{
  "ml": {
    "v": "7",
    "eng": "2.11.0-beta.0",
    "lvl": -1,
    "conf": 0,
    "mods": [
      {
        "cls": 0,
        "raw": 0.3920368,
        "rte": "az",
        "prob": 0.3920368
      },
      {
        "cls": 0,
        "raw": 0.14187717,
        "rte": "az/zip",
        "prob": 0.14187717
      }
    ],
    "prob": 0.3920368,
    "files": [
      {
        "id": 0,
        "lvl": -1,
        "conf": 0,
        "prob": 0.3920367956161499,
        "type": "zip"
      },
      {
        "id": 1,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000020772218704223633,
        "type": "tar.gz"
      },
      {
        "id": 3,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000014762083992536645,
        "type": "shell"
      },
      {
        "id": 5,
        "lvl": -1,
        "conf": 0,
        "prob": 0.0000188450012501562,
        "type": "shell"
      },
      {
        "id": 51,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000013957421288068872,
        "type": "lua"
      },
      {
        "id": 99,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000011185805306013208,
        "type": "shell"
      }
    ],
    "version": "v18.18",
    "analyzed_at": "2026-09-15T23:13:31Z"
  },
  "path": "busted-ffi-2.0.rc12-1.src.rock",
  "raw": {
    "files": [
      {
        "id": 0,
        "mol": "O₂(SXe₂)H₄(Cm₄DbOsPo)",
        "sha": "8a810c83718833816e7751c4be4c008a349f12e5e86eae2e45b70fb4eddb5f4f",
        "path": "busted-ffi-2.0.rc12-1.src.rock",
        "risk": 6,
        "size": 53828,
        "type": "zip",
        "facts": {
          "metrics": {
            "file": {
              "size": 53828,
              "entropy": 7.99
            },
            "binary": {
              "peak_region_bytes": 53248,
              "peak_region_entropy": 7.83
            },
            "archive": {
              "file_count": 2,
              "member_count": 2,
              "script_count": 0,
              "zip_bomb_ratio": 3.99,
              "compressed_size": 53454,
              "directory_count": 0,
              "executable_count": 0,
              "extra_field_size": 48,
              "noise_file_count": 0,
              "compression.ratio": 0.94,
              "hidden_file_count": 0,
              "uncompressed_size": 56573,
              "crc_collision_count": 0,
              "entry_comment_count": 0,
              "max_filename_length": 30,
              "rtlo_filename_count": 0,
              "format.regular_count": 2,
              "nested_archive_count": 1,
              "path_traversal_count": 0,
              "symlink_escape_count": 0,
              "security.setgid_count": 0,
              "security.setuid_count": 0,
              "security.sticky_count": 0,
              "double_extension_count": 0,
              "duplicate_member_count": 0,
              "security.symlink_count": 0,
              "unicode_filename_count": 0,
              "homoglyph_filename_count": 0,
              "security.encrypted_count": 0,
              "timing.mtime_unique_count": 1,
              "timing.mtime_unique_ratio": 0.5,
              "misplaced_executable_count": 0,
              "timing.mtime_dominant_count": 2,
              "timing.mtime_spread_seconds": 0,
              "timing.sentinel_mtime_count": 0,
              "security.world_writable_count": 0,
              "timing.mtime_dominant_fraction": 1,
              "compression.method_counts.deflate": 2
            },
            "consistency": {
              "extension_content_mismatch": 1,
              "extension_content_mismatch.archive_as_unknown": 1
            }
          }
        },
        "traits": [
          {
            "id": "micro-behaviors/communications/http/download/curl::curl-cmd",
            "atk": "T1105",
            "conf": 0.7,
            "crit": 2,
            "desc": "curl command includes URL or option"
          },
          {
            "id": "micro-behaviors/process/interpreter/perl::perl-keyword",
            "conf": 0.7,
            "crit": 3,
            "desc": "Perl interpreter command reference"
          },
          {
            "id": "objectives/execution/exploit/sandbox-escape::network-tool-token",
            "atk": "T1059.004,T1611",
            "conf": 0.94,
            "crit": 3,
            "desc": "Shell invokes a network utility"
          },
          {
            "id": "micro-behaviors/os/privilege/elevation::sudo-command",
            "conf": 0.9,
            "crit": 3,
            "desc": "Shell command invokes sudo"
          },
          {
            "id": "micro-behaviors/communications/http/download/shell::curl-http-literal-download",
            "atk": "T1105",
            "conf": 0.88,
            "crit": 3,
            "desc": "curl downloads HTTP URL"
          },
          {
            "id": "micro-behaviors/communications/http/download/cli::curl-command-call",
            "atk": "T1105",
            "conf": 0.96,
            "crit": 3,
            "desc": "Shell invokes the curl command"
          },
          {
            "id": "micro-behaviors/communications/http/curl::curl-command-remote-url",
            "conf": 0.85,
            "crit": 3,
            "desc": "curl command names a routable remote URL"
          },
          {
            "id": "micro-behaviors/communications/http/download/shell::fetch-command-with-var",
            "atk": "T1105",
            "conf": 0.9,
            "crit": 3,
            "desc": "curl or wget references shell variable"
          },
          {
            "id": "objectives/supply-chain/install-hook/build/autotools::makefile-curl-wget",
            "atk": "T1195.002",
            "conf": 0.85,
            "crit": 3,
            "desc": "curl/wget download in build file"
          },
          {
            "id": "micro-behaviors/data/llm/codegen::llm-generation-source-write",
            "conf": 0.88,
            "crit": 3,
            "desc": "Writes source code or script"
          },
          {
            "id": "micro-behaviors/communications/http/download/shell::curl-http-literal-download-cluster",
            "atk": "T1105",
            "conf": 0.9,
            "crit": 3,
            "desc": "curl downloads multiple HTTP URLs"
          },
          {
            "id": "micro-behaviors/communications/http/download/curl::curl",
            "atk": "T1105",
            "conf": 0.66,
            "crit": 3,
            "desc": "Download via curl",
            "from": [
              {
                "file": 1
              },
              {
                "file": 5
              }
            ],
            "uses": [
              0
            ]
          },
          {
            "id": "objectives/execution/exploit/http-command-injection::shell-parenthesized-command-string-literal",
            "atk": "T1059,T1190",
            "mbc": "B0024",
            "conf": 0.98,
            "crit": 3,
            "desc": "Parenthesized shell command string"
          }
        ]
      },
      {
        "depth": 1,
        "facts": {
          "metrics": {
            "file": {
              "size": 52404,
              "entropy": 7.99
            },
            "parse": {
              "error_count": 1
            },
            "binary": {
              "peak_region_bytes": 52224,
