{
  "ml": {
    "v": "7",
    "eng": "2.8.0",
    "lvl": -1,
    "conf": 0,
    "mods": [
      {
        "cls": 0,
        "raw": 0.101217024,
        "rte": "az",
        "prob": 0.101217024
      },
      {
        "cls": 0,
        "raw": 0.0047952533,
        "rte": "az/nupkg",
        "prob": 0.0047952533
      }
    ],
    "prob": 0.101217024,
    "files": [
      {
        "id": 0,
        "lvl": -1,
        "conf": 0,
        "prob": 0.10121702402830124,
        "type": "nupkg"
      },
      {
        "id": 2,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000013013680472795386,
        "type": "xml"
      },
      {
        "id": 3,
        "lvl": -1,
        "conf": 0,
        "prob": 0.00003149111944367178,
        "type": "pe"
      },
      {
        "id": 6,
        "lvl": -1,
        "conf": 0,
        "prob": 0.00001385807991027832,
        "type": "registry"
      }
    ],
    "version": "v18.18",
    "analyzed_at": "2026-09-02T16:11:23Z"
  },
  "path": "Curiosity.Components.26.8.4721.nupkg",
  "raw": {
    "files": [
      {
        "id": 0,
        "ctx": [
          {
            "b": "p!H([6Awak2MN.ia6\u0026uA9!jX2008f.000xb003wDwO=Ave]\u003eJtBcI*yyqJjEm^*JrvCc0KhD\u0026*UJ8C{az(2a\u003ey:Kdo{j]h}\u003e?C\u003ca7l?Zgak!cM.)!Ge@2\u003cpL:\u0026d91ltm(5/X0^Z/k/}\u0026r(%-vi:0LAfZJnwLs)eNEH5]@6lwE2aBuB[nx3nv\u0026!Gc#z\u003cTIFjTsJ4oPH\u003e",
            "ln": 0
          }
        ],
        "mol": "H(Cm)Md₂(BiPa)",
        "sha": "15a5b399c580423e4715ee9386e753124b27f08e9efba3aaa5a71f62adcf78db",
        "path": "Curiosity.Components.26.8.4721.nupkg",
        "risk": 4,
        "size": 19851,
        "type": "nupkg",
        "facts": {
          "metrics": {
            "file": {
              "size": 19851,
              "entropy": 7.78
            },
            "binary": {
              "peak_region_bytes": 16384,
              "peak_region_entropy": 7.82
            },
            "archive": {
              "file_count": 6,
              "member_count": 6,
              "script_count": 0,
              "zip_bomb_ratio": 3.93,
              "compressed_size": 19037,
              "directory_count": 0,
              "executable_count": 1,
              "extra_field_size": 0,
              "noise_file_count": 0,
              "compression.ratio": 0.56,
              "hidden_file_count": 2,
              "uncompressed_size": 34116,
              "crc_collision_count": 0,
              "entry_comment_count": 0,
              "max_filename_length": 54,
              "rtlo_filename_count": 0,
              "format.regular_count": 6,
              "nested_archive_count": 0,
              "path_traversal_count": 0,
              "symlink_escape_count": 0,
              "security.setgid_count": 0,
              "security.setuid_count": 0,
              "security.sticky_count": 0,
              "double_extension_count": 0,
              "duplicate_member_count": 0,
              "security.symlink_count": 0,
              "unicode_filename_count": 0,
              "homoglyph_filename_count": 0,
              "security.encrypted_count": 0,
              "timing.mtime_unique_count": 2,
              "timing.mtime_unique_ratio": 0.33,
              "misplaced_executable_count": 1,
              "timing.mtime_outlier_count": 1,
              "timing.mtime_dominant_count": 5,
              "timing.mtime_spread_seconds": 25148,
              "timing.sentinel_mtime_count": 0,
              "security.world_writable_count": 0,
              "timing.mtime_dominant_fraction": 0.83,
              "compression.method_counts.stored": 1,
              "compression.method_counts.deflate": 5
            }
          }
        },
        "ident": {
          "name": {
            "value": "Curiosity.Components",
            "source": "nupkg.title",
            "verified": false
          },
          "urls": [
            {
              "url": "https://github.com/curiosity-ai",
              "kind": "homepage",
              "source": "nupkg.project_url"
