{ "ml": { "v": "7", "eng": "2.12.0-beta.1", "lvl": -1, "conf": 0, "mods": [ { "cls": 0, "raw": 0.030483842, "rte": "az", "prob": 0.030483842 }, { "cls": 0, "raw": 0.015352686, "rte": "az/npm", "prob": 0.015352686 } ], "prob": 0.030483842, "files": [ { "id": 0, "lvl": -1, "conf": 0, "prob": 0.03048384189605713, "type": "npm" }, { "id": 1, "lvl": -1, "conf": 0, "prob": 0.000012636184692382812, "type": "package.json" }, { "id": 4, "lvl": -1, "conf": 0, "prob": 0.000010589758858259302, "type": "javascript" }, { "id": 5, "lvl": -1, "conf": 0, "prob": 0.000014871358871459961, "type": "registry" } ], "version": "v18.18", "analyzed_at": "2026-09-22T16:20:01Z" }, "path": "@akinon-pz-hepsipay-2.0.114.tgz", "raw": { "files": [ { "id": 0, "mol": "H(Cm)Md₂(Pa₂)", "sha": "331e0db4266d2a2fc0801d2b75bd3eabdd5871d303126f4771d2cd622efdc7e3", "path": "@akinon-pz-hepsipay-2.0.114.tgz", "risk": 5, "size": 4482, "type": "npm", "facts": { "metrics": { "file": { "size": 4482, "entropy": 7.94 }, "parse": { "error_count": 1 }, "binary": { "peak_region_bytes": 4482, "peak_region_entropy": 7.81 } } }, "ident": { "name": { "value": "@akinon/pz-hepsipay", "source": "npm.name", "verified": false }, "trust": "unsigned", "version": { "value": "2.0.114", "source": "npm.version", "verified": false }, "identifier": { "value": "@akinon/pz-hepsipay", "source": "npm.name", "verified": false } }, "traits": [ { "id": "metadata/package/empty::npm-empty-description-any", "conf": 0.85, "crit": 1, "desc": "Package description metadata is empty or absent", "from": [ { "off": 4, "file": 1, "line": 2 } ], "uses": [ 24, 28 ] }, { "id": "metadata/package/files/runtime::typescript-source-tree-artifact", "conf": 0.95, "crit": 3, "desc": "Source file under src", "from": [ { "file": 4 } ] }, { "id": "metadata/import/npm/yup::yup", "conf": 0.95, "crit": 2, "desc": "imports yup", "from": [ { "file": 4 } ] }, { "id": "metadata/import/npm/hookform/resolvers/yup::hookform/resolvers/yup", "conf": 0.95, "crit": 2, "desc": "imports @hookform/resolvers/yup", "from": [ { "file": 4 } ] }, { "id": "metadata/import/npm/next/script::next/script", "conf": 0.95, "crit": 2, "desc": "imports next/script", "from": [ { "file": 4 } ] }, { "id": "metadata/package/dependencies/manifest/presence::npm-no-runtime-dependencies", "conf": 0.9, "crit": 2, "desc": "npm manifest declares no runtime dependencies", "from": [ { "file": 1 } ], "uses": [ 26 ] }, { "id": "micro-behaviors/communications/http/url/domain::js-remote-host-url", "conf": 0.75, "crit": 3, "desc": "Contains a hardcoded remote HTTP(S) URL", "from": [ { "file": 4 } ] }, { "id": "metadata/package/files/included::npm-publish-root-manifest", "conf": 0.95, "crit": 2, "desc": "Manifest sits at npm publish root", "from": [ { "file": 1 } ] }, { "id": "metadata/import/npm/react::react", "conf": 0.95, "crit": 2, "desc": "imports react", "from": [ { "file": 4 } ] }, { "id": "metadata/lang/natural::lang-english--atom-2", "conf": 0.8, "crit": 