{
  "ml": {
    "v": "7",
    "eng": "2.5.0-beta.0",
    "lvl": -1,
    "conf": 0,
    "mods": [
      {
        "cls": 0,
        "raw": 0.000014662743,
        "rte": "az",
        "prob": 0.000014662743
      },
      {
        "cls": 0,
        "raw": 0.000007659197,
        "rte": "az/rpm",
        "prob": 0.000007659197
      }
    ],
    "prob": 0.000015159448,
    "files": [
      {
        "id": 0,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000015159447684709448,
        "type": "rpm"
      },
      {
        "id": 1,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000015159447684709448,
        "type": "systemd_service"
      },
      {
        "id": 2,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000012636184692382812,
        "type": "registry"
      }
    ],
    "version": "v18.18",
    "analyzed_at": "2026-08-01T21:05:19Z"
  },
  "path": "pcp-geolocate-7.2.0-1.fc45.aarch64.rpm",
  "raw": {
    "files": [
      {
        "id": 0,
        "mol": "O(P)Md(Pa)",
        "sha": "6abce2740678ac1beb44d7cf78732641b9dc037e53a449ef252509c3369bdfa3",
        "path": "/data/samples/unknown/foraged/fedora/fedoraproject.org/_/pcp-geolocate/pcp-geolocate-7.2.0-1.fc45.aarch64.rpm",
        "risk": 2,
        "size": 13947,
        "type": "rpm",
        "facts": {
          "metrics": {
            "rpm": {
              "buildtime": 1785374896.0
            },
            "file": {
              "size": 13947.0,
              "entropy": 5.4,
              "size_bytes": 13947.0
            },
            "binary": {
              "overall_entropy": 5.4,
              "peak_region_bytes": 1659.0,
              "peak_region_entropy": 7.6
            }
          }
        },
        "ident": {
          "name": {
            "value": "pcp-geolocate",
            "source": "rpm.name",
            "verified": false
          },
          "urls": [
            {
              "url": "https://pcp.io",
              "kind": "homepage",
              "source": "rpm.url"
            }
          ],
          "trust": "unsigned",
          "authors": [
            {
              "name": "Fedora Project",
              "role": "packager",
              "source": "rpm.packager"
            }
          ],
          "version": {
            "value": "7.2.0",
            "source": "rpm.version",
            "verified": false
          },
          "organization": {
            "value": "Fedora Project",
            "source": "rpm.vendor",
            "verified": false
          }
        },
        "traits": [
          {
            "id": "objectives/persistence/system/service/systemd::systemd-before-exists",
            "atk": "T1543.002",
            "conf": 1.0,
            "crit": 3,
            "desc": "Unit Before= exists"
          },
          {
            "id": "metadata/package/files/system-package::rpm-signature-present",
            "conf": 0.949999988079071,
            "crit": 3,
            "desc": "RPM signature header is present"
          },
          {
            "id": "metadata/package/files/system-package::fedora-rpm-vendor",
            "conf": 0.9900000095367432,
            "crit": 3,
            "desc": "Fedora Project RPM vendor identity"
          }
        ]
      },
      {
        "ctx": [
          {
            "b": "zFT38wIe7kA+w%93pnroz/PzLAbx8}e]$PAC4\u003eC$3jp0owPz%dv}w{Mrc-B]j-tjHB7/Gl3pPhJv]EFTA=:C$B-RNRy?Wu\u0026CX7wrAar\u0026uvRGZkAar\u0026sxjV0$z!0i$wGSTqByM$yv@K8qvpA!:B1.DJBzkVhvqEPfwP8y6v{%E\u003c3p/bPB-oG:z/o.8rDz.(j-UEVBp5vVnP5P\u003evqG:=3rHUNBy!#HC%c1!y\u0026\u003cwyB-Rbme{7JxxjVe(",
            "ln": 109,
            "col": 16,
            "line": 4
          }
        ],
        "depth": 1,
        "facts": {
          "metrics": {
            "file": {
              "size": 305,
              "entropy": 4.77
            },
            "binary": {
              "peak_region_bytes": 305,
              "peak_region_entropy": 4.77
            }
          }
        },
        "id": 1,
        "mol": "O(P)H(Os₂)",
        "path": "/data/samples/unknown/foraged/fedora/fedoraproject.org/_/pcp-geolocate/pcp-geolocate-7.2.0-1.fc45.aarch64.rpm!!usr/lib/systemd/system/pcp-geolocate.service",
        "pid": 0,
        "risk": 2,
        "sha": "899c16d59b3e7e6fd4adbafd0b26e8a87c131a3dbc9ef2a82f93897b9406ffa9",
        "size": 305,
        "traits": [
          {
            "id": "micro-behaviors/os/service/config::service-runs-as-root",
            "conf": 1.0,
            "crit": 3,
            "desc": "Service file declares User=root",
            "spans": [
              [
                257,
                9
              ]
            ]
          },
          {
            "id": "micro-behaviors/os/service/unit-field::documentation-exists",
            "conf": 1.0,
            "crit": 2,
            "desc": "Unit Documentation= exists"
          },
          {
            "id": "micro-behaviors/os/service/dependency::after-exists",
            "conf": 0.9,
            "crit": 2,
            "desc": "Unit After= exists"
          },
          {
            "id": "micro-behaviors/os/service/dependency::before-exists",
            "conf": 0.9,
            "crit": 3,
            "desc": "Unit Before= exists"
          },
          {
            "id": "micro-behaviors/os/service/unit-field::unit-description-exists",
            "conf": 1.0,
            "crit": 2,
            "desc": "Unit Description= exists"
          },
          {
            "id": "objectives/persistence/system/service/systemd::systemd-has-docs-or-comments",
            "atk": "T1543.002",
            "conf": 1.0,
            "crit": 3,
            "desc": "Systemd unit has documentation or comments",
            "uses": [
              1,
              2,
              4
            ]
          }
        ],
        "type": "systemd_service"
      },
      {
        "id": 2,
        "sha": "397f24760722e7831e202c45a2643996d5a1d3d41a1752082addc372239eb832",
        "path": "pcp-geolocate@7.2.0-1.fc45.registry.json",
        "size": 813,
        "type": "registry",
        "depth": 1
      }
    ],
    "omitted_files": 1,
    "rev": "f11ae",
    "v": "8"
  }
}