{ "ml": { "v": "7", "eng": "2.1.0", "lvl": -1, "conf": 0, "mods": [ { "cls": 0, "raw": 0.047986317, "rte": "az", "prob": 0.047986317 }, { "cls": 0, "raw": 0.34407285, "rte": "az/npm", "prob": 0.34407285 } ], "prob": 0.047986317, "files": [ { "id": 0, "lvl": -1, "conf": 0, "prob": 0.04798631742596626, "type": "npm" }, { "id": 1, "lvl": -1, "conf": 0, "prob": 0.000016639629393466748, "type": "javascript" }, { "id": 2, "lvl": -1, "conf": 0, "prob": 0.00009525815403321758, "type": "package.json" }, { "id": 3, "lvl": -1, "conf": 0, "prob": 0.000005414088718680432, "type": "javascript" }, { "id": 4, "lvl": -1, "conf": 0, "prob": 0.0000053544840739050414, "type": "javascript" }, { "id": 5, "lvl": -1, "conf": 0, "prob": 0.000005165735728951404, "type": "javascript" }, { "id": 6, "lvl": -1, "conf": 0, "prob": 0.000005334615707397461, "type": "javascript" }, { "id": 7, "lvl": -1, "conf": 0, "prob": 0.000009854634299699683, "type": "markdown" } ], "version": "v18.18", "analyzed_at": "2026-06-22T00:51:08Z" }, "path": "db-xorma-1.0.5.tgz", "raw": { "files": [ { "id": 0, "mol": "O(S₂)H(Po₃)Md(Pa₂)", "sha": "50631ecc747eab0af192ad4f328081047fe320d5b19bf8746c27b6c5e25861a6", "path": "db-xorma-1.0.5.tgz", "risk": 8, "size": 22489, "type": "npm", "facts": { "metrics": { "file": { "size": 22489.0, "entropy": 7.99, "size_bytes": 22489.0 }, "parse": { "error_count": 1.0 }, "binary": { "overall_entropy": 7.99 }, "consistency": { "unused_runtime_deps": 0.0 } } }, "ident": { "name": { "value": "db-xorma", "source": "npm.name", "verified": false }, "trust": "unsigned", "authors": [ { "name": "Austin Malerba", "role": "author", "source": "npm.author" } ], "version": { "value": "1.0.5", "source": "npm.version", "verified": false }, "identifier": { "value": "db-xorma", "source": "npm.name", "verified": false } }, "traits": [ { "id": "metadata/lang/javascript-features::const-let", "conf": 0.8999999761581421, "crit": 1, "desc": "ES6 const/let declarations" }, { "id": "metadata/package/manifest/entrypoint::pkg-module-field", "conf": 0.6000000238418579, "crit": 2, "desc": "\"module\": field in package.json" }, { "id": "metadata/package/quality/empty::npm-empty-description", "atk": "T1195.002", "conf": 0.8500000238418579, "crit": 3, "desc": "npm package has empty description" }, { "id": "metadata/file/format::vocab-array", "conf": 0.9700000286102295, "crit": 1, "desc": "Validation vocabulary array" }, { "id": "metadata/library/runtime::js-module-exports", "conf": 1.0, "crit": 2, "desc": "JavaScript module exports" }, { "id": "metadata/package/versioning::mature-version", "conf": 0.699999988079071, "crit": 3, "desc": "Major version is 1 or higher" }, { "id": "objectives/anti-static/obfuscation/code-metrics/identifiers::js-dist-sourcemap-output", "atk": "T1027", "mbc": "B0032", "conf": 0.8999999761581421, "crit": 1, "desc": "Dist JavaScript sourcemap output", "from": [ { "file": 1 }, { "file": 6 } ] }, { "id": "metadata/file/format::sourcemap-sources-content", "conf": 0.8999999761581421, "crit": 1, "desc": "Source map sourcesContent array" }, { "id": "metadata/lang/javascript-features::es6-class", "conf": 0.8999999761581421, "crit": 1, "desc": "ES6 class declaration" }, { "id": "objectives/supply-chain/install-hook/scripts/dynamic-install::stdio-windowshide-spawn", "conf": 0.9200000166893005, "crit": 3, "desc": "spawn with stdio ignore and windowsHide" }, { "id": "metadata/package/quality/empty::npm-empty-description-any", "atk": "T1195.002", "conf": 0.8500000238418579, "crit": 3, "desc": "npm package has empty or missing description", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/process/create/spawn::stdio-ignore", "mbc": "F0005", "conf": 0.8500000238418579, "crit": 3, "desc": "stdio set to ignore" }, { "id": "metadata/package/versioning::npm-has-version", "conf": 1.0, "crit": 2, "desc": "npm package has version field" }, { "id": "micro-behaviors/process/create/spawn::windowshide-option", "conf": 0.8500000238418579, "crit": 3, "desc": "windowsHide option" }, { "id": "metadata/package/scripts::pkg-dev-script-field", "conf": 0.6000000238418579, "crit": 3, "desc": "\"dev\": script in package.json" }, { "id": "metadata/file/format::vocab-string", "conf": 0.9700000286102295, "crit": 1, "desc": "Validation vocabulary string" }, { "id": "metadata/lang/javascript-features::export-const-func-class", "conf": 0.75, "crit": 2, "desc": "ES module export (const/function/class)" }, { "id": "metadata/package/error-handling::finally-keyword", "crit": 2, "desc": "finally handler keyword" }, { "id": "objectives/supply-chain/impersonation/manifest/skeleton::pkg-no-description-short", "conf": 0.699999988079071, "crit": 3, "desc": "Very short/empty description" }, { "id": "metadata/package/manifest/entrypoint::esm-export-pattern", "conf": 0.6000000238418579, "crit": 3, "desc": "ES module export keyword pattern", "from": [ { "file": 3 }, { "file": 4 } ] }, { "id": "metadata/package/quality/empty::npm-has-name", "conf": 1.0, "crit": 2, "desc": "npm package has name field" }, { "id": "micro-behaviors/process/create/shell/build::npm-install-command", "atk": "T1059", "conf": 0.8199999928474426, "crit": 3, "desc": "npm package install command" }, { "id": "metadata/file/metrics::low-string-density-large-file", "conf": 0.8999999761581421, "crit": 1, "desc": "Low string density in source" }, { "id": "objectives/execution/autoinstall/package::package-manager-comment-npm", "atk": "T1059.007", "conf": 0.8999999761581421, "crit": 2, "desc": "npm command mentioned in source comment" }, { "id": "metadata/package/scripts::pkg-build-script-field", "conf": 0.6000000238418579, "crit": 3, "desc": "\"build\": script in package.json" }, { "id": "metadata/package/scripts::has-test-script", "conf": 1.0, "crit": 1, "desc": "package defines test script" }, { "id": "metadata/library/github-actions::action-dist-js-path", "conf": 0.8999999761581421, "crit": 2, "desc": "GitHub Action dist