{
  "ml": {
    "v": "4",
    "fs": [
      {
        "id": 0,
        "prob": 0.6687533259391785,
        "class": 0
      }
    ],
    "prob": 0.6687533,
    "class": 0,
    "models": [
      {
        "m": "az",
        "prob": 0.6687533,
        "class": 0
      },
      {
        "m": "az/config",
        "prob": 0.15277778,
        "class": 0
      },
      {
        "m": "az/package.json",
        "prob": 0.09090909,
        "class": 0
      }
    ],
    "version": "v16.16",
    "thresholds": [
      0.9961373,
      0.9998425
    ],
    "analyzed_at": "2026-05-16T07:14:56Z"
  },
  "path": "package.json",
  "raw": {
    "v": "4",
    "fs": [
      {
        "f": "O(S₂)Md(Pa₃)",
        "x": 3,
        "id": 0,
        "is": [
          "@openclaw/plugin-sdk"
        ],
        "ms": {
          "file": {
            "size": 325.0
          }
        },
        "sz": 325,
        "ts": [
          {
            "c": 0.800000011920929,
            "d": "Package marked as private",
            "e": [
              "true"
            ],
            "i": "metadata/package/fields/private::is-private",
            "l": 3
          },
          {
            "a": "T1195.002",
            "c": 0.699999988079071,
            "d": "Package has no compile script entry",
            "e": [
              "field 'scripts.compile' does not exist"
            ],
            "i": "objectives/supply-chain/hidden-payload/staging::no-build-script-compile",
            "l": 1
          },
          {
            "c": 0.75,
            "d": "Package has meaningful description",
            "e": [
              "OpenClaw Cloudflare AI Gateway provider plugin"
            ],
            "i": "metadata/package/fields/description::has-description",
            "l": 3
          },
          {
            "a": "T1195.002",
            "c": 0.699999988079071,
            "d": "Package has no prepublishOnly script entry",
            "e": [
              "field 'scripts.prepublishOnly' does not exist"
            ],
            "i": "objectives/supply-chain/hidden-payload/staging::no-build-script-prepublish-only",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "npm package has version field",
            "e": [
              "2026.5.14"
            ],
            "i": "metadata/package/fields/version::npm-has-version",
            "l": 2
          },
          {
            "a": "T1195.002",
            "c": 0.699999988079071,
            "d": "Package has no prepublish script entry",
            "e": [
              "field 'scripts.prepublish' does not exist"
            ],
            "i": "objectives/supply-chain/hidden-payload/staging::no-build-script-prepublish",
            "l": 1
          },
          {
            "c": 0.699999988079071,
            "d": "Package has mature version number",
            "e": [
              "2026.5.14"
            ],
            "i": "metadata/package/fields/version::mature-version",
            "l": 3
          },
          {
            "c": 1.0,
            "d": "-sdk suffix",
            "e": [
              "-sdk"
            ],
            "i": "objectives/supply-chain/trojanized/library/framework::sdk-suffix",
            "l": 1
          },
          {
            "a": "T1195.002",
            "c": 0.699999988079071,
            "d": "Package has no package script entry",
            "e": [
              "field 'scripts.package' does not exist"
            ],
            "i": "objectives/supply-chain/hidden-payload/staging::no-build-script-package",
            "l": 1
          },
          {
            "a": "T1195.002",
            "c": 0.699999988079071,
            "d": "Package has no build script entry",
            "e": [
              "field 'scripts.build' does not exist"
            ],
            "i": "objectives/supply-chain/hidden-payload/staging::no-build-script-build",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Uses standard version format",
            "e": [
              "2026.5.14"
            ],
            "i": "metadata/package/fields/version::conventional-version-base",
            "l": 2
          },
          {
            "c": 0.6000000238418579,
            "d": "Package version suggests maturity",
            "e": [
              "2026.5.14"
            ],
