{
  "ml": {
    "v": "7",
    "eng": "2.8.0",
    "lvl": -1,
    "conf": 0,
    "mods": [
      {
        "cls": 0,
        "raw": 0.11791399,
        "rte": "az",
        "prob": 0.11791399
      },
      {
        "cls": 0,
        "raw": 0.00028073788,
        "rte": "az/nupkg",
        "prob": 0.00028073788
      }
    ],
    "prob": 0.11791399,
    "files": [
      {
        "id": 0,
        "lvl": -1,
        "conf": 0,
        "prob": 0.11791399121284485,
        "type": "nupkg"
      },
      {
        "id": 2,
        "lvl": -1,
        "conf": 0,
        "prob": 0.00001150369644165039,
        "type": "xml"
      },
      {
        "id": 3,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000021288791685947217,
        "type": "pe"
      },
      {
        "id": 6,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000009079773917619605,
        "type": "registry"
      }
    ],
    "version": "v18.18",
    "analyzed_at": "2026-08-28T02:57:01Z"
  },
  "path": "Curiosity.Components.26.8.3835.nupkg",
  "raw": {
    "files": [
      {
        "id": 0,
        "ctx": [
          {
            "b": "p!H([6Awak2ML6g3sb*\u003eOr$J400064000xb003wDwO=Ave]\u003eJtBcI*yyqIUwHr*4(a(}A9T]g?DrI(}6q$g63}N3=FE-Jr])%UH.PP3Zg0NFWX[uaVJgM-4F!xP%eo/KCbMfU^$8HvCxlEr#6k3G4nL2jr0QXmlYx0Q7of?hhW7]!gb-kD@9s2oI47-t5FvpiAw4(\u003cQ",
            "ln": 0
          }
        ],
        "mol": "H(Cm)Md₂(BiPa)",
        "sha": "3a680833455e46dc012878359c0d8050bfe5f887698a162b5dfd49097ce5cd91",
        "path": "/data/samples/pending/foraged/dotnet/nuget.org/_/Curiosity.Components/Curiosity.Components.26.8.3835.nupkg",
        "risk": 4,
        "size": 19276,
        "type": "nupkg",
        "facts": {
          "metrics": {
            "file": {
              "size": 19276,
              "entropy": 7.77
            },
            "binary": {
              "peak_region_bytes": 15360,
              "peak_region_entropy": 7.79
            },
            "archive": {
              "file_count": 6,
              "member_count": 6,
              "script_count": 0,
              "zip_bomb_ratio": 3.17,
              "compressed_size": 18408,
              "directory_count": 0,
              "executable_count": 1,
              "extra_field_size": 0,
              "noise_file_count": 0,
              "compression.ratio": 0.65,
              "hidden_file_count": 2,
              "uncompressed_size": 28511,
              "crc_collision_count": 0,
              "entry_comment_count": 0,
              "max_filename_length": 81,
              "rtlo_filename_count": 0,
              "format.regular_count": 6,
              "nested_archive_count": 0,
              "path_traversal_count": 0,
              "symlink_escape_count": 0,
              "security.setgid_count": 0,
              "security.setuid_count": 0,
              "security.sticky_count": 0,
              "double_extension_count": 0,
              "duplicate_member_count": 0,
              "security.symlink_count": 0,
              "unicode_filename_count": 0,
              "homoglyph_filename_count": 0,
              "security.encrypted_count": 0,
              "timing.mtime_unique_count": 2,
              "timing.mtime_unique_ratio": 0.33,
              "misplaced_executable_count": 1,
              "timing.mtime_outlier_count": 1,
              "timing.mtime_dominant_count": 5,
              "timing.mtime_spread_seconds": 25144,
              "timing.sentinel_mtime_count": 0,
              "security.world_writable_count": 0,
              "timing.mtime_dominant_fraction": 0.83,
              "compression.method_counts.stored": 1,
              "compression.method_counts.deflate": 5
            }
          }
        },
        "ident": {
          "name": {
            "value": "Curiosity.Components",
            "source": "nupkg.title",
            "verified": false
          },
          "urls": [
            {
