sadp-harness

v1.91 suspicious
6.0
Medium Risk

Structured AI Development Protocol — a governance harness for indefinite-horizon AI co-development

🤖 AI Analysis

Final verdict: SUSPICIOUS

The package is flagged as suspicious due to high obfuscation and metadata risks, despite low network and credential risks. The unusual upload time and lack of maintainer history raise concerns about potential malicious intent.

  • High obfuscation risk
  • High metadata risk
Per-check LLM notes
  • Network: No network calls detected, which is normal and not indicative of any risk.
  • Shell: The shell execution patterns detected are likely for running tests using pytest, which is common and expected behavior for development and testing purposes.
  • Obfuscation: The use of __import__ and dynamic attribute access may indicate an attempt to hide or delay the detection of certain behaviors.
  • Credentials: No direct evidence of credential harvesting is present.
  • Metadata: The package is highly suspicious due to its recent upload time, lack of maintainer history, and unverified author information.

🔬 Heuristic Checks

✓ Outbound Network Calls

No suspicious network call patterns found

⚠ Code Obfuscation score 10.0

Found 6 obfuscation pattern(s)

  • import datetime _proj = __import__('sadp.config', fromlist=['default']).default() REPO_ROOT = _proj.root def _read_version() -> s
  • ng import Optional _proj = __import__('sadp.config', fromlist=['default']).default() _REPO = _proj.root # Best-effort: switch stdo
  • tion: pass REPO = __import__('sadp.config', fromlist=['default']).default().root BUILDERS_DIR = REPO / "docs" / "tools" AUD
  • ng import Optional _proj = __import__('sadp.config', fromlist=['default']).default() _REPO = _proj.root _TOOLS_DIR = _REPO / "docs"
  • ): pass _proj = __import__('sadp.config', fromlist=['default']).default() REPO_ROOT = _proj.root HOP_PATH = _proj.hop_fil
  • import Iterable _proj = __import__('sadp.config', fromlist=['default']).default() REPO_ROOT = _proj.root # v3.20.51: route MEM_PA
⚠ Shell / Subprocess Execution score 4.0

Found 2 shell execution pattern(s)

  • """ try: proc = subprocess.run( [sys.executable, "-m", "pytest", "--collect-on
  • """ try: proc = subprocess.run( [sys.executable, "-m", "pytest", "-q", "--tb=n
✓ Credential Harvesting

No credential harvesting patterns detected

✓ Typosquatting

No typosquatting candidates detected

✓ Registered Email Domain

Email domain looks legitimate: icloud.com>

✓ Suspicious Page Links

All external links appear legitimate

⚠ Git Repository History score 3.0

Repository not found (deleted or private)

  • Repository not found (deleted or private)
⚠ Maintainer History score 8.0

4 maintainer concern(s) found

  • Only one version has ever been released — brand new package
  • Package uploaded less than 24 hours ago (2026-06-05T01:28:46.000Z)
  • Author name is missing or very short
  • Author "" appears to have only 1 package on PyPI (new or inactive account)