              "peak_region_entropy": 7.84
            }
          }
        },
        "id": 1,
        "ident": {
          "name": {
            "value": "v2",
            "source": "file.basename",
            "verified": false
          },
          "trust": "unsigned",
          "version": {
            "value": "0.rc12-1",
            "source": "file.basename",
            "verified": false
          }
        },
        "mol": "O₂(SXe₂)H₄(Cm₄DbOsPo)",
        "path": "busted-ffi-2.0.rc12-1.src.rock!!v2.0.rc12-1.tar.gz",
        "pid": 0,
        "risk": 6,
        "sha": "c44286468babcc38e90f036d25471ab92f19a8a0a68482e0c45a9cfaeb1c0e35",
        "size": 52404,
        "traits": [
          {
            "id": "micro-behaviors/communications/http/download/curl::curl",
            "atk": "T1105",
            "conf": 0.66,
            "crit": 3,
            "desc": "Download via curl",
            "from": [
              {
                "file": 5
              }
            ],
            "uses": [
              11
            ]
          },
          {
            "id": "micro-behaviors/communications/http/curl::curl-command-remote-url",
            "conf": 0.85,
            "crit": 3,
            "desc": "curl command names a routable remote URL"
          },
          {
            "id": "micro-behaviors/os/privilege/elevation::sudo-command",
            "conf": 0.9,
            "crit": 3,
            "desc": "Shell command invokes sudo"
          },
          {
            "id": "micro-behaviors/data/llm/codegen::llm-generation-source-write",
            "conf": 0.88,
            "crit": 3,
            "desc": "Writes source code or script"
          },
          {
            "id": "micro-behaviors/process/interpreter/perl::perl-keyword",
            "conf": 0.7,
            "crit": 3,
            "desc": "Perl interpreter command reference"
          },
          {
            "id": "micro-behaviors/communications/http/download/shell::fetch-command-with-var",
            "atk": "T1105",
            "conf": 0.9,
            "crit": 3,
            "desc": "curl or wget references shell variable"
          },
          {
            "id": "micro-behaviors/communications/http/download/cli::curl-command-call",
            "atk": "T1105",
            "conf": 0.96,
            "crit": 3,
            "desc": "Shell invokes the curl command"
          },
          {
            "id": "micro-behaviors/communications/http/download/shell::curl-http-literal-download",
            "atk": "T1105",
            "conf": 0.88,
            "crit": 3,
            "desc": "curl downloads HTTP URL"
          },
          {
            "id": "objectives/execution/exploit/http-command-injection::shell-parenthesized-command-string-literal",
            "atk": "T1059,T1190",
            "mbc": "B0024",
            "conf": 0.98,
            "crit": 3,
            "desc": "Parenthesized shell command string"
          },
          {
            "id": "objectives/execution/exploit/sandbox-escape::network-tool-token",
            "atk": "T1059.004,T1611",
            "conf": 0.94,
            "crit": 3,
            "desc": "Shell invokes a network utility"
          },
          {
            "id": "micro-behaviors/communications/http/download/shell::curl-http-literal-download-cluster",
            "atk": "T1105",
            "conf": 0.9,
            "crit": 3,
            "desc": "curl downloads multiple HTTP URLs"
          },
          {
            "id": "micro-behaviors/communications/http/download/curl::curl-cmd",
            "atk": "T1105",
            "conf": 0.7,
            "crit": 2,
            "desc": "curl command includes URL or option"
          },
          {
            "id": "objectives/supply-chain/install-hook/build/autotools::makefile-curl-wget",
            "atk": "T1195.002",
            "conf": 0.85,
            "crit": 3,
            "desc": "curl/wget download in build file"
          }
        ],
        "type": "tar.gz"
      },
      {
        "ctx": [
          {
            "b": "x\u003ewF(at4)Za%.IioHhSEpF%[FeQX/=t@%fJxK#5*arTGOk#ZrHqCxq1r8M1.nMe$(q^So=o*}bJw[.OVx\u003ewF(ar\u00267coHhSEpF%[hau.\u003egb5.KEa%peMaARpdzvdHep!TeOmO=]RjTa-Kv@DBkb0cczx:LhYw/$q2eQwJ-bV4f2r7oUYo^gY=j0nSUwO}?$azCBgtoCand0oAozdLduau.\u003egb1#Y*B:b8Mt@%fJxK#5*arR^Hp!TeOmO=]RjTaYRzGQgFi%)8MwO=B03lQDlaw+-$r7oUYo*6XqvpKj%CP]iRarUogi%]Ol3i",
            "ln": 0,
            "col": 1,
            "line": 1
          }
        ],
        "depth": 2,
        "facts": {
          "imp": [
            [
              "",
              "uname"
            ]
          ],
          "tgt": [
            "uname"
          ],
          "metrics": {
            "ast": {
              "op.eq": 2,
              "max_depth": 9,
              "call_count": 1,
              "node_count": 112,
              "op_density.eq": 0.02
            },
            "file": {
              "size": 249,
              "entropy": 4.83
            },
            "text": {
              "lines": 15,
              "top_char": 34,
              "max_ws_run": 1,
              "space_count": 40,
              "char_entropy": 4.83,
              "unique_chars": 43,
              "top_char_null": 0,
              "string_density": 0.6,
              "top_char_ratio": 0.07,
              "avg_line_length": 15.6,
              "max_line_length": 36,
              "empty_line_ratio": 0.13,
              "last_line_length": 2,
              "whitespace_ratio": 0.22,
              "identifier_density": 0.67,
              "line_length_stddev": 13.04,
              "normalized_string_count": 2.32,
              "suspicious_string_ratio": 0.11,
              "normalized_unique_identifiers": 0.77
            },
            "binds": {
              "count": 4
            },
            "binary": {
              "peak_region_bytes": 249,
              "peak_region_entropy": 4.83
            },
            "strings": {
              "bytes": 64,
              "count": 9,
              "shell": 1,
              "avg_length": 7.11,
              "max_length": 13,
              "avg_entropy": 2.72,
              "entropy_stddev": 0.59
            },
            "identifiers": {
              "count": 10,
              "unique": 3,
              "avg_length": 9,
              "max_length": 14,
              "min_length": 5,
              "avg_entropy": 2.9,
              "reuse_ratio": 0.3,
              "length_stddev": 3.74,
              "all_lowercase_ratio": 0.33,
              "all_uppercase_ratio": 0.67
            }
          }
        },
        "id": 3,
        "mol": "H(Po)",
        "path": "busted-ffi-2.0.rc12-1.src.rock!!v2.0.rc12-1.tar.gz!!busted-2.0.rc12-1/.travis/platform.sh",
        "pid": 0,
        "risk": 2,
        "sha": "e911759a68fb2c8222c9d35a105742c04804598dcbe2e37622f0fe0c7b81bc27",
        "size": 249,
        "traits": [
          {
            "id": "metadata/file/extension/identity::shell-a",
            "conf": 1.0,
            "crit": 2,
            "desc": "POSIX shell script extension"
          },
          {
            "id": "metadata/package/testing/presence/harness::test-directory-path",
            "conf": 1.0,
            "crit": 2,
            "desc": "File is in common test directory"
