{
  "llm": {
    "conf": 0.7244805,
    "grade": "benign",
    "model": "Qwen/Qwen3.6-27B",
    "outcome": "benign",
    "interpretation": "Legitimate Go auth plugin client code"
  },
  "ml": {
    "v": "7",
    "eng": "2.4.0",
    "lvl": -1,
    "conf": 0,
    "mods": [
      {
        "cls": 0,
        "raw": 0.6064007,
        "rte": "az",
        "prob": 0.6064007
      },
      {
        "cls": 0,
        "raw": 0.033927888,
        "rte": "az/zip",
        "prob": 0.033927888
      }
    ],
    "prob": 0.6064007,
    "files": [
      {
        "id": 0,
        "lvl": -1,
        "conf": 0,
        "prob": 0.606400728225708,
        "type": "zip"
      },
      {
        "id": 1,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000007738669410173316,
        "type": "go"
      },
      {
        "id": 2,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000010361273780290503,
        "type": "go"
      },
      {
        "id": 3,
        "lvl": -1,
        "conf": 0,
        "prob": 0.00002014636993408203,
        "type": "go"
      },
      {
        "id": 4,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000012010335922241211,
        "type": "go"
      },
      {
        "id": 5,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000007619460575369885,
        "type": "go"
      },
      {
        "id": 6,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000006665786258963635,
        "type": "go.mod"
      },
      {
        "id": 7,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000007490316875191638,
        "type": "go"
      },
      {
        "id": 8,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000008185704245988745,
        "type": "go"
      },
      {
        "id": 9,
        "lvl": -1,
        "conf": 0,
        "prob": 0.00000906984041648684,
        "type": "go"
      },
      {
        "id": 10,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000007341305263253162,
        "type": "go"
      },
      {
        "id": 11,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000008841355338518042,
        "type": "registry"
      }
    ],
    "version": "v18.18",
    "analyzed_at": "2026-07-26T12:19:47Z"
  },
  "path": "github.com-platform-engineering-labs-formae-pkg-auth-v0.2.2-0.20260720143758-7c563cebd76d.zip",
  "raw": {
    "files": [
      {
        "id": 0,
        "ctx": [
          {
            "b": "p!H([6Awys2MK\u00268000000000000000003Bc003UCBzb/ae[n*pfk$-oBy]Diz7Pspxk8l{wPzH5xdW}dvSKhmz/PY6wIn1rxd)XoBz9{.fFkakga+gjgb7EwfGg:vf/gWBh8)fDv(le2v}xaWh-th1vrDW9e[Y9Iq]9wajpBzzpEj7jR:3F(eWd((d+X+HMi6t\u003e3\u003chwd7[4Up/{10:eSa0FWaA@]4ykt$po@X3IU$hH9@",
            "n": [
              {
                "c": 2,
                "d": "Archive container path",
                "i": "metadata/package/files/included::archive-container-path",
                "o": 0,
                "z": 93,
                "cf": 0.949999988079071
              }
            ],
            "ln": 0
          }
        ],
        "mol": "H₂(CmPo₂)",
        "sha": "93fdf618fc65f7a9f2c37f9933d9114e2bac36738f858c60d05a3a9bad4520d5",
        "path": "github.com-platform-engineering-labs-formae-pkg-auth-v0.2.2-0.20260720143758-7c563cebd76d.zip",
        "risk": 4,
        "size": 9242,
        "type": "zip",
        "facts": {
          "metrics": {
            "file": {
              "size": 9242.0,
              "entropy": 7.6,
              "size_bytes": 9242.0
            },
            "binary": {
              "overall_entropy": 7.6,
              "peak_region_bytes": 6144.0,
              "peak_region_entropy": 7.8
            },
            "archive": {
              "file_count": 10.0,
              "member_count": 10.0,
              "script_count": 0.0,
              "zip_bomb_ratio": 3.11,
              "directory_count": 0.0,
              "executable_count": 0.0,
              "extra_field_size": 0.0,
              "noise_file_count": 0.0,
              "total_compressed": 6284.0,
              "compression.ratio": 0.42,
              "hidden_file_count": 0.0,
              "total_uncompressed": 15107.0,
              "crc_collision_count": 0.0,
              "entry_comment_count": 0.0,
              "max_filename_length": 107.0,
              "rtlo_filename_count": 0.0,
              "format.regular_count": 10.0,
              "nested_archive_count": 0.0,
              "path_traversal_count": 0.0,
              "symlink_escape_count": 0.0,
              "security.setgid_count": 0.0,
              "security.setuid_count": 0.0,
              "security.sticky_count": 0.0,
              "double_extension_count": 0.0,
              "duplicate_member_count": 0.0,
              "security.symlink_count": 0.0,
              "unicode_filename_count": 0.0,
              "homoglyph_filename_count": 0.0,
              "security.encrypted_count": 0.0,
              "misplaced_executable_count": 0.0,
              "timing.mtime_dominant_count": 10.0,
              "timing.sentinel_mtime_count": 10.0,
              "security.world_writable_count": 0.0,
              "timing.mtime_dominant_fraction": 1.0,
              "compression.method_counts.deflate": 10.0
            }
          }
        },
        "traits": [
          {
            "id": "metadata/package/testing/presence/harness::tests-path-filename",
            "conf": 0.8500000238418579,
            "crit": 1,
            "desc": "File path or name indicates test code",
            "from": [
              {
                "file": 2
              }
            ],
            "spans": [
              [
                0,
                14
              ]
            ]
          },
          {
            "id": "micro-behaviors/process/create/direct::exec-command",
            "atk": "T1059.003",
            "conf": 0.949999988079071,
            "crit": 3,
            "desc": "Creates a child process with Go exec.Command",
            "from": [
              {
                "file": 3
              }
            ]
          },
          {
            "id": "metadata/file/invisible-unicode::test-file-context",
            "atk": "T1027",
            "conf": 0.8500000238418579,
            "crit": 1,
            "desc": "File is test, generated, or declaration code",
            "from": [
              {
                "file": 2
              },
              {
                "file": 4
              }
            ],
            "spans": [
              [
                0,
                14
              ]
            ]
          },
          {
            "id": "micro-behaviors/process/create/shell/lang::stdin-pipe",
            "crit": 3,
            "desc": "StdinPipe reference",
            "from": [
              {
                "file": 3
              }
            ]
          },
          {
            "id": "metadata/package/testing/harness/unit::go-t-fatal-call",
            "conf": 0.699999988079071,
            "crit": 1,
            "desc": "Go test stops with t.Fatal",
            "from": [
              {
                "file": 2
              }
            ]
          },
          {
            "id": "micro-behaviors/process/create/shell/lang::stdout-pipe",
            "conf": 0.4000000059604645,
            "crit": 3,
            "desc": "StdoutPipe reference",
            "from": [
              {
                "file": 3
              }
            ]
          },
          {
            "id": "micro-behaviors/communications/socket/rpc::rpc-import",
            "mbc": "C0040",
            "conf": 0.8999999761581421,
            "crit": 3,
            "desc": "Go net/rpc package import",
            "from": [
              {
                "file": 2
              }
            ]
          },
          {
            "id": "micro-behaviors/process/terminate/kill::go-process-kill-method",
            "conf": 0.8999999761581421,
            "crit": 3,
            "desc": "Go process kill method",
            "from": [
              {
                "file": 3
              }
            ]
          },
          {
            "id": "metadata/package/testing/harness/unit::go-func-test",
            "conf": 0.800000011920929,
            "crit": 2,
            "desc": "Go test function name",
            "from": [
              {
                "file": 2
              }
            ],
            "spans": [
              [
                557,
                19
              ],
              [
                1581,
                24
              ],
              [
                1970,
                16
              ]
            ]
          },
          {
            "id": "metadata/package/testing/harness/unit::go-testing-t",
            "conf": 0.699999988079071,
            "crit": 2,
            "desc": "Go test uses a testing.T parameter",
            "from": [
              {
                "file": 2
              }
            ]
          },
          {
            "id": "micro-behaviors/process/create/shell/lang::stdio-redirect",
            "conf": 0.6000000238418579,
            "crit": 3,
            "desc": "Configures child-process standard I/O",
