{ "ml": { "v": "7", "eng": "2.9.1", "lvl": -1, "conf": 0, "mods": [ { "cls": 0, "raw": 0.009831518, "rte": "az", "prob": 0.009831518 }, { "cls": 0, "raw": 0.002186219, "rte": "az/tar", "prob": 0.002186219 } ], "prob": 0.009831518, "files": [ { "id": 0, "lvl": -1, "conf": 0, "prob": 0.009831517934799194, "type": "tar.gz" }, { "id": 3, "lvl": -1, "conf": 0, "prob": 0.000008434057235717773, "type": "javascript" }, { "id": 4, "lvl": -1, "conf": 0, "prob": 0.00001381834317726316, "type": "package.json" }, { "id": 25, "lvl": -1, "conf": 0, "prob": 0.000010212262168352026, "type": "registry" }, { "id": 26, "lvl": -1, "conf": 0, "prob": 0.00001012285520118894, "type": "registry" }, { "id": 27, "lvl": -1, "conf": 0, "prob": 0.00001012285520118894, "type": "registry" } ], "version": "v18.18", "analyzed_at": "2026-09-14T05:58:47Z" }, "path": "react-color-3.0.11.tgz", "raw": { "fetched": [ { "kind": "dependency", "cached": true, "locator": "pkg:npm/%40types/react", "outcome": "skipped", "fetched_at": 1789365527, "source_offset": 15, "source_sha256": "4246e53051ed071d4df5d03a9e311032af79cb10321241243f5fd06eae036796", "content_sha256": "ffa77ffdbdc82e5f67a0fd74d750990375a7dfd8685ec7f10a27c0db128f7766" } ], "files": [ { "id": 0, "ctx": [ { "b": "abZy80000000zQK)qyW*VI+/p))8bGGz981F7[hpN\u0026GE*v=8s{Z\u0026)h+c(a!H-mS!+QcNc#Bk1vY@DzSnF$#{I7g\u003eQ+Lv?ABV#vo2:STfAP[UuFF$P@ehN5fj\u0026L^3cU#\u003e?(yt.K=szDtT@i]^yg@MN5\u00266\u003cRGTjAg3A\u0026\u0026h/q7QmP-s^z)DN%=2U+RX\u003c7SvO3iU0whX8O1q%9U7.Oym", "ln": 0 } ], "mol": "K(Li)Md(Pa₇)", "sha": "62b7093b169afaa2bf5c59e8bca3156a1713a5982a8d3cf5b746b5e90ba2ddd4", "path": "react-color-3.0.11.tgz", "risk": 6, "size": 4634, "type": "tar.gz", "facts": { "metrics": { "file": { "size": 4634, "entropy": 7.91 }, "parse": { "error_count": 1 }, "binary": { "peak_region_bytes": 4634, "peak_region_entropy": 7.76 }, "consistency": { "self_dependency": 0, "unused_runtime_deps": 2 } } }, "ident": { "name": { "value": "react-color", "source": "file.basename", "verified": false }, "trust": "unsigned", "version": { "value": "3.0.11", "source": "file.basename", "verified": false } }, "traits": [ { "id": "metadata/package/quality/empty::package-empty-scripts-object", "conf": 0.85, "crit": 3, "desc": "Package declares an empty scripts object" }, { "id": "metadata/package/manifest/homepage::homepage-git-host", "conf": 0.9, "crit": 3, "desc": "Homepage points to major Git host" }, { "id": "metadata/package/manifest/name::scoped-known-org-1", "conf": 1.0, "crit": 3, "desc": "Package from known org scope" }, { "id": "metadata/package/testing/presence/harness::test-or-declaration-file", "conf": 0.85, "crit": 1, "desc": "File is a test or type-declaration source file", "from": [ { "file": 3 } ], "uses": [ 6 ] }, { "id": "well-known/lib/development/definitelytyped::scoped-package-name", "conf": 0.99, "crit": 3, "desc": "DefinitelyTyped @types package name" }, { "id": "metadata/package/manifest/repository::repo-url-git-host", "conf": 0.9, "crit": 3, "desc": "Repository identifies major Git host" }, { "id": "metadata/file/extension/identity::declaration-file-extension", "conf": 1.0, "crit": 1, "desc": "File uses a source declaration extension", "from": [ { "file": 3 } ] }, { "id": "metadata/package/manifest/repository::has-repository-field", "conf": 