coactra

v0.1.0 suspicious
4.0
Medium Risk

Composable libraries for AI agent fleets — model calls, memory, workspace, jobs, directory, and agent composition in one package.

🤖 AI Analysis

Final verdict: SUSPICIOUS

The package shows low individual risk factors such as network, shell, obfuscation, and credential risks. However, the high metadata risk due to recent creation and a single release suggests caution is warranted.

  • High metadata risk due to recent creation and single release
  • Low individual risk factors across other categories
Per-check LLM notes
  • Network: The use of HTTPX for network requests is common and does not inherently indicate malicious intent.
  • Shell: No shell execution patterns were detected.
  • Obfuscation: No obfuscation patterns detected, suggesting low risk.
  • Credentials: No credential harvesting patterns detected, indicating low risk.
  • Metadata: The recent creation and single release suggest potential risk, but there's no concrete evidence of malice.

🔬 Heuristic Checks

⚠ Outbound Network Calls score 4.5

Found 3 network call pattern(s)

  • httpx"] http_client = httpx.AsyncClient(headers=headers, timeout=self._timeout) client = awa
  • eaders) try: with httpx.Client(timeout=15.0) as client: response = client.post(
  • c try: async with httpx.AsyncClient(timeout=15.0) as client: response = await client
✓ Code Obfuscation

No obfuscation patterns detected

✓ Shell / Subprocess Execution

No shell execution patterns detected

✓ Credential Harvesting

No credential harvesting patterns detected

✓ Typosquatting

No typosquatting candidates detected

✓ Registered Email Domain

No author email provided

✓ Suspicious Page Links

All external links appear legitimate

⚠ Git Repository History score 2.5

Git history flags: Repository created very recently: 0 day(s) ago (2026-06-04T19:30:57Z)

  • Repository created very recently: 0 day(s) ago (2026-06-04T19:30:57Z)
⚠ Maintainer History score 6.0

3 maintainer concern(s) found

  • Only one version has ever been released — brand new package
  • Package uploaded less than 24 hours ago (2026-06-05T04:47:38.000Z)
  • Author "coactra authors" appears to have only 1 package on PyPI (new or inactive account)

💬 Discussion Feed

Leave a comment

No discussion yet. Be the first to share your thoughts!