{ "ml": { "v": "7", "eng": "2.8.0", "lvl": -1, "conf": 0, "mods": [ { "cls": 0, "raw": 0.000034183264, "rte": "az", "prob": 0.000034183264 }, { "cls": 0, "raw": 0.0025795102, "rte": "az/gem", "prob": 0.0025795102 } ], "prob": 0.000034183264, "files": [ { "id": 0, "lvl": -1, "conf": 0, "prob": 0.000034183263778686523, "type": "gem" }, { "id": 1, "lvl": -1, "conf": 0, "prob": 0.000011245409950788599, "type": "tar.gz" }, { "id": 2, "lvl": -1, "conf": 0, "prob": 0.000011175870895385742, "type": "ruby" }, { "id": 3, "lvl": -1, "conf": 0, "prob": 0.000012050072655256372, "type": "ruby" }, { "id": 4, "lvl": -1, "conf": 0, "prob": 0.000009059906005859375, "type": "ruby" }, { "id": 5, "lvl": -1, "conf": 0, "prob": 0.000011265277862548828, "type": "ruby" }, { "id": 19, "lvl": -1, "conf": 0, "prob": 0.00000908970832824707, "type": "registry" }, { "id": 20, "lvl": -1, "conf": 0, "prob": 0.000010331471457902808, "type": "registry" } ], "version": "v18.18", "analyzed_at": "2026-08-27T23:36:03Z" }, "path": "hotsheet-0.2.4.gem", "raw": { "files": [ { "id": 0, "ctx": [ { "b": "zdN/$wmoN*e[YFg00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fFCgmg=d2?fFCgmfFA", "ln": 0 } ], "mol": "H₂(CmPo₂)", "sha": "67bac8464e80aeb6bb3c841109745f3fd7b0fbf51739019fd136de589171b2da", "path": "hotsheet-0.2.4.gem", "refs": [ { "to": "pkg:gem/rails", "off": 0, "kind": "dependency" } ], "risk": 3, "size": 10240, "type": "gem", "facts": { "metrics": { "gem": { "dependency_count": 1, "runtime_dependency_count": 1, "development_dependency_count": 0 }, "file": { "size": 10240, "entropy": 6.52 }, "binary": { "peak_region_bytes": 5120, "peak_region_entropy": 7.81 }, "archive": { "file_count": 3, "member_count": 3, "script_count": 0, "directory_count": 0, "executable_count": 0, "hidden_file_count": 0, "uncompressed_size": 7071, "max_filename_length": 17, "rtlo_filename_count": 0, "format.regular_count": 3, "nested_archive_count": 3, "path_traversal_count": 0, "symlink_escape_count": 0, "security.setgid_count": 0, "security.setuid_count": 0, "security.sticky_count": 0, "double_extension_count": 0, "security.symlink_count": 0, "unicode_filename_count": 0, "homoglyph_filename_count": 0, "timing.mtime_unique_count": 1, "misplaced_executable_count": 0, "timing.mtime_spread_seconds": 0, "security.world_writable_count": 0 } } }, "ident": { "name": { "value": "hotsheet", "source": "gem.name", "verified": false }, "urls": [ { "url": "https://github.com/renuo/hotsheet", "kind": "homepage", "source": "gem.homepage" } ], "trust": "unsigned", "authors": [ { "name": "Renuo AG", "role": "author", "source": "gem.authors" } ], "version": { "value": "0.2.4", "source": "gem.version", "verified": false } }, "traits": [ { "id": "micro-behaviors/process/interpreter/eval::ruby-instance-eval", "atk": "T1059", "conf": 0.9, "crit": 3, "desc": "Ruby instance_eval call" }, { "id": "micro-behaviors/communications/http/url/forge::public-code-forge-url", "conf": 0.9, "crit": 3, "desc": "References a public code-forge URL" }, { "id": "micro-behaviors/process/hook/event::ruby-before-action-hook", "conf": 0.8, "crit": 3, "desc": "Ruby before-action hook" } ] }, { "depth": 1, "facts": { "metrics": { "file": { "size": 5967, "entropy": 7.95 }, "parse": { "error_count": 1 }, "binary": { "peak_region_bytes": 5967, "peak_region_entropy": 7.81 } } }, "id": 1, "mol": "H₂(CmPo₂)", "path": "hotsheet-0.2.4.gem!!data.tar.gz", "pid": 0, "risk": 3, "sha": "9e7cdd7145d1cd2adc3754f22138d64d436b9cee507f1160b72dda7849e8a1d2", "size": 5967, "traits": [ { "id": "micro-behaviors/process/hook/event::ruby-before-action-hook", "conf": 0.8, "crit": 3, "desc": "Ruby before-action hook" }, { "id": "micro-behaviors/process/interpreter/eval::ruby-instance-eval", "atk": "T1059", "conf": 0.9, "crit": 3, "desc": "Ruby instance_eval call" }, { "id": "micro-behaviors/communications/http/url/forge::public-code-forge-url", "conf": 0.9, "crit": 3, "desc": "References a public code-forge URL" } ], "type": "tar.gz" }, { "ctx": [ { "b": "boQPsz*C#juVQsfx(mM\u003cy?X05A:-=BaARTDwEn=Oy*?yaav{A)B7/b@BuhDYxK$:%3lQE9zEWH9wmV(Oz/*5lwO2%AiZW?6w[+(+3lQE1BAzLgA+eV\u0026wPw[Ov@z", "ln": 0, "col": 1, "line": 1 }, { "b": "arR^(v@DgazeKzqjS]913jm)#arUfjy\u0026%PjauBjEefFImx()=)y?kTIw)]H%wEoL5arUfjy\u0026%PjB09W\u0026x(n0lvqYN^uUay?y:ZSuz!%MkzGvlHiV@M^wNw$Vw)]*#ByeJ@zF0P}B-H]jx(v\u003e@arUlkwc@U^ay]4}az$R8wEoL5arS6$v@Dl%x\u003eHThvrkY%E0^54zeS@@y+x*rvR/Q.zEEx[dk2ZXuVML%az2C33jm)#wmYu}y**^:yZIpcarUYoBn", "ln": 431, "col": 2, "line": 17 } ], "depth": 2, "facts": { "imp": [ [ "", "include" ], [ "", "attr_reader" ], [ "", "freeze" ], [ "", "merge_config!" ], [ "", "constantize" ], [ "", "to_s" ], [ "", "column" ], [ "", "instance_eval" ], [ "", "to_s" ], [ "", "table_name" ], [ "", "human" ], [ "", "model_name" ], [ "", "humanize" ], [ "", "to_s" ], [ "", "instance_exec" ], [ "", "select" ], [ "", "visible?" ], [ "", "page_info" ], [ "", "transpose" ], [ "", "pluck" ], [ "", "offset" ], [ "", "limit" ], [ "", "order" ], [ "", "keys" ], [ "", "count" ], [ "", "to_i" ], [ "", "cover?" ], [ "", "ceil" ], [ "", "fdiv" ], [ "", "pred" ], [ "", "next" ], [ "", "each" ], [ "", "column_names" ], [ "", "column" ], [ "", "ensure_column_exists!" ], [ "", "to_s" ], [ "", "new" ], [ "", "include?" ], [ "", "column_names" ], [ "", "to_s" ], [ "", "raise" ], [ "", "column_names" ] ], "mbr": [ "@columns.select", "@model.column_names", "@model.column_names.include?", "@model.instance_exec", "@model.model_name", "@model.model_name.human", "@model.table_name", "column.visible?", "columns.keys", "name.to_s", "name.to_s.constantize", "page.next", "page.pred", "scoped.count", "scoped.order", "scoped.order.limit", "scoped.order.limit.offset", "scoped.order.limit.offset.pluck", "scoped.order.limit.offset.pluck.transpose", "total.fdiv", "total.fdiv.ceil" ], "tgt": [ "attr_reader", "ceil", "column", "column_names", "constantize", "count", "cover?", "each", "ensure_column_exists!", "fdiv", "freeze", "human", "humanize", "include", "include?", "instance_eval", "instance_exec", "keys", "limit", "merge_config!", "model_name", "new", "next", "offset", "order", "page_info", "pluck", "pred", "raise", "select", "table_name", "to_i", "to_s", "transpose", "visible?" ], "funcs": [ [ "initialize", 308 ], [ "name", 556 ], [ "label", 619 ], [ "scoped", 735 ], [ "columns", 825 ], [ "cells_for", 902 ], [ "page_info", 1092 ], [ "use_default_configuration", 1349 ], [ "column", 1445 ], [ "ensure_column_exists!", 1570 ] ], "metrics": { "ast": { "op.lor": 