0.9, "crit": 2, "desc": "package.json declares repository metadata" }, { "id": "metadata/package/manifest/repository::has-repository-url", "conf": 0.85, "crit": 2, "desc": "package.json declares a repository URL" }, { "id": "metadata/lang/scripted::dts-declaration-file", "conf": 0.99, "crit": 2, "desc": "TypeScript declaration file", "from": [ { "file": 3 } ] }, { "id": "metadata/package/dependencies/manifest::npm-wildcard-dependency", "conf": 0.85, "crit": 3, "desc": "npm runtime dependency pinned to '*'" }, { "id": "supply-chain/missing-author", "conf": 0.5, "crit": 3, "desc": "Package has empty or missing author field" }, { "id": "metadata/package/manifest/entrypoint::pkg-types-field", "conf": 0.9, "crit": 3, "desc": "Package declares TypeScript types entry" }, { "id": "metadata/package/dependencies/manifest::npm-phantom-runtime-dependency", "conf": 0.82, "crit": 3, "desc": "Runtime dependency unresolved by import scan", "spans": [ [ 0, 38 ] ] }, { "id": "metadata/package/documentation/package-metadata::readme-npm-links-exclude-manifest-package", "conf": 0.9, "crit": 3, "desc": "README npm links exclude manifest package" } ] }, { "depth": 1, "facts": { "imp": [ [ "", "react" ], [ "", "reactcss" ] ], "metrics": { "ast": { "max_depth": 12, "call_count": 0, "node_count": 630 }, "file": { "size": 2502, "entropy": 4.89 }, "text": { "lines": 58, "top_char": 101, "max_ws_run": 1, "space_count": 294, "char_entropy": 4.89, "unique_chars": 56, "top_char_null": 0, "string_density": 0.36, "top_char_ratio": 0.08, "avg_line_length": 42.14, "max_line_length": 106, "empty_line_ratio": 0.14, "last_line_length": 96, "whitespace_ratio": 0.14, "identifier_density": 1.76, "line_length_stddev": 36.24, "normalized_string_count": 2.76, "suspicious_identifier_ratio": 0.14, "normalized_unique_identifiers": 10.75 }, "binary": { "peak_region_bytes": 2502, "peak_region_entropy": 4.77 }, "source": { "class_count": 5 }, "imports": { "count": 2, "third_party_count": 2, "third_party_ratio": 1 }, "strings": { "bytes": 502, "count": 21, "avg_length": 23.9, "max_length": 36, "path_count": 15, "avg_entropy": 3.42, "entropy_stddev": 0.58 }, "functions": { "count": 5 }, "identifiers": { "count": 102, "unique": 63, "avg_length": 10.68, "max_length": 20, "min_length": 1, "avg_entropy": 2.66, "reuse_ratio": 0.62, "length_stddev": 5.76, "sequential_names": 8, "single_char_count": 8, "single_char_ratio": 0.13, "high_entropy_count": 12, "high_entropy_ratio": 0.19, "all_lowercase_ratio": 0.24, "all_uppercase_ratio": 0.02, "keyboard_pattern_names": 1 } } }, "id": 3, "path": "react-color-3.0.11.tgz!!react-color/index.d.ts", "pid": 0, "refs": [ { "to": "./lib/components/alpha/Alpha", "off": 1145, "kind": "local" }, { "to": "./lib/components/block/Block", "off": 1234, "kind": "local" }, { "to": "./lib/components/chrome/Chrome", "off": 1325, "kind": "local" }, { "to": "./lib/components/circle/Circle", "off": 1418, "kind": "local" }, { "to": "./lib/components/common/Checkboard", "off": 1507, "kind": "local" }, { "to": "./lib/components/common/ColorWrap", "off": 1605, "kind": "local" }, { "to": "./lib/components/compact/Compact", "off": 1703, "kind": "local" }, { "to": "./lib/components/github/Github", "off": 1798, "kind": "local" }, { "to": "./lib/components/hue/Hue", "off": 