            }
          ],
          "trust": "unsigned",
          "authors": [
            {
              "name": "Curiosity GmbH",
              "role": "author",
              "source": "nupkg.authors"
            }
          ],
          "version": {
            "value": "26.8.4721",
            "source": "nupkg.version",
            "verified": false
          },
          "identifier": {
            "value": "Curiosity.Components",
            "source": "nupkg.id",
            "verified": false
          }
        },
        "traits": [
          {
            "id": "micro-behaviors/communications/http/client/managed::postasync",
            "atk": "T1071.001",
            "conf": 0.88,
            "crit": 3,
            "desc": ".NET asynchronous HTTP POST method",
            "from": [
              {
                "file": 3
              }
            ]
          },
          {
            "id": "metadata/build/reproducible::pe-reproducible-build",
            "conf": 1.0,
            "crit": 2,
            "desc": "Built with /Brepro (deterministic)"
          },
          {
            "id": "metadata/binary/framework::dotnet-metadata",
            "conf": 1.0,
            "crit": 2,
            "desc": ".NET metadata root signature (BSJB)",
            "from": [
              {
                "file": 3
              }
            ]
          },
          {
            "id": "metadata/binary/anomaly/provenance::pe-far-future-timestamp",
            "conf": 0.95,
            "crit": 2,
            "desc": "PE COFF timestamp encodes a future date"
          },
          {
            "id": "metadata/binary/layout::pe-no-signature-record",
            "conf": 0.95,
            "crit": 3,
            "desc": "PE has no signature record"
          },
          {
            "id": "micro-behaviors/communications/http/client/managed::httpclient",
            "conf": 0.82,
            "crit": 3,
            "desc": "System.Net.Http.HttpClient type reference",
            "from": [
              {
                "file": 3
              }
            ]
          },
          {
            "id": "metadata/binary/framework::clr-runtime-header",
            "conf": 1.0,
            "crit": 2,
            "desc": "PE CLR header (COM descriptor)"
          },
          {
            "id": "metadata/binary/metrics/entropy::code-entropy-at-most-7-5",
            "conf": 0.7,
            "crit": 1,
            "desc": "Code entropy is 7.5 or lower",
            "from": [
              {
                "file": 3
              }
            ]
          },
          {
            "id": "metadata/package/files/nuget::nupkg-managed-library-member",
            "conf": 0.98,
            "crit": 3,
            "desc": "NuGet target-framework managed library member"
          },
          {
            "id": "metadata/package/files/nuget::nupkg-single-executable-member",
            "conf": 0.98,
            "crit": 3,
            "desc": "NuGet package has one executable member",
            "spans": [
              [
                0,
                31
              ]
            ]
          }
        ]
      },
      {
        "depth": 1,
        "facts": {
          "metrics": {
            "file": {
              "size": 1114,
              "entropy": 5.19
            },
            "binary": {
              "peak_region_bytes": 1024,
              "peak_region_entropy": 5.2
            }
          }
        },
        "id": 2,
        "path": "Curiosity.Components.26.8.4721.nupkg!!Curiosity.Components.nuspec",
        "pid": 0,
        "risk": 1,
        "sha": "69210758c17dd423c7e81348cd38cae071d6b9a32fd2a99fc9afd54c2fee2b1d",
        "size": 1114,
        "traits": [
          {
            "id": "metadata/build/manifest::nuspec-file",
            "conf": 0.98,
            "crit": 2,
            "desc": "NuGet nuspec manifest file",
            "spans": [
              [
                0,
                0
              ]
