astrolabe-sdk

v1.3.0 suspicious
4.0
Medium Risk

Python SDK for the OKAPI:Astrolabe API

🤖 AI Analysis

Final verdict: SUSPICIOUS

The package appears generally benign but has some concerning metadata indicators, such as sparse author information and a potentially new or inactive account.

  • Sparse author information
  • Potentially new or inactive author account
Per-check LLM notes
  • Network: Network calls to a base URL indicate the package is likely designed to interact with a remote service, which is common for SDKs but should be reviewed for the destination and data being sent.
  • Shell: No shell execution patterns detected, indicating low risk for direct system command execution.
  • Obfuscation: No obfuscation patterns detected, indicating low risk.
  • Credentials: No credential harvesting patterns detected, indicating low risk.
  • Metadata: The author information is sparse and the account seems new or inactive, raising some suspicion.

📦 Package Quality Overall: Low (4.2/10)

◈ Medium Test Suite 6.0

Partial test coverage signals detected

  • Test runner config found: pyproject.toml
◈ Medium Documentation 5.0

Some documentation present

  • Brief PyPI description (527 chars)
○ Low Contributing Guide 4.0

No contributing guide or governance files found

  • Development Status classifier >= Beta
◈ Medium Type Annotations 5.0

Partial type annotation coverage

  • 29 type-annotated function signatures detected in source
○ Low Multiple Contributors 1.0

Unable to verify contributor count: no GitHub repository found

  • No GitHub repository linked — contributor count unavailable

🔬 Heuristic Checks

⚠ Outbound Network Calls score 9.0

Found 6 network call pattern(s)

  • }/{path}") response = requests.get(self.base_url + "/" + path, headers=self._headers(), timeout
  • }/{path}") response = requests.post( self.base_url + "/" + path, headers=self._heade
  • }/{path}") response = requests.patch( self.base_url + "/" + path, headers=self._heade
  • }/{path}") response = requests.put( self.base_url + "/" + path, headers=self._heade
  • }/{path}") response = requests.delete(self.base_url + "/" + path, headers=self._headers(), timeout
  • as f: response = requests.post( url, headers=self._headers_
✓ Code Obfuscation

No obfuscation patterns detected

✓ Shell / Subprocess Execution

No shell execution patterns detected

✓ Credential Harvesting

No credential harvesting patterns detected

✓ Typosquatting

No typosquatting candidates detected

✓ Registered Email Domain

Email domain looks legitimate: okapiorbits.space>

✓ Suspicious Page Links

All external links appear legitimate

✓ Git Repository History

No GitHub repository linked

  • No GitHub repository link found
⚠ Maintainer History score 4.0

2 maintainer concern(s) found

  • Author name is missing or very short
  • Author "" appears to have only 1 package on PyPI (new or inactive account)
✓ Known CVE Vulnerabilities

No known vulnerabilities found in OSV database.

💡 AI App Starter Prompt

Use this prompt to build a project with astrolabe-sdk 
Create a Python-based celestial navigation application named 'AstroNav' using the 'astrolabe-sdk' package. AstroNav will help sailors and astronomy enthusiasts calculate their position on Earth based on celestial observations. The app should allow users to input observed celestial bodies such as stars, planets, and the moon, along with their altitudes and azimuths at a specific time and location. Using these inputs, the application will then use the astrolabe-sdk to perform calculations and provide the user with their geographic coordinates (latitude and longitude). Additionally, the app should offer features like:

1. A database of celestial objects with their approximate positions in the sky for different dates and times.
2. An interactive map displaying the calculated position and other navigational points.
3. Historical data visualization showing past positions over time.
4. A feature to save and retrieve previous sessions for future reference.

To achieve these functionalities, you'll need to utilize the 'astrolabe-sdk' package to interact with the OKAPI:Astrolabe API. This includes making requests to get celestial object data, performing positional calculations, and retrieving geographic coordinates. Ensure that your application handles errors gracefully, provides clear instructions for the user, and is easy to navigate.

💬 Discussion Feed

Leave a comment

No discussion yet. Be the first to share your thoughts!