            "from": [
              {
                "file": 3
              }
            ]
          }
        ]
      },
      {
        "id": 1,
        "sha": "ab726cc15ff142c3cbe0b2b5749806b2d04597be21521c27a62737368d8bfd26",
        "path": "github.com-platform-engineering-labs-formae-pkg-auth-v0.2.2-0.20260720143758-7c563cebd76d.zip!!github.com/platform-engineering-labs/formae/pkg/auth@v0.2.2-0.20260720143758-7c563cebd76d/auth.go",
        "size": 1306,
        "type": "go",
        "depth": 1
      },
      {
        "ctx": [
          {
            "b": "fe1D+Sur@IgbQgJy*?A$z/PXqmq=:LzE)y1x(mMaoKRyKaw3DXe^:l+3nj4Pq=2\u003e:eLG\u003e*wO#N2eLfF:zGGP8x\u003eqrCavYp6eIO\u003ejeKr6Ng71wcvpK7YxjSh]B-.p73tBu@z/P}xc\u003c*n8wO#0@wnb{]fktMDzxYz]b57%t3jd[]wPPOCAap702{KF5B98blxcEV?b6mKowG?Eg3jnBtazb4$wL^h=xk8lax(+z9aARgoBrCajBZ/e#azCXiy?mD{zGGPgxcqqfwGToYBzaG!B.tAaazC.nwPzx\u003ev}vn1BA}?pazb4$wL^h=xk8laB98CBv@@\u0026u3jgA:x((ZJyY",
            "n": [
              {
                "c": 3,
                "d": "Go net/rpc package import",
                "i": "micro-behaviors/communications/socket/rpc::rpc-import",
                "o": 134,
                "z": 7,
                "cf": 0.8999999761581421
              },
              {
                "c": 2,
                "d": "Benign source context for hardcoded external IPv4 literals",
                "i": "micro-behaviors/communications/ip/literal::external-ipv4-benign-source-context",
                "o": 0,
                "z": 12,
                "cf": 0.8999999761581421
              },
              {
                "c": 1,
                "d": "encoding/json package import",
                "i": "micro-behaviors/data/serialize/json::encoding-json-import",
                "o": 112,
                "z": 13,
                "cf": 0.5
              }
            ],
            "ln": 0,
            "col": 1,
            "line": 1
          },
          {
            "b": "q!Z8/y?j-jvqGT*vruj4zAn[IxK$W?azbLjar\u003c]tl2ZJ\u0026oj-w)azts{wmY=*32s9$B09IbaAz4ke\u003exLZwmY!5toWf3l2ZJ\u0026oj-w)t)Z)Lw/$]3zyxpiD2\u003ezSj%hK4cmf\u003cJwQeu3fKk!:jS\u003e}\u0026wN/:(Bs?otC{jwT3jd2VwPI/yr://Uwfs2TBAhIn3jd2VwPI/ylT:FrwLlPWauZ?\u003eyH}=LB7F\u003c4wPPItwQbEb2(",
            "n": [
              {
                "c": 1,
                "d": "ML-KEM or Kyber encapsulation evidence",
                "i": "micro-behaviors/crypto/asymmetric/kem::kyber-encapsulation-terms",
                "o": 735,
                "z": 6,
                "cf": 0.9200000166893005
              },
              {
                "c": 1,
                "d": "Credential field keyword",
                "i": "micro-behaviors/data/parse/vocabulary::credential-field",
                "o": 652,
                "z": 7,
                "cf": 0.8399999737739563
              }
            ],
            "ln": 620,
            "col": 5,
            "line": 29
          },
          {
            "b": "wPyWWvpS}\u0026efF2mx()]Ny\u0026sxaAYLs:wPz%9A-Wo}By/Gv3jg-:BAIRw3vJl*w{503axh][Bw(:\u003eC4CXWzE=aJx\u003eqg7uRbcHBsqkNdS/lyBzkS9e(TnxDKp6#y\u0026%x8zxH#6aspYeyH{sUB.tAaDWMkcv@b\u003c\u003czGFl:zF?0FB7GxnwPydRzF*NTjS[YTAaIyPzF*\u003cK3jm7)fcBhnvrcDjB7GxnwPw]czxJy%v@2Z$z/]@d3jgu-ax8\u0026(C4A7vy\u0026%x8zy=]KwPz%9AZK+.zyC]12})}OlVM:DBy=OnAap22y?WD#Bp5s:y?WD#BrARcaAzBhe(2#4lU{D",
            "n": [
              {
                "c": 2,
                "d": "Go test t.Fatal method",
                "i": "metadata/package/testing/harness/unit::go-t-fatal",
                "o": 1642,
                "z": 10,
                "cf": 0.75
              },
              {
                "c": 2,
                "d": "Go testing package",
                "i": "metadata/package/testing/harness/unit::go-test",
                "o": 1610,
                "z": 24,
                "cf": 0.949999988079071
              },
              {
                "c": 1,
                "d": "Go goroutine launch call",
                "i": "micro-behaviors/process/thread/create::go-goroutine-launch-call",
                "o": 1752,
                "z": 9,
                "cf": 0.75
              }
            ],
            "ln": 1562,
            "col": 38,
            "line": 57
          },
          {
            "b": "c37mYaAz4mA4TO1A=k$E3jha/3jgAUar+YuB.tAae[]iqBvfFMy?mc1DKp5=Bs{3\u003eByw#lb4V1rwN/*[wfsDYx(\u003eFtzY\u0026I2ay!?@y?mc1z/cXpy\u0026%x8zxZIp34ic/329#]B98CpzF7wpy\u0026%x8zz2%vv}xv$wN[euxdj@DjS[//A+PA7c$u\u003e4diJ%A2)\u003eX",
            "n": [
              {
                "c": 1,
                "d": "Go test stops with t.Fatal",
                "i": "metadata/package/testing/harness/unit::go-t-fatal-call",
                "o": 2185,
                "z": 7,
                "cf": 0.699999988079071
              }
            ],
            "ln": 2137,
            "col": 34,
            "line": 80
          },
          {
            "b": "w[+)2c37QWxk.(mc37mYay/1@efF[FB.tAae]\u003eJkwODs0wj6%wdgcxf3vJl*w{503axh][Bw(:\u003eC4CXWzE=aJx\u003eqg7uSHPKx\u003egT]wHITydS/lyBzkS9e(TnxDKp6#y\u0026%x8zxH#6aspYeyH{sUB.tAaDWMkcv@b\u003c\u003czGFl:zF?0FB7GxnwPydRzF*NTjS[YTAaIyPzF*\u003cK3jm8LzY?$\u0026A=#1x",
            "n": [
              {
                "c": 2,
                "d": "Go test function name",
                "i": "metadata/package/testing/harness/unit::go-func-test",
                "o": 2357,
                "z": 28,
                "cf": 0.800000011920929
              }
            ],
            "ln": 2309,
            "col": 25,
            "line": 88
          },
          {
            "b": "C42i3wftr1x=}h5C{+c=xk.(mc2\u003eaWaAz4mA4TO1A=k$E3jd2!3jhbf3vJl*w{503axh][Bw(:\u003eC4CXWzE=aJx\u003eqg7uQ[WHl3mo.nm=juwPxhvas.FAB98blxd^djaBsC4AboVfx(k4OjS(7-vqxBJy\u0026%x8zHl^s31E^=wO#PSz/fCzaAIamC4CXYz/fCniZ1Q8x(ESJz/fCvdgcy*xkX[\u003ewPz%9c\u0026",
            "n": [
              {
                "c": 2,
                "d": "Go test function name",
                "i": "metadata/package/testing/harness/unit::go-func-test",
                "o": 3573,
                "z": 33,
                "cf": 0.800000011920929
              }
            ],
            "ln": 3525,
            "col": 32,
            "line": 132
          }
        ],
        "depth": 1,
        "facts": {
          "imp": [
            [
              "",
              "len"
            ],
            [
              "",
              "io.Pipe"
            ],
            [
              "",
              "io.Pipe"
            ],
            [
              "",
              "pipeConn"
            ],
            [
              "",
              "Serve"
            ],
            [
              "",
              "rpc.NewClient"
            ],
            [
              "",
              "client.Close"
            ],
            [
              "",
              "json.RawMessage"
            ],
            [
              "",
              "client.Call"
            ],
            [
              "",
              "t.Fatalf"
            ],
            [
              "",
              "t.Fatalf"
            ],
            [
              "",
              "t.Fatal"
            ],
            [
              "",
              "string"
            ],
            [
              "",
              "string"
            ],
            [
              "",
              "t.Fatalf"
            ],
            [
              "",
              "pipeConn"
            ],
            [
              "",
              "Serve"
            ],
            [
              "",
              "rpc.NewClient"
            ],
            [
              "",
              "client.Close"
            ],
            [
              "",
              "t.Run"
            ],
            [
              "",
              "client.Call"
            ],
            [
              "",
              "t.Fatalf"
            ],
            [
              "",
              "t.Fatal"
            ],
            [
              "",
              "t.Fatalf"
            ],
            [
              "",
              "t.Fatalf"
            ],
            [
              "",
              "t.Run"
            ],
            [
              "",
              "client.Call"
            ],
            [
              "",
              "t.Fatalf"
            ],
            [
              "",
              "t.Fatal"
            ],
            [
              "",
              "t.Fatalf"
            ],
            [
              "",
              "pipeConn"
            ],
            [
              "",
              "Serve"
            ],
            [
              "",
              "rpc.NewClient"
            ],
            [
              "",
              "client.Close"
            ],
            [
              "",
              "client.Call"
            ],
            [
              "",
              "t.Fatalf"
            ],
            [
              "",
              "len"
            ],
            [
              "",
              "t.Fatalf"
            ],
            [
              "",
              "encoding/json"
