{
  "ml": {
    "v": "7",
    "id": 4977,
    "lvl": -1,
    "conf": 0,
    "prob": 0.000011354684829711914,
    "type": "javascript",
    "version": "v18.18",
    "analyzed_at": "2026-09-15T13:32:12Z"
  },
  "path": "injectpromise@1.0.0",
  "raw": {
    "rev": "e86a6",
    "files": [
      {
        "id": 7088,
        "ctx": [
          {
            "b": "abZy80000002a:2zem(W5BKihIKKZG4mb0/cwdr*o4KO-6VKDyT+iUAb#FqFO*nH$ci5yRew1FSWVp2(Gb*N=[1a)]wCXx$Qu\u003cz3\u0026?g4?\u003cu=IAB\u003cDv+/)4ACzU2}e4#mx%i#R+H\u0026DQ\u003e}Ol.6[kd*m",
            "ln": 0
          }
        ],
        "mol": "K(Mc)Md(Pa₄)",
        "pid": 308,
        "rel": "fetched",
        "sha": "00dd00968a1f9e371ee35c169596d0a372e3c5d2a97fc445723b73e845c61151",
        "via": "https://registry.npmjs.org/injectpromise/-/injectpromise-1.0.0.tgz",
        "path": "pkg:npm/injectpromise@1.0.0",
        "risk": 7,
        "size": 746,
        "type": "npm",
        "depth": 2,
        "facts": {
          "metrics": {
            "file": {
              "size": 746,
              "entropy": 7.68
            },
            "parse": {
              "error_count": 1
            },
            "binary": {
              "peak_region_bytes": 746,
              "peak_region_entropy": 7.68
            }
          }
        },
        "ident": {
          "name": {
            "value": "injectpromise",
            "source": "npm.name",
            "verified": false
          },
          "trust": "unsigned",
          "version": {
            "value": "1.0.0",
            "source": "npm.version",
            "verified": false
          },
          "identifier": {
            "value": "injectpromise",
            "source": "npm.name",
            "verified": false
          }
        },
        "traits": [
          {
            "id": "metadata/package/scripts/develop::npm-init-default-test",
            "conf": 0.95,
            "crit": 3,
            "desc": "Default npm-init placeholder test script"
          },
          {
            "id": "metadata/package/versioning/sentinel::npm-version-exactly-1-0-0",
            "atk": "T1195.002",
            "conf": 0.6,
            "crit": 3,
            "desc": "npm package version is exactly 1.0.0"
          },
          {
            "id": "metadata/package/dependencies/manifest::npm-no-dependencies-field",
            "conf": 0.9,
            "crit": 2,
            "desc": "npm manifest omits dependencies field"
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-7",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"this\"",
            "from": [
              {
                "file": 3
              }
            ]
          },
          {
            "id": "metadata/package/name/convention::npm-has-name",
            "conf": 1.0,
            "crit": 2,
            "desc": "npm manifest declares a package name"
          },
          {
            "id": "metadata/package/entrypoint::pkg-main-field",
            "conf": 0.6,
            "crit": 2,
            "desc": "package.json declares a main entry point"
          },
          {
            "id": "metadata/lang/source::js-ts-source-basename",
            "conf": 0.95,
            "crit": 2,
            "desc": "JavaScript or TypeScript source filename",
            "from": [
              {
                "file": 2
              }
            ]
          },
          {
            "id": "metadata/package/documentation/source::readme-markdown-basename",
            "conf": 0.99,
            "crit": 2,
            "desc": "README Markdown basename",
            "from": [
              {
                "file": 3
              }
            ]
          },
          {
            "id": "metadata/package/empty::npm-no-keywords",
            "conf": 0.5,
            "crit": 2,
            "desc": "package.json has no keywords"
          },
          {
            "id": "metadata/package/entrypoint::main-root-javascript-entry",
            "conf": 0.9,
            "crit": 2,
            "desc": "Root JavaScript main entrypoint"
          },
          {
            "id": "metadata/package/versioning/scheme::npm-has-version",
            "conf": 1.0,
            "crit": 2,
            "desc": "package.json defines a package version"
          },
          {
            "id": "metadata/package/versioning/scheme::mature-version",
            "conf": 0.7,
            "crit": 2,
            "desc": "Major version is 1 or higher"
          },
          {
            "id": "supply-chain/missing-author",
            "conf": 0.5,
            "crit": 3,
            "desc": "Package has empty or missing author field"
          },
          {
            "id": "metadata/package/freeform::pkg-skeleton-small",
            "conf": 0.7,
            "crit": 3,
            "desc": "Tiny package.json manifest",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "metadata/package/files/included::npm-publish-root-manifest",
            "conf": 0.95,
            "crit": 2,
            "desc": "Manifest sits at npm publish root",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "objectives/supply-chain/install-hook/package/manifest::desc-simple",
            "conf": 0.5,
            "crit": 3,
            "desc": "Description contains \"simple\""
          },
          {
            "id": "metadata/package/files/included::package-json-basename",
            "conf": 0.95,
            "crit": 3,
            "desc": "Filename is package.json",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "metadata/package/scripts/develop::has-test-script",
            "conf": 1.0,
            "crit": 2,
            "desc": "package.json declares a test script"
          },
          {
            "id": "metadata/package/documentation/package-metadata::npm-name-matches-readme-heading",
            "conf": 0.9,
            "crit": 3,
            "desc": "README heading matches the npm package name"
          },
          {
            "id": "well-known/malware/supply-chain/eth-bridge::malicious-release-version",
            "atk": "T1195.002",
            "conf": 1.0,
            "crit": 3,
            "desc": "Malware-listed eth-bridge release version"
          }
        ]
      }
    ]
  }
}