{ "llm": { "conf": 0.9999405, "grade": "hostile", "model": "Qwen/Qwen3.8-27B", "before": { "lvl": 15000, "prob": 0.9999112, "class": "benign" }, "outcome": "hostile", "interpretation": "Malicious preinstall script" }, "ml": { "v": "7", "eng": "2.12.0-beta.1", "lvl": 25, "conf": 92, "mods": [ { "cls": 0, "raw": 0.9986216, "rte": "az", "prob": 0.9986216 }, { "cls": 0, "raw": 0.9999112, "rte": "az/npm", "prob": 0.9999112 } ], "prob": 0.9999405, "files": [ { "id": 0, "lvl": 25, "conf": 92, "prob": 0.9999405145645142, "type": "npm" }, { "id": 1, "lvl": -1, "conf": 0, "prob": 0.000011612971320573706, "type": "text" }, { "id": 2, "lvl": -1, "conf": 0, "prob": 0.000015676021575927734, "type": "javascript" }, { "id": 3, "lvl": -1, "conf": 0, "prob": 0.000010102987289428711, "type": "javascript" }, { "id": 4, "lvl": -1, "conf": 0, "prob": 0.0000095367431640625, "type": "javascript" }, { "id": 5, "lvl": -1, "conf": 0, "prob": 0.000021060308426967822, "type": "javascript" }, { "id": 6, "lvl": -1, "conf": 0, "prob": 0.0000165402889251709, "type": "javascript" }, { "id": 7, "lvl": -1, "conf": 0, "prob": 0.000018328428268432617, "type": "javascript" }, { "id": 8, "lvl": -1, "conf": 0, "prob": 0.000013490517630998511, "type": "javascript" }, { "id": 9, "lvl": -1, "conf": 0, "prob": 0.020529409870505333, "type": "package.json" }, { "id": 10, "lvl": -1, "conf": 0, "prob": 0.00001574555972183589, "type": "markdown" }, { "id": 11, "lvl": -1, "conf": 0, "prob": 0.000014970700249250513, "type": "registry" }, { "id": 12, "lvl": -1, "conf": 0, "prob": 0.000014940897926862817, "type": "registry" }, { "id": 13, "lvl": -1, "conf": 0, "prob": 0.000013361374840314966, "type": "registry" }, { "id": 14, "lvl": -1, "conf": 0, "prob": 0.000014454126358032227, "type": "registry" }, { "id": 15, "lvl": -1, "conf": 0, "prob": 0.000014940897926862817, "type": "registry" }, { "id": 16, "lvl": -1, "conf": 0, "prob": 0.000014454126358032227, "type": "registry" }, { "id": 17, "lvl": -1, "conf": 0, "prob": 0.000014940897926862817, "type": "registry" }, { "id": 18, "lvl": -1, "conf": 0, "prob": 0.000013361374840314966, "type": "registry" }, { "id": 19, "lvl": -1, "conf": 0, "prob": 0.000014454126358032227, "type": "registry" }, { "id": 20, "lvl": -1, "conf": 0, "prob": 0.000013391177162702661, "type": "registry" }, { "id": 21, "lvl": -1, "conf": 0, "prob": 0.000013391177162702661, "type": "registry" }, { "id": 22, "lvl": -1, "conf": 0, "prob": 0.000013361374840314966, "type": "registry" }, { "id": 23, "lvl": -1, "conf": 0, "prob": 0.000013391177162702661, "type": "registry" }, { "id": 24, "lvl": -1, "conf": 0, "prob": 0.000017414489775546826, "type": "registry" }, { "id": 25, "lvl": -1, "conf": 0, "prob": 0.000013361374840314966, "type": "registry" }, { "id": 26, "lvl": -1, "conf": 0, "prob": 0.000014940897926862817, "type": "registry" }, { "id": 27, "lvl": -1, "conf": 0, "prob": 0.000013361374840314966, "type": "registry" }, { "id": 28, "lvl": -1, "conf": 0, "prob": 0.000013391177162702661, "type": "registry" }, { "id": 29, "lvl": -1, "conf": 0, "prob": 0.000013391177162702661, "type": "registry" }, { "id": 30, "lvl": -1, "conf": 0, "prob": 0.000017404556274414062, "type": "registry" }, { "id": 31, "lvl": -1, "conf": 0, "prob": 0.000014940897926862817, "type": "registry" }, { "id": 32, "lvl": -1, "conf": 0, "prob": 0.000013361374840314966, "type": "registry" }, { "id": 33, "lvl": -1, "conf": 0, "prob": 0.000013391177162702661, "type": "registry" }, { "id": 34, "lvl": -1, "conf": 0, "prob": 0.000013361374840314966, "type": "registry" }, { "id": 35, "lvl": -1, "conf": 0, "prob": 0.000013361374840314966, "type": "registry" }, { "id": 36, "lvl": -1, "conf": 0, "prob": 0.000013391177162702661, "type": "registry" }, { "id": 37, "lvl": -1, "conf": 0, "prob": 0.000017414489775546826, "type": "registry" }, { "id": 38, "lvl": -1, "conf": 0, "prob": 0.000013391177162702661, "type": "registry" }, { "id": 39, "lvl": -1, "conf": 0, "prob": 0.000017414489775546826, "type": "registry" } ], "version": "v18.18", "analyzed_at": "2026-10-11T09:54:50Z" }, "path": "exptredd-5.2.4.tgz", "raw": { "fetched": [ { "kind": "dependency", "cached": true, "locator": "pkg:npm/accepts", "outcome": "skipped", "fetched_at": 1791712487, "source_offset": 890, "source_sha256": "68badcae4871d4d91d2a54373fd50e8ad4e98b6effb6ae3db13f856af9bead57", "content_sha256": "9a790de7e9c8636e53410b0334f3311c4cd616e1dc0582e47d1ae2c98504a5e8" }, { "kind": "dependency", "cached": true, "locator": "pkg:npm/body-parser", "outcome": "skipped", "fetched_at": 1791712487, "source_offset": 915, "source_sha256": "68badcae4871d4d91d2a54373fd50e8ad4e98b6effb6ae3db13f856af9bead57", "content_sha256": "031d7f6c5142e31be91d36a43f541f02a505943e3b871aa44ef5fb6939be258e" }, { "kind": "dependency", "cached": true, "locator": "pkg:npm/content-disposition", "outcome": "skipped", "fetched_at": 1791712487, "source_offset": 944, "source_sha256": "68badcae4871d4d91d2a54373fd50e8ad4e98b6effb6ae3db13f856af9bead57", "content_sha256": "8d3dc84ba5e21d73703dbb3ae74f5a44cd1daa15a86c519470f5b6c76d9a23d2" }, { "kind": "dependency", "cached": true, "locator": "pkg:npm/content-type", "outcome": "skipped", "fetched_at": 1791712487, "source_offset": 981, "source_sha256": "68badcae4871d4d91d2a54373fd50e8ad4e98b6effb6ae3db13f856af9bead57", "content_sha256": "db3e3f71df10b2b226a4e9abdc95a47aaa725e499dcee72099beddedcf9e1948" }, { "kind": "dependency", "cached": true, "locator": "pkg:npm/cookie", "outcome": "skipped", "fetched_at": 1791712487, "source_offset": 1011, "source_sha256": "68badcae4871d4d91d2a54373fd50e8ad4e98b6effb6ae3db13f856af9bead57", "content_sha256": "3a23fa8b23e04f3f1e8d24d837aa42b5b6a2bffe94518137330360a3ef3b3366" }, { "kind": "dependency", "cached": true, "locator": "pkg:npm/cookie-signature", "outcome": "skipped", "fetched_at": 1791712487, "source_offset": 1035, "source_sha256": "68badcae4871d4d91d2a54373fd50e8ad4e98b6effb6ae3db13f856af9bead57", "content_sha256": "03b54edba92ec9096abf1c66d817d51a1cd99f8851683de1b49f13155161f5c0" }, { "kind": "dependency", "cached": true, "locator": "pkg:npm/debug", "outcome": "skipped", "fetched_at": 1791712487, "source_offset": 1069, "source_sha256": "68badcae4871d4d91d2a54373fd50e8ad4e98b6effb6ae3db13f856af9bead57", "content_sha256": "c803a8ca9b835b7a75f7150ee52f7f640675515bafbe8f5da78fcc0ae12914ac" }, { "kind": "dependency", "cached": true, "locator": "pkg:npm/depd", "outcome": "skipped", "fetched_at": 1791712487, "source_offset": 1092, "source_sha256": "68badcae4871d4d91d2a54373fd50e8ad4e98b6effb6ae3db13f856af9bead57", "content_sha256": "28a58a2056093441f1d00d677d95918d2e4b3e98bac86237159101cae315d4a7" }, { "kind": "dependency", "cached": true, "locator": "pkg:npm/encodeurl", "outcome": "skipped", "fetched_at": 1791712487, "source_offset": 1114, "source_sha256": "68badcae4871d4d91d2a54373fd50e8ad4e98b6effb6ae3db13f856af9bead57", "content_sha256": "9b2e418b8851b8f9e7a13d5ada3bd4d3c5ef042885867261f556347d4bbefb29" }, { "kind": "dependency", "cached": true, "locator": "pkg:npm/escape-html", "outcome": "skipped", "fetched_at": 1791712487, "source_offset": 1141, "source_sha256": "68badcae4871d4d91d2a54373fd50e8ad4e98b6effb6ae3db13f856af9bead57", "content_sha256": "a101155c3cbdfb1e4f98f2f83c8b5e392db6accfa606df0eba8b87a5762b0366" }, { "kind": "dependency", "cached": true, "locator": "pkg:npm/etag", "outcome": "skipped", "fetched_at": 1791712487, "source_offset": 1170, "source_sha256": "68badcae4871d4d91d2a54373fd50e8ad4e98b6effb6ae3db13f856af9bead57", "content_sha256": "f6a96c78a973d2ab660c9efeee6aa74a399cd9e770625ba1ed95e1aca9fd0faf" }, { "kind": "dependency", "cached": true, "locator": "pkg:npm/finalhandler", "outcome": "skipped", "fetched_at": 1791712487, "source_offset": 1192, "source_sha256": "68badcae4871d4d91d2a54373fd50e8ad4e98b6effb6ae3db13f856af9bead57", "content_sha256": "22949bfc51a620b3598bbe67d65619a9efd781d52704a38d7ba675e248a8b872" }, { "kind": "dependency", "cached": true, "locator": "pkg:npm/fresh", "outcome": "skipped", "fetched_at": 1791712487, "source_offset": 1222, "source_sha256": "68badcae4871d4d91d2a54373fd50e8ad4e98b6effb6ae3db13f856af9bead57", "content_sha256": "25e676f9f00a8dddc7214f46258b71c0188a0ee004903f05109ecfce9a5a844c" }, { "kind": "dependency", "cached": true, "locator": "pkg:npm/http-errors", "outcome": "skipped", "fetched_at": 1791712487, "source_offset": 1245, "source_sha256": "68badcae4871d4d91d2a54373fd50e8ad4e98b6effb6ae3db13f856af9bead57", "content_sha256": "ad62bbb11baf079699a3f269ed089efdb589be16083ceed94a1117801e1a6c61" }, { "kind": "dependency", "cached": true, "locator": "pkg:npm/merge-descriptors", "outcome": "skipped", "fetched_at": 1791712487, "source_offset": 1274, "source_sha256": "68badcae4871d4d91d2a54373fd50e8ad4e98b6effb6ae3db13f856af9bead57", "content_sha256": "880a3b47ccffbacb13d305f808be60bb48a772828a36b6f6188c911f1f76a409" }, { "kind": "dependency", "cached": true, "locator": "pkg:npm/mime-types", "outcome": "skipped", "fetched_at": 1791712487, "source_offset": 1309, "source_sha256": "68badcae4871d4d91d2a54373fd50e8ad4e98b6effb6ae3db13f856af9bead57", "content_sha256": "9cd4a7a9618e0e46d3d02aeccb932b1ab71a4bcaa7f8fc36a2a6654fe3e9635f" }, { "kind": "dependency", "cached": true, "locator": "pkg:npm/on-finished", "outcome": "skipped", "fetched_at": 1791712487, "source_offset": 1337, "source_sha256": "68badcae4871d4d91d2a54373fd50e8ad4e98b6effb6ae3db13f856af9bead57", "content_sha256": "f64d42f1049c386cdac5204737e09564271639b2b7d203a3ea07ec07d5ddbd0a" }, { "kind": "dependency", "cached": true, "locator": "pkg:npm/once", "outcome": "skipped", "fetched_at": 1791712487, "source_offset": 1366, "source_sha256": "68badcae4871d4d91d2a54373fd50e8ad4e98b6effb6ae3db13f856af9bead57", "content_sha256": "cf51460ba370c698f68b976e514d113497339ba018b6003e8e8eb569c6fccfcf" }, { "kind": "dependency", "cached": true, "locator": "pkg:npm/parseurl", "outcome": "skipped", "fetched_at": 1791712487, "source_offset": 1388, "source_sha256": "68badcae4871d4d91d2a54373fd50e8ad4e98b6effb6ae3db13f856af9bead57", "content_sha256": "56ef4bfa11e097ce8196b26fa04b42d6091c32498fcab4478e6dd298435f021a" }, { "kind": "dependency", "cached": true, "locator": "pkg:npm/proxy-addr", "outcome": "skipped", "fetched_at": 1791712487, "source_offset": 1414, "source_sha256": "68badcae4871d4d91d2a54373fd50e8ad4e98b6effb6ae3db13f856af9bead57", "content_sha256": "10ddf91dd6bd9d0e26ca9ef9ad2128848f2caae918e334d1eab3baafcfd46478" }, { "kind": "dependency", "cached": true, "locator": "pkg:npm/qs", "outcome": "skipped", "fetched_at": 1791712487, "source_offset": 1442, "source_sha256": "68badcae4871d4d91d2a54373fd50e8ad4e98b6effb6ae3db13f856af9bead57", "content_sha256": "c68a7ecaac7ba92f8ee7818ad3bc0556b463ba70fcb46125ee03b60c001034d1" }, { "kind": "dependency", "cached": true, "locator": "pkg:npm/range-parser", "outcome": "skipped", "fetched_at": 1791712487, "source_offset": 1463, "source_sha256": "68badcae4871d4d91d2a54373fd50e8ad4e98b6effb6ae3db13f856af9bead57", "content_sha256": "51b79ec072db6788b132680256e9e733af8bb091df4f8ce8562ca631118f0fae" }, { "kind": "dependency", "cached": true, "locator": "pkg:npm/router", "outcome": "skipped", "fetched_at": 1791712487, "source_offset": 830, "source_sha256": "68badcae4871d4d91d2a54373fd50e8ad4e98b6effb6ae3db13f856af9bead57", "content_sha256": "b144af37b39a9517f7a89f1d867e9c2cf29f13f4147d3e80c499fe6ffab69461" }, { "kind": "dependency", "cached": true, "locator": "pkg:npm/send", "outcome": "skipped", "fetched_at": 1791712487, "source_offset": 1517, "source_sha256": "68badcae4871d4d91d2a54373fd50e8ad4e98b6effb6ae3db13f856af9bead57", "content_sha256": "d354b49eefa6b2f504680908c5635693c6a8e600508702a853909a433a14ba21" }, { "kind": "dependency", "cached": true, "locator": "pkg:npm/serve-static", "outcome": "skipped", "fetched_at": 1791712487, "source_offset": 1539, "source_sha256": "68badcae4871d4d91d2a54373fd50e8ad4e98b6effb6ae3db13f856af9bead57", "content_sha256": "36d4f72bb59372eb18202fee25ff3d8bf46655f0121830fbe32e32cbdc625f43" }, { "kind": "dependency", "cached": true, "locator": "pkg:npm/statuses", "outcome": "skipped", "fetched_at": 1791712487, "source_offset": 1569, "source_sha256": "68badcae4871d4d91d2a54373fd50e8ad4e98b6effb6ae3db13f856af9bead57", "content_sha256": "ca800a24710488b568f4e73e8f570dd6b911c122cbf42b06930dee7c25949fe0" }, { "kind": "dependency", "cached": true, "locator": "pkg:npm/type-is", "outcome": "skipped", "fetched_at": 1791712487, "source_offset": 1595, "source_sha256": "68badcae4871d4d91d2a54373fd50e8ad4e98b6effb6ae3db13f856af9bead57", "content_sha256": "07281459f7c64ef5a0e35db295d6461920560b9d64bcfbd63c8222feaa27e231" }, { "kind": "dependency", "cached": true, "locator": "pkg:npm/vary", "outcome": "skipped", "fetched_at": 1791712487, "source_offset": 1620, "source_sha256": "68badcae4871d4d91d2a54373fd50e8ad4e98b6effb6ae3db13f856af9bead57", "content_sha256": "7378860671377a35e7a443ecfdca0745cfd066f595c90d581b827defea246e71" } ], "files": [ { "id": 0, "mol": "O₂(C₂S₄)H₅(Cm₁₇Db₇Os₃Po₃U)Md₃(In₅Pa₁₁)", "sha": "19575cae007170a942b37cc12faf166ff9a486ecddfdce3100bc04bdd6f5581a", "path": "exptredd-5.2.4.tgz", "refs": [ { "to": "expressjs/express", "off": 0, "kind": "repository" } ], "risk": 379, "size": 22576, "type": "npm", "facts": { "metrics": { "file": { "size": 22576, "entropy": 7.99 }, "parse": { "error_count": 1 }, "binary": { "peak_region_bytes": 22528, "peak_region_entropy": 7.82 }, "consistency": { "self_dependency": 0, "name_repo_mismatch": 1, "unused_runtime_deps": 0 } } }, "ident": { "name": { "value": "exptredd", "source": "npm.name", "verified": false }, "urls": [ { "url": "expressjs/express", "kind": "repository", "source": "npm.repository.url" }, { "url": "https://expressjs.com/", "kind": "homepage", "source": "npm.homepage" } ], "trust": "unsigned", "emails": [ "tj@vision-media.ca" ], "authors": [ { "name": "TJ Holowaychuk", "role": "author", "email": "tj@vision-media.ca", "source": "npm.author" } ], "version": { "value": "5.2.4", "source": "npm.version", "verified": false }, "identifier": { "value": "exptredd", "source": "npm.name", "verified": false } }, "traits": [ { "id": "micro-behaviors/communications/http/header/custom::referer-header-context", "conf": 0.8, "crit": 3, "desc": "Header text near Referer or Referrer", "from": [ { "file": 5 } ] }, { "id": "micro-behaviors/process/create/shell/pipeline::preinstall-curl-http-pipe-node", "conf": 0.99, "crit": 3, "desc": "Preinstall curls HTTP content into Node stdin" }, { "id": "metadata/package/files/runtime::javascript-utils-basename", "conf": 0.85, "crit": 3, "desc": "JavaScript utils.js basename", "from": [ { "file": 7 } ] }, { "id": "metadata/import/npm/fs::fs", "conf": 0.95, "crit": 3, "desc": "imports node:fs", "from": [ { "file": 8 } ] }, { "id": "metadata/import/npm/finalhandler::finalhandler", "conf": 0.95, "crit": 2, "desc": "imports finalhandler", "from": [ { "file": 2 } ] }, { "id": "metadata/lang/javascript-features::cjs-exports-pattern", "conf": 0.6, "crit": 3, "desc": "Defines CommonJS named exports", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/os/network/webextension::proxy-host-assignment-from-call", "conf": 0.9, "crit": 3, "desc": "Proxy host assigned from a call", "from": [ { "file": 5 } ] }, { "id": "metadata/package/publishing::has-funding", "conf": 0.85, "crit": 3, "desc": "Package has funding information" }, { "id": "micro-behaviors/data/format/html::markdown-remote-image-source", "conf": 0.9, "crit": 3, "desc": "Markdown references a remote image", "from": [ { "file": 10 } ] }, { "id": "metadata/import/npm/relative/1/view::relative/1/view", "conf": 0.95, "crit": 2, "desc": "imports ./view", "from": [ { "file": 2 } ] }, { "id": "objectives/supply-chain/hidden-payload/exec/archive::readme-download-lure-language", "atk": "T1195.002", "conf": 0.86, "crit": 3, "desc": "README payload/executable download lure language", "from": [ { "file": 10 } ] }, { "id": "metadata/package/scripts/lifecycle::npm-preinstall-node-command", "conf": 0.75, "crit": 3, "desc": "Preinstall command declares Node.js invocation" }, { "id": "metadata/import/npm/debug::debug", "conf": 0.95, "crit": 2, "desc": "imports debug", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/os/module/require::cjs-local-require-call", "conf": 0.9, "crit": 3, "desc": "CommonJS local-module require call", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/communications/url/reference::javascript-comment-url-reference", "conf": 0.9, "crit": 3, "desc": "JavaScript comment contains a URL", "from": [ { "file": 6 } ] }, { "id": "metadata/package/repository::has-repository-field", "conf": 0.9, "crit": 2, "desc": "package.json declares repository metadata" }, { "id": "micro-behaviors/communications/http/authorization-header::x-api-key-header-map-entry", "atk": "T1071.001", "mbc": "C0002", "conf": 0.88, "crit": 3, "desc": "Configures an X-API-Key request header", "from": [ { "file": 6 } ] }, { "id": "micro-behaviors/communications/http/header/content-type::content-type-header", "conf": 0.5, "crit": 3, "desc": "References an HTTP Content-Type header", "from": [ { "file": 5 } ] }, { "id": "micro-behaviors/communications/http/cookie-store::cookie-helper-clear-function", "atk": "T1539", "mbc": "C0002", "conf": 1.0, "crit": 3, "desc": "Defines clearCookie helper", "from": [ { "file": 6 } ] }, { "id": "micro-behaviors/communications/http/curl::npm-preinstall-curl", "conf": 0.8, "crit": 3, "desc": "Preinstall script references curl" }, { "id": "micro-behaviors/communications/http/download/package::npm-script-download", "atk": "T1071.001", "mbc": "C0002", "conf": 0.85, "crit": 3, "desc": "npm script fetches an HTTP URL", "from": [ { "off": 2210, "file": 9, "line": 91 } ], "uses": [ 110 ] }, { "id": "micro-behaviors/data/serialize/object::js-serialise", "conf": 0.85, "crit": 3, "desc": "References a serialization-related symbol", "from": [ { "file": 6 } ] }, { "id": "micro-behaviors/communications/http/header/content-type::json-header", "conf": 0.9, "crit": 3, "desc": "References HTTP Content-Type application/json", "from": [ { "file": 5 } ] }, { "id": "metadata/import/package::dep-eslint", "conf": 0.9, "crit": 3, "desc": "Depends on ESLint", "from": [ { "file": 9 } ] }, { "id": "micro-behaviors/communications/http/server/listener::https-createserver-call", "atk": "T1071.001", "mbc": "C0002", "conf": 0.75, "crit": 3, "desc": "Node.js https.createServer()", "from": [ { "file": 2 } ] }, { "id": "objectives/supply-chain/install-hook/scripts/remote-fetch::preinstall-curl-wget-pipe-node-exec", "atk": "T1195.002, T1059.007, T1105", "mbc": "B0024", "conf": 0.98, "crit": 5, "desc": "npm preinstall pipes curl or wget into node", "from": [ { "file": 9 } ], "uses": [ 19, 58, 71 ] }, { "id": "metadata/package/dependencies/manifest/count::npm-dependency-fanout", "conf": 0.85, "crit": 3, "desc": "Package has at least eight runtime deps" }, { "id": "micro-behaviors/communications/http/url/path::image-file-url", "conf": 0.85, "crit": 3, "desc": "HTTP URL targets an image file", "from": [ { "file": 10 } ] }, { "id": "micro-behaviors/data/serialize/schema-object::send-object-argument-text", "conf": 0.8, "crit": 3, "desc": "Send payload uses object or array syntax", "from": [ { "file": 6 } ] }, { "id": "metadata/lang/natural::lang-english--atom-2", "conf": 0.8, "crit": 1, "desc": "English function-word token \"and\"", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/communications/http/content-length::raw-content-length-header", "atk": "T1071.001", "mbc": "C0002", "conf": 0.9, "crit": 3, "desc": "Sets an HTTP Content-Length header", "from": [ { "file": 6 } ] }, { "id": "metadata/package/files/package-json::files-array-present", "conf": 0.92, "crit": 3, "desc": "Package.json declares a files allowlist" }, { "id": "metadata/lang/natural::lang-english--atom-3", "conf": 0.8, "crit": 1, "desc": "English function-word token \"that\"", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/communications/http/request/package::preinstall-download-command-text", "atk": "T1071.001", "mbc": "C0002", "conf": 0.95, "crit": 3, "desc": "Manifest preinstall references curl or wget", "from": [ { "file": 9 } ] }, { "id": "metadata/import/npm/relative/1/response::relative/1/response", "conf": 0.95, "crit": 2, "desc": "imports ./response", "from": [ { "file": 3 } ] }, { "id": "metadata/import/npm/send::send", "conf": 0.95, "crit": 2, "desc": "imports send", "from": [ { "file": 6 } ] }, { "id": "micro-behaviors/communications/http/download/package::preinstall-download-tool", "conf": 0.8, "crit": 3, "desc": "Preinstall script references curl or wget", "from": [ { "file": 9 } ], "uses": [ 19 ] }, { "id": "micro-behaviors/communications/http/request/package::preinstall-leading-curl-command", "atk": "T1071.001", "mbc": "C0002", "conf": 0.9, "crit": 3, "desc": "Manifest preinstall starts with curl command", "from": [ { "file": 9 } ] }, { "id": "micro-behaviors/communications/http/token-auth::custom-token-header", "conf": 0.9, "crit": 3, "desc": "Sets custom X-prefixed token header", "from": [ { "file": 6 } ] }, { "id": "micro-behaviors/communications/http/request/package::preinstall-curl-command", "atk": "T1071.001", "mbc": "C0002", "conf": 0.95, "crit": 3, "desc": "Preinstall script references curl command", "from": [ { "file": 9 } ], "uses": [ 19 ] }, { "id": "objectives/command-and-control/dropper/interpreter-stdin::renamed-package-archived-node-loader", "atk": "T1105,T1059.007,T1195.002", "conf": 0.98, "crit": 5, "desc": "Renamed package preinstall executes archived remote JavaScript", "from": [ { "file": 9 } ], "uses": [ 81, 94, 95 ] }, { "id": "metadata/import/npm/fresh::fresh", "conf": 0.95, "crit": 2, "desc": "imports fresh", "from": [ { "file": 5 } ] }, { "id": "metadata/package/scripts/lifecycle::filtered-raw-preinstall-hook", "conf": 0.88, "crit": 3, "desc": "Raw content contains preinstall hook", "from": [ { "file": 9 } ] }, { "id": "micro-behaviors/communications/http/url/endpoint::npm-preinstall-http-url", "conf": 0.75, "crit": 3, "desc": "Preinstall script contains an HTTP URL" }, { "id": "objectives/supply-chain/install-hook/scripts/import-chain::scripts-preinstall-shell", "atk": "T1195.002", "conf": 0.85, "crit": 3, "desc": "preinstall runs shell command", "from": [ { "file": 9 } ], "uses": [ 36 ] }, { "id": "metadata/import/npm/parseurl::parseurl", "conf": 0.95, "crit": 2, "desc": "imports parseurl", "from": [ { "file": 5 } ] }, { "id": "metadata/import/npm/accepts::accepts", "conf": 0.95, "crit": 2, "desc": "imports accepts", "from": [ { "file": 5 } ] }, { "id": "metadata/package/scripts/lifecycle::raw-preinstall-key", "conf": 0.88, "crit": 3, "desc": "Raw package metadata has preinstall script key", "from": [ { "file": 9 } ] }, { "id": "metadata/import/npm/buffer::buffer", "conf": 0.95, "crit": 3, "desc": "imports node:buffer", "from": [ { "file": 6 } ] }, { "id": "metadata/import/npm/relative/1/application::relative/1/application", "conf": 0.95, "crit": 2, "desc": "imports ./application", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/process/interpreter/node::preinstall-pipe-node", "conf": 0.85, "crit": 3, "desc": "Preinstall pipes command output to Node" }, { "id": "micro-behaviors/data/format/mime::mime-octet-stream", "conf": 