{
  "ml": {
    "v": "7",
    "id": 90,
    "lvl": -1,
    "conf": 0,
    "prob": 0.0000073909759521484375,
    "type": "",
    "version": "v18.18",
    "analyzed_at": "2026-09-22T19:17:24Z"
  },
  "path": "confighttp@v0.104.0",
  "raw": {
    "rev": "a041b",
    "files": [
      {
        "id": 91,
        "mol": "K(Li)H₅(Cm₆Db₃MgOsPo₂)Md₃(In₁₂Pa₄)",
        "pid": 16,
        "rel": "fetched",
        "sha": "0f6f4e0714eac5b6af2b79675bcf5678d3825f736fe08a92c6f79992dbe952bb",
        "via": "https://proxy.golang.org/go.opentelemetry.io/collector/config/confighttp/@v/v0.104.0.zip",
        "path": "pkg:golang/go.opentelemetry.io/collector/config/confighttp@v0.104.0",
        "risk": 15,
        "size": 42365,
        "type": "zip",
        "depth": 2,
        "facts": {
          "metrics": {
            "file": {
              "size": 42365,
              "entropy": 7.91
            },
            "binary": {
              "peak_region_bytes": 39936,
              "peak_region_entropy": 7.83
            },
            "archive": {
              "file_count": 20,
              "member_count": 20,
              "script_count": 0,
              "zip_bomb_ratio": 5.89,
              "compressed_size": 37647,
              "directory_count": 0,
              "executable_count": 0,
              "extra_field_size": 0,
              "noise_file_count": 0,
              "compression.ratio": 0.3,
              "hidden_file_count": 0,
              "uncompressed_size": 123487,
              "crc_collision_count": 0,
              "entry_comment_count": 0,
              "max_filename_length": 82,
              "rtlo_filename_count": 0,
              "format.regular_count": 20,
              "nested_archive_count": 0,
              "path_traversal_count": 0,
              "symlink_escape_count": 0,
              "security.setgid_count": 0,
              "security.setuid_count": 0,
              "security.sticky_count": 0,
              "double_extension_count": 0,
              "duplicate_member_count": 0,
              "security.symlink_count": 0,
              "unicode_filename_count": 0,
              "homoglyph_filename_count": 0,
              "security.encrypted_count": 0,
              "misplaced_executable_count": 0,
              "timing.mtime_dominant_count": 20,
              "timing.sentinel_mtime_count": 20,
              "security.world_writable_count": 0,
              "timing.mtime_dominant_fraction": 1,
              "compression.method_counts.deflate": 20
            }
          }
        },
        "ident": {
          "name": {
            "value": "v0",
            "source": "file.basename",
            "verified": false
          },
          "trust": "unsigned",
          "version": {
            "value": "104.0",
            "source": "file.basename",
            "verified": false
          }
        },
        "traits": [
          {
            "id": "well-known/lib/network/golang-x-net::module-import",
            "conf": 0.99,
            "crit": 3,
            "desc": "golang.org/x/net import path",
            "from": [
              {
                "file": 9
              }
            ]
          },
          {
            "id": "micro-behaviors/os/security/directory-service::directory-entry-property-put-call",
            "conf": 0.94,
            "crit": 3,
            "desc": "DirectoryEntry property write API call",
            "from": [
              {
                "file": 7
              }
            ]
          },
          {
            "id": "metadata/import/go/net/http/httptest::net/http/httptest",
            "conf": 0.95,
            "crit": 3,
            "desc": "imports net/http/httptest",
            "from": [
              {
                "file": 6
              }
            ]
          },
          {
            "id": "micro-behaviors/process/create/thread::go-goroutine-launch-call",
            "conf": 0.75,
            "crit": 3,
            "desc": "Go goroutine launch call",
            "from": [
              {
                "file": 10
              }
            ]
          },
          {
            "id": "metadata/package/testing/harness/unit::go-testing-b",
            "conf": 0.7,
            "crit": 2,
            "desc": "testing.B type",
            "from": [
              {
                "file": 8
              }
            ]
          },
          {
            "id": "micro-behaviors/mem/alloc/heap::megabyte-buffer-allocation",
            "conf": 0.86,
            "crit": 3,
            "desc": "Source allocates a megabyte-sized buffer",
            "from": [
              {
                "file": 8
              }
            ]
          },
          {
            "id": "metadata/package/testing/presence/harness::tests-path-filename",
            "conf": 0.85,
            "crit": 2,
            "desc": "File path or name indicates test code",
            "from": [
              {
                "file": 4
              }
            ]
          },
          {
            "id": "metadata/import/go/go/uber/org/zap/zaptest/observer::go/uber/org/zap/zaptest/observer",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports go.uber.org/zap/zaptest/observer",
            "from": [
              {
                "file": 10
              }
            ]
          },