              "url": "https://github.com/curiosity-ai",
              "kind": "homepage",
              "source": "nupkg.project_url"
            }
          ],
          "trust": "unsigned",
          "authors": [
            {
              "name": "Curiosity GmbH",
              "role": "author",
              "source": "nupkg.authors"
            }
          ],
          "version": {
            "value": "26.8.3835",
            "source": "nupkg.version",
            "verified": false
          },
          "identifier": {
            "value": "Curiosity.Components",
            "source": "nupkg.id",
            "verified": false
          }
        },
        "traits": [
          {
            "id": "micro-behaviors/communications/http/client/managed::httpclient",
            "conf": 0.82,
            "crit": 3,
            "desc": "System.Net.Http.HttpClient type reference",
            "from": [
              {
                "file": 3
              }
            ]
          },
          {
            "id": "metadata/binary/framework::dotnet-metadata",
            "conf": 1.0,
            "crit": 2,
            "desc": ".NET metadata root signature (BSJB)",
            "from": [
              {
                "file": 3
              }
            ]
          },
          {
            "id": "metadata/binary/metrics/entropy::code-entropy-at-most-7-5",
            "conf": 0.7,
            "crit": 1,
            "desc": "Code entropy is 7.5 or lower",
            "from": [
              {
                "file": 3
              }
            ]
          },
          {
            "id": "metadata/binary/anomaly/provenance::pe-far-future-timestamp",
            "conf": 0.95,
            "crit": 2,
            "desc": "PE COFF timestamp encodes a future date"
          },
          {
            "id": "metadata/binary/framework::clr-runtime-header",
            "conf": 1.0,
            "crit": 2,
            "desc": "PE CLR header (COM descriptor)"
          },
          {
            "id": "metadata/build/reproducible::pe-reproducible-build",
            "conf": 1.0,
            "crit": 2,
            "desc": "Built with /Brepro (deterministic)"
          },
          {
            "id": "metadata/binary/layout::pe-no-signature-record",
            "conf": 0.95,
            "crit": 3,
            "desc": "PE has no signature record"
          },
          {
            "id": "micro-behaviors/communications/http/client/managed::postasync",
            "atk": "T1071.001",
            "conf": 0.88,
            "crit": 3,
            "desc": ".NET asynchronous HTTP POST method",
            "from": [
              {
                "file": 3
              }
            ]
          },
          {
            "id": "metadata/package/files/nuget::nupkg-managed-library-member",
            "conf": 0.98,
            "crit": 3,
            "desc": "NuGet target-framework managed library member"
          },
          {
            "id": "metadata/package/files/nuget::nupkg-single-executable-member",
            "conf": 0.98,
            "crit": 3,
            "desc": "NuGet package has one executable member",
            "spans": [
              [
                0,
                31
              ]
            ]
          }
        ]
      },
      {
        "depth": 1,
        "facts": {
          "metrics": {
            "file": {
              "size": 1114,
              "entropy": 5.19
            },
            "binary": {
              "peak_region_bytes": 1024,
              "peak_region_entropy": 5.2
            }
          }
        },
        "id": 2,
        "path": "/data/samples/pending/foraged/dotnet/nuget.org/_/Curiosity.Components/Curiosity.Components.26.8.3835.nupkg!!Curiosity.Components.nuspec",
        "pid": 0,
        "risk": 1,
        "sha": "998d80765ede9768d2e64d9475f6e712abda657d778455da0042ae2958302dd7",
        "size": 1114,
        "traits": [
