{
  "ml": {
    "v": "7",
    "eng": "2.12.0-beta.2",
    "lvl": -1,
    "conf": 0,
    "mods": [
      {
        "cls": 0,
        "raw": 0.30529374,
        "rte": "az",
        "prob": 0.30529374
      },
      {
        "cls": 0,
        "raw": 0.0052963793,
        "rte": "az/tar",
        "prob": 0.0052963793
      }
    ],
    "prob": 0.30529374,
    "files": [
      {
        "id": 0,
        "lvl": -1,
        "conf": 0,
        "prob": 0.3052937388420105,
        "type": "tar.gz"
      },
      {
        "id": 2,
        "lvl": -1,
        "conf": 0,
        "prob": 0.00001833836176956538,
        "type": "shell"
      },
      {
        "id": 3,
        "lvl": -1,
        "conf": 0,
        "prob": 0.00001473228167014895,
        "type": "registry"
      }
    ],
    "version": "v18.18",
    "analyzed_at": "2026-10-10T03:58:32Z"
  },
  "path": "finitodo-2.0-51.src.tar.gz",
  "raw": {
    "fetched": [
      {
        "kind": "dependency",
        "cached": false,
        "locator": "pkg:alpm/arch/gtk3",
        "outcome": "unresolved",
        "fetched_at": 0,
        "source_offset": 435,
        "source_sha256": "46f0cd9eb859dbfb2df3570dd9b4cf86af2aa0d547658ef18e9866596105fb97"
      },
      {
        "kind": "dependency",
        "cached": false,
        "locator": "pkg:alpm/arch/git",
        "outcome": "unresolved",
        "fetched_at": 0,
        "source_offset": 471,
        "source_sha256": "46f0cd9eb859dbfb2df3570dd9b4cf86af2aa0d547658ef18e9866596105fb97"
      },
      {
        "kind": "dependency",
        "cached": false,
        "locator": "pkg:alpm/arch/make",
        "outcome": "unresolved",
        "fetched_at": 0,
        "source_offset": 386,
        "source_sha256": "46f0cd9eb859dbfb2df3570dd9b4cf86af2aa0d547658ef18e9866596105fb97"
      },
      {
        "kind": "dependency",
        "cached": false,
        "locator": "pkg:gitlab/finitodo/finitodo",
        "outcome": "unresolved",
        "fetched_at": 0,
        "source_offset": 471,
        "source_sha256": "46f0cd9eb859dbfb2df3570dd9b4cf86af2aa0d547658ef18e9866596105fb97"
      }
    ],
    "files": [
      {
        "id": 0,
        "mol": "H₃(CmF₂Os)Md(Bk)",
        "sha": "4198815e76985a44e5bd96963d4a38d5f27d5111cc25edcc698b4be73a936265",
        "path": "finitodo-2.0-51.src.tar.gz",
        "risk": 5,
        "size": 818,
        "type": "tar.gz",
        "facts": {
          "metrics": {
            "file": {
              "size": 818,
              "entropy": 7.72
            },
            "parse": {
              "error_count": 1
            },
            "binary": {
              "peak_region_bytes": 818,
              "peak_region_entropy": 7.72
            }
          }
        },
        "ident": {
          "name": {
            "value": "finitodo",
            "source": "file.basename",
            "verified": false
          },
          "trust": "unsigned",
          "version": {
            "value": "2.0-51.src",
            "source": "file.basename",
            "verified": false
          }
        },
        "traits": [
          {
            "id": "metadata/lang/natural::lang-english--atom-5",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"for\"",
            "from": [
              {
                "file": 2
              }
            ]
          },
          {
            "id": "metadata/build/package/recipe/pkgbuild::pkgbuild-build-fn",
            "conf": 0.9,
            "crit": 3,
            "desc": "PKGBUILD defines a build() function",
            "from": [
              {
                "file": 2
              }
            ]
          },
          {
            "id": "micro-behaviors/fs/write/copy::coreutils-install-executable",
            "conf": 0.8,
            "crit": 3,
            "desc": "coreutils install stages an executable file",
            "from": [
              {
                "file": 2
              }
            ]
          },
          {
            "id": "micro-behaviors/fs/directory/mkdir::mkdir-command",
            "conf": 0.8,
            "crit": 3,
            "desc": "Shell invokes mkdir command",
