automas-notification-onebot

v0.0.4 suspicious
4.0
Medium Risk

Notification OneBot 11 HTTP API channel

🤖 AI Analysis

Final verdict: SUSPICIOUS

The package has low risks in terms of network, shell, obfuscation, and credential misuse. However, it shows signs of low maintenance and lacks clear author information, which raises suspicion about its origin and intent.

  • Low maintenance and unclear authorship
  • Lack of proper metadata
Per-check LLM notes
  • Network: The presence of network calls is expected for a package that likely interacts with external services or APIs.
  • Shell: No shell execution patterns were detected.
  • Obfuscation: No obfuscation patterns detected, indicating low risk.
  • Credentials: No credential harvesting patterns detected, indicating low risk.
  • Metadata: The package shows low maintenance efforts and lacks a proper author identity, raising concerns about its authenticity and purpose.

📦 Package Quality Overall: Low (2.8/10)

○ Low Test Suite 1.0

No test suite detected

  • No test files or test-runner configuration detected
◈ Medium Documentation 5.0

Some documentation present

  • Detailed PyPI description (960 chars)
○ Low Contributing Guide 2.0

No contributing guide or governance files found

  • No CONTRIBUTING, CODE_OF_CONDUCT, or governance files found
◈ Medium Type Annotations 5.0

Partial type annotation coverage

  • 5 type-annotated function signatures (partial)
○ Low Multiple Contributors 1.0

Unable to verify contributor count: no GitHub repository found

  • No GitHub repository linked — contributor count unavailable

🔬 Heuristic Checks

⚠ Outbound Network Calls score 1.5

Found 1 network call pattern(s)

  • s_token}" async with httpx.AsyncClient(proxy=AppConfig.proxy, timeout=10) as client: re
✓ Code Obfuscation

No obfuscation patterns detected

✓ Shell / Subprocess Execution

No shell execution patterns detected

✓ Credential Harvesting

No credential harvesting patterns detected

✓ Typosquatting

No typosquatting candidates detected

✓ Registered Email Domain

No author email provided

✓ Suspicious Page Links

All external links appear legitimate

✓ Git Repository History

No GitHub repository linked

  • No GitHub repository link found
⚠ Maintainer History score 6.0

3 maintainer concern(s) found

  • Author name is missing or very short
  • Author "" appears to have only 1 package on PyPI (new or inactive account)
  • Package has no PyPI classifiers (low effort / metadata quality)
✓ Known CVE Vulnerabilities

No known vulnerabilities found in OSV database.

💡 AI App Starter Prompt

Use this prompt to build a project with automas-notification-onebot 
Your task is to develop a fully-functional mini-app named 'AutoNotify' that leverages the 'automas-notification-onebot' package to send notifications via OneBot 11 HTTP API. This app will serve as a versatile tool for users to receive timely updates on various events such as reminders, weather forecasts, and breaking news. Here’s a step-by-step guide on how to build it:

1. **Setup Environment**: Begin by setting up your Python development environment. Ensure you have Python installed along with necessary packages like 'automas-notification-onebot'. You can install the package using pip.

2. **Define Core Features**:
   - **Event Subscription**: Allow users to subscribe to different types of events (e.g., daily reminders, weather alerts).
   - **Notification Types**: Support multiple notification types (text, images, links).
   - **Customization Options**: Enable users to customize their notification preferences.

3. **Integrate 'automas-notification-onebot'**:
   - Use the package to configure the OneBot 11 HTTP API endpoint where notifications will be sent.
   - Implement functions to send different types of notifications based on user subscriptions.

4. **User Interface**:
   - Develop a simple web interface using Flask or Django to manage subscriptions and preferences.
   - Include options for users to test their setup and preview notifications.

5. **Testing and Deployment**:
   - Thoroughly test all functionalities to ensure reliability.
   - Deploy your application using a cloud service provider like Heroku or AWS.

6. **Documentation and Support**:
   - Create comprehensive documentation explaining how to use AutoNotify.
   - Set up a support system for users to report issues and request new features.

By following these steps, you'll create a robust and user-friendly application that effectively uses the capabilities of 'automas-notification-onebot' to deliver valuable notifications to its users.

💬 Discussion Feed

Leave a comment

No discussion yet. Be the first to share your thoughts!