          {
            "id": "metadata/package/testing/harness/unit::go-func-test",
            "conf": 0.8,
            "crit": 2,
            "desc": "Go test function name",
            "from": [
              {
                "file": 4
              }
            ]
          },
          {
            "id": "metadata/import/go/bytes::bytes",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports bytes",
            "from": [
              {
                "file": 5
              }
            ]
          },
          {
            "id": "metadata/import/go/go/opentelemetry/io/collector/component/componenttest::go/opentelemetry/io/collector/component/componenttest",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports go.opentelemetry.io/collector/component/componenttest",
            "from": [
              {
                "file": 6
              }
            ]
          },
          {
            "id": "micro-behaviors/data/decompress/gzip::go-gzip-reader",
            "conf": 0.85,
            "crit": 3,
            "desc": "Go gzip.NewReader decompression",
            "from": [
              {
                "file": 5
              }
            ]
          },
          {
            "id": "micro-behaviors/data/compress/gzip::go-gzip-writer",
            "conf": 0.85,
            "crit": 3,
            "desc": "Go gzip.NewWriter compression",
            "from": [
              {
                "file": 6
              }
            ]
          },
          {
            "id": "metadata/import/go/go/opentelemetry/io/collector/config/configtelemetry::go/opentelemetry/io/collector/config/configtelemetry",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports go.opentelemetry.io/collector/config/configtelemetry",
            "from": [
              {
                "file": 9
              }
            ]
          },
          {
            "id": "metadata/import/go/go/opentelemetry/io/contrib/instrumentation/net/http/otelhttp::go/opentelemetry/io/contrib/instrumentation/net/http/otelhttp",
            "conf": 0.95,
            "crit": 3,
            "desc": "imports go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp",
            "from": [
              {
                "file": 9
              }
            ]
          },
          {
            "id": "metadata/package/testing/presence/harness::go-test-file",
            "conf": 0.7,
            "crit": 2,
            "desc": "Go test file suffix",
            "from": [
              {
                "file": 4
              }
            ]
          },
          {
            "id": "micro-behaviors/process/io/write::go-write-method-call",
            "conf": 0.65,
            "crit": 3,
            "desc": "Go Write/WriteAt method call",
            "from": [
              {
                "file": 6
              }
            ]
          },
          {
            "id": "metadata/import/go/go/opentelemetry/io/collector/internal/localhostgate::go/opentelemetry/io/collector/internal/localhostgate",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports go.opentelemetry.io/collector/internal/localhostgate",
            "from": [
              {
                "file": 10
              }
            ]
          },
          {
            "id": "metadata/import/go/context::context",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports context",
            "from": [
              {
                "file": 3
              }
            ]
          },
          {
            "id": "metadata/import/go/sync::sync",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports sync",
            "from": [
              {
                "file": 7
              }
            ]
          },
          {
            "id": "metadata/import/go/github/com/stretchr/testify/assert::github/com/stretchr/testify/assert",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports github.com/stretchr/testify/assert",
            "from": [
              {
                "file": 4
              }
            ]
          },
          {
            "id": "micro-behaviors/communications/http/url/forge::public-code-forge-url",
            "conf": 0.9,
            "crit": 3,
            "desc": "References a public code-forge URL",
            "from": [
              {
                "file": 2
              }
            ]
          },
          {
            "id": "micro-behaviors/communications/http/server/listener::http-server-type",
            "atk": "T1071.001",
            "mbc": "C0002",
            "conf": 0.7,
            "crit": 3,
            "desc": "References Go's http.Server type",
            "from": [
              {
                "file": 9
              }
            ]
          },
          {
            "id": "metadata/import/go/net::net",
            "conf": 0.95,
            "crit": 3,
            "desc": "imports net",
            "from": [
              {
                "file": 3
              }
            ]
          },
          {
            "id": "metadata/import/go/path/filepath::path/filepath",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports path/filepath",
            "from": [
              {
                "file": 10
              }
            ]
          },
          {
            "id": "metadata/package/testing/presence/harness::go-test-main",
