{ "ml": { "v": "7", "eng": "2.8.0", "lvl": -1, "conf": 0, "mods": [ { "cls": 0, "raw": 0.03380263, "rte": "az", "prob": 0.03380263 }, { "cls": 0, "raw": 0.007164965, "rte": "az/tar", "prob": 0.007164965 } ], "prob": 0.03380263, "files": [ { "id": 0, "lvl": -1, "conf": 0, "prob": 0.03380262851715088, "type": "tar.gz" }, { "id": 1, "lvl": -1, "conf": 0, "prob": 0.000009218852028425317, "type": "shell" }, { "id": 3, "lvl": -1, "conf": 0, "prob": 0.000009079773917619605, "type": "registry" }, { "id": 4, "lvl": -1, "conf": 0, "prob": 0.000009079773917619605, "type": "registry" }, { "id": 5, "lvl": -1, "conf": 0, "prob": 0.000009079773917619605, "type": "registry" }, { "id": 6, "lvl": -1, "conf": 0, "prob": 0.00000959634780883789, "type": "registry" }, { "id": 7, "lvl": -1, "conf": 0, "prob": 0.000009079773917619605, "type": "registry" }, { "id": 8, "lvl": -1, "conf": 0, "prob": 0.000009079773917619605, "type": "registry" }, { "id": 9, "lvl": -1, "conf": 0, "prob": 0.000009079773917619605, "type": "registry" }, { "id": 10, "lvl": -1, "conf": 0, "prob": 0.000009079773917619605, "type": "registry" }, { "id": 11, "lvl": -1, "conf": 0, "prob": 0.000009079773917619605, "type": "registry" }, { "id": 12, "lvl": -1, "conf": 0, "prob": 0.00000959634780883789, "type": "registry" }, { "id": 13, "lvl": -1, "conf": 0, "prob": 0.000009079773917619605, "type": "registry" }, { "id": 14, "lvl": -1, "conf": 0, "prob": 0.000009079773917619605, "type": "registry" }, { "id": 15, "lvl": -1, "conf": 0, "prob": 0.000009844700798566919, "type": "registry" } ], "version": "v18.18", "analyzed_at": "2026-08-30T15:42:45Z" }, "path": "resvg-git-0.48.1.r4.g021d44b7-1.src.tar.gz", "raw": { "fetched": [ { "kind": "dependency", "cached": false, "locator": "pkg:alpm/arch/cargo", "outcome": "unresolved", "fetched_at": 0, "source_offset": 208, "source_sha256": "a03479d80112c225122f410b10dc482cd2a59f6849d54187a9157dad39cbddc4" }, { "kind": "dependency", "cached": false, "locator": "pkg:alpm/arch/cargo-c", "outcome": "unresolved", "fetched_at": 0, "source_offset": 229, "source_sha256": "a03479d80112c225122f410b10dc482cd2a59f6849d54187a9157dad39cbddc4" }, { "kind": "dependency", "cached": false, "locator": "pkg:alpm/arch/cmake", "outcome": "unresolved", "fetched_at": 0, "source_offset": 362, "source_sha256": "a03479d80112c225122f410b10dc482cd2a59f6849d54187a9157dad39cbddc4" } ], "files": [ { "id": 0, "ctx": [ { "b": "abZy80000000zQ\u0026zeXe!5yawGr$GlI*Sp\u003e^J+2=Trie:E!m^MDnJEnZ!