            "from": [
              {
                "file": 2
              }
            ]
          },
          {
            "id": "metadata/build/package/recipe/pkgbuild::pkgbuild-checksum-skip",
            "conf": 0.7,
            "crit": 3,
            "desc": "PKGBUILD skips source checksum verification",
            "from": [
              {
                "file": 2
              }
            ]
          },
          {
            "id": "micro-behaviors/fs/directory/chdir::shell-change-directory",
            "conf": 0.95,
            "crit": 2,
            "desc": "Shell changes working directory",
            "from": [
              {
                "file": 2
              }
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-3",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"that\"",
            "from": [
              {
                "file": 2
              }
            ]
          },
          {
            "id": "micro-behaviors/communications/http/url/forge::public-code-forge-url",
            "conf": 0.9,
            "crit": 3,
            "desc": "References a public code-forge URL",
            "from": [
              {
                "file": 2
              }
            ]
          },
          {
            "id": "micro-behaviors/os/sysinfo/platform/arch::multiple-architecture-references--x86-or-amd64",
            "conf": 0.94,
            "crit": 3,
            "desc": "x86 or AMD64 architecture reference",
            "from": [
              {
                "file": 2
              }
            ]
          },
          {
            "id": "objectives/supply-chain/impersonation/package/pkgbuild::srcinfo-pkgver-match",
            "atk": "T1195.002",
            "conf": 0.6,
            "crit": 3,
            "desc": "PKGBUILD pkgver matches .SRCINFO"
          }
        ]
      },
      {
        "ctx": [
          {
            "b": "3uf=[zEEx[j.wzCx([o7zWHD0xlE\u003cbjU!Sz3uf=[A+f5Ih82wRyIdf?B7muSmRM:OBz\u003eYdazC)tvixi6vq])]v{%f@ByxlaflzbyzY\u0026\u003egB95KwvqYH^wPw]9z/M%]x(n6raARp9BrC1azf3?wzY\u0026I2aztF4xL.@pC4CYnvruj1wGVnfBrCEtBrCHBwPzQjay/tbAbok#vru6\u003ee*9-cazth8aAzyfB-RTEw{503BzkVhvqGU1C{3*sayPq4vriMcx\u003e}o5A+e-\u003cB-I5hv}vrmz/P@lzF7Rmx(4)5A+PA7ayYFnay]z4B8AvEaAz4kB.L(cay]h0xk8l@aARpqz/]Yaaz+$rB0bykaz\u003eXcBS+:nA+e*1B0bNyaA.:pe*pThA:@=Cd0NZfuP6.\u00263uZx9jTaMYBz#pZfe3%LBzLw{e[n*pfj[{ox([o7z.CZpzFsihwn-U0y?Wx\u003czGxwLc)}IYoEzm@wmYZ\u003ezE^/Kc$^TqgBSVFvqxB+wPhi#wof)Zxk8Dgzddi\u003edgg0jByX%4wO#41jT.-^Ab](ux\u003eg^@jT:]RzFsihwn-[7B8Mhwv}v!KcUEdnd}\u003c3DAc15[fk20vy**^9v@Diqw[=c%Bz\u003eYdfj[{ox([o7z.tWpBseHAzdCIBB.#g.c)}}^nL*=-3jpl+x(4rddiJ%A31EG*w[=c%Bz\u003eYd3jgMTyH)\u003c33jp-Xv@2H=wHF#IDKp6@yH?d1at4KPa%.IOyIdf(A^YP-B8\u0026{yx(ka432KD*x(UsFA3ctIDVi+kwnc7jflItRflp/nA+c[jAbYScv{%E[z/fRu3jgA:B97\u0026by-\u003erDau8enazbt9x([o7z.CZpzFsihwn-OmbZTGCxjLZ%Ej].:AXy)ozxYz]x(n0lvqG:5w[=c%Bz\u003eYdfg6w\u003cfj[{ox([o7z.tNiB8b(oA3ctIDVi+kwnc7jflItRflp/nA+c[jAbYScv{%E[z/fRu3vJl",
            "ln": 48,
            "col": 49,
            "line": 1
          }
        ],
        "depth": 1,
        "facts": {
          "imp": [
            [
              "",
              "cd"
            ],
            [
              "",
              "make"
            ],
            [
              "",
              "mkdir"
            ],
            [
              "",
              "mkdir"
            ],
            [
              "",
              "install"
            ],
            [
              "",
              "install"
            ]
          ],
          "tgt": [
            "cd",
            "install",
            "make",
            "mkdir"
          ],
          "funcs": [
            [
              "build",
              570
            ],
            [
              "package",
              602
            ]
          ],
          "metrics": {
            "ast": {
              "max_depth": 6,
              "call_count": 6,
              "node_count": 155,
              "max_array_len": 2
            },
            "file": {
              "size": 819,
              "entropy": 4.98
            },
