{ "llm": { "conf": 0.5974897, "grade": "benign", "model": "Qwen/Qwen3.6-27B", "review": false, "outcome": "benign", "interpretation": "Legitimate Haskell package files" }, "ml": { "v": "7", "eng": "2.2.0-rc.1", "lvl": -1, "conf": 0, "mods": [ { "cls": 0, "raw": 0.42498535, "rte": "az", "prob": 0.42498535 } ], "prob": 0.42498535, "skip": [ { "rte": "az/tar", "why": "unavailable" }, { "rte": "az/tar", "why": "unavailable" } ], "files": [ { "id": 0, "lvl": -1, "conf": 0, "prob": 0.4249853491783142, "type": "pkg_arch" }, { "id": 1, "lvl": -1, "conf": 0, "prob": 0.018809348344802856, "type": "elf" }, { "id": 2, "lvl": -1, "conf": 0, "prob": 0.0023692846298217773, "type": "text" }, { "id": 3, "lvl": -1, "conf": 0, "prob": 0.013277977705001831, "type": "shell" }, { "id": 4, "lvl": -1, "conf": 0, "prob": 0.014879584312438965, "type": "shell" }, { "id": 5, "lvl": -1, "conf": 0, "prob": 0.15302082896232605, "type": "text" }, { "id": 6, "lvl": -1, "conf": 0, "prob": 0.00012001395225524902, "type": "text" }, { "id": 7, "lvl": -1, "conf": 0, "prob": 0.000034481287002563477, "type": "text" } ], "version": "v18.18", "analyzed_at": "2026-07-01T20:32:57Z" }, "path": "haskell-hls-floskell-plugin-2.3.0.0-84-x86_64.pkg.tar.zst", "raw": { "files": [ { "id": 0, "ctx": [ { "b": "d77-b1BdN\u00260gEAE5f@w)NG\u003eNEe{f63QS#b=A6TWN=CXmP:$K\u0026RK:vSzhgMxRBoAfR00i2#-Uio/ME2$OmN!njd3D\u003eF)b\u003cm}9FL4V3JmQaGI.}e5=", "n": [ { "c": 2, "d": "Binary is not digitally signed", "i": "metadata/unsigned", "o": 0, "z": 1, "cf": 1.0 } ], "ln": 0 } ], "mol": "Md(He)", "sha": "5519b9daed2f41e2a4d40df943fc20880e50cd639b32d8cdb0a402265c48ec96", "path": "haskell-hls-floskell-plugin-2.3.0.0-84-x86_64.pkg.tar.zst", "risk": 2, "size": 28328, "type": "pkg_arch", "facts": { "metrics": { "file": { "size": 28328.0, "entropy": 7.99, "size_bytes": 28328.0 }, "parse": { "error_count": 1.0 }, "binary": { "overall_entropy": 7.99, "peak_region_bytes": 28328.0, "peak_region_entropy": 7.84 } } }, "traits": [ { "id": "metadata/package/files/system-package::arch-package-arch-field", "conf": 0.8999999761581421, "crit": 1, "desc": "Arch package architecture field", "from": [ { "file": 5 } ] }, { "id": "micro-behaviors/dylib/library/libc::libc-internal-functions-b", "conf": 0.699999988079071, "crit": 2, "desc": "libc internal symbols cluster B", "from": [ { "file": 1 } ] }, { "id": "metadata/package/files/system-package::arch-pkgname-field", "conf": 0.9399999976158142, "crit": 1, "desc": "Arch pkgname metadata field", "from": [ { "file": 5 } ] }, { "id": "micro-behaviors/os/env/vars/access::path-env-var-direct", "crit": 1, "desc": "Direct PATH assignment (PATH= or PATH+=)", "from": [ { "file": 3 } ] }, { "id": "metadata/hardening/missing::stripped-binary", "conf": 0.800000011920929, "crit": 3, "desc": "No full symbol table (likely stripped)", "from": [ { "file": 1 } ] }, { "id": "metadata/package/files/system-package::arch-makepkg-generated", "conf": 0.9599999785423279, "crit": 1, "desc": "Arch makepkg generated metadata", "from": [ { "file": 5 } ] }, { "id": "micro-behaviors/dylib/library/libc::libc-characteristic-cxa-finalize", "crit": 2, "desc": "libc characteristic cxa finalize", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/dylib/library/abi-graphics::cxx-abi-symbols-a", "conf": 0.800000011920929, "crit": 2, "desc": "C++ ABI symbols cluster A", "from": [ { "file": 1 } ] }, { "id": "metadata/file/extension/identity::shell-a", "conf": 