{ "llm": { "conf": 0.002590384, "grade": "benign", "model": "qwen/qwen3.8-27b", "outcome": "benign", "interpretation": "Legitimate Ruby testing gem" }, "ml": { "v": "7", "eng": "2.8.0", "lvl": -1, "conf": 0, "mods": [ { "cls": 0, "raw": 0.0038662453, "rte": "az", "prob": 0.0038662453 }, { "cls": 0, "raw": 0.0011819303, "rte": "az/gem", "prob": 0.0011819303 } ], "prob": 0.0038662453, "files": [ { "id": 0, "lvl": -1, "conf": 0, "prob": 0.0038662452716380358, "type": "gem" }, { "id": 1, "lvl": -1, "conf": 0, "prob": 0.00003910064697265625, "type": "tar.gz" }, { "id": 2, "lvl": -1, "conf": 0, "prob": 0.00003573298454284668, "type": "ruby" }, { "id": 4, "lvl": -1, "conf": 0, "prob": 0.00002298752406204585, "type": "ruby" }, { "id": 11, "lvl": -1, "conf": 0, "prob": 0.00002872943878173828, "type": "registry" }, { "id": 12, "lvl": -1, "conf": 0, "prob": 0.00002872943878173828, "type": "registry" }, { "id": 13, "lvl": -1, "conf": 0, "prob": 0.000030855338991386816, "type": "registry" }, { "id": 14, "lvl": -1, "conf": 0, "prob": 0.00002872943878173828, "type": "registry" } ], "version": "v18.18", "analyzed_at": "2026-09-04T06:04:14Z" }, "path": "minitest-capybara-0.3.0.gem", "raw": { "files": [ { "id": 0, "ctx": [ { "b": "zdN/$wmoN*e[YFg00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fFCgmg=d2?fFCgmfFCfXfFCgmfFCf", "ln": 0 } ], "mol": "H₂(DbPo₂)Md(Pa)", "sha": "37f2891adebb7c00996ae24ede17e81519b0c0f0ae182cc6deb3295fed69d44e", "path": "minitest-capybara-0.3.0.gem", "refs": [ { "to": "pkg:gem/capybara", "off": 0, "kind": "dependency" }, { "to": "pkg:gem/rake", "off": 0, "kind": "dependency" }, { "to": "pkg:gem/minitest", "off": 0, "kind": "dependency" } ], "risk": 4, "size": 7680, "type": "gem", "facts": { "metrics": { "gem": { "dependency_count": 3, "runtime_dependency_count": 3, "development_dependency_count": 0 }, "file": { "size": 7680, "entropy": 5.69 }, "binary": { "peak_region_bytes": 3072, "peak_region_entropy": 7.8 }, "archive": { "file_count": 3, "member_count": 3, "script_count": 0, "directory_count": 0, "executable_count": 0, "hidden_file_count": 0, "uncompressed_size": 4351, "max_filename_length": 17, "rtlo_filename_count": 0, "format.regular_count": 3, "nested_archive_count": 3, "path_traversal_count": 0, "symlink_escape_count": 0, "security.setgid_count": 0, "security.setuid_count": 0, "security.sticky_count": 0, "double_extension_count": 0, "security.symlink_count": 0, "unicode_filename_count": 0, "homoglyph_filename_count": 0, "timing.mtime_unique_count": 1, "misplaced_executable_count": 0, "timing.mtime_spread_seconds": 0, "security.world_writable_count": 0 } } }, "ident": { "name": { "value": "minitest-capybara", "source": "gem.name", "verified": false }, "urls": [ { "url": "", "kind": "homepage", "source": "gem.homepage" } ], "trust": "unsigned", "authors": [ { "name": "Wojciech