This tool gives developers, researchers and companies the ability to analyze software packages of different programming languages that are being or will be used in their codes, providing information that allows them to know in advance if this library complies with processes. secure development, if currently supported, possible backdoors (malicious embedded code), typosquatting analysis, the history of versions and reported vulnerabilities (CVEs) of the package.
Clone this repository with:
git clone https://github.com/ElevenPaths/packagedna
PackageDNA uses python-magic which is a simple wrapper around the libmagic C library, and that MUST be installed as well:
$ sudo apt-get install libmagic1
You will need DLLs for libmagic. @julian-r has uploaded a version of this project that includes binaries
to PyPI: https://pypi.python.org/pypi/python-magic-bin/0.4.14
Other sources of the libraries in the past have been File for Windows.
You will need to copy the file magic out of [binary-zip]\share\misc, and pass its location to Magic(magic_file=...).
If you are using a 64-bit build of python, you will need 64-bit libmagic binaries which can be found here: https://github.com/pidydx/libmagicwin64.
Newer version can be found here: https://github.com/nscaife/file-windows.
When using Homebrew: brew install libmagic
When using macports: port install file
More details: https://pypi.org/project/python-magic/
Run setup for installation:
python3 setup.py install --user
PackageDNA uses external modules for its analysis that you should install previously:
Virus Total API
After installation you should configure the external modules, in the option  Configuration of the main menu.
<div class="highlight highlight-source-shell position-relative" data-snippet-clipboard-copy-content=" VirusTotal API Key: Your API KEY  AppInspector absolute path: /Local/Path/MSAppInpsectorInstallation  Libraries.io API Key: Your API KEY  Github Token: Your Token [B] Back [X] Exit “>
 VirusTotal API Key: Your API KEY
 AppInspector absolute path: /Local/Path/MSAppInpsectorInstallation
 Libraries.io API Key: Your API KEY
 Github Token: Your Token