{%Gds+[ROL:3Bq]51U!wzalzRyOeLug!h-Sn(5w)$DcKvBGoZJ9Ni\u003cJ%b6c*$B\u003e:k!2H#z[$].i\u003c2J)?lCgfYslL3leG6pJ\u003eKMiGdOQ{L9wKmdDrz^/TH", "ln": 0 } ], "mol": "H₃(CmF₂Os)Md(Bk)", "sha": "4a98da5dbaace4cab7208b5db9c6e2ac3a129340f94415597a27c1f8412479a4", "path": "resvg-git-0.48.1.r4.g021d44b7-1.src.tar.gz", "risk": 5, "size": 1279, "type": "tar.gz", "facts": { "metrics": { "file": { "size": 1279, "entropy": 7.82 }, "parse": { "error_count": 1 }, "binary": { "peak_region_bytes": 1024, "peak_region_entropy": 7.8 } } }, "ident": { "name": { "value": "resvg-git", "source": "file.basename", "verified": false }, "trust": "unsigned", "version": { "value": "0.48.1.r4.g021d44b7-1.src", "source": "file.basename", "verified": false } }, "traits": [ { "id": "micro-behaviors/os/sysinfo/platform/arch::multiple-architecture-references--x86-or-arm", "conf": 0.94, "crit": 1, "desc": "x86 or ARM architecture reference", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/communications/http/url/forge::public-code-forge-url", "conf": 0.9, "crit": 3, "desc": "References a public code-forge URL", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/os/sysinfo/platform/arch::multiple-architecture-references", "conf": 0.94, "crit": 3, "desc": "References multiple CPU architecture names", "from": [ { "off": 197, "file": 1, "line": 7 } ] }, { "id": "micro-behaviors/fs/build-artifacts::cp-out-target", "conf": 0.7, "crit": 3, "desc": "Copies files into out or target output", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/os/sysinfo/platform/arch::multiple-architecture-references--x86-or-amd64", "conf": 0.94, "crit": 1, "desc": "x86 or AMD64 architecture reference", "from": [ { "file": 1 } ] }, { "id": "metadata/build/package/recipe::pkgbuild-checksum-skip", "conf": 0.7, "crit": 3, "desc": "PKGBUILD skips source checksum verification", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/fs/write/copy::coreutils-install-executable", "conf": 0.8, "crit": 3, "desc": "coreutils install stages an executable file", "from": [ { "file": 1 } ] } ] }, { "ctx": [ { "b": "boPY?x(n33x(mH5iV{[2vRG:6cROC{x)q0FoMa-YauTmAvRG:ky\u0026sc7kXaOIA=k(re]L=yj%hBvazt\u003esAc15[fk20vxMW=pv@DiqmQY+uz+L7=x)o%(Abf97vqPNsA+frnxdW+gBp8#5xlE\u003cbjUOGBi4={rAX]yYfFUv[g=eV23uf=[A+f5If:.(nxjLN{v)8hrr.1oMwO#3\u0026A+PA7az++3A::0layPd#avw*]cKKp5v}X1Nx/m}eaB2\u003e7uP6.\u00263uZx9jTaMYBz#pZfe3%LBzb/ae[n*pfkLuuwNYj*wmY^mA+frnxcEX0x\u003e7Z(B7EG.o\u0026aInga\u003emf3s)Z!wO#41jTZTWarR!ty?Wu*3lQDlaz++3xjCAUarR^Hy?Wv1ByX(id*^ywarS9uz/x/ewPhi#wof)Z3lQDlaszeJh7-oCB7ExPmSiq\u0026Bzbkdqfi{\u0026vpK7:zE:\u003e#zE:(4z/M$zx\u003eqHfC4Sff2}6j\u003ex(XbMavZo\u0026aARpday!?]A=i7fvpK7:zE+a4arR^Hdgf{2yH}3/AaJ]$B3g]UarR^Hv{%y\u003czWEQfarUd", "ln": 0, "col": 1, "line": 1 }, { "b": "v@Dl%y?Wy3B3g{(wPJ3cdgg3mz*2\u00269wPH0.A+frnxdjgez/{8gwJ.B=xk8DrxMOunB2\u003e%cxk8E3BZ=$kz/4dzx(mG\u003ewO#3\u0026AXzDAB9qgGxk8DjvSC){v}X2xvqfQ6dggcfvkoX#B9htvjT.WRog.