Mach", "role": "author", "source": "gem.authors" } ], "version": { "value": "0.3.0", "source": "gem.version", "verified": false } }, "traits": [ { "id": "metadata/package/testing/presence/harness::test-directory-path", "conf": 1.0, "crit": 1, "desc": "File is in common test directory" }, { "id": "metadata/package/testing/presence/harness::test-directory", "conf": 1.0, "crit": 2, "desc": "File identified as a test by path or name", "from": [ { "file": 1 }, { "file": 8 } ] }, { "id": "metadata/package/testing/presence/harness::tests-path-filename", "conf": 0.85, "crit": 1, "desc": "File path or name indicates test code" }, { "id": "micro-behaviors/data/source/dynamic/reflect::ruby-alias-method", "atk": "T1059", "conf": 0.7, "crit": 3, "desc": "Ruby rebinds a method with alias_method" }, { "id": "metadata/package/config::gemspec-name-assignment", "conf": 0.9, "crit": 3, "desc": "Ruby gemspec assigns package name" }, { "id": "micro-behaviors/process/create/shell/lang::ruby-subshell-command", "conf": 0.93, "crit": 3, "desc": "Ruby subshell command execution" }, { "id": "micro-behaviors/process/interpreter/eval::ruby-class-eval", "atk": "T1059", "conf": 0.9, "crit": 3, "desc": "Ruby class_eval call" } ] }, { "depth": 1, "facts": { "metrics": { "file": { "size": 3463, "entropy": 7.94 }, "parse": { "error_count": 1 }, "binary": { "peak_region_bytes": 3463, "peak_region_entropy": 7.8 } } }, "id": 1, "mol": "H₂(DbPo₂)Md(Pa)", "path": "minitest-capybara-0.3.0.gem!!data.tar.gz", "pid": 0, "risk": 4, "sha": "2a1575b9b0f18945bd00d0130bc0cdedcfbddf88ea1a2c044c9aaf41d7ae72d9", "size": 3463, "traits": [ { "id": "metadata/package/testing/presence/harness::tests-path-filename", "conf": 0.85, "crit": 1, "desc": "File path or name indicates test code" }, { "id": "micro-behaviors/process/create/shell/lang::ruby-subshell-command", "conf": 0.93, "crit": 3, "desc": "Ruby subshell command execution" }, { "id": "metadata/package/testing/presence/harness::test-directory", "conf": 1.0, "crit": 2, "desc": "File identified as a test by path or name", "from": [ { "file": 8 } ] }, { "id": "micro-behaviors/data/source/dynamic/reflect::ruby-alias-method", "atk": "T1059", "conf": 0.7, "crit": 3, "desc": "Ruby rebinds a method with alias_method" }, { "id": "metadata/package/config::gemspec-name-assignment", "conf": 0.9, "crit": 3, "desc": "Ruby gemspec assigns package name" }, { "id": "metadata/package/testing/presence/harness::test-directory-path", "conf": 1.0, "crit": 1, "desc": "File is in common test directory" }, { "id": "micro-behaviors/process/interpreter/eval::ruby-class-eval", "atk": "T1059", "conf": 0.9, "crit": 3, "desc": "Ruby class_eval call" } ], "type": "tar.gz" }, { "ctx": [ { "b": "A+flkx(W=ccV9Nnx(){cBt4cjAcU]3A:ZRAwPz\u003caz/c{fA+flkx(W=ccV9Nnx(){cBt4YOwN^7{3t\u003cY(B.\u003eRio\u003e!GVBy/JniYYSpAcU]3A:Yp$az(4cB.