0.85, "crit": 3, "desc": "Uses the application/octet-stream MIME type", "from": [ { "file": 6 } ] }, { "id": "metadata/package/scripts/lifecycle::has-preinstall-script", "conf": 0.95, "crit": 3, "desc": "Manifest declares npm preinstall lifecycle hook" }, { "id": "micro-behaviors/data/serialize/json::json-stringify-call", "conf": 0.5, "crit": 3, "desc": "Calls JSON.stringify()", "from": [ { "file": 6 } ] }, { "id": "metadata/import/npm/path::path", "conf": 0.95, "crit": 2, "desc": "imports node:path", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/data/encode/url::encodeuri-call", "conf": 0.7, "crit": 3, "desc": "URL-encodes data via encodeURI", "from": [ { "file": 6 } ] }, { "id": "metadata/import/npm/mime-types::mime-types", "conf": 0.95, "crit": 2, "desc": "imports mime-types", "from": [ { "file": 6 } ] }, { "id": "metadata/import/npm/content-type::content-type", "conf": 0.95, "crit": 2, "desc": "imports content-type", "from": [ { "file": 7 } ] }, { "id": "micro-behaviors/process/interpreter/node::npm-preinstall-stdin-pipe", "conf": 0.85, "crit": 3, "desc": "Preinstall pipes command output into Node" }, { "id": "micro-behaviors/process/create/vcs/git::git-clone-command", "atk": "T1105", "conf": 0.9, "crit": 3, "desc": "Git clone command", "from": [ { "file": 10 } ] }, { "id": "metadata/import/npm/on-finished::on-finished", "conf": 0.95, "crit": 2, "desc": "imports on-finished", "from": [ { "file": 6 } ] }, { "id": "metadata/import/npm/net::net", "conf": 0.95, "crit": 3, "desc": "imports node:net", "from": [ { "file": 5 } ] }, { "id": "metadata/package/repository::repo-owner-project-coordinate", "conf": 0.9, "crit": 3, "desc": "Repository uses owner/project coordinate" }, { "id": "micro-behaviors/communications/http/request/client::xmlhttprequest-word", "conf": 0.4, "crit": 3, "desc": "References the XMLHttpRequest HTTP client", "from": [ { "file": 5 } ] }, { "id": "metadata/import/npm/cookie::cookie", "conf": 0.95, "crit": 2, "desc": "imports cookie", "from": [ { "file": 6 } ] }, { "id": "micro-behaviors/data/control-flow/module-exec::js-empty-module-exports", "conf": 0.8, "crit": 3, "desc": "CommonJS module exports an empty object", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/communications/http/header/custom::x-forwarded-host", "conf": 0.9, "crit": 3, "desc": "X-Forwarded-Host proxy header", "from": [ { "file": 5 } ] }, { "id": "metadata/import/npm/relative/1/utils::relative/1/utils", "conf": 0.95, "crit": 2, "desc": "imports ./utils", "from": [ { "file": 2 } ] }, { "id": "metadata/package/files/included::package-json-basename", "conf": 0.95, "crit": 3, "desc": "Filename is package.json", "from": [ { "file": 9 } ] }, { "id": "objectives/supply-chain/install-hook/scripts/remote-fetch::npm-repo-mismatch-preinstall-remote-pipe-exec", "atk": "T1195.002,T1105,T1059.007", "mbc": "B0024", "conf": 0.99, "crit": 5, "desc": "Foreign repo claim with preinstall curl pipe to node", "from": [ { "file": 9 } ], "uses": [ 25, 95 ] }, { "id": "metadata/import/npm/proxy-addr::proxy-addr", "conf": 0.95, "crit": 2, "desc": "imports proxy-addr", "from": [ { "file": 5 } ] }, { "id": "metadata/package/scripts/lifecycle::filtered-preinstall-hook", "conf": 0.85, "crit": 3, "desc": "Has preinstall script hook" }, { "id": "metadata/import/npm/http::http", "conf": 0.95, "crit": 3, "desc": "imports node:http", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/data/control-flow/dispatch::js-named-event-object-emission", "conf": 0.82, "crit": 3, "desc": "Emits object through named JavaScript event", "from": [ { "file": 2 } ] }, { "id": "metadata/import/npm/range-parser::range-parser", "conf": 0.95, "crit": 2, "desc": "imports range-parser", "from": [ { "file": 5 } ] }, { "id": "metadata/lang/natural::lang-english--atom-7", "conf": 0.8, "crit": 1, "desc": "English function-word token \"this\"", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/data/control-flow/dispatch::js-async-named-event-handler", "conf": 0.85, "crit": 3, "desc": "Registers asynchronous named event handler", "from": [ { "file": 2 } ] }, { "id": "supply-chain/install-hook/preinstall", "conf": 0.8, "crit": 3, "desc": "Package has 'preinstall' hook that runs during install" }, { "id": "metadata/lang/natural::lang-english--atom-1", "conf": 0.8, "crit": 1, "desc": "English function-word token \"the\"", "from": [ { "file": 1 } ] }, { "id": "metadata/package/documentation/agent-safety::security-test-documentation-marker", "conf": 0.96, "crit": 3, "desc": "Security heading or confirmation requirement", "from": [ { "file": 10 } ] }, { "id": "metadata/import/npm/http-errors::http-errors", "conf": 0.95, "crit": 2, "desc": "imports http-errors", "from": [ { "file": 6 } ] }, { "id": "micro-behaviors/communications/http/download/package::preinstall-wayback-url", "conf": 0.98, "crit": 3, "desc": "Preinstall references Wayback archived URL" }, { "id": "micro-behaviors/communications/http/url/endpoint::preinstall-archive-replay-url", "conf": 0.99, "crit": 3, "desc": "Preinstall URL replays a third-party origin" }, { "id": "metadata/import/npm/vary::vary", "conf": 0.95, "crit": 2, "desc": "imports vary", "from": [ { "file": 6 } ] }, { "id": "metadata/import/npm/escape-html::escape-html", "conf": 0.95, "crit": 2, "desc": "imports escape-html", "from": [ { "file": 6 } ] }, { "id": "metadata/import/npm/content-disposition::content-disposition", "conf": 0.95, "crit": 2, "desc": "imports content-disposition", "from": [ { "file": 6 } ] }, { "id": "metadata/import/npm/type-is::type-is", "conf": 0.95, "crit": 2, "desc": "imports type-is", "from": [ { "file": 5 } ] }, { "id": "micro-behaviors/os/module/dynamic-load::node-variable-require-call", "conf": 0.88, "crit": 3, "desc": "Requires a module named by a variable", "from": [ { "file": 8 } ] }, { "id": "micro-behaviors/data/control-flow/module-exec::commonjs-module-reexport", "conf": 0.92, "crit": 3, "desc": "CommonJS module re-exports required package", "from": [ { "file": 4 } ] }, { "id": "metadata/import/npm/events::events", "conf": 0.95, "crit": 2, "desc": "imports node:events", "from": [ { "file": 3 } ] }, { "id": "metadata/import/npm/etag::etag", "conf": 0.95, "crit": 2, "desc": "imports etag", "from": [ { "file": 7 } ] }, { "id": "metadata/import/npm/depd::depd", "conf": 0.95, "crit": 2, "desc": "imports depd", "from": [ { "file": 6 } ] }, { "id": "metadata/import/npm/merge-descriptors::merge-descriptors", "conf": 0.95, "crit": 2, "desc": "imports merge-descriptors", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/communications/http/url/forge::public-code-forge-url", "conf": 0.9, "crit": 3, "desc": "References a public code-forge URL", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/communications/http/download/package::preinstall-http-node-pipeline", "conf": 0.99, "crit": 3, "desc": "Preinstall curl response piped into Node" }, { "id": "metadata/package/repository::npm-name-repo-mismatch", "conf": 0.8, "crit": 3, "desc": "Package and repository names differ", "from": [ { "file": 9 } ] }, { "id": "metadata/import/npm/encodeurl::encodeurl", "conf": 0.95, "crit": 2, "desc": "imports encodeurl", "from": [ { "file": 6 } ] }, { "id": "metadata/import/npm/querystring::querystring", "conf": 0.95, "crit": 2, "desc": "imports node:querystring", "from": [ { "file": 7 } ] }, { "id": "metadata/file/profile/markup::reference-guide-section-headings", "conf": 0.97, "crit": 3, "desc": "Reference guide has multiple section headings", "from": [ { "file": 10 } ] }, { "id": "micro-behaviors/communications/socket/connect::node-net-namespace-import", "conf": 0.9, "crit": 3, "desc": "Imports Node net as a namespace", "from": [ { "file": 5 } ] }, { "id": "metadata/import/npm/relative/1/request::relative/1/request", "conf": 0.95, "crit": 2, "desc": "imports ./request", "from": [ { "file": 3 } ] }, { "id": "metadata/package/files/runtime::javascript-family-lib-tree-artifact", "conf": 0.95, "crit": 3, "desc": "JavaScript-family source file under lib", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/communications/email/address::google-consumer-email-domain-suffix", "conf": 0.55, "crit": 3, "desc": "Gmail consumer email domain suffix", "from": [ { "file": 1 } ] }, { "id": "metadata/import/npm/qs::qs", "conf": 0.95, "crit": 2, "desc": "imports qs", "from": [ { "file": 7 } ] }, { "id": "metadata/package/dependencies/manifest/presence::has-runtime-deps", "conf": 0.85, "crit": 3, "desc": "Package declares a runtime dependency", "from": [ { "file": 9 } ] }, { "id": "micro-behaviors/communications/http/server/listener::server", "atk": "T1071.001", "mbc": "C0002", "conf": 0.7, "crit": 3, "desc": "Runs an HTTP server", "from": [ { "file": 2 } ], "uses": [ 113 ] }, { "id": "metadata/import/npm/cookie-signature::cookie-signature", "conf": 0.95, "crit": 2, "desc": "imports cookie-signature", "from": [ { "file": 6 } ] }, { "id": "objectives/command-and-control/dropper/interpreter-stdin::archive-proxied-install-code-execution", "atk": "T1195.002,T1105,T1059.007", "conf": 0.98, "crit": 5, "desc": "Install executes archive-proxied raw source", "from": [ { "file": 9 } ], "uses": [ 19, 52, 58, 123 ] }, { "id": "metadata/import/npm/body-parser::body-parser", "conf": 0.95, "crit": 2, "desc": "imports body-parser", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/communications/http/curl::npm-preinstall-curl-command", "conf": 0.95, "crit": 3, "desc": "npm preinstall script references curl utility" }, { "id": "micro-behaviors/communications/http/download/package::npm-script-curl-download", "atk": "T1071.001", "mbc": "C0002", "conf": 0.85, "crit": 3, "desc": "npm script invokes curl URL" }, { "id": "metadata/import/npm/statuses::statuses", "conf": 0.95, "crit": 2, "desc": "imports statuses", "from": [ { "file": 6 } ] }, { "id": "objectives/command-and-control/dropper/interpreter-stdin::npm-preinstall-archive-replay-node-loader", "atk": "T1195.002,T1105,T1059.007", "mbc": "B0024", "conf": 0.99, "crit": 5, "desc": "npm preinstall executes replayed third-party code through Node stdin", "from": [ { "file": 9 } ], "uses": [ 1, 52, 82 ] }, { "id": "micro-behaviors/communications/http/server/listener::nodejs-http-server", "atk": "T1071.001", "mbc": "C0002", "conf": 1.0, "crit": 2, "desc": "Node.js HTTP server patterns", "from": [ { "off": 13138, "file": 2, "line": 591 } ], "uses": [ 24, 125 ] }, { "id": "micro-behaviors/communications/http/server/middleware::app-router-use-middleware-registration", "conf": 0.85, "crit": 3, "desc": "JavaScript app or router registers middleware", "from": [ { "file": 2 } ] }, { "id": "metadata/import/npm/once::once", "conf": 0.95, "crit": 2, "desc": "imports once", "from": [ { "file": 2 } ] }, { "id": "metadata/package/documentation/package-metadata::readme-code-fence-opens-with-import", "conf": 0.9, "crit": 3, "desc": "README code fence opens with import", "from": [ { "file": 10 } ] }, { "id": "metadata/import/npm/serve-static::serve-static", "conf": 0.95, "crit": 2, "desc": "imports serve-static", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/communications/http/header/content-type::application-json", "conf": 0.65, "crit": 3, "desc": "References the application/json media type", "from": [ { "file": 6 } ] }, { "id": "objectives/command-and-control/dropper/delivery/pipe::preinstall-http-pipe-node", "conf": 0.98, "crit": 4, "desc": "Preinstall pipes HTTP script into Node" }, { "id": "metadata/import/npm/relative/1/lib/express::relative/1/lib/express", "conf": 0.95, "crit": 2, "desc": "imports ./lib/express", "from": [ { "file": 4 } ] }, { "id": "metadata/lang/natural::lang-english--atom-5", "conf": 0.8, "crit": 1, "desc": "English function-word token \"for\"", "from": [ { "file": 1 } ] }, { "id": "metadata/lang/natural::lang-english--atom-6", "conf": 0.8, "crit": 1, "desc": "English function-word token \"with\"", "from": [ { "file": 1 } ] }, { "id": "objectives/command-and-control/dropper/interpreter-stdin::preinstall-archive-raw-node-pipeline", "conf": 0.99, "crit": 4, "desc": "Preinstall archive-proxy raw-source Node pipe" }, { "id": "objectives/supply-chain/impersonation/clone-and-rename::renamed-upstream-package-remote-loader", "atk": "T1195.002", "conf": 0.98, "crit": 5, "desc": "Renamed upstream package declares archived remote install loader", "from": [ { "file": 9 } ], "uses": [ 40, 132 ] }, { "id": "micro-behaviors/communications/http/server/listener::http-createserver-call", "atk": "T1071.001", "mbc": "C0002", "conf": 0.75, "crit": 3, "desc": "Node.js http.createServer()", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/communications/http/url/path::loopback-http-url-reference", "conf": 0.9, "crit": 3, "desc": "References a loopback HTTP URL", "from": [ { "file": 6 } ] }, { "id": "micro-behaviors/data/serialize/schema-object::host-user-object-fields", "conf": 0.9, "crit": 3, "desc": "Host or user object-key syntax", "from": [ { "file": 6 } ] }, { "id": "metadata/lang/natural::lang-english--atom-4", "conf": 0.8, "crit": 1, "desc": "English function-word token \"have\"", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/process/create/vcs/git::public-forge-git-clone", "atk": "T1105", "conf": 0.92, "crit": 3, "desc": "Git clones a public code forge", "from": [ { "off": 6783, "file": 2, "line": 283 }, { "off": 2376, "file": 10, "line": 81 } ], "uses": [ 59, 93 ] }, { "id": "metadata/import/npm/router::router", "conf": 0.95, "crit": 2, "desc": "imports router", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/communications/http/server/route::app-router-get-endpoint", "atk": "T1071.001", "mbc": "C0002", "conf": 0.78, "crit": 3, "desc": "App or router GET route definition", "from": [ { "file": 5 } ] }, { "id": "metadata/package/repository::repository-provenance", "conf": 0.9, "crit": 3, "desc": "Package has identifiable repository provenance", "from": [ { "file": 9 } ], "uses": [ 62 ] }, { "id": "micro-behaviors/ui/window/click::download-attribute-gate", "conf": 0.93, "crit": 3, "desc": "Click handling checks anchor download attribute", "from": [ { "file": 6 } ] }, { "id": "metadata/package/files/archive-member::archive-js-member", "conf": 0.9, "crit": 3, "desc": "Archive member is a JavaScript file" }, { "id": "metadata/package/files/runtime::npm-archive-member-lib-runtime-path", "conf": 1.0, "crit": 3, "desc": "npm archive member under package lib tree" }, { "id": "metadata/file/archive::archive-member-under-10kb", "conf": 0.9, "crit": 3, "desc": "Archive has a sub-10KB member" }, { "id": "metadata/package/documentation/package-metadata::readme-npm-links-exclude-manifest-package", "conf": 0.9, "crit": 3, "desc": "README npm links exclude manifest package" } ] }, { "ctx": [ { "b": "c@:\u003e\u003eawCBbawuGVwO#N2dgczHz/x#xx\u003eIa3asH.GatLS8iw00uf/g1Ln*3Vyy\u0026sJaD1gJgyAL-YycV@RB7]MgeP26fx\u003c\u0026S7vlL2=z/x#xx\u003eIa3asH.GatLS9gC7vof/g1Jz/5{2ax8@}D2dtazxI5.xMOJozddrjwQ5fmwPI{cB3KwPvqfKgv@DiF3pw-JD2^RixMLvBv\u003c@JQfFLyogb7BuavHc\u003cxkz0$avx*.x(!xmAa\u0026*6axJn[B8L}sjy\u0026wMxfZJRzdN*5x(mM]z/]XBv@DiF3joQvA=2JiB7]MgazC)txK#i}vTf8eA:-\u003ccwN)tmw].D]aA7\u003cmv}Yp\u003exjSRpBz\u0026pgzH0vzwPz\u003cgzxJ\u003ebByw)3x(mL\u003cvix5#AcSNAw/#hex(+zrz!s9nvrb{4vqYP#vrlHdv}/v[wN(]]z!0{bwO#P#BzkVhazbt7wPF$xBzbj)cSs}}BA.elwHw]TaARJAwmYg=azCZoBzbkdq/un\u0026CvtJ6aA}KwxM53naAz4mBAh89BzkVhefFUAv@co#x(mL\u003cCwhejz/{dAy?W:2Byxo9z/cXtxK@rbx\u003eIa3B0bNyaA.:pefFCvAcS#SzeS%0w{C{IzdN:2wH[%yBZ/f3B7^9iwncabA+P09By^0CB9g@dx\u003e7Z(B7D)BvqYQez/M$wwO=f9v@Ds2wPF#jw/#hewGT]\u0026w]@l9A+c^AvqYP#Bz?I9wPzT4BrCKlA=VepB0bNyaA}Hqz6i}lwGT]\u0026w]@l9A+cwcB0b7qA=bPjxK$Y%Bz\u0026pjzY\u003catefG1RvRPE:BrCWz3uP@)azbLdy\u0026sJizF784z/f91BzkVhB2\u003cTnra]?=vpBd#wGUG3AcVFrxj#xfzF%Shv}u=\u003ezE:(ixLzJgAaK6bx(!ufz/cXnz//Y6wGV5cvqG:5vR2)XzEWH9wmYo]x(k54y?$k7z/xA4B0bywaAIWmB97\u0026dBzkf1aAhmtBzkVhB0bykaARpdax9h\u003cBA.elwIaq%r7GC2q+]\u003eZs3Y.Maw2GOp/p7\u0026nKM0nasxDNaw2GVefF1=r7G!+r3kmdqC]!Qr9pttmJ:#(sS*vepdcSumoAw:mn)bcpF@rbo\u0026aIPmmnWHnLRSDryxzNm\u003c7b#r3j}ir3j\u003eao?wqMl)bD8axg)2axH\u003cbqBa5SnKVM2pEUW=mn=Gzk#7xBlp\u003c\u003cxr9p:{mOcMOmn)bcmO=]8k{e#\u0026qDcjPrzkXRaw=6op!$1Uave:\u003cawLZcnLR-MnLR=Ao*}/Re^+fBawLYPmoh\u0026Lr3kagk$\u003c@{r7GC2k#*(PpF$alpF@r5pF+g(nK(rJav]p4l}70LavnHtoI4JpoHQ6[pF@r3pfv]\u003eoHhlAefEtDo*IorqY[\u003elawU%cmn+m4nKkWmoI5h^efF1+mn#/DqxOLaave:Bk%[QypFJ3dmJ+5]pe\u003eaSlStPzr8ly\u003eawU(TpGf\u003eNqDDB*mjYMEqB%!UpdDA@qCQ1rawV0pawUDHpF@rbp9q]1pejkBr7P\u003eXaxIclnfy(5mg8%?mPrCPqBIZ7qxO}fmiCPemiCx7awU%cmn+l@ml%QspdFk9nLQycnjsU1pEXq+k#Hc73i", "ln": 0, "col": 1, "line": 1 } ], "depth": 1, "facts": { "metrics": { "file": { "size": 1249, "entropy": 5.28 }, "binary": { "peak_region_bytes": 1024, "peak_region_entropy": 5.23 } } }, "id": 1, "path": "exptredd-5.2.4.tgz!!package/LICENSE", "pid": 1332, "risk": 1, "sha": "95a5762890e5c1c9808921cef095661fc482c5e1f0bba31446ac85595df6237c", "size": 1249, "traits": [ { "id": "micro-behaviors/communications/email/address::gmail-com-email-domain-suffix", "conf": 0.55, "crit": 3, "desc": "Email address suffix @gmail.com", "spans": [ [ 137, 10 ] ] }, { "id": "metadata/lang/natural/vocabulary/content-word::data-access-verb-token", "conf": 0.88, "crit": 1, "desc": "Data-access verb token", "spans": [ [ 298, 0 ] ] }, { "id": "metadata/lang/natural/vocabulary/content-word::english-edit-verb-token", "conf": 0.88, "crit": 1, "desc": "English edit-action verb token", "spans": [ [ 480, 0 ] ] }, { "id": "metadata/lang/natural/vocabulary/function-word::lang-english--atom-1", "conf": 0.8, "crit": 1, "desc": "English function-word token \"the\"", "spans": [ [ 1, 0 ] ] }, { "id": "metadata/lang/natural/vocabulary/function-word::lang-english--atom-2", "conf": 0.8, "crit": 1, "desc": "English function-word token \"and\"", "spans": [ [ 320, 0 ] ] }, { "id": "metadata/lang/natural/vocabulary/function-word::lang-english--atom-5", "conf": 0.8, "crit": 1, "desc": "English function-word token \"for\"", "spans": [ [ 944, 0 ] ] }, { "id": "metadata/lang/natural/vocabulary/function-word::lang-english--atom-6", "conf": 0.8, "crit": 1, "desc": "English function-word token \"with\"", "spans": [ [ 1185, 0 ] ] }, { "id": "metadata/lang/natural/vocabulary/function-word::lang-english--atom-7", "conf": 0.8, "crit": 1, "desc": "English function-word token \"this\"", "spans": [ [ 306, 0 ] ] } ], "type": "text" }, { "analysis_gaps": [ "flow-graph-limited", "flow-call-unavailable", "flow-query-incomplete" ], "ctx": [ { "b": "fdFaLasXHBCYmXmB8}WhdJ?8%AcVFrxj#xnv\u003c@JQfFCHsgb7Bsaxg@Qnn\u0026r.Cvt=bxMX7$asXH3z/x#xx\u003eIa3c$sXGgb7Bsax0b{vqWh^xMOJozddq?asXH3z/x#xx\u003eIa3c$sXGgb7BteIY1mh6tq9B.tJ0B09?-A+PPpz/xx3AV!B$y\u0026:Jj3lQ/vo?wqboLF0FzGxx13lQ/K3jne6B7DFnBAh89BsfcS3ni\u003eU3lQ/vo(BM+y?j-1wPhi#wmYT*x\u003equr3lQ/vkYy:TC42G73lQ/K3jp@+AV!$dzEEu{vqYQ(wPw[RaAz4kB.L(cc)@RvzEEu{vqYQ(wPxdEi%{dtAV![7vS=rajS[=RADL#owHF{pwNY^{cN*C\u003ewQ5fmwPI]Nvq{g4x\u003e7N[x(v(pdlv(Wvr9F\u003ex\u003eqGhjS[=RADL#owHF]UflR5vCpa?33u/\u0026#azt\u003esA3dp^A+flkx(W=kcVi\u003ckwJBHDBz@PRi%{dtAV/jgBzbP6B09Q*A+flkx(W=kcOv5{BzkMjcN*V+wPRQ7wof*tC42zlv@Dj6x(4uHrafzZjS[=RADL#owHF]UflIwJy\u0026Z%Me[n*pAa%c1mo0Ydi%{dtAV!\u003egze:i9wL)OYA^pF\u0026A=U/jauZ\u0026/wPq\u003cbA+cT", "ln": 0, "col": 1, "line": 1 }, { "b": "c){S2B-.tlB0\u0026y?v@Dj6x(4uWA=(CBi%{dtAV/ylB8L(rwGTbUA+flkx(W=kcVi\u003ckwJB^sBz93Je]\u003eJAz!%Pdi%{dtAV/prv}u=CaAz4kB.L(cc)@}Jv}v2p3u/\u0026#ax0c2By/FnjS[=RADL#owHF{Dz/{ekAWJp$3jnBodHEpFawD=+B.\u003eRiC42A9vpB4:B1N!xdJ*#}A+PY9By+!4dLzboC42zlB8kM2wGTbUl2}0OC}K5Rz//]tD2NsEB8kM2wJHlxvr9G5y*?BcwO@RN", "ln": 568, "col": 27, "line": 23 }, { "b": "wIdOhvrsNr3ni\u003eU3lQ/vl2Z^Vx\u003e7N[x(v(iAb](sz/*nzwIarjdLzboC42zlvq{fdjS[rXAbP=sB09Q*zeS%cy?kkgCYmOwBAnM/aBwI#3jnBodHEpFaxz]\u003ex\u003c\u003eE!wGUP6AV/EAB-RTEAb](wC{3*sxK#i#Byx5%wGUC\u003cv@0Vaz/6D4Bp6cuav6)^x)9{bwEoLffa55fvr9GjA=(CBp\u0026ZG0C%(jQvrDydq*Aj?z!{KVasxAtB9RRiz!}ERA=(CBuVp47CZiUbwObv[y\u0026?3^3jnBodHEpFaw3D+Bzkf1x)KtkBzbkdB7GxnwPxygasWZvdJ/\u0026ReG/aCBAIKBwmYvYB.(dxv@Dl%x\u003eINevruj4zvdHoarR^UaAIaoB-nElwObv[y\u0026*!px\u003eg:\u003cwP}N6wEoLfarR^UaAIaoB-nEzz/{d", "ln": 803, "col": 29, "line": 34 }, { "b": "Ab]Vovru5/asY2K3sN))e[]iqBrAZ?w{503BzkVhazC.cBsnNXDKp(rC42zlA=l8xwPw[Raz#sry=.$harU=tx(+[pvpJ$ZauZ\u0026yvRPE:Bs}6zwNPW(c#Kfzy:?BMarU=tx(+[rzF9W3wPF$SawVDYwN/*mv@=c?By=\u003erB.\u003e\u003eyi%)8MBzbxfe]$PCBzkS9B09Q*pHX6Iv@%tkA+b", "ln": 1170, "col": 5, "line": 56 }, { "b": "i%(rqatkw\u003cq!p5[A3e!8BAzkmxcqqmaz+Fjx(55qvpS)\u003evQTs?aAzyyBy/F1arTD?ygQ)%e[wK9x(mGUA=k]dA==NPBzbxfefDrXz/{ekAWJyXDKp(rarUfjzF0P}B-H]1y?kTIBAhIned9HxarUlkB.$YgvpB4:iV@J+B.99harR^HxjVfCazb+lv@#B6zxJO6BAhqxBy/FvdiJ%", "ln": 1377, "col": 30, "line": 66 }, { "b": "3jnBodHEpFaw3D+Bzkf1x)Ktkvq{g4x\u003e7N[x(v(iv@Dl%x\u003eINevruj4zy#nsdJ*#}A+PY9By+!4dLzbovq{frwmYvYB.(d!z/ff3xlwl6BzkVhauZ\u0026VB-7Yhx(v(iwmYvYB.(d!z/ff3xlwl6BzkVhc[co=3lQEmvr9G4zGWc=aAhvtv}x.5e[F{ze(2hgmpeFUrV(^qasyYhC4CGdAbxf7BsfcS3lQDAfcB!pw)]*#BrCToBAzkmxlaz5aARphB1R3wvpB4:c)%l\u003eAbP@iA+e=kvTfsIi%)8MBzbxfe]$PCc)@OFvp{@saszwAvqvkti%)8MBzbxfe]$PCc)@OzB%!*-wO#Vui%)8MBzbxfe]$PCc)%0", "ln": 1774, "col": 3, "line": 83 }, { "b": "arU\u0026oy\u0026%qIaARTDwEoL5Ejmk+3lQE4wNY^{c)@Fxz//Yhxcp]aash7KzeS@@cOcxKzGWD\u003c3jm)#Bzbxfe]LRQcV9^AzGElSazb+lv@#B6zxJ\u003enzeTMmBsq9pA+fcgdiJ%AarR^Hfe1CZzFiQ4x(\u003eFtA=(CBaAhvtCZfSsarR!vw/@HzxLzJuB7GDnx(mN8txB[dB97l0z*lK}wObv[y\u0026\u0026Q3zdmB1t{8o[jS[\u0026!B.7[5arR^HasnATBA}?pz!pbhvrb{%Bs}SCBAzkmxldo8BAhIBBrCKyz*lKIw]n#4au.\u003eJasy=zzEW^5z/c{KaBsCrarR^Hay]51wPRGaBzbxfe]$PCBzkS9B6y2lA=(CBaAhvtCZgVxi%)8MarR^HwmYN*By=OpxLzJuB7GDnx(mN8tpjJkB-RTEAb](wC{3ZpcTw!varR^HEf{r7arR^WfcB$DxK#i#BrCKyz//]s3lQDlawVDYwN/*mB7GC\u0026A=l5rBA}?ppI81%xLzJuA+flkwPI@AaAg+fwO#PxA+flkwPI@x3lQDlawVDYwN/*mB7GC\u0026A=l5rBA}?ppI81%xLzJuA+frhz/fScefF[uA+fa", "ln": 2292, "col": 3, "line": 104 }, { "b": "zvdHeBzbxfe]$PCc)%gLwP]HMaxAh/CptPXarU=tx(+[FwPPsFC4\u003eJiB0\u0026HYA+frgy\u003c6wrcW6inCxkbXdlv\u003eVaARphB1RJBBsnIKB8L@nay!?@y*{*.yANI6zdL7CasyVcy\u00260M?v@0Cvi%(rqazCBgc$Nptau.\u003eJaszbGz!a02BzkVhcN*f+3lQDlaARphB1R3wvpB4:c)%gLwP]nbvpJ$ZcN?a:arV7tEld=yfdFBUasXH4x(!l4ByO#bvixP4Ar", "ln": 3101, "col": 26, "line": 133 }, { "b": "wP8f6w]n.mjV%]nw{503BzkVhcN*f+3lQDlaA?glayPq6auZ\u0026VzAwgjarR^HCw7YbwGSx!A=LPle[]w)A=LPlc$ddediG@:ayPq6e]k9pxlm/faW4$hfEXb\u003e3lQDlarR!nA+uHTayPq6tqftA3lQDlaBKO7arR^Hfe1CWx(XopayPq6azC)tBzbkdAa9\u003c43lQDlazCBgd0f-NwP8f6vrc06aW4$hcUvHsv@#z", "ln": 4485, "col": 10, "line": 196 }, { "b": "zGE0:aARphB2%ZoarR^Hfe1C*wPI%iA+cvCvq{fdAb](owPz)raA8cuA+fkkvqYP#A+fq0arR^HA=l8xwPxzCB7D+svruflazb+lv@#B6zxJ!mB-8qjwm5+:A42:rAv-kMwPGyBzE[6mdiJ%AarR^HarU\u0026oAV/pvx\u003eFLKaAz4ke[5Zri%)8MarR^", "ln": 5142, "col": 12, "line": 227 }, { "b": "arR^HarUMkCYUuBA=JP\u003c3lQDlarR!Pdlv\u003eVarR!Pdlv\u003ezarR^Hfe1C+z/]@twN(](zxJwbA0^ZgarUole[F)lBsnINz/]@tcOcxZxLzJpi%)8MEjMH.xLzJpi%(rqaAz4nB-IvxBzbxfi%{x$3jnBodHEpFaw^8%CZgANzY\u003cdnwGUA2A3eK^z/{ekAWbQyB-.gydprG9dJ?S2BAIRwB0a)lzE[2mu@y]=By!\u00265x(n0lvqYN^azbLjaARpdayx7@Bzb2l3lQ/9", "ln": 5428, "col": 3, "line": 235 }, { "b": "cOcxXwPq\u003cbA+cTDwOMoldk1$mwQ5fmwPI]wi%)8W3lQ/vmSiq\u0026wO#c{zE)(iBzb98ay]ykzF%RtAb](ux\u003eg=$u[L![wQ5fmwPI{2aA8yAaA7\u003cmBzbkdvScGx3lQ/vz/M$mw/#wqBS+)xB7=XrzY*lvvq)zkvix8{w[CQ{wO#PjwQ5rdzGxJgzxK4t", "ln": 6102, "col": 23, "line": 268 }, { "b": "AV!}rvqP$1wGU?