1.0, "crit": 2, "desc": "POSIX shell script extension", "from": [ { "file": 3 } ] }, { "id": "metadata/package/files/system-package::arch-pkgver-field", "conf": 0.9399999976158142, "crit": 1, "desc": "Arch pkgver metadata field", "from": [ { "file": 5 } ] } ] }, { "ctx": [ { "b": "E))420S-r400000000000@$H+0rr910000000000kMy=:00000Ae1t)0000000000kMA+z2()i\u003c9SNhX1][S61onA4kMy=:00000kMy=:00000kMy=:00000{Ygu{00000{Ygu", "n": [ { "c": 3, "d": "Patterns associated with legitimate injectors to reduce FPs", "i": "objectives/evasion/process/injection/toolkit::legitimate-injector-patterns", "o": 0, "z": 21, "cf": 1.0 } ], "ln": 0 }, { "b": "Acc2suT[1(uUKy\u0026zVBcKv%zA?w[=c\u003ey?Xib0aeq%o\u003c.{Lxk8BewPy:AlU{WUwMi8Ey?iPNnMnz\u003e", "n": [ { "c": 3, "d": "Terminal socket exec helper context", "i": "micro-behaviors/process/fd/dup::unix-terminal-socket-exec-benign-context", "o": 7643, "z": 12, "cf": 0.949999988079071 } ], "ln": 7627 }, { "b": "z/YY9y?#EQwi7?kB8\u003e+znN#x=p\u00267n!x(kN[y\u0026sxgwO=fnxMBe!wNP9Hy?Wv0vrc6[B1.0hB7E0{njb47x(!wGxMBeznjb16x(!v@vQTs?0aGwEnm=ju0b31Px\u003c\u003e[2yK2", "n": [ { "c": 2, "d": "Haskell module path", "i": "metadata/lang/compiler/systems::haskell-module-path", "o": 26431, "z": 22, "cf": 0.8999999761581421 } ], "ln": 26415 }, { "b": "m]04:xk.P%atCG6huiZSy?WuHq!P#*eOn*qB8bu6y+oQxB.tAaeIX}me?![ieI?MNDtdqvA+Xftm0A-)f/SuOA.*\u003cgxj$^ne\u0026Csue]$}-wmYj)x8?]isMZ5]04@taB98CAvpxi?zF%Sde[Y6Ae]U\u0026Hz#", "n": [ { "c": 2, "d": ".gnu_debuglink reference present", "i": "metadata/build/debug::elf-debuglink", "o": 34020, "z": 73, "cf": 1.0 } ], "ln": 34004 }, { "b": "By^7qzGNNvB.LV5eOO.}e[xlBB9RQ5e[xlBB98B5e[Y6Ae[!WmxAfU$zGNNPwPz\u003caz/bLcxkR\u0026AC4CW", "n": [ { "c": 2, "d": "ELF dynstr section name", "i": "metadata/binary/linking/static::elf-dynstr-section-name", "o": 34157, "z": 7, "cf": 0.8999999761581421 }, { "c": 2, "d": "ELF dynsym section name", "i": "metadata/binary/linking/static::elf-dynsym-section-name", "o": 34149, "z": 7, "cf": 0.8999999761581421 } ], "ln": 34133 }, { "b": "A::j[e[]iqByeD%A::j[e[xlBvqPZ*04}]5Bo0}az/^QJy\u0026/UfwmoN*04@wguT)[\u003czE)f%", "n": [ { "c": 2, "d": "ELF dynamic section name", "i": "metadata/binary/linking/static::elf-dynamic-section-name", "o": 34312, "z": 8, "cf": 0.8999999761581421 } ], "ln": 34296 } ], "depth": 1, "facts": { "exp": [ [ "hlszmfloskellzmpluginzm2zi3zi0zi0zm3vZZzziovrjILDwtq18ZZnrOv_IdeziPluginziFloskell_descriptor_closure" ], [ "hlszmfloskellzmpluginzm2zi3zi0zi0zm3vZZzziovrjILDwtq18ZZnrOv_IdeziPluginziFloskell_provider_info" ], [ "hlszmfloskellzmpluginzm2zi3zi0zi0zm3vZZzziovrjILDwtq18ZZnrOv_IdeziPluginziFloskell_zdwprovider_info" ], [ "hlszmfloskellzmpluginzm2zi3zi0zi0zm3vZZzziovrjILDwtq18ZZnrOv_IdeziPluginziFloskell_zdtrModule1_closure" ], [ "hlszmfloskellzmpluginzm2zi3zi0zi0zm3vZZzziovrjILDwtq18ZZnrOv_IdeziPluginziFloskell_descriptor_info" ], [ "hlszmfloskellzmpluginzm2zi3zi0zi0zm3vZZzziovrjILDwtq18ZZnrOv_IdeziPluginziFloskell_zdtrModule4_bytes" ], [ "hlszmfloskellzmpluginzm2zi3zi0zi0zm3vZZzziovrjILDwtq18ZZnrOv_IdeziPluginziFloskell_zdtrModule2_bytes" ], [ "hlszmfloskellzmpluginzm2zi3zi0zi0zm3vZZzziovrjILDwtq18ZZnrOv_IdeziPluginziFloskell_descriptor1_closure" ], [ "hlszmfloskellzmpluginzm2zi3zi0zi0zm3vZZzziovrjILDwtq18ZZnrOv_IdeziPluginziFloskell_descriptor1_info" ], [ "hlszmfloskellzmpluginzm2zi3zi0zi0zm3vZZzziovrjILDwtq18ZZnrOv_IdeziPluginziFloskell_provider_closure" ], [ "hlszmfloskellzmpluginzm2zi3zi0zi0zm3vZZzziovrjILDwtq18ZZnrOv_IdeziPluginziFloskell_zdwprovider_closure" ], [ "hlszmfloskellzmpluginzm2zi3zi0zi0zm3vZZzziovrjILDwtq18ZZnrOv_IdeziPluginziFloskell_zdtrModule_closure" ], [ "hlszmfloskellzmpluginzm2zi3zi0zi0zm3vZZzziovrjILDwtq18ZZnrOv_IdeziPluginziFloskell_zdtrModule3_closure" ] ], "imp": [ [ "", "base_GHCziMaybe_Nothing_closure" ], [ "", "hlszmpluginzmapizm2zi3zi0zi0zm2K9nIM5tXKILbZZas1PBjI6_IdeziTypes_zdfMonoidDynFlagsModificationszuzdcmempty_closure" ], [ "", "dependentzmmapzm0zi4zi0zi1zmKwBWrPhPx2r6TsKkh7jfv8_DataziDependentziMapziInternal_Tip_closure" ], [ "", "hlszmpluginzmapizm2zi3zi0zi0zm2K9nIM5tXKILbZZas1PBjI6_IdeziTypes_defaultConfigDescriptor_closure" ], [ "", "hlszmpluginzmapizm2zi3zi0zi0zm2K9nIM5tXKILbZZas1PBjI6_IdeziTypes_defaultCabalPluginDescriptor4_closure" ], [ "", "hlszmpluginzmapizm2zi3zi0zi0zm2K9nIM5tXKILbZZas1PBjI6_IdeziTypes_defaultPluginDescriptor1_closure" ], [ "", "hlszmpluginzmapizm2zi3zi0zi0zm2K9nIM5tXKILbZZas1PBjI6_IdeziTypes_mkFormattingHandlers1_info" ], [ "", "hlszmpluginzmapizm2zi3zi0zi0zm2K9nIM5tXKILbZZas1PBjI6_IdeziTypes_mkFormattingHandlers1_closure" ], [ "", "base_GHCziMaybe_Just_con_info" ], [ "", "base_DataziEither_Left_con_info" ], [ "", "hlszmpluginzmapizm2zi3zi0zi0zm2K9nIM5tXKILbZZas1PBjI6_IdeziPluginziError_PluginInternalError_con_info" ], [ "", "base_DataziEither_Right_con_info" ], [ "", "lspzmtypeszm2zi0zi2zi0zmE86KLQV6ZZjf2ExKf31403Q_LanguageziLSPziProtocolziTypesziCommon_InL_con_info" ], [ "", "ghczmprim_GHCziTypes_ZC_con_info" ], [ "", "floskellzm0zi11zi0zmLKzzXm7HsUHVBPmII50zzZZdZZ_Floskell_reformat_info" ], [ "", "floskellzm0zi11zi0zmLKzzXm7HsUHVBPmII50zzZZdZZ_FloskellziConfigFile_readAppConfig1_info" ], [ "", "floskellzm0zi11zi0zmLKzzXm7HsUHVBPmII50zzZZdZZ_FloskellziConfigFile_findAppConfig2_info" ], [ "", "lspzmtypeszm2zi0zi2zi0zmE86KLQV6ZZjf2ExKf31403Q_LanguageziLSPziProtocolziInternalziTypesziTextEdit_TextEdit_con_info" ], [ "", "textzm2zi0zi2_DataziText_concat_info" ], [ "", "textzm2zi0zi2_DataziTextziLazzy_toChunks_info" ], [ "", "textzm2zi0zi2_DataziTextziInternal_zdwouter_info" ], [ "", "ghczmprim_GHCziCString_unpackAppendCStringzh_info" ], [ "", "stg_ARR_WORDS_info" ], [ "", "lspzmtypeszm2zi0zi2zi0zmE86KLQV6ZZjf2ExKf31403Q_LanguageziLSPziProtocolziTypesziUri_zdwfromNormalizzedFilePath_info" ], [ "", "textzm2zi0zi2_DataziTextziInternalziLazzy_Chunk_con_info" ], [ "", "textzm2zi0zi2_DataziTextziInternalziLazzy_Empty_closure" ], [ "", "stg_gc_unpt_r1" ], [ "", "ghczmprim_GHCziTupleziPrim_Z2T_con_info" ], [ "", "hlszmpluginzmapizm2zi3zi0zi0zm2K9nIM5tXKILbZZas1PBjI6_IdeziPluginUtils_extendToFullLines_info" ], [ "", "hlszmpluginzmapizm2zi3zi0zi0zm2K9nIM5tXKILbZZas1PBjI6_IdeziPluginUtils_zdwextractTextInRange_info" ], [ "", "stg_upd_frame_info" ], [ "", "hlszmpluginzmapizm2zi3zi0zi0zm2K9nIM5tXKILbZZas1PBjI6_IdeziPluginUtils_zdwextractTextInRange_closure" ], [ "", "floskellzm0zi11zi0zmLKzzXm7HsUHVBPmII50zzZZdZZ_FloskellziConfigFile_readAppConfig1_closure" ], [ "", "ghczmprim_GHCziTypes_ZMZN_closure" ], [ "", "base_GHCziList_badHead_closure" ], [ "", "base_GHCziStackziTypes_PushCallStack_con_info" ], [ "", "stg_bh_upd_frame_info" ], [ "", "ghczmprim_GHCziTypes_Module_con_info" ], [ "", "ghczmprim_GHCziTypes_TrNameS_con_info" ], [ "", "hlszmpluginzmapizm2zi3zi0zi0zm2K9nIM5tXKILbZZas1PBjI6_IdeziPluginUtils_fullRange_info" ], [ "", "stg_SRT_3_info" ], [ "", "floskellzm0zi11zi0zmLKzzXm7HsUHVBPmII50zzZZdZZ_Floskell_reformat_closure" ], [ "", "floskellzm0zi11zi0zmLKzzXm7HsUHVBPmII50zzZZdZZ_FloskellziConfigFile_findAppConfig2_closure" ], [ "", "haskellzmsrczmextszm1zi23zi1zm3JlEDY0GlvbDl9TOFDgSoA_LanguageziHaskellziExtsziExtension_Haskell2010_closure" ], [ "", "textzm2zi0zi2_DataziText_concat_closure" ], [ "", "stg_SRT_1_info" ], [ "", "memcmp" ], [ "", "base_GHCziList_badHead_info" ], [ "", "floskellzm0zi11zi0zmLKzzXm7HsUHVBPmII50zzZZdZZ_FloskellziConfigFile_AppConfig_con_info" ], [ "", "floskellzm0zi11zi0zmLKzzXm7HsUHVBPmII50zzZZdZZ_FloskellziStyles_styles_closure" ], [ "", "base_GHCziStackziTypes_EmptyCallStack_closure" ], [ "", "stg_SRT_2_info" ], [ "", "stg_unpack_cstring_info" ], [ "", "stg_gc_noregs" ], [ "", "stg_INTLIKE_closure" ], [ "", "base_GHCziStackziTypes_SrcLoc_con_info" ], [ "", "newCAF" ], [ "", "textzm2zi0zi2_DataziTextziInternal_Text_con_info" ], [ "", "textzm2zi0zi2_DataziTextziShow_zdwunpackCStringAsciizh_info" ], [ "", "hlszmpluginzmapizm2zi3zi0zi0zm2K9nIM5tXKILbZZas1PBjI6_IdeziTypes_defaultPluginPriority_closure" ], [ "", "hlszmpluginzmapizm2zi3zi0zi0zm2K9nIM5tXKILbZZas1PBjI6_IdeziTypes_PluginDescriptor_con_info" ], [ "", "cxa_finalize" ], [ "", "ITM_registerTMCloneTable" ], [ "", "ITM_deregisterTMCloneTable" ], [ "", "gmon_start__" ] ], "sec": [ [ ".note.gnu.property", 568, 32, 1.91, "alloc" ], [ ".note.gnu.build-id", 600, 36, 4.19, "alloc" ], [ ".dynsym", 640, 1968, 1.41, "alloc" ], [ ".dynstr", 2608, 16019, 5.6, "alloc" ], [ ".gnu.hash", 18632, 108, 5.51, "alloc" ], [ ".gnu.version", 18740, 164, 0.1, "alloc" ], [ ".gnu.version_d", 18904, 28, 2.04, "alloc" ], [ ".gnu.version_r", 18932, 32, 2.09, "alloc" ], [ ".rela.dyn", 18968, 3312, 1.72, "alloc" ], [ ".rela.plt", 22280, 48, 1.07, "alloc,info_link" ], [ ".init", 22328, 27, 4.24, "alloc,executable" ], [ ".plt", 22368, 48, 3.11, "alloc,executable" ], [ ".text", 22416, 3983, 5.39, "alloc,executable" ], [ ".fini", 26400, 13, 3.24, "alloc,executable" ], [ ".rodata", 26413, 176, 5.01, "alloc,merge,strings" ], [ ".eh_frame", 26592, 68, 3.75, "alloc" ], [ ".eh_frame_hdr", 26660, 20, 2.78, "alloc" ], [ ".fini_array", 28584, 8, 0.54, "write,alloc" ], [ ".init_array", 28592, 8, 1.06, "write,alloc" ], [ ".dynamic", 28600, 3776, 1.77, "write,alloc" ], [ ".got", 32376, 352, 0.0, "write,alloc" ], [ ".got.plt", 32728, 40, 0.95, "write,alloc" ], [ ".data", 32768, 1184, 0.94, "write,alloc" ], [ ".comment", 33952, 38, 3.84, "merge,strings" ], [ ".note.gnu.gold-version", 33992, 28, 2.95, "" ], [ ".gnu_debuglink", 34020, 80, 5.11, "" ], [ ".shstrtab", 34100, 309, 4.28, "" ] ], "metrics": { "elf": { "bits": 64.0, "entry": 0.0, "has_got": 1.0, "has_plt": 1.0, "has_note": 1.0, "relacount": 47.0, "note_count": 2.0, "nx_enabled": 1.0, "has_runpath": 1.0, "dynrel_count": 0.0, "dynsym_count": 82.0, "has_build_id": 1.0, "has_eh_frame": 1.0, "has_gnu_hash": 1.0, "symtab_count": 0.0, "dynrela_count": 138.0, "has_debuglink": 1.0, "little_endian": 1.0, "dt_flags_1_raw": 1.0, "pltreloc_count": 2.0, "build_id_length": 20.0, "dt_versym_count": 82.0, "executable_stack": 0.0, "fini_array_count": 1.0, "init_array_count": 1.0, "wx_segment_count": 0.0, "comment_entry_count": 2.0, "program_header_count": 9.0, "comment_distinct_count": 2.0, "gnu_stack_section_absent": 0.0, "load_segment_max_file_size": 26680.0, "stripped_but_symtab_present": 0.0, "load_segment_max_memory_size": 26680.0, "section_relocation_group_count": 2.0, "stripped_metadata_section_count": 