Package Health Score

52 / 100

security
Security issues found
popularity
Small
maintenance
Inactive
community
Active

This is a malicious package

definitely-not-requests is a malicious package. This instance of the definitely-not-requests package contains malware and attempts to compromise users by adopting dependency confusion techniques. A dependency confusion attack is a type of supply chain attack where malicious software is inserted into the development process by replacing a legitimate software package with a malicious one. Users are exposed if they've installed the definitely-not-requests package from public repositories. Installations of this package from private repositories or CDNs are likely safe to use. This package contains a malicious code. Avoid using all malicious instances of the package.

Popularity

Small

GitHub Stars: 51.39K
Forks: 9.2K
Contributors: 410

Direct Usage Popularity

Based on project statistics from the GitHub repository for the PyPI package definitely-not-requests, we found that it has been starred 51,386 times.

Security

Security issues found

Security and license risk for latest version

Release Date: Mar 8, 2023
Direct Vulnerabilities: 1
C
0
H
0
M
0
L
Indirect Vulnerabilities: 0
C
0
H
0
M
0
L
License Risk: 0
H
1
M
0
L

All security vulnerabilities belong to production dependencies of direct and indirect packages.

License

Apache-2.0

Security Policy

Yes

You can connect your project's repository to Snyk to stay up to date on security alerts and receive automatic fix pull requests.

Keep your project free of vulnerabilities with Snyk

Maintenance

Inactive

Commit Frequency

Open Issues: 200
Open PR: 70
Last Release: 1 year ago
Last Commit: 13 days ago

Further analysis of the maintenance status of definitely-not-requests based on released PyPI versions cadence, the repository activity, and other data points determined that its maintenance is Inactive.

An important project maintenance signal to consider for definitely-not-requests is that it hasn't seen any new versions released to PyPI in the past 12 months, and could be considered as a discontinued project, or that which receives low attention from its maintainers.

As a healthy sign for on-going project maintenance, we found that the GitHub repository had at least 1 pull request or issue interacted with by the community.

Community

Active

Readme: Yes
Contributing.md: Yes
Code of Conduct: Yes
Contributors: 410
Funding: Yes

A good and healthy external contribution signal for definitely-not-requests project, which invites more than one hundred open source maintainers to collaborate on the repository.

Embed Package Health Score Badge

Keep your project healthy

Check your requirements.txt

Ensure all the packages you're using are healthy and well-maintained

Snyk Vulnerability Scanner

Get health score & security insights directly in your IDE

Package

Python Versions Compatibility: >=3.7, <4

Age: 1 year
Latest Release: 1 year ago
Dependencies: 4 Direct / 4 Total
Versions: 2
Maintainers: 2
Wheels: OS Independent

Readme

Requests

Requests is a simple, yet elegant, HTTP library.

>>> import requests
>>> r = requests.get('https://httpbin.org/basic-auth/user/pass', auth=('user', 'pass'))
>>> r.status_code
200
>>> r.headers['content-type']
'application/json; charset=utf8'
>>> r.encoding
'utf-8'
>>> r.text
'{"authenticated": true, ...'
>>> r.json()
{'authenticated': True, ...}

Requests allows you to send HTTP/1.1 requests extremely easily. There’s no need to manually add query strings to your URLs, or to form-encode your PUT & POST data — but nowadays, just use the json method!

Requests is one of the most downloaded Python packages today, pulling in around 30M downloads / week— according to GitHub, Requests is currently depended upon by 1,000,000+ repositories. You may certainly put your trust in this code.

Installing Requests and Supported Versions

Requests is available on PyPI:

$ python -m pip install requests

Requests officially supports Python 3.7+.

Supported Features & Best–Practices

Requests is ready for the demands of building robust and reliable HTTP–speaking applications, for the needs of today.

Keep-Alive & Connection Pooling
International Domains and URLs
Sessions with Cookie Persistence
Browser-style TLS/SSL Verification
Basic & Digest Authentication
Familiar dict–like Cookies
Automatic Content Decompression and Decoding
Multi-part File Uploads
SOCKS Proxy Support
Connection Timeouts
Streaming Downloads
Automatic honoring of .netrc
Chunked HTTP Requests

API Reference and User Guide available on Read the Docs

Cloning the repository

When cloning the Requests repository, you may need to add the -c fetch.fsck.badTimezone=ignore flag to avoid an error about a bad commit (see this issue for more background):

git clone -c fetch.fsck.badTimezone=ignore https://github.com/psf/requests.git

You can also apply this setting to your global Git config:

git config --global fetch.fsck.badTimezone ignore

definitely-not-requests dependencies

certifi charset-normalizer idna urllib3

FAQs

What is definitely-not-requests?

Python HTTP for Humans. Visit Snyk Advisor to see a full health score report for definitely-not-requests, including popularity, security, maintenance & community analysis.

Is definitely-not-requests popular?

The python package definitely-not-requests receives a total of 45 weekly downloads. As such, definitely-not-requests popularity was classified as small. Visit the popularity section on Snyk Advisor to see the full health analysis.

Is definitely-not-requests well maintained?

We found indications that definitely-not-requests is an Inactive project. See the full package health analysis to learn more about the package maintenance status.

Is definitely-not-requests safe to use?

Security issues were found while scanning the latest version of definitely-not-requests, and a total of 1 vulnerabilities were detected. It is highly advised to conduct a security review before using this package. View the full security scan results.

Last updated on 5 May-2024, at 21:09 (UTC).

Build a secure application checklist

Select a recommended open source package

Minimize your risk by selecting secure & well maintained open source packages

DONE

Scan your app for vulnerabilities

Scan your application to find vulnerabilities in your: source code, open source dependencies, containers and configuration files

SCAN NOW

Fix identified vulnerabilities

Easily fix your code by leveraging automatically generated PRs

AUTO FIX

Monitor for new issues

New vulnerabilities are discovered every day. Get notified if your application is affected

MONITOR APP

definitely-not-requests

Python HTTP for Humans. For more information about how to use this package see README

Ensure you're using the healthiest python packages

Package Health Score

Popularity

Direct Usage Popularity

Security

Security and license risk for latest version

Maintenance

Commit Frequency

Community

Embed Package Health Score Badge

Keep your project healthy

Check your requirements.txt

Snyk Vulnerability Scanner

Package

Readme

Requests

Installing Requests and Supported Versions

Supported Features & Best–Practices

API Reference and User Guide available on Read the Docs

Cloning the repository

definitely-not-requests dependencies

FAQs

What is definitely-not-requests?

Is definitely-not-requests popular?

Is definitely-not-requests well maintained?

Is definitely-not-requests safe to use?

Build a secure application checklist

Select a recommended open source package

Scan your app for vulnerabilities

Fix identified vulnerabilities

Monitor for new issues

Package Health Score

Direct Usage Popularity

Security and license risk for latest version

Commit Frequency

Embed Package Health Score Badge

Keep your project healthy

Check your requirements.txt

Snyk Vulnerability Scanner

Readme

Requests

Installing Requests and Supported Versions

Supported Features & Best–Practices

API Reference and User Guide available on Read the Docs

Cloning the repository

definitely-not-requests dependencies

FAQs

What is definitely-not-requests?

Is definitely-not-requests popular?

Is definitely-not-requests well maintained?

Is definitely-not-requests safe to use?

Build a secure application checklist

Select a recommended open source package

Scan your app for vulnerabilities

Source Code

Open Source

Container

Config

Fix identified vulnerabilities

Monitor for new issues