            ]
          }
        ],
        "type": "xml"
      },
      {
        "ctx": [
          {
            "b": "o\u003ciRU0@@r31onA4%nJ60XbVHe00000kMy=:0000000000000000000000000000000000000000Fb/MH4J\u0026m(0ji6Sa?dLD+]{51x(+zoA=kPhvqNb%vqY$3BrC47aAzQxazCZol@c-7zeS@@e!5l%bME/A00000p^\u003eu:oAtg{[![3R0000000000?#B@A3JR{Y07l!!00ic200000J:.$*03zmw000",
            "ln": 0
          },
          {
            "b": "0000000000000000000000000000000000000000Aae!E00000nb@R\u00260SSx7Kw(hWKpqf\u00260rr9100000044WCKs*Ik0000000000000000000000000000000000000",
            "ln": 480
          },
          {
            "b": "ay/IiA=Tn:DKp(rarUfoz/N(Yw{503BzkVhasHYcB7Fu(y+cYJz!\u0026{4diJ%AarR^HarR^HBzbxfe*LdGx([5$y?Xibc[dj+arR^HarR^HBzbxfe)\u0026d2y*?PijS(EkfFCM}arR^HarR^HBzbxfe)\u00266@B7Fu(y-\u003e\u003e-vQTs?rDq[q3lQDlarR^HaARph",
            "ln": 3710
          },
          {
            "b": "arR!EwPS6nzxI]0vqZd9z/YF/e[Pcxzbtm\u003eze165c[5IBD2vamc[co4j%kgVarR^HarR^HarR^Hy?mYhv@b\u003c\u003czGE0:az$+max9MbBy/qwpgXJ1now@)e\u003ey8aA6[CQwO#Prdlv\u003eVarR^HarR^HarR!py?WD#Bs]%)w)]*#Bw=W\u0026B.bSonm=juwPz\u0026Al1BHOb0*u[xM4{9Dsp]fz/c:IaARphB1Q*wz!\u0026{4dlv\u003eVarR^HarR^HarR!ywPP5nwPq\u003c7B97A5x=]LYc@+j}zGx:",
            "ln": 3955
          },
          {
            "b": "efE(pB97#ge(b}\u003ewN/*hau{#^wP]m}D2[7sz7XN{Bs{aaBz@\u003chBAh8kxg3PPBy/uie*K}Gz/NMXpgXS\u003ez/fSmw]]T$B8L}Gn][]*lVl\u003c=wPz(Bq!o#-vqGU7wLV=IwN/*gv@DmbwO#PsefDcBAbYScv{%E[z/djyB8L}udiHU]zGP=idlv\u003eVarR^HarR^HarR!JxLzo]asItLB.90ADKp(rarR^HarR^HarR^HarUGiBrCQnB8V5nB7DESasHVxvqf*arb#z+B8V5swIe7yp\u0026ZF\u003ex(^\u0026lv@b\u003c\u003czGEHcz/Z1^B9RUkc#@)sB.bSorDq!8aAITBx(mMJz/fVdzGErRdlv\u003eVarR^HarR^HarR^HarR!vw/@HxwPI*ezGxwwq/(C\u0026B-P]*wmV(DjV%]^D2[7sz7XN{Bs{aaBz$f2vruTklVlHDe\u003cS#SwPh:5wgnTF",
            "ln": 4342
          },
          {
            "b": "arR^HaAz4mAbPSnwIcz?B9hImq/#OWwPI]\u003eByxolB3\u003c\u003eRwHF#?3lQDlarR^HarR^HarR^HarR^HaAz4nB-IvxpgXS\u003ez/fSmw]]T$B8L}Gn][]*lVl\u003c=wPz(Bl$HBJA+O@#x)Kt^vRPE:BsqfvB8V5nB7D%\u003ez/fVdzGEHewNPanB5Ng3x(mMidj=Pvdlv\u003eVarR^HarR^",
            "ln": 5960
          },
          {
            "b": "j7SkHwGV28BAIRwaAz4mAbPSnwIcz?B9hImq/#OWwPI]\u003eByxolB3\u003c\u003eRwHF#UpgXS\u003ez/fSmw]]T$B8L}Gn][]*lVl\u003c=wPz(Bl$HBJA+O@#x)Kt^vRPE:BsqfvB8V5nB7D%\u003ez/fVdzGEHewNPanB5Ng3x(mMidj!BEEsiK)djGW[EjoN[je8\u0026T090#EzGx=nB7D$jB8$)",
            "ln": 8123
          },
          {
            "b": "B1Y[6A+PDkx([RMlVl*Xz/fc7BAo9BwIMkNh.X/Kh-JJJiB=USe]tuAb7fB\u003elq{Gy0rrc2000001onA400000000f5wb(PfpZ3?0byPQ)V\u0026{Bfr0rm4bu5Y8x(mN8000002NZRjyYBCnbumUxBpe6G5c8Xgbs+:9l\u0026Wh!GBm+W3\u003c3zebsli+vGlxd",
            "ln": 13920
          },
          {
            "b": "A+frhz/fScj#DXOgYPT9vqG:CB9RUkk4F2cgYPT4B6\u0026oi06A$]wozZ1j]!KZzf6i9A+]D007gghy^Ab/zESVyz/Z1^B9RUk06$da06$*qx()c*lVl*Xy?mZ1wb{mNBydQXlVl*Xy?mZ1wb{mNByd%*vruTklVlHD07.iNA8Q\u003c!BAIT(z!9zVmq^f?A+ef(",
            "ln": 15551
          },
          {
            "b": "x\u003c#jbwDkRtvpRVBq/)4]zF5@ZwPRoUvrlh:lV)A-z/YSmC}IE5ze:AhwO#Qhe[w^m0afhzB7Fu(yYEyVB97#g0af?^yH}w-q!p5tCW\u003er7BzkVh090#EzGx=nB7D$0wP@lmzGx-dBs{gbz/bLOA:-\u003cbAbP/ee\u003c:X{y?bekB8L{@rb#z+B8V5swIc\u003e(B8Mhwv}xZlyiarh090#EzGx=nB7D%#z!a0bwPGFsB8L{@q*ACawO\u003c4{wPPK}BAzE4lUG[G06AC!uTEn+x(4r\u003eASx6EB8a6=vqf*{ASwQvBu$aVx(){b04}=6z/L?RD2[7sz7Xj\u003cvp%E@B98baA@Yc:B97#ge(D?fBzkP6e\u003c\u003cL]Aa%c1A-lK\u0026C4\u003eC$A@Xr^g*:QixLzI/lV)A-z/YSmC}IE5ze:AhwO#Qhe]tfwvj(qo07g)Hx(w6bBA]Gaz/6DizE)ZcB1RrvBn",
            "ln": 15984
          },
          {
            "b": "07.iNA7BLGwmY!507.iNA8Hm!B.bSonm=juwPz?(xjVf(l$G$sB.(d$wPq\u003c7B96@:vpS}\u0026A@XNIA+PDkx([RMlVl*Xz/fc7BAmBJzE^Z8x(n3l07gWxv{%DVq!o#-vqGU7wLV=IwN//Zl$HBJA+O@#x)Kt^vRPE:Bo2l+B97#ge(2#107QQxqE%](y\u0026/UQwPQ*YB9hqv090#EzGx=nB7D%{BAzE?y?WD#Bo2@+BydyNzGGDcBo2lYA+PA7lVl\u003c:wO#O\u0026now@)lVl\u003c:wO#O\u0026v@DmbwO#O\u0026wO#3$z!T9h090#MzbUK+A=.pNB8L}-z/f-fA=.pQz*2X!wQ5p%l$HgyC(RhZwO+!207g)Hx(w6bBA)\u0026^000%70cFo-0b8vJ0ce6N0d1SN0cwiP0b?\u003cP001J50a=dF0aV7G0b?\u003cK0b.^U0cnb[0cwiV0bzNC0b.=\u00260ce6Z0b.=\u0026001fJ0b}{S0bITH0aM1q0cwiP0b?\u003cP051s!0cncU0b.=p07A71",
