assinafy

v1.3.1 safe
3.0
Low Risk

Python SDK for Assinafy API - Digital signature platform

🤖 AI Analysis

Final verdict: SAFE

The package appears legitimate and its primary function is to provide an SDK for the Assinafy API. There are no significant risks identified.

  • Low network risk as expected for an API client
  • No shell execution detected
  • Single package from maintainer but no other red flags
Per-check LLM notes
  • Network: The presence of network calls is not inherently suspicious but should be reviewed to ensure they align with the package's intended functionality.
  • Shell: No shell execution patterns detected, which is normal and expected.
  • Metadata: The maintainer has only one package, which may indicate a new or less active account, but no other red flags were identified.

📦 Package Quality Overall: Medium (5.8/10)

✦ High Test Suite 9.0

Test suite present — 12 test file(s) found

  • Test runner config found: conftest.py
  • Test runner config found: pyproject.toml
  • 12 test file(s) detected (e.g. conftest.py)
◈ Medium Documentation 7.0

Some documentation present

  • Documentation URL: "Documentation" -> https://api.assinafy.com.br/v1/docs
  • Detailed PyPI description (10985 chars)
○ Low Contributing Guide 4.0

No contributing guide or governance files found

  • Development Status classifier >= Beta
◈ Medium Type Annotations 7.0

Partial type annotation coverage

  • Classifier: Typing :: Typed
  • Type checker (mypy / pyright / pytype) referenced in project
  • 166 type-annotated function signatures detected in source
○ Low Multiple Contributors 2.0

Single-author or unverifiable project

  • 1 unique contributor(s) across 9 commits in assinafy/python-sdk
  • Single author with few commits — possibly a personal or throwaway project

🔬 Heuristic Checks

⚠ Outbound Network Calls score 1.5

Found 1 network call pattern(s)

  • token}" self._http = httpx.Client( base_url=(base_url or _DEFAULT_BASE_URL).rstrip
✓ Code Obfuscation

No obfuscation patterns detected

✓ Shell / Subprocess Execution

No shell execution patterns detected

✓ Credential Harvesting

No credential harvesting patterns detected

✓ Typosquatting

No typosquatting candidates detected

✓ Registered Email Domain

No author email provided

✓ Suspicious Page Links

All external links appear legitimate

✓ Git Repository History

Repository assinafy/python-sdk appears legitimate

⚠ Maintainer History score 2.0

1 maintainer concern(s) found

  • Author "Assinafy API Team" appears to have only 1 package on PyPI (new or inactive account)
✓ Known CVE Vulnerabilities

No known vulnerabilities found in OSV database.

💡 AI App Starter Prompt

Use this prompt to build a project with assinafy 
Create a digital document management system named 'Signature Hub' using Python and the 'assinafy' package. This system will allow users to upload documents, request signatures from multiple parties, track the signing process, and download signed documents. Here’s a detailed breakdown of the steps and features:

1. **User Authentication**: Implement a simple login system where users can sign up and log in. Use Flask or Django for the backend framework.
2. **Document Upload**: Allow authenticated users to upload PDF files through the web interface. Ensure file integrity checks are performed before processing.
3. **Signature Request**: Once a document is uploaded, the user should be able to specify recipients who need to sign the document. Send out personalized email notifications to these recipients via SMTP.
4. **Track Signatures**: Provide a dashboard where users can see the status of their signature requests (Pending, In Progress, Completed). Use the 'assinafy' package to handle the digital signature workflow.
5. **Download Signed Documents**: After all required signatures are collected, users should be able to download the fully signed document.
6. **Admin Panel**: Include an admin panel for managing users and documents. Admins should be able to view all documents and their signing statuses.
7. **Notifications**: Implement real-time notifications for users when a new document is uploaded or a signature is completed. Consider using WebSockets for this feature.
8. **Security Measures**: Ensure that all data is securely stored and transmitted. Use HTTPS for secure communication and encrypt sensitive data at rest.

Utilize the 'assinafy' package to integrate digital signatures into your application. Specifically, use its functions to initiate the signature process, manage signing requests, and verify signatures. This project aims to provide a comprehensive solution for managing digital signatures in a collaborative environment.

💬 Discussion Feed

Leave a comment

No discussion yet. Be the first to share your thoughts!