6.0 }, "file": { "size": 36336.0, "entropy": 4.81, "size_bytes": 36336.0 }, "binary": { "is_pie": 0.0, "has_overlay": 1.0, "is_stripped": 1.0, "code_entropy": 5.35, "data_entropy": 1.46, "overlay_size": 1927.0, "string_count": 321.0, "overlay_ratio": 0.05, "overall_entropy": 4.81, "overlay_entropy": 1.48, "entropy_variance": 2.95, "avg_string_length": 50.46, "max_string_length": 116.0, "peak_region_bytes": 17408.0, "code_to_data_ratio": 0.43, "peak_region_entropy": 5.64, "string_length_stddev": 25.38, "largest_section_ratio": 0.44, "sentence_string_count": 1.0, "sentence_string_ratio": 0.0, "high_entropy_string_count": 0.0 }, "exports": { "count": 13.0 }, "imports": { "count": 65.0 }, "sections": { "count": 30.0, "code_size": 4071.0, "entropy_max": 5.6, "entropy_mean": 2.76, "name_entropy": 4.23, "writable_count": 8.0, "executable_count": 4.0, "nonstandard_count": 7.0, "executable_writable_count": 0.0 }, "dependencies": { "count": 201.0 } } }, "id": 1, "mol": "Md(He)", "path": "haskell-hls-floskell-plugin-2.3.0.0-84-x86_64.pkg.tar.zst!!usr/lib/libHShls-floskell-plugin-2.3.0.0-3vZziovrjILDwtq18ZnrOv-ghc9.6.6.so", "risk": 1, "sha": "7507060c90df143cf3df33378e6b93832811e2c6a8593a84d05587de7782959b", "size": 36336, "traits": [ { "id": "micro-behaviors/dylib/library/libc::libc-characteristic-cxa-finalize", "crit": 2, "desc": "libc characteristic cxa finalize", "spans": [ [ 7643, 12 ] ] }, { "id": "metadata/hardening/missing::stripped-binary", "conf": 0.800000011920929, "crit": 3, "desc": "No full symbol table (likely stripped)", "spans": [ [ 0, 25 ] ] }, { "id": "micro-behaviors/dylib/library/libc::libc-internal-functions-b", "conf": 0.699999988079071, "crit": 2, "desc": "libc internal symbols cluster B", "spans": [ [ 7643, 12 ] ] }, { "id": "micro-behaviors/dylib/library/abi-graphics::cxx-abi-symbols-a", "conf": 0.800000011920929, "crit": 2, "desc": "C++ ABI symbols cluster A", "spans": [ [ 7643, 12 ] ] } ], "type": "elf" }, { "ctx": [ { "b": "arR^HarR^HarR^HarR^HarR^HarR^HxMOuniXJdgCxUVFAa9l\u0026wId[wxd[7nv}xL0wPGH", "ln": 3, "addr": 101 }, { "b": "", "ln": 4, "addr": 157 }, { "b": "arR!amn=\u0026Uave:\u003cavw}1l}HuHpFK?hmO=]8rz#sqaw$T8qCPXXlSuSMpaNINpdci)nMeO^nKuARnL-7", "n": [ { "c": 2, "d": "English language detection", "i": "metadata/file/profile/language::lang-english", "o": 167, "z": 3, "cf": 0.800000011920929 } ], "ln": 5, "addr": 158 }, { "b": "", "ln": 6, "addr": 222 }, { "b": "arR^Ye*9L[w[=c%BzkVhB1N", "ln": 7, "addr": 223 } ], "depth": 1, "facts": { "metrics": { "file": { "size": 11350.0, "entropy": 4.43, "size_bytes": 11350.0 }, "binary": { "overall_entropy": 4.43, "peak_region_bytes": 11264.0, "peak_region_entropy": 4.63 } } }, "id": 2, "path": "haskell-hls-floskell-plugin-2.3.0.0-84-x86_64.pkg.tar.zst!!usr/share/licenses/haskell-hls-floskell-plugin/LICENSE", "pid": 0, "risk": 1, "sha": "a2e408416d7b0e53d14952e289724a5faeab3aa4f4fd9f09f0f1eb8338b92e4a", "size": 11350, "traits": [ { "id": "metadata/file/profile/language::lang-english", "conf": 0.800000011920929, "crit": 2, "desc": "English language detection", "spans": [ [ 167, 3 ] ] } ], "type": "text" }, { "ctx": [ { "b": "boXZHx(kOBxBnr}AbP=saw+v6niFsNB-RNRy\u0026r/(y+G\u003csx(k%+B-RNRy\u0026r/(y+GmizAoB[B8\u0026{yx(k%+B-RNRvRGZkB7]-cuVoN%y=Tj(B8\u0026{yx(kOEwO#3%A:J=%A+)=\u0026B-RNRvRGZkv@Dy0uVoN%y=Tj(B8\u0026{Iz!0i(flpPpzAoB[B8\u0026{Iz!0i(fjFTkiXLR%AXy)ozAoB[B8\u0026{yx(kOBx()][AaK6aiXLR%AXy)ozzcfAzE^WauVoN%y=Tj(B8\u0026{yx(kOlz/Pz@AaK6acKIjOB-RNRvRGZkxj$^bAbf8riw9ixhyxQ{B-8khxk8BewPxdvcOl]Zz/Pu0cM\u003c=*eOw)rvQT72asy\u0026sB1I0uz/YY9y?