#AbYJexcqqfwGTAlqY{f[ze:r1By=OazF9W3wGV8k3lQ/va$^LJzepysw[=6)B2\u003cTJdHEpFarR^HayPkde[F{kx(mGgcUNQsy:Q+RA+flkx(W=kcUm4lcN*V*wO#3\u0026AZ\u003c+VwHPXFasWZvdJ?r2aARphB0a$3B7DE.n(D\u003cKA=lbnwmY*8viw@gA+fc0wPymOy?k1zu)6q$BzbP6aA}KwxBk\u003eiaARpdaAH$dwGV5dxkRd1B-I4oBzb98avQJ]A+frkaz2!pwN/?6iV}/UAa9\u003c4efF\u003eIBzkVhB1wCzvqG:?vpK74u[qTcdJ\u0026?Dz/]Yaaz#atwGV8dvrrSaBrC1dx\u003c(6]B0bNrx(+zlwPRQ7wftr4ayF+}B1Q*bwQ5fmwPI{2azC.nwPzV%y\u00261w7asXHPzV", "ln": 6301, "col": 31, "line": 272 }, { "b": "az2C6x(mH6ay]ykzF%Rtw]zH4z*9sCxLzJgv@DmdwO#Q7z/d9GBzbj)asXHrlVl\u003c-z!%b#vru6kyi9VexMOunB2\u003e%cxk8E3BZ=$kz/4dHya\u003c7nzGx-jx\u003egT]wId.sdgdgEaz++3A::0laA}mnay/C6vru6\u003eaARJAzddxavqG:5z!pbfz!9AbB0bBuAck#9AV/Enze:r1By+!4dJ\u0026quxk8l{B0bNyazbLdy\u0026sIuBzbxfay/tcC4CMkx(v(uaARptB0a[cy\u0026sH", "ln": 6719, "col": 17, "line": 282 }, { "b": "BzkVhaAz4kB.L(cwg5//3lQEt3jm)#fe1CXwPP5bx(4u6wQ5rdzGxJgzvdHeC42zlwQ5rdzGxJgzxI7+wQ5r3fKk!AjV%]ne**#GarR^\u003easw=?as!NCCYTonarR^/az2!ti%(rqatkw\u003cB98tvwGUM4xk8l{3lQEkxLzJuwO#c{zE)([wQ5rdzGxJgzE1wFazbHM3jm)#A+funA=7", "ln": 7181, "col": 35, "line": 296 }, { "b": "A:-/kzEEx[efFLxdiJ%AarUxgasGJ@A::kCx(=NXA::kwzEEx[djDx^3lQDlazbLjasIzwAV/6sjS(Buazz@Xaz$R8wId!gzFa68j0nk/d\u003e8P/3lQDlarR!GxLzJuAa9=}z76pgzdM{=t}vagzyETOarR^HEf{r7arR!EwPS6nzxK4mx(=uyarV7t3lQEkxLzJuA=l8xwPxzxvrb^[c#JEgwH[%ozu", "ln": 7647, "col": 24, "line": 322 }, { "b": "vSME7B-.gqAa9\u003c4zEEx[3lQ/vvQTs?wft/daARpdaAg+fwO#PrB15kNxKM09xKM6}3lQ/vzeTMmBy!#9x(\u003e%masWZvdJ?i0AV!}rvqP$1wGUY0aARpdayPkdy?Wx/BzkVhaA}mn3lQ/vzeTMmBy!#9vriLnfjwydx(kaCaA}Hkv}W00BAq2fw^PUgaA}mnaz(4tzGGD2ayPsla$)zwz!ympBzbl6aARpd3lQ/vA+funA=91yvqH5", "ln": 8903, "col": 22, "line": 386 }, { "b": "3ni\u003eU3lQ/vl$HgCxjk)[ayD*5mn=D2e?O+9u)5@/y\u00261enBz\u0026pfA=l8xwPxz7mn=D2e?O+9u[I^edLzbozdN*5z!9]ww]zYUvpJ$0w{503BzkVhasI8rBzbP6diJ%AarU9iA9Ef\u003cBzbP6t{8oMw{503BzkVhasIhqBz99CDKp(rarUxgasI8rBzbP6au.\u003eJasy/kBsegTclM-qxlw65zGG}Ly?mG%Bz8^WjV%]xdiJ%AarR^HarSr\u003cayPkde[X:qd05%wBzkS9dgdguarR^HA+b", "ln": 10243, "col": 1, "line": 466 }, { "b": "BzkVhB2%ZKarR!BAccdzjS]91i%)8MEf{r7atkw\u003czdN:2wGU]gBzkVhA%:3jC42zlA+fc0wPyN=BzkVhB09Q*DMT{[e{7=vB1RoEv{%g{efDL$e]LYJB1Q*oz!0i(A@", "ln": 11663, "col": 14, "line": 531 }, { "b": "x\u003eqGvA=k(re]k9pxlm/fj%hM!arR^HarR^HkoIs:x(W={Bz(hlwPF$rcM\u003c]ZC4\u003eJie]\u003e(GBs}SJx\u003e7Z5fF1s#f!1.\u0026z!T8qcN78:a$1/Zd\u003cch-aA8oya$1G-aA?EgCp)]Oz//ibx\u003eqGvA=k(re]k9pxlm/feG==Nas!MZa$0ZuarR^HarR^/asyYlA+e:5z/QaCa$1G", "ln": 12257, "col": 47, "line": 559 }, { "b": "asXH0AckSax\u003e4F)dLzbovq{fry?W%jwO@RNazb+lv@#B6zxJ+fB97#hc[co=3lQEmvr9GiwPz%9AV^H/xMOune[n{kvru6VwPz%9AWV3yx(+ZgarU\u0026oAV!!hxlbgUaAIvkv}vo5vqG:dvrc16zdNQbB14CsazCBgd0f-NwP8f6vrc14tvzL+B1RouzFa68at1Y\u003ct{8o[jS(a:B-7Yhx(v(pdiJ%AarR^HC42zlwn=u%auZ\u0026QA+xC$vrc14e]k9pxlm/feD", "ln": 13253, "col": 1, "line": 595 }, { "b": "az$+nBrA4^3lQE9w/@HzxLzJuxjVfkcUmgscN*eYjV%]nBy/JncN*fFz/fSmy?kkgA=M8sc$NBte]#byv@0imD)00vAXqDLq/)4]zF7vDdlv(+3jnBodHEpFaxixbaAz4hwmY^}zF782aA?EgCp\u003cjBdJ*#}A+PY9By+!4dLzbow{503BzkVhaARTHqE%-RwPxhxx\u003eqGtaA8jvx(v)gefFChy\u00260M?v}#", "ln": 13702, "col": 21, "line": 616 } ], "depth": 1, "facts": { "imp": [ [ "", "require" ], [ "", "require" ], [ "", "require" ], [ "", "require" ], [ "", "require" ], [ "", "require" ], [ "", "require" ], [ "", "require" ], [ "", "require" ], [ "", "require" ], [ "", "require" ], [ "", "require" ], [ "", "Object.create" ], [ "", "Object.create" ], [ "", "Object.create" ], [ "", "Object.defineProperty" ], [ "", "Router" ], [ "", "Object.defineProperty" ], [ "", "debug" ], [ "", "Object.setPrototypeOf" ], [ "", "Object.setPrototypeOf" ], [ "", "Object.setPrototypeOf" ], [ "", "Object.setPrototypeOf" ], [ "", "Object.create" ], [ "", "resolve" ], [ "", "finalhandler" ], [ "", "logerror.bind" ], [ "", "res.setHeader" ], [ "", "Object.setPrototypeOf" ], [ "", "Object.setPrototypeOf" ], [ "", "Object.create" ], [ "", "Array.isArray" ], [ "", "flatten.call" ], [ "", "slice.call" ], [ "", "TypeError" ], [ "", "fns.forEach" ], [ "", "router.use" ], [ "", "debug" ], [ "", "router.use" ], [ "", "fn.handle" ], [ "", "Object.setPrototypeOf" ], [ "", "Object.setPrototypeOf" ], [ "", "next" ], [ "", "fn.emit" ], [ "", "Error" ], [ "", "Array.isArray" ], [ "", "debug" ], [ "", "compileETag" ], [ "", "compileQueryParser" ], [ "", "compileTrust" ], [ "", "Object.defineProperty" ], [ "", "Boolean" ], [ "", "methods.forEach" ], [ "", "slice.call" ], [ "", "slice.call" ], [ "", "View" ], [ "", "Array.isArray" ], [ "", "view.root.slice.join" ], [ "", "view.root.slice" ], [ "", "Error" ], [ "", "done" ], [ "", "tryRender" ], [ "", "http.createServer" ], [ "", "slice.call" ], [ "", "once" ], [ "", "server.once" ], [ "", "server.listen.apply" ], [ "", "console.error" ], [ "", "err.toString" ], [ "", "view.render" ], [ "", "callback" ], [ "", "./utils" ], [ "", "./view" ], [ "", "debug" ], [ "", "finalhandler" ], [ "", "node:http" ], [ "", "node:path" ], [ "", "once" ], [ "", "router" ] ], "mbr": [ "Array.isArray", "Array.prototype", "Array.prototype.flat", "Array.prototype.slice", "Object.create", "Object.defineProperty", "Object.setPrototypeOf", "app.all", "app.defaultConfiguration", "app.disable", "app.disabled", "app.enable", "app.enabled", "app.engine", "app.handle", "app.init", "app.listen", "app.param", "app.path", "app.render", "app.route", "app.set", "app.use", "arg.length", "args.length", "arguments.length", "console.error", "err.stack", "err.toString", "err.view", "flatten.call", "fn.emit", "fn.handle", "fn.mountpath", "fn.parent", "fn.set", "fns.forEach", "fns.length", "http.createServer", "logerror.bind", "methods.forEach", "methods.length", "module.exports", "name.length", "opts._locals", "orig.request", "orig.response", "parent.engines", "parent.request", "parent.response", "parent.settings", "process.env", "process.env.NODE_ENV", "renderOptions.cache", "req.app", "req.res", "require.compileETag", "require.compileQueryParser", "require.compileTrust", "require.methods", "require.resolve", "res.locals", "res.req", "res.setHeader", "router.use", "server.listen", "server.listen.apply", "server.once", "slice.call", "view.path", "view.render", "view.root", "view.root.length", "view.root.slice", "view.root.slice.join" ], "tgt": [ "Array.isArray", "Boolean", "Error", "Object.create", "Object.defineProperty", "Object.setPrototypeOf", "Router", "TypeError", "View", "callback", "compileETag", "compileQueryParser", "compileTrust", "console.error", "debug", "done", "err.toString", "finalhandler", "flatten.call", "fn.emit", "fn.handle", "fns.forEach", "http.createServer", "logerror.bind", "methods.forEach", "next", "once", "require", "res.setHeader", "resolve", "router.use", "server.listen.apply", "server.once", "slice.call", "tryRender", "view.render", "view.root.slice", "view.root.slice.join" ], "funcs": [ [ "init", 1194 ], [ "getrouter", 1522 ], [ "defaultConfiguration", 1865 ], [ "onmount", 2369 ], [ "handle", 3531 ], [ "use", 4363 ], [ "anonymous", 4947 ], [ "mounted_app", 5219 ], [ "anonymous", 5310 ], [ "route", 5771 ], [ "engine", 7086 ], [ "param", 7636 ], [ "set", 8153 ], [ "path", 9175 ], [ "enabled", 9513 ], [ "disabled", 9820 ], [ "enable", 9996 ], [ "disable", 10177 ], [ "anonymous", 10323 ], [ "anonymous", 10359 ], [ "all", 10840 ], [ "render", 11409 ], [ "listen", 13282 ], [ "logerror", 13657 ], [ "tryRender", 13838 ] ], "metrics": { "ast": { "op.eq": 11, "op.gt": 1, "op.lt": 2, "op.ne": 6, "op.add": 11, "op.lor": 5, "op.sub": 5, "op.land": 4, "op.lnot": 7, "max_depth": 24, "call_count": 109, "node_count": 3117, "member_count": 75, "op_density.eq": 0, "op_density.gt": 0, "op_density.lt": 0, "op_density.ne": 0, "op_density.add": 0, "op_density.lor": 0, "op_density.sub": 0, "op_density.land": 0, "op_density.lnot": 0, "max_concat_chain": 5, "max_member_depth": 4 }, "file": { "size": 13971, "entropy": 4.84 }, "text": { "lines": 631, "top_char": 101, "digit_ratio": 0.01, "space_count": 2454, "char_entropy": 4.84, "unique_chars": 85, "top_char_null": 0, "import_density": 1.27, "string_density": 0.13, "top_char_ratio": 0.08, "avg_line_length": 21.14, "max_line_length": 114, "empty_line_ratio": 0.16, "last_line_length": 1, "whitespace_ratio": 0.22, "identifier_density": 0.86, "line_length_stddev": 20.09, "max_whitespace_run": 6, "normalized_import_count": 0.32, "normalized_string_count": 3.18, "repeated_char_sequences": 2, "suspicious_string_ratio": 0.01, "anonymous_function_ratio": 0.16, "suspicious_comment_ratio": 0.13, "normalized_function_count": 1, "imports_to_functions_ratio": 0.32, "strings_to_functions_ratio": 3.2, "suspicious_identifier_ratio": 0.01, "normalized_unique_identifiers": 12.15, "identifiers_to_functions_ratio": 4.52 }, "binds": { "count": 74 }, "binary": { "peak_region_bytes": 13971, "peak_region_entropy": 5.04 }, "source": { "function_count": 2 }, "imports": { "count": 8, "relative": 2, "stdlib_count": 2, "stdlib_ratio": 0.25, "relative_ratio": 0.25, "third_party_count": 6, "third_party_ratio": 0.75 }, "strings": { "bytes": 746, "count": 80, "avg_length": 9.32, "max_length": 40, "path_count": 5, "avg_entropy": 2.55, "empty_count": 1, "entropy_stddev": 0.96, "embedded_code_candidates": 1 }, "comments": { "code": 2, "chars": 5900, "count": 60, "lines": 268, "url_count": 1, "high_entropy": 8, "to_code_ratio": 0.74 }, "functions": { "count": 2, "nested": 6, "density": 3.96, "anonymous": 4, "avg_params": 1.24, "code_ratio": 0.64, "max_params": 3, "length_stddev": 15.95, "avg_name_length": 6.81, "no_params_count": 5, "avg_length_lines": 16.24, "max_length_lines": 55, "min_length_lines": 3, "avg_nesting_depth": 0.36, "max_nesting_depth": 3, "high_entropy_names": 1, "avg_param_name_length": 4.68 }, "identifiers": { "count": 540, "unique": 113, "avg_length": 6.67, "max_length": 23, "min_length": 1, "avg_entropy": 2.28, "reuse_ratio": 0.21, "length_stddev": 3.58, "sequential_names": 1, "single_char_count": 1, "single_char_ratio": 0.01, "high_entropy_count": 5, "high_entropy_ratio": 0.04, "all_lowercase_ratio": 0.78, "all_uppercase_ratio": 0.01, "underscore_prefix_count": 1 } } }, "id": 2, "mol": "H₃(Cm₂Db₃Os₂)Md₂(InPa)", "path": "exptredd-5.2.4.tgz!!package/lib/application.js", "pid": 4509, "refs": [ { "to": "./view", "off": 343, "file": 4517, "kind": "local" }, { "to": "./utils", "off": 409, "file": 4516, "kind": "local" } ], "risk": 8, "sha": "93933d053fb70337594e0826536acfe0e9787007e199878dbd357b99f026e5c7", "size": 13971, "traits": [ { "id": "metadata/import/npm/http::http", "conf": 0.95, "crit": 3, "desc": "imports node:http", "spans": [ [ 372, 9 ] ] }, { "id": "metadata/package/files/runtime::javascript-family-lib-tree-artifact", "conf": 0.95, "crit": 3, "desc": "JavaScript-family source file under lib" }, { "id": "micro-behaviors/communications/http/server/listener::http-createserver-call", "atk": "T1071.001", "mbc": "C0002", "conf": 0.75, "crit": 3, "desc": "Node.js http.createServer()", "spans": [ [ 13317, 17 ] ] }, { "id": "micro-behaviors/communications/http/server/listener::server", "atk": "T1071.001", "mbc": "C0002", "conf": 0.7, "crit": 3, "desc": "HTTP server API or listener evidence", "uses": [ 24 ], "spans": [ [ 13317, 17 ] ] }, { "id": "micro-behaviors/communications/http/url/forge::public-code-forge-url", "conf": 0.9, "crit": 3, "desc": "References a public code-forge URL", "spans": [ [ 6783, 19 ] ] }, { "id": "micro-behaviors/data/control-flow/dispatch::js-async-named-event-handler", "conf": 0.85, "crit": 3, "desc": "Registers asynchronous named event handler", "spans": [ [ 2356, 21 ] ] }, { "id": "micro-behaviors/data/control-flow/dispatch::js-named-event-value-emission", "conf": 0.82, "crit": 3, "desc": "Emits a value through named JavaScript event", "spans": [ [ 5492, 20 ] ] }, { "id": "micro-behaviors/data/control-flow/module-exec::js-empty-module-exports", "conf": 0.8, "crit": 3, "desc": "CommonJS module exports an empty object", "spans": [ [ 867, 19 ] ] }, { "id": "micro-behaviors/data/control-flow/module-exec::module-level-imported-method-call", "conf": 0.9, "crit": 3, "desc": "Top-level method call on require result", "spans": [ [ 10307, 15 ] ] }, { "id": "micro-behaviors/data/manipulation::js-delete-indexed-property", "conf": 0.95, "crit": 3, "desc": "Deletes an indexed JavaScript object property", "spans": [ [ 2553, 35 ], [ 2596, 38 ] ] }, { "id": "micro-behaviors/os/env/read::node-env-text-outside-npm-context-ci-markers", "conf": 0.95, "crit": 3, "desc": "Env references outside npm diagnostic helpers", "spans": [ [ 1838, 103 ] ] }, { "id": "micro-behaviors/os/module/require::cjs-local-require-call", "conf": 0.9, "crit": 3, "desc": "CommonJS local-module require call", "spans": [ [ 334, 7 ] ] }, { "id": "metadata/file/comment::source-comment-bytes-over-300", "conf": 0.92, "crit": 2, "desc": "Source has over 300 comment bytes" }, { "id": "metadata/file/line::file-has-30-plus-lines", "conf": 0.9, "crit": 2, "desc": "File has 30 or more lines" }, { "id": "metadata/import/npm/debug::debug", "conf": 0.95, "crit": 2, "desc": "imports debug", "spans": [ [ 290, 0 ] ] }, { "id": "metadata/import/npm/finalhandler::finalhandler", "conf": 0.95, "crit": 2, "desc": "imports finalhandler", "spans": [ [ 253, 0 ] ] }, { "id": "metadata/import/npm/once::once", "conf": 0.95, "crit": 2, "desc": "imports once", "spans": [ [ 657, 0 ] ] }, { "id": "metadata/import/npm/path::path", "conf": 0.95, "crit": 2, "desc": "imports node:path", "spans": [ [ 616, 0 ] ] }, { "id": "metadata/import/npm/relative/1/utils::relative/1/utils", "conf": 0.95, "crit": 2, "desc": "imports ./utils", "spans": [ [ 408, 0 ] ] }, { "id": "metadata/import/npm/relative/1/view::relative/1/view", "conf": 0.95, "crit": 2, "desc": "imports ./view", "spans": [ [ 342, 0 ] ] }, { "id": "metadata/import/npm/router::router", "conf": 0.95, "crit": 2, "desc": "imports router", "spans": [ [ 686, 0 ] ] }, { "id": "metadata/lang/javascript-features::use-strict-directive", "conf": 0.6, "crit": 2, "desc": "Contains a JavaScript use strict directive", "spans": [ [ 167, 0 ] ] }, { "id": "metadata/lang/source/shape::js-ts-source-basename", "conf": 0.95, "crit": 2, "desc": "JavaScript or TypeScript source filename" }, { "id": "metadata/package/completeness::has-logging-import-2", "conf": 1.0, "crit": 2, "desc": "Code imports logging (log4js/debug)", "spans": [ [ 282, 0 ] ] }, { "id": "micro-behaviors/communications/http/server/listener::nodejs-http-server", "atk": "T1071.001", "mbc": "C0002", "conf": 1.0, "crit": 2, "desc": "Node.js HTTP server patterns", "uses": [ 2 ], "spans": [ [ 13317, 0 ] ] }, { "id": "micro-behaviors/data/property/access::indexed-value-variable-binding", "conf": 0.8, "crit": 2, "desc": "Binds an indexed value to a variable", "spans": [ [ 7229, 0 ] ] }, { "id": "metadata/lang/natural/vocabulary/content-word::english-edit-verb-token", "conf": 0.88, "crit": 1, "desc": "English edit-action verb token", "spans": [ [ 1409, 0 ] ] }, { "id": "metadata/lang/natural/vocabulary/function-word::lang-english--atom-1", "conf": 0.8, "crit": 1, "desc": "English function-word token \"the\"", "spans": [ [ 1043, 0 ] ] }, { "id": "metadata/lang/natural/vocabulary/function-word::lang-english--atom-2", "conf": 0.8, "crit": 1, "desc": "English function-word token \"and\"", "spans": [ [ 5190, 0 ] ] }, { "id": "metadata/lang/natural/vocabulary/function-word::lang-english--atom-3", "conf": 0.8, "crit": 1, "desc": "English function-word token \"that\"", "spans": [ [ 6150, 0 ] ] }, { "id": "metadata/lang/natural/vocabulary/function-word::lang-english--atom-4", "conf": 0.8, "crit": 1, "desc": "English function-word token \"have\"", "spans": [ [ 8951, 0 ] ] }, { "id": "metadata/lang/natural/vocabulary/function-word::lang-english--atom-5", "conf": 0.8, "crit": 1, "desc": "English function-word token \"for\"", "spans": [ [ 905, 0 ] ] }, { "id": "metadata/lang/natural/vocabulary/function-word::lang-english--atom-6", "conf": 0.8, "crit": 1, "desc": "English function-word token \"with\"", "spans": [ [ 6478, 0 ] ] }, { "id": "metadata/lang/natural/vocabulary/function-word::lang-english--atom-7", "conf": 0.8, "crit": 1, "desc": "English function-word token \"this\"", "spans": [ [ 1236, 0 ] ] } ], "type": "javascript" }, { "analysis_gaps": [ "flow-graph-limited", "flow-call-unavailable", "flow-query-incomplete" ], "ctx": [ { "b": "fdFaLasXHBCYmXmB8}WhdJ?8%AcVFrxj#xnv\u003c@JQfFCHsgb7Bsaxg@Qnn\u0026r.Cvt=bxMX7$asXH3z/x#xx\u003eIa3c$sXGgb7Bsax0b{vqWh^xMOJozddq?asXH3z/x#xx\u003eIa3c$sXGgb7BteIY1mh6tq9B.tJ0B09?-A+PPpz/xx3AV!B$y\u0026:Jj3lQ/vo?wqboLF0FzGxx13lQ/K3jne6B7DFnBAh89BsfcS3ni\u003eU3lQ/vo(BM+y?j-1wPhi#wmYT*x\u003equr3lQ/K3jp@+AV!?fwo?0WA=U/jauZ\u0026/wPq\u003cbA+cTDvSb!5ePtcsB7GwtdgglbAV^!]wO#PUze19lwPw[RaAz4kB.L(cc)@[JwmW/kC4CMkB0\u0026y?mrSlWBvy4XBAz8mi%{dtAV/jkCXI4rjS[=RADL#owHF{ywPzA{eO5Blv@=p5Bz(hvcN?a:C42zlAb](szY?g=A+flkx(W=kcOv5XAbYScv{%E[z/c{Ki%{dtAV!m#B-.hnauZ\u0026/wPq\u003cbA+cTDA=l8xwPxdEi%{dtAV/ylAuEy!A+flkx(W=kcOv5)wPq\u003c7B95=Ui%{dtAV/ylB09Q*A+flkx(W=kcOv5)wPI*ezGxwpdlv\u003ezfdFBUasXH5CYmOxwGUw\u003cA+eW3wKgoOy?Wx/BzkVhc[eKR3lQ/K3jpu?AbP=sB09Q*zeS%cy?kkgCYmOwBAnM/ay/C6vru6DAbYScv{%E[z/dSz3ni\u003eU3lQ/vlVM:DBy=O6zxJInAb]JhB0a[gAbok#vruj4zy#nsdHEpFav6%UBAIRwaBuO2zEW^5z/f$gasXH0vq]{6AckSax\u003e4F)dLzbow{503BzkVhay/C6vru6DAbYScv{%E[z/c%LaBsCraA?glayPkdauZ\u0026VB-7Yhx(v(qA+fkwaAz4mefF?wCYUwSDKp(rarU9iA4U*jzE^M{c#@)sefF$AB1wCKwQ5qCi%)8MEld=yarUJnCXI4zvq{fpavQD+zGFr:x([DdAXqrKz//]tD2NsCazb4#B7D^Z3lQEdx)sufc$d7lefF[Lz//[Gazb4#B7D^Z3jm)#fe1CVCYmOxwGV8dwGU@jz//]tD2NsqBzb98aA}Koy-)w4BrCToBrCHtaAz4kB.bSoA%:3jvq{frA+flkwPI@ojS)KfygQ)%e[n{kvru6eA+fkwaBsCrarR!nAbW\u0026XDMV*pzF0P}B-H]1y?kTIBAhInefFIwB.$YgvpB4:iV@J+B.99DCxdztvpB4:iV@J+B.99DC42ifwJy@xAbV}F3lQEtdgcz8atkw\u003cwQ5fjB7DFoxK@r9A=l5rBA}?paARp9BrC^wy?$kbwPP5owPP5kzxJ$hB8V5nB7Gz1arU9iA4VfxB8V5nB7DESawVDYwN/*mv@=c?By=\u003evwPGyBDKp(rarU9iA5]a*ay/tcw[+[2A:-A[wJy@QA=\u003e}Aaz2CkzdN-@vR/QpaARTDwH[%FA+PS7vR/QpaARTDwH[%EvqH6$iV}\u003cIA3fMoarV7Y3jm)#vq{frx(mTbc[dj+arUYoBAIRwayPkdi%{xy3ni\u003eU3lQ/vmr\u0026=\u0026B7DFoxK@r9A=l5rBA}?pB1N!xdLzbowQ5fjA==vPvq{g4x\u003e7N[x(v(ijS[Y:z//[V3t1E3z/P@ve]\u003eJyB.bSoauZ\u0026/wPo^swQ5fjA==vPA+frhz/fScauZ\u0026/wPG{u3ni\u003eU3lQ/vmr\u0026=\u0026B7DF7z/fSrA=\u003e(lz/P[K3lQ/K3jpu?AbP=sB1QveB-.gqjS)TvB-.hne(DRgBy^JvwQ5fjA==vPqG3Y1wPw[Rax0c2By/FO3jnBodHEpFavQJ]z/YFjze0J\u003ey?m*0A+bO2dLzbowQ5fjA==vPyiarhauZ\u0026Rz!ab\u0026vrcB2AXq9Fz/b[[CYmOwBAo6PvrS?SayYn1C#d{\u0026B7GwAA::e0wQ5fjA==vPB97\u0026jx\u003e5nGaAz4kB.L(cc)%7EA=#1CB97\u0026jx\u003e5Iti%]LzAbP=sB1RMCCYU5\u003eayYn1C#d{\u0026B7GwABy/Ys3t1E3z/P@ve{hhJwO#0@wmYo]jS[iLwo?0WA=U/je{hhJwO#0@wmYoU", "ln": 0, "col": 1, "line": 1 } ], "depth": 1, "facts": { "imp": [ [ "", "require" ], [ "", "require" ], [ "", "require" ], [ "", "require" ], [ "", "require" ], [ "", "require" ], [ "", "require" ], [ "", "app.handle" ], [ "", "mixin" ], [ "", "mixin" ], [ "", "Object.create" ], [ "", "Object.create" ], [ "", "app.init" ], [ "", "require" ], [ "", "./application" ], [ "", "./request" ], [ "", "./response" ], [ "", "body-parser" ], [ "", "merge-descriptors" ], [ "", "node:events" ], [ "", "router" ], [ "", "serve-static" ] ], "mbr": [ "EventEmitter.prototype", "Object.create", "Router.Route", "app.handle", "app.init", "app.request", "app.response", "bodyParser.json", "bodyParser.raw", "bodyParser.text", "bodyParser.urlencoded", "exports.Route", "exports.Router", "exports.application", "exports.json", "exports.raw", "exports.request", "exports.response", "exports.static", "exports.text", "exports.urlencoded", "module.exports", "require.EventEmitter" ], "tgt": [ "Object.create", "app.handle", "app.init", "mixin", "require" ], "funcs": [ [ "createApplication", 660 ], [ "anonymous", 703 ] ], "metrics": { "ast": { "max_depth": 11, "call_count": 14, "node_count": 418, "member_count": 23, "max_member_depth": 2 }, "file": { "size": 1636, "entropy": 4.88 }, "text": { "lines": 81, "top_char": 101, "digit_ratio": 0.02, "space_count": 197, "char_entropy": 4.88, "unique_chars": 66, "top_char_null": 0, "import_density": 9.88, "string_density": 0.11, "top_char_ratio": 0.1, "avg_line_length": 19.2, "max_line_length": 77, "empty_line_ratio": 0.21, "last_line_length": 42, "whitespace_ratio": 0.17, "identifier_density": 1.19, "line_length_stddev": 19.24, "max_whitespace_run": 1, "normalized_import_count": 0.89, "normalized_string_count": 1, "anonymous_function_ratio": 0.5, "suspicious_comment_ratio": 0.11, "normalized_function_count": 0.22, "imports_to_functions_ratio": 4, "strings_to_functions_ratio": 4.5, "normalized_unique_identifiers": 4.89, "identifiers_to_functions_ratio": 15.5 }, "binds": { "count": 22 }, "binary": { "peak_region_bytes": 1636, "peak_region_entropy": 4.95 }, "source": { "function_count": 1 }, "imports": { "count": 8, "relative": 3, "stdlib_count": 1, "stdlib_ratio": 0.13, "relative_ratio": 0.38, "third_party_count": 7, "third_party_ratio": 0.88 }, "strings": { "bytes": 99, "count": 9, "avg_length": 11, "max_length": 17, "path_count": 3, "avg_entropy": 2.99, "entropy_stddev": 0.32 }, "comments": { "chars": 483, "count": 9, "lines": 30, "high_entropy": 1, "to_code_ratio": 0.59 }, "functions": { "count": 1, "nested": 1, "density": 2.47, "anonymous": 1, "avg_params": 1.5, "code_ratio": 0.3, "max_params": 3, "length_stddev": 9, "avg_name_length": 17, "no_params_count": 1, "avg_length_lines": 12, "max_length_lines": 21, "min_length_lines": 3, "avg_nesting_depth": 0.5, "max_nesting_depth": 1, "avg_param_name_length": 3.33 }, "identifiers": { "count": 96, "unique": 31, "avg_length": 6.84, "max_length": 17, "min_length": 3, "avg_entropy": 2.36, "reuse_ratio": 0.32, "length_stddev": 3.21, "high_entropy_count": 1, "high_entropy_ratio": 0.03, "all_lowercase_ratio": 0.81 } } }, "id": 3, "mol": "H(Os)Md(Pa)", "path": "exptredd-5.2.4.tgz!!package/lib/express.js", "pid": 1332, "refs": [ { "to": "./application", "off": 373, "file": 1334, "kind": "local" }, { "to": "./request", "off": 441, "file": 1337, "kind": "local" }, { "to": "./response", "off": 473, "file": 1338, "kind": "local" } ], "risk": 4, "sha": "4f35e8273a5e78c35e778d14e4a8c80a81ca3e1fc8047dc87d2077b860404572", "size": 1636, "traits": [ { "id": "metadata/lang/javascript-features::cjs-exports-pattern", "conf": 0.6, "crit": 3, "desc": "Defines CommonJS named exports", "spans": [ [ 1263, 22 ] ] }, { "id": "metadata/package/files/runtime::javascript-family-lib-tree-artifact", "conf": 0.95, "crit": 3, "desc": "JavaScript-family source file under lib" }, { "id": "micro-behaviors/os/module/require::cjs-local-require-call", "conf": 0.9, "crit": 3, "desc": "CommonJS local-module require call", "spans": [ [ 364, 7 ] ] }, { "id": "metadata/file/comment::source-comment-bytes-over-300", "conf": 0.92, "crit": 2, "desc": "Source has over 300 comment bytes" }, { "id": "metadata/file/line::file-has-30-plus-lines", "conf": 0.9, "crit": 2, "desc": "File has 30 or more lines" }, { "id": "metadata/import/npm/body-parser::body-parser", "conf": 0.95, "crit": 2, "desc": "imports body-parser", "spans": [ [ 239, 0 ] ] }, { "id": "metadata/import/npm/events::events", "conf": 0.95, "crit": 2, "desc": "imports node:events", "spans": [ [ 281, 0 ] ] }, { "id": "metadata/import/npm/merge-descriptors::merge-descriptors", "conf": 0.95, "crit": 2, "desc": "imports merge-descriptors", "spans": [ [ 330, 0 ] ] }, { "id": "metadata/import/npm/relative/1/application::relative/1/application", "conf": 0.95, "crit": 2, "desc": "imports ./application", "spans": [ [ 372, 0 ] ] }, { "id": "metadata/import/npm/relative/1/request::relative/1/request", "conf": 0.95, "crit": 2, "desc": "imports ./request", "spans": [ [ 440, 0 ] ] }, { "id": "metadata/import/npm/relative/1/response::relative/1/response", "conf": 0.95, "crit": 2, "desc": "imports ./response", "spans": [ [ 472, 0 ] ] }, { "id": "metadata/import/npm/router::router", "conf": 0.95, "crit": 2, "desc": "imports router", "spans": [ [ 411, 0 ] ] }, { "id": "metadata/import/npm/serve-static::serve-static", "conf": 0.95, "crit": 2, "desc": "imports serve-static", "spans": [ [ 1545, 0 ] ] }, { "id": "metadata/lang/javascript-features::use-strict-directive", "conf": 0.6, "crit": 2, "desc": "Contains a JavaScript use strict directive", "spans": [ [ 167, 0 ] ] }, { "id": "metadata/lang/source/shape::js-ts-source-basename", "conf": 0.95, "crit": 2, "desc": "JavaScript or TypeScript source filename" }, { "id": "metadata/lang/natural/vocabulary/content-word::data-access-verb-token", "conf": 0.88, "crit": 1, "desc": "Data-access verb token", "spans": [ [ 847, 0 ] ] }, { "id": "metadata/lang/natural/vocabulary/content-word::english-edit-verb-token", "conf": 0.88, "crit": 1, "desc": "English edit-action verb token", "spans": [ [ 331, 0 ] ] }, { "id": "metadata/lang/natural/vocabulary/function-word::lang-english--atom-1", "conf": 0.8, "crit": 1, "desc": "English function-word token \"the\"", "spans": [ [ 854, 0 ] ] }, { "id": "metadata/lang/natural/vocabulary/function-word::lang-english--atom-3", "conf": 0.8, "crit": 1, "desc": "English function-word token \"that\"", "spans": [ [ 868, 0 ] ] } ], "type": "javascript" }, { "ctx": [ { "b": "fdFaLasXHBCYmXmB8}WhdJ?8%AcVFrxj#xnv\u003c@JQfFCHsgb7Bsaxg@Qnn\u0026r.Cvt=bxMX7$asXH3z/x#xx\u003eIa3c$sXGgb7Bsax0b{vqWh^xMOJozddq?asXH3z/x#xx\u003eIa3c$sXGgb7BteIY1mh6tq9B.tJ0B09?