{ "ml": { "v": "7", "id": 12894, "lvl": -1, "conf": 0, "prob": 0.000014056761756364722, "type": "javascript", "version": "v18.18", "analyzed_at": "2026-09-28T12:02:43Z" }, "path": "package/dist/server/cli.js##unicode-escape@4780000", "raw": { "rev": "c1ea9", "files": [ { "id": 13673, "mol": "O(As)H(Cm)", "pid": 3556, "rel": "fetched", "sha": "3fc584f7431d817a90c8f04017a11ba6148e993c33f81ee8ee321d2995debc16", "via": "https://registry.npmjs.org/decocms/-/decocms-4.403.1.tgz", "path": "pkg:npm/decocms@4.403.1?checksum=sha1:90c3170579a0d159f3fb938ff013eb117508eb45%2Csha512:00f5536e903321a015b0bebb8ce0f308b238d8dacfdc4931ef1d39af6bcbdd018c4735c53569ac897a3691b42ea20e6392b04dc5094591ab4061dfc4d1feb3a0!!package/dist/server/cli.js!!package/dist/server/cli.js##unicode-escape@4780000", "risk": 4, "size": 16595, "type": "shell", "depth": 4, "facts": { "imp": [ [ "", "failed" ], [ "", "failed" ], [ "", "name" ], [ "", "name" ], [ "", "delegating" ], [ "", "Z.storage.taskBoard.getById" ], [ "", "Error" ], [ "", "Error" ], [ "", "Z.storage.threads.get" ], [ "", "Error" ], [ "", "Z.storage.taskBoard.linkThread" ], [ "", "Z.storage.organizationSettings.get" ], [ "", "aB1" ], [ "", "iQ" ], [ "", "Error" ], [ "", "Error" ], [ "", "Xi" ], [ "", "ME" ], [ "", "Z.storage.tags.listOrgTags" ], [ "", "Set" ], [ "", "N.map" ], [ "", "B.has" ], [ "", "Error" ], [ "", "Z.storage.taskBoard.setItemTags" ], [ "", "t0" ], [ "", "t0" ], [ "", "e08" ], [ "", "Z.storage.taskBoard.getById" ], [ "", "console.error" ], [ "", "t0" ], [ "", "j26" ], [ "", "N08" ], [ "", "B.map" ], [ "", "t0" ], [ "", "assignedBy" ], [ "", "t0" ], [ "", "v0" ], [ "", "v0" ], [ "", "tS0.object" ], [ "", "tS0.string" ], [ "", "tS0.object" ], [ "", "tS0.boolean" ], [ "", "Z.access.check" ], [ "", "Error" ], [ "", "Z.storage.taskBoard.delete" ], [ "", "t0" ], [ "", "Error" ], [ "", "d08" ], [ "", "F0" ], [ "", "Date.toISOString" ], [ "", "Date" ], [ "", "Date.toISOString" ], [ "", "Date" ], [ "", "Date.parse" ], [ "", "AO" ], [ "", "$.sections.filter.flatMap.map.join" ], [ "", "$.sections.filter.flatMap.map" ], [ "", "$.sections.filter.flatMap" ], [ "", "$.sections.filter" ], [ "", "$.sections.filter.map.join" ], [ "", "$.sections.filter.map" ], [ "", "$.sections.filter" ], [ "", "J.access.check" ], [ "", "sB1" ], [ "", "v0" ], [ "", "v0" ], [ "", "q8.object.refine" ], [ "", "q8.object" ], [ "", "q8.string.optional.describe" ], [ "", "q8.string.optional" ], [ "", "q8.string" ], [ "", "q8.string.datetime.optional.describe" ], [ "", "q8.string.datetime.optional" ], [ "", "q8.string.datetime" ], [ "", "q8.string" ], [ "", "q8.string.datetime.optional.describe" ], [ "", "q8.string.datetime.optional" ], [ "", "q8.string.datetime" ], [ "", "q8.string" ], [ "", "Date.parse" ], [ "", "Date.parse" ], [ "", "q8.object" ], [ "", "q8.literal" ], [ "", "q8.string" ], [ "", "q8.array" ], [ "", "q8.object" ], [ "", "q8.string" ], [ "", "q8.number.nullable" ], [ "", "q8.number" ], [ "", "q8.string.optional" ], [ "", "q8.string" ], [ "", "q8.object" ], [ "", "q8.literal" ], [ "", "q8.string" ], [ "", "q8.string.optional" ], [ "", "q8.string" ], [ "", "q8.array" ], [ "", "q8.record" ], [ "", "q8.string" ], [ "", "q8.union" ], [ "", "q8.number" ], [ "", "q8.string" ], [ "", "q8.null" ], [ "", "q8.object" ], [ "", "q8.literal" ], [ "", "q8.string" ], [ "", "q8.array" ], [ "", "q8.string" ], [ "", "q8.array" ], [ "", "q8.array" ], [ "", "q8.union" ], [ "", "q8.string" ], [ "", "q8.number" ], [ "", "q8.null" ], [ "", "q8.discriminatedUnion" ], [ "", "q8.object" ], [ "", "q8.object" ], [ "", "q8.string" ], [ "", "q8.string" ], [ "", "q8.string" ], [ "", "q8.array" ], [ "", "qO" ], [ "", "$.storage.taskBoardAnalytics.delivery" ], [ "", "qO" ], [ "", "$.storage.taskBoardAnalytics.stuck" ], [ "", "qO" ], [ "", "$.storage.taskBoardAnalytics.cost" ], [ "", "qO" ], [ "", "$.storage.taskBoardAnalytics.quality" ], [ "", "qO" ], [ "", "$.storage.taskBoardAnalytics.errors" ], [ "", "qO" ], [ "", "$.storage.taskBoardAnalytics.tenants" ], [ "", "q8.object" ], [ "", "q8.object" ], [ "", "q8.boolean" ], [ "", "q8.array" ], [ "", "q8.object" ], [ "", "q8.string" ], [ "", "q8.string" ], [ "", "q8.string" ], [ "", "Z.access.check" ], [ "", "F0" ], [ "", "RN" ], [ "", "qN" ], [ "", "Z.storage.taskBoardAnalytics.orgsWithBoardItems" ], [ "", "lk0" ], [ "", "n$" ], [ "", "Y.execute" ], [ "", "g4" ], [ "", "g4" ], [ "", "g4" ], [ "", "g4" ], [ "", "g4" ], [ "", "g4" ], [ "", "g4" ], [ "", "g4" ], [ "", "g4" ], [ "", "g4" ], [ "", "z60.object" ], [ "", "z60.string.min.max.describe" ], [ "", "z60.string.min.max" ], [ "", "z60.string.min" ], [ "", "z60.string" ], [ "", "z60.string.min.max.describe" ], [ "", "z60.string.min.max" ], [ "", "z60.string.min" ], [ "", "z60.string" ], [ "", "z60.object" ], [ "", "z60.boolean.describe" ], [ "", "z60.boolean" ] ], "mbr": [ "$.assigneeId", "$.description", "$.dueDate", "$.from", "$.id", "$.linkThreadId", "$.org", "$.previewRoutes", "$.priority", "$.range", "$.range.from", "$.range.to", "$.repo", "$.sections", "$.sections.filter", "$.sections.filter.flatMap", "$.sections.filter.flatMap.map", "$.sections.filter.flatMap.map.join", "$.sections.filter.map", "$.sections.filter.map.join", "$.sortOrder", "$.status", "$.storage", "$.storage.taskBoardAnalytics", "$.storage.taskBoardAnalytics.cost", "$.storage.taskBoardAnalytics.delivery", "$.storage.taskBoardAnalytics.errors", "$.storage.taskBoardAnalytics.quality", "$.storage.taskBoardAnalytics.stuck", "$.storage.taskBoardAnalytics.tenants", "$.tagIds", "$.title", "$.to", "$.type", "B.has", "B.length", "B.map", "Date.parse", "Date.toISOString", "F.id", "F.slug", "G.from", "G.to", "J.access", "J.access.check", "J.description", "N.flags", "N.map", "O.action", "O.id", "Q.id", "U.assigneeId", "U.description", "U.id", "X.id", "X.kind", "X.label", "X.number", "X.repo", "X.rows", "X.rows.length", "X.slug", "X.threadId", "X.title", "X.unit", "X.url", "X.value", "X.values", "Y.description", "Y.execute", "Y.inputSchema", "Y.org", "Y.query", "Z.access", "Z.access.check", "Z.auth", "Z.auth.user", "Z.auth.user.id", "Z.id", "Z.organization", "Z.organization.id", "Z.storage", "Z.storage.organizationSettings", "Z.storage.organizationSettings.get", "Z.storage.tags", "Z.storage.tags.listOrgTags", "Z.storage.taskBoard", "Z.storage.taskBoard.delete", "Z.storage.taskBoard.getById", "Z.storage.taskBoard.linkThread", "Z.storage.taskBoard.setItemTags", "Z.storage.taskBoardAnalytics", "Z.storage.taskBoardAnalytics.orgsWithBoardItems", "Z.storage.threads", "Z.storage.threads.get", "console.error", "delegating.prUrl", "expected.com", "let.tagIds", "q8.array", "q8.boolean", "q8.discriminatedUnion", "q8.literal", "q8.null", "q8.number", "q8.number.nullable", "q8.object", "q8.object.refine", "q8.record", "q8.string", "q8.string.datetime", "q8.string.datetime.optional", "q8.string.datetime.optional.describe", "q8.string.optional", "q8.string.optional.describe", "q8.union", "tS0.boolean", "tS0.object", "tS0.string", "taskBoardItemId.id", "title.title", "z60.boolean", "z60.boolean.describe", "z60.object", "z60.string", "z60.string.min", "z60.string.min.max", "z60.string.min.max.describe" ], "tgt": [ "$.sections.filter", "$.sections.filter.flatMap", "$.sections.filter.flatMap.map", "$.sections.filter.flatMap.map.join", "$.sections.filter.map", "$.sections.filter.map.join", "$.storage.taskBoardAnalytics.cost", "$.storage.taskBoardAnalytics.delivery", "$.storage.taskBoardAnalytics.errors", "$.storage.taskBoardAnalytics.quality", "$.storage.taskBoardAnalytics.stuck", "$.storage.taskBoardAnalytics.tenants", "AO", "B.has", "B.map", "Date", "Date.parse", "Date.toISOString", "Error", "F0", "J.access.check", "ME", "N.map", "N08", "RN", "Set", "X", "Xi", "Y.execute", "Z.access.check", "Z.storage.organizationSettings.get", "Z.storage.tags.listOrgTags", "Z.storage.taskBoard.delete", "Z.storage.taskBoard.getById", "Z.storage.taskBoard.linkThread", "Z.storage.taskBoard.setItemTags", "Z.storage.taskBoardAnalytics.orgsWithBoardItems", "Z.storage.threads.get", "aB1", "assignedBy", "console.error", "d08", "delegating", "e", "e08", "failed", "g4", "iQ", "j26", "lk0", "n$", "name", "p", "q8.array", "q8.boolean", "q8.discriminatedUnion", "q8.literal", "q8.null", "q8.number", "q8.number.nullable", "q8.object", "q8.object.refine", "q8.record", "q8.string", "q8.string.datetime", "q8.string.datetime.optional", "q8.string.datetime.optional.describe", "q8.string.optional", "q8.string.optional.describe", "q8.union", "qN", "qO", "r", "sB1", "t0", "tS0.boolean", "tS0.object", "tS0.string", "v0", "z60.boolean", "z60.boolean.describe", "z60.object", "z60.string", "z60.string.min", "z60.string.min.max", "z60.string.min.max.describe" ], "metrics": { "ast": { "op.eq": 5, "op.gt": 1, "op.le": 1, "op.ne": 4, "op.add": 3, "op.div": 1, "op.lor": 8, "op.sub": 12, "op.land": 1, "op.lnot": 30, "max_depth": 20, "call_count": 198, "node_count": 4267, "op.coalesce": 7, "member_count": 128, "max_array_len": 3, "op_density.eq": 0, "op_density.gt": 0, "op_density.le": 0, "op_density.ne": 0, "op_density.add": 0, "op_density.div": 0, "op_density.lor": 0, "op_density.sub": 0, "sequence_count": 38, "op_density.land": 0, "op_density.lnot": 0.01, "max_concat_chain": 2, "member_depth_max": 6, "op_density.coalesce": 0 }, "file": { "size": 16595, "entropy": 5.5 }, "text": { "lines": 1, "top_char": 116, "max_ws_run": 1, "digit_ratio": 0.04, "space_count": 856, "char_entropy": 5.5, "unique_chars": 95, "top_char_null": 0, "lines_over_200": 1, "lines_over_500": 1, "string_density": 76, "top_char_ratio": 0.06, "avg_line_length": 16595, "lines_over_1000": 1, "max_line_length": 16595, "non_ascii_ratio": 0, "last_line_length": 16595, "long_token_count": 28, "whitespace_ratio": 0.05, "identifier_density": 987, "normalized_string_count": 76, "suspicious_string_ratio": 0.17, "suspicious_comment_ratio": 1, "suspicious_identifier_ratio": 0.1 }, "binds": { "count": 34 }, "binary": { "peak_region_bytes": 14336, "peak_region_entropy": 5.63 }, "strings": { "sql": 4, "bytes": 8997, "count": 76, "shell": 3, "very_long": 2, "avg_length": 118.38, "max_length": 3224, "avg_entropy": 3.6, "empty_count": 1, "entropy_stddev": 1.07, "high_entropy_count": 5, "embedded_code_candidates": 6 }, "comments": { "code": 1, "chars": 10086, "count": 1, "lines": 1, "high_entropy": 1, "url_in_comments": 1 }, "functions": { "nested": 1, "density": 2000, "anonymous": 20, "avg_params": 1.45, "code_ratio": 20, "max_params": 2, "one_liners": 20, "avg_length_lines": 1, "max_length_lines": 1, "min_length_lines": 1, "avg_nesting_depth": 0.05, "max_nesting_depth": 1, "single_char_params": 28, "avg_param_name_length": 1.76 }, "consistency": { "extension_content_mismatch": 1, "extension_content_mismatch.script_as_unknown": 1 }, "identifiers": { "count": 