            "ln": 16499
          },
          {
            "b": "0000000000000000000000000000000000000000000000000000000000000ak^b3\u0026*ncKtl!o00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
            "ln": 17872
          }
        ],
        "depth": 1,
        "facts": {
          "imp": [
            [
              "mscoree",
              "CorDllMain"
            ]
          ],
          "sec": [
            [
              ".text",
              512,
              17408,
              5.63,
              "r-x"
            ],
            [
              ".reloc",
              17920,
              512,
              0.08,
              "r--"
            ]
          ],
          "metrics": {
            "pe": {
              "checksum": 0,
              "headers_size": 512,
              "checksum_valid": 0,
              "clr.is_il_only": 1,
              "checksum_stripped": 1,
              "computed_checksum": 75132,
              "headers_size_ratio": 0.03,
              "prose_section_count": 0,
              "reloc_overhang_bytes": 500,
              "reloc_overhang_ratio": 0.98,
              "clr.is_32bit_required": 0,
              "bss_like_section_count": 0,
              "clr.is_32bit_preferred": 0,
              "clr.strong_name_signed": 0,
              "section_overflow_count": 0,
              "clr.is_native_entrypoint": 0,
              "misaligned_section_count": 0,
              "clr.managed_resource_count": 9,
              "base_relocation_block_count": 1,
              "base_relocation_entry_count": 1,
              "clr.managed_resource_max_size": 2894,
              "declared_data_directory_count": 5,
              "executable_prose_section_count": 0,
              "clr.managed_resource_max_entropy": 5.19,
              "directory_section_mismatch_count": 0
            },
            "file": {
              "size": 18432,
              "entropy": 5.52
            },
            "binary": {
              "is_pie": 1,
              "code_entropy": 5.63,
              "string_count": 147,
              "entropy_variance": 7.7,
              "avg_string_length": 74.27,
              "max_string_length": 2081,
              "peak_region_bytes": 6144,
              "code_to_data_ratio": 1,
              "peak_region_entropy": 5.54,
              "string_length_stddev": 269.83,
              "largest_section_ratio": 0.94,
              "sentence_string_count": 23,
              "sentence_string_ratio": 0.16,
              "high_entropy_string_count": 0
            },
            "imports": {
              "count": 1
            },
            "sections": {
              "count": 2,
              "code_size": 17408,
              "entropy_max": 5.63,
              "entropy_mean": 2.86,
              "name_entropy": 2.91,
              "writable_count": 0,
              "executable_count": 1,
              "nonstandard_count": 0,
              "executable_writable_count": 0
            },
            "dependencies": {
              "count": 1
            }
          }
        },
        "id": 3,
        "mol": "H(Cm)Md(Bi)",
        "path": "Curiosity.Components.26.8.4721.nupkg!!lib/netstandard2.0/Curiosity.Components.dll",
        "pid": 0,
        "risk": 3,
        "sha": "5071d73c13767bb7d919b18d7ca672eca5d4dc6f02156a64185a7df31fe0a27f",
        "size": 18432,
        "traits": [
          {
            "id": "metadata/binary/framework::clr-runtime-header",
            "conf": 1.0,
            "crit": 2,
            "desc": "PE CLR header (COM descriptor)"
          },
          {
            "id": "metadata/binary/framework::dotnet-metadata",
            "conf": 1.0,
            "crit": 2,
            "desc": ".NET metadata root signature (BSJB)",
            "spans": [
              [
                13968,
                0
