aviconv-met

v0.3.0 suspicious
6.0
Medium Risk

Bidirectional METAR/SPECI ↔ TAF ↔ SIGMET/AIRMET ↔ VAA/TCA ↔ IWXXM 3.0 converter.

🤖 AI Analysis

Final verdict: SUSPICIOUS

The package shows no immediate signs of malicious activity such as network calls or shell execution. However, the metadata risk score is elevated due to the unverified repository and new maintainer, which raises concerns about potential supply-chain risks.

  • Elevated metadata risk due to unknown repository and maintainer
  • No other significant risks detected
Per-check LLM notes
  • Network: No network calls detected, which is normal unless the package requires internet access for its functionality.
  • Shell: No shell execution detected, indicating no direct command-line interface manipulation attempts.
  • Obfuscation: No obfuscation patterns detected, suggesting legitimate use or clean code.
  • Credentials: No credential harvesting patterns detected, indicating no immediate risk of secret theft.
  • Metadata: The repository is not found and the maintainer seems new with limited history, raising suspicion but not conclusive evidence of malice.

📦 Package Quality Overall: Medium (5.2/10)

✦ High Test Suite 9.0

Test suite present — 11 test file(s) found

  • Test runner config found: conftest.py
  • 11 test file(s) detected (e.g. conftest.py)
◈ Medium Documentation 7.0

Some documentation present

  • Documentation URL: "Documentation" -> https://ams-dev25.github.io/aviconv/
  • Detailed PyPI description (1879 chars)
○ Low Contributing Guide 2.0

No contributing guide or governance files found

  • No CONTRIBUTING, CODE_OF_CONDUCT, or governance files found
◈ Medium Type Annotations 7.0

Partial type annotation coverage

  • Classifier: Typing :: Typed
  • 122 type-annotated function signatures detected in source
○ Low Multiple Contributors 1.0

Could not retrieve contributor data from GitHub

  • GitHub API error: 404

🔬 Heuristic Checks

✓ Outbound Network Calls

No suspicious network call patterns found

✓ Code Obfuscation

No obfuscation patterns detected

✓ Shell / Subprocess Execution

No shell execution patterns detected

✓ Credential Harvesting

No credential harvesting patterns detected

✓ Typosquatting

No typosquatting candidates detected

✓ Registered Email Domain

No author email provided

✓ Suspicious Page Links

All external links appear legitimate

⚠ Git Repository History score 3.0

Repository not found (deleted or private)

  • Repository not found (deleted or private)
⚠ Maintainer History score 4.0

2 maintainer concern(s) found

  • Only one version has ever been released — brand new package
  • Author "aviconv contributors" appears to have only 1 package on PyPI (new or inactive account)
✓ Known CVE Vulnerabilities

No known vulnerabilities found in OSV database.

💡 AI App Starter Prompt

Use this prompt to build a project with aviconv-met 
Create a Python-based weather data conversion tool called 'WeatherTranslator' using the 'aviconv-met' package. This application should enable users to convert various aviation weather reports into different formats seamlessly. Here's a detailed breakdown of the steps and features:

1. **Project Setup**: Initialize your Python environment and install the 'aviconv-met' package along with other necessary libraries such as Flask for web interaction.
2. **User Interface**: Design a simple yet intuitive web interface where users can input their weather report data. The UI should support multiple types of input formats including METAR/SPECI, TAF, SIGMET/AIRMET, VAA/TCA, and IWXXM 3.0.
3. **Conversion Engine**: Implement the core functionality of converting between these different weather report formats using the 'aviconv-met' package. Ensure the application supports bidirectional conversions.
4. **Output Display**: After successful conversion, display the output on the same web interface in a user-friendly manner. Users should be able to choose which format they want the output in.
5. **Error Handling**: Incorporate robust error handling mechanisms to manage incorrect inputs or conversion errors gracefully.
6. **Documentation**: Write comprehensive documentation explaining how to use 'WeatherTranslator', detailing each feature and the process of installation and usage.
7. **Testing**: Conduct thorough testing to ensure all functionalities work as expected and provide a smooth user experience.
8. **Deployment**: Deploy the application on a platform like Heroku or AWS, making it accessible online.

Suggested Features:
- Support for real-time weather data input.
- Ability to save and load previous conversion sessions.
- Integration with popular aviation weather services for direct data retrieval.
- User authentication and profile management.
- Detailed logs for troubleshooting and analytics.

💬 Discussion Feed

Leave a comment

No discussion yet. Be the first to share your thoughts!