{
  "ml": {
    "v": "7",
    "id": 11222,
    "lvl": -1,
    "conf": 0,
    "prob": 0.0000076095261647424195,
    "type": "javascript",
    "version": "v18.18",
    "analyzed_at": "2026-09-29T06:50:51Z"
  },
  "path": "free-email-domains@1.11.4",
  "raw": {
    "rev": "c1ea9",
    "files": [
      {
        "id": 13710,
        "ctx": [
          {
            "b": "abZy8000000@}S2+AzDV^Jm4Ru=r\u0026rCQu(B(S?\u003eEU4gN8aw5pk0XtrpqciiSn*l6+(C6#J@1kJt{1OrtlLdfNDbY\u0026:G9Iv/{b%le/wDa9%i7B2O6yhp{#:O-}AacB}pCQ\u003c*hal@!8{eCZC:\u003cl)R@3=uZ(Mzc\u0026A7[aPc2Y}cRH\u0026=1uN[@qV!^@pKxeI!/%okbv#1%nbQcPkjPdu\u0026K#/\u003e7E%U)F)es%n1%f%nR%nkgWF)%b35\u003eYv(JYZPvE:Ck)6y%9@5C%mY[1}rbIgrY}qir\u003e!Qq%iD\u003eFU?2OYO=",
            "ln": 0
          }
        ],
        "mol": "O₂(S₅Xe)H₅(Cm₆Db₄F₂Po₂U)Md₂(InPa₁₀)",
        "pid": 2084,
        "rel": "fetched",
        "sha": "0ad0c41f6d6a15bb7978f1a329e888cc4c4caf62e7dab58318c2d3bee4fad45f",
        "via": "https://registry.npmjs.org/free-email-domains/-/free-email-domains-1.11.4.tgz",
        "path": "pkg:npm/free-email-domains@1.11.4",
        "refs": [
          {
            "to": "pkg:github/kikobeats/free-email-domains",
            "off": 0,
            "kind": "repository"
          }
        ],
        "risk": 58,
        "size": 79490,
        "type": "npm",
        "depth": 2,
        "facts": {
          "metrics": {
            "file": {
              "size": 79490,
              "entropy": 8
            },
            "parse": {
              "error_count": 1
            },
            "binary": {
              "peak_region_bytes": 79490,
              "peak_region_entropy": 7.83
            },
            "consistency": {
              "name_repo_mismatch": 0
            }
          }
        },
        "ident": {
          "name": {
            "value": "free-email-domains",
            "source": "npm.name",
            "verified": false
          },
          "urls": [
            {
              "url": "git+https://github.com/kikobeats/free-email-domains.git",
              "kind": "repository",
              "source": "npm.repository.url"
            },
            {
              "url": "https://github.com/Kikobeats/free-email-domains",
              "kind": "homepage",
              "source": "npm.homepage"
            }
          ],
          "trust": "unsigned",
          "emails": [
            "josefrancisco.verdu@gmail.com"
          ],
          "authors": [
            {
              "url": "https://kikobeats.com",
              "name": "Kiko Beats",
              "role": "author",
              "email": "josefrancisco.verdu@gmail.com",
              "source": "npm.author"
            }
          ],
          "version": {
            "value": "1.11.4",
            "source": "npm.version",
            "verified": false
          },
          "identifier": {
            "value": "free-email-domains",
            "source": "npm.name",
            "verified": false
          }
        },
        "traits": [
          {
            "id": "metadata/package/repository::has-repository-url",
            "conf": 0.85,
            "crit": 2,
            "desc": "package.json declares a repository URL"
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-6",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"with\"",
            "from": [
              {
                "file": 4
              }
            ]
          },
          {
            "id": "micro-behaviors/communications/email/address::google-consumer-email-domain-suffix",
            "conf": 0.55,
            "crit": 3,
            "desc": "Gmail consumer email domain suffix",
            "from": [
              {
                "file": 4
              }
            ]
          },
          {
            "id": "micro-behaviors/communications/http/download/write::script-fetches-and-writes-remote-content",
            "atk": "T1105",
            "conf": 0.94,
            "crit": 3,
            "desc": "JavaScript saves fetched remote content",
            "from": [
              {
                "file": 6
              }
            ],
            "uses": [
              6,
              32,
              42
            ]
          },
          {
            "id": "metadata/package/scripts/build::has-release-scripts-1",
            "conf": 1.0,
            "crit": 3,
            "desc": "Package has release script"
          },
          {
            "id": "metadata/package/homepage::homepage-git-host",
            "conf": 0.9,
            "crit": 3,
            "desc": "Homepage points to major Git host"
          },
          {
            "id": "micro-behaviors/communications/http/client/response-body::fetch-response-body-read",
            "conf": 0.9,
            "crit": 3,
            "desc": "JavaScript fetch reads response body",
            "from": [