\u003eRil30", "ln": 0, "col": 1, "line": 1 }, { "b": "vp%c]DMTI3CYmk7By!#9Bz\u0026pozEWH9wmV(dDTQ@cB1R6sA=VsPx(n0hwN/?ga%qpvarR^HwO#2=arR^HvqGT^B6\u0026=}BzbP6auA}LB7GxluT[1(By/uiefD#ZB8$]kByfc3CYTo1arR^HwmYu}A+e\u003c9By!*3wQ5qBdQ^vgB14CsarR^Haz#adwH[@Nvrc14auZ\u0026^A+fh#A+eP^A+xCwvrc14dgdguarR^HvrlH3A=-Bqvrk^[z^NP$CYVd#dQ^vg", "ln": 599, "col": 36, "line": 18 }, { "b": "wPz\u0026Aw)]y\u0026B-I52zdN^fvp%d1dQ^vgB15kW3lQDlarR^Haz2C33lQDlarR!8ryf*}arR^HwO#2=arR^Hv@bN{B6\u0026H4vqEujBZ/RB3jm)#arUSzx)9{bwEn+!arR!qwO967A+fh#A+eP^A+xCwvrc14dgdguarR^Hx\u003ewF@A+xCCw[=pbBs}oGuTVeElT:}VvQTp=iYZhJB8#5lzyDYQD(#\u003crxlbXqx(Xope]bfswm6m!kpw)cAcU]3A:.0\u0026phZ", "ln": 1683, "col": 70, "line": 49 } ], "depth": 2, "facts": { "imp": [ [ "", "require" ], [ "", "require" ], [ "", "map" ], [ "", "grep" ], [ "", "match" ], [ "", "to_s" ], [ "", "raise" ], [ "", "start_with?" ], [ "", "gsub" ], [ "", "prepare_args" ], [ "", "assert" ], [ "", "has_text?" ], [ "", "message" ], [ "", "inspect" ], [ "", "first" ], [ "", "alias_method" ], [ "", "prepare_args" ], [ "", "assert" ], [ "", "has_no_text?" ], [ "", "message" ], [ "", "inspect" ], [ "", "first" ], [ "", "alias_method" ], [ "", "prepare_args" ], [ "", "assert_selector" ], [ "", "assert" ], [ "", "message" ], [ "", "prepare_args" ], [ "", "assert_no_selector" ], [ "", "assert" ], [ "", "message" ], [ "", "each" ], [ "", "start_with?" ], [ "", "gsub" ], [ "", "class_eval" ], [ "", "is_a?" ], [ "", "first" ], [ "", "kind_of?" ], [ "", "first" ], [ "", "start_with?" ], [ "", "gsub" ], [ "", "each" ], [ "", "infect_an_assertion" ], [ "", "assertion_name" ], [ "", "expectation_name" ], [ "", "include" ], [ "", "include" ], [ "", "minitest/capybara/version" ], [ "", "minitest/spec" ] ], "mbr": [ "Assertions.assertion_name", "args.first", "args.first.inspect", "args.first.is_a?", "args.first.kind_of?", "e.message", "method.gsub", "method.start_with?", "node.assert_no_selector", "node.assert_selector", "s.to_s", "s.to_s.match" ], "tgt": [ "alias_method", "assert", "assert_no_selector", "assert_selector", "assertion_name", "class_eval", "each", "expectation_name", "first", "grep", "gsub", "has_no_text?", "has_text?", "include", "infect_an_assertion", "inspect", "is_a?", "kind_of?", "map", "match", "message", "prepare_args", "raise", "require", "start_with?", "to_s" ], "funcs": [ [ "included", 215 ], [ "assertion_name", 366 ], [ "assert_text", 502 ], [ "refute_text", 711 ], [ "assert_selector", 927 ], [ "refute_selector", 1114 ], [ "prepare_args", 1782 ], [ "expectation_name", 1992 ] ], "metrics": { "ast": { "op.lt": 1, "op.lor": 1, "op.shl": 1, "op.sub": 1, "max_depth": 16, "op.concat": 25, "call_count": 47, "node_count": 696, "member_count": 12, "max_array_len": 2, "op_density.lt": 0, "op_density.lor": 0, "op_density.shl": 0, "op_density.sub": 0, "member_depth_max": 