1, "desc": "English function-word token \"and\"", "from": [ { "file": 2 } ] }, { "id": "metadata/file/string/identity::android-data-app-path", "conf": 0.9, "crit": 3, "desc": "Android application data path", "from": [ { "file": 4 } ] }, { "id": "metadata/import/npm/redux/store::redux/store", "conf": 0.95, "crit": 2, "desc": "imports redux/store", "from": [ { "file": 4 } ] }, { "id": "metadata/import/npm/akinon/next/utils::akinon/next/utils", "conf": 0.95, "crit": 2, "desc": "imports @akinon/next/utils", "from": [ { "file": 4 } ] }, { "id": "metadata/lang/natural::lang-english--atom-6", "conf": 0.8, "crit": 1, "desc": "English function-word token \"with\"", "from": [ { "file": 3 } ] }, { "id": "metadata/package/dependencies/manifest/count::npm-many-dev-dependencies", "conf": 0.7, "crit": 2, "desc": "npm manifest has many devDependencies" }, { "id": "metadata/import/npm/react-hook-form::react-hook-form", "conf": 0.95, "crit": 2, "desc": "imports react-hook-form", "from": [ { "file": 4 } ] }, { "id": "metadata/import/npm/akinon/next/redux/hooks::akinon/next/redux/hooks", "conf": 0.95, "crit": 2, "desc": "imports @akinon/next/redux/hooks", "from": [ { "file": 4 } ] }, { "id": "metadata/package/empty::npm-no-keywords", "conf": 0.5, "crit": 2, "desc": "package.json has no keywords" }, { "id": "metadata/lang/natural::lang-english--atom-5", "conf": 0.8, "crit": 1, "desc": "English function-word token \"for\"", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/communications/http/url/domain::js-http-url-literal-in-file-tail", "conf": 0.85, "crit": 3, "desc": "HTTP(S) URL literal in file tail", "from": [ { "file": 4 } ] }, { "id": "supply-chain/missing-author", "conf": 0.5, "crit": 3, "desc": "Package has empty or missing author field" }, { "id": "metadata/package/entrypoint::main-runtime-tree-entrypoint", "conf": 0.85, "crit": 2, "desc": "Package main targets runtime tree" }, { "id": "metadata/lang/natural::lang-english--atom-7", "conf": 0.8, "crit": 1, "desc": "English function-word token \"this\"", "from": [ { "file": 3 } ] }, { "id": "metadata/package/empty::npm-low-quality-metadata", "conf": 0.85, "crit": 1, "desc": "npm package with incomplete metadata", "from": [ { "off": 4, "file": 1, "line": 2 } ], "uses": [ 17, 24, 28 ] }, { "id": "metadata/package/name/convention::npm-has-name", "conf": 1.0, "crit": 2, "desc": "npm manifest declares a package name" }, { "id": "metadata/lang/natural::lang-english--atom-1", "conf": 0.8, "crit": 1, "desc": "English function-word token \"the\"", "from": [ { "file": 3 } ] }, { "id": "metadata/package/dependencies/manifest/presence::npm-no-dependencies-field", "conf": 0.9, "crit": 2, "desc": "npm manifest omits dependencies field" }, { "id": "metadata/import/npm/akinon/next/data/client/checkout::akinon/next/data/client/checkout", "conf": 0.95, "crit": 2, "desc": "imports @akinon/next/data/client/checkout", "from": [ { "file": 4 } ] }, { "id": "metadata/package/versioning/scheme::npm-has-version", "conf": 