{
  "ml": {
    "v": "7",
    "eng": "2.12.0-beta.1",
    "lvl": -1,
    "conf": 0,
    "prob": 0.06969151,
    "files": [
      {
        "id": 0,
        "lvl": -1,
        "conf": 0,
        "prob": 0.06969150900840759,
        "type": "npm"
      },
      {
        "id": 1,
        "lvl": -1,
        "conf": 0,
        "prob": 0.00002705057522689458,
        "type": "package.json"
      }
    ],
    "version": "v18.18",
    "analyzed_at": "2026-10-18T05:40:46Z"
  },
  "path": "ec-0.0.1.tgz",
  "raw": {
    "files": [
      {
        "id": 0,
        "mol": "Md(Pa₃)",
        "sha": "48d31c616938909b5b1db5e456149892e31a80eddeef492c69e65224c97e8687",
        "path": "ec-0.0.1.tgz",
        "risk": 5,
        "size": 167,
        "type": "npm",
        "facts": {
          "metrics": {
            "file": {
              "size": 167,
              "entropy": 6.63
            },
            "parse": {
              "error_count": 1
            },
            "binary": {
              "peak_region_bytes": 167,
              "peak_region_entropy": 6.63
            }
          }
        },
        "ident": {
          "name": {
            "value": "ec",
            "source": "npm.name",
            "verified": false
          },
          "trust": "unsigned",
          "version": {
            "value": "0.0.1",
            "source": "npm.version",
            "verified": false
          },
          "identifier": {
            "value": "ec",
            "source": "npm.name",
            "verified": false
          }
        },
        "traits": [
          {
            "id": "metadata/package/name/convention::npm-has-name",
            "conf": 1.0,
            "crit": 2,
            "desc": "npm manifest declares a package name"
          },
          {
            "id": "metadata/package/empty::npm-no-scripts-field",
            "conf": 0.9,
            "crit": 2,
            "desc": "npm manifest omits scripts section"
          },
          {
            "id": "metadata/package/entrypoint::vscode-browser-entry-absent",
            "conf": 0.95,
            "crit": 2,
            "desc": "Manifest declares no browser entry module"
          },
          {
            "id": "metadata/package/runtime::vscode-languages-contribution-absent-evidence",
            "conf": 0.95,
            "crit": 1,
            "desc": "Manifest lacks languages contribution field"
          },
          {
            "id": "well-known/lib/development/extension::vscode-contributes-absent",
            "conf": 0.9,
            "crit": 2,
            "desc": "Manifest has no contributes section"
          },
          {
            "id": "metadata/file/format/conformance::json-document-opening",
            "conf": 0.95,
            "crit": 2,
            "desc": "File begins with a JSON document",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "metadata/package/freeform::pkg-skeleton-small",
            "conf": 0.7,
            "crit": 3,
            "desc": "Tiny package.json manifest",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "supply-chain/missing-author",
            "conf": 0.5,
            "crit": 3,
            "desc": "Package has empty or missing author field"
          },
          {
            "id": "metadata/package/dependencies/manifest/presence::npm-no-deps-devdependencies",
            "conf": 0.9,
            "crit": 2,
            "desc": "npm manifest omits devDependencies field"
          },
          {
            "id": "metadata/package/files/included::package-json-basename",
            "conf": 0.95,
            "crit": 3,
            "desc": "Filename is package.json",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "objectives/supply-chain/impersonation/npm-clone::npm-early-declared-version",
            "atk": "T1195.002",
            "mbc": "E1195.002",
            "conf": 0.9,
            "crit": 1,
            "desc": "Declared version is 0.x or 1.x"
          },
          {
            "id": "metadata/package/description/presence::short-description",
            "conf": 0.7,
            "crit": 3,
            "desc": "Package manifest has very short description"
          },
          {
            "id": "metadata/package/versioning/scheme::npm-version-0-0-1",
            "conf": 0.9,
            "crit": 2,
            "desc": "npm package declares version 0.0.1"
          },
          {
            "id": "metadata/package/runtime::vscode-grammars-contribution-absent-evidence",
            "conf": 0.95,
            "crit": 1,
            "desc": "Manifest lacks grammars contribution field"
          },
          {
            "id": "metadata/package/versioning/scheme::npm-has-version",
            "conf": 1.0,
            "crit": 2,
            "desc": "package.json defines a package version"
          },
          {
            "id": "metadata/package/runtime::vscode-localizations-contribution-absent-evidence",
            "conf": 0.95,
            "crit": 1,
            "desc": "Manifest lacks localization contribution field"
          },
          {
            "id": "metadata/package/versioning/scheme::conventional-version-base",
            "conf": 1.0,
            "crit": 2,
            "desc": "Package version uses numeric SemVer format"
          },
          {
            "id": "metadata/package/empty::npm-low-quality-metadata",
            "conf": 0.85,
            "crit": 1,