3, "op_density.concat": 0.04 }, "file": { "size": 2434, "entropy": 4.79 }, "text": { "lines": 83, "top_char": 101, "max_ws_run": 1, "digit_ratio": 0, "space_count": 421, "char_entropy": 4.79, "unique_chars": 66, "top_char_null": 0, "string_density": 0.2, "top_char_ratio": 0.09, "avg_line_length": 28.33, "max_line_length": 113, "empty_line_ratio": 0.18, "last_line_length": 3, "whitespace_ratio": 0.21, "identifier_density": 1.8, "line_length_stddev": 30.19, "normalized_string_count": 1.87, "repeated_char_sequences": 2, "suspicious_string_ratio": 0.06, "suspicious_identifier_ratio": 0.04, "normalized_unique_identifiers": 7.84 }, "binds": { "count": 3 }, "binary": { "peak_region_bytes": 2434, "peak_region_entropy": 4.85 }, "source": { "class_count": 2, "function_count": 8 }, "imports": { "count": 2, "third_party_count": 2, "third_party_ratio": 1 }, "strings": { "bytes": 613, "count": 17, "avg_length": 36.06, "max_length": 201, "avg_entropy": 3.51, "empty_count": 1, "entropy_stddev": 1.1, "embedded_code_candidates": 1 }, "comments": { "chars": 93, "count": 2, "lines": 2, "to_code_ratio": 0.02 }, "functions": { "count": 10 }, "identifiers": { "count": 149, "unique": 50, "avg_length": 8.02, "max_length": 19, "min_length": 1, "avg_entropy": 2.47, "reuse_ratio": 0.34, "length_stddev": 4.45, "sequential_names": 2, "single_char_count": 2, "single_char_ratio": 0.04, "all_lowercase_ratio": 0.68, "all_uppercase_ratio": 0.06 } } }, "id": 2, "mol": "H₂(DbPo)", "path": "minitest-capybara-0.3.0.gem!!data.tar.gz!!lib/minitest/capybara.rb", "risk": 2, "sha": "3d834b25d0c14906dd90ff378d0b8154af1ac621476dad47410890846efef645", "size": 2434, "traits": [ { "id": "micro-behaviors/data/source/dynamic/reflect::ruby-alias-method", "atk": "T1059", "conf": 0.7, "crit": 3, "desc": "Ruby rebinds a method with alias_method", "spans": [ [ 663, 12 ] ] }, { "id": "micro-behaviors/process/interpreter/eval::ruby-class-eval", "atk": "T1059", "conf": 0.9, "crit": 3, "desc": "Ruby class_eval call", "spans": [ [ 1747, 10 ] ] } ], "type": "ruby" }, { "ctx": [ { "b": "boOM/eG!Rxv@C)(zF80MB-.jEi3o!5eEA::e]U@OxDP=Uy?kkgCYm8ewm6p:Bz96De?O![x\u003c@nqaywFBnLzMWuNVt5wPq\u003cbA+cvqze0)4By/JnfjOBfD17i5vj#!nA=U@kzxYz{m}DJ#i-y0ev}/K?v{%E[z/dgBwP]nczY\u003cBGD\u003cQ#sB1RuszdK?jarR^HarS/\u0026b5I4ix(){cBs?0hAcU]3A:Zd0arU.TC4CYnx(v(iarR^HjS)EkzFsi7B96D7lT:}VvQTp=iYZqgqD3d.p6@9^B1Q)zBzbPkB08OFarS/\u0026toWc!ygy%?v}V#VvpJ%{t).X%B1R3vvqfK2arR^HarS/\u0026toXofyij1", "ln": 0, "col": 1, "line": 1 }, { "b": "3lQEje]#eLzddEgarR^HauZ?[AEg5YAcU]3A:Z8cvru0)wPz\u0026mB9hCvz/P}xw]zYjze0)4By/JnaA.NoBrC1fwft@jwN*b}arU.TwmY*(A+PGmx(v(ijS[!#B9htpvrcS23lQEje](8zD1H#nxjUB?A=kY7v@@?Rar\u003eVpzFsi7B960zvq{H3vrb^23jm)#B1R6sy?mVgarR^HarR^HjS[cBx(\u003eFlB1I0ry?mV}e]$#Fx(\u003e:EtY7-m3lQEje{7VCByeS]y?mVgarR^\u0026ayF?