              {
                "file": 6
              }
            ]
          },
          {
            "id": "metadata/package/files/included::postinstall-js-basename",
            "conf": 0.9,
            "crit": 3,
            "desc": "Filename is postinstall.js/cjs/mjs",
            "from": [
              {
                "file": 6
              }
            ]
          },
          {
            "id": "metadata/package/testing/presence/harness::test-or-declaration-file",
            "conf": 0.85,
            "crit": 1,
            "desc": "File is a test or type-declaration source file",
            "from": [
              {
                "file": 7
              }
            ],
            "uses": [
              47
            ]
          },
          {
            "id": "supply-chain/install-hook/postinstall",
            "conf": 0.8,
            "crit": 3,
            "desc": "Package has 'postinstall' hook that runs during install"
          },
          {
            "id": "objectives/supply-chain/install-hook/scripts/import-chain::scripts-postinstall-executor-node",
            "atk": "T1195.002",
            "conf": 0.75,
            "crit": 3,
            "desc": "postinstall invokes node"
          },
          {
            "id": "metadata/file/line::file-has-30-plus-lines",
            "conf": 0.9,
            "crit": 2,
            "desc": "File has 30 or more lines",
            "from": [
              {
                "file": 6
              }
            ]
          },
          {
            "id": "metadata/package/files/included::npm-publish-root-manifest",
            "conf": 0.95,
            "crit": 2,
            "desc": "Manifest sits at npm publish root",
            "from": [
              {
                "file": 3
              }
            ]
          },
          {
            "id": "objectives/supply-chain/install-hook/package/manifest::postinstall-hook-key",
            "conf": 0.85,
            "crit": 3,
            "desc": "Declares a package postinstall hook"
          },
          {
            "id": "metadata/package/dependencies/manifest/presence::npm-empty-dependencies-object",
            "conf": 0.95,
            "crit": 2,
            "desc": "npm manifest has empty dependencies object",
            "from": [
              {
                "file": 3
              }
            ]
          },
          {
            "id": "metadata/build/ecosystem::npm-logical-or-fallback",
            "conf": 0.95,
            "crit": 1,
            "desc": "npm script uses logical-OR fallback"
          },
          {
            "id": "objectives/supply-chain/install-hook/scripts/declaration::postinstall-hook-declaration",
            "atk": "T1195.002",
            "conf": 0.96,
            "crit": 3,
            "desc": "Package declares a postinstall hook"
          },
          {
            "id": "objectives/supply-chain/install-hook/remote-content::hook-script-fetches-and-writes-remote-content",
            "conf": 0.94,
            "crit": 3,
            "desc": "Lifecycle hook-like script saves HTTP response",
            "from": [
              {
                "off": 2790,
                "file": 6,
                "line": 146
              }
            ],
            "uses": [
              3,
              21
            ]
          },
          {
            "id": "objectives/supply-chain/install-hook/scripts/local-script::postinstall-js-file",
            "conf": 0.84,
            "crit": 3,
            "desc": "JavaScript file named npm postinstall hook",
            "from": [
              {
                "file": 6
              }
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-2",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"and\"",
            "from": [
              {
                "file": 4
              }
            ]
          },
          {
            "id": "metadata/package/repository::has-repository-field",
            "conf": 0.9,
            "crit": 2,
            "desc": "package.json declares repository metadata"
          },
          {
            "id": "objectives/supply-chain/install-hook/scripts/hook-file::hook-script-filename",
            "atk": "T1195.002",
            "conf": 0.9,
            "crit": 1,
            "desc": "npm lifecycle hook-like filename",
            "from": [
              {
                "file": 6
              }
            ],
            "uses": [
              7
            ]
          },
          {
            "id": "micro-behaviors/communications/http/url/github::raw-githubusercontent-any",
            "atk": "T1071.001",
            "mbc": "C0002",
            "conf": 0.7,
            "crit": 3,
            "desc": "raw.githubusercontent.com URL",
            "from": [
              {
                "file": 6
              }