            "desc": "npm package with incomplete metadata",
            "from": [
              {
                "off": 6,
                "file": 1,
                "line": 2
              }
            ],
            "uses": [
              0,
              14,
              24
            ]
          },
          {
            "id": "metadata/package/repository::manifest-lacks-repository-metadata",
            "conf": 0.92,
            "crit": 2,
            "desc": "package.json declares no repository block"
          },
          {
            "id": "metadata/package/files/included::npm-publish-root-manifest",
            "conf": 0.95,
            "crit": 2,
            "desc": "Manifest sits at npm publish root",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "metadata/package/dependencies/manifest/presence::npm-no-dependencies-field",
            "conf": 0.9,
            "crit": 2,
            "desc": "npm manifest omits dependencies field"
          },
          {
            "id": "metadata/package/entrypoint::vscode-main-absent",
            "conf": 0.95,
            "crit": 2,
            "desc": "Manifest declares no main entry module"
          },
          {
            "id": "metadata/package/entrypoint::vscode-activation-events-absent",
            "conf": 0.95,
            "crit": 2,
            "desc": "Manifest declares no activation events"
          },
          {
            "id": "metadata/package/entrypoint::vscode-configuration-contribution-absent",
            "conf": 0.95,
            "crit": 2,
            "desc": "Manifest contributes no configuration block"
          },
          {
            "id": "metadata/package/empty::npm-no-keywords",
            "conf": 0.5,
            "crit": 2,
            "desc": "package.json has no keywords"
          },
          {
            "id": "metadata/file/archive::archive-parser-errors-present",
            "conf": 0.9,
            "crit": 2,
            "desc": "Archive parser error count is nonzero"
          },
          {
            "id": "metadata/file/extension/package::compressed-tar-basename",
            "conf": 0.9,
            "crit": 2,
            "desc": "Compressed-tar suffix in archive basename"
          },
          {
            "id": "metadata/package/files/included::archive-container-path",
            "conf": 0.95,
            "crit": 2,
            "desc": "Archive container path"
          },
          {
            "id": "metadata/package/files/included::npm-package-manifest-member",
            "conf": 0.95,
            "crit": 2,
            "desc": "Archive carries npm package manifest"
          },
          {
            "id": "metadata/package/name/convention::npm-archive-name-missing",
            "conf": 0.9,
            "crit": 2,
            "desc": "npm archive has no parsed package name"
          }
        ]
      },
      {
        "ctx": [
          {
            "b": "DKp(rarR\u003eCvqPN1iV]RTv\u003ciDharR^Hb6EKrB7]Mgb03?\u003cfFk4if^ndQarR^Hb4Lnav@=p5BzkVhb03?\u003cxK#0@zY\u0026R3a{@-9",
            "ln": 0,
            "col": 1,
            "line": 1
          }
        ],
        "depth": 1,
        "facts": {
          "metrics": {
            "file": {
              "size": 76,
              "entropy": 4.01
            },
            "binary": {
              "peak_region_bytes": 76,
              "peak_region_entropy": 4.01
            }
          }
        },
        "id": 1,
        "ident": {
          "name": {
            "value": "ec",
            "source": "npm.name",
            "verified": false
          },
          "trust": "unsigned",
          "version": {
            "value": "0.0.1",
            "source": "npm.version",
            "verified": false
          },
          "identifier": {
            "value": "ec",
            "source": "npm.name",
            "verified": false
          }
        },
        "mol": "Md(Pa₃)",
        "path": "ec-0.0.1.tgz!!package/package.json",
        "pid": 0,
        "risk": 5,
        "sha": "97979af65bf7963a86fb3da85ab587f46c5dd637ec02daa6eb835310f97c9c29",
        "size": 76,
        "traits": [
          {
            "id": "supply-chain/missing-author",
            "conf": 0.5,
            "crit": 3,
            "desc": "Package has empty or missing author field",
            "spans": [
              [
                0,
                21
              ]
            ]
          },
          {
            "id": "metadata/file/format/conformance::json-document-opening",
            "conf": 0.95,
            "crit": 2,
            "desc": "File begins with a JSON document",
            "spans": [
              [
                0,
                0
              ]
            ]
          },
          {
            "id": "metadata/package/dependencies/manifest/presence::npm-no-dependencies-field",
            "conf": 0.9,
            "crit": 2,
            "desc": "npm manifest omits dependencies field"
          },
          {
            "id": "metadata/package/dependencies/manifest/presence::npm-no-deps-devdependencies",
            "conf": 0.9,
            "crit": 2,
            "desc": "npm manifest omits devDependencies field"
          },
          {
            "id": "metadata/package/description/presence::short-description",
            "conf": 0.7,
            "crit": 3,
            "desc": "Package manifest has very short description",