JavaScript path" }, { "id": "metadata/library/structure::js-medium-minified-line", "conf": 0.8999999761581421, "crit": 1, "desc": "Medium minified JavaScript line" }, { "id": "micro-behaviors/process/create/exec::exec-api-call", "atk": "T1059", "conf": 0.8500000238418579, "crit": 3, "desc": "exec API call" }, { "id": "metadata/package/error-handling::catch-keyword", "crit": 2, "desc": "catch handler keyword" }, { "id": "metadata/file/extension/identity::encoded-data-carrier-extension", "conf": 1.0, "crit": 1, "desc": "Encoded data carrier extension" }, { "id": "metadata/lang/javascript-features::arrow-function", "conf": 0.8999999761581421, "crit": 1, "desc": "ES6 arrow function syntax" }, { "id": "metadata/package/error-handling::try-block-open", "crit": 2, "desc": "try block opening" }, { "id": "metadata/file/invisible-unicode::generated-artifact-filename", "atk": "T1027", "conf": 0.8500000238418579, "crit": 1, "desc": "Generated artifact filename suffix" }, { "id": "metadata/lang/javascript-features::async-await", "conf": 0.8999999761581421, "crit": 1, "desc": "ES2017 async/await syntax" }, { "id": "metadata/lang/scripted::dts-declaration-file", "conf": 0.9900000095367432, "crit": 2, "desc": "TS declaration file (.d.ts/.d.cts/.d.mts)" }, { "id": "metadata/build/bundler::has-sourcemap", "conf": 0.8999999761581421, "crit": 2, "desc": "Code has source map reference" }, { "id": "objectives/anti-static/obfuscation/code-metrics/identifiers::js-dist-basename", "atk": "T1027", "mbc": "B0032", "conf": 0.8999999761581421, "crit": 1, "desc": "Dist JavaScript basename" }, { "id": "metadata/file/format::vocab-object", "conf": 0.9700000286102295, "crit": 1, "desc": "Validation vocabulary object" }, { "id": "metadata/file/format::vocab-boolean", "conf": 0.9700000286102295, "crit": 1, "desc": "Validation vocabulary boolean" }, { "id": "metadata/library/github-actions::action-dist-directory", "conf": 0.9399999976158142, "crit": 2, "desc": "GitHub Action dist directory path" }, { "id": "objectives/impact/destroy/keywords::cleanup-verb--clear", "conf": 0.8799999952316284, "crit": 1, "desc": "Cleanup/action word: clear" }, { "id": "metadata/file/invisible-unicode::test-file-context", "atk": "T1027", "conf": 0.8500000238418579, "crit": 1, "desc": "Test or generated file context", "from": [ { "file": 3 }, { "file": 4 }, { "file": 5 } ] }, { "id": "metadata/file/format::vocab-number", "conf": 0.9700000286102295, "crit": 1, "desc": "Validation vocabulary number" }, { "id": "metadata/library/structure::js-any-bundle-output", "conf": 0.949999988079071, "crit": 2, "desc": "Any JS bundle or minified asset output", "from": [ { "file": 1 }, { "file": 3 }, { "file": 4 }, { "file": 6 } ] } ] }, { "ctx": [ { "b": "b6v%raAITBx\u003e8lei%(srvr9Gcz^)@ljS[=RADL#owHF:tz^)@ndlv\u003ezw{503BzkVhaz2LnvqH0kvjSKgdiJ%AarUxgasHUvjV$}JvKSBuwPS6nzxK4wB.9SwarUxgasHUvjV$}JC5I89ats{=D(#(vjV$}JC5I89attk!A+funA=91ivqH0@i%)8MA+funA=90(q+{dvB98CpzF9V}C{)8Iau.\u003eJawbNdpa*QfA+PA7x\u003ezSsvKTwCEf%F2vrlGjnnic!z/Qa$vqYH^wPw]u3lQE3z/fSrA=\u003e(lz/NmpwObv[y\u0026\u0026l\u003cwO(GhjS)%mefF+yze18mjS(QodiJ%AarR^HBzbxfe[]Aszf3*.az(4aCRi]zB7GxnvpB4:e[5^vvr\u003cniwObv[y\u0026\u0026l\u003cwO(GtaBtkwwO2*wazb4#B7DFxdlv\u003eVarR!GxLzJuvpKy[C4Bl.wmZ0djS[\u0026Wx(+[vBy/rge]k9pxlm/fkoL5Yx(+[vBy/rge]k9pxlm/feG=+\u003ciV{1ei%)8MarU=tx(+[yx(dNaauZ\u0026-x(dNai%)8MarUJtvT6IxvqxBIvSMa3C41\u0026@wHIUlx(+*FDKp(rarR^Hx(){6B2\u003eBXz^)@zz^)^0A=$(2y?kkuxKLZ[z*9-tarR^HarU95Bzk]fnP56ICSD%:z^)@zzV", "ln": 0, "col": 1, "line": 1 }, { "b": "z/d9karR^HarUfgwNPQuaz(4aCRiAmBzkVhed9HxarV7Yi%)8MEf}8tfdFB]ra]?=v%8*jwO#QaC{4fty?m9#wN({8zEEH9xM4#nc#TbGv0cu$wObT]wN]f\u003ex\u003ewG9z/fbne*8R%3lQE7wPP56v@#BdwL3#Pz73?QDKp(rarUYoBAIRwaARphB1RfGwO(G)Bzbxfe[5mix)a5VzE^s6t@@xoaBKOtatkh]avf%=wO#33vixD0Coy%Avq{p3z/^agzE:(bvqxA%x(\u003eFtxK@q{v@#BdwGU]ewIb8Pfa5*AAclknc#0^mz7cPO3lQDlazCBgc$NyvvqH0kx(){6efG4Fx(+[nv@#BdwL3#Pz7c[RA+funA=9@CarR^Hx\u003ev", "ln": 672, "col": 22, "line": 22 }, { "b": "arV7tEf{r\u003ez/fSray]57wObH]wO#0?auZ?}wmoN*diH=qaBsCraAz4nB-Ivxn(FIXe]UltB7D:(q+{dvB98CpzF9V}C{)iiByuQEi%{x$3s!0(B95KsB3%OJA7a+?vqE5HasIeqyb4mZz^)DpdiH=qaBsCrazCBgc#SNff^5RxjS[VLybdjXA+funA=91wA=\u003e}P3lQE9w/@HzD2Ntkw/#23yb3?OjV%]iz^)D)v@@[qE0^5UD2Ntkw/#23ybc[PjV%]iz^)D)v@@[zaAz4nB-Ivxw)]H%wJHkwazCBgc#SNff^5RxjS[S+y?$i", "ln": 1930, "col": 1, "line": 63 }, { "b": "asI2pD2\u003eX)y?mG%Bz8^ujV%{6wQetLe]k9pxlm/oaAz4nB-Ivxw)]H%wJHkwazbLjasH-rzGx[xyH}=lz!pbcwQetKdiJ%AarR^Hx\u003ewFoa.$UmB22vZzEWH9wmY*gyH}=udiJUxBAIRwazb4#B7EAuarR^Hx\u003ewFoa.=0=wO2*HADLYac#SNff\u003cwB8D0I%zz^)DptwE!}t}4iBA+funA=91ivqH0@i%)8MEf}8tA+funA=91wA=\u003e}P3vK#yw{503BzkVhaz\u003eLar://!wPGnrvRNCpzddy5wPxjxDKp(rv@DmaBrCQnB9hqvauZ\u0026]Eld=UazbLjasH-rzGx[xyH}=lx(k5ivRNtmDKp(rarUxgasH2{ygQ)%e]U\u0026HBz(nDAaHUnvrkj*zCUv(AaK6iC}JPny?$IrvRNCpyH}=udiJ%AarR^HarUYoB9hqvtwE!}t{8oMzddy5wPxhqvRPa.wQdMjazULldlv\u003eVarR!P3lQEt3lQEiwPS6nzxJ$hB9hp", "ln": 2287, "col": 5, "line": 75 }, { "b": "arT@si%)8MarUomAV==uz/fSrazCvez!pbazGx]dzEWlHwofgxDKp(rarR^Hv@DmaBrCKywP*T.B97\u0026dv}u=CaAhvjC1DN)Byx5%wPI6\u0026wl?n7arR^HarUfjzGx[xzE[6mnP5P\u003evqYN^auZ\u0026+wQ5q*zGx]dzEWm0twmRNi%)8MarR^Hx\u003ewFoa-p\u003eoBv*v\u003eByx5%wGSrDaAhvjC1DN)Byx5%wHO:G3lQDlarR^HazCBgc)r8lvqYZ?B6AH1wmYNRD2Nt2diJblvqYZ?B6AH1wmYNRD2Nt2", "ln": 3250, "col": 3, "line": 107 }, { "b": "y***+diJ%AarR^HarR^HarUYoBAIRwaARphB1Q*lzGx]dzEWlguUBd{Bz(hBe]\u003eJxy***+d0fcpB1Q*lzGx]dzEWlgBz\u003c=IpFJq!dlv\u003eVarR^HarR!Paz2wgwGVsbarR^HarR^HarUYoBAIRwaARphB1Q*lzGx]dzEWlguUBd{Bz(hBe]U@OxEE$ox(+[lx-", "ln": 4250, "col": 16, "line": 141 }, { "b": "Aa9=}zf4sDz!9A}B15.Nz/OoPv}WnszeS@@y:*F\u0026j%kgVarR^HarUJtwmYNfuVQscA+cvRaARphB2%ZKarR^Haz(4cwO-#av@Dg1wN/*@z/cWXaz$+mavy6-y?m9#x(v(qzeS@@y:?BMarR^HEjmk+arR^HBzbxfe]$JowO\u003e\u003cRwPz\u003caz/cWXaAg+fvqQ6rB7n({zd9", "ln": 4961, "col": 19, "line": 167 }, { "b": "e[F{xA+P9ad0fcpB1RrFwmYN#dk2jJAZ:zDxECokyH}=xaz(4cwO+T3au.[hDKp(rarR^HzeS@@y+x78z!