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-1",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"the\"",
            "from": [
              {
                "file": 4
              }
            ]
          },
          {
            "id": "metadata/file/comment::source-at-most-two-comments",
            "conf": 0.88,
            "crit": 2,
            "desc": "Source has at most two comments",
            "from": [
              {
                "file": 6
              }
            ]
          },
          {
            "id": "metadata/package/dependencies/manifest/presence::npm-no-runtime-dependencies",
            "conf": 0.9,
            "crit": 2,
            "desc": "npm manifest declares no runtime dependencies",
            "from": [
              {
                "off": 1731,
                "file": 3,
                "line": 77
              }
            ],
            "uses": [
              14
            ]
          },
          {
            "id": "metadata/package/files/package-json::files-array-present",
            "conf": 0.92,
            "crit": 3,
            "desc": "Package.json declares a files allowlist"
          },
          {
            "id": "metadata/package/files/included::npm-package-scripts-member",
            "conf": 0.99,
            "crit": 3,
            "desc": "JavaScript under npm package scripts dir",
            "from": [
              {
                "file": 6
              }
            ]
          },
          {
            "id": "micro-behaviors/data/string/split::js-split-call",
            "conf": 0.8,
            "crit": 3,
            "desc": "Calls JavaScript split()",
            "from": [
              {
                "file": 6
              }
            ]
          },
          {
            "id": "micro-behaviors/process/create/load/local::cjs-local-require-call",
            "atk": "T1059.007",
            "conf": 0.9,
            "crit": 3,
            "desc": "CommonJS local-module require call",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "metadata/package/scripts/lifecycle::builtin-pipe-execute-benign-package-context",
            "conf": 0.99,
            "crit": 3,
            "desc": "Known-good package context for pipe-execute heuristic",
            "from": [
              {
                "file": 3
              }
            ],
            "uses": [
              15
            ]
          },
          {
            "id": "micro-behaviors/communications/http/client/response-body::js-response-text-read",
            "conf": 0.82,
            "crit": 3,
            "desc": "JavaScript reads HTTP response text",
            "from": [
              {
                "file": 6
              }
            ]
          },
          {
            "id": "micro-behaviors/fs/write/file/full::write-file-call-target",
            "conf": 0.9,
            "crit": 3,
            "desc": "Calls an unqualified writeFile function",
            "from": [
              {
                "file": 6
              }
            ]
          },
          {
            "id": "metadata/lang/locale::language-label-code-de",
            "conf": 0.97,
            "crit": 2,
            "desc": "German UI language code",
            "from": [
              {
                "file": 6
              }
            ]
          },
          {
            "id": "micro-behaviors/data/control-flow/module-exec::commonjs-module-reexport",
            "conf": 0.92,
            "crit": 3,
            "desc": "CommonJS module re-exports required package",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "objectives/supply-chain/install-hook/package/manifest::postinstall-runs-node-script",
            "conf": 0.92,
            "crit": 3,
            "desc": "Postinstall targets local Node.js file"
          },
          {
            "id": "metadata/import/npm/relative/1/domains/json::relative/1/domains/json",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports ./domains.json",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "micro-behaviors/data/source/syntax/array::js-array-sort-call",
            "conf": 0.72,
            "crit": 3,
            "desc": "Sorts a JavaScript array",
            "from": [
              {
                "file": 6
              }
            ]
          },
          {
            "id": "metadata/lang/scripted::dts-declaration-file",
            "conf": 0.99,
            "crit": 2,
            "desc": "TypeScript declaration file",
            "from": [
              {
                "file": 7
              }
            ]
          },
          {
            "id": "metadata/lang/locale::language-label-code-fr",
            "conf": 0.97,
            "crit": 2,
            "desc": "French UI language code",
            "from": [
              {
                "file": 6
              }
            ]
          },