          },
          {
            "id": "metadata/package/testing/presence/path::tests-path-basename",
            "conf": 1.0,
            "crit": 2,
            "desc": "Tests path basename"
          },
          {
            "id": "micro-behaviors/process/create/shell/spawn::parenthesized-command-literal",
            "conf": 0.98,
            "crit": 3,
            "desc": "Parenthesized shell command string",
            "spans": [
              [
                159,
                8
              ]
            ]
          },
          {
            "id": "micro-behaviors/os/sysinfo/platform/string::os-string-linux",
            "conf": 0.6,
            "crit": 2,
            "desc": "Linux platform string",
            "spans": [
              [
                173,
                0
              ]
            ]
          },
          {
            "id": "micro-behaviors/process/create/shell/spawn::command-substitution",
            "conf": 1.0,
            "crit": 2,
            "desc": "shell script command substitution",
            "spans": [
              [
                159,
                0
              ]
            ]
          },
          {
            "id": "metadata/package/testing/presence/harness::test-directory",
            "conf": 1.0,
            "crit": 2,
            "desc": "File identified as a test by path or name",
            "uses": [
              1
            ]
          },
          {
            "id": "metadata/package/testing/harness/runtime::is-test",
            "conf": 0.9,
            "crit": 2,
            "desc": "Test, spec, or fixture file",
            "uses": [
              6
            ]
          }
        ],
        "type": "shell"
      },
      {
        "ctx": [
          {
            "b": "boXf.vRGZkvQTs\u003e3jn12k{gkUA+PGmazbLjaAIaoBzkS9aA.SCwO#W9A=k\u0026jwO#Pjw]zYjBAg/kx(+\u003eox=}IeB98blxd:Joax8\u0026[B0bQAawu]^ayPd#awu]^A=kD6B1N!Aawt^3az(mxBrC47ar\u003eSAvkPU(a$K\u0026Xy\u0026%eze\u00261Q[z/M%Ay\u0026%f3x(\u003eKK3l{WfBZY30BttE5at1ZMvrlK4AV/JXe?^RSaz=geyh4=Be?[F2az\u003eLdBy/FnB$$W83jp\u0026=BrAeDB.kLmAa%o5w)]y\u00263joEbk$TZFuSGP[q+o+WjT8TlfFkga3qsC=n\u003ez#?lp1KsjT9Nxvm\u003c9\u003ceHj1\u0026k$TZFuSGP[q+o+Wa{[V#z/{8gwGSQEA::c9B1.GGvrua1A=0BIxBk8ury6$.pFBn+l}HotbVEVcr.lj%lrcPJl%\u0026tNqzh:4B97\u0026by+GQEvg0unqEq%\u003co*@zSnM4X%r8M1.nMe$.ry]\u003eLuQNE-fkkrBByx04fkL=tA=kD6A%-m\u003eyH?d1as6GNo*{Y/y\u0026%d[3qsC=n\u003ez#Bb5Rry3jpGVax]%jbV4f2r7oUYo^gYyjS\u003e}=vpKj%CP[noj0nSUwO}?$azCBgtoCanoJsw5au.\u003egb5zygyh4=layd5KBzbl63lQDlawt^3n\u003ez#Bb6^:vb0cbOazbr{arUxgax]%jbURi7a%o3iar\u003eR",
            "ln": 0,
            "col": 1,
            "line": 1
          },
          {
            "b": "bQ^kGAb)7xBZ/AlAV=S3ry4-Zat$U)au.\u003egb5zygyh4=layd5KBzbl63lQD+ry6kGr6qBJwPG4S3t9#V3t\u003cM?x(UsFA3ctIoJsw=nkz@GuQNE-a{[V\u003ew/$q2a%Y\u0026Zk$TZFa%o3iar(8xB0q-jj0nSUwO}?ZarUxgax]%jbURi7a%o3iar\u003eSAvqoH#a%peMaARpdzvdHearUfpA+(\u003cIeO]unvruj4zxJRmBz#pZfe3%LBzb/ae[n*pfhcH%n\u003ez#noM:=onMmuKA:@=%C4AsIbURi7n\u003ez#?rZ/[+nL-8lByxhxxl\u003eXFaAR4jaB5h]3lQE5y\u0026:d{arR^Hxk8Dgv@c73wGUVdBz#pZfe3%LBzb/ae[n*pfhcH%n\u003ez#noM:=onMmrPx(\u003eEyoJswJnMo4-k#Qil3lQE6x:Lg\u0026ay!}8bURi7n\u003ez#?lp1Ks3jm)#x\u003ewF(ar\u002678ry4/KjV%]iy\u0026%f3x((9.f^m-Cj0nSUwO}?$arR!tx(\u003eFcxK$W?z/{dAB$$W8i%)8MarR)Kw]zZ1wGV8dwGTMtq=D4RoKy:]k$%=\u003cBz\u0026phwGU/ivqoH#3lQDlaAg[jy-\u003erzat4Lzaszj-nLSh-k$\u003c%Vr8b.NmlJmNfg!]qr6:hKuSo=^o*}h/y\u0026%f3x((0QawDoWwObT)wEoL5w[.OVarUJfyH[RnclNelyH[S5zGx]dy?$j\u003cqBK5DsuN\u0026NoJsw=nkz@GuQNE-a{[V1az+{rePS3WoJsw=nkz@GuQNE-fjFTkfkL=tyh4=jbUgZ9mk3ofBZV}tBZY30Bp6cky\u0026gvEB08-4ry6$.pFBn+l}HofvRGZky\u0026%f3x(\u003eEynkz@Gfd}6-vj#Ctvlj/6wO=B03jm)#x\u003ewF(ar\u002678ry4/KjV%]iy\u0026%eze?[K)t@%fJxK#5*arR^Hv%8*dazt\u003esA5]T9CxXl-y\u0026%esz/PFzw]}#By\u0026%erh7*Qoh7\u0026#VAXq0JaBCqNvr9GnDi$=qarUf8az=geeJ2dne\u0026tY$arUlix\u003ewF(ar\u002678ry4/KjV%]iy\u0026%eze\u00261Q[t@%fJxK#5*arR^Hv%8*dazt\u003esA5]T9CxXl-y\u0026%esz/PFzw]}#By\u0026%erh7*Tpg+J(UAXq0JaBCqNvr9GnDi$=qarUf8az=geeJ2doe\u0026kS%arUlix\u003ewF(ar\u002678ry4/KjV%]iy\u0026%eze\u0026aW]t@%fJxK#5*arR^Hv%8*dazt\u003esA5]T9CxXl-y\u0026%esz/PFzw]}#By\u0026%erh7*Wqga)VSAXq0JaBCqNvr9GnDi$=qarUf8az=geeJ2dpe\u00262G}arUog3jm)#boPr}x(4r5oM:+^Cwhejz/{dAvQS+ZCvtJ5B0a$hze-{9x\u003c$^)x([Ryw]zYjBy/Jnx(mL\u003carUSmA+(\u003cIx=]0DwGSvwfd/N=ry6$VpFBUKr9}4toIx*\u003euOT5-fdd(-A:{:%vqxB^x(4t/arUJfyH[Rlp!TeOmO=]R3lQEdvqxA%nLSh-k$\u003c%Vr8lsNa%Y\u0026Zl0)eUo*@zSnM3-Px(n0lvqG:w3jm)#y\u0026gvEB08-4ry6$.pFBn+l}Hn",
            "ln": 657,
            "col": 9,
            "line": 34
          },
          {
            "b": "3s^P?bVEVcr.lj%lrcPJl%\u0026tNqvi+EBZVyAB{XNIry6IUlRyu+lp1Ksj-2mHA=kD6B1FUhry6IUlRyt+3s!j0y-\u003eqYy\u0026r/(BzkVhazt\u003esA5]T9y\u0026%fbz!0N7e]L=yflgSuwNPT\u003eB1X!jry6IUlRyu+lp1Kse{7Jxe[YFMD)0JtAV/QM3jpoNas6SXk#HGCoh/g:k#QhV3tB8{toCanoJsw5au.\u003egb5zygyh4=layd5KBzbl63lQDzfjO{rw[+[2A+cvBeO]MrePV5Dw[=GMyh4=jeIhfXBz9mxBZV\u003eozEWH9wmW[FbURi7uR0%!mpeCOqzh:4v@co#wIm\u003exvqoH#eIX}ja%nD?Ab]J4x)q=+bUR9ynkz@GuQNE-b0ccyy?WG7toCanoJsw5au.\u003egb5zygyh4=Be?!E(t@%fJxK#5*arSo\u0026v@Dl%x\u003eINewGSMRy\u0026%erB9h8bx)q^Qx(\u003eEHeQ7]JxF14yvj=hhv@co#wJ.j.oJsw=nkz@GuQNE-fkkrly\u0026%o1fkL=tyh4=wga\u003em8at2f:A+e\u0026%CS^k@oJ2j*pFBn+l}Ho2i%]Lnx\u003ewF(ar\u002678ry4/KjV%]iy\u0026%f3x((9.f^m-Cj0nSUwO}?$atbrSz/ff3xlwlaat2fYBZV\u003eyB.kl1CS/!QBrAd!CwhejeO]MreOP9jy\u0026%o1jT8dBry6$.pFBn+l}Hofx(mA%B.25py\u0026%f3x(\u003e{Ze?[K)eIg{ZwObU3jT8dBqEq%\u003co*@zSnM3-]3t13{wEoL5e?ZZMzF0P}B-I4oeIhfXBz9mxBZWASbURi7uR0%!mpeCOqx^knePt-ww[=GMa%Y\u0026WuR0%!mpeCOqx=DWx:Lh:vqxA%vS=y3wfriCaz\u003eL5wGUY8B97\u0026byZHI=zxHJLas6SUuR0%!mpeCOqzhG[zzb*Gvrco@yJyQznkz@Gfd}6-vj#Ctvrco@yJx*\u0026v}lYcr8M1.nMe$.ry]\u003eLuQNE-3jpP(vrco@yJyQIeP$YCB7]Mg3jp/\u003cat4RCas6SXk#HGCoh/g:k#QhV3tB8{toCanoJswJnMl(RjV%]iD1z4vayd5KBzbl63lQEiz6gAJw/@u)ry6kGr9}%Tq:\u0026+PwO=6)ax]%jbURi7a%o3iar\u003eSAvkPU(a%peMaARpdzvdHeA+#{JA+lCgBZV\u003cVe?[$oi%]Lnx\u003ewF(ar\u002678ry4/KjV%]iy\u0026%eze\u00261Q[t@%fJxK#5*arUYwat4RCaz=geeJ2doe\u0026kS%wO=6)ax]%jbURi7a%o3iar*",
            "ln": 1952,
            "col": 1,
            "line": 83
          }
        ],
        "depth": 2,
        "facts": {
          "imp": [
            [
              "",
              "set"
            ],
            [
              "",
              "source"
            ],
            [
              "",
              "mkdir"
            ],
            [
              "",
              "expr"
            ],
            [
              "",
              "mkdir"
            ],
            [
              "",
              "curl"
            ],
            [
              "",
              "tar"
            ],
            [
              "",
              "git"
            ],
            [
              "",
              "cd"
            ],
            [
              "",
              "git"
            ],
            [
              "",
              "perl"
            ],
            [
              "",
              "make"
            ],
            [
              "",
              "make"
            ],
            [
              "",
              "ln"
            ],
            [
              "",
              "ln"
            ],
            [