          {
            "id": "metadata/build/manifest::nuspec-file",
            "conf": 0.98,
            "crit": 2,
            "desc": "NuGet nuspec manifest file",
            "spans": [
              [
                0,
                0
              ]
            ]
          },
          {
            "id": "metadata/package/files/nuget::nuspec-repository",
            "conf": 0.9,
            "crit": 2,
            "desc": "NuGet package declares repository",
            "spans": [
              [
                43,
                0
              ]
            ]
          },
          {
            "id": "metadata/package/files/nuget::nuspec-dependencies",
            "conf": 0.9,
            "crit": 2,
            "desc": "NuGet package declares dependencies",
            "spans": [
              [
                43,
                0
              ]
            ]
          }
        ],
        "type": "xml"
      },
      {
        "ctx": [
          {
            "b": "o\u003ciRU0@@r31onA4%nJ60XbVHe00000kMy=:0000000000000000000000000000000000000000Fb/MH4J\u0026m(0ji6Sa?dLD+]{51x(+zoA=kPhvqNb%vqY$3BrC47aAzQxazCZol@c-7zeS@@e!5l%bME/A00000p^\u003eu:oAtg{C}Ltm0000000000?#B@A3JR{Y04[lK00ic2000009.VLl03zmw000",
            "ln": 0
          },
          {
            "b": "0000000000000000000000000000000000000000089v)00000nb@R\u00260SSx7\u002664bv:p54G0rr9100000044WC\u00261#B]0000000000000000000000000000000000000",
            "ln": 480
          },
          {
            "b": "ay/IiA=Tn:DKp(rarUfoz/N(Yw{503BzkVhasHYcB7Fu(y+cYJz!\u0026{4diJ%AarR^HarR^HBzbxfe*LdGx([5$y?Xibc[dj+arR^HarR^HBzbxfe)\u0026d2y*?PijS(EkfFCM}arR^HarR^HBzbxfe)\u00266@B7Fu(y-\u003e\u003e-vQTs?rDq[q3lQDlarR^HaARph",
            "ln": 2381
          },
          {
            "b": "arUYoBAIRwaxiw\u0026zGx=nB7Fl4w].*bp\u0026ZF\u003ex(^\u0026lc$dgxzET!qdiH=qaBsCrarR^HarR^HarR!ywPP58y?WD#BrAZ?zE[2mq*ACawO\u003c4{wPPK}BAzEOnow@)lU{EFzGEoQi%)8MarR^HarR^HarUfgx\u003eqg7e\u003c%n.vrDydqE%\u0026\u003cwPI@:wNPaXA=S\u003c0wmN8jl3mo.z/PMrvruj4zxZROBzbxfe)\u0026ZsyH}xji%)8MarR^HarR^HarUGiBrCQnADL\u0026lBx9u}auZ?}rb#z+B8R",
            "ln": 2627
          },
          {
            "b": "efE(pB97#ge(b}\u003ewN/*hau{#^wP]m}D2[7sz7XN{Bs{aaBz@\u003chBAh8kxg3PPBy/uie*K}Gz/NMXpgXS\u003ez/fSmw]]T$B8L}Gn][]*lVl\u003c=wPz(Bq!o#-vqGU7wLV=IwN/*gv@DmbwO#PsefDcBAbYScv{%E[z/djyB8L}udiHU]zGP=idlv\u003eVarR^HarR^HarR!JxLzo]asItLB.90ADKp(rarR^HarR^HarR^HarUGiBrCQnB8V5nB7DESasHVxvqf*arb#z+B8V5swIe7yp\u0026ZF\u003ex(^\u0026lv@b\u003c\u003czGEHcz/Z1^B9RUkc#@)sB.bSorDq!8aAITBx(mMJz/fVdzGErRdlv\u003eVarR^HarR^HarR^HarR!vw/@HxwPI*ezGxwwq/(C\u0026B-P]*wmV(DjV%]^D2[7sz7XN{Bs{aaBz$f2vruTklVlHDe\u003cS#SwPh:5wgnTF",
            "ln": 3013
          },
          {
            "b": "arR^HaAz4mAbPSnwIcz?B9hImq/#OWwPI]\u003eByxolB3\u003c\u003eRwHF#?3lQDlarR^HarR^HarR^HarR^HaAz4nB-IvxpgXS\u003ez/fSmw]]T$B8L}Gn][]*lVl\u003c=wPz(Bl$HBJA+O@#x)Kt^vRPE:BsqfvB8V5nB7D%\u003ez/fVdzGEHewNPanB5Ng3x(mMidj=Pvdlv\u003eVarR^HarR^",
            "ln": 4631
          },
          {
            "b": "A+O@#x)Kt^vRPE:BspTqzGGDcBsw:+vq{g4x\u003e7N[x(v(xyiarha$kM\u003cB.\u003e\u003eQw]zYrj3a)ry?mYhA+frhz/fScjZ\u0026Lyx(\u003eE%A:-\u003cbAbP/ee{82dA=k/eB7D+fy?WD#Bs{ydB96Y?D2vauA+flkwPI@[A+N7CBAh8kxg3PPBy/uidjEt)w*?XhB8V3",
            "ln": 6642
          },
          {
            "b": "j7SkHwGV28BAIRwaAz4mAbPSnwIcz?B9hImq/#OWwPI]\u003eByxolB3\u003c\u003eRwHF#UpgXS\u003ez/fSmw]]T$B8L}Gn][]*lVl\u003c=wPz(Bl$HBJA+O@#x)Kt^vRPE:BsqfvB8V5nB7D%\u003ez/fVdzGEHewNPanB5Ng3x(mMidj!BEEsiK)djGW[EjoN[jkx]q09Y)tarV1u3lQDlar\u003cn",
            "ln": 7709
          },
          {
            "b": "hx\u003cWY3lQDnze0)4zfoX.z/6Dcy?mS/wPz\u003caz/c:War\u0026N0e\u0026UEti50lm4gmH-lq{Gy0rrc2000001onA400000000f5wb(Pf5cS4lbyPQ)BoITA+ME[Cbu5Y8x(mN800000kNEF\u003eyYBCnbumUxTo[}c5c8Xgbs+:9l\u0026Wh!YB1Ss3\u003c3zebsli+vGlxd",
            "ln": 8368