1885, "kind": "local" }, { "to": "./lib/components/material/Material", "off": 1976, "kind": "local" }, { "to": "./lib/components/photoshop/Photoshop", "off": 2079, "kind": "local" }, { "to": "./lib/components/sketch/Sketch", "off": 2178, "kind": "local" }, { "to": "./lib/components/slider/Slider", "off": 2271, "kind": "local" }, { "to": "./lib/components/swatches/Swatches", "off": 2368, "kind": "local" }, { "to": "./lib/components/twitter/Twitter", "off": 2467, "kind": "local" } ], "risk": 2, "sha": "4d80ac860c883828b456db81c8b56ebaffab46d9756c89a82e6da6ea25881fbf", "size": 2502, "traits": [ { "id": "metadata/file/extension/identity::declaration-file-extension", "conf": 1.0, "crit": 1, "desc": "File uses a source declaration extension", "spans": [ [ 0, 0 ] ] }, { "id": "metadata/file/profile/metrics::source-no-parsed-call-sites", "conf": 0.98, "crit": 2, "desc": "Source has no parsed call sites", "spans": [ [ 0, 0 ] ] }, { "id": "metadata/lang/scripted::dts-declaration-file", "conf": 0.99, "crit": 2, "desc": "TypeScript declaration file", "spans": [ [ 0, 0 ] ] }, { "id": "metadata/lang/source::js-ts-source-basename", "conf": 0.95, "crit": 2, "desc": "JavaScript or TypeScript source filename", "spans": [ [ 0, 0 ] ] }, { "id": "metadata/file/metrics::low-overall-entropy-source", "conf": 0.9, "crit": 2, "desc": "Source file has low overall entropy", "spans": [ [ 0, 0 ] ] }, { "id": "metadata/package/testing/presence/harness::test-or-declaration-file", "conf": 0.85, "crit": 1, "desc": "File is a test or type-declaration source file", "uses": [ 0 ], "spans": [ [ 0, 0 ] ] } ], "type": "javascript" }, { "ctx": [ { "b": "DKp(rarR\u003eCvqPN1iV]RiBA}?pB1.MBvpKyhv@Dg4AW04warR^Hb6EKrB7]Mgb03?\u003cgCgvlf!\u003c\u003e63lQDlar\u003eucB7ol8Acb/jzx.a:b2\u0026\u0026bwM98Vx(FepwmYv!zFsibz/fRsw]zYjA+eV?Bs?0vy\u0026stred9HxarR\u003ewz/668vp%c}iV]RWBAzFyiXJd0x([3hvLheez7!p*w[=c%By/olrc-B]wg{tZw[=c%By/olrc-B]wg@4BwO0JivrlK4AXzJWAaK8zA+eV?Bs?0vy\u0026stred9HxarR\u003eAx\u003e7Z(B7DKRar\u003cJKr3A\u003e2arR^Hb4CLeBAh88B-.LxB0rT/tm8F}arR^HarV1rarR^HarR^HarR^Hb5Q?awG\u003ceTa%oJ!A=k+pn)#Q.B95PS3lQDlarR^HarR^Har\u003eDjBzb/arDz.(zEEx[b03?\u003coIn/ta$K6zarR^HarR^HarR^JB-IpxiV]RWBAzFyiXJd0x([3hvLheez7!NQvr\u003c47arR^HarR^HEjLZFarR^HarR!N3lQDlarR^HarR^Har\u003eYizdK[Lar\u003cJ*A+/.sp\u0026yeUyJ1xqa$K6zarR^HarR^HarR^Jxk8E3BZ!u(wPzV%zdK[Lar\u003eVhA+/-nz!@\u0026$z*3gCed9HxarR^HarR^HarR\u003eJA+({Xar\u003eGvBz#pZfe3%LBzb/ae[n*pfkUcr", "ln": 0, "col": 1, "line": 1 }, { "b": "Bzb/ae[n*pfjwWdCWUG2wPzo(A=(FCx^9)barR^HarR!P3lQDlaycJ9arR^Hb5H+5zx.a:a%FMBarR^Hb6n9HwPG4Rar\u003eJqwmZ0rwg?$Ba$K6zarR^JA+fidB7]-mA^n\u0026\u0026aBsCrarR^HarR^JBA}?pb03?\u003cxk8Died9HxarR^HarR\u003eJA+({Xar\u003eGvBz#pZfe3%LBzb/ae[n*pfgow-x(mTbwO=S\u003eD2Nt9fgow-x(mTbwO=S\u003eD2Nt9e[X)ua$K6zarR^HarR^Jwnc6}v@#TfC{ko(b6n9HwPGIBwNP7\u003ceN@Znz/N3earR^HEjLZFarR^JB7ol8AccdBiV@=$ed9HxarR\u003eswPhi#wmYT*x\u003equfiV@+RarR^HarR^Hb0Zl}AaK8zA+eV?BrS:*a$s=/3lQDlarR^Har\u003c6)D2NtoflgSjv@#j4B0rT/a$s=zarR^HEjLZFarR^JBA}?pB5m0*y?W%7wPydRzGGDcBvY?YxD/FWa#zh^vL}R7fF^cFwhDk7w\u0026zFQhz^y8wNWIJiBT%RgbJF}h-UtSg=vlEv}o1WvLGR{v\u003eY\u003e", "ln": 1452, "col": 31, "line": 46 } ], "depth": 1, "facts": { "imp": [ [ "*", "@types/reactcss" ], [ "*", "@types/react" ] ], "metrics": { "file": { "size": 1944, "entropy": 4.39 }, "binary": { "peak_region_bytes": 