{
  "ml": {
    "v": "4",
    "fs": [
      {
        "id": 0,
        "prob": 0.5320000052452087,
        "class": 0
      }
    ],
    "prob": 0.532,
    "class": 0,
    "models": [
      {
        "m": "az",
        "prob": 0.532,
        "class": 0
      },
      {
        "m": "az/config",
        "prob": 0.15277778,
        "class": 0
      },
      {
        "m": "az/package.json",
        "prob": 0.2,
        "class": 0
      }
    ],
    "version": "v16.16",
    "thresholds": [
      0.9961373,
      0.9998425
    ],
    "analyzed_at": "2026-05-15T20:07:22Z"
  },
  "path": "package.json",
  "raw": {
    "v": "4",
    "fs": [
      {
        "f": "O(S₂)Md(Pa₃)",
        "x": 4,
        "id": 0,
        "is": [
          "@smithy/util-utf8",
          "effect",
          "aws4fetch",
          "@smithy/eventstream-codec",
          "@effect/platform-node",
          "@types/bun",
          "@typescript/native-preview",
          "@clack/prompts",
          "@tsconfig/bun",
          "@opencode-ai/http-recorder"
        ],
        "ms": {
          "file": {
            "size": 2118.0
          }
        },
        "ss": [
          [
            0,
            "/setup-recording-env.ts"
          ]
        ],
        "sz": 2118,
        "ts": [
          {
            "c": 0.800000011920929,
            "d": "\"copilot\" identity",
            "e": [
              "copilot"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-agent-identity-copilot",
            "l": 1
          },
          {
            "c": 0.8500000238418579,
            "d": "Package has modern exports field",
            "e": [
              "{\".\":\"./src/index.ts\",\"./route\":\"./src/route/index.ts\",\"./provider\":\"./src/provider.ts\",\"./providers\":\"./src/providers/index.ts\""
            ],
            "i": "metadata/package/fields/exports::has-exports-field",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "npm package has version field",
            "e": [
              "1.15.0"
            ],
            "i": "metadata/package/fields/version::npm-has-version",
            "l": 2
          },
          {
            "a": "T1195.002",
            "c": 0.699999988079071,
            "d": "Package has no compile script entry",
            "e": [
              "field 'scripts.compile' does not exist"
            ],
            "i": "objectives/supply-chain/hidden-payload/staging::no-build-script-compile",
            "l": 1
          },
          {
            "a": "T1195.002",
            "c": 0.8199999928474426,
            "d": "Package name says AI agent",
            "e": [
              "@opencode-ai/llm"
            ],
            "i": "objectives/supply-chain/metadata-anomaly/manifest/ai-tool::ai-tool-name-ai-agent",
            "l": 3
          },
          {
            "a": "T1195.002",
            "c": 0.699999988079071,
            "d": "Package has no prepare script entry",
            "e": [
              "field 'scripts.prepare' does not exist"
            ],
            "i": "objectives/supply-chain/hidden-payload/staging::no-build-script-prepare",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Uses standard version format",
            "e": [
              "1.15.0"
            ],
            "i": "metadata/package/fields/version::conventional-version-base",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "Depends on Bun runtime types",
            "e": [
              "@types/bun"
            ],
            "i": "metadata/import/npm::dep-bun-types",
            "l": 2
          },
          {
            "a": "T1195.002",
            "c": 0.699999988079071,
            "d": "Package has no package script entry",
            "e": [
              "field 'scripts.package' does not exist"
            ],
            "i": "objectives/supply-chain/hidden-payload/staging::no-build-script-package",
            "l": 1
          },
          {
            "c": 0.699999988079071,
            "d": "Package has mature version number",
            "e": [
              "1.15.0"
            ],
            "i": "metadata/package/fields/version::mature-version",
            "l": 3
          },
          {
            "a": "T1195.002",
            "c": 0.699999988079071,
            "d": "Package has no package-web script entry",
            "e": [
              "field 'scripts.package-web' does not exist"
            ],
            "i": "objectives/supply-chain/hidden-payload/staging::no-build-script-package-web",
            "l": 1
          },
          {
            "a": "T1195.002",
            "c": 0.699999988079071,
            "d": "Package has no prepublish script entry",
            "e": [
              "field 'scripts.prepublish' does not exist"
            ],
