{
  "ml": {
    "v": "7",
    "id": 5743,
    "lvl": -1,
    "conf": 0,
    "prob": 0.000011861324310302734,
    "type": "javascript",
    "version": "v18.18",
    "analyzed_at": "2026-09-24T06:14:33Z"
  },
  "path": "@angular-platform-browser-22.2.0.tgz",
  "raw": {
    "rev": "a041b",
    "files": [
      {
        "id": 6568,
        "mol": "K₂(AmLi₂)O(As₂)H₄(Cm₈Db₁₀OsU₃)Md₃(InPa₇)",
        "pid": 165,
        "rel": "fetched",
        "sha": "8c0bbdb1843e1b33b6bbe7655eea03629c1eaec287e7c84faeeacfdf3a79b1a7",
        "via": "https://registry.npmjs.org/@angular/platform-browser/-/platform-browser-22.2.0.tgz",
        "path": "pkg:npm/%40angular/platform-browser@22.2.0?checksum=sha1:661fd7624caea7467123257be0296446a1c12523%2Csha512:5cc50eca7f1601193d35d1463b7b9181d0b784fae9fb6c6c49835e4a46846788c8dcf736ddfdb67b8188f156b297f50e992847567fe2f8d59f4d68774846db4b",
        "refs": [
          {
            "to": "pkg:github/angular/angular",
            "off": 0,
            "kind": "repository"
          }
        ],
        "risk": 22,
        "size": 74430,
        "type": "npm",
        "depth": 2,
        "facts": {
          "metrics": {
            "file": {
              "size": 74430,
              "entropy": 8
            },
            "parse": {
              "error_count": 1
            },
            "binary": {
              "peak_region_bytes": 74430,
              "peak_region_entropy": 7.83
            },
            "consistency": {
              "self_dependency": 0,
              "unused_runtime_deps": 1
            }
          }
        },
        "ident": {
          "name": {
            "value": "@angular/platform-browser",
            "source": "npm.name",
            "verified": false
          },
          "urls": [
            {
              "url": "https://github.com/angular/angular.git",
              "kind": "repository",
              "source": "npm.repository.url"
            }
          ],
          "trust": "unsigned",
          "authors": [
            {
              "name": "angular",
              "role": "author",
              "source": "npm.author"
            }
          ],
          "version": {
            "value": "22.2.0",
            "source": "npm.version",
            "verified": false
          },
          "identifier": {
            "value": "@angular/platform-browser",
            "source": "npm.name",
            "verified": false
          }
        },
        "traits": [
          {
            "id": "micro-behaviors/ui/window/dom/tree::browser-insert-before",
            "conf": 0.8,
            "crit": 3,
            "desc": "Inserts DOM node before reference node",
            "from": [
              {
                "file": 12
              }
            ]
          },
          {
            "id": "micro-behaviors/communications/http/client/resource::href-attribute-variable-assignment",
            "conf": 0.92,
            "crit": 3,
            "desc": "Assigns variable to DOM href attribute",
            "from": [
              {
                "file": 12
              }
            ]
          },
          {
            "id": "micro-behaviors/communications/http/cookie-store::document-cookie-read",
            "atk": "T1539",
            "mbc": "C0002",
            "conf": 0.75,
            "crit": 3,
            "desc": "Accesses browser document.cookie property",
            "from": [
              {
                "file": 11
              }
            ]
          },
          {
            "id": "micro-behaviors/data/encode/base64::python-long-base64-literal",
            "conf": 0.86,
            "crit": 3,
            "desc": "Long base64 string literal"
          },
          {
            "id": "micro-behaviors/data/config/schema::uppercase-host-assignment-label",
            "conf": 0.6,
            "crit": 1,
            "desc": "Uppercase HOST assignment label",
            "from": [
              {
                "file": 12
              }
            ]
          },
          {
            "id": "micro-behaviors/ui/window/dom-access::browser-queryselectorall-call",
            "conf": 0.86,
            "crit": 3,
            "desc": "Queries multiple DOM elements",
            "from": [
              {
                "file": 12
              }
            ]
          },
          {
            "id": "metadata/file/format/structured::sourcemap",
            "conf": 1.0,
            "crit": 3,
            "desc": "JavaScript source map",
            "from": [
              {
                "file": 3
              }
            ]
          },
          {
            "id": "metadata/package/repository::has-repository-field",
            "conf": 0.9,
            "crit": 2,
            "desc": "package.json declares repository metadata"
          },
          {
            "id": "micro-behaviors/data/manipulation::untrusted-content-data-boundary-en",
            "conf": 0.97,
            "crit": 3,
            "desc": "Untrusted-data boundary in English",
            "from": [
              {
                "file": 20
              }
            ]
          },
          {
            "id": "micro-behaviors/ui/window/dom/create::browser-insert-mutate-method-reference",
            "conf": 0.85,
            "crit": 3,
            "desc": "References a DOM insertion or mutation method",
            "from": [
              {
                "file": 12
              }
