{ "ml": { "v": "7", "id": 248, "lvl": -1, "conf": 0, "prob": 0.000015507141142734326, "type": "javascript", "version": "v18.18", "analyzed_at": "2026-09-07T09:39:27Z" }, "path": "package/cli.js##unicode-escape@344595", "raw": { "rev": "479f3", "files": [ { "id": 390, "mol": "H₂(CmPo₂)", "pid": 4, "rel": "fetched", "sha": "6c0e283f800516802ebca980fdf8e1c2510becb45b1100e3401ffbacf85d56d6", "via": "https://registry.npmjs.org/@cometix/claude-code-linux-x64/-/claude-code-linux-x64-2.1.241.tgz", "path": "pkg:npm/%40cometix/claude-code-linux-x64@2.1.241!!package/cli.js!!package/cli.js##unicode-escape@344595", "risk": 3, "size": 29768, "type": "shell", "depth": 4, "facts": { "mbr": [ "AXe.set", "Bzo.set", "Fzo.set", "GIn.set", "JMr.set", "JSON.parse", "KIn.set", "KQt.set", "Nzo.set", "Object.defineProperty", "Object.keys", "Ozo.set", "Promise().then", "Promise.reject", "Symbol.asyncIterator", "Uzo.set", "VIn.set", "WIn.set", "XIn.set", "YIn.set", "YMr.fromResponse", "_ae().toReadableStream", "_ae.fromReadableStream", "a.length", "aLt.set", "actionable.Include", "e().then", "e.content", "e.content.map", "e.create", "e.create().withResponse", "e.headers", "e.headers.get", "e.length", "e.map", "e.output_config", "e.output_config.format", "e.output_format", "e.push", "e.shift", "e.slice", "e.type", "i.test", "i.text", "i.type", "it.Write", "jzo.set", "n.aborted", "n.addEventListener", "n.cause", "n.citations", "n.content", "n.id", "n.input", "n.once", "n.processing_status", "n.removeEventListener", "n.resolve", "n.results_url", "n.signature", "n.text", "n.thinking", "n.type", "n.value", "o._addMessageParam", "o._createMessage", "o._run", "o.controller", "o.controller.signal", "o.controller.signal.aborted", "o.listener", "o.reject", "o.resolve", "o.type", "qIn.set", "r.aborted", "r.addEventListener", "r.container", "r.content", "r.content.at", "r.content.push", "r.context_management", "r.filter", "r.findIndex", "r.forEach", "r.headers", "r.length", "r.logger", "r.logger.warn", "r.message", "r.model", "r.parse", "r.push", "r.removeEventListener", "r.signal", "r.splice", "r.stop_details", "r.stop_reason", "r.stop_sequence", "r.text", "r.type", "r.usage", "r.usage.cache_creation_input_tokens", "r.usage.cache_read_input_tokens", "r.usage.input_tokens", "r.usage.iterations", "r.usage.output_tokens", "r.usage.server_tool_use", "r.value", "rn().call", "rn().catch", "rn().inputJson", "rn().inputJson.length", "s.controller", "s.controller.signal", "s.controller.signal.aborted", "s.response", "s.test", "summary.Your", "t._fromReadableStream", "t._run", "t.content_block", "t.content_block.to", "t.content_block.to.model", "t.content_block.type", "t.context_management", "t.delta", "t.delta.citation", "t.delta.container", "t.delta.content", "t.delta.encrypted_content", "t.delta.partial_json", "t.delta.signature", "t.delta.stop_details", "t.delta.stop_reason", "t.delta.stop_sequence", "t.delta.text", "t.delta.thinking", "t.delta.type", "t.index", "t.join", "t.lastIndexOf", "t.length", "t.logger", "t.message", "t.messages", "t.push", "t.reverse", "t.reverse().map", "t.shift", "t.signal", "t.splice", "t.type", "t.usage", "t.usage.cache_creation_input_tokens", "t.usage.cache_read_input_tokens", "t.usage.input_tokens", "t.usage.iterations", "t.usage.output_tokens", "t.usage.server_tool_use", "t.value", "t.value.length", "wbe.add" ], "tgt": [ "$i", "$zo", "A", "AXe.set", "AbortController", "Av_", "Bzo.set", "Da", "EXe", "Error", "Ev_", "Fzo.set", "GIn.set", "Hv_", "JIn", "JMr.set", "JSON.parse", "KIn.set", "KPu", "KQt.set", "Mzo", "Nzo.set", "OPe", "Object.defineProperty", "Object.keys", "Ozo.set", "Promise", "Promise().then", "Promise.reject", "Q6s", "QPu", "String", "Tv_", "Uzo.set", "VIn.set", "WIn.set", "WeakMap", "WeakSet", "XIn.set", "XMr", "XPu", "YIn.set", "YMr.fromResponse", "YPu", "_D", "_ae", "_ae().toReadableStream", "_ae.fromReadableStream", "_be", "aLt.set", "e", "e().then", "e.content.map", "e.create", "e.create().withResponse", "e.headers.get", "e.map", "e.push", "e.shift", "e.slice", "e8s", "i.test", "jS", "jzo.set", "l8s", "ma", "n", "n.addEventListener", "n.removeEventListener", "n.resolve", "o._addMessageParam", "o._createMessage", "o._run", "o.reject", "o.resolve", "pIn", "qIn.set", "r.addEventListener", "r.content.at", "r.content.push", "r.filter", "r.findIndex", "r.forEach", "r.logger.warn", "r.parse", "r.push", "r.removeEventListener", "r.splice", "r8s", "rn", "rn().call", "rn().catch", "s.test", "t._fromReadableStream", "t._run", "t.join", "t.lastIndexOf", "t.push", "t.reverse", "t.reverse().map", "t.shift", "t.splice", "t8s", "wXe", "wbe.add", "you" ], "metrics": { "ast": { "op.eq": 66, "op.ge": 1, "op.gt": 1, "op.lt": 1, "op.ne": 10, "op.add": 14, "op.div": 119, "op.lor": 23, "op.sub": 15, "op.land": 16, "op.lnot": 57, "max_depth": 39, "call_count": 353, "node_count": 10082, "op.coalesce": 6, "member_count": 163, "max_array_len": 2, "op_density.eq": 0.01, "op_density.ge": 0, "op_density.gt": 0, "op_density.lt": 0, "op_density.ne": 0, "op_density.add": 0, "op_density.div": 0.01, "op_density.lor": 0, "op_density.sub": 0, "sequence_count": 58, "op_density.land": 0, "op_density.lnot": 0.01, "max_concat_chain": 3, "member_depth_max": 4, "op_density.coalesce": 0 }, "file": { "size": 29768, "entropy": 5.34 }, "text": { "lines": 1, "top_char": 101, "max_ws_run": 1, "digit_ratio": 0.03, "space_count": 704, "char_entropy": 5.34, "unique_chars": 97, "top_char_null": 0, "lines_over_200": 1, "lines_over_500": 1, "string_density": 283, "top_char_ratio": 0.09, "avg_line_length": 29768, "lines_over_1000": 1, "max_line_length": 29768, "non_ascii_ratio": 0, "last_line_length": 29768, "long_token_count": 78, "whitespace_ratio": 0.02, "identifier_density": 1785, "non_printable_ratio": 0, "normalized_string_count": 283, "suspicious_string_ratio": 0.07, "suspicious_identifier_ratio": 0.04 }, "binds": { "count": 130 }, "binary": { "peak_region_bytes": 28672, "peak_region_entropy": 5.36 }, "source": { "function_count": 34 }, "strings": { "sql": 2, "bytes": 15897, "count": 283, "shell": 10, "very_long": 2, "avg_length": 56.17, "max_length": 5772, "avg_entropy": 1.88, "email_count": 1, "empty_count": 8, "entropy_stddev": 1.8, "high_entropy_count": 16, "embedded_code_candidates": 7 }, "functions": { "count": 34, "nested": 18, "density": 8700, "anonymous": 50, "avg_params": 0.83, "code_ratio": 