, stderr=s
  • ") casper_process[uuid] = subprocess.Popen(cmd, stdin=subprocess.PIPE, stdout=subprocess.PIPE, stderr=s
✓ Credential Harvesting

No credential harvesting patterns detected

✓ Typosquatting

No typosquatting candidates detected

✓ Registered Email Domain

Email domain looks legitimate: gmail.com

✓ Suspicious Page Links

All external links appear legitimate

✓ Git Repository History

No GitHub repository linked

  • No GitHub repository link found
⚠ Maintainer History score 2.0

1 maintainer concern(s) found

  • Author "Mario Alviano" appears to have only 1 package on PyPI (new or inactive account)
✓ Known CVE Vulnerabilities

No known vulnerabilities found in OSV database.

💡 AI App Starter Prompt

Use this prompt to build a project with asp-chef-cli 
Create a Python-based meal planner application named 'ChefMate' that integrates with the 'asp-chef-cli' package to fetch and execute various recipes from a curated list of popular ASP Chef recipes. Your application should allow users to browse through different categories of recipes (e.g., Breakfast, Lunch, Dinner), select a recipe, and then either view the steps to prepare it or directly execute the recipe using the CLI interface provided by 'asp-chef-cli'. Additionally, implement features such as saving favorite recipes, generating shopping lists based on selected recipes, and allowing users to rate and review recipes they have tried. Ensure that your application is user-friendly and provides clear instructions on how to interact with the 'asp-chef-cli' package to enhance the cooking experience.

💬 Discussion Feed

Leave a comment

No discussion yet. Be the first to share your thoughts!