@cdgcA3yId*4AWSvVDKp(rv}lYaA+frnxcEW9azkzgay]58v@=o)wGSMRy\u0026si7at2f!vp%T7D)0Gwwfrmvfi/]fum/CjeOwrqflgqLffskdeIw.fxfge/uuN$PcKLne3ug2%Aa9=#c[co=3lQE3wfr7pwPJ3ca{]CnwQ5fjA=-B4rz#\u003c%p*Wf$pFsbDk$K*mB97\u00261y?i}@az2!pz/P}xlQsQupHs", "ln": 549, "col": 1, "line": 30 }, { "b": "arUf5A+xqkw[u6]xDO(Uy\u0026r*0wN(]neP+AwxjVfca%YJwqBr#bB-7#jz*c7Jy?W^fCR9MCBS}fv3jpl+x(4rddiJ%AarUf8ar\u003e\u0026qB9qgu3jm)#wQ5fjA=-B4rz#\u003c%p*Wf$pFsbDk$K*mB97\u00261y?i}@az2!pz/P}xlQsQupHv6!qB:ePuQNE-j-\u003eaMxjVe(ao", "ln": 861, "col": 1, "line": 44 }, { "b": "3lQDlay!}8Bz(8lB1.YJwP@isx9]+7arUVvvqxA%p/o.KnMXb1bYEKiwnc6qB-RNE3lQDlaz\u003eL5wEoL5dgcz8ay!\u00262xkX]5vS=y3wfrDQw].*owO@RxePLAswNPT\u003eat0", "ln": 1062, "col": 4, "line": 54 }, { "b": "lR6HmpcAVuvpB4:3lQE3vrc10aARgoBrAd!w].*owO}\u003c63jp-Xv@2H=wHF#IDKp(rv}lYaA+frnxcEW9azC.mByx04at2##h-iDneP-9VbYEKiwnc6qB-RNRvRGZka%p#oA+w%9flgSuwNPT\u003efmd.JB9qgEB-R.sEirSIz!%FFC4\u003eJiB9qgHC4\u003eJiB9qg63lQE3vrc10ay/b6B97\u0026by-\u003eqYw].*owO@RxePLAswNPT\u003eat4KPA+frnxdWR4Aa{BDeO5z", "ln": 1269, "col": 21, "line": 66 }, { "b": "a%pxovru74fjMOxAa{%Pe[+OmazC.mByx04at4aDa%.byxjLZ%flItRflp/nA+c[mz^$CvwPJ3ca{]Cnv@JLxAV/EjA+w%9fjY0hfdF7*bYEKiwnc6qB-RNRB7/05wImOjv\u003eR\u003elB9qgu3vJl", "ln": 1556, "col": 47, "line": 77 } ], "depth": 1, "facts": { "imp": [ [ "", "cd" ], [ "", "cd" ], [ "", "git" ], [ "", "git" ], [ "", "sed" ], [ "", "sed" ], [ "", "cd" ], [ "", "cd" ], [ "", "cargo" ], [ "", "cargo" ], [ "", "cd" ], [ "", "cd" ], [ "", "cargo" ], [ "", "cargo" ], [ "", "cd" ], [ "", "cd" ], [ "", "qmake" ], [ "", "qmake" ], [ "", "make" ], [ "", "make" ], [ "", "cargo" ], [ "", "cargo" ], [ "", "cargo" ], [ "", "cargo" ], [ "", "cd" ], [ "", "cd" ], [ "", "cargo" ], [ "", "cargo" ], [ "", "cd" ], [ "", "cd" ], [ "", "install" ], [ "", "install" ], [ "", "cargo" ], [ "", "cargo" ], [ "", "install" ], [ "", "install" ], [ "", "install" ], [ "", "install" ], [ "", "cp" ], [ "", "cp" ] ], "tgt": [ "cargo", "cd", "cp", "git", "install", "make", "qmake", "sed" ], "funcs": [ [ "pkgver", 672 ], [ "prepare", 770 ], [ "build", 923 ], [ "check", 1226 ], [ "package", 1307 ] ], "metrics": { "ast": { "max_depth": 8, "call_count": 20, "node_count": 350, "max_array_len": 9 }, "file": { "size": 1671, "entropy": 5.22 }, "text": { "lines": 80, "top_char": 101, "tab_count": 1, "max_ws_run": 1, "digit_ratio": 0.03, "space_count": 209, "char_entropy": 5.22, "mixed_indent": 1, "unique_chars": 83, "top_char_null": 0, "escape_density": 0.06, "string_density": 0.24, "top_char_ratio": 0.06, "avg_line_length": 19.89, "max_line_length": 90, "empty_line_ratio": 0.15, "last_line_length": 1, "whitespace_ratio": 0.17, "identifier_density": 