          },
          {
            "b": "A+frhz/fScj#DXOgYPT9vqG:CB9RUkk4F2cgYPT4B6\u0026oi06A$]wozZ1j]!KZzf6i9A+]D007gghy^Ab/zESVyz/Z1^B9RUk06$da06$*qx()c*lVl*Xy?mZ1wb{mNBydQXlVl*Xy?mZ1wb{mNByd%*vruTklVlHD07.iNA8Q\u003c!BAIT(z!9zVmq^f?A+ef(",
            "ln": 9935
          },
          {
            "b": "x\u003c#jbwDkRtvpRVBq/)4]zF5@ZwPRoUvrlh:lV)A-z/YSmC}IE5ze:AhwO#Qhe[w^m0afhzB7Fu(yYEyVB97#g0af?^yH}w-q!p5tCW\u003er7BzkVh090#EzGx=nB7D$0wP@lmzGx-dBs{gbz/bLOA:-\u003cbAbP/ee\u003c:X{y?bekB8L{@rb#z+B8V5swIc\u003e(B8Mhwv}xZlyiarh08[e:By/qwpgXJ1now@)07gBdASwi=Byex:B.LV5wPv=IvrliICvticwPv=vwPQjZvqf*{ASv.4Bz(g1q*ACawO\u003c4/x\u003c\u003eT(z/Z2mv@?SGD2[7sz7X.ezGGPfwIct*ze:i9wPyZXA=#ebwPE\u0026lj#uRNBzbxf07g)Hx(w6bBA]Gaz/6DizE)ZcB1RrvByu!pA@XNIA+PDkx([RMlVl*Xz/fc7BAo6Kx(i",
            "ln": 10335
          },
          {
            "b": "07.iNA7BLGwmY!507.iNA8Hm!B.bSonm=juwPz?(xjVf(l$G$sB.(d$wPq\u003c7B96@:vpS}\u0026A@XNIA+PDkx([RMlVl*Xz/fc7BAmBJzE^Z8x(n3l07gWxv{%DVq!o#-vqGU7wLV=IwN//Zl$HBJA+O@#x)Kt^vRPE:Bo2l+B97#ge(2#107QQxqE%](y\u0026/UQwPQ*YB9hqv090#EzGx=nB7D%{BAzE?y?WD#Bo2@+BydyNzGGDcBo2lYA+PA7lVl\u003c:wO#O\u0026now@)lVl\u003c:wO#O\u0026v@DmbwO#O\u0026wO#3$z!T9h090#MzbUK+A=.pNB8L}-z/f-fA=.pQz*2X!wQ5p%l$HgyC(RhZwO+!207g)Hx(w6bBA)\u0026^000%70cFo-0b8vJ0ce6N0d1SN0cwiP0b?\u003cP001J50a=dF0aV7G0b?\u003cK0b.^U0cnb[0cwiV0bzNC0b.=\u00260ce6Z0b.=\u0026001fJ0b}{S0bITH0aM1q0cwiP0b?\u003cP051s!0cncU0b.=p00zRe",
            "ln": 10747
          },
          {
            "b": "00000000000000000000000000000000000000000000000000000000000006*I:3\u0026*ncauPS700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
            "ln": 12240
          }
        ],
        "depth": 1,
        "facts": {
          "imp": [
            [
              "mscoree",
              "CorDllMain"
            ]
          ],
          "sec": [
            [
              ".text",
              512,
              11776,
              5.54,
              "r-x"
            ],
            [
              ".reloc",
              12288,
              512,
              0.08,
              "r--"
            ]
          ],
          "metrics": {
            "pe": {
              "checksum": 0,
              "headers_size": 512,
              "checksum_valid": 0,
              "clr.is_il_only": 1,
              "checksum_stripped": 1,
              "computed_checksum": 21980,
              "headers_size_ratio": 0.04,
              "prose_section_count": 0,
              "reloc_overhang_bytes": 500,
              "reloc_overhang_ratio": 0.98,
              "clr.is_32bit_required": 0,
              "bss_like_section_count": 0,
              "clr.is_32bit_preferred": 0,
              "clr.strong_name_signed": 0,
              "section_overflow_count": 0,
              "clr.is_native_entrypoint": 0,
              "misaligned_section_count": 0,
              "clr.managed_resource_count": 5,
              "base_relocation_block_count": 1,
              "base_relocation_entry_count": 1,
              "clr.managed_resource_max_size": 2798,
              "declared_data_directory_count": 5,
              "executable_prose_section_count": 0,
              "clr.managed_resource_max_entropy": 5.1,
              "directory_section_mismatch_count": 0
            },
            "file": {
              "size": 12800,
              "entropy": 5.35
            },
            "binary": {
              "is_pie": 1,
              "code_entropy": 5.54,
              "string_count": 121,
              "entropy_variance": 7.46,
              "avg_string_length": 48.91,
              "max_string_length": 1986,
              "peak_region_bytes": 8192,
              "code_to_data_ratio": 1,
              "peak_region_entropy": 5.14,
              "string_length_stddev": 199.42,
              "largest_section_ratio": 0.92,
              "sentence_string_count": 18,
              "sentence_string_ratio": 0.15,