-A+PPpz/xx3AV!B$y\u0026:Jj3lQ/vo?wqboLF0FzGxx13lQ/K3jne6B7DFnBAh89BsfcS3t\u003cY(B.\u003eRwwQ5fjA==vBjS[=RADL#owHF]UfkLuifj/xEA+frkcN?a:", "ln": 0, "col": 1, "line": 1 } ], "depth": 1, "facts": { "imp": [ [ "", "require" ], [ "", "./lib/express" ] ], "mbr": [ "module.exports" ], "tgt": [ "require" ], "metrics": { "ast": { "max_depth": 6, "call_count": 1, "node_count": 25, "member_count": 1, "max_member_depth": 2 }, "file": { "size": 224, "entropy": 5.14 }, "text": { "lines": 11, "top_char": 101, "digit_ratio": 0.13, "space_count": 25, "char_entropy": 5.14, "unique_chars": 52, "top_char_null": 0, "import_density": 9.09, "string_density": 0.18, "top_char_ratio": 0.05, "avg_line_length": 19.36, "max_line_length": 52, "empty_line_ratio": 0.18, "last_line_length": 42, "whitespace_ratio": 0.16, "identifier_density": 0.27, "line_length_stddev": 18.29, "max_whitespace_run": 1, "normalized_import_count": 0.3, "normalized_string_count": 0.6, "suspicious_comment_ratio": 1, "normalized_unique_identifiers": 0.87 }, "binds": { "count": 1 }, "binary": { "peak_region_bytes": 224, "peak_region_entropy": 5.14 }, "imports": { "count": 1, "relative": 1, "relative_ratio": 1, "third_party_count": 1, "third_party_ratio": 1 }, "strings": { "bytes": 23, "count": 2, "avg_length": 11.5, "max_length": 13, "path_count": 1, "avg_entropy": 3.08, "entropy_stddev": 0.16 }, "comments": { "chars": 160, "count": 1, "lines": 7, "high_entropy": 1, "to_code_ratio": 1.75 }, "identifiers": { "count": 3, "unique": 3, "avg_length": 6.67, "max_length": 7, "min_length": 6, "avg_entropy": 2.54, "reuse_ratio": 1, "length_stddev": 0.47, "all_lowercase_ratio": 1 } } }, "id": 4, "mol": "H₂(DbOs)", "path": "exptredd-5.2.4.tgz!!package/index.js", "pid": 1332, "refs": [ { "to": "./lib/express", "off": 207, "file": 1335, "kind": "local" } ], "risk": 3, "sha": "4d2f5afc192178c5b0dc418d2da5826d52a8b6998771b011aede7fdba9118140", "size": 224, "traits": [ { "id": "micro-behaviors/data/control-flow/module-exec::commonjs-module-reexport", "conf": 0.92, "crit": 3, "desc": "CommonJS module re-exports required package", "spans": [ [ 181, 41 ] ] }, { "id": "micro-behaviors/data/control-flow/module-exec::sole-require-passthrough-module", "conf": 0.93, "crit": 3, "desc": "Module body is only a require pass-through", "spans": [ [ 180, 44 ] ] }, { "id": "micro-behaviors/os/module/require::cjs-local-require-call", "conf": 0.9, "crit": 3, "desc": "CommonJS local-module require call", "spans": [ [ 198, 7 ] ] }, { "id": "metadata/file/comment::source-at-most-two-comments", "conf": 0.88, "crit": 2, "desc": "Source has at most two comments" }, { "id": "metadata/import/npm/relative/1/lib/express::relative/1/lib/express", "conf": 0.95, "crit": 2, "desc": "imports ./lib/express", "spans": [ [ 206, 0 ] ] }, { "id": "metadata/lang/javascript-features::use-strict-directive", "conf": 0.6, "crit": 2, "desc": "Contains a JavaScript use strict directive", "spans": [ [ 167, 0 ] ] }, { "id": "metadata/lang/source/shape::js-ts-source-basename", "conf": 0.95, "crit": 2, "desc": "JavaScript or TypeScript source filename" } ], "type": "javascript" }, { "analysis_gaps": [ "flow-graph-limited", "flow-call-unavailable", "flow-query-incomplete" ], "ctx": [ { "b": "fdFaLasXHBCYmXmB8}WhdJ?8%AcVFrxj#xnv\u003c@JQfFCHsgb7Bsaxg@Qnn\u0026r.Cvt=bxMX7$asXH3z/x#xx\u003eIa3c$sXGgb7Bsax0b{vqWh^xMOJozddq?asXH3z/x#xx\u003eIa3c$sXGgb7BteIY1mh6tq9B.tJ0B09?-A+PPpz/xx3AV!B$y\u0026:Jj3lQ/vo?wqboLF0FzGxx13lQ/K3jne6B7DFnBAh89BsfcS3ni\u003eU3lQ/vo(BM+y?j-1wPhi#wmYT*x\u003equr3lQ/vkYy:TC42G73lQ/K3jp@+AV!!2v}xR3B09Q*A+flkx(W=kcT*H{wPh:jcN?a:C42zlx(=\u003cxauZ\u0026/wPq\u003cbA+cTDzF%5%i=nIJcN*VZB4Gg\u00263u/\u0026#aAR)FwODidjS[=RADL#owHF{FD2NsDx(+TJi%{dtAV/4qBz@u=aAz4kB.L(cc)@[JwmW/nBAzEHdlv(Wvr9G5A+fr9auZ\u0026/wPq\u003cbA+cTDw].E7xEtk\u003c3u/\u0026#aAg+fB7FlTzF9J6jS[=RADL#owHF{DvqYZ?ePtcsB7Gwtdlv(Wvr9GfvrcB2auZ\u0026/wPq\u003cbA+cTDAa9^dwP-3fcN?a:C42zlAb](wD0$k]AV^H/A+flkx(W=kcVB9ACZg(HwmPZddlv\u003ezfdFBUasXHiwPq\u003c7B95KzA=l5rBA}?pe^-ZJav6)*vR/:*3lQ/K3jp@+AV/ylAuEy!pHX6Iv@%tkA+eW3wHIklBz@\u003c7zEWQ4x(mMTwPI{3xjSYmA=l5rBA}?pdgczndK\u003e=FdJ?D7wozZ1az2!pz/P@ve^-ZJav6)*vR/:*3lQ/K3jpS*wozZ1e[GoDz/P@vauZ\u0026/wPn4:fdFBUasXHiwPS6nzxJ$hADL\u0026lBrCmdvpS}\u0026e^-ZJ3lQ/vra]?=u@yMFwPz*5A:Q26wNPaXAV!$dwO+)1x(+zrAaJJ[vqEJ9vrl0\u003ced9HHayYnhxDQXXwObH]A+fo0ayPd#ayF8Uw[u0]A:Q1#A+cwczGGDgv}Yp*xjUHXy?kjaasWZvdJ?f8vqP$1wPG)tasWZvdJ/\u0026RarUYoAv$)nBsnI7z/fVdzGEEfD2Nsxdlv\u003eVdJ/\u0026RarSr\u003cau.[h", "ln": 0, "col": 1, "line": 1 }, { "b": "zxYAgdHEpFarR^HaAz4ke[X:qc)}@izdN*5x(mMhdlv\u003eVdJ/\u0026RarSr\u003cau.[hB-7-3w[=c]wc%Ce3lQ/vl2pmzB7F(8vriM0A+fkyxK$Q.wPxgFu[I^edHEpFav6)OA:-/cDSb3bx(mNiaz$R8wEoLfav6%UBAIRwaBv4eA+PA7Ef}8Dav6)*vR/:*3lQ/K3i", "ln": 939, "col": 24, "line": 51 }, { "b": "e[X:qcN?a:arV7t3lQE9w/@HzD2Ntkw/$#1zdK?kjV%]nB98CpzF7sCaBsCrarR!GxMw3naz$+maxiS9wKQSWz/NlNzEEx[az(mxBrC47ayMylBAh8kxcqqmaAz4ke[X:qcN?a", "ln": 1212, "col": 58, "line": 66 }, { "b": "v\u003c@KE3lQDlay!\u00263wGSvvwObH]wPxdV3lQDlay!\u00263wGSvvwObH]A+fnsiTM#LarR^HA+funA=91wxLzJuxK$Q.wPz\u0026AA+e\u0026]A=L-i3lQDlarR^HaBFLVBzbxfe[!*8wmY!5e]\u003eJnwPzv5i%)8MarUiaw)]*#Buf:KarR^HaAz4nB-IvxBzbxfe[!*8wmY!5twN!Pi%)8MEf$x:3jnBodHEpFaxin4wn:HKB-p(1By=O9z!0\u0026v3lQ/9asXH3xK$W?azCBgBzbkdxk8K2zxJteD2NsyB17Gtx(+z9v}f7?BywS{wH[%AwPS6nzFo", "ln": 1368, "col": 12, "line": 75 }, { "b": "B-7-3w[=c]wmc@hx(k5qxLy%\u00263lQ/vv{%B\u0026aBd)FaAIjmB.\u003eOhA+frhz/f8dCwhejat+=gar\u003cN0BrA\u003eVv}xR3vpB4:a$:iBdHEpFaxi2=ayGqpAaJA1C42ifwGU?#C{3NcayMylx(mN1wGTYso*{gDD2NsqB98CpzF6q0dJ\u0026!Pv}V#[B08VnAbYSc", "ln": 1661, "col": 41, "line": 89 }, { "b": "zE)t=asWZvdJ/\u0026RarSr\u003cavfHEwPh-LaARgtBt2a9AxL{iefFwuAbok#vruj4zzb:Cz/b[8dJ/\u0026RarUYoAv$Wfv}xR3B0$luxMO9ccOcw/yiarhcTwe.3lQ/varQ", "ln": 2596, "col": 20, "line": 118 }, { "b": "B9g#aayPsla$$O)aAz4kB.L(cazU\u003ekCwH\u00263xjSi7w/#wqB-FQBwPI^jA:@V6y?mG%Bz9oHnP1\u003eTdJ\u0026?DwGUF\u003eB7DFjw/$I8vTi6baAy[dxjSicxLzJgx(+znw/$P4B-ILmaARpdaARKzvqE67B.$P0AV/pjayYRrwPGEDnOf8!xK}I[dJ?R$zF9J6xK}", "ln": 3896, "col": 23, "line": 179 }, { "b": "viu+oD2NssaAhvtAaK6iC{4rAx\u003e7*0x(+zsxK@rdD2Nsqz!ot0dJ\u0026+uzF9J6Bzb98azC)tA+flkx(W=}asI8BB95Kmz/6ufzFTOHar\u003eouBy/Iqdj#-ivpJ%[vrcx%C{3WmwO(0@BrCpsayPdgz^)D)v@@52dJ\u0026}HBz8!9ar\u003e(GvrcDlayPd#ar\u003exmwfJdnA=k]dA==NHw]zYjBzbkdAbP=sx(v(iz!pblxK@rbvqYZ?e^-ZJ3lQ/vra]?=b4CLdvRGZ\u003ea%p/yBzkVhay!?$ayX[8B7GCoBz\u0026pfBAhInu)5(}wft/lwPzP}AbYJexcnJzvpT9", "ln": 4206, "col": 44, "line": 184 }, { "b": "x(mG)azC.nzY\u0026EhB7]J8y?j-fvqYZ?e^-ZJ3lQ/vpes?TiV@DOzdNM[wPw]nxKM09A:-\u0026#wPF#5A+cwczEWH9B7]/eefG1LazbLjaz2!aze:r5ar\u003cY(zF9JwaA.:p", "ln": 4493, "col": 16, "line": 189 }, { "b": "wK*rNBy/FvA+fkwaszeKwPA5zefFLEzEW^5z/cXqB.bPsc[fGIarU\u0026oAV/vAwPA6nvrcB2auZ\u0026?xLzJuvq{frxjVfkcVKouA^n^DvrcB2AV!$icN?a:3lQE9w/@GBADL\u0026kD2NhjB7D^yDKp(rarSr\u003caAg+fB7]J8azC)twnc9[vR/Q^3lQDlaAz4nB-IvxpHX6Iv@%tkA+eW3wHICsy?$KZ3lQEt3jm)#C42zlADL\u0026kD2[7Fx(mMajS[YLAS", "ln": 5121, "col": 6, "line": 217 }, { "b": "Byw)3B0bNrwGUS1C4CLlze0\u0026#ayGqpAaJAf3lQ/9asXH5CWUDdy?mVG3lQ/9asXGRarR^Hfe1CHx([2hlVl\u003c:wO#Pwrc-B]iV@JQCYUPLBzU?Qay/7[A=U/lj-$\u003cUeJs7WdJ/\u0026RarR!EwPotpB0@zHBzU?wdlv\u003eVdJ/\u0026RarR!EwPotpB0@zTwQ5qIxMO9ccN?a:asXGRarR^HA+fkyx(+WIBy/YsfdFs#i%)8WarR^HarSr\u003cau.[hBAhIn3lQ/9asXGRarR^Hfe1CHxK#67lVl\u003c:wO#Pwrc-B]azC)tvq{g4x\u003e7N[x(v(xyiarh3lQ/varR^HaAz4ke[]wPcU^Zvzyl\u003e{3lQ/varR^HaAz4ke[]wPcT*$ky?Wx/BzkVhfktMDzyl\u003e{3lQ/varR^HaAz4ke[]wPcT*$ky?Wx/BzkVhfdFs#i%)8WarR^HarSr\u003cau.[hBAhIn3lQ/9asXGRarR^HA+fky", "ln": 5470, "col": 28, "line": 232 }, { "b": "AckSax\u003e4F)dLzboA+fkyx(+yWazb+lv@#B6zxJUmd0f-NwPGpyDKp(rC42zlvrcxhjS[\u0026(AaK8L3jm)#fe1C?B-qqrA=-Boy*?BcwO#6\u0026ayPq6B.$YcBAm^iazCBgc)p(%A::kCx(=NXA::kwBA}?pB15KXDKp(rarU9kAV^H/zE[2ml2}0OC{)9wxlw65zGG}Ly?mG%Bz99+3lQDlazbLjasIzwAV/6sjS(Buazz@XayPqhe]k9pxlm/GazAtRdiJ%AarR^HarU9kA:9l-auZ\u0026QA+xJiwO#Qhtwmw83lQDlaBKOtaBKO7arUYoBAIRwaAR)FwODilBzbxfefFwwAW:6SEld=yfdFBU", "ln": 5954, "col": 5, "line": 253 }, { "b": "z!{*JDKp(rC42zlAb](szY?g=Bzbxfe]$@vyH}PuwO#0#D2N\u003epwc%C4arS(\u003ecUNQzAc0xlarR^HiV]!-BAzEHi%)8MC42zlBAhIBBrAZ?Bzbxfe[5Zre[X:qc)%aSB-RTEz#", "ln": 6638, "col": 46, "line": 284 }, { "b": "diJ%AarR^HA+funA=91sA=l5ri%)8MEf{r7atkw\u003cph+k=iV}JRmSir\u003evrb)\u0026wgZR#z//[ux(+zmz/PY6y\u00261wtz/fxpaz2.cAV!=$arSr\u003carR^HarR!Fx(mN1wGVe8", "ln": 6797, "col": 43, "line": 290 }, { "b": "mSir\u003evrb)\u0026wgZR#z//[BdiK1=aAhvtBz?HeaA?glazC.7wQ2sXazts{wmY^lx(mD)CU.{1cOcR]3jm)#A+funA=91lzE^s6ar-)hat2qParR^HkoKSJvpS}\u0026e]#eAB98CpzF7vKefFUAwmZ0me{8bFz73?uarR^HiV@9EvpS}\u0026e{8bFz73?uEjmk+3ni\u003eU3lQ/vq!Q8\u0026Bs?fmzE:(4z/N(CasWZvdJ/\u0026RaAz4ke]U\u0026HBz\u003eVcy-\u003e(7jS(a=BAzFycKH$C3lQ/vkYQBTB-IvxDQqT?y?m3)Ef}8Dav6)*vR/:*3lQ/K3jprPw[=c]m}D^:wPxhtwPomzcV-\u003ceBP", "ln": 6953, "col": 28, "line": 296 }, { "b": "zY\u0026U2A=+#aB95JRj%juKz/YGhBsvLtatkw\u003cvqYP#A+f9aC4z!qz!0M]BrC15wo8m5A%:3jvpS[?B1RGAC4CYnwHF#WAbPXzdgcz8aAz4nB-IvxvpS[?A%^sAi%(rFdK\u003e=FdJ?S2BAIRwaAIWmwn=r[x(m#mvriM1zxJwdA::kC3lQ/9asXHjBZ!)1zddc@B0a[iwGV8dwGUJ4Bs?L", "ln": 8060, "col": 26, "line": 348 }, { "b": "efFLEzEW^5z/cXsBZ!)1zddc@B0@EWDKp(rC42zlxM4%lzEEx[auZ\u0026?xLzJuxM4%lzEEx[i%(rqazCBgc)rnxB98qdzdLdsA+funA=917t@@x2arU\u0026oAV/pjw]?K9auZ\u0026?", "ln": 8700, "col": 31, "line": 370 }, { "b": "aA?glaAIWmwn=r[x(m#mjS\u003e[ZB4GgRxM4%lzEEx[dgdguarS(\u003exM4%lzEEx[e]$#Fx(\u003e:Je*\u002682A+fA9A=U!udgdguarSY/twd}@Bz+J7wNdw83lQEiwPS6nzxK1yvQ%y]vqfR2e]$\u0026yv}v6bw[D9}BsxoUEjmk+3ni\u003eU3lQ/vq!Q8\u0026Bs?fmzE:(4z/M$dB-IpJAa9^dwHIOgAv#xOy:*#Qvrug2vqPN-e^-ZJ3lQ/vkYQBTB-IvxDSb3bx(mNi3lQ/vkYu", "ln": 8838, "col": 2, "line": 376 }, { "b": "AV/EAB-RTEjS[\u0026Wx(+[nAbWBxwPPsFBAhIBBrCKyz*lKIw]n$Bi%)8MC42zlC42hfjS[\u0026Wx(+[twPPsFss)0XA^7@jwmYp6nn\u0026M\u003ecN?a:3lQE9w/@GBC42hfE0^4WBAhIBBsqlAx(+[Fz!0M]Bs}PBzeTJcl1BIDwPI]zattk[aBsCrarR!IvqE5HaARphB1R9pBsnIcz/Z1Fdlv\u003eVaBLwzy\u0026:egx\u003ewFoC42htx(mD)CU.{1cOcR]ar-)hat2q%aBsCr", "ln": 9396, "col": 5, "line": 406 }, { "b": "B7]J8y?j-jvqH6$efFzABrCWsx(+zhB0bNyayX[8B75V(e^-ZzarU\u0026oy-\u003e\u003e-C42htB9g@kBAh8kxdbC+aA?gfe[]ilwQ40.c){L[djD(\u003eA+Pw*x\u003eIa3c[bGCaBKO7arUYoBAIRwaA?gfaBFLVB-7-3w[=c]wigcDdlv\u003ezfdFBUasXHgvrcB2aARpdar\u003cu{B95PGxA", "ln": 9670, "col": 14, "line": 413 }, { "b": "x=}wqvR/:*3lQ/K3jprPw[=c]m}D^:wPxhtwPomzcUNBtBz+J7wHx2Kw{503BzkVhaztXmBz+J7wHG0O3lQEmvr9G7z/Z1yjS[\u0026Wx(+[uz/Z1Z3jm)#x\u003ewFoa.U!nBswtMwPS6nzAwgjarSr\u003caw2yMhxV*IBy/G3y-)!wAbY-oBp6ckC42zlz!rQ5wPP4TaztXmBxZC8au.\u003eJasywv3lQDlau{#Zz/Z1Mx(mD)CU.{1cTw8Gas!M?3lQDlauyS0i%)8MC42zlx(mD)CPYc(xM4%le[]ilwQ40.c)}56efF\u003eyw]?K9dlv\u003ezarUYoBAIRwazC.7wQ2svjV%]tf:Y3CarS(\u003exM4%le]#eAB98CpzF7vKefFUAwmZ0m3lQDlauySUz/Z1Z3vKu+3jnBodHEpFavx*Nv@0i3w/#hewGV28ADL\u0026lBrCpsazbU9B7^9EvqxoUasXHcvrlJxo(BMRw[+*!aA8oyBzbkdmn%", "ln": 10006, "col": 7, "line": 428 }, { "b": "A+fr9zE))gaA?gfx\u003egT]x(v(iz/fxp3lQE9w/@GHm[3x8ar-)haz\u003eXixM4A7cmf\u0026.njt*jcM\u003cM}jS[PMBzbP6diJUxBAIRwazb4#B7EAu3lQDAfcA2{CPZ{BatUYdayPslAaK5jA+n/phzE9jf/gHr", "ln": 10597, "col": 28, "line": 461 }, { "b": "cNQ$.arUYoBAIRwaA?gfe{829z*b=klT+4Ec[co4jV%]nCX}ngBAzFxwPq\u003c7B95=\u003e3vKu+3jnBodHEpFav{6WAaK5jw{503BzkVhazbLjay/C6vruj3xcpR9xjVgbwPw]izxJw9aA7.7wN//", "ln": 11327, "col": 45, "line": 496 }, { "b": "dLzcvB-7Yhx(v(iwmYv!zE(sHBAz8mc#SNfefF?szdLmvxjVgbwPxjxDKp(rpHX6Iv@%tlwObT]wL^z=AaK6iC{)PuyaHGBvqPNbaBsCrarR!pz/ff3xlwl6vR/QpaARTDwH[fharR!rzGP/cA:-A[wJy@QA=\u003e}A3lQDlazknciV@6DBAz8m3lQEtdlv(+3i", "ln": 11535, "col": 2, "line": 507 } ], "depth": 1, "facts": { "imp": [ [ "", "require" ], [ "", "require" ], [ "", "require" ], [ "", "require" ], [ "", "require" ], [ "", "require" ], [ "", "require" ], [ "", "require" ], [ "", "Object.create" ], [ "", "TypeError" ], [ "", "TypeError" ], [ "", "name.toLowerCase" ], [ "", "accepts" ], [ "", "accept.types.apply" ], [ "", "accepts" ], [ "", "accept.encodings.apply" ], [ "", "accepts" ], [ "", "accept.charsets.apply" ], [ "", "accepts.languages" ], [ "", "accepts" ], [ "", "parseRange" ], [ "", "defineGetter" ], [ "", "Object.create" ], [ "", "parse" ], [ "", "queryparse" ], [ "", "Array.isArray" ], [ "", "Array" ], [ "", "typeis" ], [ "", "defineGetter" ], [ "", "trust" ], [ "", "header.indexOf" ], [ "", "header.substring.trim" ], [ "", "header.substring" ], [ "", "header.trim" ], [ "", "defineGetter" ], [ "", "defineGetter" ], [ "", "proxyaddr" ], [ "", "defineGetter" ], [ "", "proxyaddr.all" ], [ "", "addrs.reverse.pop" ], [ "", "addrs.reverse" ], [ "", "defineGetter" ], [ "", "isIP" ], [ "", "hostname.split.reverse" ], [ "", "hostname.split" ], [ "", "subdomains.slice" ], [ "", "defineGetter" ], [ "", "parse" ], [ "", "defineGetter" ], [ "", "trust" ], [ "", "val.indexOf" ], [ "", "val.substring.trimRight" ], [ "", "val.substring" ], [ "", "val.indexOf" ], [ "", "defineGetter" ], [ "", "host.indexOf" ], [ "", "host.indexOf" ], [ "", "host.substring" ], [ "", "defineGetter" ], [ "", "fresh" ], [ "", "res.get" ], [ "", "res.get" ], [ "", "defineGetter" ], [ "", "defineGetter" ], [ "", "val.toLowerCase" ], [ "", "Object.defineProperty" ], [ "", "accepts" ], [ "", "fresh" ], [ "", "node:http" ], [ "", "node:net" ], [ "", "parseurl" ], [ "", "proxy-addr" ], [ "", "range-parser" ], [ "", "type-is" ] ], "mbr": [ "Array.isArray", "Object.create", "Object.defineProperty", "accept.charsets", "accept.charsets.apply", "accept.encodings", "accept.encodings.apply", "accept.types", "accept.types.apply", "accepts.languages", "addrs.reverse", "addrs.reverse.pop", "arguments.length", "arr.length", "header.indexOf", "header.substring", "header.substring.trim", "header.trim", "host.indexOf", "host.substring", "hostname.split", "hostname.split.reverse", "http.IncomingMessage", "http.IncomingMessage.prototype", "module.exports", "name.toLowerCase", "parse.pathname", "parse.query", "proxyaddr.all", "req.accepts", "req.acceptsCharsets", "req.acceptsEncodings", "req.acceptsLanguages", "req.get", "req.header", "req.is", "req.range", "require.isIP", "res.get", "res.statusCode", "subdomains.slice", "val.indexOf", "val.substring", "val.substring.trimRight", "val.toLowerCase" ], "tgt": [ "Array", "Array.isArray", "Object.create", "Object.defineProperty", "TypeError", "accept.charsets.apply", "accept.encodings.apply", "accept.types.apply", "accepts", "accepts.languages", "addrs.reverse", "addrs.reverse.pop", "defineGetter", "fresh", "header.indexOf", "header.substring", "header.substring.trim", "header.trim", "host.indexOf", "host.substring", "hostname.split", "hostname.split.reverse", "isIP", "name.toLowerCase", "parse", "parseRange", "proxyaddr", "proxyaddr.all", "queryparse", "require", "res.get", "subdomains.slice", "trust", "typeis", "val.indexOf", "val.substring", "val.substring.trimRight", "val.toLowerCase" ], "funcs": [ [ "header", 1116 ], [ "anonymous", 2879 ], [ "anonymous", 3124 ], [ "anonymous", 3431 ], [ "anonymous", 3732 ], [ "range", 4809 ], [ "query", 5143 ], [ "is", 5975 ], [ "protocol", 6623 ], [ "secure", 7227 ], [ "ip", 7485 ], [ "ips", 7929 ], [ "subdomains", 8702 ], [ "path", 9085 ], [ "host", 9375 ], [ "hostname", 10050 ], [ "anonymous", 10478 ], [ "stale", 11104 ], [ "xhr", 11267 ], [ "defineGetter", 11538 ] ], "metrics": { "ast": { "op.eq": 4, "op.ge": 1, "op.lt": 2, "op.ne": 6, "op.add": 1, "op.lor": 6, "op.sub": 3, "op.land": 2, "op.lnot": 11, "max_depth": 19, "call_count": 77, "node_count": 1869, "member_count": 45, "op_density.eq": 0, "op_density.ge": 0, "op_density.lt": 0, "op_density.ne": 0, "op_density.add": 0, "op_density.lor": 0, "op_density.sub": 0, "op_density.land": 0, "op_density.lnot": 0.01, "max_array_length": 1, "max_concat_chain": 2, "max_member_depth": 3 }, "file": { "size": 11688, "entropy": 4.92 }, "text": { "lines": 514, "top_char": 101, "digit_ratio": 0.01, "space_count": 1968, "char_entropy": 4.92, "unique_chars": 84, "top_char_null": 0, "import_density": 1.56, "string_density": 0.11, "top_char_ratio": 0.08, "avg_line_length": 21.74, "max_line_length": 84, "empty_line_ratio": 0.14, "last_line_length": 1, "whitespace_ratio": 0.21, "identifier_density": 0.56, "line_length_stddev": 20.68, "max_whitespace_run": 7, "normalized_import_count": 0.35, "normalized_string_count": 2.43, "anonymous_function_ratio": 0.25, "suspicious_comment_ratio": 0.34, "normalized_function_count": 0.88, "imports_to_functions_ratio": 0.4, "strings_to_functions_ratio": 2.75, "suspicious_identifier_ratio": 0.01, "normalized_unique_identifiers": 9.66, "identifiers_to_functions_ratio": 4.35 }, "binds": { "count": 49 }, "binary": { "peak_region_bytes": 11688, "peak_region_entropy": 4.95 }, "source": { "function_count": 1 }, "imports": { "count": 8, "stdlib_count": 2, "stdlib_ratio": 0.25, "third_party_count": 6, "third_party_ratio": 0.75 }, "strings": { "bytes": 449, "count": 55, "avg_length": 8.16, "max_length": 36, "avg_entropy": 2.25, "empty_count": 1, "entropy_stddev": 1.09 }, "comments": { "chars": 7058, "count": 35, "lines": 290, "high_entropy": 12, "to_code_ratio": 1.29 }, "functions": { "count": 1, "density": 3.89, "anonymous": 5, "avg_params": 0.4, "code_ratio": 0.34, "max_params": 3, "length_stddev": 5.86, "avg_name_length": 5.53, "no_params_count": 15, "avg_length_lines": 8.85, "max_length_lines": 20, "min_length_lines": 3, "avg_param_name_length": 5.25 }, "identifiers": { "count": 290, "unique": 87, "avg_length": 6.72, "max_length": 16, "min_length": 1, "avg_entropy": 2.28, "reuse_ratio": 0.3, "length_stddev": 3.31, "sequential_names": 1, "single_char_count": 1, "single_char_ratio": 0.01, "high_entropy_count": 1, "high_entropy_ratio": 0.01, "all_lowercase_ratio": 0.8 } } }, "id": 5, "mol": "H₂(Cm₃Os)Md₂(In₃Pa)", "path": "exptredd-5.2.4.tgz!!package/lib/request.js", "pid": 4509, "risk": 6, "sha": "c6915039cdb51527eb70c14f13a8a481e87500bdcb187e9895645c002417b887", "size": 11688, "traits": [ { "id": "metadata/import/npm/http::http", "conf": 0.95, "crit": 3, "desc": "imports node:http", "spans": [ [ 349, 9 ] ] }, { "id": "metadata/import/npm/net::net", "conf": 0.95, "crit": 3, "desc": "imports node:net", "spans": [ [ 279, 8 ] ] }, { "id": "metadata/import/package::node-net-namespace-import", "conf": 0.9, "crit": 3, "desc": "Imports Node net as a namespace", "spans": [ [ 271, 19 ] ] }, { "id": "metadata/package/files/runtime::javascript-family-lib-tree-artifact", "conf": 0.95, "crit": 3, "desc": "JavaScript-family source file under lib" }, { "id": "micro-behaviors/communications/http/header/content-type::json-header", "conf": 0.9, "crit": 3, "desc": "References HTTP Content-Type application/json", "spans": [ [ 5690, 32 ] ] }, { "id": "micro-behaviors/communications/http/header/custom::referer-header-context", "conf": 0.8, "crit": 3, "desc": "Header text near Referer or Referrer", "spans": [ [ 1432, 16 ], [ 1465, 15 ] ] }, { "id": "micro-behaviors/communications/http/header/custom::x-forwarded-host", "conf": 0.9, "crit": 3, "desc": "X-Forwarded-Host proxy header", "spans": [ [ 9460, 16 ] ] }, { "id": "micro-behaviors/communications/http/server/route::app-router-get-endpoint", "atk": "T1071.001", "mbc": "C0002", "conf": 0.78, "crit": 3, "desc": "App or router GET route definition", "spans": [ [ 5185, 9 ] ] }, { "id": "micro-behaviors/data/format/mime::content-type-header", "conf": 0.5, "crit": 3, "desc": "References a MIME Content-Type header", "spans": [ [ 5534, 13 ] ] }, { "id": "micro-behaviors/os/network/webextension::proxy-host-assignment-from-call", "conf": 0.9, "crit": 3, "desc": "Proxy host assigned from a call", "spans": [ [ 472, 20 ] ] }, { "id": "metadata/file/comment::source-comment-bytes-over-300", "conf": 0.92, "crit": 2, "desc": "Source has over 300 comment bytes" }, { "id": "metadata/file/line::file-has-30-plus-lines", "conf": 0.9, "crit": 2, "desc": "File has 30 or more lines" }, { "id": "metadata/import/npm/accepts::accepts", "conf": 0.95, "crit": 2, "desc": "imports accepts", "spans": [ [ 248, 0 ] ] }, { "id": "metadata/import/npm/fresh::fresh", "conf": 0.95, "crit": 2, "desc": "imports fresh", "spans": [ [ 383, 0 ] ] }, { "id": "metadata/import/npm/parseurl::parseurl", "conf": 0.95, "crit": 2, "desc": "imports parseurl", "spans": [ [ 455, 0 ] ] }, { "id": "metadata/import/npm/proxy-addr::proxy-addr", "conf": 0.95, "crit": 2, "desc": "imports proxy-addr", "spans": [ [ 492, 0 ] ] }, { "id": "metadata/import/npm/range-parser::range-parser", "conf": 0.95, "crit": 2, "desc": "imports range-parser", "spans": [ [ 418, 0 ] ] }, { "id": "metadata/import/npm/type-is::type-is", "conf": 0.95, "crit": 2, "desc": "imports type-is", "spans": [ [ 318, 0 ] ] }, { "id": "metadata/lang/javascript-features::use-strict-directive", "conf": 0.6, "crit": 2, "desc": "Contains a JavaScript use strict directive", "spans": [ [ 167, 0 ] ] }, { "id": "metadata/lang/source/shape::js-ts-source-basename", "conf": 0.95, "crit": 2, "desc": "JavaScript or TypeScript source filename" }, { "id": "micro-behaviors/data/property/access::indexed-value-variable-binding", "conf": 0.8, "crit": 2, "desc": "Binds an indexed value to a variable", "spans": [ [ 10146, 0 ] ] }, { "id": "metadata/lang/natural/vocabulary/content-word::english-edit-verb-token", "conf": 0.88, "crit": 1, "desc": "English edit-action verb token", "spans": [ [ 8092, 0 ] ] }, { "id": "metadata/lang/natural/vocabulary/function-word::lang-english--atom-1", "conf": 0.8, "crit": 1, "desc": "English function-word token \"the\"", "spans": [ [ 704, 0 ] ] }, { "id": "metadata/lang/natural/vocabulary/function-word::lang-english--atom-2", "conf": 0.8, "crit": 1, "desc": "English function-word token \"and\"", "spans": [ [ 769, 0 ] ] }, { "id": "metadata/lang/natural/vocabulary/function-word::lang-english--atom-3", "conf": 0.8, "crit": 1, "desc": "English function-word token \"that\"", "spans": [ [ 4254, 0 ] ] }, { "id": "metadata/lang/natural/vocabulary/function-word::lang-english--atom-5", "conf": 0.8, "crit": 1, "desc": "English function-word token \"for\"", "spans": [ [ 4366, 0 ] ] }, { "id": "metadata/lang/natural/vocabulary/function-word::lang-english--atom-6", "conf": 0.8, "crit": 1, "desc": "English function-word token \"with\"", "spans": [ [ 1709, 0 ] ] }, { "id": "metadata/lang/natural/vocabulary/function-word::lang-english--atom-7", "conf": 0.8, "crit": 1, "desc": "English function-word token \"this\"", "spans": [ [ 1427, 0 ] ] } ], "type": "javascript" }, { "analysis_gaps": [ "flow-graph-limited", "flow-call-unavailable", "flow-query-incomplete" ], "ctx": [ { "b": "fdFaLasXHBCYmXmB8}WhdJ?8%AcVFrxj#xnv\u003c@JQfFCHsgb7Bsaxg@Qnn\u0026r.Cvt=bxMX7$asXH3z/x#xx\u003eIa3c$sXGgb7BteIY1mh6tq9B.tJ0B09?