astrosis

v0.1.1 suspicious
6.0
Medium Risk

CLI orbital mechanics calculator — J2/J3/J4 propagation, conjunction screening, pass prediction

🤖 AI Analysis

Final verdict: SUSPICIOUS

The package exhibits significant shell risk and obfuscation risk, raising concerns about potential malicious activities. However, it lacks clear evidence of credential harvesting and has moderate network and metadata risks.

  • High shell risk due to use of subprocess.run
  • Significant obfuscation risk with unusual coding patterns
Per-check LLM notes
  • Network: The use of httpx.Client suggests the package is designed to make HTTP requests, which may be legitimate depending on its purpose.
  • Shell: Executing arbitrary code via subprocess.run can pose a significant risk if not properly sanitized, indicating potential for malicious activities like code injection.
  • Obfuscation: The obfuscation pattern appears suspicious as it uses unusual datetime initialization and variable naming, possibly to hide functionality.
  • Credentials: No clear evidence of credential harvesting techniques is present.
  • Metadata: The author's details are incomplete, suggesting a potential lack of transparency.

📦 Package Quality Overall: Medium (5.0/10)

◈ Medium Test Suite 6.0

Partial test coverage signals detected

  • 1 test file(s) detected (e.g. test_correctness.py)
◈ Medium Documentation 5.0

Some documentation present

  • Detailed PyPI description (8726 chars)
○ Low Contributing Guide 4.0

No contributing guide or governance files found

  • Development Status classifier >= Beta
◈ Medium Type Annotations 5.0

Partial type annotation coverage

  • 79 type-annotated function signatures detected in source
◈ Medium Multiple Contributors 5.0

Limited contributor diversity

  • 1 unique contributor(s) across 100 commits in UtkarshJoshiNtl/Astrosis
  • Single author but highly active (100 commits)

🔬 Heuristic Checks

⚠ Outbound Network Calls score 3.0

Found 2 network call pattern(s)

  • try: with httpx.Client(timeout=timeout) as client: resp = client.ge
  • try: with httpx.Client(timeout=10.0) as client: login = client.post
⚠ Code Obfuscation score 2.0

Found 1 obfuscation pattern(s)

  • 0.0, start_dt=__import__("datetime").datetime(2025, 1, 1), hours=0.0, ingestor=F
⚠ Shell / Subprocess Execution score 4.0

Found 2 shell execution pattern(s)

  • U: OK')\n" ) result = subprocess.run( [sys.executable, "-c", code], cwd=".",
  • odules)\n" ) result = subprocess.run( [sys.executable, "-c", code], cwd=".",
✓ Credential Harvesting

No credential harvesting patterns detected

✓ Typosquatting

No typosquatting candidates detected

✓ Registered Email Domain

Email domain looks legitimate: users.noreply.github.com>

✓ Suspicious Page Links

All external links appear legitimate

✓ Git Repository History

Repository UtkarshJoshiNtl/Astrosis appears legitimate

⚠ Maintainer History score 4.0

2 maintainer concern(s) found

  • Author name is missing or very short
  • Author "" appears to have only 1 package on PyPI (new or inactive account)
✓ Known CVE Vulnerabilities

No known vulnerabilities found in OSV database.

💡 AI App Starter Prompt

Use this prompt to build a project with astrosis 
Create a space mission planning tool using the Python package 'astrosis'. This tool will assist satellite operators and space enthusiasts in predicting passes of satellites over specific locations on Earth, conducting conjunction screenings to avoid collisions, and calculating orbital mechanics considering J2, J3, and J4 perturbations.

Step 1: Design the user interface for inputting necessary parameters such as the observer location (latitude, longitude), target satellite information (TLE data), and time range for analysis.

Step 2: Implement functionality to predict when a satellite will be visible from the specified location on Earth. Use astrosis' pass prediction capabilities to determine the start and end times of visibility, as well as maximum elevation during each pass.

Step 3: Integrate conjunction screening into the tool to identify potential collision risks between the target satellite and other objects in its orbit. Utilize astrosis' ability to handle J2, J3, and J4 gravitational harmonics for more accurate predictions.

Step 4: Provide an option to visualize the satellite's path over the Earth using matplotlib or a similar library, based on the calculated positions at different times.

Suggested Features:
- User-friendly command-line interface or GUI for easy interaction.
- Ability to save and load previous mission plans.
- Real-time tracking updates if internet connection is available.
- Detailed reports including graphical representations of predicted passes and conjunction alerts.

💬 Discussion Feed

Leave a comment

No discussion yet. Be the first to share your thoughts!