1.0, "crit": 2, "desc": "package.json defines a package version" }, { "id": "metadata/import/npm/akinon/next/components::akinon/next/components", "conf": 0.95, "crit": 2, "desc": "imports @akinon/next/components", "from": [ { "file": 4 } ] }, { "id": "metadata/package/files/included::package-json-basename", "conf": 0.95, "crit": 3, "desc": "Filename is package.json", "from": [ { "file": 1 } ] } ] }, { "ctx": [ { "b": "DKp(rb5Q?awG\u003ceTb0YNLx(m\u003cbfk#j?xK#d7x(EHaa$K6zar\u003e#uA=U@kzx.a:a#g=8e?]7qa$K6zar\u003eSov}xL0wG\u003ceTb27Tda$K6zar\u003eVhx(kaQar\u003e(Ev\u003eRLlwmZ0rBAqWJed9Hxb5?a8AZTFTwO#3\u0026zEWx(B0rT/DKp(rarR\u003eGwNP7\u003cb03?\u003cunjz(fFk44E0^5yf/Z\u003cue?!F23lQDlar\u003e\u0026qvpKyhwn=reiV]RMf/Q^te?!z}D(#-Iiw90rfD{\u0026DaBL^FarR\u003eswP*EMAaJ]$wO#0(wPG4RaBsCrarR^JkY?o\u003cwPGIxz!9A6iV]RMf/Q^Ae\u0026U4a3lQDlar\u003c6)D2NtoflgSjv@@[Qar\u003ebDi4=)qf/Hpc3lQDlar\u003c6)D2NtoflgSjv@%qkz/3WVar\u003ebDi4=)qhx\u003cWVarR^Hb5?NlBAzkdAW0K!b3)5TfFkd9ed9HxarR\u003eGwNP7\u003cb03?\u003cf/Z\u003cwe\u0026s?73lQDlar\u003e\u0026qvpKyhwn=reiV]R3iw96th6KNUarR^Hb6n9HwPIv4x(FeriV]RMh7*Tpg9N5FaBKPB3i", "ln": 0, "col": 1, "line": 1 } ], "depth": 1, "facts": { "imp": [ [ "^5.2.2", "typescript" ], [ "^18.7.8", "@types/node" ], [ "^18.0.6", "@types/react-dom" ], [ "19.2.5", "react" ], [ "^18.0.17", "@types/react" ], [ "^3.0.3", "prettier" ], [ "19.2.5", "react-dom" ], [ "^18.0.0 || ^19.0.0", "react-dom" ], [ "^18.0.0 || ^19.0.0", "react" ] ], "metrics": { "file": { "size": 437, "entropy": 4.64 }, "binary": { "peak_region_bytes": 437, "peak_region_entropy": 4.64 } } }, "id": 1, "ident": { "name": { "value": "@akinon/pz-hepsipay", "source": "npm.name", "verified": false }, "trust": "unsigned", "version": { "value": "2.0.114", "source": "npm.version", "verified": false }, "identifier": { "value": "@akinon/pz-hepsipay", "source": "npm.name", "verified": false } }, "mol": "Md(Pa)", "path": "@akinon-pz-hepsipay-2.0.114.tgz!!package/package.json", "pid": 0, "refs": [ { "to": "src/index.tsx", "off": 90, "file": 4, "kind": "local" } ], "risk": 3, "sha": "97b5741cb46560180b4de9e6ea4dcbb4daf75febaa88fbc3bb889f39a9ffe2ea", "size": 437, "traits": [ { "id": "supply-chain/missing-author", "conf": 0.5, "crit": 3, "desc": "Package has empty or missing author field", "spans": [ [ 0, 21 ] ] }, { "id": "metadata/package/dependencies/manifest/count::npm-many-dev-dependencies", "conf": 0.7, "crit": 2, "desc": "npm manifest has many devDependencies", "spans": [ [ 210, 0 ] ] }, { "id": "metadata/package/dependencies/manifest/presence::npm-no-dependencies-field", "conf": 0.9, "crit": 2, "desc": "npm manifest omits dependencies field" }, { "id": "metadata/package/entrypoint::main-runtime-tree-entrypoint", "conf": 0.85, "crit": 2, "desc": "Package main targets runtime tree", "spans": [ [ 81, 0 ] ] }, { "id": "metadata/package/files/included::npm-publish-root-manifest", "conf": 0.95, "crit": 