🤖 AI Analysis

Final verdict: SUSPICIOUS

The package has several low-risk indicators but the missing repository and incomplete maintainer profile raise concerns about its origin and maintenance.

metadata risk due to missing repository
incomplete maintainer profile

Per-check LLM notes

Network: No network calls were detected, which is normal and does not indicate any risk.
Shell: Executing a python command to import a module within the package suggests internal checks but lacks context for malicious intent; however, unusual imports or commands could indicate potential risks.
Obfuscation: No obfuscation patterns detected, indicating low risk.
Credentials: No credential harvesting patterns detected, indicating low risk.
Metadata: The repository not being found and the maintainer having an incomplete profile raises suspicion.

🔬 Heuristic Checks

✓ Outbound Network Calls

No suspicious network call patterns found

✓ Code Obfuscation

No obfuscation patterns detected

⚠ Shell / Subprocess Execution score 2.0

Found 1 shell execution pattern(s)

_lib_dir result = subprocess.run( ["python3", "-c", "import TRADING_HOURS"],

✓ Credential Harvesting

No credential harvesting patterns detected

✓ Typosquatting

No typosquatting candidates detected

✓ Registered Email Domain

Email domain looks legitimate: null.net>

✓ Suspicious Page Links

All external links appear legitimate

⚠ Git Repository History score 3.0

Repository not found (deleted or private)

Repository not found (deleted or private)

⚠ Maintainer History score 6.0

3 maintainer concern(s) found

Only one version has ever been released — brand new package
Author name is missing or very short
Author "" appears to have only 1 package on PyPI (new or inactive account)

✓ Known CVE Vulnerabilities

No known vulnerabilities found in OSV database.

💡 AI App Starter Prompt

Use this prompt to build a project with MARKET-TRADING-HOURS

Develop a financial tool named 'MarketGuard' using Python that helps traders and investors determine if they can place orders based on market trading hours. This application should include the following features:

1. User Input: Allow users to input a specific date and time (in UTC or local timezone).
2. Market Selection: Provide options for selecting different global markets (e.g., NASDAQ, NYSE, London Stock Exchange, etc.).
3. Trading Day Check: Utilize the MARKET-TRADING-HOURS package to check if the specified date is a valid trading day for the selected market.
4. Trading Hours Verification: If it's a trading day, verify if the specified time falls within the market's trading hours.
5. Notification System: Implement a notification system that alerts users if their chosen time is outside of trading hours or if the market is closed on that day.
6. Historical Data Lookup: Offer an additional feature where users can look up past trading days and hours for a selected market.
7. User Interface: Develop a simple and intuitive user interface (command-line or web-based) for easy interaction.
8. Documentation: Include comprehensive documentation explaining how to use the tool, including examples of valid inputs and outputs.

The MARKET-TRADING-HOURS package will be the backbone of your application, enabling you to accurately determine trading days and hours for various markets. Your goal is to create a robust, user-friendly tool that assists traders in making informed decisions about when to trade.