1.74, "line_length_stddev": 21.83, "octal_escape_count": 1, "normalized_string_count": 2.12, "suspicious_comment_ratio": 2, "normalized_unique_identifiers": 12.65 }, "binds": { "count": 19 }, "binary": { "peak_region_bytes": 1671, "peak_region_entropy": 5.32 }, "source": { "function_count": 5 }, "strings": { "bytes": 392, "count": 19, "url_count": 1, "avg_length": 20.63, "max_length": 55, "path_count": 1, "avg_entropy": 3.28, "entropy_stddev": 0.75 }, "comments": { "chars": 89, "count": 1, "lines": 1, "base64": 1, "high_entropy": 1, "to_code_ratio": 0.01, "url_in_comments": 1 }, "functions": { "count": 5, "density": 6.25, "avg_params": 4.4, "code_ratio": 0.53, "max_params": 7, "length_stddev": 4.5, "avg_name_length": 6, "avg_length_lines": 8.4, "max_length_lines": 16, "min_length_lines": 4, "avg_param_name_length": 15.77 }, "identifiers": { "count": 139, "unique": 80, "avg_length": 7.34, "max_length": 21, "min_length": 1, "avg_entropy": 2.39, "reuse_ratio": 0.58, "length_stddev": 4.13, "has_digit_ratio": 0.11, "single_char_count": 2, "single_char_ratio": 0.03, "high_entropy_count": 3, "high_entropy_ratio": 0.04, "all_lowercase_ratio": 0.5, "all_uppercase_ratio": 0.04, "numeric_suffix_count": 6 } } }, "id": 1, "mol": "H₃(CmF₂Os)Md(Bk)", "path": "resvg-git-0.48.1.r4.g021d44b7-1.src.tar.gz!!resvg-git/PKGBUILD", "pid": 0, "risk": 5, "sha": "76fac8767f5c23e1c9cb7dc82a8c76e1e462074164e9f0ebc8a8a49e35d0ec8d", "size": 1671, "traits": [ { "id": "micro-behaviors/communications/http/url/forge::public-code-forge-url", "conf": 0.9, "crit": 3, "desc": "References a public code-forge URL", "spans": [ [ 61, 19 ] ] }, { "id": "micro-behaviors/os/sysinfo/platform/arch::multiple-architecture-references--x86-or-amd64", "conf": 0.94, "crit": 1, "desc": "x86 or AMD64 architecture reference", "spans": [ [ 197, 0 ] ] }, { "id": "micro-behaviors/os/sysinfo/platform/arch::multiple-architecture-references--x86-or-arm", "conf": 0.94, "crit": 1, "desc": "x86 or ARM architecture reference", "spans": [ [ 192, 0 ] ] }, { "id": "micro-behaviors/fs/build-artifacts::cp-out-target", "conf": 0.7, "crit": 3, "desc": "Copies files into out or target output", "spans": [ [ 1620, 13 ] ] }, { "id": "micro-behaviors/fs/write/copy::coreutils-install-executable", "conf": 0.8, "crit": 3, "desc": "coreutils install stages an executable file", "spans": [ [ 1333, 15 ] ] }, { "id": "metadata/build/package/recipe::pkgbuild-checksum-skip", "conf": 0.7, "crit": 3, "desc": "PKGBUILD skips source checksum verification", "spans": [ [ 651, 17 ] ] }, { "id": "micro-behaviors/os/sysinfo/platform/arch::multiple-architecture-references", "conf": 0.94, "crit": 3, "desc": "References multiple CPU architecture