astToolkit

v0.11.3 suspicious
6.0
Medium Risk

A powerfully composable, type-safe toolkit for Python abstract syntax tree (AST) manipulation, analysis, transformation, and code generation with a layered architecture designed for building sophisticated code processing assembly-lines.

🤖 AI Analysis

Final verdict: SUSPICIOUS

The package exhibits unusually high obfuscation risk and lacks critical metadata like the maintainer's author name, suggesting potential malicious intent. However, there is insufficient evidence to conclusively label it as malicious.

  • High obfuscation risk
  • Missing maintainer's author name
Per-check LLM notes
  • Network: No network calls detected, which is normal unless the package requires external services.
  • Shell: No shell execution patterns detected, indicating no immediate signs of malicious activity.
  • Obfuscation: The code patterns suggest complex obfuscation techniques that could be used to evade detection or analysis, indicating potential malicious intent.
  • Credentials: No clear evidence of credential harvesting was found.
  • Metadata: The maintainer's author name is missing and they appear to be new or inactive, which raises some suspicion but not enough to conclusively identify as malicious.

📦 Package Quality Overall: Medium (6.2/10)

✦ High Test Suite 9.0

Test suite present — 13 test file(s) found

  • Test runner config found: pyproject.toml
  • Test runner config found: conftest.py
  • 13 test file(s) detected (e.g. conftest.py)
◈ Medium Documentation 5.0

Some documentation present

  • Detailed PyPI description (10693 chars)
○ Low Contributing Guide 4.0

No contributing guide or governance files found

  • Development Status classifier >= Beta
◈ Medium Type Annotations 7.0

Partial type annotation coverage

  • Classifier: Typing :: Typed
  • 995 type-annotated function signatures detected in source
◈ Medium Multiple Contributors 6.0

Limited contributor diversity

  • 2 unique contributor(s) across 100 commits in hunterhogan/astToolkit
  • Two distinct contributors found

🔬 Heuristic Checks

✓ Outbound Network Calls

No suspicious network call patterns found

⚠ Code Obfuscation score 10.0

Found 6 obfuscation pattern(s)

  • - {C} - {c.__name__ for c in eval('ast.' + C).__subclasses__()})) for C in allSubclasses]: #
  • # print(nodeAsStr, ast.dump(eval(nodeAsStr), show_empty=True), dump(eval(nodeAsStr), show_emp
  • sStr), show_empty=True), dump(eval(nodeAsStr), show_empty=True), '', sep='\n') # print(nodeAsS
  • \n') # print(nodeAsStr, dump(eval(nodeAsStr), show_empty=True), '', sep='\n') # print(nodeAsS
  • # print(nodeAsStr, ast.dump(eval(nodeAsStr), show_empty=False), dump(eval(nodeAsStr), show_em
  • Str), show_empty=False), dump(eval(nodeAsStr), show_empty=False), '', sep='\n') identifier =
✓ Shell / Subprocess Execution

No shell execution patterns detected

✓ Credential Harvesting

No credential harvesting patterns detected

✓ Typosquatting

No typosquatting candidates detected

⚠ Registered Email Domain score 3.0

Suspicious email domain flags: Very short email domain: pm.me>

  • Very short email domain: pm.me>
✓ Suspicious Page Links

All external links appear legitimate

✓ Git Repository History

Repository hunterhogan/astToolkit appears legitimate

⚠ Maintainer History score 4.0

2 maintainer concern(s) found

  • Author name is missing or very short
  • Author "" appears to have only 1 package on PyPI (new or inactive account)
✓ Known CVE Vulnerabilities

No known vulnerabilities found in OSV database.

💡 AI App Starter Prompt

Use this prompt to build a project with astToolkit 
Create a Python-based code refactoring tool called 'CodeEnhancer' using the 'astToolkit' package. This tool should help developers automate common code refactoring tasks, such as renaming variables, extracting methods, and applying PEP8 style conventions. Here’s a detailed plan on how to develop this tool:

1. **Setup Project**: Initialize a new Python project and install the 'astToolkit' package.
2. **Variable Renaming Feature**: Implement a feature where users can specify a variable name to rename across all files within a given directory. Use 'astToolkit' to parse the AST of each file, identify instances of the specified variable, and replace them with a new name.
3. **Method Extraction Feature**: Develop a functionality that allows users to select a block of code and extract it into a separate method. Utilize 'astToolkit' to analyze the selected code block, determine the appropriate scope for the new method, and integrate it into the existing code structure.
4. **PEP8 Compliance Check**: Integrate a PEP8 compliance checker that automatically formats code according to PEP8 guidelines. Leverage 'astToolkit' to traverse the AST, identify non-compliant elements, and suggest or apply corrections.
5. **User Interface**: Design a simple command-line interface (CLI) that guides users through selecting files/directories, choosing operations, and reviewing changes before applying them.
6. **Testing & Validation**: Ensure thorough testing of each feature using unit tests and integration tests. Validate the functionality of 'CodeEnhancer' on a variety of Python projects to ensure reliability and effectiveness.
7. **Documentation & Deployment**: Write comprehensive documentation for 'CodeEnhancer', explaining how to install, use, and extend the tool. Package the application for easy deployment via PyPI.

By following these steps, you will create a robust, user-friendly code refactoring tool that significantly streamlines the process of maintaining clean, efficient, and compliant Python codebases.

💬 Discussion Feed

Leave a comment

No discussion yet. Be the first to share your thoughts!