%l3v@#B6zz2:zvpShyByO#jAa9\u0026#xF9?7Bywx?wQdM7E0^5-Ejmk+arR^HEjmk+arV7tEf%F5zGx[xDMWxPzEU$Kx/WwOAbu.CauZ\u0026/wPq\u003cbA+cTyz/]J9x\u003eqydwG\u0026M+3s^)XB8@D\u003ez!%l3v@#B6zxKokarUfjzGx]uBZ]JiAWU^ywmYNaaBsCrarR!GxLzJux(n0lvqYN^B09Q*DWN%.arR^HBzbxfe]tJqwO-FLaz(4cwO:BnarR^HzeS)de]t3jwLV=RwPz%5vR/Q7BzbxfefGoDarR^HarUxoB97\u0026dv}xZxaz(4aCRi]zB7GxnvpB4:e]$Ymy\u002613led9HxarR^Hy\u0026r-)n(FIXiV@oTvT6Ilv@#B6zy=bqarR^Haz+$8wkDYRv}W[CzeS)de[5mix(v(u3lQDlaBLX23lQEt3lQEcz^-", "ln": 6819, "col": 11, "line": 236 }, { "b": "arR^HarT@sed9HxarS9{3lQEt3vJmmfczVPB-7Yhx(v(ic[co=3nj4ParR^HBAhTHDKqzVarR^HarR!rCX7w-D2vaub5RvpaA.NozGx]dy?$k7y\u0026:?Myi7HAclNhBz6iLgB97\u0026by-)k7B9GoKB0rdTDKqzVarR^HarR^HaAITnx(u3Pb57Xcz/Pzkeda3-arR^HarR^HaA}Kqwn=WknnhQCiV@J+B.99hfe1B\u003carR^HaBLX23nj4ParR^HEir3dByO#bc$NBtz/NoHDWMkOfczwWEjlM[3s^)XB8@D#z!9A}aBsCray/tcB98CBv@#Tfc$D+dvjrsC3lQDlaARphB1Q*gwO+}1wN(]Dazb4#B7EAuarR^HBzbxfe)\u0026s6auZ\u0026?xLzJuxjVfLy*?yac[c=.wk^5QwN/?2AWUEbByuQW3lQDlaARphB1Q%vzGx]uBZ]JiAXqxzB7GDiAWQ", "ln": 8044, "col": 1, "line": 284 }, { "b": "xK#Div{%l$vR3W8B7F(ma$K6zarR^HasPwVarR^HEf}8tEf{r7aAITkBzkkcA+fr6Bz(gFdiJ%AarR^HBAhTHDKp(rarR^Hv@DmaBrA$@l$7gCvQTs?lVl\u003cWwN/?2AV^H/A+flkx(W=kb4LdmwoYXoz/fD7v@#Tfa$kOXarR^HarUfjzGx[xwmuVAaz$+mavHDxvrt{!vrl0Ez/fD7v@#Tfd0{v\u003ei%)8MarR^HwmvfhB.bPsl{:mVzF\u003c2}BsnO13lQDlaBLwxvru0)asH/wAW-bT3lQDlarR!GA^n^O3lQDlarR^Haz#dnc[c=.zGx]dy?$Hzwmvc3CR9AzzF\u003c2}Bz(gzefGoDarR^HarR^HarR\u003eCz.lfwA=bPexlbmTaARTDwH[fharR^HarR^Har\u003eYwePUuzwG\u003ceTBAhIned9HxarR^HarR^Hb5RrJAb](fA+frkb03\u0026*A=\u003e}A3lQDlarR^HarR!yz!A($C4CFJar\u003e(vy?mHaa$K6zarR^HarR!Pdlv\u003eVarR^HarR!pz/fSravHDxvrt{!vrl0Ez/fD7v@#TfauZ\u0026/wPq\u003cbA+cTywmvc3CR9AzzF\u003c2}Bz(gzdlv\u003eVarR^HarR!pz/fSray[}7jS[SNCoxp#l$7gCvQTs?lVl\u003cWwN/?2AWVo.dlv\u003eVarR^HarR!qvLhUywPA5:lpkWezE)s1c[dj+arR^HarV7Pv{%E?xDOZmA=M8sdiJ$=3lQDlaBKOtaBKO7arU-Evrui[ay/C6vru6ewmoN*diJ%AarR^HBzbxfe[5*xwPz(\u003eBz(hhc[dj+arR^HwmoN*auZ\u0026TwPzu]wPzv1v}v60vrt{bi%)8MarUfjzGx[xx\u003eetHaARphB1Rfqq!o=Rv@#Tfc$D+dvjsnB", "ln": 9050, "col": 62, "line": 326 }, { "b": "B0b/parUfjzGx]uBZ]JiAWU^sxl4B5x(v)gdiJ%AarR^HBzbxfe]trnA::67z/fRsjS[PQxl4B5x(v)ge]$@KBsnLCefFyJau.[hvj(Uur+lq)x(v(ieG!HPBz\u003eh\u003eA=U@kzyETOarV7tarUYEzyxNzvq{p3z/^AJDKp(rarUGiBrC7oA=L-eBrAZ?DKp(rarR^He?O+$zEEH9xM4#z3lQDlarR!Fv}YB\u003cvoc@WB7]MgiV@GYvq{p3z/+", "ln": 11478, "col": 16, "line": 425 }, { "b": "arU=tx(+[FByxolB09Q*B97\u0026jB-PRKarV7tarUrdBrCpsp?sJPx(mMidiJ%AarR^HA+funA=91wxLzJuB97\u0026jB-OV*jV%]iAaJ]$x(mMci%)8MEf}8txjVfcx(=:^y?vx$y?mc9diJ%AarR^HA+funA=91wxLzJuB97\u0026jB-OV*jV%]iw{4{4x(4P%wfK8xarV7tarUrdBrCpsqE%POv@#o)c[co=3lQDlaAz4nB-IvxBzbxfe]#byBAITEjV$}Jb64mfwN/*[wfK8xarV7tEf{r)CYmOwBAo64z!%l3v@#B6zxI7+lVl^SwN/*@z/dSzwQ5fjA==vPl$7gCrc-B]auZ\u0026nvrt{SD2NsR3t1E3z/P@ve\u003e{4)A::67z/cWXawDM.A::67z/dSzwQ5fjA==vPo\u003e!lXvruj4zGu{-awDM.A::67z/fRT3t1E3z/P@ve\u003e{m{wO-FLawD=+wO:BnwQ5fjA==vPp\u0026ZF\u003ex(^\u0026WvqYH^wPw[Raw^8%ze165o\u003c}{FxjV9B3t1E3z/P@ve(M\u003egA+cvRax9x2A+drtwQ5fjA==vPwmY^)w[u0]zEWl2jS[oDA+e\u0026]A+fb#wJHlgCYmOwBAo6Bx\u003ey%1jS[oHw[BaiwQ5fjA==vPx(=WNwPg7TBZY8ejS[DWl$G}Gmr9DUy=.#nCYmOwBAo6Kvq]mQy\u0026%rgauZ\u0026:vq]mQy\u0026%rgi%)R]boR5CB-H#6o\u003c@0Wx(mM-qCok/zE^s6e]2CWzddw\u003c", "ln": 12733, "col": 3, "line": 471 } ], "depth": 1, "facts": { "imp": [ [ "", "require" ], [ "", "JSON.stringify" ], [ "", "JSON.stringify" ], [ "", "mobx.observable.array" ], [ "", "mobx.makeObservable" ], [ "", "equals" ], [ "", "Math.max" ], [ "", "equals" ], [ "", "JSON.parse" ], [ "", "JSON.stringify" ], [ "", "Object.keys" ], [ "", "Object.keys" ], [ "", "keys2.includes" ], [ "", "isDeepEqual" ], [ "", "Object.prototype.hasOwnProperty.call" ], [ "", "mapper" ], [ "", "Error" ], [ "", "Set" ], [ "", "Object.keys" ], [ "", "Object.keys" ], [ "", "Set" ], [ "", "Object.keys" ], [ "", "Object.keys" ], [ "", "isDeepEqual" ], [ "", "HistoryManager" ], [ "", "Object.values.forEach" ], [ "", "Object.values" ], [ "", "Collection" ], [ "", "mobx.makeObservable" ], [ "", "mobx.reaction" ], [ "", "callback" ], [ "", "diff" ], [ "", "Object.values.forEach" ], [ "", "Object.values" ], [ "", "dereference" ], [ "", "mapValues" ], [ "", "model._collection.toJSON" ], [ "", "Error" ], [ "", "Object.entries.forEach" ], [ "", "Object.entries" ], [ "", "model._collection.loadJSON" ], [ "", "Error" ], [ "", "Object.entries.forEach" ], [ "", "Object.entries" ], [ "", "model._collection.loadPatch" ], [ "", "require" ], [ "", "mobx.makeObservable" ], [ "", "Object.entries" ], [ "", "mobx.keys.forEach" ], [ "", "mobx.keys" ], [ "", "Object.entries" ], [ "", "Object.fromEntries" ], [ "", "Object.entries.map" ], [ "", "Object.entries" ], [ "", "instance.toJSON" ], [ "", "mobx.makeObservable" ], [ "", "Object.values.filter" ], [ "", "Object.values" ], [ "", "Object.getPrototypeOf" ], [ "", "Error" ], [ "", "require" ], [ "", "DxDatabaseConnector" ], [ "", "db.queryDBConnect" ], [ "", "npm.install" ], [ "", "npm" ], [ "", "require" ], [ "", "DxDatabaseConnector" ], [ "", "db.queryDBConnect" ], [ "", "dereference" ], [ "", "mobx.runInAction" ], [ "", "child.getById" ], [ "", "mobx.values.filter" ], [ "", "mobx.values" ], [ "", "all.concat" ], [ "", "child.getAll" ], [ "", "migrations.sort" ], [ "", "migration.run" ], [ "", "Error" ], [ "", "mobx.makeObservable" ], [ "", "db-dx-connector" ], [ "", "mobx" ], [ "", "oubliette" ] ], "mbr": [ "JSON.parse", "JSON.stringify", "Math.max", "Object.entries", "Object.entries.forEach", "Object.entries.map", "Object.fromEntries", "Object.getPrototypeOf", "Object.keys", "Object.prototype", "Object.prototype.hasOwnProperty", "Object.prototype.hasOwnProperty.call", "Object.values", "Object.values.filter", "Object.values.forEach", "a.toVersion", "all.concat", "b.toVersion", "child.getAll", "child.getById", "current.schemaVersion", "data.data", "data.id", "data.schemaVersion", "db.queryDBConnect", "exports.Collection", "exports.DataType", "exports.Migration", "exports.Migrations", "exports.Model", "exports.PromiseManager", "exports.Store", "exports.dereference", "exports.diff", "exports.isDeepEqual", "exports.mapValues", "inst.isDeleted", "instance.isDeleted", "instance.toJSON", "keys1.length", "keys2.includes", "keys2.length", "migration.run", "migration.toVersion", "migrations.sort", "mobx.action", "mobx.computed", "mobx.keys", "mobx.keys.forEach", "mobx.makeObservable", "mobx.observable", "mobx.observable.array", "mobx.observable.ref", "mobx.observable.shallow", "mobx.reaction", "mobx.runInAction", "mobx.values", "mobx.values.filter", "model._collection", "model._collection.instances", "model._collection.loadJSON", "model._collection.loadPatch", "model._collection.toJSON", "model._store", "next.data", "next.schemaVersion", "npm.install", "params.models", "params.run", "params.schemaVersion", "params.toVersion", "patch.data", "patch.schemaVersion", "prev.data", "prev.schemaVersion", "snapshot.data", "snapshot.schemaVersion" ], "tgt": [ "Collection", "DxDatabaseConnector", "Error", "HistoryManager", "JSON.parse", "JSON.stringify", "Math.max", "Object.entries", "Object.entries.forEach", "Object.entries.map", "Object.fromEntries", "Object.getPrototypeOf", "Object.keys", "Object.prototype.hasOwnProperty.call", "Object.values", "Object.values.filter", "Object.values.forEach", "Set", "all.concat", "callback", "child.getAll", "child.getById", "db.queryDBConnect", "dereference", "diff", "equals", "instance.toJSON", "isDeepEqual", "keys2.includes", "mapValues", "mapper", "migration.run", "migrations.sort", "mobx.keys", "mobx.keys.forEach", "mobx.makeObservable", "mobx.observable.array", "mobx.reaction", "mobx.runInAction", "mobx.values", "mobx.values.filter", "model._collection.loadJSON", "model._collection.loadPatch", "model._collection.toJSON", "npm", "npm.install", "require" ], "funcs": [ [ "equals", 44 ], [ "constructor", 223 ], [ "activeItem", 783 ], [ "push", 908 ], [ "replace", 1360 ], [ "undo", 1618 ], [ "redo", 1729 ], [ "clear", 1869 ], [ "anonymous", 1957 ], [ "anonymous", 2035 ], [ "mapValues", 2487 ], [ "anonymous", 2713 ], [ "anonymous", 4053 ], [ "constructor", 4086 ], [ "commit", 4200 ], [ "undo", 4447 ], [ "redo", 4518 ], [ "clear", 4589 ], [ "items", 4662 ], [ "activeIndex", 4737 ], [ "activeItem", 4824 ], [ "anonymous", 4984 ], [ "anonymous", 5311 ], [ "anonymous", 5349 ], [ "sandbox", 5444 ], [ "anonymous", 5548 ], [ "anonymous", 5609 ], [ "reset", 5925 ], [ "anonymous", 5974 ], [ "toJSON", 6067 ], [ "anonymous", 6179 ], [ "loadJSON", 6233 ], [ "anonymous", 6494 ], [ "loadPatch", 6584 ], [ "anonymous", 6849 ], [ "constructor", 7009 ], [ "loadJSON", 7226 ], [ "anonymous", 7489 ], [ "loadPatch", 7579 ], [ "toJSON", 7898 ], [ "anonymous", 7981 ], [ "constructor", 8289 ], [ "id", 8612 ], [ "getClass", 8650 ], [ "_children", 8698 ], [ "anonymous", 8782 ], [ "idSelector", 8845 ], [ "assertStore", 8898 ], [ "resetor", 9091 ], [ "create", 9640 ], [ "anonymous", 9885 ], [ "getById", 10015 ], [ "getAll", 10392 ], [ "anonymous", 10540 ], [ "anonymous", 10624 ], [ "delete", 10717 ], [ "isDeleted", 10837 ], [ "isDetached", 11012 ], [ "toJSON", 11098 ], [ "loadJSON", 11130 ], [ "withType", 11151 ], [ "constructor", 11220 ], [ "run", 11315 ], [ "constructor", 11484 ], [ "anonymous", 11548 ], [ "run", 11592 ], [ "constructor", 11916 ], [ "anonymous", 12019 ], [ "setStatus", 12711 ], [ "isPending", 12763 ], [ "isFulfilled", 12825 ], [ "isRejected", 12891 ] ], "metrics": { "ast": { "op.eq": 14, "op.gt": 1, "op.lt": 4, "op.ne": 6, "op.add": 3, "op.lor": 8, "op.sub": 9, "op.land": 3, "op.lnot": 13, "max_depth": 19, "call_count": 117, "node_count": 4378, "op.coalesce": 2, "member_count": 77, "max_array_len": 2, "op_density.eq": 0, "op_density.gt": 0, "op_density.lt": 0, "op_density.ne": 0, "op_density.add": 0, "op_density.lor": 0, "op_density.sub": 0, "op_density.land": 0, "op_density.lnot": 0, "max_concat_chain": 2, "member_depth_max": 4, "op_density.coalesce": 0 }, "file": { "size": 13325, "entropy": 4.7 }, "text": { "lines": 495, "top_char": 101, "max_ws_run": 9, "digit_ratio": 0, "space_count": 2966, "char_entropy": 4.7, "unique_chars": 77, "top_char_null": 0, "string_density": 0.05, "top_char_ratio": 0.07, "avg_line_length": 25.92, "max_line_length": 113, "empty_line_ratio": 0.02, "last_line_length": 33, "whitespace_ratio": 0.26, "identifier_density": 1.57, "line_length_stddev": 19.27, "normalized_string_count": 1.08, "repeated_char_sequences": 12, "suspicious_comment_ratio": 0.06, "suspicious_identifier_ratio": 0.01, "normalized_unique_identifiers": 17.2 }, "binds": { "count": 52 }, "binary": { "peak_region_bytes": 12288, "peak_region_entropy": 4.89 }, "source": { "class_count": 7, "function_count": 35 }, "imports": { "count": 3, "third_party_count": 3, "third_party_ratio": 1 }, "strings": { "bytes": 492, "count": 24, "avg_length": 20.5, "max_length": 102, "avg_entropy": 2.89, "entropy_stddev": 0.55 }, "comments": { "chars": 653, "count": 18, "lines": 19, "base64": 1, "to_code_ratio": 0.04 }, "functions": { "count": 42, "nested": 13, "density": 14.55, "anonymous": 21, "avg_params": 0.69, "code_ratio": 1.06, "max_params": 2, "one_liners": 7, "length_stddev": 8.43, "avg_name_length": 7.59, "no_params_count": 29, "avg_length_lines": 7.31, "max_length_lines": 51, "min_length_lines": 1, "avg_nesting_depth": 0.33, "max_nesting_depth": 1, "single_char_params": 4, "avg_param_name_length": 6.16 }, "identifiers": { "count": 778, "unique": 154, "avg_length": 7.36, "max_length": 21, "min_length": 1, "avg_entropy": 2.44, "reuse_ratio": 0.2, "length_stddev": 3.49, "has_digit_ratio": 0.03, "sequential_names": 2, "single_char_count": 2, "single_char_ratio": 0.01, "high_entropy_count": 3, "high_entropy_ratio": 0.02, "all_lowercase_ratio": 0.6, "all_uppercase_ratio": 0.01, "numeric_suffix_count": 4, "underscore_prefix_count": 9 } } }, "id": 