{
  "llm": {
    "conf": 0.44576058,
    "grade": "benign",
    "model": "Qwen/Qwen3.6-27B",
    "review": false,
    "outcome": "benign",
    "interpretation": "Legitimate package build script"
  },
  "ml": {
    "v": "7",
    "eng": "2.1.0",
    "lvl": -1,
    "conf": 0,
    "mods": [
      {
        "cls": 0,
        "raw": 0.20822938,
        "rte": "az",
        "prob": 0.20822938
      }
    ],
    "prob": 0.20822938,
    "skip": [
      {
        "rte": "az/tar",
        "why": "unavailable"
      },
      {
        "rte": "az/tar",
        "why": "unavailable"
      }
    ],
    "files": [
      {
        "id": 0,
        "lvl": -1,
        "conf": 0,
        "prob": 0.20822937786579132,
        "type": "tar.gz"
      },
      {
        "id": 1,
        "lvl": -1,
        "conf": 0,
        "prob": 0.06627609580755234,
        "type": "shell"
      },
      {
        "id": 2,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000006278356067923596,
        "type": "shell"
      },
      {
        "id": 3,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000012566645636979956,
        "type": "shell"
      },
      {
        "id": 4,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000009179115295410156,
        "type": "srcinfo"
      },
      {
        "id": 5,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000009159247383649927,
        "type": "desktop-entry"
      }
    ],
    "version": "v18.18",
    "analyzed_at": "2026-06-23T17:04:06Z"
  },
  "path": "camunda-modeler-5.48.0-1.src.tar.gz",
  "raw": {
    "files": [
      {
        "id": 0,
        "ctx": [
          {
            "b": "abZy80000000zQ\u003c?/4mc5yduLs7\u003e^wQZ@+Vn%C?P0\u003ec9=5P2NDT:p@\u003cGq6+%H+5\u003c%6Gv6d",
            "ln": 0
          }
        ],
        "mol": "O₂(AsS)",
        "sha": "47d2da3c192127814b1662e7a26b24c2d743ce554b5e437c9ce04df17d12e7cd",
        "path": "camunda-modeler-5.48.0-1.src.tar.gz",
        "risk": 36,
        "size": 1045,
        "type": "tar.gz",
        "facts": {
          "metrics": {
            "file": {
              "size": 1045.0,
              "entropy": 7.8,
              "size_bytes": 1045.0
            },
            "parse": {
              "error_count": 1.0
            },
            "binary": {
              "overall_entropy": 7.8
            }
          }
        },
        "traits": [
          {
            "id": "objectives/supply-chain/install-hook/distro-scriptlet::pacman-scriptlet-hook",
            "atk": "T1195.002",
            "conf": 0.8500000238418579,
            "crit": 3,
            "desc": "pacman install scriptlet hook function",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "objectives/anti-static/obfuscation/code-metrics/structure::sh-high-entropy-identifiers",
            "atk": "T1027",
            "mbc": "B0032",
            "conf": 0.8500000238418579,
            "crit": 4,
            "desc": "High entropy identifiers",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "metadata/file/extension/identity::shell-a",
            "conf": 1.0,
            "crit": 2,
            "desc": "POSIX shell script extension",
            "from": [
              {
                "file": 2
              }
            ]
          }
        ]
      },
      {
        "ctx": [
          {
            "b": "AbP/tuUKz0Byx04c[co=3lQDlatmULBt4cjzfo-bvj=tmwmYN*AXzGRAbY-oBt4(Hxj2W\u003cxk8BewPxzAxBod{3uf{8Byfffxl4A\u003ewHF#IDKp(rarUSwB97=6zGx]dy?%Db3jp-)wNxE?zeTPec[co=3lQDlatmULBt4cjzfo-bvj=tmwmYN*",
            "ln": 0,
            "col": 1,
            "line": 1
          }
        ],
        "depth": 1,
        "facts": {
          "imp": [
            [
              "",
              "/opt/camunda-modeler/support/xdg_register.sh"
            ],
            [
              "",
              "/opt/camunda-modeler/support/xdg_register.sh"
            ],
            [
              "",
              "post_install"
            ],
            [
              "",
              "post_install"
            ],
            [
              "",
              "/opt/camunda-modeler/support/xdg_unregister.sh"
            ],
            [
              "",
              "/opt/camunda-modeler/support/xdg_unregister.sh"
            ]
          ],
          "tgt": [
            "/opt/camunda-modeler/support/xdg_register.sh",
            "/opt/camunda-modeler/support/xdg_unregister.sh",
            "post_install"
          ],
          "funcs": [
            [
              "post_install",
              0
            ],
            [
              "post_upgrade",
              69
            ],
            [
              "pre_remove",
              106
            ]
          ],
          "metrics": {
            "ast": {
              "max_depth": 5,
              "call_count": 3,
              "node_count": 31
            },
            "file": {
              "size": 175,
              "entropy": 4.53
            },
