avtomatika

v1.0b25 suspicious
4.0
Medium Risk

A state-machine based orchestrator for long-running AI and other jobs.

🤖 AI Analysis

Final verdict: SUSPICIOUS

The package shows some potential risks, particularly with the use of eval in Redis scripts, which could be used for obfuscation. Additionally, the maintainer's incomplete profile and apparent inactivity raise concerns.

  • Potential obfuscation via eval in Redis scripts
  • Incomplete and possibly inactive maintainer profile
Per-check LLM notes
  • Network: No network calls detected, which is normal unless the package requires external API access.
  • Shell: No shell execution detected, reducing the risk of command injection or system compromise.
  • Obfuscation: The usage of eval on Redis scripts might indicate obfuscation but could also be for legitimate scripting purposes.
  • Credentials: No patterns indicative of credential harvesting were detected.
  • Metadata: The maintainer has an incomplete profile and appears to be new or inactive, which raises some suspicion but not enough to conclusively determine malice.

📦 Package Quality Overall: Medium (7.0/10)

✦ High Test Suite 9.0

Test suite present — 15 test file(s) found

  • Test runner config found: pyproject.toml
  • 15 test file(s) detected (e.g. test_advanced_dispatching.py)
◈ Medium Documentation 5.0

Some documentation present

  • Detailed PyPI description (24066 chars)
✦ High Contributing Guide 9.0

Has contribution guidelines and governance files

  • Governance file: security.py
  • Development Status classifier >= Beta
◈ Medium Type Annotations 7.0

Partial type annotation coverage

  • Classifier: Typing :: Typed
  • 365 type-annotated function signatures detected in source
◈ Medium Multiple Contributors 5.0

Limited contributor diversity

  • 1 unique contributor(s) across 26 commits in avtomatika-ai/avtomatika
  • Single author but highly active (26 commits)

🔬 Heuristic Checks

✓ Outbound Network Calls

No suspicious network call patterns found

⚠ Code Obfuscation score 8.0

Found 4 obfuscation pattern(s)

  • ned_count = await self._redis.eval(LUA_CLEANUP, 0, wid) if orphaned_count and
  • ids = await self._redis.eval(LUA_POP_TIMEOUTS, 1, "orchestrator:watched_jobs", now, limit
  • res = await self._redis.eval(LUA, 1, key) except ResponseError as e:
  • cast(bool, await self._redis.eval(LUA, 1, f"orchestrator:lock:{key}", holder_id)) exce
✓ Shell / Subprocess Execution

No shell execution patterns detected

✓ Credential Harvesting

No credential harvesting patterns detected

✓ Typosquatting

No typosquatting candidates detected

✓ Registered Email Domain

Email domain looks legitimate: gmail.com>

✓ Suspicious Page Links

All external links appear legitimate

✓ Git Repository History

Repository avtomatika-ai/avtomatika appears legitimate

⚠ Maintainer History score 4.0

2 maintainer concern(s) found

  • Author name is missing or very short
  • Author "" appears to have only 1 package on PyPI (new or inactive account)
✓ Known CVE Vulnerabilities

No known vulnerabilities found in OSV database.

💡 AI App Starter Prompt

Use this prompt to build a project with avtomatika 
Build a simple Python application using the avtomatika package to demonstrate its core features.

💬 Discussion Feed

Leave a comment

No discussion yet. Be the first to share your thoughts!