2, "op.mul": 2, "max_depth": 13, "op.concat": 33, "call_count": 42, "node_count": 569, "member_count": 21, "max_array_len": 2, "op_density.lor": 0, "op_density.mul": 0, "member_depth_max": 6, "op_density.concat": 0.06 }, "file": { "size": 1755, "entropy": 4.77 }, "text": { "lines": 73, "top_char": 101, "max_ws_run": 1, "digit_ratio": 0.01, "space_count": 276, "char_entropy": 4.77, "unique_chars": 59, "top_char_null": 0, "string_density": 0.01, "top_char_ratio": 0.09, "avg_line_length": 23.04, "max_line_length": 102, "empty_line_ratio": 0.27, "last_line_length": 3, "whitespace_ratio": 0.2, "identifier_density": 1.78, "line_length_stddev": 24.96, "normalized_string_count": 0.12, "normalized_unique_identifiers": 9.85 }, "binds": { "count": 9 }, "binary": { "peak_region_bytes": 1755, "peak_region_entropy": 4.75 }, "source": { "function_count": 10 }, "strings": { "bytes": 59, "count": 1, "avg_length": 59, "max_length": 59, "avg_entropy": 4.23, "email_count": 1 }, "comments": { "chars": 28, "count": 1, "lines": 1, "to_code_ratio": 0.01 }, "functions": { "count": 10 }, "identifiers": { "count": 130, "unique": 61, "avg_length": 7.16, "max_length": 25, "min_length": 3, "avg_entropy": 2.49, "reuse_ratio": 0.47, "length_stddev": 3.84, "high_entropy_count": 2, "high_entropy_ratio": 0.03, "all_lowercase_ratio": 0.7, "all_uppercase_ratio": 0.02, "underscore_prefix_count": 1 } } }, "id": 2, "mol": "H(Po)", "path": "hotsheet-0.2.4.gem!!data.tar.gz!!lib/hotsheet/sheet.rb", "risk": 1, "sha": "d260613af4fcae2ccc0550e93374a788760f777baeff47032d0db80f967a56e2", "size": 1755, "traits": [ { "id": "micro-behaviors/process/interpreter/eval::ruby-instance-eval", "atk": "T1059", "conf": 0.9, "crit": 3, "desc": "Ruby instance_eval call", "spans": [ [ 495, 13 ] ] } ], "type": "ruby" }, { "ctx": [ { "b": "boQPsz*C#juVQsfx(mM\u003cy?X05A:-=BaARTDwEn=+wPq\u003cbA+cvqxM50lxK$:%flQ]EB7]Mga{@v4ADL#owGSggz/*5lwO2%pwO#c{zE\u003e10A+flkx(W=cb4$[pB7+", "ln": 0, "col": 1, "line": 1 }, { "b": "wmYu}B7/b@BAm^iarR^Hav70YwO2$8aBFM1ayX[{x(jn2arR^HarR^(B7/b@BAnM/aBwIzarR^HarR^Hx(n0lvqYN^uUay?y:ZR}v@Dl%x\u003eG5qz/vcjarR^HarR^HkYZQIwPR#2arR^HarUlkwc%C4arUlkwc@U^arR^#f/R]JjS)NxD1gIuy\u0026r-)uUj1*wHH8/BAqbbwPP%]mq=:LzE\u003eCvz/o.IyhW*7c)AetzF0P}fkLMpvqGH@fj/2ND2mvwdf", "ln": 465, "col": 5, "line": 25 } ], "depth": 2, "facts": { "imp": [ [ "", "require" ], [ "", "require" ], [ "", "require" ], [ "", "autoload" ], [ "", "autoload" ], [ "", "include" ], [ "", "attr_reader" ], [ "", "freeze" ], [ "", "merge_config!" ], [ "", "instance_eval" ], [ "", "pop" ], [ "", "freeze" ], [ "", "load_file" ], [ "", "join" ], [ "", "root" ], [ "", "ensure_sheet_exists!" ], [ "", "new" ], [ "", "ensure_unique_name!" ], [ "", "name" ], [ "", "name" ], [ "", "key?" ], [ "", "raise" ], [ "", "const_defined?" ], [ "", "raise" ], [ "", "/hotsheet/column" ], [ "", "/hotsheet/sheet" ], [ "", "hotsheet/config" ], [ "", "hotsheet/engine" ], [ "", "hotsheet/version" ] ], "mbr": [ "@config.pop", "@sheets.key?", "I18n.t", "Object.const_defined?", "Psych.load_file", "Sheet.new", "sheet.name" ], "tgt": [ "attr_reader", "autoload", "const_defined?", "ensure_sheet_exists!", "ensure_unique_name!", "freeze", "include", "instance_eval", "join", "key?", "load_file", "merge_config!", "name", "new", "pop", "raise", "require", "root", "t" ], "funcs": [ [ "configure", 349 ], [ "sheets", 465 ], [ "t", 702 ], [ "sheet", 810 ], [ "ensure_unique_name!", 1000 ], [ "ensure_sheet_exists!", 1176 ] ], "metrics": { "ast": { "max_depth": 14, "op.concat": 12, "call_count": 25, "node_count": 362, "member_count": 7, "max_array_len": 2, "member_depth_max": 2, "op_density.concat": 0.03 }, "file": { "size": 1324, "entropy": 4.73 }, "text": { "lines": 61, "top_char": 101, "max_ws_run": 1, "digit_ratio": 0.01, "space_count": 257, "char_entropy": 4.73, "unique_chars": 65, "top_char_null": 0, "string_density": 0.18, "top_char_ratio": 0.12, "avg_line_length": 20.7, "max_line_length": 104, "empty_line_ratio": 0.28, "last_line_length": 3, "whitespace_ratio": 0.24, "identifier_density": 1.36, "line_length_stddev": 22.12, "normalized_string_count": 1.41, "suspicious_string_ratio": 0.09, "suspicious_identifier_ratio": 0.03, "normalized_unique_identifiers": 6.74 }, "binds": { "count": 6 }, "binary": { "peak_region_bytes": 1324, "peak_region_entropy": 4.74 }, "source": { "class_count": 2, "function_count": 6 }, "imports": { "count": 5, "third_party_count": 5, "third_party_ratio": 1 }, "strings": { "bytes": 228, "count": 11, "shell": 1, "avg_length": 20.73, "max_length": 62, "avg_entropy": 3.21, "entropy_stddev": 0.87 }, "comments": { "chars": 28, "count": 1, "lines": 1, "to_code_ratio": 0.02 }, "functions": { "count": 8 }, "identifiers": { "count": 83, "unique": 40, "avg_length": 7.15, "max_length": 20, "min_length": 1, "avg_entropy": 2.29, "reuse_ratio": 0.48, "length_stddev": 4.07, "has_digit_ratio": 0.05, "sequential_names": 1, "single_char_count": 1, "single_char_ratio": 0.03, "all_lowercase_ratio": 0.55, "all_uppercase_ratio": 0.03, "double_underscore_count": 1, "underscore_prefix_count": 1 } } }, "id": 3, "mol": "H(Po)", "path": "hotsheet-0.2.4.gem!!data.tar.gz!!lib/hotsheet.rb", "risk": 1, "sha": "fd14e99609a522f1c32641ba30aba0eb3b52235b3c637ad8c30b4f075d6fd28f", "size": 1324, "traits": [ { "id": "micro-behaviors/process/interpreter/eval::ruby-instance-eval", "atk": "T1059", "conf": 0.9, "crit": 3, "desc": "Ruby instance_eval call", "spans": [ [ 529, 13 ] ] } ], "type": "ruby" }, { "ctx": [ { "b": "boQPsz*C#juVQsfx(mM\u003cy?X05A:-=BaARTDwEn+?avy6+w[+[2A+cwnxK@r6z!9A}B0bNyayX[8B-Rb8ayYQsnn\u0026P\u003exK$:%e^-*Cq!oI.xMOunB2\u003e%cxk8E3BZ=$kz/4dFwO#TefkboCB7/b@Bt49tz^\u003ewpvqfQjqBJ(to*{WKwfVkrvp%d73josxBAqbbwPPLmz/ff3xlwlaay]x$arR)KlVl\u003cOx\u003eINewGV8dwGVegB7]91wGUA0wftC]x()=)y?j-0z!%MkzGu}jz/M$ivpJ%[zeS@@y+u5qar@1dxK@qTl)ch+azC.6y\u0026%o1wftr4aARpdazbtdB95Kmz!%MkzxJzlay]4}vrDyde^-ZzboP%0wGU(kzdm6%aA7\u003cmA=leyay]hcAbk", "ln": 0, "col": 1, "line": 1 } ], "depth": 2, "facts": { "imp": [ [ "", "configure" ] ], "mbr": [ "Hotsheet.configure" ], "tgt": [ "configure" ], "metrics": { "ast": { "max_depth": 3, "op.concat": 1, "call_count": 1, "node_count": 22, "member_count": 1, "member_depth_max": 2, "op_density.concat": 0.05 }, "file": { "size": 613, "entropy": 4.62 }, "text": { "lines": 21, "top_char": 101, "max_ws_run": 3, "digit_ratio": 0.02, "space_count": 108, "char_entropy": 4.62, "unique_chars": 52, "top_char_null": 0, "top_char_ratio": 0.1, "avg_line_length": 28.19, "max_line_length": 