            "text": {
              "lines": 12,
              "top_char": 101,
              "max_ws_run": 1,
              "space_count": 15,
              "char_entropy": 4.53,
              "unique_chars": 28,
              "top_char_null": 0,
              "top_char_ratio": 0.07,
              "avg_line_length": 13.58,
              "max_line_length": 50,
              "empty_line_ratio": 0.25,
              "last_line_length": 1,
              "whitespace_ratio": 0.15,
              "identifier_density": 0.75,
              "line_length_stddev": 17.22,
              "normalized_unique_identifiers": 1.39
            },
            "binary": {
              "peak_region_bytes": 175,
              "peak_region_entropy": 4.53
            },
            "source": {
              "function_count": 3
            },
            "functions": {
              "count": 3,
              "density": 25,
              "avg_params": 1,
              "code_ratio": 0.75,
              "max_params": 1,
              "avg_name_length": 11.33,
              "avg_length_lines": 3,
              "max_length_lines": 3,
              "min_length_lines": 3,
              "avg_param_name_length": 34
            },
            "consistency": {
              "extension_content_mismatch": 1,
              "extension_content_mismatch.script_as_unknown": 1
            },
            "identifiers": {
              "count": 9,
              "unique": 5,
              "avg_length": 24.8,
              "max_length": 46,
              "min_length": 10,
              "avg_entropy": 3.51,
              "reuse_ratio": 0.56,
              "length_stddev": 16.52,
              "high_entropy_count": 2,
              "high_entropy_ratio": 0.4,
              "all_lowercase_ratio": 0.6
            }
          }
        },
        "id": 1,
        "mol": "Md(Bk)",
        "path": "camunda-modeler-5.48.0-1.src.tar.gz!!camunda-modeler/camunda-modeler.install",
        "pid": 0,
        "risk": 1,
        "sha": "3cbeb0860915f7838c7dc14224bddef634b379a64d2d71b3e371f15cdb36d569",
        "size": 175,
        "traits": [
          {
            "id": "metadata/build/package/maintainer-scripts::pacman-lifecycle-hook-fn",
            "conf": 0.9,
            "crit": 3,
            "desc": "Lifecycle-style shell function declaration",
            "spans": [
              [
                0,
                16
              ]
            ]
          },
          {
            "id": "metadata/build/package/maintainer-scripts::pacman-scriptlet-hook-fn",
            "conf": 0.9,
            "crit": 1,
            "desc": "Non-PKGBUILD lifecycle-style shell function",
            "spans": [
              [
                0,
                0
              ]
            ]
          }
        ],
        "type": "shell"
      },
      {
        "ctx": [
          {
            "b": "boXZHx(kOkvrl8?3nlspBt4cjzfo-bvj=tmwmYN*AXy{hzfo-bvj=tmwmYN*AV=LKkQ4r$3i",
            "ln": 0,
            "col": 1,
            "line": 1
          }
        ],
        "depth": 1,
        "facts": {
          "imp": [
            [
              "",
              "/opt/camunda-modeler/camunda-modeler"
            ],
            [
              "",
              "/opt/camunda-modeler/camunda-modeler"
            ]
          ],
          "tgt": [
            "/opt/camunda-modeler/camunda-modeler"
          ],
          "metrics": {
            "ast": {
              "max_depth": 4,
              "call_count": 1,
              "node_count": 12
            },
            "file": {
              "size": 57,
              "entropy": 4.47
            },
            "text": {
              "lines": 3,
              "top_char": 97,
              "max_ws_run": 1,
              "space_count": 2,
              "char_entropy": 4.47,
              "unique_chars": 26,
              "top_char_null": 0,
              "string_density": 0.33,
              "top_char_ratio": 0.09,
              "avg_line_length": 18,
              "max_line_length": 43,
              "empty_line_ratio": 0.33,
              "last_line_length": 43,
              "whitespace_ratio": 0.09,
              "identifier_density": 0.67,
              "line_length_stddev": 18.24,
              "normalized_string_count": 0.58,
              "normalized_unique_identifiers": 0.63
            },
            "binary": {
              "peak_region_bytes": 57,
              "peak_region_entropy": 4.47
            },
            "strings": {
              "bytes": 2,
              "count": 1,
              "avg_length": 2,
              "max_length": 2,
              "avg_entropy": 1
            },
            "comments": {
              "chars": 10,
              "count": 1,
              "lines": 1,
              "to_code_ratio": 0.5
            },
            "identifiers": {
              "count": 2,
              "unique": 1,
              "avg_length": 36,
              "max_length": 36,