names", "spans": [ [ 192, 4 ], [ 197, 6 ] ] } ], "type": "shell" }, { "depth": 2, "facts": { "metrics": { "file": { "size": 810, "entropy": 4.71 }, "binary": { "peak_region_bytes": 810, "peak_region_entropy": 4.71 }, "registry": { "age_days": 18, "maintainers": 2, "published_at": 1786471634, "is_deprecated": 0 } } }, "id": 3, "path": "glibc@2.44_r24_g16be1518495f-1.registry.json", "pid": 2, "rel": "registry", "role": "sidecar", "sha": "a80653a46919d7f1d3e422fbc29a33f90b8b7603fa658190ecbf12f0f68cfdb5", "size": 810, "type": "registry" }, { "id": 4, "sha": "cf2dc1c292c72444f350dd900cda9728466312c67fdbcf114fdddca90537de94", "path": "libgcc@16.2.1_r23_gd564253eb6c8-1.registry.json", "size": 827, "type": "registry", "depth": 2 }, { "id": 5, "sha": "53ad24b825b370512c5e32e273be59538f8ec12a9d3874fc21130d296a66cfe9", "path": "libstdc__@16.2.1_r23_gd564253eb6c8-1.registry.json", "size": 826, "type": "registry", "depth": 2 }, { "ctx": [ { "b": "DM)3hz/ZhBBy/qkiWe0Mv}W5qb5Q?awG\u003ceVv{%y\u003cz.kDyefYmGA=U@kzx.a=fFk7le\u00262pof^nd)AckSax(^%0wm5+!b04Cqi5\u0026SDgC{%yefXInwNw$RD2\u003ee\u003cfF1z:vru74Byfi5A=U@kzx.bVB.\u003e\u003eBb4kRoxM4]niWe3AA==nxA=SAQb6mKvy?j!KzGP=i", "ln": 0, "col": 1, "line": 1 } ], "depth": 2, "facts": { "metrics": { "file": { "size": 859, "entropy": 4.66 }, "binary": { "peak_region_bytes": 859, "peak_region_entropy": 4.66 }, "registry": { "age_days": 0, "maintainers": 3, "published_at": 1788103531, "is_deprecated": 0 } } }, "id": 6, "mol": "Md", "path": "cargo-c@0.10.25-1.registry.json", "pid": 0, "rel": "registry", "risk": 1, "role": "sidecar", "sha": "9f0c7cb885e62ea898a77c4c82b7e26148a64f8d98237d14746743895095c13e", "size": 859, "traits": [ { "id": "metadata/registry::freshly-published", "conf": 1.0, "crit": 3, "desc": "Release published within seven days", "spans": [ [ 0, 24 ] ] } ], "type": "registry" }, { "id": 7, "sha": "686b1095ba5cd280ebe5b63cd3a41e488b9b1da82dd0d6afc595ffba126a5d3b", "path": "qt5-base@5.15.19_kde_r96-1.registry.json", "size": 810, "type": "registry", "depth": 2 }, { "id": 8, "sha": "43a022aab8c1b053ccd85710a42f58a2737e31a452f635c8e42dc025bfa89204", "path": "qt5-tools@5.15.19_kde_r3-1.registry.json", "size": 838, "type": "registry", "depth": 2 }, { "id": 9, "sha": "80b79373b01100376faaef978f0ad81d0b05d7d19655a93de04c8a7d63de280f", "path": "cairo@1.18.4-1.registry.json", "size": 843, "type": "registry", "depth": 2 }, { "id": 10, "sha": "4c73369b7e9e86b2a55d7f2db8424ad74e02558514b92ae8beb16970842098ed", "path": "pango@1.58.2-1.registry.json", "size": 813, "type": "registry", "depth": 2 }, { "id": 11, "sha": "d4f10864a0df297f2d5711dd36fe75c37a674e83a93a2b68b821366f346bc428", "path": "git@2.55.0-1.registry.json", "size": 804, "type": "registry", "depth": 2 }, { "ctx": [ { "b": "DM)3hz/ZhBBy/qkiWe0Mv}W5qb5Q?awG\u003ceVv@kT\u0026wG\u0026VHC4CYnx(v(kiWcykg+HNof^nd)AckSax(^%0wm5+!b04Cqi5-\u0026PgbQ\u003cDefXInwNw$RD2\u003ee\u003cf!sI+vru74Byfi5A=U@kzx.bVB.