backo

v0.2.0 suspicious
6.0
Medium Risk

Back office low code

🤖 AI Analysis

Final verdict: SUSPICIOUS

The package exhibits potential typosquatting behavior targeting 'black', and has sparse metadata with a newly active or inactive account, raising concerns about its legitimacy.

  • Potential typosquatting targeting 'black'
  • Sparse and suspicious author metadata
Per-check LLM notes
  • Network: No network calls detected, which is normal unless the package requires network interaction.
  • Shell: No shell execution patterns detected, indicating no direct system command execution.
  • Obfuscation: The use of base64 encoding with utf-8 conversion suggests an attempt at obfuscation, but it could also be used for legitimate purposes like data encoding.
  • Credentials: No clear signs of credential harvesting detected.
  • Metadata: The author's information is sparse and the account seems new or inactive, which raises some suspicion but not conclusive evidence of malice.
  • ⚠ Typosquatting target: black

📦 Package Quality Overall: Medium (6.2/10)

✦ High Test Suite 9.0

Test suite present — 13 test file(s) found

  • 13 test file(s) detected (e.g. __init__.py)
◈ Medium Documentation 7.0

Some documentation present

  • 1 documentation file(s) (e.g. conf.py)
  • Detailed PyPI description (44159 chars)
○ Low Contributing Guide 2.0

No contributing guide or governance files found

  • No CONTRIBUTING, CODE_OF_CONDUCT, or governance files found
◈ Medium Type Annotations 5.0

Partial type annotation coverage

  • 145 type-annotated function signatures detected in source
✦ High Multiple Contributors 8.0

Active multi-contributor project

  • 3 unique contributor(s) across 89 commits in bwallrich/backo
  • Small but multi-author team (3–4 contributors)

🔬 Heuristic Checks

✓ Outbound Network Calls

No suspicious network call patterns found

⚠ Code Obfuscation score 2.0

Found 1 obfuscation pattern(s)

  • try: data = base64.b64decode(s.encode("utf-8"), validate=True) except binasci
✓ Shell / Subprocess Execution

No shell execution patterns detected

✓ Credential Harvesting

No credential harvesting patterns detected

⚠ Typosquatting score 3.0

Possible typosquat of: black

  • "backo" is 2 edit(s) from "black"
✓ Registered Email Domain

Email domain looks legitimate: inria.fr>

✓ Suspicious Page Links

All external links appear legitimate

✓ Git Repository History

Repository bwallrich/backo appears legitimate

⚠ Maintainer History score 4.0

2 maintainer concern(s) found

  • Author name is missing or very short
  • Author "" appears to have only 1 package on PyPI (new or inactive account)
✓ Known CVE Vulnerabilities

No known vulnerabilities found in OSV database.

💡 AI App Starter Prompt

Use this prompt to build a project with backo 
Your task is to develop a small but impactful project called 'BackOfficeScheduler', which will serve as a scheduling tool for back-office operations. This project aims to streamline the management of various tasks and processes within a company's back office, such as document processing, inventory checks, and payroll updates. Utilizing the 'backo' Python package, you'll create a user-friendly interface where users can schedule, monitor, and adjust these tasks with minimal coding effort.

Key Features:
1. **Task Scheduling**: Users should be able to schedule recurring tasks with customizable intervals using the 'backo' package's capabilities for handling time intervals and schedules efficiently.
2. **Real-Time Monitoring**: Implement real-time monitoring features to track the status of scheduled tasks, including start times, end times, and completion statuses.
3. **Adjustment Interface**: Provide an interface where users can easily adjust the schedule of tasks on-the-fly, reflecting changes immediately in the system.
4. **Reporting Tool**: Include a basic reporting tool that generates summaries of completed tasks over a specified period, aiding in performance analysis and planning.
5. **User Management**: Simple user management features allowing different levels of access based on roles (e.g., admin, standard user).

Steps to Develop the Project:
1. Set up your development environment with Python and install the 'backo' package.
2. Design the database schema to store task details, schedules, and user information.
3. Build the backend logic using 'backo' to handle scheduling and adjustment functionalities.
4. Create a frontend interface using a framework like Flask or Django for interaction with the backend.
5. Integrate real-time monitoring and reporting tools into the application.
6. Test the application thoroughly, focusing on edge cases and error handling.
7. Deploy the application to a cloud service provider for accessibility.

Remember to leverage 'backo' to its full potential by exploring its advanced scheduling features and ensuring that your solution is both scalable and maintainable.

💬 Discussion Feed

Leave a comment

No discussion yet. Be the first to share your thoughts!