{
  "ml": {
    "v": "7",
    "id": 2740,
    "lvl": -1,
    "conf": 0,
    "prob": 0.000019530454665073194,
    "type": "rust",
    "version": "v18.18",
    "analyzed_at": "2026-10-23T06:41:01Z"
  },
  "path": "reallyme-crypto-ml-dsa-87-0.3.14.crate",
  "raw": {
    "rev": "76e61",
    "files": [
      {
        "id": 4275,
        "mol": "Md₂(In₆Pa)",
        "pid": 2,
        "rel": "fetched",
        "sha": "85afacd9a286ebf0344e355835c4d44a08ff779e3710dfab716ace72ec3f170e",
        "via": "https://static.crates.io/crates/reallyme-crypto-ml-dsa-87/reallyme-crypto-ml-dsa-87-0.3.14.crate",
        "path": "pkg:cargo/reallyme-crypto-ml-dsa-87@0.3.14",
        "risk": 4,
        "size": 10449,
        "type": "crate",
        "depth": 2,
        "facts": {
          "metrics": {
            "file": {
              "size": 10449,
              "entropy": 7.98
            },
            "binary": {
              "peak_region_bytes": 10240,
              "peak_region_entropy": 7.81
            }
          }
        },
        "ident": {
          "name": {
            "value": "reallyme-crypto-ml-dsa-87",
            "source": "crate.name",
            "verified": false
          },
          "urls": [
            {
              "url": "https://github.com/reallyme/crypto",
              "kind": "repository",
              "source": "crate.repository"
            }
          ],
          "trust": "unsigned",
          "version": {
            "value": "0.3.14",
            "source": "crate.version",
            "verified": false
          },
          "identifier": {
            "value": "reallyme-crypto-ml-dsa-87",
            "source": "crate.name",
            "verified": false
          },
          "description": {
            "value": "ML-DSA-87 signature primitive for ReallyMe Crypto.",
            "source": "crate.description",
            "verified": false
          }
        },
        "traits": [
          {
            "id": "metadata/import/rust/encoding/assert_public_key::encoding/assert_public_key",
            "conf": 0.95,
            "crit": 3,
            "desc": "imports encoding::assert_public_key",
            "from": [
              {
                "file": 9
              }
            ]
          },
          {
            "id": "metadata/import/rust/encoding/decode_public_key::encoding/decode_public_key",
            "conf": 0.95,
            "crit": 3,
            "desc": "imports encoding::decode_public_key",
            "from": [
              {
                "file": 9
              }
            ]
          },
          {
            "id": "metadata/import/rust/encoding/encode_public_key::encoding/encode_public_key",
            "conf": 0.95,
            "crit": 3,
            "desc": "imports encoding::encode_public_key",
            "from": [
              {
                "file": 9
              }
            ]
          },
          {
            "id": "metadata/import/rust/encoding/ml_dsa_87_public_key_len::encoding/ml_dsa_87_public_key_len",
            "conf": 0.95,
            "crit": 3,
            "desc": "imports encoding::ML_DSA_87_PUBLIC_KEY_LEN",
            "from": [
              {
                "file": 9
              }
            ]
          },
          {
            "id": "metadata/import/rust/encoding/ml_dsa_87_secret_seed_len::encoding/ml_dsa_87_secret_seed_len",
            "conf": 0.95,
            "crit": 3,
            "desc": "imports encoding::ML_DSA_87_SECRET_SEED_LEN",
            "from": [
              {
                "file": 9
              }
            ]
          },
          {
            "id": "metadata/import/rust/encoding/ml_dsa_87_signature_len::encoding/ml_dsa_87_signature_len",
            "conf": 0.95,
            "crit": 3,
            "desc": "imports encoding::ML_DSA_87_SIGNATURE_LEN",
            "from": [
              {
                "file": 9
              }
            ]
          },
          {
            "id": "metadata/package/license::spdx-license-identifier",
            "conf": 0.9,
            "crit": 3,
            "desc": "Source SPDX license identifier declaration",
            "from": [
              {
                "file": 6
              }
            ]
          },
          {
            "id": "metadata/build/archive::archive-cargo-toml-entry",
            "conf": 0.9,
            "crit": 2,
            "desc": "Archive contains Cargo.toml"
          },
          {
            "id": "metadata/file/comment::source-comment-bytes-over-300",
            "conf": 0.92,
            "crit": 2,
            "desc": "Source has over 300 comment bytes",
            "from": [
              {
                "file": 7
              }
            ]
          },
          {