            ],
            [
              "",
              "io"
            ],
            [
              "",
              "net/rpc"
            ],
            [
              "",
              "testing"
            ],
            [
              "",
              "time"
            ]
          ],
          "mbr": [
            "client.Call",
            "client.Close",
            "f.initCalled",
            "f.receivedCfg",
            "io.Pipe",
            "json.RawMessage",
            "plugin.initCalled",
            "plugin.receivedCfg",
            "req.Config",
            "req.Headers",
            "resp.CacheKey",
            "resp.CacheTTL",
            "resp.Error",
            "resp.Headers",
            "resp.Valid",
            "rpc.NewClient",
            "t.Fatal",
            "t.Fatalf",
            "t.Run",
            "time.Second"
          ],
          "tgt": [
            "Serve",
            "client.Call",
            "client.Close",
            "io.Pipe",
            "json.RawMessage",
            "len",
            "pipeConn",
            "rpc.NewClient",
            "string",
            "t.Fatal",
            "t.Fatalf",
            "t.Run"
          ],
          "metrics": {
            "ast": {
              "op.eq": 1.0,
              "op.gt": 1.0,
              "op.ne": 11.0,
              "op.lor": 1.0,
              "op.mul": 2.0,
              "op.band": 13.0,
              "op.land": 1.0,
              "op.lnot": 2.0,
              "max_depth": 26.0,
              "call_count": 38.0,
              "node_count": 1376.0,
              "member_count": 20.0,
              "op_density.eq": 0.0,
              "op_density.gt": 0.0,
              "op_density.ne": 0.01,
              "op_density.lor": 0.0,
              "op_density.mul": 0.0,
              "op_density.band": 0.01,
              "op_density.land": 0.0,
              "op_density.lnot": 0.0,
              "identifier_count": 63.0,
              "member_depth_max": 2.0,
              "string_literal_count": 40.0,
              "array_literal_max_length": 2.0
            },
            "file": {
              "size": 4133.0,
              "entropy": 5.15,
              "size_bytes": 4133.0
            },
            "text": {
              "tab_count": 156.0,
              "digit_ratio": 0.01,
              "space_count": 344.0,
              "total_lines": 156.0,
              "char_entropy": 5.15,
              "unique_chars": 80.0,
              "string_density": 0.26,
              "avg_line_length": 25.49,
              "high_byte_ratio": 0.0,
              "max_line_length": 98.0,
              "non_ascii_ratio": 0.0,
              "empty_line_ratio": 0.16,
              "last_line_length": 1.0,
              "whitespace_ratio": 0.16,
              "most_common_ratio": 0.11,
              "identifier_density": 1.69,
              "line_length_stddev": 24.27,
              "normalized_string_count": 3.2,
              "most_common_char_is_null": 0.0,
              "max_inline_whitespace_run": 4.0,
              "most_common_char_codepoint": 101.0,
              "suspicious_identifier_ratio": 0.06,
              "normalized_unique_identifiers": 8.65
            },
            "calls": {
              "count": 38.0
            },
            "binary": {
              "overall_entropy": 5.15,
              "peak_region_bytes": 4096.0,
              "peak_region_entropy": 5.15
            },
            "source": {
              "class_count": 1.0,
              "function_count": 7.0
            },
            "imports": {
              "count": 5.0,
              "stdlib_count": 5.0,
              "stdlib_ratio": 1.0,
              "unique_modules": 5.0
            },
            "members": {
              "count": 20.0
            },
            "strings": {
              "total": 40.0,
              "avg_length": 17.63,
              "max_length": 51.0,
              "avg_entropy": 3.29,
              "empty_count": 1.0,
              "total_bytes": 705.0,
              "entropy_stddev": 0.61
            },
            "comments": {
              "chars": 472.0,
              "lines": 10.0,
              "total": 11.0,
              "to_code_ratio": 0.07,
              "empty_comments": 1.0
            },
            "functions": {
              "count": 8.0,
              "avg_params": 1.29,
              "max_params": 2.0,
              "length_stddev": 13.32,
              "avg_name_length": 16.86,
              "no_params_count": 1.0,
              "avg_length_lines": 18.14,
              "max_length_lines": 44.0,
              "min_length_lines": 5.0,
              "high_entropy_names": 3.0,
              "single_char_params": 3.0,
              "avg_param_name_length": 2.67,
              "density_per_100_lines": 4.49,
              "code_in_functions_ratio": 0.81
            },
            "identifiers": {
              "count": 63.0,
              "total": 264.0,
              "avg_length": 8.51,
              "max_length": 33.0,
              "min_length": 1.0,
              "avg_entropy": 2.38,
              "reuse_ratio": 0.24,
              "unique_count": 63.0,
              "length_stddev": 6.27,
              "sequential_names": 3.0,
              "single_char_count": 3.0,
              "single_char_ratio": 0.05,
              "high_entropy_count": 4.0,
              "high_entropy_ratio": 0.06,
              "all_lowercase_ratio": 0.3,
              "all_uppercase_ratio": 0.02,
              "keyboard_pattern_names": 1.0
            }
          }
        },
        "id": 2,
        "mol": "H(Cm)",
        "path": "github.com-platform-engineering-labs-formae-pkg-auth-v0.2.2-0.20260720143758-7c563cebd76d.zip!!github.com/platform-engineering-labs/formae/pkg/auth@v0.2.2-0.20260720143758-7c563cebd76d/auth_test.go",
        "pid": 0,
        "risk": 2,
        "sha": "2d616ea72642b5afa45cb408e1bcaa7469be7146d77e6fc7f06f010455469424",
        "size": 4133,
        "traits": [
          {
            "id": "metadata/package/testing/harness/unit::go-t-fatal-call",
            "conf": 0.699999988079071,
            "crit": 1,
            "desc": "Go test stops with t.Fatal",
            "spans": [
              [
                2185,
                7
              ]
            ]
          },
          {
            "id": "metadata/package/testing/presence/harness::tests-path-filename",
            "conf": 0.8500000238418579,
            "crit": 1,
            "desc": "File path or name indicates test code",
            "spans": [
              [
                0,
                12
              ]
            ]
          },
          {
            "id": "metadata/package/testing/harness/unit::go-func-test",
            "conf": 0.800000011920929,
            "crit": 2,
            "desc": "Go test function name",
            "spans": [
              [
                1610,
                24
              ],
              [
                2357,
                28
              ],
              [
                3573,
                33
              ]
            ]
          },
          {
            "id": "micro-behaviors/communications/socket/rpc::rpc-import",
            "mbc": "C0040",
            "conf": 0.8999999761581421,
            "crit": 3,
            "desc": "Go net/rpc package import",
            "spans": [
              [
                134,
                7
              ]
            ]
          },
          {
            "id": "metadata/package/testing/harness/unit::go-testing-t",
            "conf": 0.699999988079071,
            "crit": 2,
            "desc": "Go test uses a testing.T parameter",
            "spans": [
              [
                1642,
                10
              ]
            ]
          },
          {
            "id": "metadata/file/invisible-unicode::test-file-context",
            "atk": "T1027",
            "conf": 0.8500000238418579,
            "crit": 1,
            "desc": "File is test, generated, or declaration code",
            "spans": [
              [
                0,
                12
              ]
            ]
          }
        ],
        "type": "go"
      },
      {
        "ctx": [
          {
            "b": "f!Lgjk$(CS3jp-Xv@2H=wGUA7Bz80*x(d*cA=-AL3jd[/zEWP}x(mMpyiarha{[S2w]hSl3jd[\u003czZ2I{b5Q$lflh2wa{[S2z/WNyCX7we3jd[#x(dA93mMq?v@DmaBrCpnx()r*zdNTdBrAZ?gCx}3aARsmwIc[)v@Dl}3jnBtavx%VwO#Pjzddr\u003cxjVcbvqWh@B-.ptAboVfx(k5mBZ/rgz!0v1B0a[ewft\u0026iz*2\u00269wPF#oD2Nt9aw#36az\u003eXixM4B5e^:l+axrF]wftubaARpdavw*]aARJAv@Dj3B-7]6vru66CwhejaARpdayPzmxDRngB.tAaayY55vrcSC3uQMjwD",
            "n": [
              {
                "c": 3,
                "d": "Go net/rpc package import",
                "i": "micro-behaviors/communications/socket/rpc::rpc-import",
                "o": 141,
                "z": 7,
                "cf": 0.8999999761581421
              },
              {
                "c": 2,
                "d": "Contains common English function words",
                "i": "metadata/file/profile/language::lang-english",
                "o": 255,
                "z": 3,