$Xxy\u0026%x8zy)Q@gCgvlfEE$!bTrKX", "ln": 0, "col": 1, "line": 1 } ], "depth": 1, "facts": { "imp": [ [ "", "'/usr/bin/ghc-pkg-9.6.6'" ] ], "tgt": [ "'/usr/bin/ghc-pkg-9.6.6'" ], "metrics": { "ast": { "max_depth": 4, "call_count": 1, "node_count": 21 }, "file": { "size": 316, "entropy": 4.64 }, "text": { "lines": 3, "top_char": 47, "max_ws_run": 1, "digit_ratio": 0.03, "space_count": 6, "char_entropy": 4.64, "unique_chars": 43, "top_char_null": 0, "lines_over_200": 1, "string_density": 2.33, "top_char_ratio": 0.12, "avg_line_length": 104.33, "max_line_length": 211, "last_line_length": 93, "long_token_count": 1, "whitespace_ratio": 0.03, "identifier_density": 0.67, "line_length_stddev": 82.85, "normalized_string_count": 4.04, "normalized_unique_identifiers": 1.26 }, "binds": { "count": 1 }, "binary": { "peak_region_bytes": 316, "peak_region_entropy": 4.64 }, "strings": { "bytes": 273, "count": 7, "avg_length": 39, "max_length": 197, "path_count": 2, "avg_entropy": 2.93, "entropy_stddev": 0.97 }, "comments": { "chars": 8, "count": 1, "lines": 1, "to_code_ratio": 0.5 }, "identifiers": { "count": 2, "unique": 2, "avg_length": 14, "max_length": 24, "min_length": 4, "avg_entropy": 2.99, "reuse_ratio": 1, "length_stddev": 10, "has_digit_ratio": 0.5, "high_entropy_count": 1, "high_entropy_ratio": 0.5, "all_uppercase_ratio": 0.5 } } }, "id": 3, "mol": "Md(Pa)", "path": "haskell-hls-floskell-plugin-2.3.0.0-84-x86_64.pkg.tar.zst!!usr/share/haskell/unregister/haskell-hls-floskell-plugin.sh", "pid": 0, "risk": 2, "sha": "5cca8a98c55a2c88d146866cc5622ccd84505e05d65c7a3fefc2c1af34199bd3", "size": 316, "traits": [ { "id": "metadata/file/extension/identity::shell-a", "conf": 1.0, "crit": 2, "desc": "POSIX shell script extension" }, { "id": "metadata/package/files/dependency::os-image-root-file-path", "conf": 0.94, "crit": 3, "desc": "Root-level OS directory path" } ], "type": "shell" }, { "ctx": [ { "b": "boXZHx(kOBxA", "n": [ { "c": 2, "d": "POSIX shell script extension", "i": "metadata/file/extension/identity::shell-a", "o": 0, "z": 30, "cf": 1.0 } ], "ln": 1, "addr": 0 }, { "b": "wQ5fjA=-B2k#ZxrcOGQ-AXzlEv{%gbB7e\u003c3iXLR%AXzlEv{%gbvRGZvflItRfjFTkiXLR%AXy)ozzc6BBy!/#wPzPFflItRfjFTkflQ]Awn=G}AaK6aiXLR%AXy)ozzbHrA+eP%wPzPFflItRfkLMpvqEPrvRGZvflItRfkLMpvqEPax(k%+B-RNRvRGZvflItRfjFTkflp\u0026HwNxy/A+)=\u0026B-RNRvRGZkC4CM4z/Pi7wPzPFflItRfjFTkfjO{vwNxy/A+)9", "n": [ { "c": 2, "d": "Reference to /usr/local/bin", "i": "micro-behaviors/fs/path/binary::usr-local-bin-dir", "o": 40, "z": 13, "cf": 0.6600000262260437 }, { "c": 1, "d": "Direct PATH assignment (PATH= or PATH+=)", "i": "micro-behaviors/os/env/vars/access::path-env-var-direct", "o": 16, "z": 7, "cf": 0.5 } ], "ln": 2, "addr": 10 }, { "b": "Ab]VgBy(Tyc37BRcVivfwJy}RarR^HarR^HarR^HarR!uy\u0026.guy\u0026sxgwO=fmAboVfx(i", "ln": 3, "addr": 222 }, { "b": "C4CYnx(v(IarR^HarR^HarR^HarSA(gCgvlfA", "ln": 4, "addr": 277 }, { "b": "C4(2ivRGT)BA][\u0026arR^HarR^HarUSCvR/:*", "ln": 5, "addr": 307 }, { "b": "x\u003efmEarR^HarR^HarR^HarR^HarUulB1I0uz/YY9y?$Xxy\u0026%x8zy)Q@gCgvlfFb87t6:[3C5?s?oHK8DAwoBRzGnJ@", "ln": 6, "addr": 336 }, { "b": "yH}=LarR^HarR^HarR^HarR^HarUulB1I0uz/YY9y?