            "conf": 0.7,
            "crit": 2,
            "desc": "Go TestMain function",
            "from": [
              {
                "file": 14
              }
            ]
          },
          {
            "id": "metadata/import/go/compress/gzip::compress/gzip",
            "conf": 0.95,
            "crit": 3,
            "desc": "imports compress/gzip",
            "from": [
              {
                "file": 5
              }
            ]
          },
          {
            "id": "metadata/import/go/testing::testing",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports testing",
            "from": [
              {
                "file": 4
              }
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-5",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"for\"",
            "from": [
              {
                "file": 2
              }
            ]
          },
          {
            "id": "metadata/import/go/net/http/cookiejar::net/http/cookiejar",
            "conf": 0.95,
            "crit": 3,
            "desc": "imports net/http/cookiejar",
            "from": [
              {
                "file": 9
              }
            ]
          },
          {
            "id": "micro-behaviors/communications/http/lib/netlib::net-http-import",
            "atk": "T1071.001",
            "mbc": "C0002",
            "conf": 0.5,
            "crit": 3,
            "desc": "Go source imports the net/http standard package",
            "from": [
              {
                "file": 3
              }
            ]
          },
          {
            "id": "metadata/import/go/go/opentelemetry/io/collector/featuregate::go/opentelemetry/io/collector/featuregate",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports go.opentelemetry.io/collector/featuregate",
            "from": [
              {
                "file": 10
              }
            ]
          },
          {
            "id": "metadata/import/go/go/opentelemetry/io/collector/config/configcompression::go/opentelemetry/io/collector/config/configcompression",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports go.opentelemetry.io/collector/config/configcompression",
            "from": [
              {
                "file": 5
              }
            ]
          },
          {
            "id": "micro-behaviors/data/buffer/transfer::go-io-copy",
            "conf": 0.9,
            "crit": 3,
            "desc": "Copies data with Go io.Copy",
            "from": [
              {
                "file": 5
              }
            ]
          },
          {
            "id": "metadata/import/go/fmt::fmt",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports fmt",
            "from": [
              {
                "file": 5
              }
            ]
          },
          {
            "id": "metadata/import/go/golang/org/x/net/http2::golang/org/x/net/http2",
            "conf": 0.95,
            "crit": 3,
            "desc": "imports golang.org/x/net/http2",
            "from": [
              {
                "file": 9
              }
            ]
          },
          {
            "id": "metadata/import/go/go/opentelemetry/io/collector/extension/auth::go/opentelemetry/io/collector/extension/auth",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports go.opentelemetry.io/collector/extension/auth",
            "from": [
              {
                "file": 9
              }
            ]
          },
          {
            "id": "micro-behaviors/communications/http/url/build::go-read-http-response-body",
            "mbc": "C0002",
            "conf": 0.9,
            "crit": 3,
            "desc": "Go reads an HTTP response body",
            "from": [
              {
                "file": 6
              }
            ]
          },
          {
            "id": "metadata/import/go/compress/zlib::compress/zlib",
            "conf": 0.95,
            "crit": 3,
            "desc": "imports compress/zlib",
            "from": [
              {
                "file": 5
              }
            ]
          },
          {
            "id": "metadata/import/go/golang/org/x/net/publicsuffix::golang/org/x/net/publicsuffix",
            "conf": 0.95,
            "crit": 3,
            "desc": "imports golang.org/x/net/publicsuffix",
            "from": [
              {
                "file": 9
              }
            ]
          },
          {
            "id": "metadata/import/go/strings::strings",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports strings",
            "from": [
              {
                "file": 6
              }
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-3",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"that\"",
            "from": [
              {
                "file": 2
              }
            ]
          },
          {
            "id": "micro-behaviors/communications/http/lib/netlib::go-http-newrequest",
            "atk": "T1071.001",
            "mbc": "C0002",
            "conf": 0.9,
            "crit": 3,
            "desc": "Creates a new HTTP request",
            "from": [
              {
                "file": 5
              }
            ]
          },
          {