              "high_entropy_string_count": 0
            },
            "imports": {
              "count": 1
            },
            "sections": {
              "count": 2,
              "code_size": 11776,
              "entropy_max": 5.54,
              "entropy_mean": 2.81,
              "name_entropy": 2.91,
              "writable_count": 0,
              "executable_count": 1,
              "nonstandard_count": 0,
              "executable_writable_count": 0
            },
            "dependencies": {
              "count": 1
            }
          }
        },
        "id": 3,
        "mol": "H(Cm)Md(Bi)",
        "path": "/data/samples/pending/foraged/dotnet/nuget.org/_/Curiosity.Components/Curiosity.Components.26.8.3835.nupkg!!lib/netstandard2.0/Curiosity.Components.dll",
        "pid": 0,
        "risk": 3,
        "sha": "69df5bcd048cce32f3f083ac2d9ccf115b0b325a924617b31d946ed23bbdca63",
        "size": 12800,
        "traits": [
          {
            "id": "metadata/binary/metrics/entropy::code-entropy-at-most-7-5",
            "conf": 0.7,
            "crit": 1,
            "desc": "Code entropy is 7.5 or lower",
            "spans": [
              [
                0,
                0
              ]
            ]
          },
          {
            "id": "metadata/binary/framework::clr-runtime-header",
            "conf": 1.0,
            "crit": 2,
            "desc": "PE CLR header (COM descriptor)"
          },
          {
            "id": "metadata/build/reproducible::pe-reproducible-build",
            "conf": 1.0,
            "crit": 2,
            "desc": "Built with /Brepro (deterministic)"
          },
          {
            "id": "metadata/binary/framework::dotnet-metadata",
            "conf": 1.0,
            "crit": 2,
            "desc": ".NET metadata root signature (BSJB)",
            "spans": [
              [
                8416,
                0
              ]
            ]
          },
          {
            "id": "metadata/binary/anomaly/provenance::pe-far-future-timestamp",
            "conf": 0.95,
            "crit": 2,
            "desc": "PE COFF timestamp encodes a future date"
          },
          {
            "id": "micro-behaviors/communications/http/client/managed::httpclient",
            "conf": 0.82,
            "crit": 3,
            "desc": "System.Net.Http.HttpClient type reference",
            "spans": [
              [
                2691,
                26
              ],
              [
                10918,
                10
              ]
            ]
          },
          {
            "id": "micro-behaviors/communications/http/client/managed::postasync",
            "atk": "T1071.001",
            "conf": 0.88,
            "crit": 3,
            "desc": ".NET asynchronous HTTP POST method",
            "spans": [
              [
                3232,
                9
              ]
            ]
          },
          {
            "id": "metadata/binary/layout::pe-no-signature-record",
            "conf": 0.95,
            "crit": 3,
            "desc": "PE has no signature record"
          }
        ],
        "type": "pe"
      },
      {
        "depth": 1,
        "facts": {
          "metrics": {
            "file": {
              "size": 817,
              "entropy": 4.6
            },
            "binary": {
              "peak_region_bytes": 817,
              "peak_region_entropy": 4.6
            },
            "registry": {
              "is_deprecated": 0,
              "downloads_total": 455459
            }
          }
        },
        "id": 6,
        "path": "Curiosity.Components@26.8.3835.registry.json",
        "pid": 0,
        "rel": "registry",
        "role": "sidecar",
        "sha": "6033dfce4f5501433171f828c69cf1d5284fb6dcf63144f52b5de37e9ad2a9a5",
        "size": 817,
        "type": "registry"
      }
    ],
    "rev": "b59b7",
    "v": "8"
  }
}