2, "desc": "Manifest sits at npm publish root" }, { "id": "metadata/package/files/included::package-json-basename", "conf": 0.95, "crit": 3, "desc": "Filename is package.json" }, { "id": "metadata/package/name/convention::npm-has-name", "conf": 1.0, "crit": 2, "desc": "npm manifest declares a package name", "spans": [ [ 4, 0 ] ] }, { "id": "metadata/package/versioning/scheme::npm-has-version", "conf": 1.0, "crit": 2, "desc": "package.json defines a package version", "spans": [ [ 37, 0 ] ] }, { "id": "metadata/package/empty::npm-no-keywords", "conf": 0.5, "crit": 2, "desc": "package.json has no keywords" }, { "id": "metadata/package/dependencies/manifest/presence::npm-no-runtime-dependencies", "conf": 0.9, "crit": 2, "desc": "npm manifest declares no runtime dependencies", "uses": [ 2 ] }, { "id": "metadata/package/empty::npm-empty-description-any", "conf": 0.85, "crit": 1, "desc": "Package description metadata is empty or absent", "uses": [ 6, 7 ], "spans": [ [ 37, 0 ] ] }, { "id": "metadata/package/empty::npm-low-quality-metadata", "conf": 0.85, "crit": 1, "desc": "npm package with incomplete metadata", "uses": [ 6, 7, 8 ], "spans": [ [ 37, 0 ] ] } ], "type": "package.json" }, { "ctx": [ { "b": "x(d*cA=-BJavpi)Bz(4Faw36YzxKuIw].*basxA.yIvW8zzb)sCYUPGz/6DizE)ZcB0\u003c3Rx(d*cA=-BJay/7@v@1[HD2mbgBxrf)y/j?Px(W={BrC#Ow].*basxA.yIvW8zzb)sCYUPYBzkMjcP.VHze:AlBrBH(A+PGmazbUjz6gizwQ5qIB7ol8Ac9D?3tBu@z/P}xDMWDLwKQiywN/*kaA.:plT:!EvQS+ZefG7RwM9XVBy=OyazbUjz6giDwNP7\u003ccP.VHze:AlBrC]MqG3F}q/(C\u0026wGVyzw].*baszhvwoAbIB98tvwHxLDx(d*cA=-BJaA.:pl2Z^wwO+{/Bz(gxEircxz/3QAkW!CxzF%zCzE[6mflgSmB:bMMz/oAjcP.VHze:AlBrC]MB-Ra)wPR0Zy\u00260W8lVl*Xy?mZ1p*[0Fo)7L^BzkVhaBLwAA=k!qcQq9Qx(m\u003cbfk+uCBt4fkByu?jy?WD#Bt4cqwN/H]B-X#)3tBu@z/P}xdJ\u0026evaBe9GazbUjz6giKB-nY\u00263tBu@z/P}xDMVmfvR]?3nmuyDy?mSraA.:pmSir:aBLwAA=k!qcVS^bv@%qoz/ozyw]zZbcP.VHze:AlBrC]MD3a77wPI^aC4CXpEircxz/3QAkXL7OyI4H9z7/{vB8L(rwPz\u0026BD3a6Ni%]XsAbP=saw#=Vv@@\u00269A=k!qcVS^bv@%7W3jpG+By/G8vpJ\u003c\u003enm=:Yx(EHarb#z+B8kobx(v)gp\u0026ZF[B0b/parUStvpJ\u003eZz!@@}A.gd/B-YU!B98CpzF83rarU9ovqfK^vR/QSvrcm1zF80MB98CpzF83rarU99A+e*0wO#PUA=M8siV@G=A+PA7i%{xy3tBy1wPzx\u003ev}u=IB-RUyzb\u003ce9wO#3\u0026A.{^{Ac0dG3lQEfzC$W!ze18MasFVYjW70iz!S-z3lQE3z/fVqz!}DSvqZuL3lQE5A=M8sB2\u003eBLzH1qJarUopvqPNQA+)%3aAITBx(mMB3vJl*x(n37A+n-\u0026wGTMZx()c\u0026BzkVhB0b/parUopvqPNQA+)=VB98CpzF83rarUopvqPNzx)96UiV@G=A+PA7i%)8MAaa3ewO#P*ByxolB3\u003cwLy*{*.yDrN^x(^9VD2mbgBu%.Vz*b=6iV})Iz!@#[zu", "ln": 0, "col": 1, "line": 1 }, { "b": "x\u003eg^Az/fU^vqPZ{C@^6?BAh8kxfcCyaztF1wK{xvwmY^xayYncy?m3)i%{xy3tBy1wPzx\u003ev}u=NwPhZ8Aaa2*A=k]raBsCraARTjzGxS5BzkVhB2\u003eBwwN/U0wis{PA+PA7efEF{Ac2-jvr\u003e*)vqZd5vruj4zGwS{z/x+Yi%)8Mvp%Q(wO(0@Bvf.Mv@2K(CT1kiqE%oDBs{E5vpKyF", "ln": 1207, "col": 8, "line": 37 }, { "b": "x(4i!y?lWRA=bPexf3wxarR^HasxY\u003eAc2-jvr\u0026#fB0bvsBrC1nvqfK^vR/P#w]zYjBzbxfaA.:pAXnFhy?m3@wGUF@z/oYdayPeaBzblaaAg+mzdNQbaz\u003eXixM4AlcObPEarR!nxl4M{zdNQbmriA!AYLr\u003cra]#!avZ6Ry?aV5B0av(ADL#owN)d}arV7]", "ln": 1705, "col": 8, "line": 56 }, { "b": "x()fWD2mbgBsnO13lQDlaBLwzy\u0026:egDKp(rarR^Hv@Dmaz!