1944, "peak_region_entropy": 4.45 }, "references": { "declared_count": 2, "unresolved_count": 0, "security_hold_count": 0, "unresolved_extension_count": 0 } } }, "id": 4, "mol": "K(Li)Md(Pa₆)", "path": "react-color-3.0.11.tgz!!react-color/package.json", "pid": 0, "refs": [ { "to": "pkg:github/definitelytyped/definitelytyped", "off": 1598, "kind": "repository" }, { "to": "pkg:npm/%40types/react", "off": 15, "kind": "dependency" }, { "to": "pkg:npm/%40types/reactcss", "off": 1782, "kind": "dependency" } ], "risk": 5, "sha": "4246e53051ed071d4df5d03a9e311032af79cb10321241243f5fd06eae036796", "size": 1944, "traits": [ { "id": "supply-chain/missing-author", "conf": 0.5, "crit": 3, "desc": "Package has empty or missing author field", "spans": [ [ 0, 21 ] ] }, { "id": "metadata/package/manifest/homepage::homepage-git-host", "conf": 0.9, "crit": 3, "desc": "Homepage points to major Git host", "spans": [ [ 126, 80 ] ] }, { "id": "metadata/package/manifest/name::scoped-known-org-1", "conf": 1.0, "crit": 3, "desc": "Package from known org scope", "spans": [ [ 6, 18 ] ] }, { "id": "metadata/package/manifest/repository::has-repository-field", "conf": 0.9, "crit": 2, "desc": "package.json declares repository metadata", "spans": [ [ 1543, 0 ] ] }, { "id": "metadata/package/manifest/repository::has-repository-url", "conf": 0.85, "crit": 2, "desc": "package.json declares a repository URL", "spans": [ [ 1590, 0 ] ] }, { "id": "metadata/package/manifest/repository::repo-url-git-host", "conf": 0.9, "crit": 3, "desc": "Repository identifies major Git host", "spans": [ [ 1590, 54 ] ] }, { "id": "metadata/package/quality/empty::package-empty-scripts-object", "conf": 0.85, "crit": 3, "desc": "Package declares an empty scripts object", "spans": [ [ 1707, 21 ] ] }, { "id": "well-known/lib/development/definitelytyped::scoped-package-name", "conf": 0.99, "crit": 3, "desc": "DefinitelyTyped @types package name", "spans": [ [ 6, 18 ] ] }, { "id": "metadata/package/dependencies/manifest::npm-wildcard-dependency", "conf": 0.85, "crit": 3, "desc": "npm runtime dependency pinned to '*'", "spans": [ [ 1726, 1 ] ] }, { "id": "metadata/package/manifest/entrypoint::pkg-types-field", "conf": 0.9, "crit": 3, "desc": "Package declares TypeScript types entry", "spans": [ [ 1516, 10 ] ] }, { "id": "metadata/package/manifest/name::npm-no-name-field", "conf": 0.9, "crit": 3, "desc": "package.json omits name field" } ], "type": "package.json" }, { "ctx": [ { "b": "DM)3hz/ZhBBy/qkiWeDXz6yIPzEEx[b03]kBA}?pB1.MBvpKy6efYmGA=U@kzx.a=f/Z\u003cxe?!F2b5?Wly?W%7wN]dRBrS+2h-J=Sh-AJFiv(v.xjUBXvr(]riY5xiy*?A%B97=jwPz\u003caz/c:Wa#88ggCgv9efXIBBzbPkb03]\u0026D2Ntoa$K{Wx([f5b06Q:", "ln": 0, "col": 1, "line": 1 } ], "depth": 2, "facts": { "metrics": { "file": { "size": 926, "entropy": 4.85 }, "binary": { "peak_region_bytes": 926, "peak_region_entropy": 4.85 }, "registry": { "age_days": 4, "file_count": 18, "maintainers": 1, "published_at": 1788977329, "releases_24h": 0, "releases_48h": 0, "is_deprecated": 0, "release_count": 707, "security_hold": 0, "unpacked_size": 408108, "version_removed": 0, "downloads_recent": 598444297, "package_age_days": 3771, "first_published_at": 1463510602, "has_install_script": 0, "previous_published_at": 1785448443, "publisher_in_maintainers": 1, "days_since_previous_release": 40 } } }, "id": 