                "cf": 0.800000011920929
              },
              {
                "c": 1,
                "d": "encoding/json package import",
                "i": "micro-behaviors/data/serialize/json::encoding-json-import",
                "o": 112,
                "z": 13,
                "cf": 0.5
              }
            ],
            "ln": 77,
            "col": 33,
            "line": 3
          },
          {
            "b": "p*[DVaAITBx(mMmay/tcw[+)2yiarhe(Db4o\u003ewx!vp%d2asFZby?WD#BsXLCA=M8sdiJ%A31E*.auzUdwQ4=@e\u003c\u003cL]zddr)c$l[dvrcS\u0026vrufi3jgiVwg*/5wmY!4auZ\u0026+x(1[BfcC7xBrCKsB.tAaaAITnwPz/lxkX]mzY\u003c1cA+fcgaAITnwPz!#33fW1q*ABXA=kCNBAzKKv@k:93jm8XByY96efFIAAV^zaay/n0e(M\u003e5x(l:YAaHBD3jgAUaz2Olar-(\u003czFr]fDKp5=A+funA=91qx(2syw]hSxmriA!A+lZzvrDW9ay/k4wO#PJaAITnx(k5jx(ESAashjQefFIAAW.t4Ef{q/B97@hB-YeSwPz/liZ1P}zdCm$ByYrjBwMW\u003cwHF#m329#]wPz/laW3@=x(1]s3jd2VwPS6nzxJ?hy+cYvzfdy0A=M8sw*!\u003ciB-.ptv@b\u003c\u003czGE]ZB97@hB-X:Bx(ESAashjQefFIAAW.t4Ef{q/x\u003ewG0A=Jo-jS[lKwg*/5vrcDrdlwU-A=JoCjS[SRy-[6i2)\u003eS-Bn",
            "n": [
              {
                "c": 3,
                "d": "Creates a child process with Go exec.Command",
                "i": "micro-behaviors/process/create/direct::exec-command",
                "o": 710,
                "z": 12,
                "cf": 0.949999988079071
              },
              {
                "c": 3,
                "d": "StdinPipe reference",
                "i": "micro-behaviors/process/create/shell/lang::stdin-pipe",
                "o": 835,
                "z": 9,
                "cf": 0.5
              },
              {
                "c": 3,
                "d": "Configures Go child-process standard I/O or pipe handling",
                "i": "micro-behaviors/process/create/shell/lang::stdio-or-pipe-redirection",
                "o": 740,
                "z": 8,
                "cf": 0.699999988079071
              },
              {
                "c": 3,
                "d": "StdoutPipe reference",
                "i": "micro-behaviors/process/create/shell/lang::stdout-pipe",
                "o": 949,
                "z": 10,
                "cf": 0.4000000059604645
              }
            ],
            "ln": 646,
            "col": 22,
            "line": 28
          },
          {
            "b": "D30Q8329#]uO0shA=Jo-jS[DSe(Dm?wjyYTy::vDwn=QjefF$AvpTT/i:Bf@az2Olar-(\u003czFr]fDKp5=v@k:ep\u0026ZF:wPI]BokeiUc[bGf31E*.e(#E}BsnNB2)\u003eS-BAIRwaz$[fefFLwBs{15A=k#gc)A8xBz8!by?WD#BugK*vqf*$zF787z/M$vwNPa{aAImfzEEuxashjQefFIAAW.t4Ef{q/v@Dm5auzUdcuBotx(uvSzF\u003c!d2)\u003cHvvpS}\u0026iV]K/",
            "n": [
              {
                "c": 3,
                "d": "Go process kill method",
                "i": "micro-behaviors/process/terminate/kill::go-process-kill-method",
                "o": 1391,
                "z": 16,
                "cf": 0.8999999761581421
              }
            ],
            "ln": 1327,
            "col": 16,
            "line": 50
          },
          {
            "b": "v}V#CjS[PIyH[]7xKL^3x(mTbqE%](y\u0026?iJf!0CoxkX]8B-7XqdiJ%A2)\u003e=-AV/xBx(mTbqE%](y\u0026*0\u003c334UfA=Jo=aAzBhlU{EFzGEG#vqG:db0*u[xI-I/xk8lonP5l:",
            "n": [
              {
                "c": 1,
                "d": "Go goroutine launch call",
                "i": "micro-behaviors/process/thread/create::go-goroutine-launch-call",
                "o": 1889,
                "z": 8,
                "cf": 0.75
              }
            ],
            "ln": 1857,
            "col": 2,
            "line": 76
          },
          {
            "b": "AV^H/wPz!#2)(1!34ic!x\u003ewF$e[n:ear-(\u003czFr]fcmf\u003cBe[n:ee(lObv}x.5ar-(\u003czFr]fDKp5=uM.GOv\u003eIndwg*Y0z!0v1B1Qa1y?$HG3jd2CauZ\u0026Se[n:ee(#E}BsnNB34ic!A+funA=91ix(XopmrizQEf]",
            "n": [
              {
                "c": 3,
                "d": "Go process kill method",
                "i": "micro-behaviors/process/terminate/kill::go-process-kill-method",
                "o": 3407,
                "z": 18,
                "cf": 0.8999999761581421
              }
            ],
            "ln": 3343,
            "col": 11,
            "line": 126
          }
        ],
        "depth": 1,
        "facts": {
          "imp": [
            [
              "",
              "exec.Command"
            ],
            [
              "",
              "setSysProcAttr"
            ],
            [
              "",
              "cmd.StdinPipe"
            ],
            [
              "",
              "fmt.Errorf"
            ],
            [
              "",
              "cmd.StdoutPipe"
            ],
            [
              "",
              "fmt.Errorf"
            ],
            [
              "",
              "cmd.Start"
            ],
            [
              "",
              "fmt.Errorf"
            ],
            [
              "",
              "io.ReadFull"
            ],
            [
              "",
              "cmd.Process.Kill"
            ],
            [
              "",
              "cmd.Wait"
            ],
            [
              "",
              "fmt.Errorf"
            ],
            [
              "",
              "rpc.NewClient"
            ],
            [
              "",
              "make"
            ],
            [
              "",
              "rpcClient.Call"
            ],
            [
              "",
              "c.Close"
            ],
            [
              "",
              "fmt.Errorf"
            ],
            [
              "",
              "time.After"
            ],
            [
              "",
              "c.Close"
            ],
            [
              "",
              "fmt.Errorf"
            ],
            [
              "",
              "c.Close"
            ],
            [
              "",
              "fmt.Errorf"
            ],
            [
              "",
              "c.rpcClient.Call"
            ],
            [
              "",
              "fmt.Errorf"
            ],
            [
              "",
              "c.rpcClient.Call"
            ],
            [
              "",
              "fmt.Errorf"
            ],
            [
              "",
              "c.rpcClient.Close"
            ],
            [
              "",
              "c.cmd.Process.Kill"
            ],
            [
              "",
              "c.cmd.Wait"
            ],
            [
              "",
              "encoding/json"
            ],
            [
              "",
              "fmt"
            ],
            [
              "",
              "io"
            ],
            [
              "",
              "net/rpc"
            ],
            [
              "",
              "os/exec"
            ],
            [
              "",
              "time"
            ]
          ],
          "mbr": [
            "c.Close",
            "c.cmd",
            "c.cmd.Process",
            "c.cmd.Process.Kill",
            "c.cmd.Wait",
            "c.rpcClient",
            "c.rpcClient.Call",
            "c.rpcClient.Close",
            "cmd.Process",
            "cmd.Process.Kill",
            "cmd.Start",
            "cmd.Stderr",
            "cmd.StdinPipe",
            "cmd.StdoutPipe",
            "cmd.Wait",
            "exec.Command",
            "fmt.Errorf",
            "io.ReadFull",
            "r.err",
            "r.resp",
            "resp.Error",
            "rpc.NewClient",
            "rpcClient.Call",
            "time.After",
            "time.Second"
          ],
          "tgt": [
            "c.Close",
            "c.cmd.Process.Kill",
            "c.cmd.Wait",
            "c.rpcClient.Call",
            "c.rpcClient.Close",
            "cmd.Process.Kill",
            "cmd.Start",
            "cmd.StdinPipe",
            "cmd.StdoutPipe",
            "cmd.Wait",
            "exec.Command",
            "fmt.Errorf",
            "io.ReadFull",
            "make",
            "rpc.NewClient",
            "rpcClient.Call",
            "setSysProcAttr",
            "time.After"
          ],
          "metrics": {
            "ast": {
              "op.ne": 12.0,
              "op.mul": 1.0,
              "op.band": 9.0,
              "op.land": 1.0,
              "max_depth": 18.0,
              "call_count": 30.0,
              "node_count": 1049.0,
              "member_count": 25.0,
              "op_density.ne": 0.01,
              "op_density.mul": 0.0,
              "op_density.band": 0.01,
              "op_density.land": 0.0,
              "identifier_count": 62.0,
              "member_depth_max": 4.0,
              "string_literal_count": 19.0,
              "array_literal_max_length": 2.0
            },
            "file": {
              "size": 3469.0,
              "entropy": 4.97,
              "size_bytes": 3469.0
            },
            "text": {
              "tab_count": 127.0,
              "digit_ratio": 0.0,
              "space_count": 412.0,
              "total_lines": 134.0,
              "char_entropy": 4.97,