            "id": "metadata/import/rust/crypto_core/cryptoerror::crypto_core/cryptoerror",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports crypto_core::CryptoError",
            "from": [
              {
                "file": 7
              }
            ]
          },
          {
            "id": "metadata/import/rust/crypto_core/signaturebackend::crypto_core/signaturebackend",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports crypto_core::SignatureBackend",
            "from": [
              {
                "file": 8
              }
            ]
          },
          {
            "id": "metadata/import/rust/crypto_core/signaturefailurekind::crypto_core/signaturefailurekind",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports crypto_core::SignatureFailureKind",
            "from": [
              {
                "file": 11
              }
            ]
          },
          {
            "id": "metadata/import/rust/crypto_core/signatureoperation::crypto_core/signatureoperation",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports crypto_core::SignatureOperation",
            "from": [
              {
                "file": 8
              }
            ]
          },
          {
            "id": "metadata/import/rust/keypair/generate_ml_dsa_87_keypair::keypair/generate_ml_dsa_87_keypair",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports keypair::generate_ml_dsa_87_keypair",
            "from": [
              {
                "file": 9
              }
            ]
          },
          {
            "id": "metadata/import/rust/keypair/generate_ml_dsa_87_keypair_from_seed::keypair/generate_ml_dsa_87_keypair_from_seed",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports keypair::generate_ml_dsa_87_keypair_from_seed",
            "from": [
              {
                "file": 9
              }
            ]
          },
          {
            "id": "metadata/import/rust/ml_dsa/encodedverifyingkey::ml_dsa/encodedverifyingkey",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports ml_dsa::EncodedVerifyingKey",
            "from": [
              {
                "file": 11
              }
            ]
          },
          {
            "id": "metadata/import/rust/ml_dsa/generate::ml_dsa/generate",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports ml_dsa::Generate",
            "from": [
              {
                "file": 8
              }
            ]
          },
          {
            "id": "metadata/import/rust/ml_dsa/keyexport::ml_dsa/keyexport",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports ml_dsa::KeyExport",
            "from": [
              {
                "file": 8
              }
            ]
          },
          {
            "id": "metadata/import/rust/ml_dsa/keypair::ml_dsa/keypair",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports ml_dsa::Keypair",
            "from": [
              {
                "file": 8
              }
            ]
          },
          {
            "id": "metadata/import/rust/ml_dsa/mldsa87::ml_dsa/mldsa87",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports ml_dsa::MlDsa87",
            "from": [
              {
                "file": 8
              }
            ]
          },
          {
            "id": "metadata/import/rust/ml_dsa/seed::ml_dsa/seed",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports ml_dsa::Seed",
            "from": [
              {
                "file": 8
              }
            ]
          },
          {
            "id": "metadata/import/rust/ml_dsa/signature::ml_dsa/signature",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports ml_dsa::Signature",
            "from": [
              {
                "file": 11
              }
            ]
          },
          {
            "id": "metadata/import/rust/ml_dsa/signatureencoding::ml_dsa/signatureencoding",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports ml_dsa::SignatureEncoding",
            "from": [
              {
                "file": 10
              }
            ]
          },
          {
            "id": "metadata/import/rust/ml_dsa/signer::ml_dsa/signer",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports ml_dsa::Signer",
            "from": [
              {
                "file": 10
              }
            ]
          },
          {
            "id": "metadata/import/rust/ml_dsa/signingkey::ml_dsa/signingkey",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports ml_dsa::SigningKey",
            "from": [
              {
                "file": 8
              }
            ]
          },
          {
            "id": "metadata/import/rust/ml_dsa/verifier::ml_dsa/verifier",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports ml_dsa::Verifier",
            "from": [
              {
                "file": 11