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-2",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"and\"",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "metadata/import/npm/angular/animations/browser::angular/animations/browser",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports @angular/animations/browser",
            "from": [
              {
                "file": 14
              }
            ]
          },
          {
            "id": "micro-behaviors/data/string/split::js-split-call",
            "conf": 0.8,
            "crit": 3,
            "desc": "Calls JavaScript split()",
            "from": [
              {
                "file": 11
              }
            ]
          },
          {
            "id": "micro-behaviors/data/control-flow/analysis::js-conditional-matcher-call",
            "conf": 0.88,
            "crit": 3,
            "desc": "Calls a matcher in a conditional expression",
            "from": [
              {
                "file": 11
              }
            ]
          },
          {
            "id": "metadata/lang/source::js-ts-source-basename",
            "conf": 0.95,
            "crit": 2,
            "desc": "JavaScript or TypeScript source filename",
            "from": [
              {
                "file": 11
              }
            ]
          },
          {
            "id": "micro-behaviors/communications/http/cookie-store::cookie-helper-function-definitions",
            "atk": "T1539",
            "mbc": "C0002",
            "conf": 0.8,
            "crit": 3,
            "desc": "Defines set get and clear cookie helpers",
            "from": [
              {
                "off": 2497,
                "file": 6579,
                "line": 67
              }
            ],
            "uses": [
              73
            ]
          },
          {
            "id": "well-known/app/browser/google-web::google-llc-copyright",
            "conf": 0.95,
            "crit": 3,
            "desc": "Google LLC copyright marker"
          },
          {
            "id": "micro-behaviors/data/control-flow/module-exec::js-synchronous-iife-start",
            "conf": 0.86,
            "crit": 3,
            "desc": "Starts a synchronous function expression",
            "from": [
              {
                "file": 15
              }
            ]
          },
          {
            "id": "metadata/file/format/structured::sourcemap-sources-content",
            "conf": 0.9,
            "crit": 3,
            "desc": "Source map sourcesContent array",
            "from": [
              {
                "file": 3
              }
            ]
          },
          {
            "id": "micro-behaviors/communications/http/request/reference::js-fetch-reference",
            "atk": "T1071.001",
            "mbc": "C0002",
            "conf": 0.82,
            "crit": 3,
            "desc": "Passes fetch as a call argument",
            "from": [
              {
                "file": 11
              }
            ]
          },
          {
            "id": "metadata/file/format/structured::sourcemap-typescript-sources",
            "conf": 0.9,
            "crit": 3,
            "desc": "Source map of TypeScript sources",
            "from": [
              {
                "file": 3
              }
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-4",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"have\""
          },
          {
            "id": "objectives/anti-static/obfuscation/eval/browser::html-createelement-object",
            "atk": "T1027,T1059.007",
            "conf": 0.9,
            "crit": 3,
            "desc": "Creates a scripted DOM object",
            "from": [
              {
                "file": 12
              }
            ]
          },
          {
            "id": "micro-behaviors/data/string/conversion::tostring-call",
            "conf": 0.94,
            "crit": 3,
            "desc": "Calls JavaScript toString conversion method",
            "from": [
              {
                "file": 15
              }
            ]
          },
          {
            "id": "metadata/package/testing/corpus::xss-category-label",
            "conf": 0.9,
            "crit": 3,
            "desc": "XSS attack category label",
            "from": [
              {
                "file": 20
              }
            ]
          },
          {
            "id": "metadata/package/versioning/scheme::npm-has-version",
            "conf": 1.0,
            "crit": 2,
            "desc": "package.json defines a package version"
          },
          {
            "id": "objectives/anti-static/obfuscation/code-metrics/identifiers::identifier-obfuscation-cond-0--inline-23810",
            "atk": "T1027",
            "mbc": "B0032",
            "conf": 0.9,
            "crit": 3,
            "desc": "Average identifier length \u003e= 22 chars"
          },
          {
            "id": "metadata/package/entrypoint::has-multiple-entries",
            "conf": 0.85,
            "crit": 3,
            "desc": "Package has multiple entry points",
            "from": [
              {
                "off": 1310,
                "file": 6570,
                "line": 52
              }
            ],
            "uses": [
              32,
              67
            ]
          },
          {
            "id": "metadata/package/dependencies/manifest/presence::has-runtime-deps",
            "conf": 0.85,
            "crit": 3,
            "desc": "Package declares a runtime dependency",
            "from": [
              {
                "file": 2
              }
            ]
          },
          {