\u003e\u003eBb4kRoxM4]niWefEy?XcjzF-*5B0rdVBzk\u0026kwG\u003cfMB.\u003e\u003eB", "ln": 0, "col": 1, "line": 1 } ], "depth": 2, "facts": { "metrics": { "file": { "size": 809, "entropy": 4.63 }, "binary": { "peak_region_bytes": 809, "peak_region_entropy": 4.63 }, "registry": { "age_days": 1, "maintainers": 2, "published_at": 1787952537, "is_deprecated": 0 } } }, "id": 12, "mol": "Md", "path": "cmake@4.4.3-1.registry.json", "pid": 4, "rel": "registry", "risk": 1, "role": "sidecar", "sha": "53e7ecbb0af88dc7844f0f9d1cabfd8e989eb0df14d8af2956ab4f9d6393b4e7", "size": 809, "traits": [ { "id": "metadata/registry::freshly-published", "conf": 1.0, "crit": 3, "desc": "Release published within seven days", "spans": [ [ 0, 24 ] ] } ], "type": "registry" }, { "id": 13, "sha": "86f8c911704203754978aa896540c8cbd41dbdbc65325836ae5202e4728246f8", "path": "extra-cmake-modules@6.29.0-1.registry.json", "size": 829, "type": "registry", "depth": 2 }, { "id": 14, "sha": "8d3d82ac9770dd596de815361427b9a9d81c6c62432d6ecaae63834f46e4c3e2", "path": "linebender_resvg.registry.json", "size": 828, "type": "registry", "depth": 2 }, { "ctx": [ { "b": "DM)3hz/ZhBBy/qkiWe0PAW04UzEEx[b03]*wPJ3ceOw^ta$K{YwPz\u003caz/c:Wa$$Sai4={rAX]yYfFUv[g=eV2eIOC2b5?Wly?W%7wN]dRBrS+2h-JYPiw@PEh.ldYxjUBXvr(]riXS9ey*?A%B97=jwPz\u003caz/c:WzGP=iefXIBBzbPkb03]qvpA}?oMa-Y", "ln": 0, "col": 1, "line": 1 } ], "depth": 1, "facts": { "metrics": { "file": { "size": 839, "entropy": 4.77 }, "binary": { "peak_region_bytes": 839, "peak_region_entropy": 4.77 }, "registry": { "rating": 0.12, "age_days": 0, "maintainers": 1, "published_at": 1786896127, "rating_count": 8, "is_deprecated": 0, "package_age_days": 2800, "first_published_at": 1544908012 } } }, "id": 15, "mol": "Md", "path": "resvg-git@0.48.1.r4.g021d44b7-1.registry.json", "pid": 0, "rel": "registry", "risk": 1, "role": "sidecar", "sha": "9f723ce5b8fc0495ee8e8862e501d4cabb98306c1c417fe93e06080912a51ff8", "size": 839, "traits": [ { "id": "metadata/registry::aur-package", "conf": 1.0, "crit": 1, "desc": "Arch User Repository package listing" }, { "id": "metadata/registry::freshly-published", "conf": 1.0, "crit": 3, "desc": "Release published within seven days", "spans": [ [ 0, 24 ] ] }, { "id": "metadata/registry::aur-recently-modified", "conf": 0.9, "crit": 3, "desc": "AUR package metadata changed within seven days", "spans": [ [ 0, 24 ] ] } ], "type": "registry" } ], "omitted_files": 9, "rev": "1e4c6", "v": "8" } }