$Xxy\u0026%x8zy)Q@gCgvlfFb87t6:[3C5?s?oHK8DAwoBRzGnJ@", "n": [ { "c": 1, "d": "Database secret config key", "i": "micro-behaviors/data/db/config::database-secret-key", "o": 409, "z": 4, "cf": 0.8500000238418579 } ], "ln": 7, "addr": 409 }, { "b": "y?Wx\u003czGxwIarR^HarR^HarR^HarS%?vpJ$ZeIX}j", "ln": 8, "addr": 482 }, { "b": "v@DsiA+Pf1BugJ!arR^HarR^HarTS%wGTJLB8bu6y-(qqmiCMvvqL", "ln": 9, "addr": 515 } ], "depth": 1, "facts": { "imp": [ [ "", "printf" ], [ "", "printf" ], [ "", "'/usr/bin/ghc-pkg-9.6.6'" ] ], "tgt": [ "'/usr/bin/ghc-pkg-9.6.6'", "printf" ], "metrics": { "ast": { "max_depth": 5.0, "bind_count": 1.0, "call_count": 2.0, "node_count": 29.0, "identifier_count": 2.0, "string_literal_count": 10.0 }, "file": { "size": 1901.0, "entropy": 5.04, "size_bytes": 1901.0 }, "text": { "digit_ratio": 0.1, "space_count": 308.0, "total_lines": 38.0, "char_entropy": 5.04, "unique_chars": 77.0, "lines_over_200": 1.0, "string_density": 0.26, "avg_line_length": 49.03, "max_line_length": 211.0, "empty_line_ratio": 0.11, "last_line_length": 90.0, "long_token_count": 1.0, "whitespace_ratio": 0.18, "most_common_ratio": 0.07, "identifier_density": 0.11, "line_length_stddev": 38.09, "normalized_string_count": 1.62, "repeated_char_sequences": 15.0, "most_common_char_is_null": 0.0, "max_inline_whitespace_run": 19.0, "most_common_char_codepoint": 108.0, "normalized_unique_identifiers": 0.57 }, "binds": { "count": 1.0 }, "calls": { "count": 2.0 }, "binary": { "overall_entropy": 5.04, "peak_region_bytes": 1901.0, "peak_region_entropy": 5.16 }, "strings": { "total": 10.0, "avg_length": 183.9, "max_length": 1574.0, "path_count": 2.0, "avg_entropy": 2.58, "email_count": 1.0, "total_bytes": 1839.0, "entropy_stddev": 1.46, "very_long_strings": 1.0 }, "comments": { "chars": 8.0, "lines": 1.0, "total": 1.0, "to_code_ratio": 0.03 }, "identifiers": { "count": 2.0, "total": 4.0, "avg_length": 11.33, "max_length": 24.0, "min_length": 4.0, "avg_entropy": 2.85, "reuse_ratio": 0.75, "unique_count": 3.0, "length_stddev": 8.99, "has_digit_ratio": 0.33, "high_entropy_count": 1.0, "high_entropy_ratio": 0.33, "all_lowercase_ratio": 0.33, "all_uppercase_ratio": 0.33 } } }, "id": 4, "path": "haskell-hls-floskell-plugin-2.3.0.0-84-x86_64.pkg.tar.zst!!usr/share/haskell/register/haskell-hls-floskell-plugin.sh", "risk": 1, "sha": "a10edb81b5e1fa6af56b839998d0f61a2aa71a09fbdb1994e8d1c35976e97d83", "size": 1901, "traits": [ { "id": "metadata/file/profile/identity::tiny-text-script", "conf": 0.75, "crit": 2, "desc": "Tiny multi-line text script", "spans": [ [ 0, 24 ] ] }, { "id": "metadata/file/extension/identity::shell-a", "conf": 1.0, "crit": 2, "desc": "POSIX shell script extension", "spans": [ [ 0, 30 ] ] }, { "id": "micro-behaviors/os/env/vars/access::path-env-var-direct", "crit": 1, "desc": "Direct PATH assignment (PATH= or PATH+=)", "spans": [ [ 16, 7 ] ] }, { "id": "metadata/lang/shebang::sh", "conf": 1.0, "crit": 2, "desc": "POSIX shell shebang line", "spans": [ [ 0, 9 ] ] }, { "id": "metadata/file/extension/identity::shell", "conf": 1.0, "crit": 2, "desc": "Shell script file extension", "spans": [ [ 0, 30 ] ] } ], "type": "shell" }, { "ctx": [ { "b": "boPG/zE)\u0026%By!#9vTf8kvqxB[yIa+Ge?[$j", "n": [ { "c": 2, "d": "Arch package metadata manifest", "i": "metadata/package/files/system-package::arch-pkginfo-manifest", "o": 0, "z": 23, "cf": 0.9700000286102295 } ], "ln": 1, "addr": 0 }, { "b": "boRbIx(mMaw)]E^A=k(raA?spB7]MgatCG8h.D\u0026", "ln": 2, "addr": 29 }, { "b": "Abf97vqPM#jS[ADB8bu6y+ospB1I0uz/YY9y?