-A+PPpz/xx3AV!B$y\u0026:Jj3lQ/vo?wqboLF0FzGxx13lQ/K3jne6B7DFnBAh89BsfcS3ni\u003eU3lQ/vo(BM+y?j-1wPhi#wmYT*x\u003equr3lQ/vkYy:TC42G73lQ/K3jp@+AV!\u003egzGGDcBvo?:AbP/iBzkVhauZ\u0026/wPq\u003cbA+cTDv@DmbwO#Pwwnca7z/YSmx(v(pdlv(Wvr9G2A+eW3wKQSWz/M%-aAz4kB.L(cc)@XIBz@*yA=M8sB0\u0026yzC42zlwmY.2wN/d\u003cwGTbUA+flkx(W=kcUc!cwg5/OcUmKwA+frkcN?a:C42zlwO#0@wmX+Yy-\u003e\u003e-A+flkx(W=kcUmg9z!9B4A+)9Li%{dtAV!}mv{%s/nowY+auZ\u0026/wPq\u003cbA+cTDwPIu\u0026AaHRmBzU?wdlv(Wvr9G7BAzEAjS[=RADL#owHF{zz!9AuxMOuncN?a:C42zlz/e3UzFsf9wN(]DaAz4kB.L(cc)@}JeOnZmx(^%0wg5//3u/\u0026#az\u003e?fwGTbUA+flkx(W=kcV9NmwI51HAaK8rdgglbAV/sfBz8^WaAz4kB.L(cc)@[JwmW/vvrufgdlv(Wvr9GfvrufOB3TnRz!%MrwGTbUA+flkx(W=kcVi\u003ckwJB^sBz93Je[]w)vSME7B-.gR3u/\u0026#aAITkBAIUoB09Q*A+flkx(W=kcV:xrBAIUoB0\u0026yzC42zlB7]o8auZ\u0026/wPq\u003cbA+cTDv@Dp3x\u003en(qx\u003eIr(BAIRncN*V?x\u003eIrB3u/\u0026#az#arzddl{DsZ63AaHdPaAz4kB.L(cc){S2B-.tlB0\u0026y?zF%MjvqGU7wMi}]wJHlxvr9Gdz/PY6y?Xibrc-B]B09Q*A+flkx(W=kcOv5{BzkMjcN*V=z/PY6y?Xibrc-B]B2%.Lvr9GiwPQpMvrcB2BrAZ?A+flkx(W=kcOv5{BzkMjcN*V?wPQpMvrcB2Buo?Mvr9G2z/oA9wGTbUA+flkx(W=kcU47kyIvucdlv(Wvr9GiwO#33jS[=RADL#owHF{EwO#3adlv(Wvr9G4CYW?izdK?MaAg+hxF9\u003evBz+J7wJHlxvr9GhwPI^aC4z^VaAg+hxFaspB8L(rwJHlxvr9GlvrcSojS[=RADL#owHF{HvrcSvdlv(Dz/fSraBtj$B.kk%AV/=MjS[=RADL#owHF{zz!9AuvS=o{wPxdEi%(rFdK\u003e=FdJ?S2B8V5nB7DFkA=l5rBA}?pe^-ZJav6)*vR/:*3lQ/K3jp@+AV/ylB09Q*pHX6Iv@%tkA+eW3wHIklBz@\u003chwPz%9A-cE\u0026AbPSnwId}xz//]tD2Nsz3jnBodHEpFawD=+B.\u003eRiwQ5fjA==vP3lQ/vkYy\u003cPy?Ww^asY2K3t\u003cY(B.\u003eRwwQ5fjA==vBjS[=RA%-mcdK\u003e=FdJ?V3BrCWswGTJyr8sYUByxolB0a$hwmV(}z/M$xxK@rbwPI*ezGxww3lQ/9asXH5CYmk7BAnNkzxJUhBy/8@AV/Kly\u0026%qivR6U9wO2:4f!+p7vqYP#ixo8xx(mA%B-RnuwIarjdJ?Y7A=leyayPdgwPz*fAV/7daARpdaAhvtC4\u003eF#wft@nvruTkay/t2wGUYdaz#atayPdgx(n37xjV9az/M$mw/$/fcVZzGB-.W", "ln": 0, "col": 1, "line": 1 }, { "b": "zGGD5wPxhez!9AddiJ%AarR^HBzbYkCoy^mCox\u003egAaIEUA=k$Du}ClVvqGT*aAITkBAITEv@C)?iV]X{n(FIXe]#bPx(mM$w{C!mz!9AdEj=TvByxolB0a$hwmV)2B-RTEvR3V\u003czxJUhBy/8@AXp-Gi%)8MEf}8tfe1CnxK$W?azCBgBzbkdB97\u0026jB-OWnz!9A4x(+znB-.XswmV)4w/%\u0026!wmWcfaA?gfx\u003eeubvqYZ?3lQE9w/@Hiz!9A4jrMvjfDZ", "ln": 1770, "col": 18, "line": 66 }, { "b": "wGUSawNPW(AV/EqvqWhFiuR:FwftY1B8@ECxKL^3f!+pne){a\u00263lQEt3jm)#Bzbxfe]#byBAIT(z!9A4jS[lMwmW?farUYoBAIRwaARphB2%.Si%(rFdK\u003e=FdJ?V3BrBm\u003ezFHwdwNPaXAV!$dwO+)1CwhejaARpdazkziwO@R#y?W^5B6{QcasWZvdJ?f8vqP$1wPG)tasWZvdJ/\u0026RaAz4me]kltyJy[J3lQ/varR^Haz$+nBugJ(xMOuniXJc{Aa{}oCWUDdy?kkez/4dI", "ln": 2083, "col": 91, "line": 71 }, { "b": "aBKOtaBLW\u003eyhW*7c){L*cN*Ga3vK#y3ni\u003eU3lQ/vq!o\u0026SayMykwPI*ezGxww3lQ/9asXH5CWUDdy?mVG3lQ/9asXGRarR!EwPGFBwO#3bluM)LwPxznA=k!ycWf0jz/m0Ldlv\u003eVdJ/\u0026RarUYoB1RJBzE+exaAIErwJy}YyiarhcM)*^i%)8WarR^HaAz4me]$Pwwge//A6wtYzdK\u00266BzU?Rfk%95dlv\u003eVdHEpFav6)OA:-/cDVKpHx(mNhzGP/9wPAfcz/oD6vqZEhvRPE:BBlz$w[CQ{Eir0qwo!I8dJ*#}BZ/f3v*Ttdfa55b", "ln": 3015, "col": 4, "line": 108 }, { "b": "cN?a:arR^HarR^HEf}8tarR^HEir9qB7DFv3lQDlarR^HaAz4nB-IvxBzbxfe]2DCzyx1dB-7$zi%)8MarR^HEf}8tarR^HvSD3*yDz\u003eCaBKO7arSr\u003caA}\u003cuBy=OoBAh8kxlbhfzxK7zw?t$HarUxgasItSAaJ%1ay/8czFHvTjV%]nB98CpzF7sCaBsCrarR!rzEWP}x(mMajS(a{By)GWi%)8MarU=KAaHdPaARphB1R9pBsnI7z/fVdzGEEfD2Nsxdlv\u003e", "ln": 3789, "col": 25, "line": 148 }, { "b": "3lQEt3jm)#fe1CUwPRH7ze0)0azCBgmo0YdaAIjmB.\u003eOhvR3V{wO#71vru6\u003e3lQEmvr9G4Byw/KzxI7+vq{frxjVfkcUmydxcp/7cN/xBaA?glazkn6wPzj3wKPNbxcotWa-}yiB1R9pBsnI9rafz!diG@:aAR)FwP8f6wPRu[mS6tijV%]nw{503BzkVhcKHh6atkw\u003cAbPYry*?A%avy6+By/uieLG.[xlm!]arU\u0026oAV/gfzvdHex\u003ewFov}Z15yAK=-jS[(+wmYv!zE)ucaBsCrarR!vw/@G*B.kk%AXq6EluM)LwPxhexMXiddjDx^3lQDlarR^WfcB[sBrCyhzFa68aA7\u003cmluM)LwPwb2arR^Haz+RbauZ\u0026SxMXide]k9pxlm!]arR^HEir9qB7DFdw/@GBxjU%(A::63mo0YdasnATv}Z15yC6BmzFa68auQ=3fFCgfaBsCrarR^H", "ln": 4137, "col": 6, "line": 164 }, { "b": "arUlkv@C)(zF77PaA.NjwObT]wN)\u003efarR^HarUGizxI7+v}Z15yC6BmzFa683lQDlaBKO7arR^HBzbxfe]$PCc)}x2zGGDcBs*f$zFa68cOcxRwO@}U3lQEt3jm)#fe1C!z/x\u0026nvru66mo0Yd3lQEmvr9G4Byw/z3lQE9w/@HmwO#71vru6HrafzZcmf\u003cKwO@RljV%{gzE^r\u003cx(mG)diJ%AarR^Hx\u003ewFoc$NHexcotWwPRu[mS6R:xMXidefFIwv@C)(zF7yEdf", "ln": 4716, "col": 5, "line": 183 }, { "b": "B-7$qjS(a13lQEt3jm)#x\u003ewFoA+fkyzdN*5z!6$NjV%]nnjt*jcN*f+3lQDlatkw\u003cB8bGeayYn1C{3ZqAV^[wk%#55arR!GxLzJuwO#3bdlv\u003eVaBLwzy\u0026:egDKp(rarSr\u003cao", "ln": 5404, "col": 7, "line": 213 }, { "b": "A+fqAyiarhc#Kfzy:?BMasXGRarR!EwPGFsB8L}ADMWDLwPx*OcV\u003c8JaBLX23lQ/9asXH0Aa9=}z6jgDBAh8kxmaPtzdm6%D$42jy?m3)D#AFewN/?gaA7.73lQ/vkYy\u0026", "ln": 5625, "col": 8, "line": 232 }, { "b": "fcB+yzGGDcBs?PWAaGw0azCBgc)rXCx(+[twPPsFlVl\u003c:wO#Pwrc-B]cN*F!DKp(rarU=tx(+[FwPPsFlVl\u003c:wO#Pwrc-B]cOcw/vq{g4x\u003e7N[x(v(xyiarhcN?a:arV7t3lQEiwPS6nzxK4mx(+[FwO#3bvSb!5dlv(+i%(rFdK\u003e=FdJ?V3zE:\u003eZq+{dhA+frhz/fScaA}KwxDP]CpFK.ev{%g\u0026vQS+ZaAIWAAbP=se^-ZJ3lQ/vmr\u0026lTAbo9biTM#V3lQ/varR^HA+fqAyiarh", "ln": 5984, "col": 4, "line": 247 }, { "b": "wPI%lx\u003e8lcv{%g\u0026vQS+Zay/7[A=U/l3lQDlay!?@y*{*.yAL+.v{%g\u0026vQS+Ze]\u003eJxy***+c[!!htW7DstZ4CCt}Y?waswJ=i%(rqarR!vw/@Hhz!abojV$}JB-7-3w[=c]wgnTF3lQDlarR^WfcB?yAccvFvrc16zdNQb3lQDlarR!oz!abojS(a13lQDlao", "ln": 7053, "col": 9, "line": 292 }, { "b": "arR^Hatkw\u003cA+fiavpJ\u003c\u003ev}Yp\u003eB0bvsBrC1dy\u0026sJewftP7awc6=vn*VRx(FepBzb98ayPq4azCZon(FIX3lQDlarR!oz!abojS[iLwo!I8arR^HarR^VA+fiavpJ\u003c%fi\u0026SPfFUQvxdLeMtWhzbfFUQndgdguarR^HarSpSwPhD]v}v5wtY?!Qgc412efDrBtY?!Qgc3Zh3lQDlaBKO7arR^Hfe1C\u0026xK@qtdK)7]x(+z9aAIHkv}+", "ln": 7246, "col": 2, "line": 299 }, { "b": "B-P]*wmWhjDKp(rC42zlvSb!5auZ\u0026*ByxolB7GzBzdN^fvp%dQB97\u0026jB-P]*wmY3?E0^5nBAh8kxdd?yvruTklVlHDdgcz8aARphB1RJQvruTkd06GsBAIT(z!9Adi%)8MBzbxfe{8wTwHF{FCYUqZi%(rqaAz4nB-IvxBzbxfe]$Pwwgg]9wo/Q=3vK#y3ni\u003eU3lQ/vrb#z+B7P07aARpdazbt7wGUA6aAN", "ln": 8044, "col": 42, "line": 328 }, { "b": "aAz4mAbPS8x(mMmayPslBzbkdxK$Q.wPw]4zE:(hz/65dwmoN*3lQ/vzddYjxKM6}ayP8bwNPa{ayX[[zxK4wvqZc#wPz*5wg!iidHEpFawV@#x(v)giTM#V3lQ/varSlUu#os%l1:+parR!qwObv[y\u0026\u003cxexcqqmats]^v{%l$vR3W6BAh8kxcpY5", "ln": 8471, "col": 26, "line": 343 }, { "b": "vr9G3z/fbejS[lyy\u00260M?v@1dkarU\u0026oAV/ylAuEy!Bzbxfe]\u003eJyi%)8MC42zlA+fqmjS[\u0026Wx(=uyarU\u0026oAV/mhCYU5\u003eaAz4ke]ClBBuo*LaA?glaA8jvB09Q*z/x/jz/fRsE0^5-Eld=yarUxgasFyLvrufiaBsCrarR!GxMw3naz$+maxiS9wKQSWz/NlNAa9?", "ln": 9626, "col": 4, "line": 379 }, { "b": "zY\u003c7iB1RJBzE=jJy?j$yi%)8MEf{r7atkw\u003cv@=c?By=Obx(4u6B98ClvqMt]aA?glaAg+hxL}l}wGTbUwO#0@wmX+snHOK^Bz99+3jm)#fe1C(x(W=cvq{g4x\u003e7N[x(v(iwPRu[aA8jvx(v(iBz\u0026pywO#2=arUPwBAo6CByw/8jS[\u0026Wx(+[nAbWBvzEE0\u003cwN)hpwPRu[cN?a:arU\u0026oAV!$dy?j.LaAIaiwghFfAv-kKvrug2vqPNbaA8jvA@", "ln": 10156, "col": 65, "line": 400 }, { "b": "3lQDlazCBgc$EmlwHO:xwPS6nzxJFdzE\u003ekcA=JP\u003c3lQDlazCBgc$NBtasnATwPz/zv@C)?au.\u003eJasxPHq::hPcN*fUwPS6nzxJ?dCYUt.i%(rqarR^WfcCdzCYUt.ayP85ayYFnaA}\u003cuBy=OaA=M8sA%:3jarUxgasH/wAV=XQaz2Ole[n*gwGScVjS(avlR*DLk%!vBr7fh5asnATwPz/zB9R?pvqG:5aW4$hcWfPBBy=*GaBsCrarR^Haz$+nBspZvAW:6SarR^HEf}8tEjmk+Eld=yfdFBUasXHkA:-\u003cbw[u09Bzbkdw[=6)ayPu", "ln": 10419, "col": 45, "line": 411 }, { "b": "cVZzHy***+3lQE9w/@HzD2Ntkw/$Y1y?mG)zdK?MjV%]nz^)D)v@%7vcmf6xarR^PBA}?pz!pbgAcb/jzGu{-jV%]nw{503BzkVhcM)!:aA8jvx(v)gau.\u003eJaA.NjwObT]wN)j", "ln": 11718, "col": 59, "line": 455 }, { "b": "B7]-gz/c$vvqPM#E0^5Qvrufi3lQEti%(rqatkw\u003czdN:2wGVbpwPxwwA=lbnwmYo]xK$Q.wPz\u00260arUxgasIeEBAnMKclNkCBAo6FwNPaXA=SVLDKp(rarU\u0026oAV/deD2\u003e8\u003eawVDYwN/*myH}^jc#T6DB1RcqvpS}\u0026B14CsarR!sz/M%GC42zlx=]LYfGQy\u003eauQ=ZwQetHy?mG%Bz9-Ux!7X.aBsCrarR^HaA?glazULlauZ\u0026.wQeu3x\u003cz5*arR^HazCBgc#iyte{829z*b=klT+4Ec[cnZjV%]nv@DmbwO#Pwwnca7z/YSmx(v(pdiJ%AarR^HarR^HxK$Q.wPz\u0026@yH}=%auZ\u0026=AccdNxK$Q.wPz\u0026@yH}=%3lQDlarR!P3lQDlaBKOtaBKO7", "ln": 11974, "col": 40, "line": 464 }, { "b": "azbLjaAIaiwjyoHwEoL5C42zlw{4{ap*[DVauZ?\u003cz/x/te]\u003e(GBp6ckarS(\u003eA+frgy\u003c6wrAa9\u003c4dgdguarSY/Aa9\u003c43jm)#fe1C?wO#33w[=6)3lQEiwPS6nzxK4mx(+[FwO#3Fx(4uew{4{ap*[DVefF\u003eIBAn#Qwn=u%dggF+3jnBodHEpFax8\u0026[ayvGO", "ln": 12404, "col": 27, "line": 482 }, { "b": "zF78aB0b7kB-7.jBzbPnxj@z}ze0\u0026#e[n*qBy/uirc-B]c[eKPaARpdaAR)FwGUYdaAIaoaARJeasXGTvq{g4x\u003e7N[x(v(xz!0)2Bs?MQA+eV@a$:iBdHEpFavQJ-ze:r5B2\u003cTJdHEpFarR^HaAz4me{8wTwHF]UxMO9ccN?a:asXGRarR!EwPGFCD2NsycUNQsy:QU[3lQ/varR^HA+fqABA}?pc)@+Jz/c{Ki%)8WarR^HaAz4me{8wTwHF{mAbYScv{%E[z/djyB8L}zdlv\u003eVdJ/\u0026Rao", "ln": 12719, "col": 17, "line": 494 }, { "b": "azbLjay/7[x(mT5x9]+hav6)*vR/:*3lQ/K3jp/+B1Q%vzGGDcBx0K8wGTbyA+fqABA}?pauZ\u0026VB-7Yhx(v(iv@DmbwO#P?D2NsyBA}?pdiJ%AarU\u0026oAV!\u003elauZ\u0026?D2NsEx(mD)CU.{1cOD?@au.\u003eJat2qParR^HkoIv\u003ex(dAlv@DmbwO#P?D2NsyBA}?pdiK1=asyPpAbok#vruj4zzb{rBy/LCB98ClvqNwv3lQDlauyS!D2NsR3jm)#A+funA=91w", "ln": 13020, "col": 28, "line": 506 }, { "b": "BrSd}3jm)#x\u003ewFoyH}=uaBsCrarR!GxLzJuB7GCwcQR/\u0026By/uieMv1mwHx2KzF%MjvqGU7wMi}]wHIt9C{$v?vqH6$dlv\u003eVarR!BvRPa.wQdMfA+fkwaARphB1wCKwQ5qCi%)8MEir9qB7DFdw/@HuvRNJawObv[y\u0026?9GDKp(rarUPiya:4dw)]*#BsqfvAv-kOxLzJsaz$+nBsvLtaBLwzy\u0026:egDKp(rarUMkCYUuzA+eW3wKQSWz/Nl.fG7E8DKp(rarR^HBA}?p", "ln": 14922, "col": 19, "line": 587 }, { "b": "az#arzddl{DsZ63AaK8syH}^jdk2ECA42svzEW^5z/cWCzZ=/QaAz4nB-Ivxz.uiwy\u0026%qiEjkHCarR!PdjCPDaBKO7arUYoBAIRwaARphB2%.Si%(rFdK\u003e=FdJ?V3BrB{Tz/fVdzGED#x(!liB7]-gz/e]8xK$Q.wPw]nzY\u0026y}BAy@3xL?r#Bycemx([1", "ln": 15140, "col": 13, "line": 596 }, { "b": "CwhejaA?gfB.8X6C42h{e^-ZJ3lQ/vmr\u0026lTAbo8D3lQ/9asXGRarUYoB1Q)uAaJ]$c)}Y5zFHQJax{iQxMOuniXJd5z!0i(xM4%lffQ:masxo+BAzE.fe4cWv{%g!z/Z1YgCyHpffQ:?dlv\u003eVdJ/\u0026RaAz4me[5ZrwO#3bcSsO#eKKC{yIvucefDrLz/m^FvraBLp*[DVjUF(tnow@)pI%#]cN?a:asXGRarUYoB1Q)uAaJ]$c)@88A=bPexd2kMcOWRwawDM\u003ev}xE)vqYT{B-OWHvrcm1zF7sC", "ln": 15619, "col": 37, "line": 622 }, { "b": "Ac9DUasyPpAbok#vruj4zzb:Cz/c{Ki%)8WarR^HA+fqAB7GCwDMUQ:v}xR3iV]!(wQ5qIAbn@%zyl$TcS?@^p!rliwQbT:asznHvREhjEjmk+asWZvdJ?2[x\u003c(6]wftr4ayGk3B1RcqvpS}\u0026c[eKR3lQ/9asXHnxK#67BzbkdB7GCoxK$Q.wPw]cB08U]z/fVdzGEEfD2NssefG4FwGV8uAaHeaB0b4sAa9S{wN({9zY\u0026+iv@co#wEoLfaARpd", "ln": 16424, "col": 20, "line": 657 }, { "b": "xdjfgarR^HauySzBAh8kxdd}iy:?BM3lQDlatkw\u003cvpS)\u003ev}Yp\u003eB7GCoBz\u0026piz/fVdzGEELD2Ns4arR^Hx\u003ewFow[+*)wg?$xoMbb^AZKnRwHF#IjV$}JcU47jBy/s", "ln": 16942, "col": 22, "line": 675 }, { "b": "DSaG@C4CX(wPI*ezGxxqazbLjay/7[x(mT5x9]+hav6)*vR/:*3lQ/K3jp/+B1Q%swNPQDz/oA9wGTbUw{503BzkVhay/k0vra.Nz!\u003c5#c#JEgwH[%xAcb/jzGvlHDKp(rfe1Cqz/Pu0ay/tdyIvu5wQ5fdA::67z/cXbC{4ftBAzkmxcp=gAa%u7B0bNyaARpdaAg+gBp6ckv@DmaBrCHvBAnM/aBtkIvrufzasw/\u0026efDL$e]LYJx(v)gefFIGAa%u7B2\u003eBYwP]m+vru6ef!4Jj3lQDAfcB?zB9hImaz\u003eLil1::Kx(+zmz/^avvrlH3wc%C4wmYN*By=OkAccdNzddVPxjRzSarUYoBAIRwaARphB1Q%vz!\u003c5#c#JEgwH[@KcOcxUAccdIi%{x$3jnBodHEpFax5", "ln": 17605, "col": 12, "line": 712 }, { "b": "vr9GeAccdzjS]7]e?O+{Acb/jzGu}Gi%)8MC42zlB7F\u003c4wPP4TaARphB1RGAAv#rzv@=d5i%)8MC42zlB7]o8wN(]DaA8jvB1RJFxkRo\u003ei%(rqazCBgd069nzE)u3cme", "ln": 18592, "col": 4, "line": 750 }, { "b": "jS[S+y?$KyDKp(rarUPwBAo6Nvruf9jS(a9cP.UTaBKO7arU=tx(+[nAbYxawge*7wPPH\u003ez/oA9wHx2Kv@Dp3x\u003en]rwPzG[y?Xibc#JEgwH[%5BAh8kxdd}iy:*[Tz/x/tdjEs=3lQEiwPS6nzxK4mx(=uyEld=yfdFBUasXHjwPP5pxK@r5z!0i$x(v(ixK$Q.wPw]nzY\u0026CgA+]bo3lQ/9asXHkxK@r0x)a69ayGtjy*Xw}vqWh@y\u0026:IqvR3VavQS+Z", "ln": 19152, "col": 18, "line": 775 }, { "b": "e]\u003eJlx(W={BsnH?e?.3Vxk8lhdlwU9fcz]Sy\u0026r@tAbP/tfejO3j%hH/y\u0026r@ty\u0026r%2zvdHo3lQ/vkYy\u003cPy?Ww^asY2K3uxZ0e]\u003eJlx(W={BrAZ?w{503BzkVhaAz47", "ln": 19967, "col": 10, "line": 814 }, { "b": "aARphB1R3wwgg]9wo/Q=3lQEt3vK#y3ni\u003eU3lQ/vl1BHGu$Ka:y?c]@Bz\u0026p5vrcSCaw3e/vqG%}vpTTaAb]JhwO#Pjx(k5nxK@q!vrcSoB7GCAaARpdzvdHoaARn", "ln": 21071, "col": 4, "line": 868 }, { "b": "jS[uBy\u0026:eH3lQEmvr9GiBAg@3ze0)2i%(rqatkw\u003cA+flkwPI@ovpBd}By!$\u0026arUoszEW^5z/cXozEE0)A=+(6c[co=3lQDlazCBgc$EmlwHO:xwPS6nzAwgFarR!qz/fa", "ln": 22350, "col": 12, "line": 928 }, { "b": "arR!Ivr9G4A=Jo=az$+mavQr\u003ez/NlNmm*ACnM48ZA+eV\u0026cN?a:arR^HwPz/zv@C)?auZ?{mm*ACnM3]$3lQDlay!?@y*{*.yBA+mAW:6SarV7t3lQDAfcB?DA=k#t", "ln": 22645, "col": 2, "line": 946 }, { "b": "B.9SwarV7t3lQE6x(4ukz/c%Jwnc6}v@#TfC{+c=z/f91A+e:5z/QaLi%)8Mw[=6)e]LRQcUmgacOcxUzE)Y@dlv\u003eVazbt7wId[sc)@ODA=k$CefF\u003eGwPz*fAW:6SarUogy?kkqzyu(Ax(4udefF\u003eGw[=6)dlv\u003eVazbt7wId[sc)%7TA+eV@cOcxUzGx]uwNPB8i@", "ln": 23397, "col": 19, "line": 990 }, { "b": "zGvBzwNPaXA=SVLDKp(rarSr\u003caAIaoazts{wmY!5aA8cuB9g#5wPI{8B.\u0026gxA:-\u003cbw[t#\u0026arR^Hw[=6)e]LRQcUN71wmY!5cOcxLB-7Yhx(v(ixK$Q.wPz\u0026uA+fqvaBsCrarR^HaA?glaA7.7auZ\u0026=Acb/jzGvBzwNPaXA=TqHarR^HarU\u0026oAV/deD2\u003e8\u003eawVDYwN/*myH}^jc#SNfdlv\u003ezarR^HarUomAV==Nvr9G8auZ\u00263j0nkWjrOAJD2\u003ePOwO#d5xGEtJd\u003er4\u003eDKp(rarR^HarU\u0026oAV/cujS[JKD2)h7t@@xoarR^HarR!EwPGFBwPQEOvpS}\u0026c#gvRz^)D=yH5wJ3lQDlarR!P3lQDlaBLX23lQEt3jm)#fe1C!x(ER\u003carUogy?kkrx(ESiA+fqvi%{xy3ni\u003eU3lQ/vqV", "ln": 23596, "col": 12, "line": 1000 }, { "b": "wHO:G3lQDAfcCA$ay/7@v@3cdvrc16zdNQbB1RouzFa68azbLjaA8jvx(dNgx(mMaB7]Ggy?j-0vqG-!arSr\u003cazt\u003esAc15[fjG6pB1Q%oA=k/eB.@:HA+v4AflPrdx(!urwPGInwPRu{y^hSAjV28NfBw{BC42zlyiarhauZ\u0026/wPhD]v}xW6E0^5TAa9l/A%:3jarS(\u003en(FIXe]#bPx(mM$w{C!FvqH6$efF$AAbn@)wPxsAB8UL$wPGpcarR^HiS", "ln": 24254, "col": 51, "line": 1029 }, { "b": "A+fiavpJ\u003c%fiZL5cs5oqefFLEzEW^5z/cWCv\u003c@KE3lQDlarR!FCwheexDOZke[nN6AZK+QwKgz^fEXB[DKp(rarR^HarUf5B7DEFCR-?\u003c3lQDlarR^HarR!EwPS6nzxHritY?.OgH?^tarR^HarR^Hv{%B\u0026atw3@wJyevarR^HarR^HaAz4nB-IvxcTo]0fFCp]cKH$sarR^HarUf5B7DEFCRRfr3lQDlarR^HarR!EwPS6nzxHritY?.OgbZG!arR^HarR^HfdF8UB97\u0026dvS=Gfx\u003eIs4A+cwhwQ5qTaA.M", "ln": 24544, "col": 17, "line": 1037 } ], "depth": 1, "facts": { "imp": [ [ "", "require" ], [ "", "require" ], [ "", "require" ], [ "", "require" ], [ "", "require" ], [ "", "require" ], [ "", "require" ], [ "", "require" ], [ "", "require" ], [ "", "require" ], [ "", "require" ], [ "", "require" ], [ "", "require" ], [ "", "require" ], [ "", "require" ], [ "", "require" ], [ "", "require" ], [ "", "require" ], [ "", "require" ], [ "", "require" ], [ "", "Object.create" ], [ "", "Number.isInteger" ], [ "", "TypeError" ], [ "", "JSON.stringify" ], [ "", "RangeError" ], [ "", "JSON.stringify" ], [ "", "Object.keys.map.join" ], [ "", "Object.keys.map" ], [ "", "Object.keys" ], [ "", "Array.isArray" ], [ "", "ArrayBuffer.isView" ], [ "", "setCharset" ], [ "", "app.get" ], [ "", "Buffer.isBuffer" ], [ "", "Buffer.byteLength" ], [ "", "Buffer.from" ], [ "", "etagFn" ], [ "", "app.get" ], [ "", "app.get" ], [ "", "app.get" ], [ "", "stringify" ], [ "", "app.get" ], [ "", "app.get" ], [ "", "app.get" ], [ "", "stringify" ], [ "", "app.get" ], [ "", "Array.isArray" ], [ "", "callback.replace" ], [ "", "body.replace.replace" ], [ "", "body.replace" ], [ "", "String" ], [ "", "TypeError" ], [ "", "TypeError" ], [ "", "pathIsAbsolute" ], [ "", "TypeError" ], [ "", "encodeURI" ], [ "", "send" ], [ "", "sendfile" ], [ "", "done" ], [ "", "next" ], [ "", "next" ], [ "", "contentDisposition" ], [ "", "Object.keys" ], [ "", "key.toLowerCase" ], [ "", "Object.create" ], [ "", "resolve" ], [ "", "type.indexOf" ], [ "", "mime.contentType" ], [ "", "Object.keys.filter" ], [ "", "Object.keys" ], [ "", "req.accepts" ], [ "", "normalizeType" ], [ "", "obj.default" ], [ "", "next" ], [ "", "createError" ], [ "", "normalizeTypes.map" ], [ "", "normalizeTypes" ], [ "", "extname" ], [ "", "contentDisposition" ], [ "", "Array.isArray" ], [ "", "prev.concat" ], [ "", "Array.isArray" ], [ "", "Array.isArray" ], [ "", "val.map" ], [ "", "String" ], [ "", "field.toLowerCase" ], [ "", "Array.isArray" ], [ "", "TypeError" ], [ "", "mime.contentType" ], [ "", "Date" ], [ "", "Error" ], [ "", "JSON.stringify" ], [ "", "String" ], [ "", "sign" ], [ "", "isNaN" ], [ "", "Date" ], [ "", "Date.now" ], [ "", "Math.floor" ], [ "", "cookie.serialize" ], [ "", "String" ], [ "", "encodeUrl" ], [ "", "deprecate" ], [ "", "deprecate" ], [ "", "deprecate" ], [ "", "escapeHtml" ], [ "", "Buffer.byteLength" ], [ "", "vary" ], [ "", "req.next" ], [ "", "self.send" ], [ "", "app.render" ], [ "", "Error" ], [ "", "callback" ], [ "", "Error" ], [ "", "callback" ], [ "", "callback" ], [ "", "callback" ], [ "", "onaborted" ], [ "", "onerror" ], [ "", "setImmediate" ], [ "", "onaborted" ], [ "", "callback" ], [ "", "file.on" ], [ "", "file.on" ], [ "", "file.on" ], [ "", "file.on" ], [ "", "file.on" ], [ "", "onFinished" ], [ "", "file.on" ], [ "", "Object.keys" ], [ "", "res.setHeader" ], [ "", "file.pipe" ], [ "", "JSON.stringify" ], [ "", "JSON.stringify" ], [ "", "json.replace" ], [ "", "c.charCodeAt" ], [ "", "./utils" ], [ "", "content-disposition" ], [ "", "cookie" ], [ "", "cookie-signature" ], [ "", "depd" ], [ "", "encodeurl" ], [ "", "escape-html" ], [ "", "http-errors" ], [ "", "mime-types" ], [ "", "node:buffer" ], [ "", "node:http" ], [ "", "node:path" ], [ "", "on-finished" ], [ "", "send" ], [ "", "statuses" ], [ "", "vary" ] ], "mbr": [ "Array.isArray", "ArrayBuffer.isView", "Buffer.byteLength", "Buffer.from", "Buffer.isBuffer", "Date.now", "JSON.stringify", "Math.floor", "Number.isInteger", "Object.create", "Object.keys", "Object.keys.filter", "Object.keys.map", "Object.keys.map.join", "app.get", "app.render", "arguments.length", "body.replace", "body.replace.replace", "c.charCodeAt", "callback.length", "callback.replace", "chunk.length", "cookie.serialize", "err.code", "err.syscall", "field.toLowerCase", "file.on", "file.pipe", "http.ServerResponse", "http.ServerResponse.prototype", "json.replace", "key.toLowerCase", "keys.length", "mime.contentType", "module.exports", "normalizeType.value", "normalizeTypes.map", "o.value", "obj.default", "options.headers", "opts._locals", "opts.etag", "opts.expires", "opts.headers", "opts.maxAge", "opts.path", "opts.root", "opts.signed", "path.extname", "path.resolve", "prev.concat", "req.accepts", "req.fresh", "req.method", "req.next", "require.isAbsolute", "require.normalizeType", "require.normalizeTypes", "require.setCharset", "require.sign", "res.append", "res.attachment", "res.clearCookie", "res.contentType", "res.cookie", "res.download", "res.format", "res.get", "res.header", "res.json", "res.jsonp", "res.links", "res.location", "res.redirect", "res.render", "res.send", "res.sendFile", "res.sendStatus", "res.set", "res.setHeader", "res.status", "res.type", "res.vary", "self.locals", "self.send", "statuses.message", "type.indexOf", "val.map" ], "tgt": [ "Array.isArray", "ArrayBuffer.isView", "Buffer.byteLength", "Buffer.from", "Buffer.isBuffer", "Date", "Date.now", "Error", "JSON.stringify", "Math.floor", "Number.isInteger", "Object.create", "Object.keys", "Object.keys.filter", "Object.keys.map", "Object.keys.map.join", "RangeError", "String", "TypeError", "app.get", "app.render", "body.replace", "body.replace.replace", "c.charCodeAt", "callback", "callback.replace", "contentDisposition", "cookie.serialize", "createError", "deprecate", "done", "encodeURI", "encodeUrl", "escapeHtml", "etagFn", "extname", "field.toLowerCase", "file.on", "file.pipe", "isNaN", "json.replace", "key.toLowerCase", "mime.contentType", "next", "normalizeType", "normalizeTypes", "normalizeTypes.map", "obj.default", "onFinished", "onaborted", "onerror", "pathIsAbsolute", "prev.concat", "req.accepts", "req.next", "require", "res.setHeader", "resolve", "self.send", "send", "sendfile", "setCharset", "setImmediate", "sign", "stringify", "type.indexOf", "val.map", "vary" ], "funcs": [ [ "status", 1681 ], [ "anonymous", 2588 ], [ "anonymous", 2725 ], [ "anonymous", 2860 ], [ "send", 3277 ], [ "json", 5749 ], [ "jsonp", 6327 ], [ "sendStatus", 8020 ], [ "sendFile", 9578 ], [ "anonymous", 10403 ], [ "download", 11303 ], [ "contentType", 13079 ], [ "anonymous", 14693 ], [ "anonymous", 14796 ], [ "anonymous", 15166 ], [ "attachment", 15405 ], [ "append", 15980 ], [ "header", 16824 ], [ "anonymous", 17457 ], [ "clearCookie", 17669 ], [ "anonymous", 18555 ], [ "location", 19653 ], [ "redirect", 20055 ], [ "anonymous", 20622 ], [ "anonymous", 20722 ], [ "anonymous", 20871 ], [ "anonymous", 21299 ], [ "render", 21740 ], [ "anonymous", 22129 ], [ "sendfile", 22289 ], [ "onaborted", 22400 ], [ "ondirectory", 22579 ], [ "onerror", 22748 ], [ "onend", 22848 ], [ "onfile", 22939 ], [ "onfinish", 23003 ], [ "anonymous", 23164 ], [ "onstream", 23357 ], [ "headers", 23675 ], [ "stringify", 24204 ], [ "anonymous", 24562 ] ], "metrics": { "ast": { "op.eq": 28, "op.gt": 2, "op.lt": 4, "op.ne": 12, "op.add": 17, "op.div": 1, "op.lor": 12, "op.sub": 2, "op.land": 14, "op.lnot": 15, "max_depth": 27, "call_count": 193, "node_count": 5352, "member_count": 89, "op_density.eq": 0.01, "op_density.gt": 0, "op_density.lt": 0, "op_density.ne": 0, "op_density.add": 0, "op_density.div": 0, "op_density.lor": 0, "op_density.sub": 0, "op_density.land": 0, "op_density.lnot": 0, "max_array_length": 2, "max_concat_chain": 7, "max_member_depth": 4 }, "file": { "size": 24876, "entropy": 4.89 }, "text": { "lines": 1053, "top_char": 101, "digit_ratio": 0.01, "space_count": 4766, "char_entropy": 4.89, "unique_chars": 90, "top_char_null": 0, "escape_density": 0.03, "import_density": 1.52, "string_density": 0.14, "top_char_ratio": 0.08, "avg_line_length": 22.62, "max_line_length": 130, "empty_line_ratio": 0.14, "last_line_length": 1, "whitespace_ratio": 0.23, "identifier_density": 0.83, "line_length_stddev": 21.09, "max_whitespace_run": 11, "unicode_escape_count": 7, "normalized_import_count": 0.49, "normalized_string_count": 4.68, "repeated_char_sequences": 7, "anonymous_function_ratio": 0.39, "suspicious_comment_ratio": 0.21, "normalized_function_count": 1.26, "imports_to_functions_ratio": 0.39, "strings_to_functions_ratio": 3.71, "suspicious_identifier_ratio": 0.04, "normalized_unique_identifiers": 16.23, "identifiers_to_functions_ratio": 3.98 }, "binds": { "count": 161 }, "binary": { "peak_region_bytes": 23552, "peak_region_entropy": 4.92 }, "source": { "function_count": 9 }, "imports": { "count": 16, "relative": 1, "stdlib_count": 3, "stdlib_ratio": 0.19, "relative_ratio": 0.06, "third_party_count": 13, "third_party_ratio": 0.81 }, "strings": { "bytes": 1687, "count": 152, "avg_length": 11.1, "max_length": 101, "path_count": 4, "avg_entropy": 2.66, "empty_count": 8, "entropy_stddev": 