{
  "ml": {
    "v": "7",
    "eng": "2.2.0-beta.1",
    "lvl": -1,
    "conf": 0,
    "mods": [
      {
        "cls": 0,
        "raw": 0.02179426,
        "rte": "az",
        "prob": 0.02179426
      }
    ],
    "prob": 0.02179426,
    "skip": [
      {
        "rte": "az/tar",
        "why": "unavailable"
      },
      {
        "rte": "az/tar",
        "why": "unavailable"
      }
    ],
    "files": [
      {
        "id": 0,
        "lvl": -1,
        "conf": 0,
        "prob": 0.021794259548187256,
        "type": "tar.gz"
      },
      {
        "id": 1,
        "lvl": -1,
        "conf": 0,
        "prob": 0.0013043880462646484,
        "type": "shell"
      },
      {
        "id": 2,
        "lvl": -1,
        "conf": 0,
        "prob": 0.00003331899642944336,
        "type": "srcinfo"
      }
    ],
    "version": "v18.18",
    "analyzed_at": "2026-07-03T20:27:51Z"
  },
  "path": "thurbox-0.168.1-1.src.tar.gz",
  "raw": {
    "files": [
      {
        "id": 0,
        "ctx": [
          {
            "b": "abZy80000000zQ\u0026}!$jE5ydGbuQqg7(\u0026reV}6wa[HOZ3=8GRa/AK(UCw(6aK6vA\u003eR\u003cr\u0026ZR",
            "n": [
              {
                "c": 2,
                "d": "Archive parser reported errors",
                "i": "metadata/file/metrics::archive-parse-error",
                "o": 0,
                "z": 24,
                "cf": 0.8999999761581421
              }
            ],
            "ln": 0
          }
        ],
        "mol": "H₂(CmPo₂)",
        "sha": "027fe7d3fbc1529464ceaea7a52251b592fa5f42a3078104d04f81dce469c9f3",
        "path": "thurbox-0.168.1-1.src.tar.gz",
        "risk": 2,
        "size": 1617,
        "type": "tar.gz",
        "facts": {
          "metrics": {
            "file": {
              "size": 1617.0,
              "entropy": 7.87,
              "size_bytes": 1617.0
            },
            "parse": {
              "error_count": 1.0
            },
            "binary": {
              "overall_entropy": 7.87,
              "peak_region_bytes": 1617.0,
              "peak_region_entropy": 7.8
            }
          }
        },
        "traits": [
          {
            "id": "micro-behaviors/process/create/hcom::readelf-invocation",
            "conf": 0.800000011920929,
            "crit": 3,
            "desc": "Invokes readelf",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "micro-behaviors/communications/url/external/github::github-archive-ref-download",
            "atk": "T1105",
            "conf": 0.8399999737739563,
            "crit": 3,
            "desc": "GitHub archive refs download URL",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "micro-behaviors/process/create/shell/spawn::shell-symbols",
            "conf": 0.8999999761581421,
            "crit": 3,
            "desc": "Shell execution symbols",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "micro-behaviors/process/create/shell/multiplexer::tmux-command-literal",
            "conf": 0.8500000238418579,
            "crit": 1,
            "desc": "tmux command token",
            "from": [
              {
                "file": 1
              }
            ]
          }
        ]
      },
      {
        "ctx": [
          {
            "b": "boPY?x(n33x(mH5iV}acrcq7Yjz!Itx\u003e7%\u003cBAIQ?Ab](sz/fA2x(2ziz/4V",
            "n": [
              {
                "c": 2,
                "d": "Arch PKGBUILD package recipe basename",
                "i": "metadata/file/string/identity::pkgbuild-basename",
                "o": 0,
                "z": 8,
                "cf": 1.0
              }
            ],
            "ln": 1,
            "addr": 0
          },
          {
            "b": "Abf97vqPNsBzb/qvScF",
            "ln": 2,
            "addr": 48
          },
          {
            "b": "Abf9fwPx{/e?]mye\u00269",