              "",
              "curl"
            ],
            [
              "",
              "tar"
            ],
            [
              "",
              "cd"
            ],
            [
              "",
              "curl"
            ],
            [
              "",
              "tar"
            ],
            [
              "",
              "cd"
            ],
            [
              "",
              "curl"
            ],
            [
              "",
              "tar"
            ],
            [
              "",
              "cd"
            ],
            [
              "",
              "perl"
            ],
            [
              "",
              "make"
            ],
            [
              "",
              "make"
            ],
            [
              "",
              "ln"
            ],
            [
              "",
              "ln"
            ],
            [
              "",
              "cd"
            ],
            [
              "",
              "lua"
            ],
            [
              "",
              "curl"
            ],
            [
              "",
              "tar"
            ],
            [
              "",
              "cd"
            ],
            [
              "",
              "./configure"
            ],
            [
              "",
              "./configure"
            ],
            [
              "",
              "./configure"
            ],
            [
              "",
              "./configure"
            ],
            [
              "",
              "make"
            ],
            [
              "",
              "make"
            ],
            [
              "",
              "ln"
            ],
            [
              "",
              "cd"
            ],
            [
              "",
              "luarocks"
            ],
            [
              "",
              "rm"
            ],
            [
              "",
              "rm"
            ],
            [
              "",
              "rm"
            ],
            [
              "",
              "rm"
            ],
            [
              "",
              "rm"
            ],
            [
              "",
              ".travis/platform.sh"
            ]
          ],
          "tgt": [
            "./configure",
            "cd",
            "curl",
            "expr",
            "git",
            "ln",
            "lua",
            "luarocks",
            "make",
            "mkdir",
            "perl",
            "rm",
            "set",
            "source",
            "tar"
          ],
          "metrics": {
            "ast": {
              "op.eq": 18,
              "max_depth": 9,
              "call_count": 48,
              "node_count": 859,
              "op_density.eq": 0.02
            },
            "file": {
              "size": 2989,
              "entropy": 5.42
            },
            "text": {
              "lines": 122,
              "top_char": 108,
              "max_ws_run": 1,
              "digit_ratio": 0.04,
              "space_count": 377,
              "char_entropy": 5.42,
              "unique_chars": 75,
              "top_char_null": 0,
              "string_density": 0.46,
              "top_char_ratio": 0.04,
              "avg_line_length": 23.5,
              "max_line_length": 109,
              "empty_line_ratio": 0.27,
              "last_line_length": 2,
              "whitespace_ratio": 0.17,
              "identifier_density": 1.95,
              "line_length_stddev": 24.76,
              "normalized_string_count": 5.07,
              "suspicious_string_ratio": 0.02,
              "normalized_unique_identifiers": 10.68
            },
            "binds": {
              "count": 10
            },
            "binary": {
              "peak_region_bytes": 2989,
              "peak_region_entropy": 5.35
            },
            "imports": {
              "count": 1,
              "relative": 1,
              "relative_ratio": 1,
              "third_party_count": 1,
              "third_party_ratio": 1
            },
            "strings": {
              "bytes": 523,
              "count": 56,
              "shell": 1,
              "avg_length": 9.34,
              "max_length": 41,
              "avg_entropy": 2.69,
              "entropy_stddev": 0.87
            },
            "comments": {
              "chars": 279,
              "count": 8,
              "lines": 8,
              "to_code_ratio": 0.07
            },
            "identifiers": {
              "count": 238,
              "unique": 74,
              "avg_length": 10.18,
              "max_length": 42,
              "min_length": 2,
              "avg_entropy": 2.61,
              "reuse_ratio": 0.31,
              "length_stddev": 9.19,
              "has_digit_ratio": 0.09,
              "high_entropy_count": 10,
              "high_entropy_ratio": 0.14,
              "all_lowercase_ratio": 0.28,
              "all_uppercase_ratio": 0.15,
              "numeric_suffix_count": 4
            }
          }
        },
        "id": 5,
        "mol": "O₂(SXe)H₄(Cm₆F₇MgPo₇)Md(Bk)",
        "path": "busted-ffi-2.0.rc12-1.src.rock!!v2.0.rc12-1.tar.gz!!busted-2.0.rc12-1/.travis/setup_lua.sh",
        "pid": 0,
        "risk": 12,
        "sha": "937412d2db2bdb92658e71879bae28ea89dd9199473e7439a1f9cd9f459c4172",
        "size": 2989,
        "traits": [
          {
            "id": "metadata/build/conda::conda-prefix-var",
            "conf": 0.95,
            "crit": 3,
            "desc": "Conda PREFIX build variable",
            "spans": [
              [
                1208,
                6
              ]
            ]
          },
          {
            "id": "metadata/file/extension/identity::shell-a",
            "conf": 1.0,
            "crit": 2,
            "desc": "POSIX shell script extension"
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-1",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"the\"",
            "spans": [
              [
                1079,
                0
              ]
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-2",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"and\"",
            "spans": [
              [
                89,
                0
              ]
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-5",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"for\"",
            "spans": [
              [
                25,
                0
              ]
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-6",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"with\"",
            "spans": [
              [
                2178,
                0
              ]
            ]
          },
          {
            "id": "micro-behaviors/communications/http/curl::curl-command-remote-url",
            "conf": 0.85,
            "crit": 3,
            "desc": "curl command names a routable remote URL",
            "spans": [
              [
                819,
                34
              ],
              [
                1377,
                23
              ],
              [
                2017,
                35
              ]
            ]