            "i": "objectives/supply-chain/hidden-payload/staging::no-build-script-prepublish",
            "l": 1
          },
          {
            "c": 0.699999988079071,
            "d": "Code has JSDoc @type",
            "e": [
              "@type"
            ],
            "i": "metadata/package/documentation::has-jsdoc-type",
            "l": 2
          },
          {
            "a": "T1195.002",
            "c": 1.0,
            "d": "npm package declares dependencies field",
            "e": [
              "{\"@smithy/eventstream-codec\":\"4.2.14\",\"@smithy/util-utf8\":\"4.2.2\",\"aws4fetch\":\"1.0.20\",\"effect\":\"catalog:\"}"
            ],
            "i": "objectives/supply-chain/metadata-anomaly/dependency/manifest::npm-has-runtime-dependencies-field",
            "l": 1
          },
          {
            "a": "T1195.002",
            "c": 0.699999988079071,
            "d": "Package has no prepublishOnly script entry",
            "e": [
              "field 'scripts.prepublishOnly' does not exist"
            ],
            "i": "objectives/supply-chain/hidden-payload/staging::no-build-script-prepublish-only",
            "l": 1
          },
          {
            "a": "T1195.002",
            "c": 0.699999988079071,
            "d": "Package has no compile-web script entry",
            "e": [
              "field 'scripts.compile-web' does not exist"
            ],
            "i": "objectives/supply-chain/hidden-payload/staging::no-build-script-compile-web",
            "l": 1
          },
          {
            "c": 0.800000011920929,
            "d": "Package has devDependencies",
            "e": [
              "{\"@clack/prompts\":\"1.0.0-alpha.1\",\"@effect/platform-node\":\"catalog:\",\"@opencode-ai/http-recorder\":\"workspace:*\",\"@tsconfig/bun\":"
            ],
            "i": "metadata/package/fields/dependencies::has-dev-deps",
            "l": 2
          },
          {
            "c": 0.6000000238418579,
            "d": "\"exports\": field in package.json",
            "e": [
              "\"exports\":"
            ],
            "i": "metadata/package/fields/exports::pkg-exports-field-entry",
            "l": 2
          },
          {
            "a": "T1195.002",
            "c": 0.699999988079071,
            "d": "Package has no prepack script entry",
            "e": [
              "field 'scripts.prepack' does not exist"
            ],
            "i": "objectives/supply-chain/hidden-payload/staging::no-build-script-prepack",
            "l": 1
          },
          {
            "c": 0.8399999737739563,
            "d": "\"store\" doc cue (storage instruction)",
            "e": [
              "store"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11769",
            "l": 1
          },
          {
            "a": "T1195.002",
            "c": 0.6499999761581421,
            "d": "npm package uses pnpm catalog protocol",
            "e": [
              "\"catalog:"
            ],
            "i": "objectives/supply-chain/metadata-anomaly/dependency/manifest::npm-catalog-dependency",
            "l": 3
          },
          {
            "c": 1.0,
            "d": "package defines test script",
            "e": [
              "bun test --timeout 30000"
            ],
            "i": "objectives/impact/destroy/file-deletion::has-test-script",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "npm package has name field",
            "e": [
              "@opencode-ai/llm"
            ],
            "i": "metadata/package/quality::npm-has-name",
            "l": 2
          },
          {
            "c": 0.800000011920929,
            "d": "Package marked as private",
            "e": [
              "true"
            ],
            "i": "metadata/package/fields/private::is-private",
            "l": 3
          },
          {
            "c": 0.8399999737739563,
            "d": "Package uses npm scope name",
            "e": [
              "@opencode-ai/llm"
            ],
            "i": "objectives/supply-chain/metadata-anomaly/manifest/npm::scoped-package-name",
            "l": 1
          },
          {
            "a": "T1195.002",
            "c": 0.6499999761581421,
            "d": "npm devDependency uses workspace protocol",
            "e": [
              "\"workspace:"
            ],
            "i": "objectives/supply-chain/metadata-anomaly/dependency/manifest::npm-workspace-devdependency",
            "l": 3
          },
          {
            "a": "T1195.002",
            "c": 0.699999988079071,
            "d": "Package has no build script entry",
            "e": [
              "field 'scripts.build' does not exist"
            ],
            "i": "objectives/supply-chain/hidden-payload/staging::no-build-script-build",
            "l": 1
          },