            "text": {
              "lines": 26,
              "top_char": 105,
              "tab_count": 6,
              "max_ws_run": 1,
              "digit_ratio": 0.02,
              "space_count": 54,
              "char_entropy": 4.98,
              "unique_chars": 61,
              "top_char_null": 0,
              "lines_over_200": 1,
              "string_density": 0.35,
              "top_char_ratio": 0.09,
              "avg_line_length": 30.5,
              "max_line_length": 263,
              "empty_line_ratio": 0.08,
              "last_line_length": 1,
              "whitespace_ratio": 0.11,
              "identifier_density": 1.69,
              "line_length_stddev": 50.25,
              "normalized_string_count": 1.77,
              "normalized_unique_identifiers": 6.17
            },
            "binds": {
              "count": 13
            },
            "binary": {
              "peak_region_bytes": 819,
              "peak_region_entropy": 4.98
            },
            "source": {
              "function_count": 2
            },
            "strings": {
              "bytes": 438,
              "count": 9,
              "url_count": 1,
              "avg_length": 48.67,
              "max_length": 253,
              "avg_entropy": 3.47,
              "entropy_stddev": 0.92
            },
            "comments": {
              "chars": 47,
              "count": 1,
              "lines": 1,
              "todo_count": 1,
              "to_code_ratio": 0.04
            },
            "functions": {
              "count": 2,
              "density": 7.69,
              "avg_params": 3,
              "code_ratio": 0.38,
              "max_params": 4,
              "length_stddev": 1,
              "avg_name_length": 6,
              "avg_length_lines": 5,
              "max_length_lines": 6,
              "min_length_lines": 4,
              "avg_param_name_length": 5
            },
            "identifiers": {
              "count": 44,
              "unique": 29,
              "avg_length": 6.86,
              "max_length": 29,
              "min_length": 2,
              "avg_entropy": 2.27,
              "reuse_ratio": 0.66,
              "length_stddev": 5.16,
              "has_digit_ratio": 0.14,
              "all_lowercase_ratio": 0.72,
              "numeric_suffix_count": 2
            }
          }
        },
        "id": 2,
        "mol": "H₃(CmF₂Os)Md(Bk)",
        "path": "finitodo-2.0-51.src.tar.gz!!finitodo/PKGBUILD",
        "pid": 0,
        "risk": 5,
        "sha": "86a9f1e4793b09f34c517a26bc039fe22ee8f83712897d6566547359c0a22281",
        "size": 819,
        "traits": [
          {
            "id": "metadata/build/package/recipe/pkgbuild::pkgbuild-build-fn",
            "conf": 0.9,
            "crit": 3,
            "desc": "PKGBUILD defines a build() function",
            "spans": [
              [
                569,
                8
              ]
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-3",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"that\"",
            "spans": [
              [
                153,
                0
              ]
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-5",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"for\"",
            "spans": [
              [
                143,
                0
              ]
            ]
          },
          {
            "id": "micro-behaviors/communications/http/url/forge::public-code-forge-url",
            "conf": 0.9,
            "crit": 3,
            "desc": "References a public code-forge URL",
            "spans": [
              [
                370,
                19
              ]
            ]
          },
          {
            "id": "micro-behaviors/os/sysinfo/platform/arch::multiple-architecture-references--x86-or-amd64",
            "conf": 0.94,
            "crit": 3,
            "desc": "x86 or AMD64 architecture reference",
            "spans": [
              [
                357,
                6
              ]
            ]
          },
          {