1, "mol": "O₃(S₃XeC)H₄(CmDb₆OsPo₂)Md(Pa)", "path": "db-xorma-1.0.5.tgz!!package/dist/index.js", "pid": 0, "risk": 273, "sha": "392b84c49a18b431b6f454c715a8f6b43e63f95d47b44b55dd70a85c8ed8c465", "size": 13325, "traits": [ { "id": "metadata/build/bundler/asset::has-sourcemap", "conf": 0.9, "crit": 2, "desc": "Code has source map reference", "spans": [ [ 13295, 0 ] ] }, { "id": "metadata/file/comment::source-comment-bytes-over-300", "conf": 0.92, "crit": 2, "desc": "Source has over 300 comment bytes" }, { "id": "metadata/lang/javascript-features::use-strict-directive", "conf": 0.6, "crit": 2, "desc": "Contains a JavaScript use strict directive", "spans": [ [ 1, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-1", "conf": 0.8, "crit": 1, "desc": "English function-word token \"the\"", "spans": [ [ 720, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-2", "conf": 0.8, "crit": 1, "desc": "English function-word token \"and\"", "spans": [ [ 875, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-5", "conf": 0.8, "crit": 1, "desc": "English function-word token \"for\"", "spans": [ [ 2336, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-7", "conf": 0.8, "crit": 1, "desc": "English function-word token \"this\"", "spans": [ [ 272, 0 ] ] }, { "id": "metadata/package/files/runtime::javascript-dist-tree-artifact", "conf": 0.95, "crit": 3, "desc": "JavaScript/TypeScript file under dist" }, { "id": "micro-behaviors/communications/http/device-code::pending-status-field", "conf": 0.93, "crit": 3, "desc": "Pending status field", "spans": [ [ 12797, 19 ] ] }, { "id": "micro-behaviors/data/control-flow/analysis::js-conditional-matcher-call", "conf": 0.88, "crit": 3, "desc": "Calls a matcher in a conditional expression", "spans": [ [ 2367, 20 ] ] }, { "id": "micro-behaviors/data/control-flow/error-handling::empty-catch-block", "conf": 0.9, "crit": 3, "desc": "JavaScript silently discards caught errors", "spans": [ [ 9624, 2 ] ] }, { "id": "micro-behaviors/data/control-flow/loop::js-object-key-in-loop", "conf": 0.9, "crit": 3, "desc": "JavaScript iterates enumerable object keys", "spans": [ [ 2544, 22 ] ] }, { "id": "micro-behaviors/data/control-flow/module-exec::js-synchronous-iife-close", "conf": 0.86, "crit": 3, "desc": "Calls a parenthesized function expression", "spans": [ [ 8268, 4 ] ] }, { "id": "micro-behaviors/data/serialize/envelope::result-assignment-key", "conf": 0.4, "crit": 1, "desc": "Result field or assignment key", "spans": [ [ 2529, 0 ] ] }, { "id": "micro-behaviors/data/serialize/json::json-stringify-identifier", "conf": 0.85, "crit": 3, "desc": "Serializes an identifier as JSON", "spans": [ [ 155, 14 ] ] }, { "id": "micro-behaviors/data/source/syntax/array::js-array-sort-call", "conf": 0.72, "crit": 3, "desc": "Sorts a JavaScript array", "spans": [ [ 11542, 6 ] ] }, { "id": "micro-behaviors/data/source/syntax/array::temporary-array-element-read", "conf": 0.8, "crit": 2, "desc": "Reads an array element into a variable", "spans": [ [ 3344, 0 ] ] }, { "id": "micro-behaviors/os/module/require::cjs-require-in-try", "conf": 0.9, "crit": 3, "desc": "CommonJS require inside a try block", "spans": [ [ 9114, 48 ] ] }, { "id": "micro-behaviors/process/create/spawn::stdio-ignore", "mbc": "F0005", "conf": 0.85, "crit": 3, "desc": "Spawns a child with standard I/O ignored", "spans": [ [ 8177, 15 ] ] }, { "id": "micro-behaviors/process/create/spawn::windowshide-option", "conf": 0.85, "crit": 3, "desc": "Node.js windowsHide spawn option", "spans": [ [ 8205, 17 ] ] }, { "id": "objectives/command-and-control/dropper/delivery/fetch-eval::json-cookie-hidden-stage-options", "atk": "T1105", "mbc": "E1105.016", "conf": 0.97, "crit": 3, "desc": "JSON cookie contains hidden stage", "spans": [ [ 8205, 11 ] ] }, { "id": "objectives/execution/autoinstall/package::npm-install-command-text", "atk": "T1059.007", "conf": 0.9, "crit": 3, "desc": "npm install command string for a package", "spans": [ [ 8140, 21 ] ] }, { "id": "objectives/supply-chain/hidden-payload/exec::node-db-connectivity-probe", "conf": 0.95, "crit": 3, "desc": "Node invokes database connectivity probe", "spans": [ [ 9234, 19 ] ] }, { "id": "objectives/supply-chain/install-hook/scripts/dynamic-install::api-install-package-call", "atk": "T1195.002", "conf": 0.85, "crit": 3, "desc": "Programmatic package install API call", "spans": [ [ 9300, 29 ] ] }, { "id": "objectives/supply-chain/install-hook/scripts/dynamic-install::install-opt-no-progress-prop", "atk": "T1195.002", "conf": 0.86, "crit": 3, "desc": "Install option hides progress output", "spans": [ [ 9398, 19 ] ] }, { "id": "objectives/supply-chain/install-hook/scripts/dynamic-install::install-opt-no-save-prop", "atk": "T1195.002", "conf": 0.9, "crit": 3, "desc": "Install option no-save hides from manifest", "spans": [ [ 9371, 15 ] ] }, { "id": "objectives/supply-chain/install-hook/scripts/dynamic-install::install-opt-no-warnings-prop", "atk": "T1195.002", "conf": 0.88, "crit": 3, "desc": "Install option suppresses warnings", "spans": [ [ 9340, 19 ] ] }, { "id": "objectives/supply-chain/install-hook/scripts/dynamic-install::install-opt-silent-loglevel-prop", "atk": "T1195.002", "conf": 0.9, "crit": 3, "desc": "Install option silences npm log output", "spans": [ [ 9429, 18 ] ] }, { "id": "objectives/supply-chain/install-hook/scripts/dynamic-install::npm-invoked-as-function", "atk": "T1195.002", "conf": 0.8, "crit": 3, "desc": "npm called as a programmatic function", "spans": [ [ 9295, 6 ] ] }, { "id": "objectives/supply-chain/install-hook/scripts/dynamic-install::pkg-install-in-catch", "atk": "T1195.002", "conf": 0.88, "crit": 3, "desc": "Package install inside catch handler", "spans": [ [ 9261, 48 ] ] }, { "id": "objectives/supply-chain/install-hook/scripts/dynamic-install::pkgmgr-aliased-as-npm", "atk": "T1036", "conf": 0.85, "crit": 3, "desc": "Third-party import aliased as npm", "spans": [ [ 6947, 26 ] ] }, { "id": "metadata/lang/javascript-features::cjs-exports-pattern", "conf": 0.6, "crit": 3, "desc": "Defines CommonJS named exports", "spans": [ [ 12955, 21 ] ] }, { "id": "micro-behaviors/data/control-flow/error-handling::empty-named-catch-text", "conf": 0.92, "crit": 3, "desc": "Text has empty named-parameter catch", "spans": [ [ 8246, 16 ] ] }, { "id": "micro-behaviors/process/create/shell/build::npm-install-command", "atk": "T1059", "conf": 0.82, "crit": 3, "desc": "npm package install command", "spans": [ [ 8140, 13 ] ] }, { "id": "micro-behaviors/process/create/shell/build::npm-named-package-install-command", "atk": "T1059", "conf": 0.82, "crit": 3, "desc": "npm named package install command", "spans": [ [ 8140, 16 ] ] }, { "id": "objectives/supply-chain/impersonation/package-manager::npm-api-impersonation-install", "atk": "T1036,T1195.002", "mbc": "B0024", "conf": 0.95, "crit": 5, "desc": "Disguised npm-aliased runtime installer", "uses": [ 23, 30 ], "spans": [ [ 6947, 26 ], [ 9300, 29 ] ] }, { "id": "objectives/supply-chain/install-hook/scripts/dynamic-install::require-failure-covert-dropper", "atk": "T1195.002,T1059.007", "mbc": "B0024", "conf": 0.95, "crit": 5, "desc": "Installs missing package on require failure", "uses": [ 24, 25, 26, 27, 29 ], "spans": [ [ 9261, 48 ], [ 9340, 19 ] ] }, { "id": "objectives/supply-chain/install-hook/scripts/dynamic-install::runtime-api-stealth-install", "atk": "T1195.002,T1059.007", "mbc": "B0024", "conf": 0.96, "crit": 5, "desc": "Covert runtime package install via API", "uses": [ 23, 24, 25, 26, 27 ], "spans": [ [ 9300, 29 ], [ 9340, 19 ], [ 9371, 15 ] ] }, { "id": "objectives/execution/autoinstall/package::js-npm-install-invocation", "atk": "T1059.007", "conf": 0.85, "crit": 4, "desc": "JavaScript runs npm install for a package", "uses": [ 18, 19, 21 ], "spans": [ [ 8140, 21 ], [ 8177, 15 ] ] } ], "type": "javascript" }, { "ctx": [ { "b": "DJ", "ln": 1, "addr": 0 }, { "b": "arR\u003eCvqPN1iV]RSvL8?yA=2keec", "ln": 2, "addr": 2 }, { "b": "arR\u003eKwPz\u003caz/c:War\u0026J)fFkjbec", "ln": 3, "addr": 24 }, { "b": "arR\u003eswPIv4x(Ffdz/c:War\u00260X", "ln": 4, "addr": 46 }, { "b": "arR\u003eBvqfQ6iV]RSx(!wHx(mD)CRi-La$J", "ln": 5, "addr": 67 }, { "b": "arR\u003eBz!a0bwG\u003ceTb4LzeBt4uCwmZ0rzeaboec", "ln": 6, "addr": 94 }, { "b": "arR\u003eID2NFnxlbmTar\u003eugB966HzE^s6e[uORB0rd", "ln": 7, "addr": 124 }, { "b": "arR\u003eHv@=p5BAnS!aBs", "ln": 8, "addr": 156 }, { "b": "arR^Hb4Lndb03?\u003cA=k=gB-nDPv\u003c0uPCvtP6xD!#", "ln": 9, "addr": 171 }, { "b": "arR^Hb4tXey?a.Jar\u003e\u0026Ay\u00261lkat47Eec", "ln": 10, "addr": 203 }, { "b": "arR^Hb6myqBrS:*b4Um$zY\u0026pemriA!AYLsXzY\u003cdkB95KCAaJJ[w[+*!tP$pqclM(Ax(\u003eELa]", "ln": 11, "addr": 229 }, { "b": "arV7-", "ln": 12, "addr": 287 }, { "b": "arR\u003eux(4v4b03\u0026J", "ln": 13, "addr": 292 }, { "b": "arR^Hb4LzeBrSm", "ln": 14, "addr": 305 }, { "b": "arR^Hb2Q\u0026}l}{95zdB*", "ln": 15, "addr": 317 }, { "b": "arR\u003epB-.qnAW0K!b0*u)BzkRno\u003c}\u003cHA:\u0026D3ec", "ln": 17, "addr": 338 }, { "b": "arR\u003eAx\u003e7Z(B7DKRar\u003cJKr3A\u003c", "ln": 18, "addr": 368 }, { "b": "arR\u003eswPhi#wmYT*x\u003equfiV@+", "ln": 19, "addr": 388 }, { "b": "arR^Hb5.Qky?WE5By=TSar\u003ebDe?![ka$J", "ln": 20, "addr": 408 }, { "b": "arR^Hb5ImcCP]f\u003eb3)eWf/7Bta]", "ln": 21, "addr": 435 }, { "b": "arV7-", "ln": 22, "addr": 457 }, { "b": "arR\u003eswP*EMAaJ]$wO#0(wPG4RaBs", "ln": 23, "addr": 462 }, { "b": "arR^Hb4U?8B.LV5b03?\u003cun9#!g+HKcec", "ln": 24, "addr": 485 }, { "b": "arR^Hb64Qry\u0026%XviV]RMg+HKze?[L3", "ln": 25, "addr": 511 }, { "b": "arR^Hb64Qry\u0026%XGAboVfx(kIlB7foay?a.Jar\u003ebIe?[$ka]", "ln": 27, "addr": 571 }, { "b": "arV7-", "ln": 28, "addr": 609 }, { "b": "arR\u003eEwO2)IwPhi#wmYT*x\u003equfiV@+", "ln": 29, "addr": 614 }, { "b": "arR^Hb5ImcCP]f\u003eb3)eWfFk46", "ln": 30, "addr": 638 }, { "b": "arV7", "ln": 31, "addr": 659 } ], "depth": 1, "facts": { "imp": [ [ "^1.0.2", "oubliette" ], [ "^6.13.5", "mobx" ], [ "^6.1.1", "rollup-plugin-dts" ], [ "^4.29.1", "rollup" ], [ "^6.1.1", "rollup-plugin-esbuild" ], [ "^0.24.2", "esbuild" ], [ "^6.0.0", "mobx" ] ], "metrics": { "file": { "size": 665.0, "entropy": 4.64, "size_bytes": 665.0 }, "binary": { "overall_entropy": 4.64 } } }, "id": 2, "mol": "O(S)Md(Pa₂)", "path": "db-xorma-1.0.5.tgz!!package/package.json", "refs": [ { "to": "pkg:npm/oubliette", "off": 413, "kind": "dependency" }, { "to": "pkg:npm/mobx", "off": 440, "kind": "dependency" } ], "risk": 3, "sha": "021f2cd5e54484a26f8d8101d6a178dbe06be729c2aa25e9b038bd03b86c7b57", "size": 665, "traits": [ { "id": "metadata/package/scripts::has-test-script", "conf": 1.0, "crit": 1, "desc": "package defines test script" }, { "id": "metadata/package/manifest/entrypoint::pkg-module-field", "conf": 0.6000000238418579, "crit": 2, "desc": "\"module\": field in package.json" }, { "id": "metadata/package/versioning::npm-has-version", "conf": 1.0, "crit": 2, "desc": "npm package has version field" }, { "id": "metadata/package/scripts::pkg-dev-script-field", "conf": 0.6000000238418579, "crit": 3, "desc": "\"dev\": script in package.json" }, { "id": "metadata/package/quality/empty::npm-empty-description", "atk": "T1195.002", "conf": 0.8500000238418579, "crit": 3, "desc": "npm package has empty description" }, { "id": "objectives/supply-chain/impersonation/manifest/skeleton::pkg-no-description-short", "conf": 0.699999988079071, "crit": 3, "desc": "Very short/empty description" }, { "id": "metadata/package/quality/empty::npm-has-name", "conf": 1.0, "crit": 2, "desc": "npm package has name field" }, { "id": "metadata/package/scripts::pkg-build-script-field", "conf": 0.6000000238418579, "crit": 3, "desc": "\"build\": script in package.json" }, { "id": "metadata/package/versioning::mature-version", "conf": 0.699999988079071, "crit": 3, "desc": "Major version is 1 or higher" }, { "id": "metadata/package/quality/empty::npm-empty-description-any", "atk": "T1195.002", "conf": 0.8500000238418579, "crit": 3, "desc": "npm package has empty or missing description" } ], "type": "package.json" }, { "ctx": [ { "b": "DM)SAA=U@kzx.a$efXXuy?j!Kb57}9wQ2?Ayi7NIb6dWBA:@W4b05{Le?O!