              "min_length": 36,
              "avg_entropy": 3.68,
              "reuse_ratio": 0.5,
              "high_entropy_count": 1,
              "high_entropy_ratio": 1
            }
          }
        },
        "id": 2,
        "mol": "H(Po)",
        "path": "camunda-modeler-5.48.0-1.src.tar.gz!!camunda-modeler/camunda-modeler.sh",
        "pid": 0,
        "risk": 2,
        "sha": "ef8abcbb783d73a41dc956b400b0281325c3a2320f6aec71c50a8af25e23ac13",
        "size": 57,
        "traits": [
          {
            "id": "metadata/file/extension/identity::shell-a",
            "conf": 1.0,
            "crit": 2,
            "desc": "POSIX shell script extension",
            "spans": [
              [
                0,
                0
              ]
            ]
          },
          {
            "id": "micro-behaviors/process/create/shell/target::shell-exec-script-path",
            "conf": 0.85,
            "crit": 3,
            "desc": "Shell runs a script by path",
            "spans": [
              [
                7,
                42
              ]
            ]
          }
        ],
        "type": "shell"
      },
      {
        "ctx": [
          {
            "b": "Abf97vqPNsv{%j%zE^fczeS@@y?mR",
            "ln": 1,
            "addr": 0
          },
          {
            "b": "Abf9fwPx{\u003ee\u0026kKufA",
            "ln": 2,
            "addr": 24
          },
          {
            "b": "Abf9bwO:H:",
            "ln": 3,
            "addr": 38
          },
          {
            "b": "Abf8%wPIuAb0*8?x(n37xl4B5wN({2z!9A}x(mMaB8L(qBzkVhazbLjavn[0p9r$.wfsomp9s1OB7F(8z/cXbAbxFBx(tf",
            "ln": 4,
            "addr": 47
          },
          {
            "b": "vrb\u003c\u003ejT.X5i5Ub4g::Z",
            "ln": 5,
            "addr": 123
          },
          {
            "b": "B-IpYb4#7uAc15[fjOBcB-7.#e]L=yfj[^7BAIRnB1.xGwmYN*AXwQ",
            "ln": 6,
            "addr": 139
          },
          {
            "b": "y?Wx\u003czGxwLc)}.Xr3%9",
            "ln": 7,
            "addr": 183
          },
          {
            "b": "x(n0lvqG:ybYEKizEEx[e[]iAByx04",
            "ln": 8,
            "addr": 199
          },
          {
            "b": "",
            "ln": 9,
            "addr": 224
          },
          {
            "b": "B8Mhwv}v!Kb4#7uAc15[fjOBcB-7.#e]L=yflgSuwNPT\u003efc\u003eHLxkRc{wIkrFyId*4AXwXSyIdJ[zdLpAAbf9fwPxwsx(n6reQffge{7Jxe[YFO",
            "ln": 10,
            "addr": 225
          },
          {
            "b": "arR^HarR^HcU3O4B-7.#eP2ApwO+{#e]$XNdf",
            "ln": 11,
            "addr": 314
          },
          {
            "b": "arR^HarR^H",
            "ln": 12,
            "addr": 344
          }
        ],
        "depth": 1,
        "facts": {
          "imp": [
            [
              "",
              "cd"
            ],
            [
              "",
              "cd"
            ],
            [
              "",
              "install"
            ],
            [
              "",
              "install"
            ],
            [
              "",
              "cp"
            ],
            [
              "",
              "cp"
            ],
            [
              "",
              "install"
            ],
            [
              "",
              "install"
            ],
            [
              "",
              "install"
            ],
            [
              "",
              "install"
            ]
          ],
          "tgt": [
            "cd",
            "cp",
            "install"
          ],
          "metrics": {
            "ast": {
              "max_depth": 6.0,
              "bind_count": 11.0,
              "call_count": 5.0,
              "node_count": 181.0,
              "identifier_count": 22.0,
              "string_literal_count": 16.0,
              "array_literal_max_length": 2.0
            },
            "file": {
              "size": 776.0,
              "entropy": 5.25,
              "size_bytes": 776.0
            },
            "text": {
              "digit_ratio": 0.2,
              "space_count": 73.0,
              "total_lines": 25.0,
              "char_entropy": 5.25,
              "unique_chars": 56.0,
              "string_density": 0.64,
              "avg_line_length": 30.04,
              "max_line_length": 88.0,
              "empty_line_ratio": 0.2,
              "last_line_length": 1.0,
              "whitespace_ratio": 0.13,
              "most_common_ratio": 0.05,
              "identifier_density": 1.8,
              "line_length_stddev": 27.86,
              "encoded_string_ratio": 0.13,
              "normalized_string_count": 3.2,
              "repeated_char_sequences": 1.0,
              "most_common_char_is_null": 0.0,
              "max_inline_whitespace_run": 1.0,
              "trailing_whitespace_lines": 1.0,
              "most_common_char_codepoint": 101.0,
              "normalized_unique_identifiers": 4.74
