AI Analysis
The package shows unusual metadata risks with a newly created maintainer account, rapid commit activity, and a suspicious non-HTTPS link, raising concerns about potential supply-chain compromise.
- newly created maintainer account
- rapid commit activity
- suspicious non-HTTPS link
Per-check LLM notes
- Network: No network calls detected, which is normal unless the package requires internet access for its functionality.
- Shell: No shell execution patterns detected, indicating no immediate signs of malicious activities like command injection.
- Obfuscation: No obfuscation patterns detected, indicating low risk of malicious obfuscation.
- Credentials: No credential harvesting patterns detected, indicating low risk of secret theft.
- Metadata: The package exhibits several red flags including a suspicious non-HTTPS link, a newly created maintainer account, and rapid commit activity.
Package Quality Overall: Low (4.8/10)
Partial test coverage signals detected
Test runner config found: pyproject.toml
Some documentation present
Documentation URL: "Documentation" -> https://github.com/ip174/agentrr#readmeDetailed PyPI description (4807 chars)
No contributing guide or governance files found
No CONTRIBUTING, CODE_OF_CONDUCT, or governance files found
Partial type annotation coverage
Classifier: Typing :: Typed96 type-annotated function signatures detected in source
Single-author or unverifiable project
1 unique contributor(s) across 8 commits in ip174/agentrrSingle author with few commits — possibly a personal or throwaway project
Heuristic Checks
No suspicious network call patterns found
No obfuscation patterns detected
No shell execution patterns detected
No credential harvesting patterns detected
No typosquatting candidates detected
No author email provided
Found 1 suspicious link(s) on the package page
Non-HTTPS external link: http://127.0.0.1:8765
Git history flags: Repository has zero stars and zero forks
Repository has zero stars and zero forksAll 8 commits happened within 24 hours
2 maintainer concern(s) found
Author name is missing or very shortAuthor "" appears to have only 1 package on PyPI (new or inactive account)
No known vulnerabilities found in OSV database.
AI App Starter Prompt
Build a simple Python application using the agentrr package to demonstrate its core features.
💬 Discussion Feed
No discussion yet. Be the first to share your thoughts!
Report Abuse / Security Issue