              "unique_chars": 75.0,
              "string_density": 0.14,
              "avg_line_length": 24.89,
              "high_byte_ratio": 0.0,
              "max_line_length": 101.0,
              "non_ascii_ratio": 0.0,
              "empty_line_ratio": 0.13,
              "last_line_length": 1.0,
              "whitespace_ratio": 0.19,
              "most_common_ratio": 0.08,
              "identifier_density": 1.56,
              "line_length_stddev": 25.51,
              "normalized_string_count": 1.64,
              "most_common_char_is_null": 0.0,
              "max_inline_whitespace_run": 7.0,
              "most_common_char_codepoint": 101.0,
              "suspicious_identifier_ratio": 0.03,
              "normalized_unique_identifiers": 8.77
            },
            "calls": {
              "count": 30.0
            },
            "binary": {
              "overall_entropy": 4.97,
              "peak_region_bytes": 3469.0,
              "peak_region_entropy": 4.96
            },
            "source": {
              "class_count": 2.0,
              "function_count": 4.0
            },
            "imports": {
              "count": 6.0,
              "stdlib_count": 6.0,
              "stdlib_ratio": 1.0,
              "unique_modules": 6.0
            },
            "members": {
              "count": 25.0
            },
            "strings": {
              "total": 19.0,
              "avg_length": 18.53,
              "max_length": 41.0,
              "avg_entropy": 3.21,
              "empty_count": 1.0,
              "total_bytes": 352.0,
              "entropy_stddev": 0.85
            },
            "comments": {
              "chars": 886.0,
              "lines": 16.0,
              "total": 17.0,
              "to_code_ratio": 0.14,
              "empty_comments": 1.0
            },
            "functions": {
              "count": 6.0,
              "avg_params": 0.75,
              "max_params": 2.0,
              "length_stddev": 28.25,
              "avg_name_length": 8.75,
              "no_params_count": 2.0,
              "avg_length_lines": 25.25,
              "max_length_lines": 74.0,
              "min_length_lines": 7.0,
              "avg_param_name_length": 6.33,
              "density_per_100_lines": 2.99,
              "code_in_functions_ratio": 0.75
            },
            "identifiers": {
              "count": 62.0,
              "total": 209.0,
              "avg_length": 6.95,
              "max_length": 21.0,
              "min_length": 1.0,
              "avg_entropy": 2.24,
              "reuse_ratio": 0.3,
              "unique_count": 62.0,
              "length_stddev": 4.36,
              "sequential_names": 2.0,
              "single_char_count": 3.0,
              "single_char_ratio": 0.05,
              "high_entropy_count": 1.0,
              "high_entropy_ratio": 0.02,
              "all_lowercase_ratio": 0.39,
              "all_uppercase_ratio": 0.02,
              "underscore_prefix_count": 1.0
            }
          }
        },
        "id": 3,
        "mol": "H₂(CmPo₂)",
        "path": "github.com-platform-engineering-labs-formae-pkg-auth-v0.2.2-0.20260720143758-7c563cebd76d.zip!!github.com/platform-engineering-labs/formae/pkg/auth@v0.2.2-0.20260720143758-7c563cebd76d/client.go",
        "pid": 0,
        "risk": 3,
        "sha": "e0e33a7164bfa16504485da0f6d550f3bb4900d5363804b9697c1a2daed2dd47",
        "size": 3469,
        "traits": [
          {
            "id": "micro-behaviors/process/terminate/kill::go-process-kill-method",
            "conf": 0.8999999761581421,
            "crit": 3,
            "desc": "Go process kill method",
            "spans": [
              [
                1391,
                16
              ],
              [
                3407,
                18
              ]
            ]
          },
          {
            "id": "micro-behaviors/process/create/shell/lang::stdout-pipe",
            "conf": 0.4000000059604645,
            "crit": 3,
            "desc": "StdoutPipe reference",
            "spans": [
              [
                949,
                10
              ]
            ]
          },
          {
            "id": "micro-behaviors/process/create/shell/lang::stdin-pipe",
            "crit": 3,
            "desc": "StdinPipe reference",
            "spans": [
              [
                835,
                9
              ]
            ]
          },
          {
            "id": "micro-behaviors/process/create/direct::exec-command",
            "atk": "T1059.003",
            "conf": 0.949999988079071,
            "crit": 3,
            "desc": "Creates a child process with Go exec.Command",
            "spans": [
              [
                710,
                12
              ]
            ]
          },
          {
            "id": "micro-behaviors/process/create/shell/lang::stdio-redirect",
            "conf": 0.6000000238418579,
            "crit": 3,
            "desc": "Configures child-process standard I/O",
            "spans": [
              [
                740,
                8
              ]
            ]
          },
          {
            "id": "micro-behaviors/communications/socket/rpc::rpc-import",
            "mbc": "C0040",
            "conf": 0.8999999761581421,
            "crit": 3,
            "desc": "Go net/rpc package import",
            "spans": [
              [
                141,
                7
              ]
            ]
          }
        ],
        "type": "go"
      },
      {
        "ctx": [
          {
            "b": "fe1D+Sur@IgbQgJy*?A$z/PXqmq=:LzE)y1x(mMaoKRyKaw3DXe^:l+3nj4Pq=2\u003e:eLG\u003e*wO#N2eLfF:zGGP8x\u003eqrCavYp6eIO\u003ejeKr6Ng71wcvpK7YxjSh]B-.p73tBu@z/P}xc\u003c*n8zE)]yA=tIj3jd[#wPI%czF7d22{KF9zdK)#dgcznfcCdzCt@c{Bvf\u003eUwO#Pjv@=c?By/Ioviv{Nx\u003eqg7ayX+?yH}30vTf88zxJUhePt-Gv}x.5aAIamC4CXpC4\u003ewcx(tR2x(ESm3nj4PvTh{3B8#5kxcqblfj/xtv\u003eF)6xLv",
            "n": [
              {
                "c": 3,
                "d": "Go net/rpc package import",
                "i": "micro-behaviors/communications/socket/rpc::rpc-import",
                "o": 111,
                "z": 7,
                "cf": 0.8999999761581421
              },
              {
                "c": 2,
                "d": "Benign source context for hardcoded external IPv4 literals",
                "i": "micro-behaviors/communications/ip/literal::external-ipv4-benign-source-context",
                "o": 0,
                "z": 14,
                "cf": 0.8999999761581421
              }
            ],
            "ln": 0,
            "col": 1,
            "line": 1
          },
          {
            "b": "z!9]iCwhejz/{dAvixP4vqE5}x(mv1C}GCoB-7XizE[2\u003ewPI@Xy?WD#BsqkNdS/lyBzkS9e(TwAAboVfx(k4VB-.p[y\u0026%x8zyDXTlU{EFzGE1F3jg/bnm=QRwPxgF3jm8Hy?WD#Bvf$:zy=]KwPz%9AZK+.zxH#6aAh4lwKyxNzyu}v3jgu-ax8\u0026(C4A7vy\u0026%x8zy=]KwPz%9AZK+.zyC]1336#{lU{EFzGE0ZjS[=:v\u003eHI/CscgXwO#Prv@b\u003c\u003czGFl:zF*)g3jg.",
            "n": [
              {
                "c": 2,
                "d": "Go testing package",
                "i": "metadata/package/testing/harness/unit::go-test",
                "o": 320,
                "z": 10,
                "cf": 0.949999988079071
              },
              {
                "c": 1,
                "d": "Go goroutine launch call",
                "i": "micro-behaviors/process/thread/create::go-goroutine-launch-call",
                "o": 414,
                "z": 9,
                "cf": 0.75
              }
            ],
            "ln": 272,
            "col": 52,
            "line": 14
          },
          {
            "b": "x\u003eqg7iV@DZv)+6DwO#Pv3jd2Gz/fCNarR^HarUfgx\u003eqg7lVl\u003cWed8Yi3vJl*w{503axh][Bvf\u003eUwO#P%r://UwmoN\u003ed0cNYBy/Jnx(mMor4e@p3jgV/B.tAaauzUdct3X4wL^h=xk8mgEf{o\u003cy?WD#BrARcaz$+mraQb)lU{EFzGEpGefF[FB.tAadgcw(wObH]ay/k4wO#O",
            "n": [
              {
                "c": 2,
                "d": "Go test function name",
                "i": "metadata/package/testing/harness/unit::go-func-test",
                "o": 557,
                "z": 19,
                "cf": 0.800000011920929
              }
            ],
            "ln": 509,
            "col": 8,
            "line": 25
          },
          {
            "b": "nm=juwPz\u0026Maz\u003eLatxs[bx(mM?tu#q(A+PA7DM(Mzl2ZJ\u0026oj-w)iV@+[B7F\u003c4wPPItwQbFFEjLZi34jlf2)\u003erTaz2Olar-(\u003czFr]fDKp5=33m^?vrt{]w*!\u003c7vqGT*vru66w)]y\u0026wN)?Ac3yE-az2Oldgcv/Ef{n!x\u003ewFhA+frhe((y%x\u003eeuk3jd1BBs{3\u003eByw#lb4V1rwN/*[wfs]Yy?WAyBAhIna$i\u003c934ic!329#]A+frhe\u003c\u003c5SxK%?FC{1m[ar\u003ePjC@*1Tv@=d5eO!{ya%qjt2)*]We\u003efn\u003evqGK7b4V1rwN/*[wfslFv}YA",
            "n": [
              {
                "c": 2,
                "d": "Go test t.Fatal method",
                "i": "metadata/package/testing/harness/unit::go-t-fatal",
                "o": 927,
                "z": 7,
                "cf": 0.75
              },
              {
                "c": 1,
                "d": "ML-KEM or Kyber encapsulation evidence",
