{
  "ml": {
    "v": "7",
    "id": 1069,
    "lvl": -1,
    "conf": 0,
    "prob": 0.000018755594282993115,
    "type": "package.json",
    "version": "v18.18",
    "analyzed_at": "2026-09-06T23:53:40Z"
  },
  "path": "ml-array-xy-max-merge@1.0.2",
  "raw": {
    "rev": "479f3",
    "files": [
      {
        "id": 1801,
        "ctx": [
          {
            "b": "abZy80000002a:7yJFi27m\u0026!F6)E=285%hOvc(Jqw^BYjyb0c$pC$UL5*oc9l\u003eq:s/@#K${R14u0/QGO[OrrmUb4e\u003c[9t88)=!Sh6vV!}J--NtS2I\u003ew[ZyzJp1cbc3FXQwmB%1[[kBRkS*cibS!LK$nZ\u003c.u@c:-wr.yNXgSi9hydA(b}r@/8iCOhV\u003e#=f)oI$8\u003ewemk3ArGz{2F9%\u00262g9m/73g*pP2n8L{#39dVYCSdfByJsvS\u0026/Ea.85(.5w*4H#/=!.1qm[viFc{u\u003ew-^[aXaY.9Owln=",
            "ln": 0
          }
        ],
        "mol": "O(S₂)Md(Pa₃)",
        "pid": 29,
        "rel": "fetched",
        "sha": "2400a469d210fbe54e5b93a66836c5ddfdea6cdd09aa985e36c97b443cd028af",
        "via": "https://registry.npmjs.org/ml-array-xy-max-merge/-/ml-array-xy-max-merge-1.0.2.tgz",
        "path": "pkg:npm/ml-array-xy-max-merge@1.0.2",
        "refs": [
          {
            "to": "pkg:github/mljs/array-xy",
            "off": 0,
            "kind": "repository"
          }
        ],
        "risk": 40,
        "size": 2689,
        "type": "npm",
        "depth": 2,
        "facts": {
          "metrics": {
            "file": {
              "size": 2689,
              "entropy": 7.93
            },
            "parse": {
              "error_count": 1
            },
            "binary": {
              "peak_region_bytes": 2689,
              "peak_region_entropy": 7.78
            },
            "consistency": {
              "name_repo_mismatch": 1
            }
          }
        },
        "ident": {
          "name": {
            "value": "ml-array-xy-max-merge",
            "source": "npm.name",
            "verified": false
          },
          "urls": [
            {
              "url": "git+https://github.com/mljs/array-xy.git",
              "kind": "repository",
              "source": "npm.repository.url"
            },
            {
              "url": "https://github.com/mljs/array-xy/tree/master/packages/array-xy-max-merge#readme",
              "kind": "homepage",
              "source": "npm.homepage"
            }
          ],
          "trust": "unsigned",
          "authors": [
            {
              "name": "Miguel Asencio",
              "role": "author",
              "source": "npm.author"
            }
          ],
          "version": {
            "value": "1.0.2",
            "source": "npm.version",
            "verified": false
          },
          "identifier": {
            "value": "ml-array-xy-max-merge",
            "source": "npm.name",
            "verified": false
          }
        },
        "traits": [
          {
            "id": "metadata/package/manifest/name::npm-hyphenated-multiword-name",
            "conf": 0.7,
            "crit": 2,
            "desc": "npm hyphenated multiword name"
          },
          {
            "id": "metadata/package/versioning::mature-version",
            "conf": 0.7,
            "crit": 2,
            "desc": "Major version is 1 or higher"
          },
          {
            "id": "metadata/file/profile/language::lang-english--atom-2",
            "conf": 0.8,
            "crit": 2,
            "desc": "English function-word token \"and\"",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "metadata/package/testing/scripted::js-bdd-functions",
            "conf": 0.6,
            "crit": 2,
            "desc": "JavaScript BDD test functions",
            "from": [
              {
                "off": 332,
                "file": 1805,
                "line": 14
              }
            ],
            "uses": [
              4,
              8,
              31
            ]
          },
          {
            "id": "metadata/package/testing/presence/fixture::jest-expect-call",
            "conf": 0.6,
            "crit": 2,
            "desc": "expect() function call",
            "from": [
              {
                "file": 4
              }
            ]
          },
          {
            "id": "metadata/package/testing/scripted::jest",
            "conf": 0.95,
            "crit": 3,
            "desc": "Jest test framework",
            "from": [
              {
                "file": 1805
              }
            ],
            "uses": [
              3
            ]
          },
          {
            "id": "metadata/package/quality/empty::npm-has-name",
            "conf": 1.0,
            "crit": 2,
            "desc": "package.json defines a package name"
          },
          {
            "id": "metadata/package/manifest/entrypoint::main-runtime-tree-entrypoint",
