AI Analysis
Final verdict: SUSPICIOUS
The package has moderate risks due to potential network and shell command usages, despite no direct evidence of malicious intent. The incomplete author metadata adds to the uncertainty.
- network risk due to external resource checks
- high shell risk due to potential unsafe system interactions
- incomplete author metadata
Per-check LLM notes
- Network: The network calls may be used for checking external resources or downloading files, which could potentially be legitimate depending on the package's purpose.
- Shell: Executing shell commands can introduce significant risk if not properly controlled, especially if it involves interacting with system-level operations or external services.
- Obfuscation: No obfuscation patterns detected, suggesting low risk of malicious activity.
- Credentials: No credential harvesting patterns detected, indicating safe handling of secrets and credentials.
- Metadata: The author's details are incomplete and the account seems new or inactive, raising some suspicion but not conclusive evidence of malice.
Heuristic Checks
Outbound Network Calls
score 3.0
Found 2 network call pattern(s)
k=True) response = requests.head(self._url, allow_redirects=True, timeout=10) self.lt, out_file, d): r = requests.get(t, allow_redirects=True, timeout=20) self.logger.de
Code Obfuscation
No obfuscation patterns detected
Shell / Subprocess Execution
score 2.0
Found 1 shell execution pattern(s)
st git process = subprocess.Popen([command] + args, cwd=cwd, env=env,
Credential Harvesting
No credential harvesting patterns detected
Typosquatting
No typosquatting candidates detected
Registered Email Domain
Email domain looks legitimate: gmx.de>
Suspicious Page Links
All external links appear legitimate
Git Repository History
Repository jmozmoz/cloudmap appears legitimate
Maintainer History
score 4.0
2 maintainer concern(s) found
Author name is missing or very shortAuthor "" appears to have only 1 package on PyPI (new or inactive account)
Known CVE Vulnerabilities
No known vulnerabilities found in OSV database.
AI App Starter Prompt
Use this prompt to build a project with CreateCloudMap
Your task is to create a fully-functional mini-app called 'SkyViewer' that utilizes the Python package 'CreateCloudMap'. This app will allow users to download and display real-time cloud coverage maps for various locations around the world using data from https://clouds.matteason.co.uk/. Here’s a step-by-step guide on how to build this application: 1. **Project Setup**: Start by setting up your Python environment and installing necessary packages including 'CreateCloudMap'. Ensure you have a clean virtual environment for this project. 2. **Core Functionality**: Implement the core functionality of downloading cloud maps using the 'CreateCloudMap' package. Your app should be able to fetch and save cloud maps for specified geographical locations. 3. **User Interface**: Develop a simple command-line interface (CLI) where users can input their location (latitude and longitude) and choose the time they want the cloud map for. Optionally, include a graphical user interface (GUI) using a library like Tkinter for a more user-friendly experience. 4. **Map Display**: Integrate a feature that displays the downloaded cloud map within the app itself. If using a CLI, consider outputting the path to the saved image file. For a GUI, show the map directly within the application window. 5. **Optional Features**: Consider adding optional features such as saving the cloud map to a user-specified directory, displaying historical cloud coverage trends, or even integrating weather data from another API for a richer user experience. 6. **Testing and Documentation**: Thoroughly test your application to ensure it works correctly across different locations and times. Provide clear documentation on how to install and use the app, including any dependencies or setup instructions. 7. **Deployment**: Package your application for distribution. If you've developed a GUI version, make sure it runs smoothly on different operating systems. Remember, the key here is to leverage 'CreateCloudMap' effectively while providing a seamless and informative experience for the end-user.