$Xxy\u0026%x8zu", "n": [ { "c": 1, "d": "Arch pkgname metadata field", "i": "metadata/package/files/system-package::arch-pkgname-field", "o": 61, "z": 37, "cf": 0.9399999976158142 } ], "ln": 3, "addr": 61 }, { "b": "Abf8}vrl05jS[ADB8bu6y+ospB1I0uz/YY9y?$Xxy\u0026%x8zu", "ln": 4, "addr": 99 }, { "b": "CW$l8vivYQAbf9dD2NsTAbf7", "ln": 5, "addr": 137 }, { "b": "Abf9fwPw[RatLM9e?![ieJtM", "n": [ { "c": 1, "d": "Arch pkgver metadata field", "i": "metadata/package/files/system-package::arch-pkgver-field", "o": 157, "z": 19, "cf": 0.9399999976158142 } ], "ln": 6, "addr": 157 }, { "b": "Abf8%wPIu7jS)slBy/99vruj4zxKdqBz8!sxK@qQy\u0026sxgwO=f9v@C)?azbLjzddKdwPv", "ln": 7, "addr": 177 }, { "b": "B-IpvjS[AWBz#pZfe40Ev@2H=wIdU8B8bu6y+xTDxd[jjv@2H=wIm.kB1I0uz/YY9y?$Xxy\u0026%x8zu", "ln": 8, "addr": 232 }, { "b": "Aa9l(vp%d(auZ\u0026pwO=79ax-b\u003cauTmEy?XcjzF-*5B3KeOv}YW)zGQgRz/PFO", "ln": 10, "addr": 317 }, { "b": "B7]@iauZ\u0026bi5JJE", "ln": 11, "addr": 366 }, { "b": "vrb\u003c\u003eauZ\u0026(i5Ub4gY", "n": [ { "c": 1, "d": "Arch package architecture field", "i": "metadata/package/files/system-package::arch-package-arch-field", "o": 379, "z": 13, "cf": 0.8999999761581421 } ], "ln": 12, "addr": 379 }, { "b": "y?Wx\u003czGxwijS)4fvpJ$ZeIX}j", "ln": 13, "addr": 393 }, { "b": "wmYZ\u003ezE:\u003eMazkv$eO]cgA@", "ln": 14, "addr": 414 } ], "depth": 1, "facts": { "metrics": { "file": { "size": 630.0, "entropy": 4.82, "size_bytes": 630.0 }, "binary": { "overall_entropy": 4.82, "peak_region_bytes": 630.0, "peak_region_entropy": 4.82 } } }, "id": 5, "path": "haskell-hls-floskell-plugin-2.3.0.0-84-x86_64.pkg.tar.zst!!.PKGINFO", "risk": 1, "sha": "05e70bc2a20f8e81fadf6924bda53bf38466bfb319add43efb5d1d9773ffecf0", "size": 630, "traits": [ { "id": "metadata/package/files/system-package::arch-makepkg-generated", "conf": 0.9599999785423279, "crit": 1, "desc": "Arch makepkg generated metadata", "spans": [ [ 0, 23 ] ] }, { "id": "metadata/package/files/system-package::arch-pkgname-field", "conf": 0.9399999976158142, "crit": 1, "desc": "Arch pkgname metadata field", "spans": [ [ 61, 37 ] ] }, { "id": "metadata/package/files/system-package::alpine-pkginfo-package-field", "conf": 0.8999999761581421, "crit": 1, "desc": "Alpine/Wolfi package name field", "spans": [ [ 61, 37 ] ] }, { "id": "metadata/package/files/system-package::arch-package-arch-field", "conf": 0.8999999761581421, "crit": 1, "desc": "Arch package architecture field", "spans": [ [ 379, 13 ] ] }, { "id": "metadata/package/files/system-package::alpine-pkginfo-basename", "conf": 0.8999999761581421, "crit": 1, "desc": "Alpine/Wolfi package info file" }, { "id": "metadata/package/files/system-package::arch-pkgver-field", "conf": 0.9399999976158142, "crit": 1, "desc": "Arch pkgver metadata field", "spans": [ [ 157, 19 ] ] }, { "id": "metadata/package/files/system-package::arch-pkginfo-manifest", "conf": 0.9700000286102295, "crit": 2, "desc": "Arch package metadata manifest", "spans": [ [ 0, 23 ], [ 61, 37 ], [ 157, 19 ], [ 379, 13 ] ] } ], "type": "text" }, { "id": 6, "sha": "2d7746a9d12f51b3012fba4ba2f880c31193f056be07624114a4e2478b12d951", "path": "haskell-hls-floskell-plugin-2.3.0.0-84-x86_64.pkg.tar.zst!!.MTREE", "size": 675, "type": "text", "depth": 1 }, { "id": 7, "sha": "d82ef5abd70ce082ab606bcc650eb0bb6deb7501e5f763ff33afa8cc06a58b7b", "path": "haskell-hls-floskell-plugin-2.3.0.0-84-x86_64.pkg.tar.zst!!.BUILDINFO", "size": 16132, "type": "text", "depth": 1 } ], "omitted_files": 2, "v": "8" } }