            "spans": [
              [
                48,
                8
              ]
            ]
          },
          {
            "id": "metadata/package/empty::npm-no-scripts-field",
            "conf": 0.9,
            "crit": 2,
            "desc": "npm manifest omits scripts section"
          },
          {
            "id": "metadata/package/entrypoint::vscode-activation-events-absent",
            "conf": 0.95,
            "crit": 2,
            "desc": "Manifest declares no activation events"
          },
          {
            "id": "metadata/package/entrypoint::vscode-browser-entry-absent",
            "conf": 0.95,
            "crit": 2,
            "desc": "Manifest declares no browser entry module"
          },
          {
            "id": "metadata/package/entrypoint::vscode-configuration-contribution-absent",
            "conf": 0.95,
            "crit": 2,
            "desc": "Manifest contributes no configuration block"
          },
          {
            "id": "metadata/package/entrypoint::vscode-main-absent",
            "conf": 0.95,
            "crit": 2,
            "desc": "Manifest declares no main entry module"
          },
          {
            "id": "metadata/package/files/included::npm-publish-root-manifest",
            "conf": 0.95,
            "crit": 2,
            "desc": "Manifest sits at npm publish root"
          },
          {
            "id": "metadata/package/files/included::package-json-basename",
            "conf": 0.95,
            "crit": 3,
            "desc": "Filename is package.json"
          },
          {
            "id": "metadata/package/name/convention::npm-has-name",
            "conf": 1.0,
            "crit": 2,
            "desc": "npm manifest declares a package name",
            "spans": [
              [
                6,
                0
              ]
            ]
          },
          {
            "id": "metadata/package/repository::manifest-lacks-repository-metadata",
            "conf": 0.92,
            "crit": 2,
            "desc": "package.json declares no repository block"
          },
          {
            "id": "metadata/package/runtime::vscode-grammars-contribution-absent-evidence",
            "conf": 0.95,
            "crit": 1,
            "desc": "Manifest lacks grammars contribution field"
          },
          {
            "id": "metadata/package/runtime::vscode-languages-contribution-absent-evidence",
            "conf": 0.95,
            "crit": 1,
            "desc": "Manifest lacks languages contribution field"
          },
          {
            "id": "metadata/package/runtime::vscode-localizations-contribution-absent-evidence",
            "conf": 0.95,
            "crit": 1,
            "desc": "Manifest lacks localization contribution field"
          },
          {
            "id": "metadata/package/versioning/scheme::conventional-version-base",
            "conf": 1.0,
            "crit": 2,
            "desc": "Package version uses numeric SemVer format",
            "spans": [
              [
                24,
                0
              ]
            ]
          },
          {
            "id": "metadata/package/versioning/scheme::npm-has-version",
            "conf": 1.0,
            "crit": 2,
            "desc": "package.json defines a package version",
            "spans": [
              [
                24,
                0
              ]
            ]
          },
          {
            "id": "metadata/package/versioning/scheme::npm-version-0-0-1",
            "conf": 0.9,
            "crit": 2,
            "desc": "npm package declares version 0.0.1",
            "spans": [
              [
                24,
                0
              ]
            ]
          },
          {
            "id": "objectives/supply-chain/impersonation/npm-clone::npm-early-declared-version",
            "atk": "T1195.002",
            "mbc": "E1195.002",
            "conf": 0.9,
            "crit": 1,
            "desc": "Declared version is 0.x or 1.x",
            "spans": [
              [
                24,
                0
              ]
            ]
          },
          {
            "id": "well-known/lib/development/extension::vscode-contributes-absent",
            "conf": 0.9,
            "crit": 2,
            "desc": "Manifest has no contributes section"
          },
          {
            "id": "metadata/package/empty::npm-no-keywords",
            "conf": 0.5,
            "crit": 2,
            "desc": "package.json has no keywords"
          },
          {
            "id": "metadata/package/freeform::pkg-skeleton-small",
            "conf": 0.7,
            "crit": 3,
            "desc": "Tiny package.json manifest",
            "spans": [
              [
                24,
                18
              ]
            ]
          },
          {
            "id": "metadata/package/empty::npm-low-quality-metadata",
            "conf": 0.85,
            "crit": 1,
            "desc": "npm package with incomplete metadata",
            "uses": [
              12,
              18,
              22
            ],
            "spans": [
              [
                6,
                0
              ]
            ]
          }
        ],
        "type": "package.json"
      }
    ],
    "rev": "17dc6",
    "v": "8"
  }
}