Malicious dbgpkg package on PyPI poses as a debugging utility but acts as a delivery mechanism for a stealthy backdoor ...

Given a file (or some information about a file), return a set of standardized tags identifying what the file is. identify also has an api for determining what type of license is contained in a file.