            "ln": 3,
            "addr": 64
          },
          {
            "b": "Abf9bwO:H:",
            "ln": 4,
            "addr": 79
          },
          {
            "b": "Abf8%wPIuAb2?MlazbLjaA8pgxK#mbA::67zF78eB.(elAbo8dv@C)(zF7LfxjU$5avw*]aAIanB7]MgB0bgmaAg[jB7]YqwO#PjBzVeBaAg+bwO=Ai",
            "n": [
              {
                "c": 3,
                "d": "Shell execution symbols",
                "i": "micro-behaviors/process/create/shell/spawn::shell-symbols",
                "o": 168,
                "z": 4,
                "cf": 0.8999999761581421
              }
            ],
            "ln": 5,
            "addr": 88
          },
          {
            "b": "vrb\u003c\u003ejT.X5i5Ub4g::y[vpsg^xF}W{df",
            "ln": 6,
            "addr": 181
          },
          {
            "b": "B-IpYb4#7uAc15[fk20vxMW=pv@Diqra{z{vR6a*fly(IA:\u0026%ia]",
            "n": [
              {
                "c": 2,
                "d": "HTTPS protocol prefix",
                "i": "micro-behaviors/communications/http/message::https-prefix",
                "o": 212,
                "z": 8,
                "cf": 0.8999999761581421
              }
            ],
            "ln": 7,
            "addr": 207
          },
          {
            "b": "y?Wx\u003czGxwLc)}.Xr3%9",
            "ln": 8,
            "addr": 249
          },
          {
            "b": "boR8BB:bMLx(\u003eFaA+cwlwPq\u003cbA+e=7vrrSjB-8qnzdLsxB8=2gBy^ary?Wu*ayPq4aARpdaAIj8A+e=7y?Wv0vrc6[A@",
            "ln": 9,
            "addr": 265
          },
          {
            "b": "boR8wwGUC@zEENhaz++fyJyQDC4CYdw[+*!aA}KwxDRtbvpS}=w\u0026?bFv}d9bx\u003c#cax(+zhze:r9v}*43C{4fpBzk/dx\u003ep*7e=",
            "n": [
              {
                "c": 3,
                "d": "Invokes readelf",
                "i": "micro-behaviors/process/create/hcom::readelf-invocation",
                "o": 373,
                "z": 7,
                "cf": 0.800000011920929
              }
            ],
            "ln": 10,
            "addr": 339
          },
          {
            "b": "boP%0wGUG0x(EK1vrb)3vQS+ZwO#33c$dd9z^^V%diJCBvpTB4stqJ-s7cw\u003cvqYP#y?Wv1az+Fjx(55Caz#atazth7wftz]Ac0S",
            "n": [
              {
                "c": 2,
                "d": "Clipboard handling context",
                "i": "objectives/collection/clipboard/capture::clipboard-context",
                "o": 423,
                "z": 9,
                "cf": 0.699999988079071
              }
            ],
            "ln": 11,
            "addr": 417
          },
          {
            "b": "wmYZ\u003ezE^/Kc)%aNB:bnRcUEdncM\u003c^TACPuhwHwPFxkzo\u003ev\u003c-Y",
            "ln": 12,
            "addr": 497
          },
          {
            "b": "zddi\u003ewmYZ\u003ezE^/Kc)@IkA+xqrdf",
            "ln": 13,
            "addr": 537
          },
          {
            "b": "z/x/ewPhi#wof)ZcU3$3B.25nv@C)?iV{!avrD9(avy6TwGUz]wO#PjlRH60",
            "n": [
              {
                "c": 1,
                "d": "\"claude\" identity",
                "i": "objectives/command-and-control/remote-command/llm/action::llm-agent-identity-claude",
                "o": 585,
                "z": 11,
                "cf": 0.800000011920929
              }
            ],
            "ln": 14,
            "addr": 559
          },
          {
            "b": "arR^HarR^HarR^HcT*.1wPxwjxKM0zayO${wPw]4xjU$5avw*]cJ",
            "ln": 15,
            "addr": 608
          },
          {
            "b": "arR^HarR^HarR^HcVr%nzEWP}wI4w9zAn[UAaJ]%z!9A4vp%d?BrA}AnHC}",
            "ln": 16,
            "addr": 650
          },
          {
            "b": "Ab](ux\u003eg^@jT.X1xMXu8z*iSU",
            "ln": 17,
            "addr": 698
          },
          {
            "b": "v@Dl%y?Wy3B3g{0Bzb/qvScGyvRGZcdf",
            "ln": 18,