            "i": "objectives/supply-chain/metadata-anomaly/manifest/npm::version-mature",
            "l": 1
          },
          {
            "a": "T1195.002",
            "c": 0.699999988079071,
            "d": "Package has no compile-web script entry",
            "e": [
              "field 'scripts.compile-web' does not exist"
            ],
            "i": "objectives/supply-chain/hidden-payload/staging::no-build-script-compile-web",
            "l": 1
          },
          {
            "c": 0.800000011920929,
            "d": "Package has devDependencies",
            "e": [
              "{\"@openclaw/plugin-sdk\":\"workspace:*\"}"
            ],
            "i": "metadata/package/fields/dependencies::has-dev-deps",
            "l": 2
          },
          {
            "c": 0.8399999737739563,
            "d": "Package uses npm scope name",
            "e": [
              "@openclaw/cloudflare-ai-gateway-provider"
            ],
            "i": "objectives/supply-chain/metadata-anomaly/manifest/npm::scoped-package-name",
            "l": 1
          },
          {
            "a": "T1195.002",
            "c": 0.699999988079071,
            "d": "Package has no prepare script entry",
            "e": [
              "field 'scripts.prepare' does not exist"
            ],
            "i": "objectives/supply-chain/hidden-payload/staging::no-build-script-prepare",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "npm package has name field",
            "e": [
              "@openclaw/cloudflare-ai-gateway-provider"
            ],
            "i": "metadata/package/quality::npm-has-name",
            "l": 2
          },
          {
            "a": "T1195.002",
            "c": 0.699999988079071,
            "d": "Package has no package-web script entry",
            "e": [
              "field 'scripts.package-web' does not exist"
            ],
            "i": "objectives/supply-chain/hidden-payload/staging::no-build-script-package-web",
            "l": 1
          },
          {
            "a": "T1195.002",
            "c": 0.8199999928474426,
            "d": "Package name says AI agent",
            "e": [
              "@openclaw/cloudflare-ai-gateway-provider"
            ],
            "i": "objectives/supply-chain/metadata-anomaly/manifest/ai-tool::ai-tool-name-ai-agent",
            "l": 3
          },
          {
            "a": "T1195.002",
            "c": 0.6499999761581421,
            "d": "npm devDependency uses workspace protocol",
            "e": [
              "\"workspace:"
            ],
            "i": "objectives/supply-chain/metadata-anomaly/dependency/manifest::npm-workspace-devdependency",
            "l": 3
          },
          {
            "a": "T1195.002",
            "c": 0.699999988079071,
            "d": "Package has no prepack script entry",
            "e": [
              "field 'scripts.prepack' does not exist"
            ],
            "i": "objectives/supply-chain/hidden-payload/staging::no-build-script-prepack",
            "l": 1
          },
          {
            "c": 0.949999988079071,
            "d": "imports @openclaw/plugin-sdk from workspace:*",
            "e": [
              "@openclaw/plugin-sdk"
            ],
            "i": "metadata/import/npm::openclaw/plugin-sdk",
            "l": 2
          },
          {
            "a": "T1195.002",
            "c": 0.800000011920929,
            "d": "Package has no recognizable build pipeline",
            "e": [
              "field 'scripts.prepare' does not exist",
              "field 'scripts.prepublish' does not exist",
              "field 'scripts.package-web' does not exist",
              "field 'scripts.package' does not exist",
              "field 'scripts.compile' does not exist",
              "field 'scripts.build' does not exist",
              "field 'scripts.compile-web' does not exist",
              "field 'scripts.prepublishOnly' does not exist",
              "field 'scripts.prepack' does not exist"
            ],
            "i": "objectives/supply-chain/hidden-payload/staging::no-build-script",
            "l": 1
          }
        ],
        "sha": "62c060cba9939681c2acbb95784df06e0c6e565c0f7a63232486fe01fbeb74f8",
        "path": "package.json",
        "type": "package.json"
      }
    ],
    "tv": "08128"
  }
}