              ]
            ]
          },
          {
            "id": "metadata/binary/metrics/entropy::code-entropy-at-most-7-5",
            "conf": 0.7,
            "crit": 1,
            "desc": "Code entropy is 7.5 or lower",
            "spans": [
              [
                0,
                0
              ]
            ]
          },
          {
            "id": "metadata/build/reproducible::pe-reproducible-build",
            "conf": 1.0,
            "crit": 2,
            "desc": "Built with /Brepro (deterministic)"
          },
          {
            "id": "metadata/binary/anomaly/provenance::pe-far-future-timestamp",
            "conf": 0.95,
            "crit": 2,
            "desc": "PE COFF timestamp encodes a future date"
          },
          {
            "id": "metadata/binary/layout::pe-no-signature-record",
            "conf": 0.95,
            "crit": 3,
            "desc": "PE has no signature record"
          },
          {
            "id": "micro-behaviors/communications/http/client/managed::httpclient",
            "conf": 0.82,
            "crit": 3,
            "desc": "System.Net.Http.HttpClient type reference",
            "spans": [
              [
                4019,
                27
              ],
              [
                16669,
                11
              ]
            ]
          },
          {
            "id": "micro-behaviors/communications/http/client/managed::postasync",
            "atk": "T1071.001",
            "conf": 0.88,
            "crit": 3,
            "desc": ".NET asynchronous HTTP POST method",
            "spans": [
              [
                4561,
                9
              ]
            ]
          }
        ],
        "type": "pe"
      },
      {
        "ctx": [
          {
            "b": "DM)3hz/ZhBBy/qkiWeD:xjVfeefX$uzdK[Lb13G[x(w6bBA]Gaz/6DizE)ZcB0rdVC4CYnx(v(kiWcsqe\u0026UEuh.)9iefY4QvR/+1xK$ZYvrrXOf/I6Kf/I9FgbyE9vp%dUwmo+8b04zeb5yXfwPI%2C4CYnx(v(kiWcsqe\u0026UEuh.)fkefXIBBzbPkb03]nB-Ihm",
            "ln": 0,
            "col": 1,
            "line": 1
          }
        ],
        "depth": 1,
        "facts": {
          "metrics": {
            "file": {
              "size": 859,
              "entropy": 4.87
            },
            "binary": {
              "peak_region_bytes": 859,
              "peak_region_entropy": 4.87
            },
            "registry": {
              "age_days": 0,
              "maintainers": 1,
              "published_at": 1788179223,
              "releases_24h": 9,
              "releases_48h": 9,
              "is_deprecated": 0,
              "release_count": 2027,
              "downloads_total": 475222,
              "version_removed": 0,
              "package_age_days": 1300,
              "first_published_at": 1675795385,
              "vulnerability_count": 0,
              "previous_published_at": 1788177129,
              "days_since_previous_release": 0
            }
          }
        },
        "id": 6,
        "mol": "Md",
        "path": "Curiosity.Components@26.8.4721.registry.json",
        "pid": 0,
        "rel": "registry",
        "risk": 1,
        "role": "sidecar",
        "sha": "dcc4ca3af94ed1e9c5feadb70793fca44a35710a52ce76eee483a2cc09326906",
        "size": 859,
        "traits": [
          {
            "id": "metadata/registry::publish-burst-24h",
            "conf": 1.0,
            "crit": 3,
            "desc": "Three releases published within 24 hours",
            "spans": [
              [
                0,
                28
              ]
            ]
          },
          {
            "id": "metadata/registry::freshly-published",
            "conf": 1.0,
            "crit": 3,
            "desc": "Release published within seven days",
            "spans": [
              [
                0,
                24
              ]
            ]
          }
        ],
        "type": "registry"
      }
    ],
    "rev": "479f3",
    "v": "8"
  }
}