            "addr": 719
          },
          {
            "b": "B8Mhwv}v!Ka%.byxkRc{wI2fDyId*4AXqDxAXq0JiYZ}@Bz#pZfe3%LBzb/ae[n*pfh#RcA:\u0026P\u003ezzc9BB-H@fCRrGCv}YO1wIn7nw]/REvp%TmB%I3xxlE\u003cbe{7Jxe[YFOdf",
            "n": [
              {
                "c": 3,
                "d": "GitHub archive refs download URL",
                "i": "micro-behaviors/communications/url/external/github::github-archive-ref-download",
                "o": 787,
                "z": 46,
                "cf": 0.8399999737739563
              }
            ],
            "ln": 19,
            "addr": 745
          },
          {
            "b": "B7!#qh8YI#zf4\u0026*cPA?ov}EDaf/rF@fFCBvf\u003es)awh32Of\u003es:7gb?fEwJ8OTvpp@GiB\u003ecVixo5MggSs6iaB^Ohd!W4w\u0026BrQfEFp",
            "ln": 20,
            "addr": 851
          },
          {
            "b": "",
            "ln": 21,
            "addr": 931
          },
          {
            "b": "arR^HwQ5fjA=-B4rz#\u003c%p*Wf$pFsbDk$K*mB97\u00261y?i",
            "ln": 24,
            "addr": 970
          },
          {
            "b": "arR^HboPD!ByO#bCwhejaARpdaAhvnB98blwGU?#zFrY]B95KCzY*R-y\u0026r*0wN(]$B0bKjBzk/dx\u003ep*c",
            "ln": 25,
            "addr": 1005
          },
          {
            "b": "arR^Hv{%y\u003czY\u0026U6ByO#beIg^Sv@2T^at2f!vrc0(Brz+Mc#%DKByMBBC2/-kaAIa8at4ENcVZ}Oz/Z1Yatkx!cN*k",
            "n": [
              {
                "c": 2,
                "d": "Uses sed for text processing",
                "i": "well-known/tool/development/cli::sed-processing",
                "o": 1119,
                "z": 3,
                "cf": 1.0
              }
            ],
            "ln": 26,
            "addr": 1070
          },
          {
            "b": "arR^HboPV]zFHwpxK@rcD2[7sz6h+OoLFPWazC.mBy!(\u003eaA7\u003cmC4CM4z/PMfxcp]giV{.ev}V#}x(^^5B-H]6wPE",
            "ln": 27,
            "addr": 1142
          },
          {
            "b": "arR^HboQDrzE^M{wftY5vSC)$x\u003equpayPd#aARpdaA?slwn=H1wft@nvrui[az++3ayP8czY\u0026U2x(4\u0026kBz\u0026prx(mX",
            "ln": 28,
            "addr": 1213
          },
          {
            "b": "arR^HwQ5fjA=-A\u003ek#HiGuSor?m[3x:l}HotByxi5wPN",
            "ln": 38,
            "addr": 1631
          },
          {
            "b": "arR^HwQ5fjA=-A$nKuuMoI5hLgHB6-q^SK6mpe\u003e:m{!RVpdv/BjUV",
            "ln": 39,
            "addr": 1666
          },
          {
            "b": "arR^HboQDrx(4rjA=SvzwNPa\u003caARpdaAz44y-)[jA=U@kzxJLiz/3RsxLzJgwO#VlC42zMaA}KwxM53nazC{uBzbj",
            "n": [
              {
                "c": 3,
                "d": "Environment dump command",
                "i": "objectives/supply-chain/install-hook/build/autotools::env-dump-cmd",
                "o": 1756,
                "z": 5,
                "cf": 0.6000000238418579
              }
            ],
            "ln": 40,
            "addr": 1709
          },
          {
            "b": "arR^HboQDfzEENhaAz4jz/P@vattA4e?!\u003e/wP/gAlT+1Fz.ucIzepteB0a)lB97\u0026jx\u003e5n@wP/hkvrcc{AW-Q",
            "ln": 41,
            "addr": 1781
          },
          {
            "b": "arR^HwQ5fjA=-B6nl5LOpGQ$4mnccoq:\u003e4]mn^5QpFK4%B%I3xxlE\u003cba]",
            "ln": 42,
            "addr": 1849
          }
        ],
        "depth": 1,
        "facts": {
          "imp": [
            [
              "",
              "cd"
            ],
            [
              "",
              "cd"
            ],
            [
              "",
              "cargo"
            ],
            [
              "",
              "cargo"
            ],
            [
              "",
              "rustc"
            ],
            [
              "",
              "rustc"
            ],
            [
              "",
              "sed"
            ],
            [
              "",