            "conf": 0.85,
            "crit": 2,
            "desc": "Package main targets runtime tree"
          },
          {
            "id": "metadata/package/testing/scripted::jest-describe",
            "conf": 0.6,
            "crit": 2,
            "desc": "describe() function",
            "from": [
              {
                "file": 4
              }
            ]
          },
          {
            "id": "metadata/package/testing/harness/runtime::is-test",
            "conf": 0.9,
            "crit": 2,
            "desc": "Test, spec, or fixture file",
            "from": [
              {
                "file": 1805
              }
            ],
            "uses": [
              14,
              19,
              22,
              30
            ]
          },
          {
            "id": "metadata/package/testing/presence/harness::tests-path-filename",
            "conf": 0.85,
            "crit": 1,
            "desc": "File path or name indicates test code",
            "from": [
              {
                "file": 4
              }
            ]
          },
          {
            "id": "metadata/package/testing/scripted::js-bdd-describe-text",
            "conf": 0.75,
            "crit": 2,
            "desc": "JavaScript describe() test call",
            "from": [
              {
                "file": 4
              }
            ]
          },
          {
            "id": "metadata/package/testing/presence/harness::test-or-declaration-file",
            "conf": 0.85,
            "crit": 1,
            "desc": "File is a test or type-declaration source file",
            "from": [
              {
                "file": 1805
              }
            ],
            "uses": [
              10,
              24
            ]
          },
          {
            "id": "metadata/package/manifest/repository::has-repository-url",
            "conf": 0.85,
            "crit": 2,
            "desc": "package.json declares a repository URL"
          },
          {
            "id": "metadata/package/testing/scripted::js-bdd-suite-text",
            "conf": 0.85,
            "crit": 2,
            "desc": "JavaScript BDD suite text",
            "from": [
              {
                "off": 332,
                "file": 1805,
                "line": 14
              }
            ],
            "uses": [
              11,
              31
            ]
          },
          {
            "id": "metadata/package/testing/presence/fixture::test-filename-pattern",
            "conf": 0.6,
            "crit": 2,
            "desc": "Common test filename pattern",
            "from": [
              {
                "file": 4
              }
            ]
          },
          {
            "id": "metadata/package/testing/presence/fixture::mocha-describe-call",
            "conf": 0.6,
            "crit": 2,
            "desc": "Mocha describe() call",
            "from": [
              {
                "file": 4
              }
            ]
          },
          {
            "id": "metadata/package/testing/harness/runtime::test-basename-suffix",
            "conf": 1.0,
            "crit": 2,
            "desc": "Node.js test filename suffix",
            "from": [
              {
                "file": 4
              }
            ]
          },
          {
            "id": "metadata/file/extension/identity::javascript-source-extension",
            "conf": 1.0,
            "crit": 1,
            "desc": "JavaScript source filename extension",
            "from": [
              {
                "file": 2
              }
            ]
          },
          {
            "id": "metadata/package/testing/presence/harness::test-directory",
            "conf": 1.0,
            "crit": 2,
            "desc": "File identified as a test by path or name",
            "from": [
              {
                "file": 1805
              }
            ],
            "uses": [
              10
            ]
          },
          {
            "id": "metadata/file/profile/language::lang-english--atom-1",
            "conf": 0.8,
            "crit": 2,
            "desc": "English function-word token \"the\"",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "metadata/package/versioning::npm-has-version",
            "conf": 1.0,
            "crit": 2,
            "desc": "package.json defines a package version"
          },
          {
            "id": "metadata/package/testing/scripted::js-bdd-suite",
            "conf": 0.85,
            "crit": 2,
            "desc": "JavaScript BDD test suite",
            "from": [
              {
                "off": 332,
                "file": 1805,
                "line": 14
              }
            ],
            "uses": [