\u003cx(!xmA^ooVB0rdVe?O/1BzkMje{8dUefVY0fjO{vwIe7Ca$K]\u003ce?.6Qxl4B5x(v)ge{8dUefVY0fjw{EzEUqvB0s)vb6dWBA:@W4lVl\u003c:wO#Pli:i!xze:AlBrC{nzxH6gv@#B6zy/4garUfjze:StwN)t%zxH6svqxBIvSMa3C41\u0026@wH}87arUPiB7GxnvpB4:el)6naAR)FwGTMuvSMa3C41\u0026@wKguSvr\u003czezHATtA=k!qtQ136vT8c4j6VVdzF13ev@#B6zxJIgBZY9cjxaG)vlbJgefFy.axfFhaA.NjwObT]wN)kJayYncy?m3)aBvvharUxgasHUvjV$}JvKSBuwPS6nzxK4wB.9TtzxH6ow/@Hgau.\u003eJaA.NjwObT]wN({hD(#(vjV$}JB-7-3w[=c]wgnTwwPS6nzxJL1y\u0026:eHtY7VbA+funA=90(q+{dvB98CpzF9V}C{)8Iau.\u003eJawbNdpa*QfA+PA7x\u003ezSsvKTxzzHC=ctYaa$AbP=say/j@B8@D{x(!xmA^pw/zEEf?AY={nwO\u0026LMayPekj%khSzxH5PdK(MuxK@rdx(dA$x(mG8x([Acy?s!rz^)^0A=$(2y?kduB7!##y\u0026sIDe*8R%tY7VbA+eV\u0026z/fxpazC}ezf4-XnL-/pwPz%5vR/QwA=LPljv%Taz9y3^zxH5PdK(MjzE^s6aA7\u003cmBzbkdvpKy[C4z!czGG]Aj0rKkKUE$}wNPE$aMv{wzF{UezGG]AaBdKu\u0026^^NLasY3HzxH6gv@#BdwL3=IwQ3lUzGP/9wPx\u003eqzxH5PdK(Mnvr=H6B.@msB.$P0AV/pjaAE", "ln": 0, "col": 1, "line": 1 }, { "b": "zGx[xv%8*jwO#PUCX7xcBzkVhlVm9+BrAZ?Bzbxfe[Gosv%8)cz/d{XB-8pzd\u003ccMdtY7VbarU=tx(+[rCX7xcBzkVhlVm9+BrAZ?v%8*jwO#PUCX7xcBzkVhlVm9+", "ln": 19219, "col": 19220, "line": 1 } ], "depth": 1, "facts": { "metrics": { "file": { "size": 33181, "entropy": 4.88 }, "binary": { "peak_region_bytes": 16384, "peak_region_entropy": 4.98 } } }, "id": 3, "mol": "Md₂(Pa)", "path": "db-xorma-1.0.5.tgz!!package/dist/index.mjs.map", "pid": 0, "risk": 2, "sha": "07509d758c5d2378fccf526a52fc0f9294ac0e405f5633e49bf9927a03b2392b", "size": 33181, "supp": [ { "by": [ { "id": "metadata/file/format/source-map::sourcemap-sources-content", "spans": [ [ 120, 18 ] ] } ], "id": "metadata/file/entropy::opaque-data-peak-region-over-8k", "crit": "notable", "kind": "unless" }, { "by": [ { "id": "metadata/file/format/source-map::sourcemap", "spans": [ [ 0, 19 ] ] } ], "id": "metadata/file/format/source-map::sourcemap-raw-signature", "crit": "notable", "kind": "unless" }, { "by": [ { "id": "metadata/file/format/source-map::sourcemap-typescript-sources", "spans": [ [ 0, 118 ] ] } ], "id": "metadata/file/format/source-map::sourcemap-typescript-sources-raw", "crit": "notable", "kind": "unless" } ], "traits": [ { "id": "metadata/file/format/source-map::sourcemap", "conf": 1.0, "crit": 3, "desc": "JavaScript source map", "spans": [ [ 0, 19 ] ] }, { "id": "metadata/file/format/source-map::sourcemap-sources-content", "conf": 0.9, "crit": 3, "desc": "Source map sourcesContent array", "spans": [ [ 120, 18 ] ] }, { "id": "metadata/file/format/source-map::sourcemap-typescript-sources", "conf": 0.9, "crit": 3, "desc": "Source map of TypeScript sources", "spans": [ [ 0, 118 ] ] }, { "id": "metadata/package/files/runtime::embeds-mobx-history-manager-class", "conf": 0.93, "crit": 3, "desc": "Embeds mobx HistoryManager class source", "spans": [ [ 450, 27 ] ] }, { "id": "metadata/lang/natural/vocabulary/function-word::lang-english--atom-1", "conf": 0.8, "crit": 1, "desc": "English function-word token \"the\"", "spans": [ [ 499, 0 ] ] } ], "type": "data" }, { "ctx": [ { "b": "DM)SAA=U@kzx.a$efXXuy?j!Kb57}9wQ2?xB0rdVB8Mhwv}xZ9i:i^Xe?Z)LB98tvC}KhWa$K]\u003ce?.u?x(4\u0026yBAnSSa$+G3v@Dy0e{8dUefVY0fkUAoA::67z/fRGBAnSSa$+G3vrlZiv\u003eI\u003eAb3=-zB8Mhwv}xZGz/fVdzGE6-toW=#AbP=saBvvharU95BzkVhel)6nay/tbAclnlwgQ#6arUJfyH{pJB7GxnvpB4:el)6naA7.gwPz%5vR/QbtY7VbBA}?paw2vrB7GxnvpB4:l2}0OC}rirEircxz/3R4b5ImcCW8BOtY9!:w{503BzkVhaz2LnvqH0Er6zZsiV}xMayWwOr3lMhB-7-3w[=c]wgoLZvScg3wNPE0DT7ChazCBgc$akYjV%]%diJUxBAIRwaARTDwJKdmarUxgasHUvjV$}JB-7-3w[=c]wfunEayVDRjV%{gzE^r\u003cx(mG)diJUxBAIRwazb4#B7EBrzxH6xwPS6nzxILIpFJJ-BAh8kxk7$6c$aLEjV$}Jn(FIXe]#bPx(mM$w{C!ldly^LEoZU{zE[6iz/P}xv@bN{B0a1/B98tvC$?Z+vp%d(jv%Taz6g$:vqZuOaBvvharSr!dJ?Y7wGV8ezdNJ$zE\u003c@8BAq2fw/@HuvSMa3C41\u0026@wH[%BxKLZ[z*9S.asY3HzxH6xwNPa/zFTOvx(){6B2\u003eBnpHXxRA=$(2y?k[MA::kQnPXJXk091!arSr!dJ?r2wmZ0dz!pblxK@q{v@#BdwGUM4BAhT*aMv{lf^7sAvqZce\u0026^^LpzY\u0026ReBAhTHD1z9SFsOqndLC4AarU95Bzk]fnP56ICSD%+B.$P0AYWJzarSr!dJ?C]CXI2qz6i.szdm6%aA7\u003cmA@", "ln": 0, "col": 1, "line": 1 }, { "b": "zGx[xv%8*jwO#PUCX7xcBzkVhlVm9+BrAZ?Bzbxfe[Gosv%8)cz/d{XB-8pzd\u003ccMdtY7VbarU=tx(+[rCX7xcBzkVhlVm9+BrAZ?v%8*jwO#PUCX7xcBzkVhlVm9+", "ln": 19218, "col": 19219, "line": 1 } ], "depth": 1, "facts": { "metrics": { "file": { "size": 33320, "entropy": 4.88 }, "binary": { "peak_region_bytes": 16384, "peak_region_entropy": 4.98 } } }, "id": 4, "mol": "O(As)Md", "path": "db-xorma-1.0.5.tgz!!package/dist/index.js.map", "pid": 0, "risk": 2, "sha": "c9f057d576cccd89cfe3227a6c0e0afa040f4ed9ff06d07b5246cece8256050a", "size": 33320, "traits": [ { "id": "metadata/lang/natural::lang-english--atom-1", "conf": 0.8, "crit": 1, "desc": "English function-word token \"the\"", "spans": [ [ 498, 0 ] ] }, { "id": "metadata/file/format/structured::sourcemap", "conf": 1.0, "crit": 3, "desc": "JavaScript source map", "spans": [ [ 0, 19 ] ] }, { "id": "metadata/file/format/structured::sourcemap-sources-content", "conf": 0.9, "crit": 3, "desc": "Source map sourcesContent array", "spans": [ [ 119, 18 ] ] }, { "id": "objectives/anti-static/obfuscation/payload/container::source-map-extension", "atk": "T1027.003", "mbc": "B0032", "conf": 1.0, "crit": 3, "desc": "Source map file extension" } ], "type": "data" }, { "ctx": [ { "b": "x(d*cA=-ANayPslzeS)dazbUjz6giyz^)@si%(sezGGDgw)]gXax9x2A+dTEByvp1vrt{2wQ5rdzE^/hqE%uRA+4pNBAh8kxdLf6wN/U0wis{PA+PA7efF\u003euygQ)%k0zdMDKp(rarU-nxK#3?r+lq)x(v(Iaz#ssvR6Nw3lQDlay[]5vlbJ0vrt{t3vJm}zGGDgw)]gXax9x2A+e6QByO#bDKp(rarU-nxK#3?r+lq)x(v(Iaz#ssvR6Nw3lQDlay[]5vlbJewN/U0wis{PA+PA7efE\u00264v@Dx#jACQ+x(mMmaA7.7wN/*8D)0rHy?#p0i%{xywmYm!vrb]", "ln": 0, "col": 1, "line": 1 }, { "b": "diH=qazC.9wPw[\u003ei%)8MarV7]3vK3Yaw%syaA.NqzF%-pi%)R\u003cdHEpFatLw*ra]?=BA}?paA7\u003cmBzbkdb64mpD2Nt9a%pxivrlGjCv.