AI Analysis
The package shows no signs of obfuscation or credential harvesting, but there are significant concerns about the git repository activity and maintainer history, suggesting potential risks that warrant further investigation.
- High metadata risk due to suspicious git repository activity
- Maintainer history raises concerns
Per-check LLM notes
- Obfuscation: No obfuscation patterns detected, indicating low risk.
- Credentials: No credential harvesting patterns detected, indicating low risk.
- Metadata: High risk due to suspicious git repository activity and maintainer history.
Package Quality Overall: Low (4.6/10)
Test suite present — 2 test file(s) found
Test runner config found: pyproject.toml2 test file(s) detected (e.g. test_db.py)
Some documentation present
Brief PyPI description (797 chars)
No contributing guide or governance files found
No CONTRIBUTING, CODE_OF_CONDUCT, or governance files found
Partial type annotation coverage
31 type-annotated function signatures detected in source
Single-author or unverifiable project
1 unique contributor(s) across 2 commits in skovalik/aurochs-coreSingle author with few commits — possibly a personal or throwaway project
Heuristic Checks
No suspicious network call patterns found
No obfuscation patterns detected
No shell execution patterns detected
No credential harvesting patterns detected
No typosquatting candidates detected
Email domain looks legitimate: aurochs.agency>
All external links appear legitimate
Git history flags: Repository has zero stars and zero forks
Repository has zero stars and zero forksVery few commits: 2 totalSingle contributor with only 2 commit(s) — possibly throwaway account
3 maintainer concern(s) found
Only one version has ever been released — brand new packageAuthor name is missing or very shortAuthor "" appears to have only 1 package on PyPI (new or inactive account)
No known vulnerabilities found in OSV database.
AI App Starter Prompt
Build a simple Python application using the aurochs-core package to demonstrate its core features.
💬 Discussion Feed
No discussion yet. Be the first to share your thoughts!
Report Abuse / Security Issue