            "id": "well-known/lib/web/npm-frameworks::angular-ivy-declare-bundle",
            "conf": 0.96,
            "crit": 3,
            "desc": "Angular Ivy declaration bundle",
            "from": [
              {
                "file": 11
              }
            ]
          },
          {
            "id": "metadata/import/npm/relative/1/platform-browser/js::relative/1/platform-browser/js",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports ./platform-browser.js",
            "from": [
              {
                "file": 19
              }
            ]
          },
          {
            "id": "micro-behaviors/communications/http/url/domain::js-remote-host-url",
            "conf": 0.75,
            "crit": 3,
            "desc": "Contains a hardcoded remote HTTP(S) URL",
            "from": [
              {
                "file": 12
              }
            ]
          },
          {
            "id": "metadata/package/entrypoint::has-exports-field",
            "conf": 0.85,
            "crit": 2,
            "desc": "package.json declares an exports map"
          },
          {
            "id": "metadata/package/entrypoint::has-side-effects",
            "conf": 0.85,
            "crit": 3,
            "desc": "Package declares sideEffects metadata",
            "from": [
              {
                "file": 2
              }
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-3",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"that\""
          },
          {
            "id": "micro-behaviors/data/string/replace::chained-replace-calls",
            "conf": 0.9,
            "crit": 3,
            "desc": "Chains multiple JavaScript string replacements",
            "from": [
              {
                "file": 15
              }
            ]
          },
          {
            "id": "micro-behaviors/communications/http/url/forge::public-code-forge-url",
            "conf": 0.9,
            "crit": 3,
            "desc": "References a public code-forge URL",
            "from": [
              {
                "file": 10
              }
            ]
          },
          {
            "id": "micro-behaviors/communications/url/encoded::encoded-url-mdn-doc-context",
            "atk": "T1027",
            "mbc": "B0032",
            "conf": 0.95,
            "crit": 3,
            "desc": "Encoded URL references MDN documentation",
            "from": [
              {
                "file": 20
              }
            ]
          },
          {
            "id": "micro-behaviors/ui/window/dom/tree::browser-node-remove",
            "conf": 0.8,
            "crit": 3,
            "desc": "Removes a child node from the DOM",
            "from": [
              {
                "file": 12
              }
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-5",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"for\"",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "metadata/file/extension/identity::declaration-file-extension",
            "conf": 1.0,
            "crit": 2,
            "desc": "File uses a source declaration extension",
            "from": [
              {
                "file": 17
              }
            ]
          },
          {
            "id": "metadata/file/comment::source-comment-bytes-over-300",
            "conf": 0.92,
            "crit": 2,
            "desc": "Source has over 300 comment bytes",
            "from": [
              {
                "file": 17
              }
            ]
          },
          {
            "id": "metadata/import/python/relative/2/errors::relative/2/errors",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports ../errors"
          },
          {
            "id": "metadata/import/npm/relative/1/_browser-chunk/mjs::relative/1/_browser-chunk/mjs",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports ./_browser-chunk.mjs",
            "from": [
              {
                "file": 14
              }
            ]
          },
          {
            "id": "metadata/file/comment::source-at-most-two-comments",
            "conf": 0.88,
            "crit": 2,
            "desc": "Source has at most two comments"
          },
          {
            "id": "metadata/import/npm/angular/core/testing::angular/core/testing",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports @angular/core/testing",
            "from": [
              {
                "file": 16
              }
            ]
          },
          {
            "id": "well-known/lib/ai/coding-assistant::auto-approval-risk-warning",
            "conf": 0.9,
            "crit": 3,
            "desc": "Auto-approval security risk warning",
            "from": [
              {
                "file": 20
              }
            ]
          },
          {
            "id": "metadata/package/repository::repo-url-git-host",
            "conf": 0.9,
            "crit": 3,
            "desc": "Repository identifies major Git host"
          },
          {
            "id": "metadata/lang/scripted::dts-declaration-file",
            "conf": 0.99,
            "crit": 2,
            "desc": "TypeScript declaration file",
            "from": [
              {
                "file": 17
              }
            ]
          },
          {
            "id": "metadata/import/npm/angular/core::angular/core",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports @angular/core",
            "from": [
              {
                "file": 11
              }
            ]
          },
