ConfDex

v0.1.0 suspicious
5.0
Medium Risk

Scrape paper titles, authors, and abstracts from conference websites

🤖 AI Analysis

Final verdict: SUSPICIOUS

The package exhibits moderate risks due to network calls, potential obfuscation, and low metadata quality, which collectively suggest caution.

  • network risk
  • obfuscation risk
  • metadata risk
Per-check LLM notes
  • Network: The presence of network calls to an external host suggests potential unexpected behavior, but without additional context on the purpose of these calls, it's hard to determine if they are malicious.
  • Shell: No shell execution patterns were detected.
  • Obfuscation: The use of base64 decoding might indicate an attempt to hide data, but without more context, it could also be legitimate for data encoding purposes.
  • Credentials: No clear evidence of credential harvesting is present based on the provided snippet.
  • Metadata: The package shows signs of low maintenance and potential lack of transparency, raising concerns but not definitive proof of malicious intent.

🔬 Heuristic Checks

⚠ Outbound Network Calls score 4.5

Found 3 network call pattern(s)

  • lient: self._client = httpx.AsyncClient( http2=True, headers={"User-Agent":
  • ttpx.Response: async with httpx.AsyncClient(base_url=_OLLAMA_HOST, timeout=10.0) as client: retu
  • _stream(): async with httpx.AsyncClient(base_url=_OLLAMA_HOST, timeout=600.0) as client:
⚠ Code Obfuscation score 2.0

Found 1 obfuscation pattern(s)

  • ry: decoded = base64.b64decode(auth[6:]).decode("utf-8") provided_user, pro
✓ Shell / Subprocess Execution

No shell execution patterns detected

✓ Credential Harvesting

No credential harvesting patterns detected

✓ Typosquatting

No typosquatting candidates detected

✓ Registered Email Domain

Email domain looks legitimate: gmail.com>

✓ Suspicious Page Links

All external links appear legitimate

✓ Git Repository History

No GitHub repository linked

  • No GitHub repository link found
⚠ Maintainer History score 8.0

4 maintainer concern(s) found

  • Only one version has ever been released — brand new package
  • Author name is missing or very short
  • Author "" appears to have only 1 package on PyPI (new or inactive account)
  • Package has no PyPI classifiers (low effort / metadata quality)
✓ Known CVE Vulnerabilities

No known vulnerabilities found in OSV database.

💡 AI App Starter Prompt

Use this prompt to build a project with ConfDex 
Create a research paper tracker app called 'PaperScout' using Python's 'ConfDex' package. This app will help researchers stay updated on the latest papers in their field by scraping relevant information from various conference websites. Here’s how you’ll build it:

1. **Setup**: Begin by installing the necessary packages including ConfDex, requests, and BeautifulSoup for web scraping. Ensure your development environment is set up correctly.

2. **Database Design**: Design a database schema to store scraped data such as paper titles, authors, abstracts, and links. Use SQLite for simplicity or PostgreSQL for more complex needs.

3. **Data Scraping**: Utilize ConfDex to scrape paper details from selected conference websites. Focus on conferences like NeurIPS, ICML, CVPR, etc., which are highly relevant to machine learning and computer vision.

4. **API Development**: Develop a REST API using Flask or FastAPI to allow users to interact with the scraped data. Implement endpoints for adding new conferences, retrieving all papers from a specific conference, and searching for papers based on keywords.

5. **Frontend Integration**: Build a simple frontend interface using HTML, CSS, and JavaScript (or a framework like React) to display the scraped data. Users should be able to browse through different conferences, view paper details, and search for papers.

6. **User Authentication**: Integrate user authentication so that users can save their favorite papers and conferences. Consider using OAuth for social logins.

7. **Notifications**: Add functionality to notify users via email or SMS when new papers from their preferred conferences are added to the system.

8. **Testing & Deployment**: Thoroughly test the application for bugs and performance issues. Deploy the backend on Heroku or AWS, and the frontend on Netlify or Vercel.

9. **Documentation**: Write comprehensive documentation for both the API and the frontend, detailing how to use each feature.

Throughout the process, leverage ConfDex's capabilities to efficiently scrape and manage large volumes of paper data. The goal is to create a robust tool that simplifies the process of staying informed about recent advancements in academic research.