{
  "ml": {
    "v": "7",
    "eng": "3.0.0-beta.0",
    "lvl": -1,
    "conf": 0,
    "mods": [
      {
        "cls": 0,
        "raw": 0.12457434,
        "rte": "az",
        "prob": 0.12457434
      },
      {
        "cls": 0,
        "raw": 0.51065934,
        "rte": "az/npm",
        "prob": 0.51065934
      }
    ],
    "prob": 0.12457434,
    "files": [
      {
        "id": 0,
        "lvl": -1,
        "conf": 0,
        "prob": 0.12457434087991714,
        "type": "npm"
      },
      {
        "id": 1,
        "lvl": -1,
        "conf": 0,
        "prob": 0.00003121296686003916,
        "type": "package.json"
      },
      {
        "id": 2,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000031570594728691503,
        "type": "registry"
      }
    ],
    "version": "v18.18",
    "analyzed_at": "2026-10-16T23:51:53Z"
  },
  "path": "@filegoblin-models-0.0.0-bootstrap.tgz",
  "raw": {
    "files": [
      {
        "id": 0,
        "mol": "Md(Pa₃)",
        "sha": "3a6466e6a477c0502eb792b751c18f2d5ba93891e80d70548c189b8b663c844c",
        "path": "@filegoblin-models-0.0.0-bootstrap.tgz",
        "refs": [
          {
            "to": "pkg:github/funkyfunc/filegoblin",
            "kind": "repository"
          }
        ],
        "risk": 4,
        "size": 297,
        "type": "npm",
        "facts": {
          "metrics": {
            "file": {
              "size": 297,
              "entropy": 7.19
            },
            "binary": {
              "peak_region_bytes": 297,
              "peak_region_entropy": 7.19
            },
            "consistency": {
              "name_repo_mismatch": 1
            }
          }
        },
        "ident": {
          "name": {
            "value": "@filegoblin/models",
            "source": "npm.name",
            "verified": false
          },
          "urls": [
            {
              "url": "git+https://github.com/funkyfunc/filegoblin.git",
              "kind": "repository",
              "source": "npm.repository.url"
            }
          ],
          "trust": "unsigned",
          "version": {
            "value": "0.0.0-bootstrap",
            "source": "npm.version",
            "verified": false
          },
          "identifier": {
            "value": "@filegoblin/models",
            "source": "npm.name",
            "verified": false
          },
          "description": {
            "value": "Placeholder that reserves the name for filegoblin's release workflow. Install filegoblin instead.",
            "source": "npm.description",
            "verified": false
          }
        },
        "traits": [
          {
            "id": "metadata/package/files/included::package-json-basename",
            "conf": 0.95,
            "crit": 3,
            "desc": "Filename is package.json",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "metadata/package/freeform::npm-release-placeholder-version",
            "conf": 0.95,
            "crit": 3,
            "desc": "npm manifest version is a release placeholder"
          },
          {
            "id": "metadata/package/repository::npm-name-repo-mismatch",
            "conf": 0.8,
            "crit": 3,
            "desc": "Package and repository names differ",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "metadata/package/repository::repo-url-git-host",
            "conf": 0.9,
            "crit": 3,
            "desc": "Repository identifies major Git host"
          },
          {
            "id": "supply-chain/missing-author",
            "conf": 0.5,
            "crit": 3,
            "desc": "Package has empty or missing author field"
          }
        ]
      },
      {
        "ctx": [
          {
            "b": "DKp(rb5Q?awG\u003ceTb0Y:Oy?ml$vR/:@fkUSrwO=Aied9Hxb6EKrB7]Mgb03?\u003cfFk4ifFc:Lz/*5xA:-]hed9Hxb4Lnav@=p5BzkVhb03?\u003cp\u00266MIwOu0#wmY^7Bzb98aAz4mwPz%9B0bNrwGU(0zdK\u00264z/M$jx(4u[z^)J%zyoGFA+f5#vrl05Cw?Iqw]8yfe*9-6B97\u0026by-)t7y?ml$vR/:@azC.mBy!(\u003ee*q?NarR\u003eAx\u003e7Z(B7DKRar\u003cJKr3A\u003e2arR\u003eGwPhNex([olC{ko(DMTIOD2NssiV]RVx(\u003eKIar\u003e@Gy:7[.b4\u003eRid}\u003c3DAc15[fk20vxMW=pv@Diqw{50bD1Ihpv\u003eRCdy?ml$vR/:@e[X)ua%qpvEf]",
            "ln": 0,
            "col": 1,
            "line": 1
          }
        ],
        "depth": 1,
        "facts": {
          "metrics": {
            "file": {
              "size": 298,
              "entropy": 4.72
            },
            "binary": {
              "peak_region_bytes": 298,
              "peak_region_entropy": 4.72
            },
            "consistency": {
              "name_repo_mismatch": 1
            }
          }
        },
        "id": 1,
        "ident": {
          "name": {
            "value": "@filegoblin/models",
            "source": "npm.name",
            "verified": false
          },
          "urls": [
            {
              "url": "git+https://github.com/funkyfunc/filegoblin.git",
              "kind": "repository",
              "source": "npm.repository.url"
            }
          ],
          "trust": "unsigned",
          "version": {
            "value": "0.0.0-bootstrap",
            "source": "npm.version",
            "verified": false
          },
          "identifier": {
            "value": "@filegoblin/models",
            "source": "npm.name",
            "verified": false
          },
          "description": {
            "value": "Placeholder that reserves the name for filegoblin's release workflow. Install filegoblin instead.",
            "source": "npm.description",
            "verified": false
          }
        },
        "mol": "Md(Pa₃)",
        "path": "@filegoblin-models-0.0.0-bootstrap.tgz!!package/package.json",
        "pid": 0,
        "refs": [
          {
            "to": "pkg:github/funkyfunc/filegoblin",
            "off": 245,
            "kind": "repository"
          }
        ],
        "risk": 4,
        "sha": "a810bbe4e97d6c3ec9e428554a4a2cf5df2674fb9b149a5043428ea08d48ac70",
        "size": 298,
        "supp": [
          {
            "by": [
              {
                "id": "metadata/package/runtime::vscode-grammars-contribution-absent-evidence"