          },
          {
            "id": "micro-behaviors/communications/http/download/cli::curl-command-call",
            "atk": "T1105",
            "conf": 0.96,
            "crit": 3,
            "desc": "Shell invokes the curl command",
            "spans": [
              [
                819,
                4
              ]
            ]
          },
          {
            "id": "micro-behaviors/communications/http/download/shell::curl-http-literal-download",
            "atk": "T1105",
            "conf": 0.88,
            "crit": 3,
            "desc": "curl downloads HTTP URL",
            "spans": [
              [
                1376,
                45
              ],
              [
                1488,
                45
              ],
              [
                1600,
                45
              ]
            ]
          },
          {
            "id": "micro-behaviors/communications/http/download/shell::fetch-command-with-var",
            "atk": "T1105",
            "conf": 0.9,
            "crit": 3,
            "desc": "curl or wget references shell variable",
            "spans": [
              [
                810,
                82
              ],
              [
                2016,
                60
              ]
            ]
          },
          {
            "id": "micro-behaviors/communications/http/url/forge::public-code-forge-url",
            "conf": 0.9,
            "crit": 3,
            "desc": "References a public code-forge URL",
            "spans": [
              [
                835,
                19
              ]
            ]
          },
          {
            "id": "micro-behaviors/fs/build-artifacts::make-install-clean-command",
            "conf": 1.0,
            "crit": 3,
            "desc": "Make install clean command",
            "spans": [
              [
                1195,
                12
              ]
            ]
          },
          {
            "id": "micro-behaviors/fs/delete/file/command::rm-force-variable-target",
            "atk": "T1070.004",
            "mbc": "C0047",
            "conf": 0.9,
            "crit": 3,
            "desc": "Force-deletes a shell variable target",
            "spans": [
              [
                2745,
                22
              ],
              [
                2801,
                21
              ]
            ]
          },
          {
            "id": "micro-behaviors/fs/link/symlink::shell-ln-symlink",
            "conf": 0.88,
            "crit": 3,
            "desc": "Shell creates a symbolic link",
            "spans": [
              [
                1232,
                8
              ],
              [
                2651,
                6
              ]
            ]
          },
          {
            "id": "micro-behaviors/mem/alloc/executable::jit-runtime-reference",
            "conf": 0.85,
            "crit": 3,
            "desc": "References a JIT compilation runtime",
            "spans": [
              [
                140,
                6
              ],
              [
                222,
                6
              ],
              [
                258,
                6
              ]
            ]
          },
          {
            "id": "micro-behaviors/process/create/vcs/git::git-clone-command",
            "atk": "T1105",
            "conf": 0.9,
            "crit": 3,
            "desc": "Git clone command",
            "spans": [
              [
                921,
                46
              ]
            ]
          },
          {
            "id": "objectives/command-and-control/dropper/execution/pipe::execute-dot-slash",
            "atk": "T1059.004",
            "conf": 0.6,
            "crit": 3,
            "desc": "./ execution pattern",
            "spans": [
              [
                2144,
                14
              ]
            ]
          },
          {
            "id": "objectives/execution/exploit/sandbox-escape::network-tool-token",
            "atk": "T1059.004,T1611",
            "conf": 0.94,
            "crit": 3,
            "desc": "Shell invokes a network utility",
            "spans": [
              [
                2017,
                5
              ]
            ]
          },
          {
            "id": "objectives/supply-chain/install-hook/build/autotools::makefile-curl-wget",
            "atk": "T1195.002",
            "conf": 0.85,
            "crit": 3,
            "desc": "curl/wget download in build file",
            "spans": [
              [
                1377,
                12
              ],
              [
                2017,
                23
              ]
            ]
          },
          {
            "id": "micro-behaviors/communications/http/download/curl::curl-cmd",
            "atk": "T1105",
            "conf": 0.7,
            "crit": 2,
            "desc": "curl command includes URL or option",
            "spans": [
              [
                2016,
                0
              ]
            ]
          },
          {
            "id": "micro-behaviors/communications/http/download/shell::curl-http-literal-download-cluster",
            "atk": "T1105",
            "conf": 0.9,
            "crit": 3,
            "desc": "curl downloads multiple HTTP URLs",
            "spans": [
              [
                1377,
                44
              ],
              [
                1489,
                44
              ],
              [
                1601,
                44
              ]
            ]
          },
          {
            "id": "micro-behaviors/communications/http/url/scheme::cleartext-http-url",
            "atk": "T1071.001",
            "mbc": "C0002",
            "conf": 0.9,
            "crit": 3,
            "desc": "Cleartext http:// URL",
            "spans": [
              [
                1382,
                39
              ],
              [
                1494,
                39
              ],
              [
                1606,
                39
              ],
              [
                2033,
                50
              ]
            ]
          },
          {
            "id": "micro-behaviors/fs/delete/directory::shell-recursive-delete",
            "conf": 0.9,
            "crit": 3,
            "desc": "Shell recursively removes a path",
            "spans": [
              [
                2746,
                6
              ]
            ]
          },
          {
            "id": "micro-behaviors/fs/directory/chdir::shell-change-directory",
            "conf": 0.95,
            "crit": 3,
            "desc": "Shell changes working directory",
            "spans": [
              [
                990,
                2
              ]
            ]
          },
          {
            "id": "micro-behaviors/fs/directory/mkdir::mkdir-command",
            "conf": 0.8,
            "crit": 3,
            "desc": "Shell invokes mkdir command",
            "spans": [
              [
                402,
                17
              ],
              [
                721,
                25
              ]
            ]
          },
          {
            "id": "micro-behaviors/fs/path/location::env-home-hidden-path",