25, "mol": "Md(Re)", "path": "@types_react@19.3.0.registry.json", "pid": 154, "rel": "registry", "risk": 1, "role": "sidecar", "sha": "201a265e74ae96ad969e25cb8ed9ad874ffb35ed02657783672f7992f08dd6a0", "size": 926, "traits": [ { "id": "metadata/registry::freshly-published", "conf": 1.0, "crit": 3, "desc": "Release published within seven days", "spans": [ [ 0, 24 ] ] } ], "type": "registry" }, { "ctx": [ { "b": "DM)3hz/ZhBBy/qkiWeDXz6yIPzEEx[b03]kBA}?pB1.MBvpKy?B8@JRb6EKrB7]Mgb03]5e\u002624lgA[v]AckSax(^%0wm5+!b04CqgC.3Dh-JMIefXInwNw$RD2\u003ee\u003chz+", "ln": 0, "col": 1, "line": 1 } ], "depth": 2, "facts": { "metrics": { "file": { "size": 937, "entropy": 4.83 }, "binary": { "peak_region_bytes": 937, "peak_region_entropy": 4.83 }, "registry": { "age_days": 641, "file_count": 5, "maintainers": 1, "published_at": 1733927825, "is_deprecated": 0, "release_count": 17, "security_hold": 0, "unpacked_size": 4471, "version_removed": 0, "downloads_recent": 4001582, "package_age_days": 3590, "first_published_at": 1479152246, "has_install_script": 0, "previous_published_at": 1709235426, "publisher_in_maintainers": 1, "days_since_previous_release": 285 } } }, "id": 26, "path": "@types_reactcss@1.2.13.registry.json", "pid": 4, "rel": "registry", "role": "sidecar", "sha": "29fedbd8a7c9b5a402efb03c2c1dd3920e0fc66399a732b8c403396e226cbfd8", "size": 937, "traits": [ { "id": "metadata/registry::established-package", "conf": 1.0, "crit": 1, "desc": "Package is at least one year old", "spans": [ [ 0, 0 ] ] }, { "id": "metadata/registry::single-maintainer", "conf": 1.0, "crit": 1, "desc": "Registry package lists one maintainer", "spans": [ [ 0, 0 ] ] }, { "id": "metadata/registry::widely-installed", "conf": 1.0, "crit": 1, "desc": "Large registry install base (10k+ downloads)", "spans": [ [ 0, 0 ] ] } ], "type": "registry" }, { "ctx": [ { "b": "DM)3hz/ZhBBy/qkiWeDXz6yIPzEEx[b03]kBA}?pB1.MBvpKyhv@Dg4AW04UC4CYnx(v(kiWcvjfFk7ma$K{SBZ/f3B7/b}uTX42iX-MEg+{*yf/I9zb4ka}uU0O\u003cB0p", "ln": 0, "col": 1, "line": 1 } ], "depth": 1, "facts": { "metrics": { "file": { "size": 942, "entropy": 4.86 }, "binary": { "peak_region_bytes": 942, "peak_region_entropy": 4.86 }, "registry": { "age_days": 985, "file_count": 41, "maintainers": 1, "published_at": 1704224179, "releases_24h": 0, "releases_48h": 0, "is_deprecated": 0, "release_count": 43, "security_hold": 0, "unpacked_size": 18122, "version_removed": 0, "downloads_recent": 4184074, "package_age_days": 3590, "first_published_at": 1479152225, "has_install_script": 0, "previous_published_at": 1699389199, "publisher_in_maintainers": 1, "days_since_previous_release": 55 } } }, "id": 27, "path": "@types_react-color@3.0.11.registry.json", "pid": 0, "rel": "registry", "role": "sidecar", "sha": "26dd74ea595db6b34f8a4c9c255ccab30f5cb76027b39e935aef536728d00e21", "size": 942, "traits": [ { "id": "metadata/registry::established-package", "conf": 1.0, "crit": 1, "desc": "Package is at least one year old", "spans": [ [ 0, 0 ] ] }, { "id": "metadata/registry::many-releases", "conf": 1.0, "crit": 1, "desc": "Twenty or more releases", "spans": [ [ 0, 0 ] ] }, { "id": "metadata/registry::single-maintainer", "conf": 1.0, "crit": 1, "desc": "Registry package lists one maintainer", "spans": [ [ 0, 0 ] ] } ], "type": "registry" } ], "rev": "c7f7e", "v": "8" } }