            },
            "binds": {
              "count": 11.0
            },
            "calls": {
              "count": 5.0
            },
            "binary": {
              "overall_entropy": 5.25
            },
            "source": {
              "function_count": 1.0
            },
            "strings": {
              "total": 16.0,
              "url_count": 2.0,
              "avg_length": 29.38,
              "max_length": 78.0,
              "path_count": 2.0,
              "avg_entropy": 3.47,
              "hex_strings": 2.0,
              "total_bytes": 470.0,
              "entropy_stddev": 0.75
            },
            "functions": {
              "count": 1.0,
              "avg_params": 5.0,
              "max_params": 5.0,
              "avg_name_length": 7.0,
              "avg_length_lines": 7.0,
              "max_length_lines": 7.0,
              "min_length_lines": 7.0,
              "avg_param_name_length": 5.0,
              "density_per_100_lines": 4.0,
              "code_in_functions_ratio": 0.28
            },
            "identifiers": {
              "count": 22.0,
              "total": 45.0,
              "avg_length": 5.95,
              "max_length": 15.0,
              "min_length": 2.0,
              "avg_entropy": 2.25,
              "reuse_ratio": 0.49,
              "unique_count": 22.0,
              "length_stddev": 2.85,
              "has_digit_ratio": 0.09,
              "all_lowercase_ratio": 0.68
            }
          }
        },
        "id": 3,
        "path": "camunda-modeler-5.48.0-1.src.tar.gz!!camunda-modeler/PKGBUILD",
        "risk": 1,
        "sha": "e6d53e1a5c40d816536183d31f8e9d0b9098c207375c95212bb376e45ac29b3b",
        "size": 776,
        "traits": [
          {
            "id": "micro-behaviors/communications/http/message::https-prefix",
            "conf": 0.8999999761581421,
            "crit": 2,
            "desc": "HTTPS protocol prefix",
            "spans": [
              [
                143,
                8
              ]
            ]
          },
          {
            "id": "metadata/file/string/identity::pkgbuild-basename",
            "conf": 1.0,
            "crit": 2,
            "desc": "Arch PKGBUILD package recipe basename",
            "spans": [
              [
                0,
                8
              ]
            ]
          },
          {
            "id": "metadata/file/profile/identity::tiny-text-script",
            "conf": 0.75,
            "crit": 2,
            "desc": "Tiny multi-line text script",
            "spans": [
              [
                0,
                24
              ]
            ]
          }
        ],
        "type": "shell"
      },
      {
        "depth": 1,
        "facts": {
          "metrics": {
            "file": {
              "size": 578.0,
              "entropy": 5.16,
              "size_bytes": 578.0
            },
            "binary": {
              "overall_entropy": 5.16
            }
          }
        },
        "id": 4,
        "path": "camunda-modeler-5.48.0-1.src.tar.gz!!camunda-modeler/.SRCINFO",
        "refs": [
          {
            "to": "pkg:alpm/arch/libnotify",
            "off": 253,
            "kind": "dependency"
          },
          {
            "to": "https://camunda.org/release/camunda-modeler/5.48.0/camunda-modeler-5.48.0-linux-x64.tar.gz",
            "off": 273,
            "kind": "dependency"
          }
        ],
        "sha": "45e4c7f3e36aa880e206686edc9f9973d97a4205b8e895c1ab7cb5aedfc8eece",
        "size": 578,
        "type": "srcinfo"
      },
      {
        "depth": 1,
        "facts": {
          "metrics": {
            "file": {
              "size": 285,
              "entropy": 4.75
            },
            "binary": {
              "peak_region_bytes": 285,
              "peak_region_entropy": 4.75
            }
          }
        },
        "id": 5,
        "path": "camunda-modeler-5.48.0-1.src.tar.gz!!camunda-modeler/camunda-modeler.desktop",
        "pid": 0,
        "risk": 1,
        "sha": "1a0d59f97fd76d6a1e348170e15a7f7c3b7b85af8a66410e8338db8332971917",
        "size": 285,
        "traits": [
          {
            "id": "metadata/file/format/structured::desktop-application-name",
            "conf": 0.95,
            "crit": 2,
            "desc": "Desktop entry declares application name"
          },
          {
            "id": "metadata/file/format/structured::desktop-application-purpose",
            "conf": 0.95,
            "crit": 2,
            "desc": "Desktop entry declares application purpose"
          },
          {
            "id": "metadata/file/format/structured::desktop-exec-present",
            "conf": 0.95,
            "crit": 2,
            "desc": "Desktop entry declares a launch command"
          }
        ],
        "type": "desktop_entry"
      }
    ],
    "rev": "b520a",
    "v": "8"
  }
}