{ "ml": { "v": "7", "eng": "2.2.0-beta.2", "lvl": -1, "conf": 0, "mods": [ { "cls": 0, "raw": 0.03176135, "rte": "az", "prob": 0.03176135 }, { "cls": 0, "raw": 0.00070789456, "rte": "az/tar", "prob": 0.00070789456 } ], "prob": 0.3266849, "files": [ { "id": 0, "lvl": -1, "conf": 0, "prob": 0.3266848921775818, "type": "apk_alpine" }, { "id": 1, "lvl": -1, "conf": 0, "prob": 0.005298227071762085, "type": "shell" }, { "id": 2, "lvl": -1, "conf": 0, "prob": 0.291656494140625, "type": "json" }, { "id": 3, "lvl": -1, "conf": 0, "prob": 0.3266848921775818, "type": "text" } ], "version": "v18.18", "analyzed_at": "2026-07-01T15:19:24Z" }, "path": "lsb-release-minimal-12.1-r6.apk", "raw": { "files": [ { "id": 0, "ctx": [ { "b": "abZy8010L00rqzk@DE0OVs[-M%b5nG!]?%d?)f2y}{%8kLE$+(OfSEs*TC(YFfVzl\u003e2RMh", "n": [ { "c": 2, "d": "Archive parser reported errors", "i": "metadata/file/metrics::archive-parse-error", "o": 0, "z": 24, "cf": 0.8999999761581421 } ], "ln": 0 } ], "mol": "O(Er)H(Po₂)", "sha": "86d6c7cf4db10398ab96ad02556a0cc1f952a9e7cb8ab498a4542f6ed7aaebc6", "path": "/data/samples/good/foraged/wolfi/wolfi.dev/_/lsb-release-minimal/lsb-release-minimal-12.1-r6.apk", "risk": 3, "size": 8904, "type": "apk_alpine", "facts": { "metrics": { "file": { "size": 8904.0, "entropy": 7.97, "size_bytes": 8904.0 }, "parse": { "error_count": 1.0 }, "binary": { "overall_entropy": 7.97, "peak_region_bytes": 8904.0, "peak_region_entropy": 7.82 } } }, "traits": [ { "id": "metadata/package/files/system-package::spdx-melange-creator", "conf": 0.8999999761581421, "crit": 1, "desc": "Melange SPDX creator", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/process/interpreter/eval::shell-eval", "atk": "T1059", "crit": 3, "desc": "Shell eval call", "from": [ { "file": 1 } ] }, { "id": "metadata/package/files/system-package::alpine-pkginfo-package-field", "conf": 0.8999999761581421, "crit": 1, "desc": "Alpine/Wolfi package name field", "from": [ { "file": 3 } ] }, { "id": "objectives/evasion/masquerade/extension/shebang::bash-shebang-first-line", "atk": "T1036.008", "mbc": "F0008", "conf": 0.949999988079071, "crit": 3, "desc": "File starts with", "from": [ { "file": 1 } ] }, { "id": "metadata/package/files/system-package::spdx-apk-pkginfo-source", "conf": 0.8999999761581421, "crit": 1, "desc": "SPDX references APK DB package info", "from": [ { "file": 2 } ] }, { "id": "metadata/package/files/system-package::spdx-melange-namespace", "conf": 0.8999999761581421, "crit": 1, "desc": "Melange SPDX document namespace" }, { "id": "metadata/package/files/system-package::alpine-pkginfo-origin-field", "conf": 0.8999999761581421, "crit": 1, "desc": "Alpine/Wolfi package origin field", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/process/create/shell/spawn::sh-dynamic-command-target", "conf": 0.6000000238418579, "crit": 3, "desc": "Shell command name from variable", "from": [ { "file": 1 } ] }, { "id": "metadata/package/files/system-package::spdx-sbom-document", "conf": 0.9800000190734863, "crit": 2, "desc": "SPDX SBOM document", "from": [ { "file": 2 } ] }, { "id": "metadata/package/files/system-package::wolfi-pkginfo-maintainer", "conf": 0.8999999761581421, "crit": 1, "desc": "Wolfi package maintainer field", "from": [ { "file": 3 } ] }, { "id": "objectives/impact/cryptojacking/miner/runtime::threads-config-flag--rx-1", "conf": 0.699999988079071, "crit": 1, "desc": "Regex component marker", "from": [ { "file": 1 } ] }, { "id": "metadata/package/files/system-package::alpine-pkginfo-basename", "conf": 0.8999999761581421, "crit": 1, "desc": "Alpine/Wolfi package info file" }, { "id": "metadata/package/files/system-package::alpine-apk-pkginfo", "conf": 0.9700000286102295, "crit": 2, "desc": "Alpine/Wolfi package info metadata", "from": [ { "off": 97, "file": 3, "line": 6 } ] }, { "id": "metadata/package/files/system-package::spdx-document-version", "conf": 0.8999999761581421, "crit": 1, "desc": "SPDX document version field" }, { "id": "metadata/package/files/system-package::spdx-document-id", "conf": 0.8999999761581421, "crit": 1, "desc": "SPDX document identifier" }, { "id": "micro-behaviors/process/create/shell/spawn::shell-symbols", "conf": 0.8999999761581421, "crit": 3, "desc": "Shell execution symbols", "from": [ { "file": 1 } ] }, { "id": "metadata/package/files/system-package::melange-pkginfo-generator", "conf": 0.8999999761581421, "crit": 1, "desc": "Melange-generated package metadata", "from": [ { "file": 3 } ] }, { "id": "metadata/package/files/system-package::alpine-pkginfo-version-field", "conf": 0.8999999761581421, "crit": 1, "desc": "Alpine/Wolfi package version field", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/process/create/eval::shell-eval", "mbc": "E1059.004", "conf": 0.800000011920929, "crit": 3, "desc": "eval command in shell script", "from": [ { "file": 1 } ] }, { "id": "metadata/package/files/system-package::spdx-wolfi-apk-purl", "conf": 0.8999999761581421, "crit": 1, "desc": "Wolfi APK package URL in SPDX", "from": [ { "file": 2 } ] } ] }, { "ctx": [ { "b": "boXZHx(kOBxBk7\u003eax898ss)0Ry?k$LAcVFrxj#x^wQ5qTatLSaf^5#2z!i-@avoHSvpBv?v}=n{ax898ss)iXv}xL0wI3F:wO#Q7w[+*%iV}0)lKBfwwPP4DwPXs!wQ5fjA=-A$lTJbMoG:N!e(+\u003eueJs{Y3ts0!A3cLTaBsC4v{%E4juLh:pECJ@2##4PxjTaDy\u0026:5)A+f5#vrl05tw[F5x(v)gt)Z]B2#tIZx(v)giTMf1arSmHefDI@xK#10arR^HarR^HaAIjmCoz0vx(+zgwO=rdzdN^fvp%c]vqYP#wQ4{h3jd1Yat4:/at2f*wPz\u003caz/cWuarR^HB7/GoawtZ2az(4cB.