            "conf": 0.9,
            "crit": 3,
            "desc": "Hidden path under HOME variable",
            "spans": [
              [
                409,
                10
              ]
            ]
          },
          {
            "id": "micro-behaviors/fs/path/location::home-hidden-dotdir-ref",
            "conf": 0.6,
            "crit": 3,
            "desc": "Home-relative hidden directory path literal",
            "spans": [
              [
                1265,
                11
              ]
            ]
          },
          {
            "id": "micro-behaviors/process/create/local-exec::execute-dot-slash-literal",
            "conf": 0.88,
            "crit": 3,
            "desc": "Executes a local relative file",
            "spans": [
              [
                2147,
                11
              ]
            ]
          },
          {
            "id": "micro-behaviors/process/create/local-exec::local-execution",
            "conf": 1.0,
            "crit": 3,
            "desc": "Local ./ file invocation",
            "spans": [
              [
                2147,
                11
              ]
            ]
          },
          {
            "id": "micro-behaviors/process/create/local-exec::multi-local-executable-launch",
            "atk": "T1059.004",
            "conf": 0.91,
            "crit": 3,
            "desc": "Shell launches three local executables",
            "spans": [
              [
                2145,
                109
              ],
              [
                2439,
                109
              ],
              [
                2554,
                64
              ]
            ]
          },
          {
            "id": "micro-behaviors/process/create/script/file::shell-script-execution-alt",
            "atk": "T1059.004",
            "conf": 0.7,
            "crit": 3,
            "desc": "Executes shell script via alt interpreters",
            "spans": [
              [
                281,
                28
              ]
            ]
          },
          {
            "id": "micro-behaviors/process/create/shell/build::make-invocation",
            "atk": "T1027.004",
            "conf": 0.8,
            "crit": 3,
            "desc": "Invokes the Make build tool",
            "spans": [
              [
                1193,
                14
              ]
            ]
          },
          {
            "id": "micro-behaviors/process/create/shell/build::make-invocation-build",
            "atk": "T1027.004",
            "conf": 0.8,
            "crit": 3,
            "desc": "Make build invocation",
            "spans": [
              [
                2623,
                10
              ]
            ]
          },
          {
            "id": "micro-behaviors/process/create/shell/spawn::shell-execution-current-dir",
            "conf": 0.7,
            "crit": 3,
            "desc": "Execution from current directory (./file)",
            "spans": [
              [
                2145,
                13
              ]
            ]
          },
          {
            "id": "micro-behaviors/process/create/vcs/git::shell-git-clone",
            "atk": "T1059.004",
            "conf": 0.85,
            "crit": 3,
            "desc": "Shell command invokes git clone",
            "spans": [
              [
                917,
                13
              ]
            ]
          },
          {
            "id": "micro-behaviors/process/interpreter/perl::perl-keyword",
            "conf": 0.7,
            "crit": 3,
            "desc": "Perl interpreter command reference",
            "spans": [
              [
                1110,
                13
              ],
              [
                1737,
                11
              ]
            ]
          },
          {
            "id": "micro-behaviors/communications/http/download/cli::curl-wget-command",
            "atk": "T1105",
            "conf": 0.96,
            "crit": 3,
            "desc": "Shell invokes curl or wget",
            "uses": [
              7
            ],
            "spans": [
              [
                819,
                4
              ]
            ]
          },
          {
            "id": "micro-behaviors/communications/http/download/curl::curl",
            "atk": "T1105",
            "conf": 0.66,
            "crit": 3,
            "desc": "Download via curl",
            "uses": [
              19
            ],
            "spans": [
              [
                818,
                16
              ],
              [
                1376,
                13
              ],
              [
                2016,
                16
              ]
            ]
          },
          {
            "id": "micro-behaviors/process/create/vcs/git::public-forge-git-clone",
            "atk": "T1105",
            "conf": 0.92,
            "crit": 3,
            "desc": "Git clones a public code forge",
            "uses": [
              10,
              15
            ],
            "spans": [
              [
                835,
                19
              ],
              [
                921,
                46
              ]
            ]
          },
          {
            "id": "micro-behaviors/communications/http/download/cli::public-forge-http-download",
            "atk": "T1105",
            "conf": 0.9,
            "crit": 3,
            "desc": "Fetches content from a public code forge",
            "uses": [
              10,
              36
            ],
            "spans": [
              [
                819,
                4
              ],
              [
                835,
                19
              ]
            ]
          },
          {
            "id": "micro-behaviors/process/create/shell/spawn::shell-execution-comp",
            "atk": "T1059",
            "mbc": "E1059",
            "conf": 0.9,
            "crit": 3,
            "desc": "Shell command execution capability",
            "uses": [
              33
            ],
            "spans": [
              [
                2145,
                13
              ]
            ]
          },
          {
            "id": "micro-behaviors/process/create/exec::child-process-execution",
            "atk": "T1059",
            "conf": 0.94,
            "crit": 3,
            "desc": "Executes a child process",
            "uses": [
              40
            ],
            "spans": [
              [
                2145,
                13
              ]
            ]
          }
        ],
        "type": "shell"
      },
      {
        "ctx": [
          {
            "b": "cOcw/xK#10wPxdvEjMHMB-7Yhx(v(qwO+{{wO#PvaAg+fwO#Pvaz\u003eXhB75Y)dgdguarUxpe]#bBwPz/LCxdztwHH#aA86?UwGSPTasxh)wPz*fAYLsgvqY$3BrCyrvpQG]wO=r%AV/BkA+PGmiV]^)e?OnTy?mD{zGEHGvqPM#e?Om]tY7]ie?On-wPI{3xjShre*8JDzyl\u003euarR^HA+funA=91qx(2syBAhIn3lQE5zE+g63lQE2B-RUowg?}CvSM41x\u003c$T4DMTXEA=M8scM)**azb+lv@#B6zyx7jwO(0@BsXLN",
            "ln": 2889,
            "col": 28,
            "line": 98
          }
        ],
        "depth": 2,
        "facts": {
          "imp": [
            [
              "",
              "require"
            ],