          {
            "id": "micro-behaviors/os/module/require::dynamic-external-import-promise-chain",
            "conf": 0.9,
            "crit": 3,
            "desc": "Chains on a lazily imported package",
            "from": [
              {
                "file": 13
              }
            ]
          },
          {
            "id": "metadata/package/runtime::vscode-languages-contribution-absent-evidence",
            "conf": 0.95,
            "crit": 1,
            "desc": "Manifest lacks languages contribution field"
          },
          {
            "id": "micro-behaviors/communications/http/url/build::network-destination-function-binding",
            "mbc": "C0002",
            "conf": 0.94,
            "crit": 3,
            "desc": "Network destination assigned from call",
            "from": [
              {
                "file": 12
              }
            ]
          },
          {
            "id": "micro-behaviors/data/string/conversion::tostring-token",
            "conf": 1.0,
            "crit": 3,
            "desc": "References the toString conversion method",
            "from": [
              {
                "file": 15
              }
            ]
          },
          {
            "id": "metadata/package/testing/presence/harness::test-or-declaration-file",
            "conf": 0.85,
            "crit": 1,
            "desc": "File is a test or type-declaration source file",
            "from": [
              {
                "file": 6585
              },
              {
                "file": 6586
              },
              {
                "file": 6587
              },
              {
                "file": 6588
              },
              {
                "file": 6589
              }
            ],
            "uses": [
              40
            ]
          },
          {
            "id": "micro-behaviors/data/source/property/computed::js-computed-call-cluster",
            "conf": 0.86,
            "crit": 3,
            "desc": "Dense computed-property call cluster (3+)",
            "from": [
              {
                "file": 17
              }
            ]
          },
          {
            "id": "micro-behaviors/ui/window/dom/create::browser-create-method-reference",
            "conf": 0.85,
            "crit": 3,
            "desc": "References a DOM element creation method",
            "from": [
              {
                "file": 11
              }
            ]
          },
          {
            "id": "micro-behaviors/data/source/syntax/array::temporary-array-element-read",
            "conf": 0.8,
            "crit": 2,
            "desc": "Reads an array element into a variable",
            "from": [
              {
                "file": 11
              }
            ]
          },
          {
            "id": "metadata/import/npm/angular/common::angular/common",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports @angular/common",
            "from": [
              {
                "file": 11
              }
            ]
          },
          {
            "id": "micro-behaviors/data/source/syntax/assignment::nested-call-assignment",
            "conf": 0.85,
            "crit": 3,
            "desc": "Nested function call assignment target",
            "from": [
              {
                "file": 15
              }
            ]
          },
          {
            "id": "metadata/package/name/convention::npm-has-name",
            "conf": 1.0,
            "crit": 2,
            "desc": "npm manifest declares a package name"
          },
          {
            "id": "metadata/package/runtime::vscode-grammars-contribution-absent-evidence",
            "conf": 0.95,
            "crit": 1,
            "desc": "Manifest lacks grammars contribution field"
          },
          {
            "id": "metadata/package/empty::npm-no-keywords",
            "conf": 0.5,
            "crit": 2,
            "desc": "package.json has no keywords"
          },
          {
            "id": "metadata/lang/javascript-features::template-literal",
            "conf": 0.9,
            "crit": 2,
            "desc": "ES6 template literal syntax",
            "from": [
              {
                "file": 12
              }
            ]
          },
          {
            "id": "micro-behaviors/ui/window/dom-access::browser-text-content-assignment",
            "conf": 0.9,
            "crit": 3,
            "desc": "Assigns text on a DOM traversal node",
            "from": [
              {
                "file": 12
              }
            ]
          },
          {
            "id": "metadata/import/npm/angular/common/testing::angular/common/testing",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports @angular/common/testing",
            "from": [
              {
                "file": 16
              }
            ]
          },
          {
            "id": "metadata/package/files/included::package-json-basename",
            "conf": 0.95,
            "crit": 3,
            "desc": "Filename is package.json",
            "from": [
              {
                "file": 2
              }
            ]
          },
          {
            "id": "metadata/package/entrypoint::pkg-module-field",
            "conf": 0.6,
            "crit": 2,
            "desc": "\"module\": field in package.json",
            "from": [
              {
                "file": 2
              }
            ]
          },
          {
            "id": "micro-behaviors/data/source/syntax/array::shift-string-literal",