          {
            "id": "micro-behaviors/fs/delete/file/command::npm-script-delete",
            "atk": "T1070.004",
            "mbc": "C0047",
            "conf": 0.85,
            "crit": 3,
            "desc": "Package script deletes files"
          },
          {
            "id": "metadata/package/scripts/develop::has-git-hooks",
            "conf": 0.9,
            "crit": 3,
            "desc": "Package uses git hooks tooling",
            "from": [
              {
                "file": 3
              }
            ]
          },
          {
            "id": "micro-behaviors/fs/write/file/full::node-fs-promises-import",
            "conf": 0.95,
            "crit": 2,
            "desc": "Imports the Node fs/promises API",
            "from": [
              {
                "file": 6
              }
            ]
          },
          {
            "id": "metadata/package/name/convention::npm-has-name",
            "conf": 1.0,
            "crit": 2,
            "desc": "npm manifest declares a package name"
          },
          {
            "id": "metadata/package/repository::repo-url-git-host",
            "conf": 0.9,
            "crit": 3,
            "desc": "Repository identifies major Git host"
          },
          {
            "id": "metadata/package/scripts/develop::has-test-script",
            "conf": 1.0,
            "crit": 2,
            "desc": "package.json declares a test script"
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-7",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"this\"",
            "from": [
              {
                "file": 4
              }
            ]
          },
          {
            "id": "metadata/file/extension/identity::declaration-file-extension",
            "conf": 1.0,
            "crit": 2,
            "desc": "File uses a source declaration extension",
            "from": [
              {
                "file": 7
              }
            ]
          },
          {
            "id": "micro-behaviors/communications/http/url/forge::github-raw-url",
            "conf": 0.92,
            "crit": 3,
            "desc": "GitHub raw-content URL",
            "from": [
              {
                "file": 6
              }
            ]
          },
          {
            "id": "objectives/supply-chain/install-hook/scripts/declaration::has-postinstall",
            "atk": "T1195.002",
            "conf": 0.85,
            "crit": 3,
            "desc": "Has postinstall script hook"
          },
          {
            "id": "metadata/lang/source::js-ts-source-basename",
            "conf": 0.95,
            "crit": 2,
            "desc": "JavaScript or TypeScript source filename",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "micro-behaviors/ui/window/dom-access::ad-selector-token",
            "conf": 0.8,
            "crit": 3,
            "desc": "Ad-related CSS selector token",
            "from": [
              {
                "file": 6
              }
            ]
          },
          {
            "id": "micro-behaviors/data/serialize/json::json-stringify-identifier",
            "conf": 0.85,
            "crit": 3,
            "desc": "Serializes an identifier as JSON",
            "from": [
              {
                "file": 6
              }
            ]
          },
          {
            "id": "micro-behaviors/process/interpreter/npm::npm-script-interpreter",
            "atk": "T1059",
            "mbc": "B0030",
            "conf": 0.85,
            "crit": 3,
            "desc": "Package script invokes a language interpreter"
          },
          {
            "id": "micro-behaviors/communications/http/url/domain::js-remote-host-url",
            "conf": 0.75,
            "crit": 3,
            "desc": "Contains a hardcoded remote HTTP(S) URL",
            "from": [
              {
                "file": 6
              }
            ]
          },
          {
            "id": "metadata/import/npm/fs/promises::fs/promises",
            "conf": 0.95,
            "crit": 3,
            "desc": "imports node:fs/promises",
            "from": [
              {
                "file": 6
              }
            ]
          },
          {
            "id": "metadata/package/entrypoint::main-root-javascript-entry",
            "conf": 0.9,
            "crit": 2,
            "desc": "Root JavaScript main entrypoint"
          },
          {
            "id": "micro-behaviors/communications/http/url/endpoint::domain-collection-path-token",
            "conf": 0.92,
            "crit": 3,
            "desc": "domain collection URL path segment",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "metadata/package/files/included::package-json-basename",
            "conf": 0.95,
            "crit": 3,
            "desc": "Filename is package.json",