            "id": "metadata/build/package/recipe/pkgbuild::pkgbuild-checksum-skip",
            "conf": 0.7,
            "crit": 3,
            "desc": "PKGBUILD skips source checksum verification",
            "spans": [
              [
                552,
                14
              ]
            ]
          },
          {
            "id": "micro-behaviors/fs/directory/chdir::shell-change-directory",
            "conf": 0.95,
            "crit": 2,
            "desc": "Shell changes working directory",
            "spans": [
              [
                581,
                0
              ]
            ]
          },
          {
            "id": "micro-behaviors/fs/directory/mkdir::mkdir-command",
            "conf": 0.8,
            "crit": 3,
            "desc": "Shell invokes mkdir command",
            "spans": [
              [
                614,
                29
              ],
              [
                644,
                44
              ]
            ]
          },
          {
            "id": "micro-behaviors/fs/write/copy::coreutils-install-executable",
            "conf": 0.8,
            "crit": 3,
            "desc": "coreutils install stages an executable file",
            "spans": [
              [
                689,
                15
              ]
            ]
          }
        ],
        "type": "shell"
      },
      {
        "depth": 1,
        "facts": {
          "metrics": {
            "file": {
              "size": 1042,
              "entropy": 4.8
            },
            "binary": {
              "peak_region_bytes": 1024,
              "peak_region_entropy": 4.79
            },
            "registry": {
              "rating": 0,
              "age_days": 0,
              "maintainers": 1,
              "published_at": 1791603838,
              "rating_count": 2,
              "releases_24h": 0,
              "releases_48h": 0,
              "is_deprecated": 0,
              "package_age_days": 1409,
              "first_published_at": 1669842323,
              "previous_published_at": 1669842323,
              "publisher_in_maintainers": 1,
              "days_since_previous_release": 1409
            }
          }
        },
        "id": 3,
        "mol": "Md(Re)",
        "path": "finitodo@2.0-51.registry.json",
        "pid": 0,
        "rel": "registry",
        "risk": 2,
        "role": "sidecar",
        "sha": "9ec80cf57208a735d369e0be67a81425c4d294af7241cbd4781e4a2f99b81240",
        "size": 1042,
        "traits": [
          {
            "id": "metadata/registry::aur-package",
            "conf": 1.0,
            "crit": 1,
            "desc": "Arch User Repository package listing"
          },
          {
            "id": "metadata/registry::established-package",
            "conf": 1.0,
            "crit": 3,
            "desc": "Package is at least one year old"
          },
          {
            "id": "metadata/registry::single-maintainer",
            "conf": 1.0,
            "crit": 3,
            "desc": "Registry package lists one maintainer"
          },
          {
            "id": "metadata/registry::dormant-package-reawakened",
            "conf": 1.0,
            "crit": 3,
            "desc": "Package resumed releases after one year"
          },
          {
            "id": "metadata/registry::freshly-published",
            "conf": 1.0,
            "crit": 3,
            "desc": "Release published within seven days"
          },
          {
            "id": "metadata/registry::aur-recently-modified",
            "conf": 0.9,
            "crit": 3,
            "desc": "AUR package metadata changed within seven days",
            "uses": [
              0,
              4
            ]
          },
          {
            "id": "objectives/supply-chain/impersonation/registry/publish::dormant-package-revived",
            "conf": 0.6,
            "crit": 3,
            "desc": "Dormant package suddenly published again",
            "uses": [
              3,
              4
            ]
          }
        ],
        "type": "registry"
      }
    ],
    "rev": "c1ea9",
    "v": "8"
  }
}