            "conf": 0.6,
            "crit": 3,
            "desc": "String literal names the shift method",
            "from": [
              {
                "file": 11
              }
            ]
          },
          {
            "id": "metadata/import/npm/angular/common/http::angular/common/http",
            "conf": 0.95,
            "crit": 3,
            "desc": "imports @angular/common/http",
            "from": [
              {
                "file": 15
              }
            ]
          },
          {
            "id": "metadata/package/name/vocabulary::scoped-known-org-2",
            "conf": 1.0,
            "crit": 3,
            "desc": "Package from org scope (eslint/angular/vue)"
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-6",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"with\"",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "micro-behaviors/os/module/require::esm-side-effect-local-import",
            "conf": 0.9,
            "crit": 3,
            "desc": "ESM side-effect-only local import",
            "from": [
              {
                "file": 16
              }
            ]
          },
          {
            "id": "micro-behaviors/communications/http/cookie-store::cookie-helper-get-function",
            "atk": "T1539",
            "mbc": "C0002",
            "conf": 1.0,
            "crit": 3,
            "desc": "Defines getCookie helper",
            "from": [
              {
                "file": 11
              }
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-7",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"this\"",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "micro-behaviors/communications/http/client/resource::create-link-resource-element",
            "conf": 0.92,
            "crit": 3,
            "desc": "Creates a link resource element",
            "from": [
              {
                "file": 12
              }
            ]
          },
          {
            "id": "metadata/file/extension/token-shape::bare-alphanumeric-script-basename",
            "conf": 0.9,
            "crit": 2,
            "desc": "Script filename is a bare alphanumeric token",
            "from": [
              {
                "file": 11
              }
            ]
          },
          {
            "id": "micro-behaviors/data/encode/charcode::charcode-at",
            "conf": 0.7,
            "crit": 3,
            "desc": "charCodeAt() method call",
            "from": [
              {
                "file": 12
              }
            ]
          },
          {
            "id": "metadata/package/runtime::vscode-localizations-contribution-absent-evidence",
            "conf": 0.95,
            "crit": 1,
            "desc": "Manifest lacks localization contribution field"
          },
          {
            "id": "micro-behaviors/data/serialize/envelope::result-assignment-key",
            "conf": 0.4,
            "crit": 1,
            "desc": "Result field or assignment key",
            "from": [
              {
                "file": 11
              }
            ]
          },
          {
            "id": "micro-behaviors/communications/http/url/path::loopback-http-url-reference",
            "conf": 0.9,
            "crit": 3,
            "desc": "References a loopback HTTP URL",
            "from": [
              {
                "file": 12
              }
            ]
          },
          {
            "id": "metadata/build/bundler/asset::has-sourcemap",
            "conf": 0.9,
            "crit": 2,
            "desc": "Code has source map reference",
            "from": [
              {
                "file": 11
              }
            ]
          },
          {
            "id": "micro-behaviors/ui/window/dom-access::dom-text-content-read",
            "conf": 0.82,
            "crit": 3,
            "desc": "Reads DOM text content",
            "from": [
              {
                "file": 12
              }
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-1",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"the\"",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "metadata/import/npm/relative/1/_dom_renderer-chunk/mjs::relative/1/_dom_renderer-chunk/mjs",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports ./_dom_renderer-chunk.mjs",
            "from": [
              {
                "file": 11
              }
            ]
          },
          {
            "id": "metadata/package/repository::has-repository-url",
            "conf": 0.85,
            "crit": 2,
            "desc": "package.json declares a repository URL"
          },
          {
            "id": "micro-behaviors/ui/window/dom/create::browser-create-element",
            "conf": 0.96,
            "crit": 3,
            "desc": "Creates DOM element",
            "from": [
              {
                "file": 12
              }
            ]
          },
          {
            "id": "micro-behaviors/ui/window/dom/tree::browser-append-child",
            "conf": 0.8,
            "crit": 3,
            "desc": "Appends child DOM node",
            "from": [
              {
                "file": 12
              }
            ]
          },
          {
            "id": "metadata/package/dependencies/manifest/reconciliation::npm-phantom-runtime-dependency",
            "conf": 0.82,
            "crit": 3,
            "desc": "Runtime dependency not reconciled to imports"
          }
        ]
      }
    ]
  }
}