            "from": [
              {
                "file": 3
              }
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-5",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"for\"",
            "from": [
              {
                "file": 4
              }
            ]
          },
          {
            "id": "metadata/package/author/domain::npm-author-gmail",
            "atk": "T1195.002",
            "conf": 0.65,
            "crit": 3,
            "desc": "npm package author uses Gmail"
          },
          {
            "id": "objectives/execution/interpreter/script/npm::npm-postinstall-script",
            "conf": 1.0,
            "crit": 3,
            "desc": "Declares an npm postinstall lifecycle hook"
          },
          {
            "id": "metadata/package/versioning/scheme::npm-has-version",
            "conf": 1.0,
            "crit": 2,
            "desc": "package.json defines a package version"
          },
          {
            "id": "metadata/file/extension/token-shape::bare-alphanumeric-script-basename",
            "conf": 0.9,
            "crit": 2,
            "desc": "Script filename is a bare alphanumeric token",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "micro-behaviors/data/control-flow/module-exec::module-leading-promise-chain-call",
            "conf": 0.84,
            "crit": 3,
            "desc": "Leading promise-chain call at module scope",
            "from": [
              {
                "file": 6
              }
            ]
          },
          {
            "id": "micro-behaviors/fs/write/file/full::node-write-file-promise-destructured",
            "conf": 0.9,
            "crit": 3,
            "desc": "Node writes a file via destructured import",
            "from": [
              {
                "file": 6
              }
            ],
            "uses": [
              32,
              42
            ]
          },
          {
            "id": "micro-behaviors/communications/http/url/forge::public-code-forge-url",
            "conf": 0.9,
            "crit": 3,
            "desc": "References a public code-forge URL",
            "from": [
              {
                "file": 5
              }
            ]
          },
          {
            "id": "metadata/package/dependencies/manifest/count::npm-many-dev-dependencies",
            "conf": 0.7,
            "crit": 2,
            "desc": "npm manifest has many devDependencies"
          },
          {
            "id": "micro-behaviors/communications/http/url/github::raw-githubusercontent-web-file",
            "atk": "T1071.001",
            "mbc": "C0002",
            "conf": 0.7,
            "crit": 3,
            "desc": "raw.githubusercontent.com web file URL",
            "from": [
              {
                "file": 6
              }
            ]
          },
          {
            "id": "metadata/package/documentation/package-metadata::npm-name-matches-readme-heading",
            "conf": 0.9,
            "crit": 3,
            "desc": "README heading matches the npm package name"
          },
          {
            "id": "metadata/package/files/archive-member::archive-js-member",
            "conf": 0.9,
            "crit": 3,
            "desc": "Archive member is a JavaScript file"
          },
          {
            "id": "metadata/package/files/included::npm-package-manifest-member",
            "conf": 0.95,
            "crit": 2,
            "desc": "Archive carries npm package manifest"
          },
          {
            "id": "objectives/supply-chain/install-hook/remote-content::npm-install-hook-fetches-branch-tip-content",
            "conf": 0.96,
            "crit": 4,
            "desc": "Install hook fetches branch-tip remote content",
            "from": [
              {
                "file": 3
              },
              {
                "off": 3359,
                "file": 6,
                "line": 166
              }
            ],
            "uses": [
              17,
              49,
              68
            ],
            "spans": [
              [
                0,
                41
              ]
            ]
          },
          {
            "id": "objectives/supply-chain/install-hook/remote-content::npm-install-hook-persists-remote-content",
            "conf": 0.95,
            "crit": 3,
            "desc": "npm install hook saves fetched remote data",
            "from": [
              {
                "file": 3
              },
              {
                "off": 3359,
                "file": 6,
                "line": 166
              }
            ],
            "uses": [
              17,
              49
            ],
            "spans": [
              [
                0,
                41
              ]
            ]
          }
        ]
      }
    ]
  }
}