              8,
              31
            ]
          },
          {
            "id": "metadata/file/profile/language::lang-english--atom-7",
            "conf": 0.8,
            "crit": 2,
            "desc": "English function-word token \"this\"",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "metadata/package/testing/presence/harness::spec-test-filename",
            "conf": 0.85,
            "crit": 1,
            "desc": "Spec or test filename markers",
            "from": [
              {
                "file": 4
              }
            ]
          },
          {
            "id": "metadata/package/manifest/repository::has-repository-field",
            "conf": 0.9,
            "crit": 2,
            "desc": "package.json declares repository metadata"
          },
          {
            "id": "metadata/package/license::mit-license-text",
            "conf": 0.8,
            "crit": 2,
            "desc": "MIT License named in text",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "metadata/package/dependencies/manifest::npm-no-dependencies-field",
            "conf": 0.9,
            "crit": 2,
            "desc": "npm manifest omits dependencies field"
          },
          {
            "id": "metadata/package/files/package-json::files-array-present",
            "conf": 0.92,
            "crit": 3,
            "desc": "Package.json declares a files allowlist"
          },
          {
            "id": "metadata/package/files/included::npm-publish-root-manifest",
            "conf": 0.95,
            "crit": 2,
            "desc": "Manifest sits at npm publish root",
            "from": [
              {
                "file": 5
              }
            ]
          },
          {
            "id": "metadata/package/testing/harness/runtime::test-basename-pattern",
            "conf": 1.0,
            "crit": 2,
            "desc": "Node.js test filename pattern",
            "from": [
              {
                "off": 0,
                "file": 1805,
                "line": 1
              }
            ],
            "uses": [
              17
            ]
          },
          {
            "id": "metadata/package/testing/presence/scripted::it-call",
            "conf": 0.6,
            "crit": 3,
            "desc": "it() function call",
            "from": [
              {
                "file": 4
              }
            ]
          },
          {
            "id": "metadata/lang/javascript-features::use-strict-directive",
            "conf": 0.6,
            "crit": 1,
            "desc": "Contains a JavaScript use strict directive",
            "from": [
              {
                "file": 2
              }
            ]
          },
          {
            "id": "metadata/package/manifest/repository::repo-url-git-host",
            "conf": 0.9,
            "crit": 3,
            "desc": "Repository identifies major Git host"
          },
          {
            "id": "metadata/file/profile/language::lang-english--atom-5",
            "conf": 0.8,
            "crit": 2,
            "desc": "English function-word token \"for\"",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "metadata/package/manifest/entrypoint::pkg-module-field",
            "conf": 0.6,
            "crit": 2,
            "desc": "\"module\": field in package.json",
            "from": [
              {
                "file": 5
              }
            ]
          },
          {
            "id": "metadata/package/documentation::readme-heading-name-differs",
            "conf": 0.93,
            "crit": 2,
            "desc": "README heading differs from package name"
          },
          {
            "id": "metadata/package/manifest/repository::npm-name-repo-mismatch",
            "conf": 0.8,
            "crit": 3,
            "desc": "Package name disagrees with its repository",
            "spans": [
              [
                0,
                37
              ]
            ]
          },
          {
            "id": "objectives/supply-chain/impersonation/readme-clone::readme-npm-links-name-only-foreign-packages",
            "atk": "T1036",
            "conf": 0.9,
            "crit": 3,
            "desc": "README npm links name only different packages"
          },
          {
            "id": "objectives/supply-chain/impersonation/clone-and-rename::readme-clone-foreign-npm-links",
            "atk": "T1195.002",
            "conf": 0.9,
            "crit": 4,
            "desc": "Repository mismatch with foreign-only README links",
            "uses": [
              36,
              37,
              38
            ],
            "spans": [
              [
                0,
                37
              ]
            ]
          }
        ]
      }
    ]
  }
}