0.87 }, "comments": { "code": 2, "chars": 11023, "count": 91, "lines": 432, "url_count": 5, "high_entropy": 19, "to_code_ratio": 0.7 }, "functions": { "count": 9, "nested": 9, "density": 3.89, "anonymous": 16, "avg_params": 1.24, "code_ratio": 0.69, "max_params": 4, "one_liners": 2, "length_stddev": 22.06, "over_100_lines": 1, "avg_name_length": 7.56, "no_params_count": 9, "avg_length_lines": 17.76, "max_length_lines": 101, "min_length_lines": 1, "avg_nesting_depth": 0.51, "max_nesting_depth": 2, "single_char_params": 3, "avg_param_name_length": 4.88 }, "identifiers": { "count": 874, "unique": 163, "avg_length": 6.39, "max_length": 18, "min_length": 1, "avg_entropy": 2.25, "reuse_ratio": 0.19, "length_stddev": 2.98, "sequential_names": 6, "single_char_count": 6, "single_char_ratio": 0.04, "high_entropy_count": 3, "high_entropy_ratio": 0.02, "all_lowercase_ratio": 0.71, "all_uppercase_ratio": 0.01, "underscore_prefix_count": 1 } } }, "id": 6, "mol": "H₃(Cm₈Db₄Os)Md₃(In₂PaPt)", "path": "exptredd-5.2.4.tgz!!package/lib/response.js", "pid": 4509, "refs": [ { "to": "./utils", "off": 714, "file": 4516, "kind": "local" } ], "risk": 10, "sha": "2be00bc1c458a975bc7526d77092db4bd5e55208f5a541c2db51536913775754", "size": 24876, "traits": [ { "id": "metadata/import/npm/buffer::buffer", "conf": 0.95, "crit": 3, "desc": "imports node:buffer", "spans": [ [ 1014, 11 ] ] }, { "id": "metadata/import/npm/http::http", "conf": 0.95, "crit": 3, "desc": "imports node:http", "spans": [ [ 430, 9 ] ] }, { "id": "metadata/lang/source/syntax/call::send-object-argument-text", "conf": 0.8, "crit": 3, "desc": "Send-call object or array argument syntax", "spans": [ [ 3133, 6 ] ] }, { "id": "metadata/package/files/runtime::javascript-family-lib-tree-artifact", "conf": 0.95, "crit": 3, "desc": "JavaScript-family source file under lib" }, { "id": "micro-behaviors/communications/http/authorization-header::x-api-key-header-map-entry", "atk": "T1071.001", "mbc": "C0002", "conf": 0.88, "crit": 3, "desc": "Configures an X-API-Key request header", "spans": [ [ 16488, 12 ] ] }, { "id": "micro-behaviors/communications/http/content-length::raw-content-length-header", "atk": "T1071.001", "mbc": "C0002", "conf": 0.9, "crit": 3, "desc": "Sets an HTTP Content-Length header", "spans": [ [ 4780, 21 ] ] }, { "id": "micro-behaviors/communications/http/cookie-store::cookie-helper-clear-function", "mbc": "C0002", "conf": 1.0, "crit": 3, "desc": "Defines clearCookie helper", "spans": [ [ 17669, 11 ] ] }, { "id": "micro-behaviors/communications/http/header/content-type::application-json", "conf": 0.65, "crit": 3, "desc": "References the application/json media type", "spans": [ [ 6064, 16 ] ] }, { "id": "micro-behaviors/communications/http/header/content-type::json-header", "conf": 0.9, "crit": 3, "desc": "References HTTP Content-Type application/json", "spans": [ [ 6048, 32 ] ] }, { "id": "micro-behaviors/communications/http/server/route::app-router-get-endpoint", "atk": "T1071.001", "mbc": "C0002", "conf": 0.78, "crit": 3, "desc": "App or router GET route definition", "spans": [ [ 4201, 9 ] ] }, { "id": "micro-behaviors/communications/http/token-auth::custom-token-header", "conf": 0.9, "crit": 3, "desc": "Sets custom X-prefixed token header", "spans": [ [ 16488, 12 ] ] }, { "id": "micro-behaviors/communications/http/url/host::loopback-http-url-reference", "conf": 0.9, "crit": 3, "desc": "References a loopback HTTP URL", "spans": [ [ 15683, 17 ], [ 15706, 17 ] ] }, { "id": "micro-behaviors/communications/url/reference::javascript-comment-url-reference", "conf": 0.9, "crit": 3, "desc": "JavaScript comment contains a URL", "spans": [ [ 24318, 13 ] ] }, { "id": "micro-behaviors/data/control-flow/dispatch::js-async-named-event-handler", "conf": 0.85, "crit": 3, "desc": "Registers asynchronous named event handler", "spans": [ [ 23660, 23 ] ] }, { "id": "micro-behaviors/data/control-flow/dispatch::js-computed-property-call", "conf": 0.82, "crit": 3, "desc": "Calls a property using bracket notation", "spans": [ [ 15001, 9 ] ] }, { "id": "micro-behaviors/data/encode/url::encodeuri-call", "conf": 0.7, "crit": 3, "desc": "URL-encodes data via encodeURI", "spans": [ [ 10220, 9 ] ] }, { "id": "micro-behaviors/data/format/mime::mime-octet-stream", "conf": 0.85, "crit": 3, "desc": "Uses the application/octet-stream MIME type", "spans": [ [ 12783, 24 ] ] }, { "id": "micro-behaviors/data/serialize/json::json-stringify-call", "conf": 0.5, "crit": 3, "desc": "Calls JSON.stringify()", "spans": [ [ 1834, 14 ] ] }, { "id": "micro-behaviors/data/serialize/object::js-serialise", "conf": 0.85, "crit": 3, "desc": "References a serialization-related symbol", "spans": [ [ 19216, 16 ] ] }, { "id": "micro-behaviors/os/module/require::cjs-local-require-call", "conf": 0.9, "crit": 3, "desc": "CommonJS local-module require call", "spans": [ [ 705, 7 ] ] }, { "id": "metadata/file/comment::source-comment-bytes-over-300", "conf": 0.92, "crit": 2, "desc": "Source has over 300 comment bytes" }, { "id": "metadata/file/line::file-has-30-plus-lines", "conf": 0.9, "crit": 2, "desc": "File has 30 or more lines" }, { "id": "metadata/file/profile/identifier-population::sequential-identifiers", "conf": 0.8, "crit": 2, "desc": "Sequential source identifier names" }, { "id": "metadata/import/npm/content-disposition::content-disposition", "conf": 0.95, "crit": 2, "desc": "imports content-disposition", "spans": [ [ 223, 0 ] ] }, { "id": "metadata/import/npm/cookie-signature::cookie-signature", "conf": 0.95, "crit": 2, "desc": "imports cookie-signature", "spans": [ [ 659, 0 ] ] }, { "id": "metadata/import/npm/cookie::cookie", "conf": 0.95, "crit": 2, "desc": "imports cookie", "spans": [ [ 864, 0 ] ] }, { "id": "metadata/import/npm/depd::depd", "conf": 0.95, "crit": 2, "desc": "imports depd", "spans": [ [ 312, 0 ] ] }, { "id": "metadata/import/npm/encodeurl::encodeurl", "conf": 0.95, "crit": 2, "desc": "imports encodeurl", "spans": [ [ 356, 0 ] ] }, { "id": "metadata/import/npm/escape-html::escape-html", "conf": 0.95, "crit": 2, "desc": "imports escape-html", "spans": [ [ 395, 0 ] ] }, { "id": "metadata/import/npm/http-errors::http-errors", "conf": 0.95, "crit": 2, "desc": "imports http-errors", "spans": [ [ 273, 0 ] ] }, { "id": "metadata/import/npm/mime-types::mime-types", "conf": 0.95, "crit": 2, "desc": "imports mime-types", "spans": [ [ 504, 0 ] ] }, { "id": "metadata/import/npm/on-finished::on-finished", "conf": 0.95, "crit": 2, "desc": "imports on-finished", "spans": [ [ 469, 0 ] ] }, { "id": "metadata/import/npm/path::path", "conf": 0.95, "crit": 2, "desc": "imports node:path", "spans": [ [ 537, 0 ] ] }, { "id": "metadata/import/npm/relative/1/utils::relative/1/utils", "conf": 0.95, "crit": 2, "desc": "imports ./utils", "spans": [ [ 713, 0 ] ] }, { "id": "metadata/import/npm/send::send", "conf": 0.95, "crit": 2, "desc": "imports send", "spans": [ [ 894, 0 ] ] }, { "id": "metadata/import/npm/statuses::statuses", "conf": 0.95, "crit": 2, "desc": "imports statuses", "spans": [ [ 628, 0 ] ] }, { "id": "metadata/import/npm/vary::vary", "conf": 0.95, "crit": 2, "desc": "imports vary", "spans": [ [ 978, 0 ] ] }, { "id": "metadata/lang/javascript-features::use-strict-directive", "conf": 0.6, "crit": 2, "desc": "Contains a JavaScript use strict directive", "spans": [ [ 131, 0 ] ] }, { "id": "metadata/lang/source/shape::js-ts-source-basename", "conf": 0.95, "crit": 2, "desc": "JavaScript or TypeScript source filename" }, { "id": "metadata/lang/source/syntax/member::message-code-member-name", "conf": 0.98, "crit": 2, "desc": "Code member-name reference", "spans": [ [ 10467, 0 ] ] }, { "id": "metadata/lang/source/syntax/member::message-type-member-name", "conf": 0.98, "crit": 2, "desc": "Type member-name reference", "spans": [ [ 13068, 0 ] ] }, { "id": "micro-behaviors/data/property/access::indexed-value-variable-binding", "conf": 0.8, "crit": 2, "desc": "Binds an indexed value to a variable", "spans": [ [ 12155, 0 ] ] }, { "id": "micro-behaviors/time/query::js-triple-new-date", "conf": 0.4, "crit": 2, "desc": "3+ new Date() calls", "spans": [ [ 17816, 0 ] ] }, { "id": "metadata/lang/natural/vocabulary/content-word::data-access-verb-token", "conf": 0.88, "crit": 1, "desc": "Data-access verb token", "spans": [ [ 22677, 0 ] ] }, { "id": "metadata/lang/natural/vocabulary/content-word::data-transfer-verb-token", "conf": 0.88, "crit": 1, "desc": "Data-transfer verb token", "spans": [ [ 3047, 0 ] ] }, { "id": "metadata/lang/natural/vocabulary/content-word::english-edit-verb-token", "conf": 0.88, "crit": 1, "desc": "English edit-action verb token", "spans": [ [ 7102, 0 ], [ 7330, 0 ] ] }, { "id": "metadata/lang/natural/vocabulary/content-word::secret-data-term-token", "conf": 0.9, "crit": 1, "desc": "Secret-data term token", "spans": [ [ 18624, 0 ] ] }, { "id": "metadata/lang/natural/vocabulary/function-word::lang-english--atom-1", "conf": 0.8, "crit": 1, "desc": "English function-word token \"the\"", "spans": [ [ 1202, 0 ] ] }, { "id": "metadata/lang/natural/vocabulary/function-word::lang-english--atom-2", "conf": 0.8, "crit": 1, "desc": "English function-word token \"and\"", "spans": [ [ 1284, 0 ] ] }, { "id": "metadata/lang/natural/vocabulary/function-word::lang-english--atom-3", "conf": 0.8, "crit": 1, "desc": "English function-word token \"that\"", "spans": [ [ 7294, 0 ] ] }, { "id": "metadata/lang/natural/vocabulary/function-word::lang-english--atom-4", "conf": 0.8, "crit": 1, "desc": "English function-word token \"have\"", "spans": [ [ 8519, 0 ] ] }, { "id": "metadata/lang/natural/vocabulary/function-word::lang-english--atom-5", "conf": 0.8, "crit": 1, "desc": "English function-word token \"for\"", "spans": [ [ 1223, 0 ] ] }, { "id": "metadata/lang/natural/vocabulary/function-word::lang-english--atom-6", "conf": 0.8, "crit": 1, "desc": "English function-word token \"with\"", "spans": [ [ 2203, 0 ] ] }, { "id": "metadata/lang/natural/vocabulary/function-word::lang-english--atom-7", "conf": 0.8, "crit": 1, "desc": "English function-word token \"this\"", "spans": [ [ 2131, 0 ] ] } ], "type": "javascript" }, { "analysis_gaps": [ "flow-graph-limited", "flow-call-unavailable", "flow-query-incomplete" ], "ctx": [ { "b": "fdFaLasXHBCYmXmB8}WhdJ?8%AcVFrxj#xnv\u003c@JQfFCHsgb7Bsaxg@Qnn\u0026r.Cvt=bxMX7$asXH3z/x#xx\u003eIa3c$sXGgb7BteIY1mh6tq9B.tJ0B09?-A+PPpz/xx3AV!B$y\u0026:Jj3lQ/vo?wqboLF0FzGxx13lQ/K3jne6B7DFnBAh89BsfcS3ni\u003eU3lQ/vo(BM+y?j-1wPhi#wmYT*x\u003equr3lQ/vkW!RCaAhvnC42G73lQ/K3jp@+AV/YKo*@2LpEFb7EipV}A+flkx(W=kcVi\u003ckwJBHDBz@PRi%{dtAV!\u003egzGGDcBx0K8wGTbUA+flkx(W=kcU47jBy/uieP=nSwHw]*3u/\u0026#az2U6xcotWA+flkx(W=kcUmydxd2b\u00263u/\u0026#az\u003e?fwGTbUA+flkx(W=kcV9NmwI51HAaK8rdgglbAV/swz*lLowmPZ6jS[=RADL#owHF{BA=lhFeN-g2AWJp$3u/\u0026#aAqDBjS[=RADL#owHF{CB0\u0026y#3u/\u0026#aAqKnA^q.FA+PA7auZ\u0026/wPq\u003cbA+cTDzF%5%i=PpNA^q.FA+PA7cN?a:v@DmaBrC]MluM)LwPw]wauZ\u0026/wPq\u003cbA+cTDzF%5%i+0kzw[u0gdlv\u003ez3ni\u003eU3lQ/vk{f#TB95Kyw/$]dCv+/8vrl0\u003cav]Ehp-%Q^BzbP6B0bNrvrrS2A+cwmB-qqrA=+(6ayYQsph:VOe]2CW3lQ/vkW!RCaAhvnC42G73lQ/K3t1E3z/P@ve]tfwxM4B5auZ\u0026wmn#/Nl@LZPvq)RyzdN*5z!7ptjW709wPRQ7wg?$xoMbb^AZKnRwHF#Ri%(rFdK\u003e=FdJ?S2BAIRwaAITBz/fhgmo0YdazbLjayFU%wo?Mn3lQ/9asXH0Aa9=}z6jg7BAh8kxm93*w[CQ{Eir0qwo!I8dJ*#}vrb^[aBv4eA+PA7Eiq:9zEWP}x(mM?3lQ/vkYQBTB-IvxDSb3bx(mNi3lQ/vkW!RCaAhvnC42G73lQ/K3jpu?AbP=sB1R3Cvp{YCay/C6vru6HrafAfwO#71vruBdd0)7XwNPvnazb4#B7DFxdgczndK\u003e=FdJ?S2BAIRwaA}y9yAM5Bvp{Y{z/M$dvSb!5u[I^edHEpFav6)OA:-/cDSb3bx(mNh", "ln": 0, "col": 1, "line": 1 }, { "b": "z!9N1xi+\u0026!dJ*#%wPS6nzxKp8BAh8kxmgafdJ*#+Aa{ClA+PY9By+!4dLzbowQ5fjA==vPCv+(8xcotWv@=c?By^)uvp@8wzE)\u0026%Bz(gFDMWJzvqv[DBAhInaBLWC3ni\u003eU3lQ/vph+e\u0026vqGU7wGV8dwGUS1C4CLlv03WkwNE5iw]zYjwQ4T2Abo8db4#7ny:70hwN/T}wPF$rBy/YsfkbDAy:7FsasWZvdJ*#}vrb^[aBv4eA+PA7EirSSAaGw0dJ*#%wPS6nzxKp4vRPE:BBsGsdJ*#+Aa{ClA+PY9By+!4dLzbowQ5fjA==vPzF%MjvqGU7wMi}]wGTbUw{503BzkVhd0f-NwHR%karUYoBAIRwaBXATAaHUozE^s6pI815fdegQarR^HkoKxAv}xR3p*[xMzf4aED2Nsz3lQDlauyS(aA?gfB.9PRc#AWnwId!qz!\u003cGmd0f-NwHO:HD(%!BAbYScv{%E[z/djDv@#p7ePV2OwNPB6dj=PXvrb^[B2\u003eB\u003cEir}BEld=yfdFBUasXHez/PY6y?XibayGqpAaK8#efFLyAV!}rvqP$1wGSggBzU?rayX[(z/66bar\u003e]sCYUPLBzU?re^-ZJ3lQ/vkYydLvqNcll2}0OD3{/SD2Nto3lQ/vkYQBTB-IvxDQhW)vr)ndasXH0vq]{6Ab]Vovru5/asY2K3t1E3z/P@ve]CPFzddl{DsZ63AaK8kjS[uVzEW^5z/c$BD2NtodiJ%AarUYoBAIRwaAR)FwPGFvvq)SaCYmOwBAo6Lz/PY6y?Xibrc-B]dlv(+i%(r4fdFBUasXHgvrcB2ayO+\u0026wPh-lAa9=}zf3?cB98CgaAz4nB-IwlzF782zvdHoaA7.7wN/*8CwhejayD*BvqH6$u[rBde]=2xy?X0pu)5(}wftnjAa9=}zf68q3lQ/9asXH0Aa9=}z6jg7BAh8kxmg[zBAdZhdJ*#%wPS6nzxKp4vRPE:BBsGsdJ*#+Aa{ClA+PY9By+!4dLzbow{503BzkVhayO+\u0026wPh-/vrb^[B08(LBAe/MDKp(rC42zly?mG%Bz8^WaAITBe]k9pxlm/G3lQEmvr9G2z!%ufnP56ICPYc(B98BPx(mD)CU.{1cP-X8i%)8MC42zlx(mD)CPYc(v@Dg4zB[.RwQ2sXjV%]tf^5X6y?mG%Bz8^Tay/taz/ec:wmZ0E3lQEmvr9GhwPP4TaBtkOvqH6$iV@G=AXqAHx\u003e7Z5fF1tXzE^s6dk2Z.x(bmEefF}PvqGU1C@^65efF[uA:-*aiV@=$aBMrU3lQEnxLzo]asH@wwmZ0djrODKzFa68diJ%AarR^HC42zlB8U@fBv*vXwQ2sXaAITBe[]ilwQ40.c)}e9efFUAwmZ0mi%)8MarUxgasIqIy?W#.zE^s6au.\u003eJat2q%ayYw5vqv}i3lQDlaA?glay/tazV", "ln": 940, "col": 24, "line": 46 }, { "b": "B8U@fBv*vXwQ2sHatCq/d\u003ccMd3lQDlarR!pz/fVhzGPIL3lQDlaBKO7arR^HC42zlyH}=ljS[//AXqAHx\u003e7Z5x(mD)CQ%$UAbolgnP56ICQUm!A+Pwsdlv\u003eVarR!Ivr9GlvqH6$auZ\u0026*BAf0Py?Wx\u003cd06uzx(({:wmZ0dd\u003ccL$az2C3nP56ICQUm!A+Pwsdf", "ln": 2256, "col": 36, "line": 103 }, { "b": "aA?gf3lQ/vkYQBTB-IvxDQ-c}v@#B6zHz\u003cmdJ*#+Aa{ClA+PY9By+!4dLzbowQ5fjA==vPv@Dj6x(4uHrafzZjS[uVzEW^5z/c$DvqEwnDKp(rC42zlw]oWq3lQE9w/@HzD2Ntkw/#n9y-\u003e(7jS(a:B-7Yhx(v(pdiJ%AarR^HA+funA=91yvqF1jarV7t3lQEjCwheexDOZDvqEwnDKp(rarUf5B7DFoA=\u003e}O3lQDlay!\u00263", "ln": 2653, "col": 37, "line": 125 }, { "b": "aA?gf3lQ/vkYQBTB-IvxDQ-c}v@#B6zHz\u003cmdJ*#+Aa{ClA+PY9By+!4dLzbowQ5fjA==vPv@Dj6x(4uTB.bPsp*[x=wPw[Razb+lv@#B6zxJCcze:i9wL)OYA^pF\u0026A=U/jd0x3ndiJ%AarU\u0026oAV!$ii%(rqazCBgd0f-NwP8f6C42hfjV$}JcUvHsv@#B6zyl\u003eQDKp(rarUYoBAIRwaA?gf", "ln": 3164, "col": 29, "line": 157 }, { "b": "azb4#B7ExtarR^HarUclwNPvo3lQDlay!\u00263wGSviCYWImwmYp0iTM#LarR^Hw]n.OaAg+fB7E^+By/u2wN[UXwPA5{BAh8kxfcCyarR^HayYw5vqv}iarR^HwmYvYB.(dX3lQDlarR!GxMw3naz$+maxiS9wKQSWz/NlNB-7#jz*c7wC42ifwGUP6AV/vAwPA5sAa9^dwPw]9B-7Yhx(v(Iasv", "ln": 3445, "col": 9, "line": 174 }, { "b": "aA?gf3lQ/vkYQBTB-IvxDQ-c}v@#B6zHz\u003cmdJ*#+Aa{ClA+PY9By+!4dLzbowQ5fjA==vPv@Dj6x(4uWA=(CBauZ\u0026VB-7Yhx(v(qC42hoaBsCrazCBgd0f-NwP8f6C42hfjV$}JcUvHsv@#B6zyl\u003eQA+funA=91yvqF1j3lQE9w/@HBvqE5HjV%{fA=\u003e}xaBsCrarR^WfcBhoAbU", "ln": 3749, "col": 50, "line": 189 }, { "b": "aARTDwGVy.3lQEt3jm)#x\u003ewFoBA}?pz!pbnvqE5HjV%]nzGP/9wPxdEaBsCrarR^WfcBhoAbY-oBrCWCB-RUszF789z/u?ez/]@t3lQDlaAz4nB-Ivxw{503BzkVhc$aUHx^[x", "ln": 3965, "col": 30, "line": 199 }, { "b": "jrO/Qy-[c/3lQEt3jm)#x\u003ewFoBA}?pz!pbnvqE5HjV%]nB98CpzF7sCaBsCrarR^WfcBhoAbY-oBrC7izeAYkB7Gr0A::63wfu57y\u0026%rg3lQDlaA?gfauZ\u0026\u003cvqEMqAbolgc){L", "ln": 4082, "col": 37, "line": 204 } ], "depth": 1, "facts": { "imp": [ [ "", "require" ], [ "", "require" ], [ "", "require" ], [ "", "require" ], [ "", "require" ], [ "", "require" ], [ "", "require" ], [ "", "require" ], [ "", "METHODS.map" ], [ "", "method.toLowerCase" ], [ "", "createETagGenerator" ], [ "", "createETagGenerator" ], [ "", "type.indexOf" ], [ "", "acceptParams" ], [ "", "mime.lookup" ], [ "", "types.map" ], [ "", "str.indexOf" ], [ "", "str.slice.trim" ], [ "", "str.slice" ], [ "", "str.indexOf" ], [ "", "str.indexOf" ], [ "", "str.lastIndexOf" ], [ "", "str.slice.trim" ], [ "", "str.slice" ], [ "", "str.slice.trim" ], [ "", "str.slice" ], [ "", "parseFloat" ], [ "", "TypeError" ], [ "", "TypeError" ], [ "", "val.split.map" ], [ "", "val.split" ], [ "", "v.trim" ], [ "", "proxyaddr.compile" ], [ "", "contentType.parse" ], [ "", "contentType.format" ], [ "", "Buffer.isBuffer" ], [ "", "Buffer.from" ], [ "", "etag" ], [ "", "qs.parse" ], [ "", "content-type" ], [ "", "etag" ], [ "", "mime-types" ], [ "", "node:buffer" ], [ "", "node:http" ], [ "", "node:querystring" ], [ "", "proxy-addr" ], [ "", "qs" ] ], "mbr": [ "Buffer.from", "Buffer.isBuffer", "METHODS.map", "contentType.format", "contentType.parse", "exports.compileETag", "exports.compileQueryParser", "exports.compileTrust", "exports.etag", "exports.methods", "exports.normalizeType", "exports.normalizeTypes", "exports.setCharset", "exports.wetag", "method.toLowerCase", "mime.lookup", "parsed.parameters", "parsed.parameters.charset", "proxyaddr.compile", "qs.parse", "querystring.parse", "ret.params", "ret.quality", "str.indexOf", "str.lastIndexOf", "str.length", "str.slice", "str.slice.trim", "type.indexOf", "types.map", "v.trim", "val.split", "val.split.map" ], "tgt": [ "Buffer.from", "Buffer.isBuffer", "METHODS.map", "TypeError", "acceptParams", "contentType.format", "contentType.parse", "createETagGenerator", "etag", "method.toLowerCase", "mime.lookup", "parseFloat", "proxyaddr.compile", "qs.parse", "require", "str.indexOf", "str.lastIndexOf", "str.slice", "str.slice.trim", "type.indexOf", "types.map", "v.trim", "val.split", "val.split.map" ], "funcs": [ [ "anonymous", 615 ], [ "anonymous", 1208 ], [ "anonymous", 1518 ], [ "acceptParams", 1748 ], [ "anonymous", 2723 ], [ "compileQueryParser", 3241 ], [ "anonymous", 3820 ], [ "anonymous", 3947 ], [ "anonymous", 4057 ], [ "anonymous", 4203 ], [ "setCharset", 4455 ], [ "createETagGenerator", 4868 ], [ "generateETag", 4918 ], [ "parseExtendedQueryString", 5193 ] ], "metrics": { "ast": { "op.eq": 10, "op.gt": 1, "op.lt": 2, "op.add": 5, "op.lor": 3, "op.sub": 4, "op.bnot": 1, "op.lnot": 3, "max_depth": 16, "call_count": 39, "node_count": 1247, "member_count": 33, "op_density.eq": 0.01, "op_density.gt": 0, "op_density.lt": 0, "op_density.add": 0, "op_density.lor": 0, "op_density.sub": 0, "op_density.bnot": 0, "op_density.lnot": 0, "max_concat_chain": 2, "max_member_depth": 3, "const_return_function_count": 1, "const_return_function_ratio": 0.07 }, "file": { "size": 5293, "entropy": 4.92 }, "text": { "lines": 271, "top_char": 101, "digit_ratio": 0.01, "space_count": 927, "char_entropy": 4.92, "unique_chars": 80, "top_char_null": 0, "import_density": 2.95, "string_density": 0.1, "top_char_ratio": 0.07, "avg_line_length": 18.53, "max_line_length": 78, "empty_line_ratio": 0.18, "last_line_length": 1, "whitespace_ratio": 0.23, "identifier_density": 0.77, "line_length_stddev": 18.7, "max_whitespace_run": 2, "normalized_import_count": 0.49, "normalized_string_count": 1.7, "anonymous_function_ratio": 0.57, "suspicious_comment_ratio": 0.25, "normalized_function_count": 0.85, "imports_to_functions_ratio": 0.57, "strings_to_functions_ratio": 2, "suspicious_identifier_ratio": 0.05, "normalized_unique_identifiers": 8.04, "identifiers_to_functions_ratio": 4.64 }, "binds": { "count": 35 }, "binary": { "peak_region_bytes": 5293, "peak_region_entropy": 5.13 }, "source": { "function_count": 3 }, "imports": { "count": 8, "stdlib_count": 3, "stdlib_ratio": 0.38, "third_party_count": 5, "third_party_ratio": 0.63 }, "strings": { "bytes": 249, "count": 28, "avg_length": 8.89, "max_length": 41, "avg_entropy": 2.09, "entropy_stddev": 1.33 }, "comments": { "chars": 1849, "count": 20, "lines": 102, "high_entropy": 5, "to_code_ratio": 0.6 }, "functions": { "count": 3, "nested": 2, "density": 5.17, "anonymous": 8, "avg_params": 1.14, "code_ratio": 0.54, "max_params": 2, "one_liners": 4, "length_stddev": 9.96, "avg_name_length": 15.83, "no_params_count": 1, "avg_length_lines": 10.43, "max_length_lines": 32, "min_length_lines": 1, "avg_nesting_depth": 0.29, "max_nesting_depth": 1, "high_entropy_names": 2, "single_char_params": 3, "avg_param_name_length": 3.94 }, "identifiers": { "count": 209, "unique": 65, "avg_length": 7.37, "max_length": 24, "min_length": 1, "avg_entropy": 2.42, "reuse_ratio": 0.31, "length_stddev": 4.4, "sequential_names": 3, "single_char_count": 3, "single_char_ratio": 0.05, "high_entropy_count": 5, "high_entropy_ratio": 0.08, "all_lowercase_ratio": 0.65, "all_uppercase_ratio": 0.02 } } }, "id": 7, "mol": "H₂(DbOs)Md₂(In₂Pa)", "path": "exptredd-5.2.4.tgz!!package/lib/utils.js", "pid": 1332, "risk": 5, "sha": "4bd3bf9c911e086d1911954708de7a6c384ed924360e3fd1d4a43c98bd68b112", "size": 5293, "traits": [ { "id": "metadata/import/npm/buffer::buffer", "conf": 0.95, "crit": 3, "desc": "imports node:buffer", "spans": [ [ 475, 11 ] ] }, { "id": "metadata/import/npm/http::http", "conf": 0.95, "crit": 3, "desc": "imports node:http", "spans": [ [ 220, 9 ] ] }, { "id": "metadata/lang/javascript-features::cjs-exports-pattern", "conf": 0.6, "crit": 3, "desc": "Defines CommonJS named exports", "spans": [ [ 584, 18 ] ] }, { "id": "metadata/package/files/runtime::javascript-family-lib-tree-artifact", "conf": 0.95, "crit": 3, "desc": "JavaScript-family source file under lib" }, { "id": "metadata/package/files/runtime::javascript-utils-basename", "conf": 0.85, "crit": 3, "desc": "JavaScript utils.js basename" }, { "id": "micro-behaviors/data/format/mime::mime-octet-stream", "conf": 0.85, "crit": 3, "desc": "Uses the application/octet-stream MIME type", "spans": [ [ 1315, 24 ] ] }, { "id": "micro-behaviors/os/network/webextension::proxy-host-assignment-from-call", "conf": 0.9, "crit": 3, "desc": "Proxy host assigned from a call", "spans": [ [ 342, 20 ] ] }, { "id": "metadata/file/comment::source-comment-bytes-over-300", "conf": 0.92, "crit": 2, "desc": "Source has over 300 comment bytes" }, { "id": "metadata/file/line::file-has-30-plus-lines", "conf": 0.9, "crit": 2, "desc": "File has 30 or more lines" }, { "id": "metadata/import/npm/content-type::content-type", "conf": 0.95, "crit": 2, "desc": "imports content-type", "spans": [ [ 260, 0 ] ] }, { "id": "metadata/import/npm/etag::etag", "conf": 0.95, "crit": 2, "desc": "imports etag", "spans": [ [ 296, 0 ] ] }, { "id": "metadata/import/npm/mime-types::mime-types", "conf": 0.95, "crit": 2, "desc": "imports mime-types", "spans": [ [ 324, 0 ] ] }, { "id": "metadata/import/npm/proxy-addr::proxy-addr", "conf": 0.95, "crit": 2, "desc": "imports proxy-addr", "spans": [ [ 362, 0 ] ] }, { "id": "metadata/import/npm/qs::qs", "conf": 0.95, "crit": 2, "desc": "imports qs", "spans": [ [ 394, 0 ] ] }, { "id": "metadata/import/npm/querystring::querystring", "conf": 0.95, "crit": 2, "desc": "imports node:querystring", "spans": [ [ 427, 0 ] ] }, { "id": "metadata/lang/javascript-features::use-strict-directive", "conf": 0.6, "crit": 2, "desc": "Contains a JavaScript use strict directive", "spans": [ [ 131, 0 ] ] }, { "id": "metadata/lang/source/shape::js-ts-source-basename", "conf": 0.95, "crit": 2, "desc": "JavaScript or TypeScript source filename" }, { "id": "metadata/lang/natural/vocabulary/function-word::lang-english--atom-1", "conf": 0.8, "crit": 1, "desc": "English function-word token \"the\"", "spans": [ [ 1058, 0 ] ] }, { "id": "metadata/lang/natural/vocabulary/function-word::lang-english--atom-2", "conf": 0.8, "crit": 1, "desc": "English function-word token \"and\"", "spans": [ [ 1666, 0 ] ] }, { "id": "metadata/lang/natural/vocabulary/function-word::lang-english--atom-3", "conf": 0.8, "crit": 1, "desc": "English function-word token \"that\"", "spans": [ [ 534, 0 ] ] }, { "id": "metadata/lang/natural/vocabulary/function-word::lang-english--atom-5", "conf": 0.8, "crit": 1, "desc": "English function-word token \"for\"", "spans": [ [ 677, 0 ] ] }, { "id": "metadata/lang/natural/vocabulary/function-word::lang-english--atom-6", "conf": 0.8, "crit": 1, "desc": "English function-word token \"with\"", "spans": [ [ 1640, 0 ] ] } ], "type": "javascript" }, { "analysis_gaps": [ "flow-graph-limited", "flow-call-unavailable", "flow-query-incomplete" ], "ctx": [ { "b": "fdFaLasXHBCYmXmB8}WhdJ?8%AcVFrxj#xnv\u003c@JQfFCHsgb7Bsaxg@Qnn\u0026r.Cvt=bxMX7$asXH3z/x#xx\u003eIa3c$sXGgb7Bsax0b{vqWh^xMOJozddq?asXH3z/x#xx\u003eIa3c$sXGgb7BteIY1mh6tq9B.tJ0B09?