@#qwPz*fAWSqawPhZ8Aaa2mq::n3x(+zmz/^agC4293vpB4:cN?a:arR^HarU-pBv*KIA=kD0B8#5kxddu", "ln": 3924, "col": 28, "line": 138 }, { "b": "wnciJ3lQDlarR^HarR^HauRq?z/PXU3jm)#arR^HarR^HarS^Bv@=p5Bp6ckarR^HarR^HarR^HB8\u003e+Nb4#7uAc15[fkkoixjVcpxK#d7x\u003c#j9vpS!0zE)]yxK#d7x(EHafk$ufyHH\u003c!B1.GAfka{oB7]P4C}A\u0026vBy/Jne]true]2CK3lQDlarR^HarR^HarR!qwObH]3lQDlarR^HarR^Hatk[=arR^HarR^HarS^1j{\u0026zParR^HarS9uarR^HarS9QiV]*TarR^HarR^Hjy\u0026eHay/j@B8$8+zdL\u003cOAcT2\u0026g9yKXeI[UnDTy(nvqZd5vruj4zGvBsC4293", "ln": 5453, "col": 17, "line": 181 } ], "depth": 1, "facts": { "imp": [ [ "", "yup.object.shape" ], [ "", "yup.object" ], [ "", "yup.boolean.oneOf" ], [ "", "yup.boolean" ], [ "", "useForm" ], [ "", "yupResolver" ], [ "", "hepsiPayFormSchema" ], [ "", "useState" ], [ "", "useState" ], [ "", "useAppSelector" ], [ "", "useAppSelector" ], [ "", "useSetWalletCompletePageMutation" ], [ "", "useCallback" ], [ "", "setIsPaymentSuccessful" ], [ "", "setWalletCompletePage" ], [ "", "window.HepsipaySdk.init" ], [ "", "useEffect" ], [ "", "initHepsipay" ], [ "", "setIsProcessing" ], [ "", "window.HepsipaySdk.initPayment" ], [ "", "console.error" ], [ "", "setIsProcessing" ], [ "", "customUIRender" ], [ "", "handleSubmit" ], [ "", "React.cloneElement" ], [ "", "@akinon/next/components" ], [ "", "@akinon/next/data/client/checkout" ], [ "", "@akinon/next/redux/hooks" ], [ "", "@akinon/next/utils" ], [ "", "@hookform/resolvers/yup" ], [ "", "next/script" ], [ "", "react" ], [ "", "react-hook-form" ], [ "", "redux/store" ], [ "", "yup" ] ], "mbr": [ "React.cloneElement", "console.error", "context_extras.FrameUrl", "errors.agreement", "state.checkout", "state.checkout.hepsipayAvailability", "state.checkout.preOrder", "state.checkout.preOrder.context_extras", "window.HepsipaySdk", "window.HepsipaySdk.init", "window.HepsipaySdk.initPayment", "yup.boolean", "yup.boolean.oneOf", "yup.object", "yup.object.shape" ], "tgt": [ "React.cloneElement", "console.error", "customUIRender", "handleSubmit", "hepsiPayFormSchema", "initHepsipay", "setIsPaymentSuccessful", "setIsProcessing", "setWalletCompletePage", "useAppSelector", "useCallback", "useEffect", "useForm", "useSetWalletCompletePageMutation", "useState", "window.HepsipaySdk.init", "window.HepsipaySdk.initPayment", "yup.boolean", "yup.boolean.oneOf", "yup.object", "yup.object.shape", "yupResolver" ], "funcs": [ [ "anonymous", 1968 ], [ "anonymous", 2416 ], [ "anonymous", 2535 ], [ "anonymous", 2752 ], [ "anonymous", 2938 ], [ "anonymous", 2976 ], [ "anonymous", 3018 ], [ "anonymous", 3296 ], [ "anonymous", 3603 ], [ "anonymous", 3790 ] ], "metrics": { "ast": { "op.gt": 2, "op.lt": 1, "op.lor": 2, "op.lnot": 2, "max_depth": 18, "call_count": 25, "node_count": 1379, "member_count": 15, "max_array_len": 2, "op_density.gt": 0, "op_density.lt": 0, "op_density.lor": 