              },
              {
                "id": "metadata/package/runtime::vscode-languages-contribution-absent-evidence"
              },
              {
                "id": "metadata/package/runtime::vscode-localizations-contribution-absent-evidence"
              }
            ],
            "id": "metadata/package/dependencies/manifest/presence::npm-no-deps-at-all",
            "crit": "notable",
            "kind": "unless"
          },
          {
            "by": [
              {
                "id": "metadata/package/freeform::pkg-skeleton-benign-context",
                "spans": [
                  [
                    237,
                    47
                  ]
                ]
              }
            ],
            "id": "metadata/package/freeform::pkg-skeleton-small",
            "crit": "notable",
            "kind": "unless"
          },
          {
            "by": [
              {
                "id": "value",
                "spans": [
                  [
                    237,
                    47
                  ]
                ]
              }
            ],
            "id": "metadata/package/repository::repository-object-without-url",
            "crit": "notable",
            "kind": "unless"
          },
          {
            "by": [
              {
                "id": "metadata/package/versioning/sentinel::npm-zero-version-benign-context",
                "spans": [
                  [
                    206,
                    70
                  ],
                  [
                    237,
                    47
                  ]
                ]
              }
            ],
            "id": "metadata/package/versioning/sentinel::npm-version-zero-prerelease",
            "crit": "notable",
            "kind": "unless"
          }
        ],
        "traits": [
          {
            "id": "metadata/package/files/included::package-json-basename",
            "conf": 0.95,
            "crit": 3,
            "desc": "Filename is package.json"
          },
          {
            "id": "metadata/package/freeform::npm-release-placeholder-version",
            "conf": 0.95,
            "crit": 3,
            "desc": "npm manifest version is a release placeholder",
            "spans": [
              [
                36,
                15
              ]
            ]
          },
          {
            "id": "metadata/package/repository::npm-name-repo-mismatch",
            "conf": 0.8,
            "crit": 3,
            "desc": "Package and repository names differ"
          },
          {
            "id": "metadata/package/repository::repo-url-git-host",
            "conf": 0.9,
            "crit": 3,
            "desc": "Repository identifies major Git host",
            "spans": [
              [
                237,
                47
              ]
            ]
          },
          {
            "id": "supply-chain/missing-author",
            "conf": 0.5,
            "crit": 3,
            "desc": "Package has empty or missing author field",
            "spans": [
              [
                0,
                21
              ]
            ]
          }
        ],
        "type": "package.json"
      },
      {
        "depth": 1,
        "facts": {
          "metrics": {
            "file": {
              "size": 1001,
              "entropy": 4.83
            },
            "binary": {
              "peak_region_bytes": 1001,
              "peak_region_entropy": 4.83
            },
            "registry": {
              "age_days": 0,
              "file_count": 1,
              "releases_24h": 2,
              "releases_48h": 2,
              "is_deprecated": 1,
              "release_count": 2,
              "security_hold": 0,
              "unpacked_size": 298,
              "published_unix": 1792169689,
              "version_removed": 0,
              "maintainer_count": 1,
              "package_age_days": 0,
              "has_install_script": 0,
              "first_published_unix": 1792169612,
              "previous_published_unix": 1792169612,
              "publisher_in_maintainers": 1,
              "days_since_previous_release": 0
            }
          }
        },
        "id": 2,
        "mol": "O(S)Md(Re)",
        "path": "@filegoblin_models@0.0.0-bootstrap.registry.json",
        "pid": 0,
        "rel": "registry",
        "risk": 2,
        "role": "sidecar",
        "sha": "8b5486f6d6a5aeda5985c8d5c0cf4e07352e6ca1c78191b2afac0d9a925924b5",
        "size": 1001,
        "traits": [
          {
            "id": "metadata/registry::brand-new-package",
            "conf": 1.0,
            "crit": 3,
            "desc": "Package first published within seven days"
          },
          {
            "id": "metadata/registry::deprecated",
            "conf": 1.0,
            "crit": 3,
            "desc": "Registry marks release deprecated or withdrawn"
          },
          {
            "id": "metadata/registry::few-releases",
            "conf": 1.0,
            "crit": 3,
            "desc": "Three or fewer releases"
          },
          {
            "id": "metadata/registry::freshly-published",
            "conf": 1.0,
            "crit": 3,
            "desc": "Release published within seven days"
          },
          {
            "id": "metadata/registry::recent-package",
            "conf": 1.0,
            "crit": 3,
            "desc": "Package under two months old"
          },
          {
            "id": "metadata/registry::single-maintainer",
            "conf": 1.0,
            "crit": 3,
            "desc": "Registry package lists one maintainer"
          },
          {
            "id": "objectives/supply-chain/impersonation/registry/publish::freshly-published-deprecated-install",
            "conf": 0.65,
            "crit": 3,
            "desc": "Fresh release of deprecated package",
            "uses": [
              1,
              3
            ]
          }
        ],
        "type": "registry"
      }
    ],
    "rev": "17dc6",
    "v": "8"
  }
}