{
  "ml": {
    "v": "7",
    "id": 295,
    "lvl": -1,
    "conf": 0,
    "prob": 0.000023285547285922803,
    "type": "shell",
    "version": "v18.18",
    "analyzed_at": "2026-09-06T11:26:30Z"
  },
  "path": "package/cli.js##unicode-escape@4241904",
  "raw": {
    "rev": "479f3",
    "files": [
      {
        "id": 295,
        "mol": "H₂(CrPo)",
        "pid": 2,
        "rel": "fetched",
        "sha": "7542b14e5bbb03c92accef1de2f4cf394662b7ffe33a1c5e7c9e0d66bbca4cb7",
        "via": "https://registry.npmjs.org/@cometix/claude-code-linux-arm64/-/claude-code-linux-arm64-2.1.227.tgz",
        "path": "pkg:npm/%40cometix/claude-code-linux-arm64@2.1.227!!package/cli.js!!package/cli.js##unicode-escape@4241904",
        "risk": 3,
        "size": 8855,
        "type": "shell",
        "depth": 4,
        "facts": {
          "mbr": [
            "Array.from",
            "Array.from().join",
            "JGu.test",
            "VGu.test",
            "Vee().replace",
            "Vee().replace().replace",
            "WGu.createHmac",
            "WGu.createHmac().update",
            "WGu.createHmac().update().digest",
            "WGu.createHmac().update().digest().slice",
            "be_.test",
            "e.replace",
            "e.sessionId",
            "e.timestamp",
            "e0s().trim",
            "he_.test",
            "i.join",
            "i.length",
            "i.push",
            "n.join",
            "n.length",
            "n.toString",
            "n.toString().toUpperCase",
            "n.toString().toUpperCase().padStart",
            "r.length",
            "r.push",
            "r.slice",
            "r.slice().join",
            "t.encode",
            "t.replace"
          ],
          "tgt": [
            "$i",
            "Array.from",
            "Array.from().join",
            "GGu",
            "JGu.test",
            "Se_",
            "TextEncoder",
            "VGu.test",
            "Vee",
            "Vee().replace",
            "Vee().replace().replace",
            "WGu.createHmac",
            "WGu.createHmac().update",
            "WGu.createHmac().update().digest",
            "WGu.createHmac().update().digest().slice",
            "be_.test",
            "decodeURIComponent",
            "e.replace",
            "e0s",
            "e0s().trim",
            "he_.test",
            "i.join",
            "i.push",
            "n.join",
            "n.toString",
            "n.toString().toUpperCase",
            "n.toString().toUpperCase().padStart",
            "r.push",
            "r.slice",
            "r.slice().join",
            "t.encode",
            "t.replace",
            "v"
          ],
          "metrics": {
            "ast": {
              "op.eq": 4,
              "op.gt": 4,
              "op.lt": 1,
              "op.ne": 1,
              "op.sub": 1,
              "op.land": 2,
              "op.lnot": 1,
              "max_depth": 20,
              "call_count": 45,
              "node_count": 1234,
              "op.coalesce": 4,
              "member_count": 30,
              "max_array_len": 1,
              "op_density.eq": 0,
              "op_density.gt": 0,
              "op_density.lt": 0,
              "op_density.ne": 0,
              "op_density.sub": 0,
              "sequence_count": 3,
              "op_density.land": 0,
              "op_density.lnot": 0,
              "member_depth_max": 5,
              "op_density.coalesce": 0
            },
            "file": {
              "size": 8855,
              "entropy": 5.31
            },
            "text": {
              "lines": 1,
              "top_char": 101,
              "max_ws_run": 1,
              "digit_ratio": 0.02,
              "space_count": 198,
              "char_entropy": 5.31,
              "unique_chars": 97,
              "top_char_null": 0,
              "lines_over_200": 1,
              "lines_over_500": 1,
              "string_density": 41,
              "top_char_ratio": 0.09,
              "avg_line_length": 8855,
              "lines_over_1000": 1,
              "max_line_length": 8855,
              "non_ascii_ratio": 0,
              "null_byte_count": 2,
              "last_line_length": 8855,
              "long_token_count": 21,
              "whitespace_ratio": 0.02,
              "identifier_density": 217,
              "non_printable_ratio": 0,
              "normalized_string_count": 41,
              "suspicious_string_ratio": 0.12,
              "suspicious_identifier_ratio": 0.14
            },
            "binds": {
              "count": 15
            },
            "binary": {
              "peak_region_bytes": 6807,
              "peak_region_entropy": 5.39
            },
            "source": {
              "function_count": 11
            },
            "strings": {
              "bytes": 7360,
              "count": 41,
              "shell": 1,
              "very_long": 2,
              "avg_length": 179.51,
              "max_length": 3237,
              "avg_entropy": 2.61,
              "empty_count": 8,
              "entropy_stddev": 1.78,
              "high_entropy_count": 3,
              "embedded_code_candidates": 4
            },
            "functions": {
              "count": 11,
              "nested": 4,
              "density": 1800,
              "anonymous": 5,
              "avg_params": 1.28,
              "code_ratio": 18,
              "max_params": 5,
              "one_liners": 18,
              "avg_name_length": 3,
              "no_params_count": 1,
              "avg_length_lines": 1,
              "max_length_lines": 1,
              "min_length_lines": 1,
              "avg_nesting_depth": 0.28,
              "max_nesting_depth": 2,
              "single_char_params": 23,
              "avg_param_name_length": 1
            },
            "consistency": {
              "extension_content_mismatch": 1,
              "extension_content_mismatch.script_as_unknown": 1
            },
            "identifiers": {
              "count": 217,
              "unique": 66,
              "avg_length": 4.05,
              "max_length": 18,
              "min_length": 1,
              "avg_entropy": 1.59,
              "reuse_ratio": 0.3,
              "length_stddev": 2.97,
              "has_digit_ratio": 0.08,
              "sequential_names": 9,
              "single_char_count": 10,
              "single_char_ratio": 0.15,
              "all_lowercase_ratio": 0.56
            }
          }
        },
        "traits": [
          {
            "id": "metadata/file/metrics::low-whitespace",
            "conf": 0.7,
            "crit": 2,
            "desc": "Very low whitespace ratio (minified/compressed)",
            "spans": [
              [
                0,
                0
              ]
            ]
          },
          {
            "id": "metadata/file/profile/identity::sequential-identifiers",
            "conf": 0.8,
            "crit": 2,
            "desc": "Sequential source identifier names",
            "spans": [
              [
                0,
                0
              ]
            ]
          },
          {
            "id": "metadata/package/error-handling::catch-keyword",
            "conf": 0.5,
            "crit": 2,
            "desc": "Contains a catch error handler",
            "spans": [
              [
                148,
                0
              ]
            ]
          },
          {
            "id": "metadata/package/error-handling::finally-keyword",
            "conf": 0.5,
            "crit": 2,
            "desc": "Contains a finally cleanup handler",
            "spans": [
              [
                311,
                0
              ]
            ]
          },
          {
            "id": "micro-behaviors/crypto/hash/hmac::hmac-api-reference",
            "mbc": "C0029",
            "conf": 0.9,
            "crit": 3,
            "desc": "References an HMAC API",
            "spans": [
              [
                8210,
                10
              ]
            ]
          },
          {
            "id": "micro-behaviors/process/create/shell/spawn::sh-dynamic-command-target",
            "conf": 0.95,
            "crit": 3,
            "desc": "Shell command variable at a command boundary",
            "spans": [
              [
                7828,
                2
              ]
            ]
          }
        ]
      }
    ]
  }
}