                "i": "micro-behaviors/crypto/asymmetric/kem::kyber-encapsulation-terms",
                "o": 823,
                "z": 6,
                "cf": 0.9200000166893005
              },
              {
                "c": 1,
                "d": "Credential field keyword",
                "i": "micro-behaviors/data/parse/vocabulary::credential-field",
                "o": 811,
                "z": 7,
                "cf": 0.8399999737739563
              }
            ],
            "ln": 779,
            "col": 4,
            "line": 37
          },
          {
            "b": "C42i3wftr1x=}h5C{+c=xk.(mc2\u003eaWaAz4mA4TO1A=k$E3jd2!3jhbf3vJl*w{503axh][Bvf\u003eUwO#P%m}D^dB-.p/wNPaXAWV2LdS/lyBzkS9e(TnxDKp6#y\u0026%x8zxH#6aspYeyH{sUB.tAaDWMkcv@b\u003c\u003czGE0ZjS[SNCt@c{Bvf\u003eUwO#PrBsXLNy\u0026%x8zyC]0wmYv:AV!\u003edx\u003eqg7",
            "n": [
              {
                "c": 2,
                "d": "Go test function name",
                "i": "metadata/package/testing/harness/unit::go-func-test",
                "o": 1581,
                "z": 24,
                "cf": 0.800000011920929
              }
            ],
            "ln": 1533,
            "col": 32,
            "line": 64
          },
          {
            "b": "Bs?otC{jwT3jd2Xe\u003efn\u003evqGK7b4V1rwN/*[wfs#al2ZJ\u0026oj-xicV-\u003ceA+ftAyH}=sefFOzBrz(Ma$K\u003cSwPI/ynm=juwPz\u0026v3jha/Ef{r[B-7XiraQb)lU{EFzGGkMy\u0026sxad0cNYBy/Jnx(mMor4e@p3jgV/B.tAaauzUdct3X4wL^h=xk8mgEf{o\u003cy?WD#Bvf$:zy=]KwPz%9AZK+.zxH#6aAh4lwKyxNzyu}v31[f0q!o#)wHIG",
            "n": [
              {
                "c": 2,
                "d": "Go test function name",
                "i": "metadata/package/testing/harness/unit::go-func-test",
                "o": 1970,
                "z": 16,
                "cf": 0.800000011920929
              },
              {
                "c": 1,
                "d": "Password value field assignment",
                "i": "objectives/credential-access/theft/keywords::credential-field--password",
                "o": 1919,
                "z": 20,
                "cf": 0.8399999737739563
              }
            ],
            "ln": 1887,
            "col": 40,
            "line": 80
          }
        ],
        "depth": 1,
        "facts": {
          "imp": [
            [
              "",
              "t.Helper"
            ],
            [
              "",
              "pipeConn"
            ],
            [
              "",
              "Serve"
            ],
            [
              "",
              "rpc.NewClient"
            ],
            [
              "",
              "newTestClient"
            ],
            [
              "",
              "client.Close"
            ],
            [
              "",
              "t.Run"
            ],
            [
              "",
              "client.Validate"
            ],
            [
              "",
              "t.Fatalf"
            ],
            [
              "",
              "t.Fatal"
            ],
            [
              "",
              "t.Fatalf"
            ],
            [
              "",
              "t.Fatalf"
            ],
            [
              "",
              "t.Run"
            ],
            [
              "",
              "client.Validate"
            ],
            [
              "",
              "t.Fatalf"
            ],
            [
              "",
              "t.Fatal"
            ],
            [
              "",
              "t.Fatalf"
            ],
            [
              "",
              "newTestClient"
            ],
            [
              "",
              "client.Close"
            ],
            [
              "",
              "client.GetAuthHeader"
            ],
            [
              "",
              "t.Fatalf"
            ],
            [
              "",
              "len"
            ],
            [
              "",
              "t.Fatalf"
            ],
            [
              "",
              "pipeConn"
            ],
            [
              "",
              "Serve"
            ],
            [
              "",
              "rpc.NewClient"
            ],
            [
              "",
              "client.Close"
            ],
            [
              "",
              "t.Fatalf"
            ],
            [
              "",
              "client.Validate"
            ],
            [
              "",
              "t.Fatal"
            ],
            [
              "",
              "net/rpc"
            ],
            [
              "",
              "testing"
            ],
            [
              "",
              "time"
            ]
          ],
          "mbr": [
            "client.Close",
            "client.GetAuthHeader",
            "client.Validate",
            "resp.CacheKey",
            "resp.CacheTTL",
            "resp.Error",
            "resp.Headers",
            "resp.Valid",
            "rpc.NewClient",
            "t.Fatal",
            "t.Fatalf",
            "t.Helper",
            "t.Run",
            "time.Second"
          ],
          "tgt": [
            "Serve",
            "client.Close",
            "client.GetAuthHeader",
            "client.Validate",
            "len",
            "newTestClient",
            "pipeConn",
            "rpc.NewClient",
            "t.Fatal",
            "t.Fatalf",
            "t.Helper",
            "t.Run"
          ],
          "metrics": {
            "ast": {
              "op.eq": 1.0,
              "op.ne": 9.0,
              "op.lor": 1.0,
              "op.mul": 1.0,
              "op.band": 8.0,
              "op.lnot": 1.0,
              "max_depth": 26.0,
              "call_count": 30.0,
              "node_count": 886.0,
              "member_count": 14.0,
              "op_density.eq": 0.0,
              "op_density.ne": 0.01,
              "op_density.lor": 0.0,
              "op_density.mul": 0.0,
              "op_density.band": 0.01,
              "op_density.lnot": 0.0,
              "identifier_count": 42.0,
              "member_depth_max": 2.0,
              "string_literal_count": 24.0,
              "array_literal_max_length": 2.0
            },
            "file": {
              "size": 2437.0,
              "entropy": 5.13,
              "size_bytes": 2437.0
            },
            "text": {
              "tab_count": 117.0,
              "digit_ratio": 0.01,
              "space_count": 210.0,
              "total_lines": 106.0,
              "char_entropy": 5.13,
              "unique_chars": 71.0,
              "string_density": 0.23,
              "avg_line_length": 22.0,
              "high_byte_ratio": 0.0,
              "max_line_length": 77.0,
              "non_ascii_ratio": 0.0,
              "empty_line_ratio": 0.16,
              "last_line_length": 1.0,
              "whitespace_ratio": 0.18,
              "most_common_ratio": 0.1,
              "identifier_density": 1.57,
              "line_length_stddev": 20.88,
              "normalized_string_count": 2.33,
              "most_common_char_is_null": 0.0,
              "max_inline_whitespace_run": 6.0,
              "most_common_char_codepoint": 101.0,
              "suspicious_identifier_ratio": 0.05,
              "normalized_unique_identifiers": 6.24
            },
            "calls": {
              "count": 30.0
            },
            "binary": {
              "overall_entropy": 5.13,
              "peak_region_bytes": 2437.0,
              "peak_region_entropy": 5.17
            },
            "source": {
              "function_count": 4.0
            },
            "imports": {
              "count": 3.0,
              "stdlib_count": 3.0,
              "stdlib_ratio": 1.0,
              "unique_modules": 3.0
            },
            "members": {
              "count": 14.0
            },
            "strings": {
              "total": 24.0,
              "avg_length": 17.42,
              "max_length": 42.0,
              "avg_entropy": 3.25,
              "total_bytes": 418.0,
              "entropy_stddev": 0.64
            },
            "comments": {
              "chars": 258.0,
              "lines": 5.0,
              "total": 6.0,
              "to_code_ratio": 0.05,
              "empty_comments": 1.0
            },
            "functions": {
              "count": 4.0,
              "avg_params": 1.25,
              "max_params": 2.0,
              "length_stddev": 9.6,
              "avg_name_length": 18.0,
              "avg_length_lines": 22.25,
              "max_length_lines": 38.0,
              "min_length_lines": 14.0,
              "high_entropy_names": 1.0,
              "single_char_params": 4.0,
              "avg_param_name_length": 2.0,
              "density_per_100_lines": 3.77,
              "code_in_functions_ratio": 0.84
            },
            "identifiers": {
              "count": 42.0,
              "total": 166.0,
              "avg_length": 7.29,
              "max_length": 24.0,
              "min_length": 1.0,
