azure-mgmt-commerce

v6.0.1 suspicious
4.0
Medium Risk

Microsoft Azure Commerce Management Client Library for Python

🤖 AI Analysis

Final verdict: SUSPICIOUS

The package shows unusual characteristics such as minimal network activity and obfuscation that could be benign but warrant further investigation. The maintainer's account details also raise concerns.

  • Low network activity for an Azure management package
  • Potential module path manipulation
  • New or inactive maintainer account
Per-check LLM notes
  • Network: No network calls detected, which is not typical for Azure management packages but may be due to conditional calls or not being part of the core functionality.
  • Shell: No shell execution patterns detected, indicating no immediate risk of command execution.
  • Obfuscation: The observed pattern is likely for module path manipulation and not indicative of malicious activity.
  • Credentials: No patterns indicative of credential harvesting were detected.
  • Metadata: The maintainer has a new or inactive account with limited package history and no author name provided, which may indicate low activity or oversight.

📦 Package Quality Overall: Medium (7.0/10)

✦ High Test Suite 9.0

Test suite present — 4 test file(s) found

  • Test runner config found: conftest.py
  • 4 test file(s) detected (e.g. conftest.py)
◈ Medium Documentation 5.0

Some documentation present

  • Detailed PyPI description (6265 chars)
○ Low Contributing Guide 4.0

No contributing guide or governance files found

  • Development Status classifier >= Beta
◈ Medium Type Annotations 7.0

Partial type annotation coverage

  • Type checker (mypy / pyright / pytype) referenced in project
  • 40 type-annotated function signatures detected in source
✦ High Multiple Contributors 10.0

Active multi-contributor project

  • 35 unique contributor(s) across 100 commits in Azure/azure-sdk-for-python
  • Active community — 5 or more distinct contributors

🔬 Heuristic Checks

✓ Outbound Network Calls

No suspicious network call patterns found

⚠ Code Obfuscation score 4.0

Found 2 obfuscation pattern(s)

  • __path__ = __import__("pkgutil").extend_path(__path__, __name__) # type: ignore __path__ =
  • ) # type: ignore __path__ = __import__("pkgutil").extend_path(__path__, __name__) # type: ignore # coding=u
✓ Shell / Subprocess Execution

No shell execution patterns detected

✓ Credential Harvesting

No credential harvesting patterns detected

✓ Typosquatting

No typosquatting candidates detected

✓ Registered Email Domain

Email domain looks legitimate: microsoft.com> license-expression: mit

✓ Suspicious Page Links

All external links appear legitimate

✓ Git Repository History

Repository Azure/azure-sdk-for-python appears legitimate

⚠ Maintainer History score 4.0

2 maintainer concern(s) found

  • Author name is missing or very short
  • Author "" appears to have only 1 package on PyPI (new or inactive account)
✓ Known CVE Vulnerabilities

No known vulnerabilities found in OSV database.

💡 AI App Starter Prompt

Use this prompt to build a project with azure-mgmt-commerce 
Build a simple Python application using the azure-mgmt-commerce package to demonstrate its core features.

💬 Discussion Feed

Leave a comment

No discussion yet. Be the first to share your thoughts!