            "id": "metadata/import/go/net/http::net/http",
            "conf": 0.95,
            "crit": 3,
            "desc": "imports net/http",
            "from": [
              {
                "file": 3
              }
            ]
          },
          {
            "id": "metadata/import/go/github/com/golang/snappy::github/com/golang/snappy",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports github.com/golang/snappy",
            "from": [
              {
                "file": 5
              }
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-6",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"with\"",
            "from": [
              {
                "file": 2
              }
            ]
          },
          {
            "id": "metadata/import/go/time::time",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports time",
            "from": [
              {
                "file": 9
              }
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-2",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"and\"",
            "from": [
              {
                "file": 2
              }
            ]
          },
          {
            "id": "metadata/package/testing/harness/unit::go-testing-t",
            "conf": 0.7,
            "crit": 2,
            "desc": "Go test uses a testing.T parameter",
            "from": [
              {
                "file": 4
              }
            ]
          },
          {
            "id": "metadata/import/go/go/opentelemetry/io/collector/config/internal::go/opentelemetry/io/collector/config/internal",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports go.opentelemetry.io/collector/config/internal",
            "from": [
              {
                "file": 9
              }
            ]
          },
          {
            "id": "metadata/import/go/github/com/klauspost/compress/zstd::github/com/klauspost/compress/zstd",
            "conf": 0.95,
            "crit": 3,
            "desc": "imports github.com/klauspost/compress/zstd",
            "from": [
              {
                "file": 5
              }
            ]
          },
          {
            "id": "metadata/import/go/go/opentelemetry/io/otel::go/opentelemetry/io/otel",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports go.opentelemetry.io/otel",
            "from": [
              {
                "file": 9
              }
            ]
          },
          {
            "id": "metadata/import/go/go/opentelemetry/io/collector/client::go/opentelemetry/io/collector/client",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports go.opentelemetry.io/collector/client",
            "from": [
              {
                "file": 3
              }
            ]
          },
          {
            "id": "metadata/import/go/go/opentelemetry/io/collector/config/configauth::go/opentelemetry/io/collector/config/configauth",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports go.opentelemetry.io/collector/config/configauth",
            "from": [
              {
                "file": 9
              }
            ]
          },
          {
            "id": "micro-behaviors/communications/socket/listen::listen-go",
            "atk": "T1071",
            "mbc": "C0001",
            "conf": 0.9,
            "crit": 3,
            "desc": "Go net.Listen call",
            "from": [
              {
                "file": 9
              }
            ]
          },
          {
            "id": "metadata/import/go/go/opentelemetry/io/collector/config/configtls::go/opentelemetry/io/collector/config/configtls",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports go.opentelemetry.io/collector/config/configtls",
            "from": [
              {
                "file": 9
              }
            ]
          },
          {
            "id": "metadata/import/go/go/opentelemetry/io/collector/config/configopaque::go/opentelemetry/io/collector/config/configopaque",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports go.opentelemetry.io/collector/config/configopaque",
            "from": [
              {
                "file": 9
              }
            ]
          },
          {
            "id": "micro-behaviors/communications/http/url/build::network-destination-function-binding",
            "mbc": "C0002",
            "conf": 0.94,
            "crit": 3,
            "desc": "Network destination assigned from call",
            "from": [
              {
                "file": 9
              }
            ]
          },
          {
            "id": "metadata/import/go/crypto/tls::crypto/tls",
            "conf": 0.95,
            "crit": 3,
            "desc": "imports crypto/tls",
            "from": [
              {
                "file": 9
              }
            ]
          },
          {
            "id": "metadata/import/go/go/uber/org/zap::go/uber/org/zap",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports go.uber.org/zap",
            "from": [
              {
                "file": 10
              }
            ]
          },
          {
            "id": "micro-behaviors/communications/http/lib/netlib::go-http-client-construction",
            "atk": "T1071.001",
            "mbc": "C0002",
            "conf": 0.95,