\u003eSgaARphB0bKHB97#gaAIWAAbP=sA%-iWarSmIefDI@x\u003eetearR^HarR^HaAIjmCoyz", "ln": 0, "col": 1, "line": 1 }, { "b": "wncabA+P09BzkVh3jd1Yat41Mat2fNy?$jparR^HarR^HB7/GoayP85aA7\u003cmBzbkdvpBd#wGUY8w]zZbvruj4zvcWRarSmSefDI@B7/GjBrzXGarR^HaAIjmCoy{qADL\u0026lBy!#9x(mK3A=2lbx(v(ix(k5mxM4{kazbLjzddI[2$mST3vJl*B7/E", "ln": 520, "col": 47, "line": 20 }, { "b": "z/dauwgRn5B7ol8Acb/jzy/*ty?m3@wH}tfwmYT!zdLnby?$UzxM4{kat2e/a%Yz$diK1=az2!iBrAsCwP?G#aAIaoat2e/a%.8CBzkVhB0p@}ar\u00266=a%o2\u003ea$Uw\u003cayc9pclNwyz*bMjvrcm1zF8aOA=\u003e}2Cw7YbwGUh1bQjA-xlkmIayc9Kay]x$31Ey+wGSfxf^m-OzvcWReOGI-eOFZiA48]ywO=rEaz2!iBrAUb3jd1\u003cC6\u003e\u003e[", "ln": 833, "col": 62, "line": 33 }, { "b": "B75L=33f=]w][w\u003cz/fa[3s)\u003c(Abn%duU\u003cB]wGSxIaBsC4y**^:y=@%/f^l@hC42ifwJ.j.g9N5j329#]bY^TqA=+V2z/PY6BrAT/Bzbl63jd2TA+PAkw/@ozB6JPbar\u00267OvqH6$a{[S/y\u0026:d{2)\u003eM\u003ex(n38ar\u0026aMi:u+MB6JPbar\u00267EvpA!:a%n6PC42ifwG?D/w[.Q23jn12oMauIaAz4fwNPT\u003eazC.9zY\u0026Ujz/3RrByx5$vrb)3x\u003eg^)Bzku3v{%E[z/cXdvrt{2w[=6)A%=a]eOlaUB-RNRy?Wuiz/WHJwO+{^B7DF1asnATz/YoawO+{^B7EG/B-RNRy?Wuiz/WHJwO+{^B7CX.at4gFfj/lnfk\u003e[-A+f5#vrl05t{7EvaA8sdA+f5#vrl0yfj/lnfk\u003e[-A+f5#vrk#!toCanDRvv8uR:QcqBKnFk#Qi7CZQ+UaW3}(CP[noasnATtoCIfar\u002678q:K?!q^SA\u003eoHRlCmiS\u003cWasnATz/YoawO+{^B7EGUbURc6uR:QcqBKnFk#Qh@3r[R%bZTDJuVGZ]wNPT\u003eeQhW/ar-(\u003cb6UpOt{7Evata=XbYv:hA+f5#vrl073jn12o\u003e!DUv\u003c2(bwGU]lBz#wAaA7\u003cml$G?wvqWDlaw^u9xM4=uvQTs?wftYfvQBd!y?m3@wEoU8lT:}FByx01DsXi\u003cl\u003c+%$a%.Ibl{k@x3q0SGa%XNQA+PAkw/@ozB0q.JbUpxFaBCqwB-X-Tv\u003e^", "ln": 1436, "col": 3, "line": 48 }, { "b": "zFr@@y-)!vvqYQ:A+3+iz/ff9A+#}qB-.OBBrz#Cw/#epwn=QjazC)tviwJGsT+%gtoCItatC0AasnATbY^TqCvbM5A=bPexcnJFaz24@zY*l0zY?.LllHb-wozZ1B0a[iwGUA8vqfK^vR/Qda%o5@g71w5w/@vuxM594x\u003eetFaARpdzvcXXx(!lfvr(i@x(mG8b1cc^BAh88B-.Lxaw1%Bar\u00267TnKLP\u003ezzbBDa{}{@3jpGVas82wz*bM0wPIu7j0nSUwO}?Ywnca7y*?P@y?W=#ar\u003ci+B7ol8Acb/jzxZhEbZSu=mo0k?uRS)Ymli2rfjxnM3t9#V3tB8{bY^TqCvbx4y?m3@wGT5SBzbl63jglSB8U@7D0+x4zE\u003c}mqE%VQvrl07ar\u00267TrZ/[+nL-8*nKLP\u003ezzbBDa{}{@3jpGVas82wz*bL#z!9A%vqPM#j0nSUwO}?Ywnca7y*?P@y?W=#ar\u003cf\u003ewmYT!zdK[la%.Iomn^5QpFLm:pEESDk$%^eeP9jIEiG2gx:K", "ln": 2416, "col": 14, "line": 82 } ], "depth": 1, "facts": { "imp": [ [ "", "set" ], [ "", "cat" ], [ "", "getopt" ], [ "", "exit" ], [ "", "eval" ], [ "", "help" ], [ "", "exit" ], [ "", "help" ], [ "", "echo" ], [ "", "echo" ], [ "", "exit" ], [ "", "shift" ], [ "", "$short_format" ], [ "", "printf" ], [ "", "printf" ], [ "", "printf" ], [ "", "cut" ], [ "", "tr" ], [ "", "printf" ], [ "", "cut" ], [ "", "printf" ], [ "", "tr" ], [ "", "printf" ], [ "", "tr" ], [ "", "$show_warning" ], [ "", "echo" ], [ "", "$show_id" ], [ "", "display_line" ], [ "", "$show_desc" ], [ "", "display_line" ], [ "", "$show_release" ], [ "", "display_line" ], [ "", "$show_codename" ], [ "", "display_line" ], [ "", "$os_release" ] ], "tgt": [ "$short_format", "$show_codename", "$show_desc", "$show_id", "$show_release", "$show_warning", ".", ":", "cat", "cut", "display_line", "echo", "eval", "exit", "getopt", "help", "printf", "set", "shift", "tr" ], "funcs": [ [ "help", 125 ], [ "display_line", 1453 ] ], "metrics": { "ast": { "op.gt": 1, "op.ne": 3, "op.sub": 3, "max_depth": 9, "call_count": 36, "node_count": 757, "op_density.gt": 0, "op_density.ne": 0, "op_density.sub": 0 }, "file": { "size": 2834, "entropy": 5.2 }, "text": { "lines": 99, "top_char": 101, "tab_count": 64, "digit_ratio": 0.01, "space_count": 346, "char_entropy": 5.2, "mixed_indent": 1, "unique_chars": 78, "top_char_null": 0, "import_density": 1.01, "string_density": 0.45, "top_char_ratio": 0.08, "avg_line_length": 27.63, "max_line_length": 124, "empty_line_ratio": 0.16, "last_line_length": 2, "whitespace_ratio": 0.18, "identifier_density": 1.79, "line_length_stddev": 27.35, "max_whitespace_run": 11, "normalized_import_count": 0.1, "normalized_string_count": 4.52, "repeated_char_sequences": 2, "suspicious_string_ratio": 0.02, "suspicious_comment_ratio": 0.25, "normalized_function_count": 0.2, "imports_to_functions_ratio": 0.5, "strings_to_functions_ratio": 22.5, "suspicious_identifier_ratio": 0.02, "normalized_unique_identifiers": 9.65, "identifiers_to_functions_ratio": 32 }, "binds": { "count": 29 }, "calls": { "dynamic_target_count": 6 }, "binary": { "peak_region_bytes": 2834, "peak_region_entropy": 5.29 }, "source": { "function_count": 2 }, "imports": { "count": 1, "third_party_count": 1, "third_party_ratio": 1 }, "strings": { "bytes": 511, "count": 45, "shell": 1, "avg_length": 11.36, "max_length": 90, "avg_entropy": 2.44, "entropy_stddev": 1.22 }, "comments": { "chars": 334, "count": 8, "lines": 8, "base64": 1, "high_entropy": 1, "to_code_ratio": 0.09 }, "functions": { "count": 2, "density": 2.02, "code_ratio": 0.25, "length_stddev": 2.5, "avg_name_length": 8, "no_params_count": 2, "avg_length_lines": 12.5, "max_length_lines": 15, "min_length_lines": 10 }, "identifiers": { "count": 177, "unique": 64, "avg_length": 7.34, "max_length": 54, "min_length": 1, "avg_entropy": 2.08, "reuse_ratio": 0.36, "length_stddev": 7.56, "has_digit_ratio": 0.06, "sequential_names": 1, "single_char_count": 5, "single_char_ratio": 0.08, "high_entropy_count": 2, "high_entropy_ratio": 0.03, "all_lowercase_ratio": 0.45, "all_uppercase_ratio": 0.11, "numeric_suffix_count": 1 } } }, "id": 1, "mol": "H₃(FPo₂U)Md(Pa₂)", "path": "/data/samples/good/foraged/wolfi/wolfi.dev/_/lsb-release-minimal/lsb-release-minimal-12.1-r6.apk!!usr/bin/lsb_release", "pid": 0, "risk": 