              "sed"
            ],
            [
              "",
              "sed"
            ],
            [
              "",
              "sed"
            ],
            [
              "",
              "cd"
            ],
            [
              "",
              "cd"
            ],
            [
              "",
              "cargo"
            ],
            [
              "",
              "cargo"
            ],
            [
              "",
              "cd"
            ],
            [
              "",
              "cd"
            ],
            [
              "",
              "install"
            ],
            [
              "",
              "install"
            ],
            [
              "",
              "install"
            ],
            [
              "",
              "install"
            ],
            [
              "",
              "install"
            ],
            [
              "",
              "install"
            ]
          ],
          "tgt": [
            "cargo",
            "cd",
            "install",
            "rustc",
            "sed"
          ],
          "metrics": {
            "ast": {
              "max_depth": 9.0,
              "bind_count": 19.0,
              "call_count": 11.0,
              "node_count": 303.0,
              "identifier_count": 49.0,
              "string_literal_count": 26.0,
              "array_literal_max_length": 4.0
            },
            "file": {
              "size": 2265.0,
              "entropy": 5.26,
              "size_bytes": 2265.0
            },
            "text": {
              "digit_ratio": 0.05,
              "space_count": 307.0,
              "total_lines": 53.0,
              "char_entropy": 5.26,
              "unique_chars": 85.0,
              "string_density": 0.49,
              "avg_line_length": 41.74,
              "max_line_length": 105.0,
              "empty_line_ratio": 0.06,
              "last_line_length": 1.0,
              "long_token_count": 1.0,
              "whitespace_ratio": 0.16,
              "most_common_ratio": 0.07,
              "identifier_density": 1.62,
              "line_length_stddev": 27.61,
              "encoded_string_ratio": 0.04,
              "normalized_string_count": 3.57,
              "repeated_char_sequences": 2.0,
              "suspicious_string_ratio": 0.04,
              "most_common_char_is_null": 0.0,
              "max_inline_whitespace_run": 1.0,
              "most_common_char_codepoint": 101.0,
              "normalized_unique_identifiers": 8.55
            },
            "binds": {
              "count": 19.0
            },
            "calls": {
              "count": 11.0
            },
            "binary": {
              "overall_entropy": 5.26,
              "peak_region_bytes": 2265.0,
              "peak_region_entropy": 5.26
            },
            "source": {
              "function_count": 3.0
            },
            "strings": {
              "total": 26.0,
              "url_count": 1.0,
              "avg_length": 25.27,
              "max_length": 94.0,
              "path_count": 2.0,
              "avg_entropy": 3.24,
              "hex_strings": 1.0,
              "total_bytes": 657.0,
              "entropy_stddev": 0.86,
              "shell_command_strings": 1.0
            },
            "comments": {
              "chars": 777.0,
              "lines": 12.0,
              "total": 12.0,
              "to_code_ratio": 0.29
            },
            "functions": {
              "count": 3.0,
              "avg_params": 7.33,
              "max_params": 10.0,
              "length_stddev": 1.63,
              "avg_name_length": 6.33,
              "avg_length_lines": 10.0,
              "max_length_lines": 12.0,
              "min_length_lines": 8.0,