            [
              "",
              "require"
            ],
            [
              "",
              "require"
            ],
            [
              "",
              "require"
            ],
            [
              "",
              "require"
            ],
            [
              "",
              "require"
            ],
            [
              "",
              "io.type"
            ],
            [
              "",
              "term.isatty"
            ],
            [
              "",
              "tablex.update"
            ],
            [
              "",
              "require"
            ],
            [
              "",
              "require"
            ],
            [
              "",
              "require"
            ],
            [
              "",
              "require"
            ],
            [
              "",
              "require"
            ],
            [
              "",
              "require"
            ],
            [
              "",
              "require"
            ],
            [
              "",
              "require"
            ],
            [
              "",
              "require"
            ],
            [
              "",
              "require"
            ],
            [
              "",
              "require"
            ],
            [
              "",
              "require"
            ],
            [
              "",
              "require"
            ],
            [
              "",
              "require"
            ],
            [
              "",
              "require"
            ],
            [
              "",
              "debug.getinfo"
            ],
            [
              "",
              "path.basename"
            ],
            [
              "",
              "exit"
            ],
            [
              "",
              "print"
            ],
            [
              "",
              "exit"
            ],
            [
              "",
              "path.chdir"
            ],
            [
              "",
              "path.normpath"
            ],
            [
              "",
              "exit"
            ],
            [
              "",
              "luacov"
            ],
            [
              "",
              "busted.register"
            ],
            [
              "",
              "busted.register"
            ],
            [
              "",
              "busted.register"
            ],
            [
              "",
              "ipairs"
            ],
            [
              "",
              "loadstring"
            ],
            [
              "",
              "loadstring"
            ],
            [
              "",
              "busted.subscribe"
            ],
            [
              "",
              "busted.subscribe"
            ],
            [
              "",
              "busted.subscribe"
            ],
            [
              "",
              "busted.subscribe"
            ],
            [
              "",
              "tonumber"
            ],
            [
              "",
              "utils.urandom"
            ],
            [
              "",
              "os.time"
            ],
            [
              "",
              "outputHandlerLoader"
            ],
            [
              "",
              "filterLoader"
            ],
            [
              "",
              "helperLoader"
            ],
            [
              "",
              "require"
            ],
            [
              "",
              "require"
            ],
            [
              "",
              "testFileLoader"
            ],
            [
              "",
              "busted.context.get"
            ],
            [
              "",
              "busted.context.children"
            ],
            [
              "",
              "debug.getmetatable"
            ],
            [
              "",
              "require"
            ],
            [
              "",
              "require"
            ],
            [
              "",
              "execute"
            ],
            [
              "",
              "busted.publish"
            ],
            [
              "",
              "exit"
            ],
            [
              "",
              "busted"
            ],
            [
              "",
              "busted.compatibility"
            ],
            [
              "",
              "busted.core"
            ],
            [
              "",
              "busted.execute"
            ],
            [
              "",
              "busted.modules.cli"
            ],
            [
              "",
              "busted.modules.filter_loader"
            ],
            [
              "",
              "busted.modules.helper_loader"
            ],
            [
              "",
              "busted.modules.luacov"
            ],
            [
              "",
              "busted.modules.output_handler_loader"
            ],
            [
              "",
              "busted.modules.test_file_loader"
            ],
            [
              "",
              "busted.options"
            ],
            [
              "",
              "busted.utils"
            ],
            [
              "",
              "pl.path"
            ],
            [
              "",
              "pl.tablex"
            ],
            [
              "",
              "term"
            ]
          ],
          "mbr": [
            "busted.context",
            "busted.context.children",
            "busted.context.get",
            "busted.publish",
            "busted.randomize",
            "busted.randomseed",
            "busted.register",
            "busted.skipAll",
            "busted.sort",
            "busted.subscribe",
            "busted.version",
            "cliArgs.ROOT",
            "cliArgs.Xhelper",
            "cliArgs.Xoutput",
            "cliArgs.coverage",
            "cliArgs.cpath",
            "cliArgs.directory",
            "cliArgs.e",
            "cliArgs.filter",
            "cliArgs.helper",
            "cliArgs.lang",
            "cliArgs.lazy",
            "cliArgs.list",
            "cliArgs.loaders",
            "cliArgs.lpath",
            "cliArgs.output",
            "cliArgs.pattern",
            "cliArgs.seed",
            "cliArgs.tags",
            "cliArgs.verbose",
            "cliArgs.version",
            "debug.getinfo",
            "debug.getmetatable",
            "debug.getmetatable.__call",
            "element.descriptor",
            "element.name",
            "file.run",
            "info.func",
            "info.source",
            "io.stderr",
            "io.stdout",
            "io.type",
            "options.defaultOutput",
            "options.standalone",
            "os.time",
            "package.cpath",
            "package.path",
            "path.basename",
            "path.chdir",
            "path.normpath",
            "require.exit",
            "require.loadstring",
            "tablex.update",
            "term.isatty",
            "utils.urandom"
          ],
          "tgt": [
            "busted.context.children",