-A+PPpz/xx3AV!B$y\u0026:Jj3lQ/vo?wqboLF0FzGxx13lQ/K3jne6B7DFnBAh89BsfcS3ni\u003eU3lQ/vo(BM+y?j-1wPhi#wmYT*x\u003equr3lQ/vkYy:TC42G73lQ/K3jp@+AV![7vS=rajS[=RADL#owHF{pwNY^{cN*C\u003ewQ5fmwPI]NC4\u003eJicN?a:C42zlAa9\u003c4auZ\u0026/wPq\u003cbA+cTDzF%5%i=FIHxEtk\u003c3u/\u0026#azbWqjS[=RADL#owHF{zz!9Auw]/sGi%(rFdK\u003e=FdJ?D7wozZ1aA?glx\u003c\u003eE!wPGEhasXH0Ab]Vovru5/asY2K3u/\u0026#ay]hbzEEx[auZ\u0026^vrufnwnc74vqPNq3u/\u0026#ayX=2wO${[wGTbUAa9\u003c4e[emgwO${[wJHlxvr9G4CYW?izdK?MaAg+hxF9\u003evBn", "ln": 0, "col": 1, "line": 1 }, { "b": "wPI^aC4A-x3ni\u003eU3lQ/vo(BM+y?j-2CYmOwBAo5wasXH0AckSax\u003e4F)dLzbozeS%cy?kkgCYmOwBAnM/axAh/CrlcsfdFBUasXH9zFsibvqGU7wGUz7zE[2mu@*#MCvhLqx([2hBzbkdxk8K2zxJt8vqPN-e^-ZJ3lQ/vpJgz\u0026z/fRS3lQ/9asXGRat1ZzwmYvYB.(d*zF9W3wNDT5xK@q%wObv[y\u0026*!wwO(y5vru66wO#c{zE\u003c@dvqPM.asXGRat1Y", "ln": 505, "col": 21, "line": 29 }, { "b": "az2C6x(mG8A+flkx(W=kdiJbev}YAXasXGRat1ZzA=k(ru)6Gdz/^avvruf9w]zYjC4\u003eJiaz+$myJTO6asWZvdJ*#}vrb^[aBwfKA+PA7EirAozdK4%dJ*#}vrb^[aBw3oygQ)%EirDEBzkVhA%:3tav6)*vR/:*3lQ/K3jpx/zEW^5z/cW#x\u003eqGpzEEx[efF\u003eIBzkVhB15kU3lQEmvr9GeAccdzjS[VZBzkVhB0b\u003cTaBwI#3jm)#Bzbxfe[wK9vrDydmq=:LzE\u003c}NaA8jvB1R0mw)]*#Bvy7Wx(mGz3lQEkxLzJuwQ5qtjS[rXBz+J7wHIC8zdLdT3lQEkxLzJuzEEx[auZ\u0026+vqPNq3lQEkxLzJuA=k(r", "ln": 730, "col": 26, "line": 44 }, { "b": "xMw3naz$+mavQr\u003ez/NlNph.m=wObv[y\u0026*!hzF9W3wGVh9B0bKywN/B^x\u003ep/$vqYP#zF{UeCYWImB7]MgaA}mnaAhvtC4\u003eF#wg/kUi%)8MEf{r7aA?glazbt7wLMVJwGTbUzEEx[i%(rqazCBgc)rXCx(+[rCYUwSDKp(rarSr\u003cazkncaz2!twO#L", "ln": 1088, "col": 6, "line": 61 }, { "b": "cVS^rB.L(car\u0026aMa$1]:zeS@l3jm)#arSr\u003cay]4}vrDydaz2C6x(mG8wQ5fjA=.TharR!Ivr9G5zxI7+A+flkx(W=kzeS@le)?%%CYmXmB8}V}arR^Hx\u003ewFoBA}?pz!pb7zxH8=jS(a:B-7Yhx(v(pdiJ%AarR^HarU=tA=ldAzE[2mmriA!AWSqfz!a0bwGSfAas!NKz!6$vaswuQwn=42az#ataAhvtC4\u003eF#ayMyox\u003eqGhwO#c{zE\u003eBFdgdf", "ln": 1496, "col": 11, "line": 78 }, { "b": "vrr]txLzJuA=k(rdlv\u003ezarUiavS=ricV0ZtyJTOsa%?pOcOcxTvqPN8i%(rqazbLjasIzwAV/6sjS(Buazz@XaAzysBAo6JwO#d5xDOSGar+YjBz9-Ux!7X.aBsCrarR!Ivr9Ghz/o.ujS[=-z/*58x\u003cA!c3lQDlatkw\u003cA+frgy\u003c6wjBzbkdAa9\u003c43lQDlaA?glaz+$aauZ\u0026/wPI^aC4A7xz/o.Gaz$R8wHPXFarR^HC42zlwnc6bjS[oHA=br5wHIwkv\u003c%FDarR^HC42zlw[=6)auZ\u0026Rvrl0$vqPN7y\u0026r/ji%(rqarR^WfcCpDB8L(rwGV8dwGUP0y?i}", "ln": 2029, "col": 22, "line": 106 }, { "b": "BzbxfefFwwxlw65zGG}Gi%)8MarV7t3lQDlatkw\u003cv@DsiayPq6B.$YcBAm^iarR!Ivr9G0A+xCojS[SNCoxg(A::kwvrc16zdNQbB1RouzFa68dlv\u003eVarR!Ivr9G2zGHaCjS[\u0026Wx(=uy3lQDlazbLjasIzwAV/6sjS(Buazz@XayPq6B.$YcBAo6JwO#d5xGEtJd\u003er4\u003eDKp(rarR^Hvrc14twmv=jS[fNxlw65zGG@7x\u003cA!carR^HEf{r7arR^WfcB\u003c", "ln": 2729, "col": 29, "line": 141 }, { "b": "BAhU9ByxntAa9\u003c4diJ%AarUiavS=ricV:xrBrz+NB0q$.aAg+hxEM1I3lQEkA^n^O3lQDlaAz4nB-Ivxw]/OCByxn\u0026D2vauAa9\u003c4dlv\u003eVaBLwxvru0)asH!IaBsCrarR!EwPS6nzxK7twmYv!zE)uu3lQEt3vJl", "ln": 3682, "col": 10, "line": 197 } ], "depth": 1, "facts": { "imp": [ [ "", "require" ], [ "", "require" ], [ "", "require" ], [ "", "require" ], [ "", "extname" ], [ "", "Error" ], [ "", "debug" ], [ "", "require" ], [ "", "Error" ], [ "", "debug" ], [ "", "resolve" ], [ "", "dirname" ], [ "", "basename" ], [ "", "debug" ], [ "", "callback.apply" ], [ "", "Array" ], [ "", "process.nextTick" ], [ "", "callback.apply" ], [ "", "join" ], [ "", "tryStat" ], [ "", "stat.isFile" ], [ "", "join" ], [ "", "basename" ], [ "", "tryStat" ], [ "", "stat.isFile" ], [ "", "debug" ], [ "", "fs.statSync" ], [ "", "debug" ], [ "", "node:fs" ], [ "", "node:path" ] ], "mbr": [ "View.prototype", "View.prototype.lookup", "View.prototype.render", "View.prototype.resolve", "arguments.length", "callback.apply", "fs.statSync", "module.exports", "opts.defaultEngine", "opts.engines", "opts.root", "path.basename", "path.dirname", "path.extname", "path.join", "path.resolve", "process.nextTick", "require.__express", "roots.length", "stat.isFile" ], "tgt": [ "Array", "Error", "basename", "callback.apply", "debug", "dirname", "extname", "fs.statSync", "join", "process.nextTick", "require", "resolve", "stat.isFile", "tryStat" ], "funcs": [ [ "View", 864 ], [ "lookup", 1972 ], [ "render", 2495 ], [ "onRender", 2662 ], [ "renderTick", 2990 ], [ "resolve", 3234 ], [ "tryStat", 3673 ] ], "metrics": { "ast": { "op.lt": 2, "op.ne": 2, "op.add": 5, "op.lor": 1, "op.land": 4, "op.lnot": 6, "max_depth": 18, "call_count": 32, "node_count": 1021, "member_count": 20, "op_density.lt": 0, "op_density.ne": 0, "op_density.add": 0, "op_density.lor": 0, "op_density.land": 0, "op_density.lnot": 0.01, "max_concat_chain": 3, "max_member_depth": 3 }, "file": { "size": 3809, "entropy": 4.87 }, "text": { "lines": 205, "top_char": 101, "digit_ratio": 0.01, "space_count": 684, "char_entropy": 4.87, "unique_chars": 79, "top_char_null": 0, "import_density": 1.46, "string_density": 0.08, "top_char_ratio": 0.07, "avg_line_length": 17.58, "max_line_length": 86, "empty_line_ratio": 0.21, "last_line_length": 1, "whitespace_ratio": 0.23, "identifier_density": 0.94, "line_length_stddev": 17.31, "max_whitespace_run": 3, "normalized_import_count": 0.21, "normalized_string_count": 1.12, "suspicious_comment_ratio": 0.05, "normalized_function_count": 0.49, "imports_to_functions_ratio": 0.43, "strings_to_functions_ratio": 2.29, "suspicious_identifier_ratio": 0.04, "normalized_unique_identifiers": 6.77, "identifiers_to_functions_ratio": 7.43 }, "binds": { "count": 33 }, "binary": { "peak_region_bytes": 3809, "peak_region_entropy": 4.96 }, "source": { "function_count": 2 }, "imports": { "count": 3, "stdlib_count": 2, "stdlib_ratio": 0.67, "third_party_count": 1, "third_party_ratio": 0.33 }, "strings": { "bytes": 204, "count": 16, "avg_length": 12.75, "max_length": 62, "avg_entropy": 2.6, "entropy_stddev": 1.06 }, "comments": { "chars": 1185, "count": 21, "lines": 71, "high_entropy": 1, "to_code_ratio": 0.53 }, "functions": { "count": 2, "nested": 2, "density": 3.41, "avg_params": 1.14, "code_ratio": 0.68, "max_params": 2, "length_stddev": 12.19, "avg_name_length": 6.86, "no_params_count": 2, "avg_length_lines": 20, "max_length_lines": 44, "min_length_lines": 3, "avg_nesting_depth": 0.43, "max_nesting_depth": 2, "avg_param_name_length": 5.13 }, "identifiers": { "count": 193, "unique": 52, "avg_length": 5.67, "max_length": 13, "min_length": 1, "avg_entropy": 2.1, "reuse_ratio": 0.27, "length_stddev": 2.35, "sequential_names": 2, "single_char_count": 2, "single_char_ratio": 0.04, "all_lowercase_ratio": 0.79, "underscore_prefix_count": 1 } } }, "id": 8, "mol": "H₂(FOs)Md₂(InPa)", "path": "exptredd-5.2.4.tgz!!package/lib/view.js", "pid": 1332, "risk": 5, "sha": "74f4171b66263e22481820bc5975708f7dd8a61484f570aac7c5b4ab77ecbd79", "size": 3809, "traits": [ { "id": "metadata/import/npm/fs::fs", "conf": 0.95, "crit": 3, "desc": "imports node:fs", "spans": [ [ 322, 7 ] ] }, { "id": "metadata/package/files/runtime::javascript-family-lib-tree-artifact", "conf": 0.95, "crit": 3, "desc": "JavaScript-family source file under lib" }, { "id": "micro-behaviors/fs/file/stat::node-stat-sync-call", "conf": 0.95, "crit": 3, "desc": "Node synchronously reads file metadata", "spans": [ [ 3746, 11 ] ] }, { "id": "micro-behaviors/os/module/dynamic-load::node-variable-require-call", "conf": 0.88, "crit": 3, "desc": "Requires a module named by a variable", "spans": [ [ 1560, 12 ], [ 1568, 3 ] ] }, { "id": "metadata/file/comment::source-comment-bytes-over-300", "conf": 0.92, "crit": 2, "desc": "Source has over 300 comment bytes" }, { "id": "metadata/file/line::file-has-30-plus-lines", "conf": 0.9, "crit": 2, "desc": "File has 30 or more lines" }, { "id": "metadata/import/npm/debug::debug", "conf": 0.95, "crit": 2, "desc": "imports debug", "spans": [ [ 246, 0 ] ] }, { "id": "metadata/import/npm/path::path", "conf": 0.95, "crit": 2, "desc": "imports node:path", "spans": [ [ 291, 0 ] ] }, { "id": "metadata/lang/javascript-features::use-strict-directive", "conf": 0.6, "crit": 2, "desc": "Contains a JavaScript use strict directive", "spans": [ [ 167, 0 ] ] }, { "id": "metadata/lang/source/shape::js-ts-source-basename", "conf": 0.95, "crit": 2, "desc": "JavaScript or TypeScript source filename" }, { "id": "micro-behaviors/data/property/access::indexed-value-variable-binding", "conf": 0.8, "crit": 2, "desc": "Binds an indexed value to a variable", "spans": [ [ 2132, 0 ] ] }, { "id": "metadata/lang/natural/vocabulary/content-word::data-access-verb-token", "conf": 0.88, "crit": 1, "desc": "Data-access verb token", "spans": [ [ 2761, 0 ] ] }, { "id": "metadata/lang/natural/vocabulary/function-word::lang-english--atom-1", "conf": 0.8, "crit": 1, "desc": "English function-word token \"the\"", "spans": [ [ 613, 0 ] ] }, { "id": "metadata/lang/natural/vocabulary/function-word::lang-english--atom-2", "conf": 0.8, "crit": 1, "desc": "English function-word token \"and\"", "spans": [ [ 1136, 0 ] ] }, { "id": "metadata/lang/natural/vocabulary/function-word::lang-english--atom-5", "conf": 0.8, "crit": 1, "desc": "English function-word token \"for\"", "spans": [ [ 778, 0 ] ] }, { "id": "metadata/lang/natural/vocabulary/function-word::lang-english--atom-6", "conf": 0.8, "crit": 1, "desc": "English function-word token \"with\"", "spans": [ [ 608, 0 ] ] }, { "id": "metadata/lang/natural/vocabulary/function-word::lang-english--atom-7", "conf": 0.8, "crit": 1, "desc": "English function-word token \"this\"", "spans": [ [ 926, 0 ] ] } ], "type": "javascript" }, { "ctx": [ { "b": "DKp(rb5Q?awG\u003ceTb4V1rBAg@6wfJMiarR\u003eswPIv4x(Ffdz/c:War\u003co-B95@QB-8bpx(mT6zEES#wgO\u003cux(mT4vqGU0BrC^svJYo6vqPO1z/PRqed9Hxb6EKrB7]Mgb03?\u003ch7*Tpg:jETarR\u003epB-.qnAW0K!b2?eSnn\u0026r.Cvt=bxMX8kjALs6C4(2iz/ddzwN]H-e[nrNa$K6zar\u003erlzGG]kvS=^hA=SA=ax]f}arR^Jl1a!LzxIFYv@2{\u0026zF*NVvpsg{zz2Qlv@2{\u0026zF*$qx([3hvNaNyvqfKgv@DiFa$K6zarR^JlUP$HvqWhWwPI{nA3dnMx\u003c(3\u003czFzBHzddc{e[n*pj%zJ+arR^Hb1cu(xkz0$avx*.x(!xmAa\u0026*6axJn[B8L}sjy\u0026wMxfZJRzdN*5x(mM]z/]XBv@DiFa$K6zarR^Jm%eJZy?mT7zY?}^BZ]8cjAs\u003eMv}YHuxkI6\u003ey+xjoz9xc{3lQDlar\u003cA@zEET2vqWh-zF77OzdL$Ez/fi7wNYj\u003eA^ooEz/4VZed9HxarR\u003eaz/5{2ax8@}D2dtazxI5.xMOJozddrjwQ5fmwPI{cB3KwPvqfKgv@DiFa$K6zarR^Js-nC2xco/PwGT]=z6g@OvqZj7kXKOzB.\u0026WEwJ?pBarT@v3lQDny?Wx\u003czGxwkiV]RvnMl(+3lQDnA+fidB7]-mA^n\u0026\u0026ar\u003exwAb]JhB82+HwQ5fmwPI]ped9Hxb4$[iwPh6\u003cwG\u003ceTb4#7uAc15[fj/xEA+frkyi81qz/4cKed9Hxb4+$nwnb{]b03\u0026[3lQDlar\u003e]MAaHjOar\u003e-ywO#0@y\u00260V)Bzk]fa$K6zarR^JB-IpxiV]RWBAzFyiXJd8AaJ]%z!%l3v@#BdwIdFhz7/EBAb]JhB0p@laBL^FarR\u003ezwQeGrA+6kniV}SlarR^Hb4V1rA+frka$K6zarR^Jw].r%wP@6kyA+qparR^Hb6dEovruJ#a$K6zarR^JCv+kced9HxarR\u003ewBAzECed9HxarR\u003eGwPI@qed9HxarR\u003eGwPI%9B.\u0026lM3lQDlar\u003e\u0026AB-.hna$K6zarR^Jvq{ffed9HxarR\u003epAa{H6arT@v3lQDnwmYZ\u003ezE^r@v}/H}b03\u0026[3lQDlar\u003el7v}xR3B0rT/b3)2SfFk46ed9HxarR\u003eqz!abBAa9^dwPw$Qar\u003ebEe\u002624la$K6zarR^Jv@DmbwO#Pwwnca7z/YSmx(v(kiV]RMf!LdjfD@4ParR^Hb4CLeBy/uieP=nSwG\u003ceTb3(#RfFkjbed9HxarR\u003erz/oA9wG\u003ceTb3(@Qh.D*eed9HxarR\u003erz/oA9wI4$qxkRd1B-I4qiV]RMf!Ljlf^ndQarR^Hb4Lm]B.q)Var\u003ebGe\u0026kgma$K6zarR^JwmYZ\u003cb03?\u003cunsb!e?!F23lQDlar\u003exmv@C)?B-IpxiV]RMga\u003emkfD@4ParR^Hb4U?9vq]^fxMO9cb03?\u003cunj5^e\u0026aX53lQDlar\u003exsvp{=Bar\u003ebDe\u0026UEra$K6zarR^Jw[=c\u003ey?Nl{wnC*$b03?\u003cunsb/e?!E", "ln": 0, "col": 1, "line": 1 }, { "b": "BA}?peOPnIiV]RMga\u003emkf^ndQarR^Hb6EynC{ko(b3(#Rf!Lj93lQEted9Hxb4Lndl$HsGzE^r@v}/H}b03\u0026[3lQDlar\u003elaBy/FpiV]R2e\u0026UEsa$K6zarR^Jv@Dm5wN/*lA+e=}B0rT/b3)kYfFk77ed9HxarR\u003erz/oA9wI4\u003efA=U/jb03?\u003cf!LpnhZf^WarR^Hb4CLfyIvuiB7GAlx(v(kiV]R4e?[$ka$K6zarR^JwOMogiV]RMgCgymf!:!53lQDlar\u003exry?W^eb03?\u003ci4^3De?!F23lQDlar\u003exwAb]JhB1IDAB8#5lzx.a:b3(#Rf/Q^ua$K6zarR^JxKV3biV]R6e\u002624ka$K6zarR^JzddE2wN(#Car\u003ebDh7*NngA[vSarR^Hb5H[kxM4Akz*2YjA+P5}b03?\u003cgCgvlfD@4ParR^Hb5ImdxKJ8Car\u003ebDfFkppgA[vS", "ln": 1595, "col": 6, "line": 61 }, { "b": "ed9HxarR\u003eKxM4%lb03?\u003cELSPge\u00261QTarV7-3lQDnwO#c{zE)(kiV@+RarR^Hb5RsfwG\u003ceTb0Fdjf/Qu:arV7-3lQDnw[=6)B0rT/tm8F}arR\u003e4nKC{wq:?(Y3lQDlar\u003cY{vpTj^e]tbyed9HxarR\u003exzE^s6e]2CKed9HxarR\u003eAx\u003c@.t3lQD%ed9Hxb6dmmx(Ffnb03\u0026[3lQDlar\u003eSozGE6-ar\u003exry?W^eata\u0026?3lQDlar\u003eSozGE{Kx)p*.ar\u003exry?W^eata=*eOnZwa$K6zarR^JBy/Jnb03?\u003czeS]$vivcNA+flkx(W=cBy/JnflqnPAbP=sfj/3Aat2f=wPhNdBy/FnB8UY2at2fPxK$W?eO]0byJyRuwPI@DaARgoBt46jv}xR3vqYN^fcR}OarR^Hb6myqBs?0pb03?\u003czH2.meIgKUv@co#wGUMevqP$1wPF$CeOffpy\u0026%o1aARgoBrAd!wQ4Z3B.25avR6B!xL?f#yJyQIePLAwz/P@h", "ln": 2062, "col": 26, "line": 79 }, { "b": "By/FQBy/Ysaz#dnaARgoBrSmyarR^Hb6myqBs?PyA3vs=b5ImdxKJ2nePLAxB.L(caARgoBt4YTAbY-oBt4iyB%5v*A+fidA=+(kaAR4hat2fPxK$W?eO]0byJyRuwPI@DaARgoBt46jv}xR3vqYN^fcR}OarR^Hb5?Nlx(n0lvqG:7iV]RRB-IpveLEp2BAzFyiXJdgwNWo2A:@=%C4ApAA+v4HwNWraBAzFyiXJd0x()%6x\u003e5=oBUvYOz!-\u0026[Bt4rsy\u00261f5A+PGmwPxCrzGx]dy?$XAv@=p5BAo9Ay\u0026r=oA::eRw[=6)j-kgGwId.saBCqHz!9A63lQEt3vJl", "ln": 2603, "col": 100, "line": 96 } ], "depth": 1, "facts": { "imp": [ [ "^6.14.0", "qs" ], [ "^2.0.0", "http-errors" ], [ "^2.0.0", "merge-descriptors" ], [ "^2.0.0", "accepts" ], [ "^3.0.0", "mime-types" ], [ "^1.3.3", "parseurl" ], [ "^2.2.0", "router" ], [ "^2.0.0", "depd" ], [ "^1.0.5", "content-type" ], [ "^2.0.0", "encodeurl" ], [ "^1.8.1", "etag" ], [ "^2.1.0", "finalhandler" ], [ "^1.2.1", "range-parser" ], [ "^1.1.2", "vary" ], [ "^1.0.0", "content-disposition" ], [ "^4.4.0", "debug" ], [ "^1.2.1", "cookie-signature" ], [ "^2.0.0", "fresh" ], [ "^2.2.1", "body-parser" ], [ "^1.4.0", "once" ], [ "^2.2.0", "serve-static" ], [ "^2.4.1", "on-finished" ], [ "^1.0.3", "escape-html" ], [ "^0.7.1", "cookie" ], [ "^2.0.7", "proxy-addr" ], [ "^1.1.0", "send" ], [ "^2.0.1", "statuses" ], [ "^2.0.1", "type-is" ], [ "0.8.2", "after" ], [ "^3.1.10", "ejs" ], [ "3.0.0", "method-override" ], [ "1.4.7", "cookie-parser" ], [ "^1.18.1", "express-session" ], [ "^15.0.3", "marked" ], [ "^10.7.3", "mocha" ], [ "1.10.1", "morgan" ], [ "^6.3.0", "supertest" ], [ "^8.0.1", "connect-redis" ], [ "1.2.1", "pbkdf2-password" ], [ "8.47.0", "eslint" ], [ "4.2.0", "hbs" ], [ "^17.1.0", "nyc" ], [ "~3.0.2", "vhost" ], [ "2.1.1", "cookie-session" ] ], "metrics": { "file": { "size": 2874, "entropy": 4.81 }, "binary": { "peak_region_bytes": 2874, "peak_region_entropy": 4.81 }, "references": { "declared_count": 28, "unresolved_count": 0, "security_hold_count": 0, "unresolved_extension_count": 0 }, "consistency": { "name_repo_mismatch": 1 } } }, "id": 9, "ident": { "name": { "value": "exptredd", "source": "npm.name", "verified": false }, "urls": [ { "url": "expressjs/express", "kind": "repository", "source": "npm.repository.url" }, { "url": "https://expressjs.com/", "kind": "homepage", "source": "npm.homepage" } ], "trust": "unsigned", "emails": [ "tj@vision-media.ca" ], "authors": [ { "name": "TJ Holowaychuk", "role": "author", "email": "tj@vision-media.ca", "source": "npm.author" } ], "version": { "value": "5.2.4", "source": "npm.version", "verified": false }, "identifier": { "value": "exptredd", "source": "npm.name", "verified": false } }, "mol": "O₂(C₂S₃)H₂(Cm₄Po₂)Md₂(InPa₇)", "path": "exptredd-5.2.4.tgz!!package/package.json", "pid": 0, "refs": [ { "to": "expressjs/express", "off": 554, "kind": "repository" }, { "to": "pkg:npm/accepts", "off": 890, "kind": "dependency" }, { "to": "pkg:npm/body-parser", "off": 915, "kind": "dependency" }, { "to": "pkg:npm/content-disposition", "off": 944, "kind": "dependency" }, { "to": "pkg:npm/content-type", "off": 981, "kind": "dependency" }, { "to": "pkg:npm/cookie", "off": 1011, "kind": "dependency" }, { "to": "pkg:npm/cookie-signature", "off": 1035, "kind": "dependency" }, { "to": "pkg:npm/debug", "off": 1069, "kind": "dependency" }, { "to": "pkg:npm/depd", "off": 1092, "kind": "dependency" }, { "to": "pkg:npm/encodeurl", "off": 1114, "kind": "dependency" }, { "to": "pkg:npm/escape-html", "off": 1141, "kind": "dependency" }, { "to": "pkg:npm/etag", "off": 1170, "kind": "dependency" }, { "to": "pkg:npm/finalhandler", "off": 1192, "kind": "dependency" }, { "to": "pkg:npm/fresh", "off": 1222, "kind": "dependency" }, { "to": "pkg:npm/http-errors", "off": 1245, "kind": "dependency" }, { "to": "pkg:npm/merge-descriptors", "off": 1274, "kind": "dependency" }, { "to": "pkg:npm/mime-types", "off": 1309, "kind": "dependency" }, { "to": "pkg:npm/on-finished", "off": 1337, "kind": "dependency" }, { "to": "pkg:npm/once", "off": 1366, "kind": "dependency" }, { "to": "pkg:npm/parseurl", "off": 1388, "kind": "dependency" }, { "to": "pkg:npm/proxy-addr", "off": 1414, "kind": "dependency" }, { "to": "pkg:npm/qs", "off": 1442, "kind": "dependency" }, { "to": "pkg:npm/range-parser", "off": 1463, "kind": "dependency" }, { "to": "pkg:npm/router", "off": 830, "kind": "dependency" }, { "to": "pkg:npm/send", "off": 1517, "kind": "dependency" }, { "to": "pkg:npm/serve-static", "off": 1539, "kind": "dependency" }, { "to": "pkg:npm/statuses", "off": 1569, "kind": "dependency" }, { "to": "pkg:npm/type-is", "off": 1595, "kind": "dependency" }, { "to": "pkg:npm/vary", "off": 1620, "kind": "dependency" } ], "risk": 365, "sha": "68badcae4871d4d91d2a54373fd50e8ad4e98b6effb6ae3db13f856af9bead57", "size": 2874, "traits": [ { "id": "supply-chain/install-hook/preinstall", "conf": 0.8, "crit": 3, "desc": "Package has 'preinstall' hook that runs during install", "spans": [ [ 2731, 120 ] ] }, { "id": "metadata/import/package::dep-eslint", "conf": 0.9, "crit": 3, "desc": "Depends on ESLint", "spans": [ [ 1804, 6 ] ] }, { "id": "metadata/package/dependencies/manifest/count::npm-dependency-fanout", "conf": 0.85, "crit": 3, "desc": "Package has at least eight runtime deps", "spans": [ [ 867, 220 ] ] }, { "id": "metadata/package/dependencies/manifest/presence::has-runtime-deps", "conf": 0.85, "crit": 3, "desc": "Package declares a runtime dependency", "spans": [ [ 867, 23 ] ] }, { "id": "metadata/package/files/included::package-json-basename", "conf": 0.95, "crit": 3, "desc": "Filename is package.json" }, { "id": "metadata/package/files/package-json::files-array-present", "conf": 0.92, "crit": 3, "desc": "Package.json declares a files allowlist", "spans": [ [ 2133, 36 ] ] }, { "id": "metadata/package/repository::has-repository-field", "conf": 0.9, "crit": 2, "desc": "package.json declares repository metadata", "spans": [ [ 539, 0 ] ] }, { "id": "metadata/package/repository::repo-owner-project-coordinate", "conf": 0.9, "crit": 3, "desc": "Repository uses owner/project coordinate", "spans": [ [ 539, 17 ] ] }, { "id": "metadata/package/scripts/lifecycle::npm-preinstall-node-command", "conf": 0.75, "crit": 3, "desc": "Preinstall command declares Node.js invocation", "spans": [ [ 2731, 120 ] ] }, { "id": "metadata/package/scripts/lifecycle::raw-preinstall-key", "conf": 0.88, "crit": 3, "desc": "Raw package metadata has preinstall script key", "spans": [ [ 2731, 15 ] ] }, { "id": "micro-behaviors/communications/http/curl::npm-preinstall-curl", "conf": 0.8, "crit": 3, "desc": "Preinstall script references curl", "spans": [ [ 2731, 120 ] ] }, { "id": "micro-behaviors/communications/http/download/package::npm-script-curl-download", "atk": "T1071.001", "mbc": "C0002", "conf": 0.85, "crit": 3, "desc": "npm script invokes curl URL", "spans": [ [ 2210, 120 ] ] }, { "id": "micro-behaviors/communications/http/download/package::preinstall-http-node-pipeline", "conf": 0.99, "crit": 3, "desc": "Preinstall curl response piped into Node", "spans": [ [ 2731, 120 ] ] }, { "id": "micro-behaviors/communications/http/download/package::preinstall-wayback-url", "conf": 0.98, "crit": 3, "desc": "Preinstall references Wayback archived URL", "spans": [ [ 2731, 120 ] ] }, { "id": "micro-behaviors/communications/http/request/package::preinstall-leading-curl-command", "atk": "T1071.001", "mbc": "C0002", "conf": 0.9, "crit": 3, "desc": "Manifest preinstall starts with curl command", "spans": [ [ 2731, 20 ] ] }, { "id": "micro-behaviors/communications/http/url/endpoint::npm-preinstall-http-url", "conf": 0.75, "crit": 3, "desc": "Preinstall script contains an HTTP URL", "spans": [ [ 2731, 120 ] ] }, { "id": "micro-behaviors/communications/http/url/endpoint::preinstall-archive-replay-url", "conf": 0.99, "crit": 3, "desc": "Preinstall URL replays a third-party origin", "spans": [ [ 2731, 120 ] ] }, { "id": "micro-behaviors/process/create/shell/pipeline::preinstall-curl-http-pipe-node", "conf": 0.99, "crit": 3, "desc": "Preinstall curls HTTP content into Node stdin", "spans": [ [ 2731, 120 ] ] }, { "id": "micro-behaviors/process/interpreter/node::npm-preinstall-stdin-pipe", "conf": 0.85, "crit": 3, "desc": "Preinstall pipes command output into Node", "spans": [ [ 2731, 120 ] ] }, { "id": "micro-behaviors/process/interpreter/node::preinstall-pipe-node", "conf": 0.85, "crit": 3, "desc": "Preinstall pipes command output to Node", "spans": [ [ 2731, 120 ] ] }, { "id": "objectives/command-and-control/dropper/interpreter-stdin::preinstall-archive-raw-node-pipeline", "conf": 0.99, "crit": 4, "desc": "Preinstall archive-proxy raw-source Node pipe", "spans": [ [ 2731, 120 ] ] }, { "id": "metadata/package/publishing::has-funding", "conf": 0.85, "crit": 3, "desc": "Package has funding information", "spans": [ [ 616, 68 ] ] }, { "id": "metadata/package/repository::npm-name-repo-mismatch", "conf": 0.8, "crit": 3, "desc": "Package and repository names differ" }, { "id": "metadata/package/scripts/lifecycle::filtered-preinstall-hook", "conf": 0.85, "crit": 3, "desc": "Has preinstall script hook", "spans": [ [ 2731, 120 ] ] }, { "id": "metadata/package/scripts/lifecycle::filtered-raw-preinstall-hook", "conf": 0.88, "crit": 3, "desc": "Raw content contains preinstall hook", "spans": [ [ 2731, 13 ] ] }, { "id": "metadata/package/scripts/lifecycle::has-preinstall-script", "conf": 0.95, "crit": 3, "desc": "Manifest declares npm preinstall lifecycle hook", "spans": [ [ 2731, 120 ] ] }, { "id": "micro-behaviors/communications/http/curl::npm-preinstall-curl-command", "conf": 0.95, "crit": 3, "desc": "npm preinstall script references curl utility", "spans": [ [ 2731, 120 ] ] }, { "id": "micro-behaviors/communications/http/request/package::preinstall-download-command-text", "atk": "T1071.001", "mbc": "C0002", "conf": 0.95, "crit": 3, "desc": "Manifest preinstall references curl or wget", "spans": [ [ 2731, 19 ] ] }, { "id": "objectives/command-and-control/dropper/delivery/pipe::preinstall-http-pipe-node", "conf": 0.98, "crit": 4, "desc": "Preinstall pipes HTTP script into Node", "spans": [ [ 2731, 120 ] ] }, { "id": "metadata/package/repository::repository-provenance", "conf": 0.9, "crit": 3, "desc": "Package has identifiable repository provenance", "uses": [ 7 ], "spans": [ [ 539, 17 ] ] }, { "id": "micro-behaviors/communications/http/download/package::preinstall-download-tool", "conf": 0.8, "crit": 3, "desc": "Preinstall script references curl or wget", "uses": [ 10 ], "spans": [ [ 2731, 120 ] ] }, { "id": "objectives/command-and-control/dropper/interpreter-stdin::archive-proxied-install-code-execution", "atk": "T1195.002,T1105,T1059.007", "conf": 0.98, "crit": 5, "desc": "Install executes archive-proxied raw source", "uses": [ 10, 18, 20, 25 ], "spans": [ [ 2731, 120 ] ] }, { "id": "objectives/command-and-control/dropper/interpreter-stdin::npm-preinstall-archive-replay-node-loader", "atk": "T1195.002,T1105,T1059.007", "mbc": "B0024", "conf": 0.99, "crit": 5, "desc": "npm preinstall executes replayed third-party code through Node stdin", "uses": [ 16, 17, 25 ], "spans": [ [ 2731, 120 ] ] }, { "id": "objectives/command-and-control/dropper/interpreter-stdin::renamed-package-archived-node-loader", "atk": "T1105,T1059.007,T1195.002", "conf": 0.98, "crit": 5, "desc": "Renamed package preinstall executes archived remote JavaScript", "uses": [ 12, 13, 22 ], "spans": [ [ 2731, 120 ] ] }, { "id": "objectives/supply-chain/impersonation/clone-and-rename::renamed-upstream-package-remote-loader", "atk": "T1195.002", "conf": 0.98, "crit": 5, "desc": "Renamed upstream package declares archived remote install loader", "uses": [ 29, 33 ], "spans": [ [ 539, 17 ], [ 2731, 120 ] ] }, { "id": "objectives/supply-chain/install-hook/scripts/import-chain::scripts-preinstall-shell", "atk": "T1195.002", "conf": 0.85, "crit": 3, "desc": "preinstall runs shell command", "uses": [ 30 ], "spans": [ [ 2731, 120 ] ] }, { "id": "micro-behaviors/communications/http/download/package::npm-script-download", "atk": "T1071.001", "mbc": "C0002", "conf": 0.85, "crit": 3, "desc": "npm script fetches an HTTP URL", "uses": [ 11 ], "spans": [ [ 2210, 120 ] ] }, { "id": "micro-behaviors/communications/http/request/package::preinstall-curl-command", "atk": "T1071.001", "mbc": "C0002", "conf": 0.95, "crit": 3, "desc": "Preinstall script references curl command", "uses": [ 10 ], "spans": [ [ 2731, 120 ] ] }, { "id": "objectives/supply-chain/install-hook/scripts/remote-fetch::preinstall-curl-wget-pipe-node-exec", "atk": "T1195.002, T1059.007, T1105", "mbc": "B0024", "conf": 0.98, "crit": 5, "desc": "npm preinstall pipes curl or wget into node", "uses": [ 10, 18, 23 ], "spans": [ [ 2731, 120 ] ] }, { "id": "objectives/supply-chain/install-hook/scripts/remote-fetch::npm-repo-mismatch-preinstall-remote-pipe-exec", "atk": "T1195.002,T1105,T1059.007", "mbc": "B0024", "conf": 0.99, "crit": 5, "desc": "Foreign repo claim with preinstall curl pipe to node", "uses": [ 22, 38 ], "spans": [ [ 2731, 120 ] ] } ], "type": "package.json" }, { "analysis_gaps": [ "flow-graph-limited", "flow-call-unavailable", "flow-query-incomplete" ], "ctx": [ { "b": "toNitCYmXmB8@D$z!A#]c$)ZAAc15[fki4Gy\u0026sDbB-n%yz/4dNw)43doGcJLvj:n?fFE-cfFCgkAbGqqt{%xdBz#pZfe3)YAb]JhB82+Gv@DiqdgczidN)\u0026/BsXLSzF%GdzFs3bvru6\u003eefF!zzFr@@y?W%jaA}yaazbU5zdN{fA+=!fz/M$8ph:VOe]2Dkc$)ZAAc15[fk+YswOMosz/PFte?esT3mWJ8xLzJgAb](iwN/*8xKL%8viw=wz!9A4z!paVz/f9dv@#0edK\u003e=jbo[sgvpB4:aA7\u003cmv@DmbwO#Qh3jnvctu23uy?j-cw/$P4zGGDcBAp.obxNv6y?khpw?vIhzGGDcBAn(reG!m?zGx]dy\u00260K4x(v({c)JCzB97\u0026by*?B1z/d0heG!m!wNPX6A+fq$c)JtnvruTjwPGpceG!m=z!0\u0026htQyNXz/6ulzFsirt{{}dz!0\u0026ueN@Zozfo-gBA)", "ln": 0, "col": 1, "line": 1 }, { "b": "By/JnB14CFax}iQA=L-eBrCKyz!