              "avg_entropy": 2.29,
              "reuse_ratio": 0.25,
              "unique_count": 42.0,
              "length_stddev": 4.73,
              "sequential_names": 2.0,
              "single_char_count": 3.0,
              "single_char_ratio": 0.07,
              "high_entropy_count": 1.0,
              "high_entropy_ratio": 0.02,
              "all_lowercase_ratio": 0.33,
              "all_uppercase_ratio": 0.05,
              "underscore_prefix_count": 1.0
            }
          }
        },
        "id": 4,
        "mol": "H(Cm)",
        "path": "github.com-platform-engineering-labs-formae-pkg-auth-v0.2.2-0.20260720143758-7c563cebd76d.zip!!github.com/platform-engineering-labs/formae/pkg/auth@v0.2.2-0.20260720143758-7c563cebd76d/client_test.go",
        "pid": 0,
        "risk": 2,
        "sha": "d5f00b7d414c1a9351fa6954ce9116f7412b8b2ab85e61548734824b7c024930",
        "size": 2437,
        "traits": [
          {
            "id": "metadata/package/testing/harness/unit::go-t-fatal-call",
            "conf": 0.699999988079071,
            "crit": 1,
            "desc": "Go test stops with t.Fatal",
            "spans": [
              [
                927,
                7
              ]
            ]
          },
          {
            "id": "metadata/package/testing/presence/harness::tests-path-filename",
            "conf": 0.8500000238418579,
            "crit": 1,
            "desc": "File path or name indicates test code",
            "spans": [
              [
                0,
                14
              ]
            ]
          },
          {
            "id": "metadata/package/testing/harness/unit::go-func-test",
            "conf": 0.800000011920929,
            "crit": 2,
            "desc": "Go test function name",
            "spans": [
              [
                557,
                19
              ],
              [
                1581,
                24
              ],
              [
                1970,
                16
              ]
            ]
          },
          {
            "id": "micro-behaviors/communications/socket/rpc::rpc-import",
            "mbc": "C0040",
            "conf": 0.8999999761581421,
            "crit": 3,
            "desc": "Go net/rpc package import",
            "spans": [
              [
                111,
                7
              ]
            ]
          },
          {
            "id": "metadata/package/testing/harness/unit::go-testing-t",
            "conf": 0.699999988079071,
            "crit": 2,
            "desc": "Go test uses a testing.T parameter",
            "spans": [
              [
                320,
                10
              ]
            ]
          },
          {
            "id": "metadata/file/invisible-unicode::test-file-context",
            "atk": "T1027",
            "conf": 0.8500000238418579,
            "crit": 1,
            "desc": "File is test, generated, or declaration code",
            "spans": [
              [
                0,
                14
              ]
            ]
          }
        ],
        "type": "go"
      },
      {
        "id": 5,
        "sha": "b1e9b48096998242cdcce12be7e30d5fd4e3aa2ae75da99c6530dd62e6ecbc6d",
        "path": "github.com-platform-engineering-labs-formae-pkg-auth-v0.2.2-0.20260720143758-7c563cebd76d.zip!!github.com/platform-engineering-labs/formae/pkg/auth@v0.2.2-0.20260720143758-7c563cebd76d/conn.go",
        "size": 543,
        "type": "go",
        "depth": 1
      },
      {
        "id": 6,
        "sha": "3be0c43d391111cb937ac7c078e8a014557b2e1351c0ee12feb4657b37b46f38",
        "path": "github.com-platform-engineering-labs-formae-pkg-auth-v0.2.2-0.20260720143758-7c563cebd76d.zip!!github.com/platform-engineering-labs/formae/pkg/auth@v0.2.2-0.20260720143758-7c563cebd76d/go.mod",
        "size": 89,
        "type": "go.mod",
        "depth": 1
      },
      {
        "id": 7,
        "sha": "a68d2cd4e6c92d432696e6147463e86ba4bc9660431473d59d7fee536d07f9a3",
        "path": "github.com-platform-engineering-labs-formae-pkg-auth-v0.2.2-0.20260720143758-7c563cebd76d.zip!!github.com/platform-engineering-labs/formae/pkg/auth@v0.2.2-0.20260720143758-7c563cebd76d/procattr_linux.go",
        "size": 424,
        "type": "go",
        "depth": 1
      },
      {
        "id": 8,
        "sha": "6c6451b9d539f048edf3985de156b11eb05aa54e209920ec7e7d5629f0352cfc",
        "path": "github.com-platform-engineering-labs-formae-pkg-auth-v0.2.2-0.20260720143758-7c563cebd76d.zip!!github.com/platform-engineering-labs/formae/pkg/auth@v0.2.2-0.20260720143758-7c563cebd76d/procattr_other.go",
        "size": 345,
        "type": "go",
        "depth": 1
      },
      {
        "analysis_gaps": [
          "flow-graph-limited"
        ],
        "ctx": [
          {
            "b": "fe1D+Sur@IgbQgJy*?A$z/PXqmq=:LzE)y1x(mMaoKRyKaw3DXe^:l+3nj4Pq=2\u003e:eLG\u003e*wO#N2eLfF:zGGP8x\u003eqrCavYp6eIO\u003ejeKr6Ng71wcvpK7YxjSh]B-.p73tBu@z/P}xc\u003c*n8x(tg52{Km#Bt4VNv\u003chl^b5.JD3jd[#x(dA93mMq?fe1CDwPz%9aAzQxB0bNrwGUA7Bz8!oy\u0026%x8zxI?NlM*CYA=#2maA8BmAV/EqwGUS1C4CLlv@Dm5wN/*@z/dfmfe1CAy\u0026%x8zxJwgBzbPkB0a$3y?$koxLzJgw].*baz\u003eL3zyu}RCwhejaA8rNq/(L:zzb{He(M\u003e5z/{dO3nj4Pra]?=w{503BzkVhayYe9v@3cdB-8qny-)?kwGUG3zF\u003c2}BzkVhazC)tv@c78wN)z2w{503ax8\u0026(C4A7vy\u0026%x8zxIk/BzaG!B.tAaefFCvzF*Ohz.s}0vpSCWx()]Ny\u0026sxaAW-bT3jg=]B%5?eaAzBhe(2#4q!o#)wPxgF3jg=]B$MW7xk8BewPyKOzdLatl3mo.p\u00267n!x(kaCaAhdtxk8lj3jg=]B$MZ8A=#1Yz/fCvv@Dm5dggFg3nj4PqE%oEC#FA\u0026zEEu7x(+zsxK@rcx(mN1wGUDcBy=OsA+PSqwO@SjzY\u003caywn=QjayYQsqGV\u003e1vR6d\u0026A+cwmByxiix(mL\u003cfe1C\u0026xK@q:p^VvDwPz%9AXnFlxK@r1z/Z1yAb](bwPI]nB-RbnaARphB0bNyay]59wN/*8Bzb98aARpdaAhdtxk8lax(:RmfcBXtx)a5gvqYP#A+eV\u0026C{4iEayO+\u0026wPh-lqCY.6v{%g\u0026B1N/fz/fSraw#=Vwo?9/xkRc]ayYRrwGTbUfNboa3jnBtax0u1azC)tvix5#zGYPex\u003eqf(wGUPczEW^5z/cXfz/M$ty\u0026%x8zxJwgBzbPkB1OObBrC7lwNPW(B0a)lB97@bz:OCXzve3IazbUjz6i+re(M\u003e5x(kOxB1Qykwn=QjayPd#ay!?@y\u0026ZZ$wPz%9e*9F(w]zZ3az2CjwPzH5xcqqfwGT(ElM*h-z/u?kBp6VOaA}\u003cuBy/IovixS9zF9=%aAz44wo/+Fx\u003eIr(y-)hjBy=OozY\u003cdnwGUV8B95KmvqWh#wPRG[BrCQnvpT7\u0026wPI]nCwhejz/{defe1C!z!%l7zF7Nefe0U=fcBkcwGU@dB.tAaaz2!iBAnNkB-.Lsvrui[vqG+9aA}HgzxK4mwGUV8B95KzA=kD0B8@Emx\u003equDayMy4vpK7=A=l8rwc%$yazkRkz/{eozE\u003c@cz/fohz/P[wBzbkdAa9=#zGE0$nKKXfzE:(1vqG+3aA8rNmr\u0026J*aA}HgzxJUnay/7[zF9K43nj4Pc$$qBe?wb!xK@r9vrb{%BrC^oB0bmjy\u00260V[ayPd#aARpdaAhdtxk8laCvtLnA+fh#A+fcgwN({9zY\u0026+ix((18nKKWQdj$%tB-7XiqGV\u003e9AboVfx(k4VB-.p[y\u0026%x8zyDYP3jevsax8#!zEEu7A+eV\u0026x(mH6B0a}6w]zZ3ay/C6vruj3xcqqfwGV5ownb%Hz/fCnB8JgyxK@r6vrcc{AV!?pBy+^=fe1CZB0bKnAa9=}By=ObA=k!qBzbkdqCY.6B98ClvqNR732:(qq/(L*B-YlqA+PSbc%G$^D30RAqE%oEC#FA\u0026zEEvfdgcx1B1Qykwn=Qje(N4kv\u003c\u0026=k3jevsawD=(x([olaAg+fwO#PjAb](bwPI]n\u0026^^mowQ4{hazCBgA+fh#A+fcgwN(]iAa9=#zGE1ix\u003ep*7e^.[$zY\u0026[nzFsihA.{g+wO#Prdgcy*v@Dm5auzUdcuBotx(uvSzF\u003c!d2)\u003cHvvpS}\u0026iV]K/arR!FByY96qE%oEwPxgFed8W\u0026s8@1%wKyoLB7GwMaAITnz/{e6A+PSblU{WZwPxgFed8Yi3jfTxA=#1xAboVfx(kEAv@Dm5dggFg3nj4PzeTraBz(g@vrb{%BrCKvy\u00261enBzbkdAa9=#zGE0$nKLfNpI}pGx(n6refGdIwO@SjxK@r9vrb{%BrCKyz!0v1B0b1cwPFhifcCvIwGUF@x(4r5x(+zqwPh6#wO#Q3wft#jaw+S$atB#!z/M$eaAIWmA+eV#wPxjLavG^.wN/*@zF78lxLzJgv}Yp*xjRA6fcC7xBAnNEB0b4sx(\u003eFcy?m3)y\u003cvdmC4CLlx\u003ewGeByY96aAh4lwPF#5A+fboBrC7fz/YG2aAhvtze:PkC}GCoB-7XizeTraBz(g@vrb{%BsnNXDKp6#Aa@\u00269iZ1Q7B1P%]Bz#hkwge(l31!9@aBsC433o(#wIc[$wO2*ef^4}*BzkP6e(Ms\u003ez/f8m3jd2Mw/#2ke\u003eoF{AbYJ4c[cnZjS[Y.x\u003eeuk3jd1Bz/WK1CXImFfEWtn34ic!Ef$xf",
            "ln": 0,
            "col": 1,
            "line": 1
          }
        ],
        "depth": 1,
        "facts": {
          "imp": [
            [
              "",
              "rpc.NewServer"
            ],
            [
              "",
              "srv.RegisterName"
            ],
            [
              "",
              "srv.ServeConn"
            ],
            [
              "",
              "os.Stdout.Write"
            ],
            [
              "",
              "os.Stdout.Sync"
            ],
            [
              "",
              "monitorParent"
            ],
            [
              "",
              "stdinReader"
            ],
            [
              "",
              "stdoutWriteCloser"
            ],
            [
              "",
              "Serve"
            ],
            [
              "",
              "os.Getppid"
            ],
            [
              "",
              "time.Sleep"
            ],
            [
              "",
              "os.Getppid"
            ],
            [
              "",
              "os.Exit"
            ],
            [
              "",
              "io"
            ],
            [
              "",
              "net/rpc"
            ],
            [
              "",
              "os"
            ],
            [
              "",
              "time"
            ]
          ],
          "mbr": [
            "os.Exit",
            "os.Getppid",
            "os.Stdout",
            "os.Stdout.Sync",
            "os.Stdout.Write",
            "rpc.NewServer",
            "srv.RegisterName",
