AI Analysis
The package shows low risks across all categories except for shell execution, which is somewhat elevated due to potential for command injection. However, the overall risk remains low with no clear indicators of malicious intent.
- Shell risk slightly elevated
- No network calls detected
- No obfuscation or credential risks
- Potential typosquatting attempt
Per-check LLM notes
- Network: No network calls detected, which is normal unless the package requires internet access.
- Shell: Shell execution is present and may be used for legitimate purposes like version control operations, but could also indicate potential for executing arbitrary commands.
- Obfuscation: No obfuscation patterns detected, indicating low risk.
- Credentials: No credential harvesting patterns detected, indicating low risk.
- Metadata: The author has only one package on PyPI, which might indicate a new or less active user.
- ⚠ Typosquatting target: babel
Package Quality Overall: Low (4.2/10)
No test suite detected
No test files or test-runner configuration detected
Some documentation present
Detailed PyPI description (5584 chars)
No contributing guide or governance files found
No CONTRIBUTING, CODE_OF_CONDUCT, or governance files found
Partial type annotation coverage
280 type-annotated function signatures detected in source
Active multi-contributor project
3 unique contributor(s) across 100 commits in asottile/babiSmall but multi-author team (3–4 contributors)
Heuristic Checks
No suspicious network call patterns found
No obfuscation patterns detected
Found 2 shell execution pattern(s)
: str) -> str: return subprocess.check_output( ( 'git', '-C', os.path.dirname(try: proc = subprocess.Popen( cmd, stdout=subproc
No credential harvesting patterns detected
Possible typosquat of: babel
"babi" is 2 edit(s) from "babel"
Email domain looks legitimate: umich.edu
All external links appear legitimate
Repository asottile/babi appears legitimate
1 maintainer concern(s) found
Author "Anthony Sottile" appears to have only 1 package on PyPI (new or inactive account)
No known vulnerabilities found in OSV database.
AI App Starter Prompt
Build a simple Python application using the babi package to demonstrate its core features.
💬 Discussion Feed
No discussion yet. Be the first to share your thoughts!
Report Abuse / Security Issue