            "busted.context.get",
            "busted.publish",
            "busted.register",
            "busted.subscribe",
            "debug.getinfo",
            "debug.getmetatable",
            "execute",
            "exit",
            "filterLoader",
            "helperLoader",
            "io.type",
            "ipairs",
            "loadstring",
            "luacov",
            "os.time",
            "outputHandlerLoader",
            "path.basename",
            "path.chdir",
            "path.normpath",
            "print",
            "require",
            "tablex.update",
            "term.isatty",
            "testFileLoader",
            "tonumber",
            "utils.urandom"
          ],
          "metrics": {
            "ast": {
              "op.eq": 3,
              "op.gt": 4,
              "op.add": 4,
              "op.lor": 8,
              "op.land": 4,
              "op.lnot": 4,
              "max_depth": 18,
              "call_count": 70,
              "node_count": 1791,
              "member_count": 55,
              "max_array_len": 7,
              "op_density.eq": 0,
              "op_density.gt": 0,
              "op_density.add": 0,
              "op_density.lor": 0,
              "op_density.land": 0,
              "op_density.lnot": 0,
              "max_concat_chain": 2,
              "member_depth_max": 3
            },
            "file": {
              "size": 5528,
              "entropy": 4.7
            },
            "text": {
              "lines": 185,
              "top_char": 101,
              "max_ws_run": 1,
              "digit_ratio": 0,
              "space_count": 895,
              "char_entropy": 4.7,
              "unique_chars": 66,
              "top_char_null": 0,
              "string_density": 0.36,
              "top_char_ratio": 0.09,
              "avg_line_length": 28.88,
              "max_line_length": 114,
              "empty_line_ratio": 0.17,
              "last_line_length": 3,
              "whitespace_ratio": 0.2,
              "identifier_density": 1.79,
              "line_length_stddev": 23.95,
              "normalized_string_count": 4.85,
              "suspicious_identifier_ratio": 0.03,
              "normalized_unique_identifiers": 14.74
            },
            "binds": {
              "count": 46
            },
            "binary": {
              "peak_region_bytes": 5528,
              "peak_region_entropy": 4.67
            },
            "imports": {
              "count": 15,
              "third_party_count": 15,
              "third_party_ratio": 1
            },
            "strings": {
              "bytes": 660,
              "count": 66,
              "avg_length": 10,
              "max_length": 37,
              "avg_entropy": 2.26,
              "empty_count": 1,
              "entropy_stddev": 1.32
            },
            "comments": {
              "chars": 652,
              "count": 16,
              "lines": 16,
              "to_code_ratio": 0.09
            },
            "identifiers": {
              "count": 331,
              "unique": 111,
              "avg_length": 6.59,
              "max_length": 19,
              "min_length": 1,
              "avg_entropy": 2.33,
              "reuse_ratio": 0.34,
              "length_stddev": 3.03,
              "sequential_names": 3,
              "single_char_count": 4,
              "single_char_ratio": 0.04,
              "high_entropy_count": 1,
              "high_entropy_ratio": 0.01,
              "all_lowercase_ratio": 0.83,
              "all_uppercase_ratio": 0.02,
              "underscore_prefix_count": 2
            }
          }
        },
        "id": 51,
        "mol": "H(Db)",
        "path": "busted-ffi-2.0.rc12-1.src.rock!!v2.0.rc12-1.tar.gz!!busted-2.0.rc12-1/busted/runner.lua",
        "pid": 1,
        "risk": 1,
        "sha": "b017af1a31ce019083e3ce001d221a4c99eb9e0146dd71bdcd58cac5941f06ff",
        "size": 5528,
        "traits": [
          {
            "id": "micro-behaviors/data/llm/codegen::llm-generation-source-write",
            "conf": 0.88,
            "crit": 3,
            "desc": "Writes source code or script",
            "spans": [
              [
                2953,
                52
              ]
            ]
          }
        ],
        "type": "lua"
      },
      {
        "ctx": [
          {
            "b": "boXZHx(kOBxBn*6wn-PbBZYrev@3cdA+f9aC4z!9B-RUowfrDQw]zZ1wErH3wn-PbBZYrev@3cdzddi\u003eayYFmBy!#mB7o5sfFmx:v@3d8wN=6RB-RUowc@",
            "ln": 0,
            "col": 1,
            "line": 1
          }
        ],
        "depth": 2,
        "facts": {
          "imp": [
            [
              "",
              "sudo"
            ],
            [
              "",
              "sudo"
            ],
            [
              "",
              "busted"
            ]
          ],
          "tgt": [
            "busted",
            "sudo"
          ],
          "metrics": {
            "ast": {
              "max_depth": 3,
              "call_count": 3,
              "node_count": 18
            },
            "file": {
              "size": 94,
              "entropy": 4.37
            },
            "text": {
              "lines": 4,
              "top_char": 115,
              "max_ws_run": 1,
              "digit_ratio": 0.01,
              "space_count": 7,
              "char_entropy": 4.37,
              "unique_chars": 27,
              "top_char_null": 0,
              "top_char_ratio": 0.11,
              "avg_line_length": 22.5,
              "max_line_length": 40,
              "last_line_length": 6,
              "whitespace_ratio": 0.12,
              "identifier_density": 3.25,
              "line_length_stddev": 15.14,
              "normalized_unique_identifiers": 3.5
            },
            "binary": {
              "peak_region_bytes": 94,
              "peak_region_entropy": 4.37
            },
            "comments": {
              "chars": 8,
              "count": 1,
              "lines": 1,
              "to_code_ratio": 0.33
            },
            "identifiers": {
              "count": 13,
              "unique": 7,
              "avg_length": 8,
              "max_length": 21,
              "min_length": 4,
              "avg_entropy": 2.59,
              "reuse_ratio": 0.54,
              "length_stddev": 5.48,
              "has_digit_ratio": 0.14,
              "high_entropy_count": 1,
              "high_entropy_ratio": 0.14,
              "all_lowercase_ratio": 0.71
            }
          }
        },
        "id": 99,
        "mol": "H(Os)",
        "path": "busted-ffi-2.0.rc12-1.src.rock!!v2.0.rc12-1.tar.gz!!busted-2.0.rc12-1/try",
        "pid": 1,
        "risk": 1,
        "sha": "9f159c6e090bf20c52210761903be2307704564e7012ddc37ae40d36e5d5a53c",
        "size": 94,
        "traits": [
          {
            "id": "micro-behaviors/os/privilege/elevation::sudo-command",
            "conf": 0.9,
            "crit": 3,
            "desc": "Shell command invokes sudo",
            "spans": [
              [
                10,
                5
              ]
            ]
          }
        ],
        "type": "shell"
      }
    ],
    "rev": "e86a6",
    "v": "8"
  }
}