assertpy2

v2.1.4 suspicious
5.0
Medium Risk

Fluent assertion library for Python with full type safety and soft assertions

🤖 AI Analysis

Final verdict: SUSPICIOUS

The package assertpy2 v2.1.4 shows minimal risks in terms of network, shell, and obfuscation activities. However, the metadata risk score is elevated due to the new or inactive maintainer and lack of community engagement, which raises concerns about potential supply-chain attacks.

  • Metadata risk due to new or inactive maintainer
  • Lack of community engagement
Per-check LLM notes
  • Network: No network calls detected, which is normal unless the package requires external services.
  • Shell: No shell execution patterns detected, indicating no immediate risk of command execution.
  • Obfuscation: No obfuscation patterns detected, indicating low risk.
  • Credentials: No credential harvesting patterns detected, indicating low risk.
  • Metadata: The maintainer seems new or inactive, and the repository lacks community engagement.

📦 Package Quality Overall: Medium (7.0/10)

✦ High Test Suite 9.0

Test suite present — 37 test file(s) found

  • Test runner config found: pyproject.toml
  • 37 test file(s) detected (e.g. test_async.py)
◈ Medium Documentation 5.0

Some documentation present

  • Detailed PyPI description (13769 chars)
○ Low Contributing Guide 4.0

No contributing guide or governance files found

  • Development Status classifier >= Beta
◈ Medium Type Annotations 7.0

Partial type annotation coverage

  • Type checker (mypy / pyright / pytype) referenced in project
  • 157 type-annotated function signatures detected in source
✦ High Multiple Contributors 10.0

Active multi-contributor project

  • 12 unique contributor(s) across 100 commits in Solganis/assertpy2
  • Active community — 5 or more distinct contributors

🔬 Heuristic Checks

✓ Outbound Network Calls

No suspicious network call patterns found

✓ Code Obfuscation

No obfuscation patterns detected

✓ Shell / Subprocess Execution

No shell execution patterns detected

✓ Credential Harvesting

No credential harvesting patterns detected

✓ Typosquatting

No typosquatting candidates detected

✓ Registered Email Domain

Email domain looks legitimate: saturnboy.com>

✓ Suspicious Page Links

All external links appear legitimate

⚠ Git Repository History score 2.5

Git history flags: Repository has zero stars and zero forks

  • Repository has zero stars and zero forks
⚠ Maintainer History score 2.0

1 maintainer concern(s) found

  • Author "Solganis" appears to have only 1 package on PyPI (new or inactive account)
✓ Known CVE Vulnerabilities

No known vulnerabilities found in OSV database.

💡 AI App Starter Prompt

Use this prompt to build a project with assertpy2 
Create a mini-application named 'TestSuiteBuilder' that leverages the 'assertpy2' package to facilitate the creation of test cases for various input scenarios. This tool should allow users to define different test suites and individual test cases within each suite. Each test case should have a set of assertions to validate the correctness of input data against expected outcomes. Here’s a detailed breakdown of the requirements:

1. **Project Structure**: The application should have a clean directory structure with separate modules for handling test suites, individual tests, and the main execution logic.
2. **Test Suites**: Users should be able to create multiple test suites, each focusing on a specific functionality or module of the application under test.
3. **Individual Tests**: Within each test suite, users should define individual tests that include setup, assertions, and teardown phases.
4. **Assertions with 'assertpy2'**: Use 'assertpy2' to write assertions in a fluent manner, ensuring type safety and soft assertions. For example, a user might want to assert that a given string is not empty or that a number falls within a certain range.
5. **Execution and Reporting**: Implement a mechanism to run all defined test cases within a suite and generate a comprehensive report summarizing the results (passed/failed).
6. **User Interface**: Develop a simple command-line interface (CLI) where users can interactively add new test suites, tests, and run them.
7. **Configuration Management**: Allow users to configure global settings such as logging level, output format, etc., via a configuration file.
8. **Documentation**: Provide clear documentation explaining how to use the tool, including examples of creating test suites and tests, and running the application.

The goal is to create a flexible, yet straightforward tool that makes it easy to write and execute test cases using the powerful assertion capabilities provided by 'assertpy2'.

💬 Discussion Feed

Leave a comment

No discussion yet. Be the first to share your thoughts!