              "many_params_count": 2.0,
              "avg_param_name_length": 32.82,
              "density_per_100_lines": 5.66,
              "code_in_functions_ratio": 0.57
            },
            "identifiers": {
              "count": 49.0,
              "total": 86.0,
              "avg_length": 8.37,
              "max_length": 29.0,
              "min_length": 2.0,
              "avg_entropy": 2.52,
              "reuse_ratio": 0.57,
              "unique_count": 49.0,
              "length_stddev": 5.82,
              "has_digit_ratio": 0.1,
              "high_entropy_count": 4.0,
              "high_entropy_ratio": 0.08,
              "all_lowercase_ratio": 0.53,
              "all_uppercase_ratio": 0.08,
              "numeric_suffix_count": 2.0
            }
          }
        },
        "id": 1,
        "mol": "H₂(CmPo₂)",
        "path": "thurbox-0.168.1-1.src.tar.gz!!thurbox/PKGBUILD",
        "risk": 2,
        "sha": "ad55a6fb8d956117d182ef482ef09dacc0b9587558e8b160cab8bc6e2d5d0165",
        "size": 2265,
        "traits": [
          {
            "id": "micro-behaviors/process/create/hcom::readelf-invocation",
            "conf": 0.800000011920929,
            "crit": 3,
            "desc": "Invokes readelf",
            "spans": [
              [
                373,
                7
              ]
            ]
          },
          {
            "id": "micro-behaviors/process/create/shell/multiplexer::tmux-command-literal",
            "conf": 0.8500000238418579,
            "crit": 1,
            "desc": "tmux command token",
            "spans": [
              [
                168,
                4
              ]
            ]
          },
          {
            "id": "micro-behaviors/communications/url/external/github::github-archive-ref-download",
            "atk": "T1105",
            "conf": 0.8399999737739563,
            "crit": 3,
            "desc": "GitHub archive refs download URL",
            "spans": [
              [
                787,
                46
              ]
            ]
          },
          {
            "id": "micro-behaviors/process/create/shell/spawn::shell-symbols",
            "conf": 0.8999999761581421,
            "crit": 3,
            "desc": "Shell execution symbols",
            "spans": [
              [
                168,
                4
              ]
            ]
          }
        ],
        "type": "shell"
      },
      {
        "depth": 1,
        "facts": {
          "metrics": {
            "file": {
              "size": 703.0,
              "entropy": 5.07,
              "size_bytes": 703.0
            },
            "binary": {
              "overall_entropy": 5.07,
              "peak_region_bytes": 703.0,
              "peak_region_entropy": 5.07
            }
          }
        },
        "id": 2,
        "path": "thurbox-0.168.1-1.src.tar.gz!!thurbox/.SRCINFO",
        "refs": [
          {
            "to": "pkg:alpm/arch/tmux",
            "off": 100,
            "kind": "dependency"
          },
          {
            "to": "pkg:alpm/arch/git",
            "off": 157,
            "kind": "dependency"
          },
          {
            "to": "pkg:alpm/arch/sqlite",
            "off": 294,
            "kind": "dependency"
          },
          {
            "to": "pkg:alpm/arch/glibc",
            "off": 312,
            "kind": "dependency"
          },
          {
            "to": "pkg:alpm/arch/cargo",
            "off": 246,
            "kind": "dependency"
          },
          {
            "to": "pkg:github/thurbeen/thurbox",
            "off": 511,
            "kind": "dependency"
          }
        ],
        "sha": "0b25bdbe07f053a7509cdbeec6ead7ceec94604e14773d934a805653af47860d",
        "size": 703,
        "type": "srcinfo"
      }
    ],
    "rev": "868bd",
    "v": "8"
  }
}