0, "op_density.lnot": 0, "member_depth_max": 4 }, "file": { "size": 5768, "entropy": 4.79 }, "text": { "lines": 195, "top_char": 101, "max_ws_run": 1, "digit_ratio": 0, "space_count": 1258, "char_entropy": 4.79, "unique_chars": 78, "top_char_null": 0, "string_density": 0.21, "top_char_ratio": 0.07, "avg_line_length": 28.58, "max_line_length": 110, "empty_line_ratio": 0.13, "last_line_length": 2, "whitespace_ratio": 0.25, "identifier_density": 1.05, "line_length_stddev": 22.64, "normalized_string_count": 2.86, "repeated_char_sequences": 36, "normalized_unique_identifiers": 12.88 }, "binds": { "count": 12 }, "binary": { "peak_region_bytes": 4096, "peak_region_entropy": 4.91 }, "source": { "class_count": 4 }, "imports": { "count": 10, "third_party_count": 10, "third_party_ratio": 1 }, "strings": { "bytes": 793, "count": 40, "url_count": 1, "avg_length": 19.83, "max_length": 78, "avg_entropy": 3.09, "entropy_stddev": 0.71 }, "functions": { "count": 4, "nested": 1, "density": 5.13, "anonymous": 10, "avg_params": 0.2, "code_ratio": 0.3, "max_params": 1, "one_liners": 5, "length_stddev": 8.36, "no_params_count": 8, "avg_length_lines": 5.9, "max_length_lines": 29, "min_length_lines": 1, "avg_nesting_depth": 0.4, "max_nesting_depth": 1, "avg_param_name_length": 5 }, "identifiers": { "count": 204, "unique": 98, "avg_length": 11.37, "max_length": 32, "min_length": 2, "avg_entropy": 2.84, "reuse_ratio": 0.48, "length_stddev": 6.51, "high_entropy_count": 24, "high_entropy_ratio": 0.24, "all_lowercase_ratio": 0.33, "underscore_prefix_count": 1 } } }, "id": 4, "mol": "H(Cm)Md₂(Pa)", "path": "@akinon-pz-hepsipay-2.0.114.tgz!!package/src/index.tsx", "pid": 0, "risk": 3, "sha": "996a1f49b9140cc6b82c130da0b8805b1ffb7e74ec9560c73562a64409961bce", "size": 5768, "traits": [ { "id": "metadata/import/npm/akinon/next/components::akinon/next/components", "conf": 0.95, "crit": 2, "desc": "imports @akinon/next/components", "spans": [ [ 29, 0 ] ] }, { "id": "metadata/import/npm/akinon/next/data/client/checkout::akinon/next/data/client/checkout", "conf": 0.95, "crit": 2, "desc": "imports @akinon/next/data/client/checkout", "spans": [ [ 360, 0 ] ] }, { "id": "metadata/import/npm/akinon/next/redux/hooks::akinon/next/redux/hooks", "conf": 0.95, "crit": 2, "desc": "imports @akinon/next/redux/hooks", "spans": [ [ 283, 0 ] ] }, { "id": "metadata/import/npm/akinon/next/utils::akinon/next/utils", "conf": 0.95, "crit": 2, "desc": "imports @akinon/next/utils", "spans": [ [ 97, 0 ] ] }, { "id": "metadata/import/npm/hookform/resolvers/yup::hookform/resolvers/yup", "conf": 0.95, "crit": 2, "desc": "imports @hookform/resolvers/yup", "spans": [ [ 511, 0 ] ] }, { "id": "metadata/import/npm/next/script::next/script", "conf": 0.95, "crit": 2, "desc": "imports next/script", "spans": [ [ 138, 0 ] ] }, { "id": "metadata/import/npm/react::react", "conf": 0.95, "crit": 2, "desc": "imports react", "spans": [ [ 202, 0 ] ] }, { "id": "metadata/import/npm/react-hook-form::react-hook-form", "conf": 