authplane-fastmcp

v0.2.0 suspicious
5.0
Medium Risk

Authplane JWT validation adapter for FastMCP

🤖 AI Analysis

Final verdict: SUSPICIOUS

The package shows minimal risk in terms of network, shell, obfuscation, and credential risks. However, the metadata risk due to low repository activity and a new maintainer account raises suspicion about potential supply-chain attack vectors.

  • Low activity in the git repository
  • New maintainer account
Per-check LLM notes
  • Network: No network calls detected, which is normal if the package does not require external services.
  • Shell: No shell execution patterns detected, indicating no immediate signs of malicious shell command execution.
  • Obfuscation: No obfuscation patterns detected, indicating low risk.
  • Credentials: No credential harvesting patterns detected, indicating low risk.
  • Metadata: The low activity in the git repository and the new maintainer account suggest potential risk, but no clear indicators of malicious intent.

📦 Package Quality Overall: Low (4.0/10)

◈ Medium Test Suite 6.0

Partial test coverage signals detected

  • Test runner config found: pyproject.toml
◈ Medium Documentation 5.0

Some documentation present

  • Detailed PyPI description (1716 chars)
○ Low Contributing Guide 2.0

No contributing guide or governance files found

  • No CONTRIBUTING, CODE_OF_CONDUCT, or governance files found
◈ Medium Type Annotations 5.0

Partial type annotation coverage

  • 8 type-annotated function signatures (partial)
○ Low Multiple Contributors 2.0

Single-author or unverifiable project

  • 1 unique contributor(s) across 5 commits in AuthPlane/python-sdk
  • Single author with few commits — possibly a personal or throwaway project

🔬 Heuristic Checks

✓ Outbound Network Calls

No suspicious network call patterns found

✓ Code Obfuscation

No obfuscation patterns detected

✓ Shell / Subprocess Execution

No shell execution patterns detected

✓ Credential Harvesting

No credential harvesting patterns detected

✓ Typosquatting

No typosquatting candidates detected

✓ Registered Email Domain

No author email provided

✓ Suspicious Page Links

All external links appear legitimate

⚠ Git Repository History score 2.5

Git history flags: Repository has zero stars and zero forks

  • Repository has zero stars and zero forks
⚠ Maintainer History score 2.0

1 maintainer concern(s) found

  • Author "Authplane Team" appears to have only 1 package on PyPI (new or inactive account)
✓ Known CVE Vulnerabilities

No known vulnerabilities found in OSV database.

💡 AI App Starter Prompt

Use this prompt to build a project with authplane-fastmcp 
Develop a user management system for a small online community using Python and the 'authplane-fastmcp' package. This system will serve as a platform where users can register, log in, and manage their profiles. It will also include basic user authentication and authorization functionalities, leveraging the JWT (JSON Web Tokens) validation capabilities provided by 'authplane-fastmcp'.

Step 1: Setup the Project Environment
- Initialize a new Python project.
- Install necessary packages including 'authplane-fastmcp', 'fastapi', 'uvicorn', and 'python-multipart'.

Step 2: Design Database Schema
- Define models for User, Role, and Token.
- Implement a simple database using SQLite for storing user information.

Step 3: Implement User Registration and Login
- Create endpoints for user registration and login.
- Use 'authplane-fastmcp' to generate and validate JWT tokens upon successful login.
- Store tokens securely on the client side (e.g., local storage).

Step 4: Profile Management
- Allow authenticated users to view and edit their profile information.
- Implement role-based access control using 'authplane-fastmcp' to restrict certain actions based on user roles.

Step 5: Authentication Middleware
- Develop middleware to handle token validation and user authentication across all routes.
- Ensure that only authenticated requests proceed to the intended endpoints.

Suggested Features:
- Password hashing for secure storage of passwords.
- Email verification upon account creation.
- Two-factor authentication (2FA) option for enhanced security.
- Remember me functionality to keep users logged in over multiple sessions.

How 'authplane-fastmcp' is Utilized:
- For JWT generation and validation during user authentication.
- To implement role-based access control for different levels of user permissions.
- As a middleware to authenticate each request and authorize access to resources.

💬 Discussion Feed

Leave a comment

No discussion yet. Be the first to share your thoughts!