6, "sha": "87ade2b1d6b001862a6d524f0a4265a71a0d1622678d5b0fe3a62199414195a6", "size": 2834, "traits": [ { "id": "metadata/package/files/dependency::os-image-root-file-path", "conf": 0.94, "crit": 3, "desc": "Root-level OS directory path" }, { "id": "metadata/package/license::spdx-identifier", "conf": 0.9, "crit": 3, "desc": "SPDX license identifier", "spans": [ [ 61, 23 ] ] }, { "id": "micro-behaviors/fs/path/os/identity::linux-release-file-reference", "conf": 0.85, "crit": 3, "desc": "Linux OS release filename reference", "spans": [ [ 1672, 10 ], [ 1724, 10 ] ] }, { "id": "micro-behaviors/process/create/shell/spawn::sh-dynamic-command-target", "conf": 0.95, "crit": 3, "desc": "Shell command variable at a command boundary", "spans": [ [ 1500, 13 ], [ 2480, 13 ], [ 2542, 8 ], [ 2609, 10 ], [ 2684, 13 ], [ 2757, 14 ] ] }, { "id": "micro-behaviors/process/interpreter/eval/direct::shell-eval", "atk": "T1059", "conf": 0.5, "crit": 3, "desc": "Evaluates a shell command string", "spans": [ [ 897, 4 ] ] }, { "id": "micro-behaviors/process/interpreter/eval/direct::shell-evaluates-variable-command", "atk": "T1059", "conf": 0.9, "crit": 3, "desc": "Shell evaluates variable command", "spans": [ [ 1895, 7 ] ] }, { "id": "micro-behaviors/ui/help::usage-colon-text", "conf": 0.92, "crit": 3, "desc": "Usage: help text marker", "spans": [ [ 149, 7 ] ] }, { "id": "metadata/import/shell/os_release::os_release", "conf": 0.95, "crit": 2, "desc": "imports $os_release", "spans": [ [ 1899, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-1", "conf": 0.8, "crit": 1, "desc": "English function-word token \"the\"", "spans": [ [ 568, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-2", "conf": 0.8, "crit": 1, "desc": "English function-word token \"and\"", "spans": [ [ 236, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-7", "conf": 0.8, "crit": 1, "desc": "English function-word token \"this\"", "spans": [ [ 218, 0 ] ] } ], "type": "shell" }, { "ctx": [ { "b": "DJ", "n": [ { "c": 2, "d": "SPDX SBOM document", "i": "metadata/package/files/system-package::spdx-sbom-document", "o": 0, "z": 1, "cf": 0.9800000190734863 } ], "ln": 1, "addr": 0 }, { "b": "arR\u003eHAaBh]wPz\u003caz/c:War\u003c-Xl%82@e\u0026aX5", "ln": 2, "addr": 2 }, { "b": "arR\u003esvrt{Kx\u003e7Z(B7DKRar\u003cfufFb1ifD@4", "ln": 3, "addr": 31 }, { "b": "arR^Hb5y$6wO#N2oLFM\u0026r+lq)x(v(kiV]R5e\u00262gaec", "ln": 8, "addr": 260 }, { "b": "arR^Hb4CU8vruBdB0rT/tl", "ln": 9, "addr": 294 }, { "b": "arR^HarR\u003ecz/oCMaz\u003eXavqYZ?asIy!e\u0026kEsf!1p$", "n": [ { "c": 2, "d": "Melange-generated SPDX SBOM", "i": "metadata/package/files/system-package::melange-spdx-sbom", "o": 318, "z": 14, "cf": 0.9800000190734863 } ], "ln": 10, "addr": 312 }, { "b": "arR^HarR\u003e7A+w/#x)Kifx(v(Iavx*Jx(mNavrb)faw3DXa]", "ln": 11, "addr": 345 }, { "b": "arR^Ht}t", "ln": 12, "addr": 383 }, { "b": "arR^HarR^HarR\u003eGwObH]wO#0?lT+7Fxk.