            "crit": 3,
            "desc": "Constructs a Go HTTP client",
            "from": [
              {
                "file": 9
              }
            ]
          },
          {
            "id": "micro-behaviors/communications/http/lib/netlib::go-variable-do-call",
            "atk": "T1071.001",
            "mbc": "C0002",
            "conf": 0.8,
            "crit": 3,
            "desc": "Go variable Do method call",
            "from": [
              {
                "file": 6
              }
            ]
          },
          {
            "id": "metadata/import/go/errors::errors",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports errors",
            "from": [
              {
                "file": 7
              }
            ]
          },
          {
            "id": "metadata/import/go/github/com/rs/cors::github/com/rs/cors",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports github.com/rs/cors",
            "from": [
              {
                "file": 9
              }
            ]
          },
          {
            "id": "micro-behaviors/communications/url/parse::go-url-parse",
            "conf": 0.9,
            "crit": 3,
            "desc": "Parses a URL with net/url",
            "from": [
              {
                "file": 10
              }
            ]
          },
          {
            "id": "metadata/import/go/go/uber/org/goleak::go/uber/org/goleak",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports go.uber.org/goleak",
            "from": [
              {
                "file": 14
              }
            ]
          },
          {
            "id": "metadata/import/go/go/opentelemetry/io/collector/component::go/opentelemetry/io/collector/component",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports go.opentelemetry.io/collector/component",
            "from": [
              {
                "file": 9
              }
            ]
          },
          {
            "id": "metadata/package/testing/harness/unit::go-testing-m",
            "conf": 0.7,
            "crit": 2,
            "desc": "testing.M type",
            "from": [
              {
                "file": 14
              }
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-4",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"have\"",
            "from": [
              {
                "file": 5
              }
            ]
          },
          {
            "id": "metadata/import/go/net/url::net/url",
            "conf": 0.95,
            "crit": 3,
            "desc": "imports net/url",
            "from": [
              {
                "file": 9
              }
            ]
          },
          {
            "id": "metadata/import/go/go/opentelemetry/io/collector/extension/auth/authtest::go/opentelemetry/io/collector/extension/auth/authtest",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports go.opentelemetry.io/collector/extension/auth/authtest",
            "from": [
              {
                "file": 10
              }
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-7",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"this\"",
            "from": [
              {
                "file": 2
              }
            ]
          },
          {
            "id": "metadata/import/go/io::io",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports io",
            "from": [
              {
                "file": 5
              }
            ]
          },
          {
            "id": "metadata/import/go/github/com/stretchr/testify/require::github/com/stretchr/testify/require",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports github.com/stretchr/testify/require",
            "from": [
              {
                "file": 6
              }
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-1",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"the\"",
            "from": [
              {
                "file": 2
              }
            ]
          },
          {
            "id": "metadata/file/archive::archive-at-least-10-members",
            "conf": 0.9,
            "crit": 3,
            "desc": "Archive contains at least ten members"
          },
          {
            "id": "metadata/package/files/credentials::package-key-like-member",
            "conf": 0.92,
            "crit": 3,
            "desc": "Key-container-like archive member"
          },
          {
            "id": "metadata/package/files/credentials::package-service-key-member",
            "conf": 0.92,
            "crit": 3,
            "desc": "Service key archive member"
          },
          {
            "id": "metadata/package/files/included::archive-go-mod-entry",
            "conf": 0.98,
            "crit": 3,
            "desc": "Archive contains go.mod"
          },
          {
            "id": "metadata/package/manager::go-module-source-archive",
            "conf": 0.99,
            "crit": 3,
            "desc": "Go module source archive layout"
          },
          {
            "id": "metadata/package/testing/presence/fixture::package-key-testdata-member",
            "conf": 0.98,
            "crit": 3,
            "desc": "Package testdata key member"
          }
        ]
      }
    ]
  }
}