987, "unique": 276, "avg_length": 6.03, "max_length": 25, "min_length": 1, "avg_entropy": 2.01, "reuse_ratio": 0.28, "length_stddev": 4.69, "has_digit_ratio": 0.17, "sequential_names": 26, "single_char_count": 20, "single_char_ratio": 0.07, "high_entropy_count": 9, "high_entropy_ratio": 0.03, "all_lowercase_ratio": 0.49, "all_uppercase_ratio": 0.11, "repeated_char_names": 1, "numeric_suffix_count": 46, "underscore_prefix_count": 2 } } }, "traits": [ { "id": "metadata/file/catalog/service::service-name-github", "conf": 0.6, "crit": 3, "desc": "GitHub service name", "spans": [ [ 6022, 6 ] ] }, { "id": "metadata/lang/generated::automatically-generated-source-marker", "conf": 0.85, "crit": 2, "desc": "Generated source provenance marker", "spans": [ [ 7932, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-1", "conf": 0.8, "crit": 1, "desc": "English function-word token \"the\"", "spans": [ [ 1609, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-2", "conf": 0.8, "crit": 1, "desc": "English function-word token \"and\"", "spans": [ [ 5013, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-3", "conf": 0.8, "crit": 1, "desc": "English function-word token \"that\"", "spans": [ [ 13737, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-4", "conf": 0.8, "crit": 1, "desc": "English function-word token \"have\"", "spans": [ [ 14645, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-5", "conf": 0.8, "crit": 1, "desc": "English function-word token \"for\"", "spans": [ [ 516, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-7", "conf": 0.8, "crit": 1, "desc": "English function-word token \"this\"", "spans": [ [ 1951, 0 ] ] }, { "id": "micro-behaviors/communications/http/url/forge::public-code-forge-url", "conf": 0.9, "crit": 3, "desc": "References a public code-forge URL", "spans": [ [ 6073, 19 ], [ 6550, 19 ], [ 6617, 22 ] ] }, { "id": "micro-behaviors/data/db/config::db-key-host", "conf": 0.85, "crit": 1, "desc": "Connection host key", "spans": [ [ 5721, 0 ] ] }, { "id": "micro-behaviors/data/db/config::db-key-secret", "conf": 0.85, "crit": 1, "desc": "Connection secret key", "spans": [ [ 1770, 0 ] ] }, { "id": "micro-behaviors/data/serialize/schema-object::command-field-key", "conf": 0.9, "crit": 1, "desc": "JSON-like object command field", "spans": [ [ 226, 0 ] ] }, { "id": "micro-behaviors/data/serialize/schema-object::result-field-key", "conf": 0.9, "crit": 1, "desc": "JSON-like object result field", "spans": [ [ 15215, 0 ] ] }, { "id": "objectives/anti-static/obfuscation/code-metrics/structure::js-module-basename", "atk": "T1027", "mbc": "B0032", "conf": 1.0, "crit": 3, "desc": "JavaScript module file extension" }, { "id": "metadata/file/naming::sequential-identifiers", "conf": 0.8, "crit": 2, "desc": "Sequential source identifier names" }, { "id": "metadata/file/padding::low-whitespace", "conf": 0.7, "crit": 2, "desc": "Very low whitespace ratio (minified/compressed)" }, { "id": "metadata/package/error-handling::catch-keyword", "conf": 0.5, "crit": 2, "desc": "Contains a catch error handler", "spans": [ [ 974, 0 ] ] }, { "id": "micro-behaviors/communications/http/message::http-url-literal", "conf": 0.75, "crit": 2, "desc": "HTTP URL string literal", "spans": [ [ 6073, 0 ] ] }, { "id": "micro-behaviors/process/create/shell/spawn::command-substitution", "conf": 1.0, "crit": 2, "desc": "shell script command substitution", "spans": [ [ 2616, 0 ] ] }, { "id": "metadata/file/catalog/service::cloud-saas-service-names", "conf": 0.6, "crit": 1, "desc": "Cloud SaaS service names", "uses": [ 0 ], "spans": [ [ 6022, 0 ] ] } ] } ] } }