          {
            "c": 0.6000000238418579,
            "d": "Package version suggests maturity",
            "e": [
              "1.15.0"
            ],
            "i": "objectives/supply-chain/metadata-anomaly/manifest/npm::version-mature",
            "l": 1
          },
          {
            "c": 0.800000011920929,
            "d": "\"gemini\" identity",
            "e": [
              "gemini"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-agent-identity-gemini",
            "l": 1
          },
          {
            "a": "T1195.002",
            "c": 0.6000000238418579,
            "d": "Package is missing author field",
            "e": [
              "field 'author' does not exist"
            ],
            "i": "objectives/supply-chain/impersonation/npm-clone::author-missing-field",
            "l": 1,
            "m": "E1195.002"
          },
          {
            "c": 0.800000011920929,
            "d": "Package has src directory structure",
            "e": [
              "\"./src/"
            ],
            "i": "metadata/package/files::has-src-directory",
            "l": 3
          },
          {
            "c": 0.949999988079071,
            "d": "imports @smithy/util-utf8 from 4.2.2",
            "e": [
              "@smithy/util-utf8"
            ],
            "i": "metadata/import/npm::smithy/util-utf8",
            "l": 2
          },
          {
            "c": 0.949999988079071,
            "d": "imports effect from catalog:",
            "e": [
              "effect"
            ],
            "i": "metadata/import/npm::effect",
            "l": 2
          },
          {
            "c": 0.949999988079071,
            "d": "imports aws4fetch from 1.0.20",
            "e": [
              "aws4fetch"
            ],
            "i": "metadata/import/npm::aws4fetch",
            "l": 2
          },
          {
            "c": 0.949999988079071,
            "d": "imports @smithy/eventstream-codec from 4.2.14",
            "e": [
              "@smithy/eventstream-codec"
            ],
            "i": "metadata/import/npm::smithy/eventstream-codec",
            "l": 2
          },
          {
            "c": 0.949999988079071,
            "d": "imports @effect/platform-node from catalog:",
            "e": [
              "@effect/platform-node"
            ],
            "i": "metadata/import/npm::effect/platform-node",
            "l": 2
          },
          {
            "c": 0.949999988079071,
            "d": "imports @types/bun from catalog:",
            "e": [
              "@types/bun"
            ],
            "i": "metadata/import/npm::types/bun",
            "l": 2
          },
          {
            "c": 0.949999988079071,
            "d": "imports @typescript/native-preview from catalog:",
            "e": [
              "@typescript/native-preview"
            ],
            "i": "metadata/import/npm::typescript/native-preview",
            "l": 2
          },
          {
            "c": 0.949999988079071,
            "d": "imports @clack/prompts from 1.0.0-alpha.1",
            "e": [
              "@clack/prompts"
            ],
            "i": "metadata/import/npm::clack/prompts",
            "l": 2
          },
          {
            "c": 0.949999988079071,
            "d": "imports @tsconfig/bun from catalog:",
            "e": [
              "@tsconfig/bun"
            ],
            "i": "metadata/import/npm::tsconfig/bun",
            "l": 2
          },
          {
            "c": 0.949999988079071,
            "d": "imports @opencode-ai/http-recorder from workspace:*",
            "e": [
              "@opencode-ai/http-recorder"
            ],
            "i": "metadata/import/npm::opencode-ai/http-recorder",
            "l": 2
          },
          {
            "a": "T1195.002",
            "c": 0.800000011920929,
            "d": "Package has no recognizable build pipeline",
            "e": [
              "field 'scripts.prepack' does not exist",
              "field 'scripts.prepublish' does not exist",
              "field 'scripts.package-web' does not exist",
              "field 'scripts.compile' does not exist",
              "field 'scripts.build' does not exist",
              "field 'scripts.prepublishOnly' does not exist",
              "field 'scripts.compile-web' does not exist",
              "field 'scripts.package' does not exist",
              "field 'scripts.prepare' does not exist"
            ],
            "i": "objectives/supply-chain/hidden-payload/staging::no-build-script",
            "l": 1
          }
        ],
        "sha": "1c3e89e4ed3cc06ed86adca241801aba51769663758ab83084a00247c5ca119d",
        "path": "package.json",
        "type": "package.json"
      }
    ],
    "tv": "08128"
  }
}