@BrCyveOnZkwPF$CeG/yZwPI@AB8UY2em@E4BAIRnBa2X\u003eu[MIty?W#tb3Y1fdgdguB1R3GwN/\u003e8vpB4:B08OFjS[cBx(\u003eFlB1I0ry?mVgeIe8Ox(kNNu[MIty?W#tb3Y1fdk2ECAc\u0026ZPw{+Z\u003cx(4ukvQTs?zEEx[c$T[JEf}8tB1RGAADL#owNxy+Bzb.rjS)@My?Wu5t)Z]YaAGezwmP4TwPhi#wmYT*C{1qvvq{H3vrb^2efDc=j%hQkfD{\u0026harU.TvpS[QA=(nwx(dA*wb", "ln": 321, "col": 21, "line": 10 } ], "depth": 2, "facts": { "imp": [ [ "", "push" ], [ "", "expand_path" ], [ "", "require" ], [ "", "new" ], [ "", "name" ], [ "", "version" ], [ "", "authors" ], [ "", "email" ], [ "", "homepage" ], [ "", "summary" ], [ "", "description" ], [ "", "summary" ], [ "", "rubyforge_project" ], [ "", "files" ], [ "", "split" ], [ "", "test_files" ], [ "", "split" ], [ "", "executables" ], [ "", "map" ], [ "", "split" ], [ "", "basename" ], [ "", "require_paths" ], [ "", "add_dependency" ], [ "", "add_runtime_dependency" ], [ "", "add_runtime_dependency" ], [ "", "minitest/capybara/version" ] ], "mbr": [ "File.basename", "File.expand_path", "s.add_dependency", "s.add_runtime_dependency", "s.authors", "s.description", "s.email", "s.executables", "s.files", "s.homepage", "s.name", "s.require_paths", "s.rubyforge_project", "s.summary", "s.test_files", "s.version" ], "tgt": [ "add_dependency", "add_runtime_dependency", "authors", "basename", "description", "email", "executables", "expand_path", "files", "homepage", "map", "name", "new", "push", "require", "require_paths", "rubyforge_project", "split", "summary", "test_files", "version" ], "metrics": { "ast": { "max_depth": 10, "op.concat": 24, "call_count": 25, "node_count": 259, "member_count": 16, "max_array_len": 1, "member_depth_max": 2, "op_density.concat": 0.09 }, "file": { "size": 831, "entropy": 4.97 }, "text": { "lines": 25, "top_char": 101, "max_ws_run": 9, "digit_ratio": 0.01, "space_count": 129, "char_entropy": 4.97, "unique_chars": 68, "top_char_null": 0, "string_density": 0.68, "top_char_ratio": 0.07, "avg_line_length": 32.24, "max_line_length": 83, "empty_line_ratio": 0.2, "last_line_length": 3, "whitespace_ratio": 0.19, "identifier_density": 2.08, "line_length_stddev": 23, "normalized_string_count": 3.4, "suspicious_identifier_ratio": 0.07, "normalized_unique_identifiers": 6.46 }, "binds": { "count": 12 }, "binary": { "peak_region_bytes": 831, "peak_region_entropy": 4.97 }, "imports": { "count": 1, "third_party_count": 1, "third_party_ratio": 1 }, "strings": { "bytes": 192, "count": 17, "avg_length": 11.29, "max_length": 56, "path_count": 3, "avg_entropy": 2.37, "email_count": 1, "empty_count": 1, "entropy_stddev": 1.33 }, "comments": { "chars": 24, "count": 1, "lines": 1, "to_code_ratio": 0.04 }, "identifiers": { "count": 52, "unique": 30, "avg_length": 7.83, "max_length": 22, "min_length": 1, "avg_entropy": 2.38, "reuse_ratio": 0.58, "length_stddev": 4.64, "sequential_names": 2, "single_char_count": 2, "single_char_ratio": 0.07, "high_entropy_count": 1, "high_entropy_ratio": 