[fwPP5bA=k!qv0usbxJfm@wJS.0Csk\u003eYvlM7*u[I^edHEpFarR^HeG!baawV\u0026*Brz@Px([2/D2NsxefDq", "ln": 578, "col": 18, "line": 18 }, { "b": "aARpdayX=2wGUG0vrlF%asXGRarR^HB8JgBwGUF\u003ezxJ\u003evwPz*9wmV)9xK#36CwhejaA8yyaz$+maAImfzEETfA+fqA3lQ/varR^Uaxi2=ay/tcB98CBv@#TfaBdWjy?dPfvqWi4zGx]dzEWl2Bzb98az\u003eXgxjVcbBzbkdvQTs?ay/j@B8@ErzGx]dzEWk+asXGRarR^HCwhejayPekaz\u003eXixM4A7z*2YjA+P5}B0bWray]4}x(mGm3lQ/K3uQMjwGT(ZBA}?pwkc#M", "ln": 758, "col": 63, "line": 24 }, { "b": "i%)8MarUfmwNPW(jv%BiByx5%wGUMeBy/u2B0a4(B97\u0026dv}wR+AaIc#lQ0WZBzbxfiV{!dzGx]uBZ]JiA-vs6wJSL4B97\u0026dv}v?Pay[]5vlbJawP{KJByuQVaw3D(Byx5%wJHkwarR!twPQm:nN%}PzGx]dzEWl2wQ5rdzE^/hnP5P\u003evqYN^rc-B]", "ln": 1235, "col": 6, "line": 33 }, { "b": "B98CBv@#Tfrc-B]jv%BiByx5%wJ?T/x\u003efmEB98CpzF7yVaw3D(Byx5%wGVvyB-7-3w[=c]wigbvarR!twPQjOy=\u003epbB97\u0026dv}u=]CYWImwoe\u003e+zGx]dzEWlSD2NsSlpi}2d0fcpB2\u003eBhz/fSrA=\u003e(lz/O*5AaId6zGx]dzEWlwefF\u003eIBzkVhB3zYdm}D^dyY", "ln": 1398, "col": 57, "line": 35 }, { "b": "u[MUqBzaT0AaHBDu)6x9aARpdaz$+my\u003cvdzwPSipwN(][y*?ya3lQDlarScRvqYP#xjVfcvqZ19xK#ibA+furAaJM5v@bN{B0byzBs)[yarR^HdLzbKarR!Jx([2/D2NsSl2HQ.xK#iVwP{KJByuq6CYWImwoe\u003eYwObv[y\u0026\u00266NByupPavG^MvrDw", "ln": 1653, "col": 35, "line": 39 }, { "b": "auZ\u0026]3lQDlax%7KaAITBx(mMaD)0rHzdm6%aBCqMD2m2ey*x7AvqZuL3vK#yx(n37A+n-\u0026wGT][z/Pz=vrb^[B39fnwmYN#az2!twO#41aw#=Xz/PwJB98CpzF7HyqE%@}AaJMOz!9A}lU{gLB3aL\u0026AaJ%1awD=+wO-[uvqZuOk0y9o3lQDlaAI4awO\u003e\u003cRwPz\u003caz/d^2az#ssvG", "ln": 2149, "col": 17, "line": 49 }, { "b": "Bz(hhl$7gCauZ\u0026BwN/U0wis{PA+PA7efE\u00264v@Dx#jACQ+x(mMmayPekk0z4nx(n37A+n-\u0026wGTYYxl4B5x(v(=vrb^[B0b/parR^HBz\u003eh\u003eA=U@kzAn[TB.$P0AYTQJarR!EB-6k.c$D+dvlbI%zH2f5z/PzSvrt{bau.[hl2H%DBz(hhl$7gCi%{xywmYm!vrb{4v@bN{B0ag\u003exl4B5x-", "ln": 5338, "col": 10, "line": 129 }, { "b": "A=k/eB7F6OzEEf?AY^qzwQ5rdzE^/hc[Wb8vrc14iV}\u003cGD0sM6au.[hp\u0026ZF\u003ex(^\u0026FvqZuOj%kgVarR^HB97\u0026jB-PO^b57O7wG\u0026mAar\u003e=ozE^E0xcFECar\u003eAuy?vx$y?mc3aBCpQA+e#%v@#o)b0cbOarR!rCX7xcBzkVhlVm9+BugKZB.$P0AYTQJarR!nB9RUkmS\u0026PUBzkVhiV}x-3lQDlay/tcB98CBv@#Tfc$dgxzEVdUzEW^5z/dPUr4f)oarR^HB7GC(ByxolA@", "ln": 6191, "col": 16, "line": 154 } ], "depth": 1, "facts": { "imp": [ [ "", "mobx" ] ], "metrics": { "ast": { "max_depth": 23, "call_count": 0, "node_count": 2364 }, "file": { "size": 6967, "entropy": 4.95 }, "text": { "lines": 166, "top_char": 101, "max_ws_run": 6, "digit_ratio": 0, "space_count": 1137, "char_entropy": 4.95, "unique_chars": 72, "top_char_null": 0, "lines_over_200": 2, "string_density": 0.25, "top_char_ratio": 0.08, "avg_line_length": 40.97, "max_line_length": 325, "empty_line_ratio": 0.03, "last_line_length": 325, "whitespace_ratio": 0.19, "identifier_density": 2.36, "line_length_stddev": 42.21, "normalized_string_count": 3.26, "repeated_char_sequences": 5, "suspicious_identifier_ratio": 0.04, "normalized_unique_identifiers": 15.86 }, "binary": { "peak_region_bytes": 6967, "peak_region_entropy": 4.93 }, "source": { "class_count": 10 }, "imports": { "count": 1, "third_party_count": 1, "third_party_ratio": 1 }, "strings": { "bytes": 261, "count": 42, "avg_length": 6.21, "max_length": 9, "avg_entropy": 2.52, "entropy_stddev": 0.18 }, "comments": { "chars": 619, "count": 3, "lines": 15, "to_code_ratio": 0.1 }, "functions": { "count": 10 }, "identifiers": { "count": 391, "unique": 117, "avg_length": 7.9, "max_length": 17, "min_length": 1, "avg_entropy": 2.49, "reuse_ratio": 0.3, "length_stddev": 3.71, "has_digit_ratio": 0.02, "sequential_names": 5, "single_char_count": 5, "single_char_ratio": 0.04, "high_entropy_count": 4, "high_entropy_ratio": 0.03, "all_lowercase_ratio": 0.41, "all_uppercase_ratio": 0.04, "numeric_suffix_count": 2, "underscore_prefix_count": 9 } } }, "id": 5, "mol": "H(Cm)Md(Pa)", "path": "db-xorma-1.0.5.tgz!!package/dist/index.d.ts", "pid": 0, "risk": 3, "sha": "d4b955125b610d3ed69b948eef30301e1561b855eb642fa865a8dc08596f396a", "size": 6967, "traits": [ { "id": "metadata/file/extension/identity::declaration-file-extension", "conf": 1.0, "crit": 2, "desc": "File uses a source declaration extension" }, { "id": "metadata/lang/natural::lang-english--atom-1", "conf": 0.8, "crit": 1, "desc": "English function-word token \"the\"", "spans": [ [ 626, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-2", "conf": 0.8, "crit": 1, "desc": "English function-word token \"and\"", "spans": [ [ 1701, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-3", "conf": 0.8, "crit": 1, "desc": "English function-word token \"that\"", "spans": [ [ 874, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-6", "conf": 0.8, "crit": 1, "desc": "English function-word token \"with\"", "spans": [ [ 806, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-7", "conf": 0.8, "crit": 1, "desc": "English function-word token \"this\"", "spans": [ [ 1283, 0 ] ] }, { "id": "metadata/lang/scripted::dts-declaration-file", "conf": 0.99, "crit": 2, "desc": "TypeScript declaration file" }, { "id": "metadata/package/files/runtime::javascript-dist-tree-artifact", "conf": 0.95, "crit": 3, "desc": "JavaScript/TypeScript file under dist" }, { "id": "micro-behaviors/communications/http/device-code::pending-status-field", "conf": 0.93, "crit": 3, "desc": "Pending status field", "spans": [ [ 6255, 25 ] ] }, { "id": "metadata/package/testing/presence/harness::test-or-declaration-file", "conf": 0.85, "crit": 1, "desc": "File is a test or type-declaration source file", "uses": [ 0 ] } ], "type": "javascript" }, { "id": 6, "sha": "8c95d0d56eac2326370d1228958686c6741359795bfccb919042545da12a2713", "path": "db-xorma-1.0.5.tgz!!package/dist/index.mjs", "risk": 2, "size": 12169, "type": "javascript", "depth": 1 }, { "id": 7, "sha": "12a5ce1c0263093778572d2a1e2620d004c364f8be9e359e2c1a1a1b8207f864", "path": "db-xorma-1.0.5.tgz!!package/README.md", "size": 177, "type": "markdown", "depth": 1 } ], "omitted_files": 2, "rev": "1f35f", "v": "8" } }