87, "max_params": 4, "one_liners": 87, "avg_name_length": 136.84, "no_params_count": 39, "avg_length_lines": 1, "max_length_lines": 1, "min_length_lines": 1, "avg_nesting_depth": 1.24, "max_nesting_depth": 3, "high_entropy_names": 2, "single_char_params": 70, "avg_param_name_length": 1.32 }, "consistency": { "extension_content_mismatch": 1, "extension_content_mismatch.script_as_unknown": 1 }, "identifiers": { "count": 1785, "unique": 261, "avg_length": 6.27, "max_length": 27, "min_length": 1, "avg_entropy": 2.1, "reuse_ratio": 0.15, "length_stddev": 4.4, "has_digit_ratio": 0.05, "sequential_names": 11, "single_char_count": 11, "single_char_ratio": 0.04, "high_entropy_count": 4, "high_entropy_ratio": 0.02, "all_lowercase_ratio": 0.62, "all_uppercase_ratio": 0.01, "numeric_suffix_count": 1, "underscore_prefix_count": 14 } } }, "traits": [ { "id": "metadata/file/profile/language::lang-english--atom-1", "conf": 0.8, "crit": 2, "desc": "English function-word token \"the\"", "spans": [ [ 3296, 0 ] ] }, { "id": "metadata/file/profile/language::lang-english--atom-2", "conf": 0.8, "crit": 2, "desc": "English function-word token \"and\"", "spans": [ [ 2324, 0 ] ] }, { "id": "micro-behaviors/communications/http/llm::llm-token-usage-json--rx-7", "atk": "T1071.001", "conf": 0.65, "crit": 1, "desc": "LLM output-token count field", "spans": [ [ 26755, 0 ] ] }, { "id": "micro-behaviors/communications/http/llm::llm-token-usage-json--rx-9", "atk": "T1071.001", "conf": 0.65, "crit": 1, "desc": "LLM input-token count field", "spans": [ [ 26841, 0 ] ] }, { "id": "micro-behaviors/data/serialize/json::result-field-key", "conf": 0.9, "crit": 1, "desc": "JSON-like object result field", "spans": [ [ 20766, 0 ] ] }, { "id": "micro-behaviors/process/create/shell/bridge::shell-embedded-child-process-require", "atk": "T1059", "mbc": "C0017", "conf": 0.95, "crit": 3, "desc": "Embedded Node child_process require", "spans": [ [ 1273, 13 ] ] }, { "id": "metadata/file/metrics::low-whitespace", "conf": 0.7, "crit": 2, "desc": "Very low whitespace ratio (minified/compressed)", "spans": [ [ 0, 0 ] ] }, { "id": "metadata/file/profile/identity::sequential-identifiers", "conf": 0.8, "crit": 2, "desc": "Sequential source identifier names", "spans": [ [ 0, 0 ] ] }, { "id": "metadata/package/error-handling::catch-keyword", "conf": 0.5, "crit": 2, "desc": "Contains a catch error handler", "spans": [ [ 228, 0 ] ] }, { "id": "metadata/package/error-handling::finally-keyword", "conf": 0.5, "crit": 2, "desc": "Contains a finally cleanup handler", "spans": [ [ 235, 0 ] ] }, { "id": "micro-behaviors/communications/http/llm::llm-messages-path", "atk": "T1071.001", "conf": 0.72, "crit": 3, "desc": "Anthropic-compatible messages path", "spans": [ [ 13822, 12 ] ] }, { "id": "micro-behaviors/process/create/shell/spawn::sh-dynamic-command-target", "conf": 0.95, "crit": 3, "desc": "Shell command variable at a command boundary", "spans": [ [ 15097, 2 ], [ 27814, 3 ] ] }, { "id": "micro-behaviors/communications/http/llm::llm-token-usage-json", "atk": "T1071.001", "conf": 0.65, "crit": 1, "desc": "LLM token usage JSON fields", "uses": [ 2, 3 ], "spans": [ [ 26841, 0 ] ] } ] } ] } }