74, "empty_line_ratio": 0.24, "last_line_length": 3, "whitespace_ratio": 0.21, "identifier_density": 0.1, "line_length_stddev": 24.35, "suspicious_comment_ratio": 0.07, "normalized_unique_identifiers": 0.46 }, "binary": { "peak_region_bytes": 613, "peak_region_entropy": 4.62 }, "comments": { "chars": 532, "count": 14, "lines": 14, "base64": 1, "to_code_ratio": 2, "url_in_comments": 1 }, "identifiers": { "count": 2, "unique": 2, "avg_length": 8.5, "max_length": 9, "min_length": 8, "avg_entropy": 2.83, "reuse_ratio": 1, "length_stddev": 0.5, "all_lowercase_ratio": 0.5 } } }, "id": 4, "mol": "H(Cm)", "path": "hotsheet-0.2.4.gem!!data.tar.gz!!lib/generators/templates/hotsheet.rb", "risk": 2, "sha": "727ab406a705012adb3db110d3377fdd4c4b6857a3612f7fe0ff368de8521228", "size": 613, "traits": [ { "id": "metadata/file/profile/language::lang-english--atom-2", "conf": 0.8, "crit": 2, "desc": "English function-word token \"and\"", "spans": [ [ 194, 0 ] ] }, { "id": "metadata/file/profile/language::lang-english--atom-5", "conf": 0.8, "crit": 2, "desc": "English function-word token \"for\"", "spans": [ [ 215, 0 ] ] }, { "id": "micro-behaviors/communications/http/url/forge::public-code-forge-url", "conf": 0.9, "crit": 3, "desc": "References a public code-forge URL", "spans": [ [ 84, 19 ] ] }, { "id": "metadata/file/profile/language::lang-english--atom-1", "conf": 0.8, "crit": 2, "desc": "English function-word token \"the\"", "spans": [ [ 43, 0 ] ] } ], "type": "ruby" }, { "id": 5, "mol": "H(Po)", "sha": "15548b15c3da4f5da250d56531eca766eae37062befe5faebed02e0c320dad46", "path": "hotsheet-0.2.4.gem!!data.tar.gz!!app/controllers/hotsheet/sheets_controller.rb", "risk": 1, "size": 1093, "type": "ruby", "depth": 2 }, { "id": 19, "sha": "6d664b15e7ae74bf41ffd9cf8c85967ff9440014c04a56e5a697f4eff81e894d", "path": "rails@8.1.3.1.registry.json", "size": 1007, "type": "registry", "depth": 1 }, { "ctx": [ { "b": "DM)3hz/ZhBBy/qkiWeiFz6yIPzEEx[b03]Yz/*5lwO2%cefYmGA=U@kzx.a=fFkakg:jE{AckSax(^%0wm5+!b04Cqi5-YOgb7TzefXInwNw$RD2\u003ee\u003cfF1z:vru74Byfi5A=U@kzx.bVB.\u003e\u003eBb4kRoxM4]niWdEkzGP\u003euk$raIb6mKvy?j!KzGP=iefXRoB7ol8Acb/j", "ln": 0, "col": 1, "line": 1 } ], "depth": 1, "facts": { "metrics": { "file": { "size": 863, "entropy": 4.65 }, "binary": { "peak_region_bytes": 863, "peak_region_entropy": 4.65 }, "registry": { "age_days": 0, "published_at": 1787582074, "is_deprecated": 0, "downloads_total": 3092, "downloads_recent": 0 } } }, "id": 20, "mol": "O(S)Md", "path": "hotsheet@0.2.4.registry.json", "pid": 0, "rel": "registry", "risk": 2, "role": "sidecar", "sha": "a274babf0e9bd73d6c3295f7fa2e852d8e484f1a7464452b39ca2c94806cfb07", "size": 863, "traits": [ { "id": "metadata/registry::low-adoption", "conf": 1.0, "crit": 1, "desc": "Near-zero recent downloads for registry package", "spans": [ [ 0, 0 ] ] }, { "id": "metadata/registry::freshly-published", "conf": 1.0, "crit": 3, "desc": "Release published within seven days", "spans": [ [ 0, 24 ] ] }, { "id": "objectives/supply-chain/impersonation/registry/publish::freshly-published-unestablished-package", "conf": 0.7, "crit": 3, "desc": "Fresh low-adoption registry release", "spans": [ [ 0, 24 ] ] } ], "type": "registry" } ], "omitted_files": 2, "rev": "b59b7", "v": "8" } }