              }
            ]
          },
          {
            "id": "metadata/import/rust/ml_dsa/verifyingkey::ml_dsa/verifyingkey",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports ml_dsa::VerifyingKey",
            "from": [
              {
                "file": 11
              }
            ]
          },
          {
            "id": "metadata/import/rust/native/assert_public_key::native/assert_public_key",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports native::assert_public_key",
            "from": [
              {
                "file": 6
              }
            ]
          },
          {
            "id": "metadata/import/rust/native/decode_public_key::native/decode_public_key",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports native::decode_public_key",
            "from": [
              {
                "file": 6
              }
            ]
          },
          {
            "id": "metadata/import/rust/native/encode_public_key::native/encode_public_key",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports native::encode_public_key",
            "from": [
              {
                "file": 6
              }
            ]
          },
          {
            "id": "metadata/import/rust/native/generate_ml_dsa_87_keypair::native/generate_ml_dsa_87_keypair",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports native::generate_ml_dsa_87_keypair",
            "from": [
              {
                "file": 6
              }
            ]
          },
          {
            "id": "metadata/import/rust/native/generate_ml_dsa_87_keypair_from_seed::native/generate_ml_dsa_87_keypair_from_seed",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports native::generate_ml_dsa_87_keypair_from_seed",
            "from": [
              {
                "file": 6
              }
            ]
          },
          {
            "id": "metadata/import/rust/native/ml_dsa_87_public_key_len::native/ml_dsa_87_public_key_len",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports native::ML_DSA_87_PUBLIC_KEY_LEN",
            "from": [
              {
                "file": 6
              }
            ]
          },
          {
            "id": "metadata/import/rust/native/ml_dsa_87_secret_seed_len::native/ml_dsa_87_secret_seed_len",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports native::ML_DSA_87_SECRET_SEED_LEN",
            "from": [
              {
                "file": 6
              }
            ]
          },
          {
            "id": "metadata/import/rust/native/ml_dsa_87_signature_len::native/ml_dsa_87_signature_len",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports native::ML_DSA_87_SIGNATURE_LEN",
            "from": [
              {
                "file": 6
              }
            ]
          },
          {
            "id": "metadata/import/rust/native/sign_ml_dsa_87::native/sign_ml_dsa_87",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports native::sign_ml_dsa_87",
            "from": [
              {
                "file": 6
              }
            ]
          },
          {
            "id": "metadata/import/rust/native/verify_ml_dsa_87::native/verify_ml_dsa_87",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports native::verify_ml_dsa_87",
            "from": [
              {
                "file": 6
              }
            ]
          },
          {
            "id": "metadata/import/rust/sign/sign_ml_dsa_87::sign/sign_ml_dsa_87",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports sign::sign_ml_dsa_87",
            "from": [
              {
                "file": 9
              }
            ]
          },
          {
            "id": "metadata/import/rust/verify/verify_ml_dsa_87::verify/verify_ml_dsa_87",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports verify::verify_ml_dsa_87",
            "from": [
              {
                "file": 9
              }
            ]
          },
          {
            "id": "metadata/import/rust/zeroize/zeroize::zeroize/zeroize",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports zeroize::Zeroize",
            "from": [
              {
                "file": 8
              }
            ]
          },
          {
            "id": "metadata/import/rust/zeroize/zeroizing::zeroize/zeroizing",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports zeroize::Zeroizing",
            "from": [
              {
                "file": 8
              }
            ]
          },
          {
            "id": "metadata/package/description/length::cargo-description-at-least-20-characters",
            "conf": 0.78,
            "crit": 2,
            "desc": "Cargo description has at least 20 characters"
          },
          {