            "srv.ServeConn",
            "time.Second",
            "time.Sleep"
          ],
          "tgt": [
            "Serve",
            "monitorParent",
            "os.Exit",
            "os.Getppid",
            "os.Stdout.Sync",
            "os.Stdout.Write",
            "rpc.NewServer",
            "srv.RegisterName",
            "srv.ServeConn",
            "stdinReader",
            "stdoutWriteCloser",
            "time.Sleep"
          ],
          "funcs": [
            [
              "Serve",
              332
            ],
            [
              "Run",
              1167
            ],
            [
              "monitorParent",
              1783
            ]
          ],
          "metrics": {
            "ast": {
              "op.ne": 1,
              "op.mul": 1,
              "op.band": 1,
              "max_depth": 13,
              "call_count": 13,
              "node_count": 287,
              "member_count": 10,
              "op_density.ne": 0,
              "op_density.mul": 0,
              "op_density.band": 0,
              "max_array_length": 2,
              "max_member_depth": 3
            },
            "file": {
              "size": 1916,
              "entropy": 4.89
            },
            "text": {
              "lines": 63,
              "top_char": 101,
              "tab_count": 32,
              "digit_ratio": 0.01,
              "space_count": 239,
              "char_entropy": 4.89,
              "unique_chars": 70,
              "top_char_null": 0,
              "import_density": 6.35,
              "string_density": 0.08,
              "top_char_ratio": 0.09,
              "avg_line_length": 29.41,
              "max_line_length": 77,
              "non_ascii_ratio": 0,
              "empty_line_ratio": 0.13,
              "last_line_length": 1,
              "whitespace_ratio": 0.17,
              "identifier_density": 0.83,
              "line_length_stddev": 27.56,
              "max_whitespace_run": 6,
              "normalized_import_count": 0.5,
              "normalized_string_count": 0.63,
              "normalized_function_count": 0.38,
              "imports_to_functions_ratio": 1.33,
              "strings_to_functions_ratio": 1.67,
              "normalized_unique_identifiers": 5.19,
              "identifiers_to_functions_ratio": 10.33
            },
            "binary": {
              "peak_region_bytes": 1916,
              "peak_region_entropy": 4.84
            },
            "source": {
              "function_count": 3
            },
            "imports": {
              "count": 4,
              "stdlib_count": 4,
              "stdlib_ratio": 1
            },
            "strings": {
              "bytes": 25,
              "count": 5,
              "avg_length": 5,
              "max_length": 10,
              "avg_entropy": 1.99,
              "entropy_stddev": 0.88
            },
            "comments": {
              "chars": 1255,
              "count": 23,
              "empty": 2,
              "lines": 21,
              "to_code_ratio": 0.5
            },
            "functions": {
              "count": 3,
              "density": 4.76,
              "avg_params": 1,
              "code_ratio": 0.46,
              "max_params": 2,
              "length_stddev": 4.11,
              "avg_name_length": 7,
              "no_params_count": 1,
              "avg_length_lines": 9.67,
              "max_length_lines": 15,
              "min_length_lines": 5,
              "avg_param_name_length": 5.33
            },
            "identifiers": {
              "count": 52,
              "unique": 31,
              "avg_length": 6.9,
              "max_length": 17,
              "min_length": 2,
              "avg_entropy": 2.31,
              "reuse_ratio": 0.6,
              "length_stddev": 3.9,
              "all_lowercase_ratio": 0.32
            }
          }
        },
        "id": 9,
        "mol": "H₃(CmDbPo₃)Md(In₂)",
        "path": "github.com-platform-engineering-labs-formae-pkg-auth-v0.2.2-0.20260720143758-7c563cebd76d.zip!!github.com/platform-engineering-labs/formae/pkg/auth@v0.2.2-0.20260720143758-7c563cebd76d/server.go",
        "pid": 0,
        "risk": 6,
        "sha": "d6f6fd2f077211d93052714c492e6e1d91ad12454510523b990383d72f298e09",
        "size": 1916,
        "traits": [
          {
            "id": "metadata/import/go/net/rpc::net/rpc",
            "conf": 0.95,
            "crit": 3,
            "desc": "imports net/rpc",
            "spans": [
              [
                117,
                7
              ]
            ]
          },
          {
            "id": "metadata/import/go/os::os",
            "conf": 0.95,
            "crit": 3,
            "desc": "imports os",
            "spans": [
              [
                128,
                2
              ]
            ]
          },
          {
            "id": "micro-behaviors/communications/socket/rpc::rpc-import",
            "mbc": "C0040",
            "conf": 0.9,
            "crit": 3,
            "desc": "Go net/rpc package import",
            "spans": [
              [
                117,
                7
              ]
            ]
          },
          {
            "id": "micro-behaviors/data/control-flow/loop::block-unbounded-loop-header",
            "conf": 1.0,
            "crit": 3,
            "desc": "Contains an unbounded block loop",
            "spans": [
              [
                1828,
                6
              ]
            ]
          },
          {
            "id": "micro-behaviors/process/create/thread::go-goroutine-launch-call",
            "conf": 0.75,
            "crit": 3,
            "desc": "Go goroutine launch call",
            "spans": [
              [
                1427,
                17
              ]
            ]
          },
          {
            "id": "micro-behaviors/process/info/query::go-parent-pid-query",
            "conf": 0.84,
            "crit": 3,
            "desc": "Go queries its parent PID",
            "spans": [
              [
                1818,
                9
              ]
            ]
          },
          {
            "id": "micro-behaviors/process/io/stream::go-write-method-call",
            "conf": 0.65,
            "crit": 3,
            "desc": "Go Write/WriteAt method call",
            "spans": [
              [
                1305,
                15
              ]
            ]
          },
          {
            "id": "metadata/import/go/io::io",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports io",
            "spans": [
              [
                111,
                0
              ]
            ]
          },
          {
            "id": "metadata/import/go/time::time",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports time",
            "spans": [
              [
                134,
                0
              ]
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-1",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"the\"",
            "spans": [
              [
                158,
                0
              ]
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-2",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"and\"",
            "spans": [
              [
                636,
                0
              ]
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-3",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"that\"",
            "spans": [
              [
                608,
                0
              ]
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-5",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"for\"",
            "spans": [
              [
                731,
                0
              ]
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-6",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"with\"",
            "spans": [
              [
                252,
                0
              ]
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-7",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"this\"",
            "spans": [
              [
                235,
                0
              ]
            ]
          }
        ],
        "type": "go"
      },
      {
        "id": 10,
        "sha": "d7dcae5e115f1425f04cf387dc2138725dc19d2021e66dbeb208e86452c35a2e",
        "path": "github.com-platform-engineering-labs-formae-pkg-auth-v0.2.2-0.20260720143758-7c563cebd76d.zip!!github.com/platform-engineering-labs/formae/pkg/auth@v0.2.2-0.20260720143758-7c563cebd76d/version.go",
        "size": 445,
        "type": "go",
        "depth": 1
      },
      {
        "id": 11,
        "mol": "Md",
        "sha": "d8888e11ce1948a95c99dd41a2c200e12931e6fbf1047ef9a214076aee03633c",
        "path": "github.com_platform-engineering-labs_formae_pkg_auth@v0.2.2-0.20260720143758-7c563cebd76d.registry.json",
        "risk": 1,
        "size": 862,
        "type": "registry",
        "depth": 1
      }
    ],
    "omitted_files": 7,
    "rev": "9266e",
    "v": "8"
  }
}