{
  "ml": {
    "v": "7",
    "id": 10513,
    "lvl": -1,
    "conf": 0,
    "prob": 0.000020802021026611328,
    "type": "shell",
    "version": "v18.18",
    "analyzed_at": "2026-09-24T13:22:05Z"
  },
  "path": "action-12/action/register.js##url@1688037",
  "raw": {
    "rev": "c1ea9",
    "files": [
      {
        "id": 10513,
        "mol": "O(As)H(Db)",
        "pid": 29,
        "rel": "fetched",
        "sha": "2650d31ed3f686b4cc922a3d047396b9607bee843c1d43ad1a7e6858a1c84047",
        "via": "https://codeload.github.com/chromaui/action/tar.gz/v12",
        "path": "pkg:github/chromaui/action@v12!!action-12/action/register.js!!action-12/action/register.js##url@1688037",
        "risk": 2,
        "size": 4575,
        "type": "shell",
        "depth": 4,
        "facts": {
          "mbr": [
            "t.length"
          ],
          "metrics": {
            "ast": {
              "max_depth": 4,
              "call_count": 0,
              "node_count": 89,
              "member_count": 1,
              "sequence_count": 1,
              "member_depth_max": 2
            },
            "file": {
              "size": 4575,
              "entropy": 5.51
            },
            "text": {
              "lines": 2,
              "top_char": 116,
              "max_ws_run": 1,
              "digit_ratio": 0.02,
              "space_count": 113,
              "char_entropy": 5.51,
              "unique_chars": 91,
              "top_char_null": 0,
              "lines_over_200": 1,
              "lines_over_500": 1,
              "string_density": 2.5,
              "top_char_ratio": 0.07,
              "avg_line_length": 2287,
              "lines_over_1000": 1,
              "max_line_length": 4555,
              "last_line_length": 4555,
              "long_token_count": 8,
              "whitespace_ratio": 0.03,
              "identifier_density": 7,
              "line_length_stddev": 2268,
              "normalized_string_count": 3.54,
              "suspicious_string_ratio": 0.4,
              "suspicious_identifier_ratio": 0.21,
              "normalized_unique_identifiers": 14
            },
            "binary": {
              "peak_region_bytes": 4575,
              "peak_region_entropy": 5.49
            },
            "strings": {
              "bytes": 4471,
              "count": 5,
              "very_long": 2,
              "avg_length": 894.2,
              "max_length": 2271,
              "avg_entropy": 4.03,
              "entropy_stddev": 1.41,
              "high_entropy_count": 2,
              "embedded_code_candidates": 2
            },
            "consistency": {
              "extension_content_mismatch": 1,
              "extension_content_mismatch.script_as_unknown": 1
            },
            "identifiers": {
              "count": 14,
              "unique": 14,
              "avg_length": 4.14,
              "max_length": 9,
              "min_length": 1,
              "avg_entropy": 1.51,
              "reuse_ratio": 1,
              "length_stddev": 2.82,
              "sequential_names": 3,
              "single_char_count": 4,
              "single_char_ratio": 0.29,
              "all_lowercase_ratio": 0.86
            }
          }
        },
        "traits": [
          {
            "id": "metadata/lang/natural::lang-english--atom-5",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"for\"",
            "spans": [
              [
                690,
                0
              ]
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-7",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"this\"",
            "spans": [
              [
                395,
                0
              ]
            ]
          },
          {
            "id": "objectives/anti-static/obfuscation/code-metrics/structure::js-module-basename",
            "atk": "T1027",
            "mbc": "B0032",
            "conf": 1.0,
            "crit": 3,
            "desc": "JavaScript module file extension"
          },
          {
            "id": "objectives/anti-static/obfuscation/code-metrics/structure::sh-sequential-single-letter-identifiers",
            "atk": "T1027",
            "mbc": "B0032",
            "conf": 0.8,
            "crit": 3,
            "desc": "Sequential single-letter identifiers"
          },
          {
            "id": "metadata/package/error-handling::catch-keyword",
            "conf": 0.5,
            "crit": 2,
            "desc": "Contains a catch error handler",
            "spans": [
              [
                2528,
                0
              ]
            ]
          },
          {
            "id": "micro-behaviors/data/manipulation::string-replace-result-assignment",
            "conf": 0.9,
            "crit": 3,
            "desc": "Assigns a string replace result",
            "spans": [
              [
                2900,
                13
              ],
              [
                2922,
                13
              ]
            ]
          },
          {
            "id": "objectives/anti-static/obfuscation/code-metrics/structure::last-line-over-1000",
            "atk": "T1027",
            "mbc": "B0032",
            "conf": 0.9,
            "crit": 3,
            "desc": "Last line is over 1000 chars"
          },
          {
            "id": "objectives/anti-static/obfuscation/code-metrics/structure::single-long-line-outlier",
            "atk": "T1027",
            "mbc": "B0032",
            "conf": 0.9,
            "crit": 3,
            "desc": "Exactly one line exceeds 1000 chars"
          }
        ]
      }
    ]
  }
}