            "id": "metadata/package/documentation/source::cargo-readme-field-present",
            "conf": 0.85,
            "crit": 2,
            "desc": "Cargo readme field is populated"
          },
          {
            "id": "metadata/package/license::cargo-license-field-present",
            "conf": 0.85,
            "crit": 2,
            "desc": "Cargo license field is populated"
          },
          {
            "id": "metadata/package/name/identity::cargo-package-name-present",
            "conf": 0.85,
            "crit": 2,
            "desc": "Cargo package name field is populated"
          },
          {
            "id": "metadata/package/repository::cargo-repository-field-present",
            "conf": 0.85,
            "crit": 2,
            "desc": "Cargo repository field is populated"
          },
          {
            "id": "metadata/package/version::cargo-package-version",
            "conf": 0.85,
            "crit": 2,
            "desc": "Cargo package has version"
          },
          {
            "id": "metadata/lang/natural/vocabulary/content-word::data-access-verb-token",
            "conf": 0.88,
            "crit": 1,
            "desc": "Data-access verb token",
            "from": [
              {
                "file": 5
              }
            ]
          },
          {
            "id": "metadata/lang/natural/vocabulary/content-word::data-transfer-verb-token",
            "conf": 0.88,
            "crit": 1,
            "desc": "Data-transfer verb token",
            "from": [
              {
                "file": 5
              }
            ]
          },
          {
            "id": "metadata/lang/natural/vocabulary/content-word::english-edit-verb-token",
            "conf": 0.88,
            "crit": 1,
            "desc": "English edit-action verb token",
            "from": [
              {
                "file": 5
              }
            ]
          },
          {
            "id": "metadata/lang/natural/vocabulary/content-word::secret-data-term-token",
            "conf": 0.9,
            "crit": 1,
            "desc": "Secret-data term token",
            "from": [
              {
                "file": 7
              }
            ]
          },
          {
            "id": "metadata/lang/natural/vocabulary/function-word::lang-english--atom-1",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"the\"",
            "from": [
              {
                "file": 5
              }
            ]
          },
          {
            "id": "metadata/lang/natural/vocabulary/function-word::lang-english--atom-2",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"and\"",
            "from": [
              {
                "file": 5
              }
            ]
          },
          {
            "id": "metadata/lang/natural/vocabulary/function-word::lang-english--atom-3",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"that\"",
            "from": [
              {
                "file": 5
              }
            ]
          },
          {
            "id": "metadata/lang/natural/vocabulary/function-word::lang-english--atom-4",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"have\"",
            "from": [
              {
                "file": 5
              }
            ]
          },
          {
            "id": "metadata/lang/natural/vocabulary/function-word::lang-english--atom-5",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"for\"",
            "from": [
              {
                "file": 5
              }
            ]
          },
          {
            "id": "metadata/lang/natural/vocabulary/function-word::lang-english--atom-6",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"with\"",
            "from": [
              {
                "file": 5
              }
            ]
          },
          {
            "id": "metadata/lang/natural/vocabulary/function-word::lang-english--atom-7",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"this\"",
            "from": [
              {
                "file": 5
              }
            ]
          },
          {
            "id": "micro-behaviors/data/llm/repository-directive::control-action-prose-fragment",
            "conf": 0.88,
            "crit": 1,
            "desc": "Control-action verb followed by prose",
            "from": [
              {
                "file": 5
              }
            ]
          },
          {
            "id": "micro-behaviors/data/llm/repository-directive::repository-agent-directive-marker",
            "conf": 0.88,
            "crit": 1,
            "desc": "Marks text as an agent directive",
            "from": [
              {
                "file": 5
              }
            ]
          }
        ]
      }
    ]
  }
}