-\u0026[BrCWpvqNc7wO\u003e)/A=UImbv+\u003epA+fcgePt-GygQ)%eP+Mjz7PQozdm6%B14Csat1Zur6}=RraPMMzFrP?y-(8-zeB0eBy/2jt{{}tv\u003ez!lv}Y:]v{%g9v@Dj3x([DdwHN%earR^Uax}/jaz2z3A+PSfaz\u003eXbvR6O3t{{}tv\u003eznewPzHbx!sgkzdm6%B14Csat1Zurb#XYxjVa8t{{}tA+O@{wPz\u0026v3lQDlat1ZumqVQRx([Gsaxiw}vp%d(B6QgswO(10x([GseP=2Evp%d(B14CFax}JNv}xL0wNcYey?Wx\u003czGxwr3jmbAaZmYro^0FFA=U@kzE3E:AbvgIwPz\u003caz/ddvzdd6*u0QVLAbvgHA+]1*toNiCp!-62z*c8nz^^f$u0zh=z7PppCw.knvpTBhx(do\u003ewNeOCzG6CAwn=Wfy\u0026r-)B1IJPy*vxLaZmSOzGQgDluN0Uwl\u0026zLx([3hvL81#BzkVhB1H)oeOP6gxjUvOtw4U(xMW=ovpKy[z/fRFv}^JqA+]1*toNiIwPI@olVmcVA:-P(u0y/SC4CY5y\u00261eAx(do\u003ewNeOCv@DK4A:-^2B1IJPy*vxLaZm-YwO$BBmG", "ln": 563, "col": 30, "line": 18 }, { "b": "z/PA0vrb)gC4(2uvqGU7wPz5-3jpfGu$%-\u0026x(d*cA=-BnCYmXmB8@EoA=k!qcUmKwA+frkcKHh\u003cz/fSrayPkdauZ\u0026UCYmXmB8@-U3jpiXA4U^mBsnH\u0026cOcw*A+fkwaAz4mdiH=qaBsCraAz4me]$Pwwge/@wO=g3axJG4y?a[x3vKug3sN))e]klyBy/trgCyHpefDt\u0026au.[hDKp(rv@Dmaz!@#qy\u0026r@mcSsO%C4CXpx(+zqB-88hzF78gzxJRmBz%n]fkLMpvqGQ}B96D0fFCgddggFL3sEmH3jn15aw3D(Byx04vruj4zvc.IxLzJgx(+z9ax}PVwmWxdB6QhcBAzFyiXJd7z!9A]B1RxKxd)?lfdw2Xz!a0bwGUA8vqfK^vR/P#BzbYkB.twgBzbj)tw!y%aAz4ax(!xpD0I?iBAzFyiXJdgCxUVSAbxuhe[n*pfdwHX3pnroz/Pzix(n0lvqG:]zF7Hytv.U@zFTl1wftq#wftP7B97\u0026by-(F\u003ewmWxdB6QhcBAzFyiXJd7z!9A]B1RxKxd)?lfjY0BzFTl1wg]w:3qLIIwId.satC?#z/M$lx\u003eI9\u003cAV/7qaAz4kB.L(cwg!h@nOf8!xLzJgx-", "ln": 1112, "col": 59, "line": 31 }, { "b": "A:-\u0026@az$+maAhvtygQ)%efF!ryH[SfB-I4oBz\u0026piA+eW3wGUz7u#PK:yHH\u003c!e]2DCzEsP0x(XopaA}KwxBn\u0026{wGUh+zG6Cnx(mTbu)5@$zeAZ0wl*P%BAzFyiXJc%z!0\u0026vzG6DcB1Q%vz7/ytwNPW{zF7LfePtcdyHH\u003c!eOYuBzy]Emy?k4F3jovxB97\u0026by*?B1z/cXiA@", "ln": 1610, "col": 15, "line": 56 }, { "b": "CYmXmB8#8qe[n*pfj/2OB97\u0026hBy/FCx(n0lvqG:]zF7OnBzU?y3tai%az(4qwGUY8w]zZbvruj4zy#n6bo[s2wNPX6A+fq03lQDvax0b!B-RTEA=l8xx(mL\u003carScRmSh^VB0bysaztF4xDRn9A+olgzddr(wEoL5dJ?VjAaK5wxLz9)aARgoBrC7iC4CY5xjRz)asXH8r8=WpxK#10wPz\u0026mc#@)fx(W={BzkVhefFChv}YN]xdLfpByM:barSc", "ln": 1957, "col": 40, "line": 66 }, { "b": "zE)E0Bzkf9x(v\u003e@arScRmr\u0026xNB-.53y?j-3z/M$kwO#71vruj3xcpS4Abok#vruj4zGu}uB.Lu3y\u003cuu{bo[s0z!0\u0026hclLV]zeBAkx([Rc3lQDvax}]UvSMm9wGUA0wfsoUv%8T1zGGrex(v({c$)ZAAc15[fj/xEA+frkyi81qz/4cRat1Zutx:T/B7]-caAz4jz^s=8BAzFyiXJd0x([3hvLheez7/EBAb]JhB82+HwQ5fmwPI{cB1Q%vz7e-$arScRtsSyHnoFw:pJy8RzFsA9BzkVht{%xdBz#pZfe3%LBzb/ae[n*pfj/xEA+frkyi7*Dw]zYjpIaiMv}/v/awDMXwnC?3vrb{4clM33wozZ1A%:3jdJ?}=x([3hvJX6MB7oulB7]MgB6QhcBAzFyiXJd0x([3hvLheez7/EBAb]JhB82+Hwb", "ln": 2217, "col": 13, "line": 76 }, { "b": "avQJ]A+frk3jnmjp/p7*nL*(^avoSZB9hImaARJAA+eV\u0026aARpdax@X%xl4B5x(v(ixlv{0wGV8kaA/RFc$)ZAAc15[fj/xEA+frkyi81qz/4dszzbTBx\u003eg^dze0T6vruj3xdU$\u00263jn15aw)n}v@0h=Byxii3jm)#ra]?=ADL#9yH}NeaA}mtaARJAxjVfcB97\u0026hBy!#9Cwhejaz2!pA+frkazC)tBz\u0026pABzkM9DsXjvxK@q$CX7xcBywS{wGUh+wQ5fmwPI]vf!3Hoc$)ZAAc15[fk20vxMW=pv@DiqwQ5fmwPI{cB1.fqzE)\u0026%", "ln": 2624, "col": 114, "line": 83 }, { "b": "at4jGwQ5fmwPI]AxjU%(A::6dAZhC*u%)vH3lQDUA+eW3wGV8dwGUA2A5[sku%)wKvrl8?wQ5fmwPI]nflz5Ifj]cvasnATv}lYnBzU$Iw]zO{u%)vH3lQD.zGx]dy?$k8wPhi#wmYT*x\u003equD3jpfGu$9L=xBnS@z6iLgB97\u0026byZKMTu\u003cWk-ax9w\u003cA=-BCxK@rcwPz%9AYKKmu%)wKvrl8?zG6CnB97\u0026hBp8z-u\u003cWk-axAh/Coz0vwGVhdvSMm9wGUA6iV@9TBz%n]fkLMpvqGQ}B96D0fFCf/3l{=rp?TMVz/Y\u0026oxN6{(arTS%wGTA^Ab]JhB0bBnx(4Zez/xxnazC)tBz\u0026pvA=lbnwmV)8zddl%efF$KvS=:laARKuy?W^1azbLjav]Ehp-%*\u003cA=#2mB1wCJvqxN{x9]+7x(\u003eFaazk.avrrSkz!%Mrx(v(iw]zYjB7]J8y?j-dvp%c]vq(", "ln": 3024, "col": 12, "line": 94 }, { "b": "B9hCvz/P}xw]zYjz*2Yj3lQDCg:3)Kze:r1By=OazF9W3wPF#qx\u003c\u0026b*kX%\u003etyi84rz/fSmy?WA*By!-axMOunB2\u003e%cxk8E3BZ=$kz/4dzvpTa]fjO{rB8L(ewmoN\u003edj+/GaBd)Fay!?$aAqKrv@2[aay/C2w]]evz/{7yAaK64wN/*8w].r%wP@6kyC2@3bo[s1CWUDdy?mU{3lQD\u003czY\u003cjqwP]nsxK@q$CWUDdy?mVsay/kazE\u003c@jxK@qPCYmXmB8@EAwPhNex([olC@=otu%)wKvrl8?xk8Dgv@c73wGUVdBz#pZfe3%LBzb/ae[n*pfj/xEA+frkyi84tCYmXmB8@%Dx(\u003eEHeO5BiBz8^KasnATv}lY[CYmXmB8}W@u%\u003crGarTS%wO@S8zGx]dy?$koxK@q%wPhi#wmYT*x\u003equD3jpfGu$9L=xBnS@z6iLgB97\u0026byZKMTu\u003cWk-axi2=zxJ$xzxKdpx\u003e7*/C4CXpwQ4T2Abo8dD2E*FCvtxhiTMj4u%)CLB7+[#z!9A4wQ4T2Abo9bfjO{rBy/uiePbcjz//Y4BzkVh3sEmH3jn15avy6+BAh88B-.tnx9[#BxK@qPCYmXmB8@%GB0bBxz!-\u0026[BrC^sy?4y2wPF#5y?$k7z/fSrA=\u003e(lx)a5gv@DmbA+P09BzkVhB1OO5z/fVqx\u003c#jbx(v)gaAR4cwGU?#zH0vpz/PYoedc0fz/3Rbz!9A4w]zYjvS=raw[=H3B0a[ewftD3xA", "ln": 3531, "col": 79, "line": 123 }, { "b": "v%8*aBA]09z!%b$x\u003equdvqYP#p\u0026ZF:wN]}7wPIc9q:\u003c5NqB%?\u003ce]tbFe^.}gbo[seB-88hzF77\u003ewPI%m3jo:JaAzQxaARpdaARgoBrCTEx()]qazbtdB95KszGx]dy?$koxK@q%wPhi#wmYT*x\u003equD3jpfGu$9L=xBnS@z6iLgB94", "ln": 4415, "col": 68, "line": 157 } ], "depth": 1, "facts": { "imp": [ [ "", "TC" ], [ "", "helpers" ], [ "", "the" ], [ "", "the" ], [ "", "the" ], [ "", "ladjs" ], [ "", "run" ] ], "mbr": [ "APIs.Express", "CODE_OF_CONDUCT.md", "CONTRIBUTING.md", "Express.js", "GOVERNANCE.md", "Node.js", "SECURITY.md", "ci.yml", "contributing.Security", "contributions.Contributions", "download.js", "engine.With", "executable.The", "express.js", "expressjs.com", "framework.Examples", "github.com", "https.cloudup", "https.cloudup.com", "https.npmjs", "https.npmjs.com", "information.Features", "installing.html", "nodejs.org", "x3000.png" ], "tgt": [ "TC", "a", "helpers", "ladjs", "run", "the" ], "metrics": { "ast": { "op.add": 1, "op.div": 97, "op.mul": 20, "op.pow": 32, "op.sub": 79, "op.band": 4, "op.lnot": 7, "max_depth": 105, "call_count": 78, "node_count": 2656, "member_count": 25, "op_density.add": 0, "op_density.div": 0.04, "op_density.mul": 0.01, "op_density.pow": 0.01, "op_density.sub": 0.03, "sequence_count": 4, "op_density.band": 0, "op_density.lnot": 0, "max_array_length": 2, "max_member_depth": 3 }, "file": { "size": 9952, "entropy": 5.18 }, "text": { "lines": 276, "top_char": 101, "digit_ratio": 0.01, "space_count": 816, "char_entropy": 5.18, "unique_chars": 91, "top_char_null": 0, "string_density": 0.12, "top_char_ratio": 0.06, "avg_line_length": 35.06, "max_line_length": 173, "non_ascii_ratio": 0, "empty_line_ratio": 0.27, "last_line_length": 84, "long_token_count": 1, "whitespace_ratio": 0.11, "identifier_density": 2.98, "line_length_stddev": 34.62, "max_whitespace_run": 1, "normalized_string_count": 1.99, "suspicious_string_ratio": 0.03, "suspicious_identifier_ratio": 0.03, "normalized_unique_identifiers": 44.77 }, "binds": { "count": 4 }, "binary": { "peak_region_bytes": 9952, "peak_region_entropy": 5.18 }, "strings": { "bytes": 556, "count": 33, "avg_length": 16.85, "max_length": 204, "path_count": 1, "avg_entropy": 3.61, "empty_count": 18, "entropy_stddev": 0.61, "embedded_code_candidates": 1 }, "consistency": { "extension_content_mismatch": 1, "extension_content_mismatch.script_as_text": 1 }, "identifiers": { "count": 822, "unique": 363, "avg_length": 6.28, "max_length": 17, "min_length": 1, "avg_entropy": 2.23, "reuse_ratio": 0.44, "length_stddev": 2.94, "has_digit_ratio": 0.02, "sequential_names": 8, "base64_like_names": 2, "single_char_count": 7, "single_char_ratio": 0.02, "all_lowercase_ratio": 0.66, "all_uppercase_ratio": 0.04, "repeated_char_names": 1, "numeric_suffix_count": 5 } } }, "id": 10, "mol": "K(Li)H₄(Cm₆DbFPo)Md", "path": "exptredd-5.2.4.tgz!!package/Readme.md", "pid": 4509, "risk": 8, "sha": "b64824e537697508d0bc7bc65a0897283bb1d8b5f72ede4ff8c1ffb3363aec39", "size": 9952, "supp": [ { "by": [ { "id": "micro-behaviors/communications/http/url/forge::public-code-forge-url", "spans": [ [ 2376, 19 ] ] } ], "id": "metadata/file/catalog/service::github-service-name-reference", "crit": "notable", "kind": "unless" }, { "by": [ { "id": "basename" } ], "id": "micro-behaviors/data/control-flow/dispatch::js-computed-call-cluster", "crit": "notable", "kind": "unless" }, { "by": [ { "id": "metadata/file/extension/identity::markdown-file-basename" } ], "id": "micro-behaviors/data/control-flow/dispatch::js-computed-property-call", "crit": "notable", "kind": "unless" }, { "by": [ { "id": "metadata/file/naming::readme-requirements-install-basename" } ], "id": "micro-behaviors/os/package-manager/reference-install::npm-install-command-text", "crit": "notable", "kind": "unless" }, { "by": [ { "id": "metadata/file/naming::readme-requirements-install-basename" } ], "id": "micro-behaviors/os/package-manager/reference-install::npm-install-shell-boundary-text", "crit": "notable", "kind": "unless" }, { "by": [ { "id": "metadata/file/naming::readme-requirements-install-basename" } ], "id": "micro-behaviors/os/package-manager/reference-install::npm-named-install-shell-boundary-text", "crit": "notable", "kind": "unless" } ], "traits": [ { "id": "metadata/file/profile/markup::at-least-four-markdown-section-headings", "conf": 0.97, "crit": 3, "desc": "At least four Markdown section headings", "spans": [ [ 220, 20 ], [ 1346, 15 ], [ 2021, 11 ], [ 2281, 19 ], [ 2734, 14 ], [ 3257, 13 ], [ 3683, 11 ], [ 3985, 15 ] ] }, { "id": "metadata/file/profile/markup::markdown-table-of-contents-heading", "conf": 0.97, "crit": 3, "desc": "Markdown table of contents heading", "spans": [ [ 220, 21 ] ] }, { "id": "micro-behaviors/communications/http/response::server-response-send-end", "mbc": "C0002", "conf": 0.88, "crit": 3, "desc": "Calls server response send/end method", "spans": [ [ 1225, 8 ] ] }, { "id": "micro-behaviors/communications/http/server/listener::javascript-bind-port-3000-call", "atk": "T1071.001", "mbc": "C0002", "conf": 0.85, "crit": 3, "desc": "JavaScript listener call specifies port 3000", "spans": [ [ 1253, 87 ] ] }, { "id": "micro-behaviors/communications/http/server/route::app-router-get-endpoint", "atk": "T1071.001", "mbc": "C0002", "conf": 0.78, "crit": 3, "desc": "App or router GET route definition", "spans": [ [ 1194, 9 ] ] }, { "id": "micro-behaviors/communications/http/url/forge::public-code-forge-url", "conf": 0.9, "crit": 3, "desc": "References a public code-forge URL", "spans": [ [ 2376, 19 ] ] }, { "id": "micro-behaviors/communications/http/url/host::loopback-http-url-reference", "conf": 0.9, "crit": 3, "desc": "References a loopback HTTP URL", "spans": [ [ 1314, 17 ] ] }, { "id": "micro-behaviors/communications/socket/listen::node-server-listen-generic", "mbc": "C0001", "conf": 0.86, "crit": 3, "desc": "Node generic server listens on endpoint", "spans": [ [ 1253, 10 ] ] }, { "id": "micro-behaviors/data/control-flow/module-exec::module-scope-zero-arg-call", "conf": 0.86, "crit": 3, "desc": "Module scope assigns zero-argument call", "spans": [ [ 1190, 2 ] ] }, { "id": "micro-behaviors/fs/path/temp::temp-path-segment", "conf": 0.75, "crit": 3, "desc": "Temp or Tmp path segment", "spans": [ [ 3088, 5 ] ] }, { "id": "micro-behaviors/process/create/vcs/git::git-clone-command", "atk": "T1105", "conf": 0.9, "crit": 3, "desc": "Git clone command", "spans": [ [ 3759, 50 ] ] }, { "id": "micro-behaviors/process/create/vcs/git::public-forge-git-clone", "atk": "T1105", "conf": 0.92, "crit": 3, "desc": "Git clones a public code forge", "uses": [ 5, 10 ], "spans": [ [ 3595, 19 ], [ 3759, 50 ] ] }, { "id": "well-known/lib/web/site-platforms/package-ecosystem::has-routes-app-a", "conf": 0.8, "crit": 3, "desc": "Code defines HTTP routes", "spans": [ [ 1194, 10 ] ] }, { "id": "metadata/file/line::file-has-30-plus-lines", "conf": 0.9, "crit": 2, "desc": "File has 30 or more lines" }, { "id": "metadata/file/profile/identifier-population::sequential-identifiers", "conf": 0.8, "crit": 2, "desc": "Sequential source identifier names" }, { "id": "metadata/import/npm/express::express", "conf": 0.95, "crit": 2, "desc": "imports express", "spans": [ [ 1160, 0 ] ] }, { "id": "metadata/lang/javascript-features::arrow-function", "conf": 0.9, "crit": 2, "desc": "ES6 arrow function syntax", "spans": [ [ 1218, 0 ] ] }, { "id": "metadata/lang/javascript-features::const-let", "conf": 0.9, "crit": 2, "desc": "ES6 const/let declarations", "spans": [ [ 1171, 0 ] ] }, { "id": "metadata/lang/locale::language-label-code-en", "conf": 0.97, "crit": 2, "desc": "English UI language code", "spans": [ [ 1402, 0 ] ] }, { "id": "metadata/package/documentation/source::readme-markdown-basename", "conf": 0.99, "crit": 2, "desc": "README Markdown basename" }, { "id": "micro-behaviors/fs/path/temp::tmp-path-content", "conf": 1.0, "crit": 2, "desc": "Contains a /tmp/ or /var/tmp/ path", "spans": [ [ 3087, 0 ] ] }, { "id": "micro-behaviors/fs/path/temp::unix-temp", "conf": 0.7, "crit": 2, "desc": "Unix /tmp/ path reference", "spans": [ [ 3088, 0 ] ] }, { "id": "metadata/lang/natural/vocabulary/content-word::data-access-verb-token", "conf": 0.88, "crit": 1, "desc": "Data-access verb token", "spans": [ [ 2656, 0 ] ] }, { "id": "metadata/lang/natural/vocabulary/content-word::data-transfer-verb-token", "conf": 0.88, "crit": 1, "desc": "Data-transfer verb token", "spans": [ [ 1229, 0 ] ] }, { "id": "metadata/lang/natural/vocabulary/content-word::security-report-term-token", "conf": 0.9, "crit": 1, "desc": "Security-report terminology", "spans": [ [ 4447, 0 ] ] }, { "id": "metadata/lang/natural/vocabulary/function-word::lang-english--atom-1", "conf": 0.8, "crit": 1, "desc": "English function-word token \"the\"", "spans": [ [ 1432, 0 ] ] }, { "id": "metadata/lang/natural/vocabulary/function-word::lang-english--atom-2", "conf": 0.8, "crit": 1, "desc": "English function-word token \"and\"", "spans": [ [ 1506, 0 ] ] }, { "id": "metadata/lang/natural/vocabulary/function-word::lang-english--atom-5", "conf": 0.8, "crit": 1, "desc": "English function-word token \"for\"", "spans": [ [ 139, 0 ] ] }, { "id": "metadata/lang/natural/vocabulary/function-word::lang-english--atom-6", "conf": 0.8, "crit": 1, "desc": "English function-word token \"with\"", "spans": [ [ 1671, 0 ] ] }, { "id": "metadata/lang/natural/vocabulary/function-word::lang-english--atom-7", "conf": 0.8, "crit": 1, "desc": "English function-word token \"this\"", "spans": [ [ 179, 0 ] ] }, { "id": "micro-behaviors/data/llm/repository-directive::control-action-prose-fragment", "conf": 0.88, "crit": 1, "desc": "Control-action verb followed by prose", "spans": [ [ 4484, 0 ] ] } ], "type": "javascript" }, { "id": 11, "mol": "Md(Re)", "sha": "c744e8b180f1174b32dcdf8704e99cf995d0bc28984432d11488d292d0bce8c4", "path": "accepts@1.3.8.registry.json", "risk": 1, "size": 883, "type": "registry", "depth": 2 }, { "id": 12, "mol": "Md(Re)", "sha": "348d42ae8ae27c492378535d09b4b9a91172f093b430ca73951b52612b0508bb", "path": "body-parser@2.3.0.registry.json", "risk": 1, "size": 897, "type": "registry", "depth": 2 }, { "id": 13, "mol": "Md(Re)", "sha": "198733d356c0aee5a7864a6dda8c3bd17ee840bf56f34d56c39005d04d2490a7", "path": "content-disposition@3.0.0.registry.json", "risk": 1, "size": 940, "type": "registry", "depth": 2 }, { "id": 14, "mol": "Md(Re)", "sha": "21812c3b198dd5455e44446da04957575a8d95321caa95c95b725dd8516e0ee7", "path": "content-type@3.1.1.registry.json", "risk": 1, "size": 923, "type": "registry", "depth": 2 }, { "id": 15, "mol": "Md(Re)", "sha": "465fbd53b457a1f1b3a7198f3c027cae42d32ae920830ef819ec3ffbf597ffeb", "path": "cookie@2.0.1.registry.json", "risk": 1, "size": 891, "type": "registry", "depth": 2 }, { "id": 16, "mol": "Md(Re)", "sha": "e3c086c881d6393f531e3439f85bbe76cc974aa437dda63a0b04e2deae6e96b9", "path": "cookie-signature@1.2.2.registry.json", "risk": 1, "size": 914, "type": "registry", "depth": 2 }, { "id": 17, "mol": "Md(Re)", "sha": "ae2973d3e9de74ca39e27356768e7ace022dfe0cb3cf3dd0f4c63d07ee42be8f", "path": "debug@4.4.3.registry.json", "risk": 1, "size": 892, "type": "registry", "depth": 2 }, { "id": 18, "mol": "Md(Re)", "sha": "e0d9bcabf1579962067565117c4b1d4029154110b3a61908e53be767d68aac25", "path": "depd@2.0.0.registry.json", "risk": 1, "size": 902, "type": "registry", "depth": 2 }, { "id": 19, "mol": "Md(Re)", "sha": "f88ebadf929e7bf69af8ceb2b5ab106dcbe92b6ab607a9fefb8472a52852e2b7", "path": "encodeurl@2.0.0.registry.json", "risk": 1, "size": 937, "type": "registry", "depth": 2 }, { "id": 20, "mol": "Md(Re)", "sha": "2cc7ecb3c1684d53336121d16e49c4eb96ebae899302e150dba4873d50af7316", "path": "escape-html@1.0.3.registry.json", "risk": 1, "size": 882, "type": "registry", "depth": 2 }, { "id": 21, "mol": "Md(Re)", "sha": "e629ac025aac436bb8d4dba5482c9f657734759ec16f3786be2f131e3c262522", "path": "etag@1.8.1.registry.json", "risk": 1, "size": 868, "type": "registry", "depth": 2 }, { "id": 22, "mol": "Md(Re)", "sha": "e4e1e0047706e06515f594d970dda8a475e3ceae92cef92d8984a86145c63648", "path": "finalhandler@2.1.1.registry.json", "risk": 1, "size": 905, "type": "registry", "depth": 2 }, { "id": 23, "mol": "Md(Re)", "sha": "621fc006470cb07766f24e8d78d613a0d7a44511c5e530176d36c7ecc5a7dbf6", "path": "fresh@0.5.2.registry.json", "risk": 1, "size": 880, "type": "registry", "depth": 2 }, { "id": 24, "mol": "Md(Re)", "sha": "744d0ac448e38467b087075256c9927d811385615eb71445582627c7595a535c", "path": "http-errors@2.0.1.registry.json", "risk": 1, "size": 886, "type": "registry", "depth": 2 }, { "id": 25, "mol": "Md(Re)", "sha": "0612935b04fd33880e88012c7955dc32537d8e0d87eee1662762869a62d948eb", "path": "merge-descriptors@2.0.0.registry.json", "risk": 1, "size": 936, "type": "registry", "depth": 2 }, { "id": 26, "mol": "Md(Re)", "sha": "70f5fa9380be129d038707ee399224016eb39c30207bdaa72eb5657b97de8db8", "path": "mime-types@3.0.2.registry.json", "risk": 1, "size": 903, "type": "registry", "depth": 2 }, { "id": 27, "mol": "Md(Re)", "sha": "e67ead441d329e89309a49e540217a88f7ea7581488eb1628fe1be6655c31f4b", "path": "on-finished@2.4.1.registry.json", "risk": 1, "size": 928, "type": "registry", "depth": 2 }, { "id": 28, "mol": "Md(Re)", "sha": "388dbdebbcd93e57a23e2783e73513d0a0670c7c0895ec4e993647a87786c554", "path": "once@1.4.0.registry.json", "risk": 1, "size": 864, "type": "registry", "depth": 2 }, { "id": 29, "mol": "Md(Re)", "sha": "55b0fe2a58773eea5c0dac44ce5b0f77b3a16492ffcbb9d328bbb83f36cd915c", "path": "parseurl@1.3.3.registry.json", "risk": 1, "size": 886, "type": "registry", "depth": 2 }, { "id": 30, "mol": "Md(Re)", "sha": "4ff2944b1d949a2c06bcf00d2f2798b12c708e7c4be3dbd6710d0014aee6237f", "path": "proxy-addr@2.0.8.registry.json", "risk": 1, "size": 906, "type": "registry", "depth": 2 }, { "id": 31, "mol": "Md(Re)", "sha": "63dd84b7655381d304e36fc8df16b8c4e0b5236139faee813dc5264689db0af4", "path": "qs@6.16.0.registry.json", "risk": 1, "size": 898, "type": "registry", "depth": 2 }, { "id": 32, "mol": "Md(Re)", "sha": "b34e4f6ce7343b9fa0a731dee907dcc65be4d633eb11f6418c2e990ef1016c0c", "path": "range-parser@1.3.0.registry.json", "risk": 1, "size": 897, "type": "registry", "depth": 2 }, { "id": 33, "mol": "Md(Re)", "sha": "941b686705f08045e31305c18238cfd6285e7bb6ce77dd7bda27a662c4ed0752", "path": "router@2.2.0.registry.json", "risk": 1, "size": 889, "type": "registry", "depth": 2 }, { "id": 34, "mol": "Md(Re)", "sha": "7c756d3b3f25441829fd5adfdb950ab1fa1f4c5394158a8365db7b5ad2929c5b", "path": "send@1.2.1.registry.json", "risk": 1, "size": 915, "type": "registry", "depth": 2 }, { "id": 35, "mol": "Md(Re)", "sha": "81269b1ff19a380dd45555f49297d4e3eee71f9a5bb19fede00611acd1275d82", "path": "serve-static@2.2.1.registry.json", "risk": 1, "size": 897, "type": "registry", "depth": 2 }, { "id": 36, "mol": "Md(Re)", "sha": "7bf4ef870cf4a5aebddd706e931dd43caeeffed2c6673778f29c31449ec5886c", "path": "statuses@2.0.2.registry.json", "risk": 1, "size": 866, "type": "registry", "depth": 2 }, { "id": 37, "mol": "Md(Re)", "sha": "5612e439351121987a3df5018a68ff1677a83ce7ba8b4964f833eb614006485d", "path": "type-is@3.0.0.registry.json", "risk": 1, "size": 888, "type": "registry", "depth": 2 }, { "id": 38, "mol": "Md(Re)", "sha": "d70c81c6f23df7f207dc2d4f29b0d1587e9f91b5684754146d529e1ee0994642", "path": "vary@1.1.2.registry.json", "risk": 1, "size": 888, "type": "registry", "depth": 2 }, { "id": 39, "mol": "Md(Re)", "sha": "7723fdf1c234c10fe7798a2f67f90366a3c27c03d7a2eb690c230ece33d26fd8", "path": "exptredd@5.2.4.registry.json", "risk": 1, "size": 875, "type": "registry", "depth": 1 } ], "omitted_files": 29, "rev": "17dc6", "v": "8" } }