0.95, "crit": 2, "desc": "imports react-hook-form", "spans": [ [ 464, 0 ] ] }, { "id": "metadata/import/npm/redux/store::redux/store", "conf": 0.95, "crit": 2, "desc": "imports redux/store", "spans": [ [ 237, 0 ] ] }, { "id": "metadata/import/npm/yup::yup", "conf": 0.95, "crit": 2, "desc": "imports yup", "spans": [ [ 418, 0 ] ] }, { "id": "metadata/file/string/identity::android-data-app-path", "conf": 0.9, "crit": 3, "desc": "Android application data path", "spans": [ [ 373, 6 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-5", "conf": 0.8, "crit": 1, "desc": "English function-word token \"for\"", "spans": [ [ 1753, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-7", "conf": 0.8, "crit": 1, "desc": "English function-word token \"this\"", "spans": [ [ 1757, 0 ] ] }, { "id": "metadata/package/files/runtime::typescript-source-tree-artifact", "conf": 0.95, "crit": 3, "desc": "Source file under src" }, { "id": "micro-behaviors/communications/http/url/domain::js-http-url-literal-in-file-tail", "conf": 0.85, "crit": 3, "desc": "HTTP(S) URL literal in file tail", "spans": [ [ 5517, 76 ] ] }, { "id": "micro-behaviors/communications/http/url/domain::js-remote-host-url", "conf": 0.75, "crit": 3, "desc": "Contains a hardcoded remote HTTP(S) URL", "spans": [ [ 5518, 30 ] ] } ], "type": "javascript" }, { "depth": 1, "facts": { "metrics": { "file": { "size": 784, "entropy": 4.79 }, "binary": { "peak_region_bytes": 784, "peak_region_entropy": 4.79 }, "registry": { "age_days": 0, "file_count": 6, "maintainers": 1, "published_at": 1790025132, "releases_24h": 21, "releases_48h": 30, "is_deprecated": 0, "release_count": 657, "security_hold": 0, "unpacked_size": 13735, "version_removed": 0, "downloads_recent": 17630, "package_age_days": 480, "first_published_at": 1748526271, "has_install_script": 0, "previous_published_at": 1789996725, "publisher_in_maintainers": 1, "days_since_previous_release": 0 } } }, "id": 5, "mol": "Md(Re)", "path": "@akinon_pz-hepsipay@2.0.114.registry.json", "pid": 0, "rel": "registry", "risk": 1, "role": "sidecar", "sha": "67661ed2381c7db92a059bd61eab45f17a05451fa1aac12fd99d9da25924e209", "size": 784, "traits": [ { "id": "metadata/registry::established-package", "conf": 1.0, "crit": 3, "desc": "Package is at least one year old" }, { "id": "metadata/registry::many-releases", "conf": 1.0, "crit": 3, "desc": "Twenty or more releases" }, { "id": "metadata/registry::publish-burst-24h", "conf": 1.0, "crit": 3, "desc": "Three releases published within 24 hours" }, { "id": "metadata/registry::single-maintainer", "conf": 1.0, "crit": 3, "desc": "Registry package lists one maintainer" }, { "id": "metadata/registry::widely-installed", "conf": 1.0, "crit": 3, "desc": "Large registry install base (10k+ downloads)" }, { "id": "metadata/registry::freshly-published", "conf": 1.0, "crit": 3, "desc": "Release published within seven days" } ], "type": "registry" } ], "v": "8" } }