AI Analysis
The package appears to have legitimate functionality without any malicious indicators. The primary concern lies in the sparse metadata, but this does not conclusively point towards a supply-chain attack.
- Low risk in network, shell, obfuscation, and credential areas.
- Sparse author information suggesting possible new or less transparent development.
Per-check LLM notes
- Network: The network calls appear to be for fetching currency rates from the Central Bank of Russia, which is expected behavior for a package named 'atomno-mcp-cbr-rates'.
- Shell: No shell execution patterns were detected, indicating no immediate risk related to shell command execution.
- Obfuscation: No obfuscation patterns detected, indicating low risk.
- Credentials: No credential harvesting patterns detected, indicating low risk.
- Metadata: The author's information is sparse, indicating potential lack of transparency or newness.
Package Quality Overall: Medium (5.8/10)
Test suite present — 10 test file(s) found
Test runner config found: conftest.pyTest runner config found: pyproject.toml10 test file(s) detected (e.g. conftest.py)
Some documentation present
Documentation URL: "Documentation" -> https://github.com/atomno-labs/mcp-cbr-rates#readmeDetailed PyPI description (6447 chars)
No contributing guide or governance files found
Development Status classifier >= Beta
Partial type annotation coverage
Classifier: Typing :: Typed78 type-annotated function signatures detected in source
Single-author or unverifiable project
1 unique contributor(s) across 9 commits in atomno-labs/mcp-cbr-ratesSingle author with few commits — possibly a personal or throwaway project
Heuristic Checks
Found 3 network call pattern(s)
self._client = http_client or httpx.AsyncClient( timeout=timeout, headers={"User-AORY_TTL) http_client = httpx.AsyncClient( timeout=timeout, headers={ "by respx.""" async with httpx.AsyncClient( base_url="https://www.cbr.ru", timeout=5.
No obfuscation patterns detected
No shell execution patterns detected
No credential harvesting patterns detected
No typosquatting candidates detected
Email domain looks legitimate: atomno-labs.ru>
All external links appear legitimate
Repository atomno-labs/mcp-cbr-rates appears legitimate
2 maintainer concern(s) found
Author name is missing or very shortAuthor "" appears to have only 1 package on PyPI (new or inactive account)
No known vulnerabilities found in OSV database.
AI App Starter Prompt
Create a financial dashboard application using Python that integrates real-time economic data from the Central Bank of Russia (CBR). Your application should be able to fetch and display the latest currency exchange rates, the key interest rate, inflation rates, and macroeconomic statistics. Use the 'atomno-mcp-cbr-rates' package as your primary data source. Here are the steps and features you need to implement: 1. **Setup**: Install the necessary packages including 'atomno-mcp-cbr-rates'. Ensure your environment is set up correctly. 2. **Data Fetching**: Implement functions to fetch currency rates, key interest rate, inflation data, and macroeconomic statistics from the CBR using the 'atomno-mcp-cbr-rates' package. 3. **Data Visualization**: Create a user-friendly interface where users can view the fetched data. Consider using libraries like Matplotlib or Plotly for visual representation. 4. **User Interaction**: Allow users to select specific dates for historical data and choose which types of data they want to view (currency rates, key rate, etc.). 5. **Real-Time Updates**: Implement a feature that updates the displayed data periodically without requiring a page refresh. 6. **Export Data**: Enable users to export the displayed data into CSV or Excel format for further analysis. 7. **Error Handling**: Include robust error handling mechanisms to manage any issues that arise during data fetching or processing. 8. **Documentation**: Provide clear documentation on how to run the application and use its features. This project aims to showcase the practical application of economic data in a real-world scenario, making it easier for users to understand and analyze financial trends.
💬 Discussion Feed
No discussion yet. Be the first to share your thoughts!
Report Abuse / Security Issue