*ob03?\u003cp^EDwk$su}o*IJum[3r1ec", "ln": 41, "addr": 1297 }, { "b": "arR^HarR^HarR\u003eGwObH]wO#0?rc-B]b03?\u003cAclhqa$J", "ln": 42, "addr": 1347 }, { "b": "arR^HarR^HarR\u003eGwObH]wO#0?oMaAHBz(gziV]R=yIbXpAbdaJz!%31fkLYsePLAswNPT\u003eeP2itx(do{kRU2Df!EA7kvFOxxGZP1hEwv0tY?.Ogb-VSB98Cvj:g*Xw[-B", "n": [ { "c": 2, "d": "Wolfi APK SPDX SBOM", "i": "metadata/package/files/system-package::wolfi-apk-spdx-sbom", "o": 1382, "z": 88, "cf": 0.9800000190734863 } ], "ln": 43, "addr": 1382 }, { "b": "arR^HarR^HEe", "ln": 44, "addr": 1486 }, { "b": "arR^HarT@v", "ln": 45, "addr": 1496 }, { "b": "arR^HarR\u003esz*c8nz^^fIz!0i$x(v(kiV]RwpEd]Tmn^8RpFJ8+", "ln": 91, "addr": 3480 }, { "b": "arR^HarR\u003eux(4v4l2HaED3T4jb03\u0026UvqH0@ec", "ln": 92, "addr": 3521 }, { "b": "arR^HarR\u003eHz/{8gwL3=KzZ4j+b4j#3B.L(cwft\u00261v@2H=wGUY8w]w/7A=k!qk#ph%l{-{Sfd{6]m[DDBpA?s", "n": [ { "c": 1, "d": "SPDX references APK DB package info", "i": "metadata/package/files/system-package::spdx-apk-pkginfo-source", "o": 3572, "z": 44, "cf": 0.8999999761581421 } ], "ln": 93, "addr": 3551 }, { "b": "arR^HarR\u003eAx\u003e7Z(B7EZSzEWH9wmYo}iV]RwpEd]Tmn^8RpFJ8+", "ln": 94, "addr": 3619 }, { "b": "arR^HarR\u003eAx\u003e7Z(B7E:Jv@bN]wN(#Car\u003cxQlN15", "ln": 95, "addr": 3660 }, { "b": "arR^HarR^HarR\u003eGwObH]wO#0?oMaAHBz(gziV]R=yIbXpAbdaJz!%31fkLYsePLAswNPT\u003eeP2itx(do{kRU2Df!EA7kvFOxxGZP1hEwv0tY?.Ogb:5\u003ex\u003eIc$j-2gGePLAswNPT\u003eeP2itx(do{a]", "n": [ { "c": 1, "d": "Wolfi APK package URL in SPDX", "i": "metadata/package/files/system-package::spdx-wolfi-apk-purl", "o": 5935, "z": 102, "cf": 0.8999999761581421 } ], "ln": 152, "addr": 5935 }, { "b": "arR^HarR^HEe", "ln": 153, "addr": 6053 } ], "depth": 1, "facts": { "metrics": { "file": { "size": 7624.0, "entropy": 5.03, "size_bytes": 7624.0 }, "json": { "parsed_bytes": 7624.0, "parse_limit_bytes": 76800.0 }, "binary": { "overall_entropy": 5.03, "peak_region_bytes": 5576.0, "peak_region_entropy": 5.17 } } }, "id": 2, "path": "/data/samples/good/foraged/wolfi/wolfi.dev/_/lsb-release-minimal/lsb-release-minimal-12.1-r6.apk!!var/lib/db/sbom/lsb-release-minimal-12.1-r6.spdx.json", "risk": 1, "sha": "fa497ba0bf5a6c746ac0dbed7ee22009c913d9291ad3c528ca8b4ef477a2addf", "size": 7624, "traits": [ { "id": "metadata/package/files/system-package::spdx-wolfi-apk-purl", "conf": 0.8999999761581421, "crit": 1, "desc": "Wolfi APK package URL in SPDX", "spans": [ [ 1382, 88 ], [ 1413, 14 ], [ 5935, 102 ] ] }, { "id": "metadata/file/format::valid", "conf": 0.6000000238418579, "crit": 2, "desc": "JSON data format", "spans": [ [ 0, 37 ] ] }, { "id": "metadata/package/files/system-package::spdx-document-id", "conf": 0.8999999761581421, "crit": 1, "desc": "SPDX document identifier" }, { "id": "metadata/package/files/system-package::spdx-melange-namespace", "conf": 0.8999999761581421, "crit": 1, "desc": "Melange SPDX document namespace" }, { "id": "metadata/package/files/system-package::spdx-document-version", "conf": 0.8999999761581421, "crit": 1, "desc": "SPDX document version field" }, { "id": "metadata/package/files/system-package::spdx-apk-pkginfo-source", "conf": 0.8999999761581421, "crit": 1, "desc": "SPDX references APK DB package info", "spans": [ [ 3572, 44 ] ] }, { "id": "metadata/package/files/system-package::spdx-melange-creator", "conf": 0.8999999761581421, "crit": 1, "desc": "Melange SPDX creator", "spans": [ [ 318, 14 ] ] }, { "id": "metadata/package/files/system-package::spdx-sbom-document", "conf": 0.9800000190734863, "crit": 2, "desc": "SPDX SBOM document" }, { "id": "metadata/package/files/system-package::melange-spdx-sbom", "conf": 0.9800000190734863, "crit": 2, "desc": "Melange-generated SPDX SBOM", "spans": [ [ 318, 14 ] ] }, { "id": "metadata/package/files/system-package::wolfi-apk-spdx-sbom", "conf": 0.9800000190734863, "crit": 2, "desc": "Wolfi APK SPDX SBOM", "spans": [ [ 1382, 88 ], [ 1413, 14 ], [ 3572, 44 ], [ 5935, 102 ] ] } ], "type": "json" }, { "ctx": [ { "b": "boPG/zE)\u0026%By!#9vTf8kwO+^)xjR", "n": [ { "c": 2, "d": "Melange-generated APK package info", "i": "metadata/package/files/system-package::melange-generated-apk-pkginfo", "o": 0, "z": 22, "cf": 0.9800000190734863 } ], "ln": 1, "addr": 0 }, { "b": "Abf97vqPM#jS[MZvL8Riy?m3@wI4+kzFr@@yY", "n": [ { "c": 2, "d": "Wolfi APK package info metadata", "i": "metadata/package/files/system-package::wolfi-apk-pkginfo", "o": 23, "z": 29, "cf": 0.9800000190734863 } ], "ln": 2, "addr": 23 }, { "b": "Abf9fwPw[RatCS7f!EA7", "n": [ { "c": 2, "d": "Alpine/Wolfi package info metadata", "i": "metadata/package/files/system-package::alpine-apk-pkginfo", "o": 53, "z": 16, "cf": 0.9700000286102295 } ], "ln": 3, "addr": 53 }, { "b": "vrb\u003c\u003eauZ\u0026(i5Ub4gY", "ln": 4, "addr": 70 }, { "b": "B7]@iauZ\u00266iwArz", "ln": 5, "addr": 84 }, { "b": "z/PM8x(k4Raz=adePLAswNPT\u003eeP2itx(do{", "n": [ { "c": 1, "d": "Alpine/Wolfi package origin field", "i": "metadata/package/files/system-package::alpine-pkginfo-origin-field", "o": 97, "z": 28, "cf": 0.8999999761581421 } ], "ln": 6, "addr": 97 }, { "b": "Abf8%wPIu7jS)EkzFr@@y-)s#yH[S8B7c.wwO+{^B7DFoxKM09B-RbnaA8rMA+f5#vrk#", "ln": 7, "addr": 126 }, { "b": "B-IpvjS\u003c", "ln": 8, "addr": 182 }, { "b": "v@Dj3x(\u003eEXaur%/iwSN4wJhI2h-JPMwhmWMw?))Jw\u0026a9Wg?wH2g?pcafK[JDve", "ln": 9, "addr": 189 }, { "b": "zddc@Byw)3wPw[RaA}:uw[.", "n": [ { "c": 1, "d": "Wolfi package maintainer field", "i": "metadata/package/files/system-package::wolfi-pkginfo-maintainer", "o": 239, "z": 18, "cf": 0.8999999761581421 } ], "ln": 10, "addr": 239 }, { "b": "vS=y3wmPa\u003cwGTbUf/I3GfGp{Ah-p", "ln": 11, "addr": 258 }, { "b": "y?Wx\u003czGxwijS)r{lJ", "ln": 12, "addr": 281 } ], "depth": 1, "facts": { "metrics": { "file": { "size": 406.0, "entropy": 4.97, "size_bytes": 406.0 }, "binary": { "overall_entropy": 4.97, "peak_region_bytes": 406.0, "peak_region_entropy": 4.97 } } }, "id": 3, "path": "/data/samples/good/foraged/wolfi/wolfi.dev/_/lsb-release-minimal/lsb-release-minimal-12.1-r6.apk!!.PKGINFO", "risk": 1, "sha": "15b8840bc5a265ab4a198afc91dc659697e1e340e406bfb51c7a836534f80796", "size": 406, "traits": [ { "id": "metadata/package/files/system-package::alpine-pkginfo-origin-field", "conf": 0.8999999761581421, "crit": 1, "desc": "Alpine/Wolfi package origin field", "spans": [ [ 97, 28 ] ] }, { "id": "metadata/package/files/system-package::alpine-pkginfo-basename", "conf": 0.8999999761581421, "crit": 1, "desc": "Alpine/Wolfi package info file" }, { "id": "metadata/package/files/system-package::wolfi-pkginfo-maintainer", "conf": 0.8999999761581421, "crit": 1, "desc": "Wolfi package maintainer field", "spans": [ [ 239, 18 ] ] }, { "id": "metadata/package/files/system-package::alpine-pkginfo-package-field", "conf": 0.8999999761581421, "crit": 1, "desc": "Alpine/Wolfi package name field", "spans": [ [ 23, 29 ] ] }, { "id": "metadata/package/files/system-package::arch-pkgname-field", "conf": 0.9399999976158142, "crit": 1, "desc": "Arch pkgname metadata field", "spans": [ [ 23, 29 ] ] }, { "id": "metadata/package/files/system-package::alpine-pkginfo-version-field", "conf": 0.8999999761581421, "crit": 1, "desc": "Alpine/Wolfi package version field", "spans": [ [ 53, 16 ] ] }, { "id": "metadata/package/files/system-package::melange-pkginfo-generator", "conf": 0.8999999761581421, "crit": 1, "desc": "Melange-generated package metadata", "spans": [ [ 0, 22 ] ] }, { "id": "metadata/package/files/system-package::alpine-apk-pkginfo", "conf": 0.9700000286102295, "crit": 2, "desc": "Alpine/Wolfi package info metadata", "spans": [ [ 23, 29 ], [ 53, 16 ], [ 97, 28 ] ] }, { "id": "metadata/package/files/system-package::melange-generated-apk-pkginfo", "conf": 0.9800000190734863, "crit": 2, "desc": "Melange-generated APK package info", "spans": [ [ 0, 22 ], [ 23, 29 ], [ 53, 16 ], [ 97, 28 ] ] }, { "id": "metadata/package/files/system-package::wolfi-apk-pkginfo", "conf": 0.9800000190734863, "crit": 2, "desc": "Wolfi APK package info metadata", "spans": [ [ 23, 29 ], [ 53, 16 ], [ 97, 28 ], [ 239, 18 ] ] } ], "type": "text" } ], "rev": "46112", "v": "8" } }