0.03, "all_lowercase_ratio": 0.77, "all_uppercase_ratio": 0.07, "double_underscore_count": 1, "underscore_prefix_count": 1 } } }, "id": 4, "mol": "H(Po)Md(Pa)", "path": "minitest-capybara-0.3.0.gem!!data.tar.gz!!minitest-capybara.gemspec", "risk": 2, "sha": "3f57818e28002d9736168c9400aa70435952b345ac8053ddf8b0a81688eeb1f7", "size": 831, "traits": [ { "id": "metadata/package/config::gemspec-name-assignment", "conf": 0.9, "crit": 3, "desc": "Ruby gemspec assigns package name", "spans": [ [ 108, 47 ] ] }, { "id": "micro-behaviors/process/create/shell/lang::ruby-subshell-command", "conf": 0.93, "crit": 3, "desc": "Ruby subshell command execution", "spans": [ [ 491, 14 ], [ 538, 40 ], [ 611, 23 ] ] } ], "type": "ruby" }, { "ctx": [ { "b": "DM)3hz/ZhBBy/qkiWeiFz6yIPzEEx[b03]Tvq{H3vrb^2efYmGA=U@kzx.a=gCgHre?!F2b5?Wly?W%7wN]dRBrS+2h.WcCf/y)Ch.ldYxjUBXvr(]riYP5LefX[sBy/H", "ln": 0, "col": 1, "line": 1 } ], "depth": 1, "facts": { "metrics": { "file": { "size": 975, "entropy": 4.76 }, "binary": { "peak_region_bytes": 975, "peak_region_entropy": 4.76 }, "registry": { "age_days": 951, "published_at": 1706316547, "is_deprecated": 0, "downloads_total": 356514288, "downloads_recent": 96634390 } } }, "id": 11, "path": "capybara@3.40.0.registry.json", "pid": 0, "rel": "registry", "role": "sidecar", "sha": "d5ff30953539d267ef761aab586bab496d0a8ee59916af5cab02a05861844693", "size": 975, "traits": [ { "id": "metadata/registry::widely-installed", "conf": 1.0, "crit": 1, "desc": "Large registry install base (10k+ downloads)", "spans": [ [ 0, 0 ] ] } ], "type": "registry" }, { "ctx": [ { "b": "DM)3hz/ZhBBy/qkiWeiFz6yIPzEEx[b03]*vqxA#efYmGA=U@kzx.a=f/7Bse\u00261R4b5?Wly?W%7wN]dRBrS+2h-ASJf/g\u003cFhy{4XxjUBXvr(]riX-DCefX[sBy/JnuV]#", "ln": 0, "col": 1, "line": 1 } ], "depth": 1, "facts": { "metrics": { "file": { "size": 1419, "entropy": 4.92 }, "binary": { "peak_region_bytes": 1024, "peak_region_entropy": 4.97 }, "registry": { "age_days": 141, "published_at": 1776314866, "is_deprecated": 0, "downloads_total": 1404214850, "downloads_recent": 55868012 } } }, "id": 12, "path": "rake@13.4.2.registry.json", "pid": 0, "rel": "registry", "role": "sidecar", "sha": "7655c283c0958255d0bc80f9c421084b5aa5e217e9dc29b2b95b23125acc2d0b", "size": 1419, "traits": [ { "id": "metadata/registry::widely-installed", "conf": 1.0, "crit": 1, "desc": "Large registry install base (10k+ downloads)", "spans": [ [ 0, 0 ] ] } ], "type": "registry" }, { "id": 13, "sha": "cf3dd0b83c1bca3188035856767eda102ed208c99b4a10d9bd3a556b701619c1", "path": "minitest@6.0.6.registry.json", "size": 3346, "type": "registry", "depth": 1 }, { "id": 14, "sha": "6845de1f7efe00a94cecf563cd898da84aeaf0f9d142161ff3c0b549f4be7c9e", "path": "minitest-capybara@0.3.0.registry.json", "size": 811, "type": "registry", "depth": 1 } ], "omitted_files": 2, "rev": "479f3", "v": "8" } }