{ "llm": { "conf": 0.44007924, "grade": "benign", "model": "Qwen/Qwen3.8-27B", "before": { "lvl": -1, "prob": 0.6568347, "class": "benign" }, "outcome": "benign", "interpretation": "legitimate domain list package" }, "ml": { "v": "7", "eng": "2.12.0-beta.3", "lvl": -1, "conf": 0, "mods": [ { "cls": 0, "raw": 0.6568347, "rte": "az", "prob": 0.6568347 }, { "cls": 0, "raw": 0.034643132, "rte": "az/npm", "prob": 0.034643132 } ], "prob": 0.6568347, "files": [ { "id": 0, "lvl": -1, "conf": 0, "prob": 0.6568347215652466, "type": "npm" }, { "id": 1, "lvl": -1, "conf": 0, "prob": 0.00001783172228897456, "type": "javascript" }, { "id": 2, "lvl": -1, "conf": 0, "prob": 0.00001424551010131836, "type": "json" }, { "id": 3, "lvl": -1, "conf": 0, "prob": 0.000043839216232299805, "type": "package.json" }, { "id": 4, "lvl": -1, "conf": 0, "prob": 0.000010271866813127417, "type": "markdown" }, { "id": 5, "lvl": -1, "conf": 0, "prob": 0.000009864568710327148, "type": "markdown" }, { "id": 6, "lvl": -1, "conf": 0, "prob": 0.00002434849739074707, "type": "javascript" }, { "id": 7, "lvl": -1, "conf": 0, "prob": 0.000007987022399902344, "type": "javascript" }, { "id": 8, "lvl": -1, "conf": 0, "prob": 0.000014454126358032227, "type": "registry" } ], "version": "v18.18", "analyzed_at": "2026-10-03T20:17:27Z" }, "path": "free-email-domains-1.9.23.tgz", "raw": { "files": [ { "id": 0, "mol": "O₂(S₅Xe)H₅(Cm₆Db₄F₂Po₂U)Md₂(InPa₁₀)", "sha": "9e9357ee76c95b0d455bd10064dca8e1be3f113719346297b9bac47c48a987f6", "path": "/home/gauntlet/.cache/gauntlet/blobs/9e9357ee76c95b0d455bd10064dca8e1be3f113719346297b9bac47c48a987f6/free-email-domains-1.9.23.tgz", "refs": [ { "to": "pkg:github/kikobeats/free-email-domains", "off": 0, "kind": "repository" } ], "risk": 57, "size": 58008, "type": "npm", "facts": { "metrics": { "file": { "size": 58008, "entropy": 8 }, "binary": { "peak_region_bytes": 58008, "peak_region_entropy": 7.84 }, "consistency": { "name_repo_mismatch": 0 } } }, "ident": { "name": { "value": "free-email-domains", "source": "npm.name", "verified": false }, "urls": [ { "url": "git+https://github.com/kikobeats/free-email-domains.git", "kind": "repository", "source": "npm.repository.url" }, { "url": "https://github.com/Kikobeats/free-email-domains", "kind": "homepage", "source": "npm.homepage" } ], "trust": "unsigned", "emails": [ "josefrancisco.verdu@gmail.com" ], "authors": [ { "url": "https://kikobeats.com", "name": "Kiko Beats", "role": "author", "email": "josefrancisco.verdu@gmail.com", "source": "npm.author" } ], "version": { "value": "1.9.23", "source": "npm.version", "verified": false }, "identifier": { "value": "free-email-domains", "source": "npm.name", "verified": false }, "description": { "value": "A comprehensive list of all free email domain providers", "source": "npm.description", "verified": false } }, "traits": [ { "id": "objectives/supply-chain/install-hook/remote-content::npm-install-hook-fetches-branch-tip-content", "conf": 0.96, "crit": 4, "desc": "Install hook fetches branch-tip remote content", "from": [ { "file": 3 }, { "off": 2375, "file": 6, "line": 119 } ], "uses": [ 23, 38, 40 ] }, { "id": "metadata/import/npm/fs/promises::fs/promises", "conf": 0.95, "crit": 3, "desc": "imports node:fs/promises", "from": [ { "file": 6 } ] }, { "id": "metadata/package/author/domain::npm-author-gmail", "atk": "T1195.002", "conf": 0.65, "crit": 3, "desc": "npm package author uses Gmail" }, { "id": "metadata/package/documentation/package-metadata::npm-name-matches-readme-heading", "conf": 0.9, "crit": 3, "desc": "README heading matches the npm package name" }, { "id": "metadata/package/files/archive-member::archive-js-member", "conf": 0.9, "crit": 3, "desc": "Archive member is a JavaScript file" }, { "id": "metadata/package/files/included::npm-package-scripts-member", "conf": 0.99, "crit": 3, "desc": "JavaScript under npm package scripts dir", "from": [ { "file": 6 } ] }, { "id": "metadata/package/files/included::package-json-basename", "conf": 0.95, "crit": 3, "desc": "Filename is package.json", "from": [ { "file": 3 } ] }, { "id": "metadata/package/files/included::postinstall-js-basename", "conf": 0.9, "crit": 3, "desc": "Filename is postinstall.js/cjs/mjs", "from": [ { "file": 6 } ] }, { "id": "metadata/package/files/package-json::files-array-present", "conf": 0.92, "crit": 3, "desc": "Package.json declares a files allowlist" }, { "id": "metadata/package/homepage::homepage-git-host", "conf": 0.9, "crit": 3, "desc": "Homepage points to major Git host" }, { "id": "metadata/package/repository::repo-url-git-host", "conf": 0.9, "crit": 3, "desc": "Repository identifies major Git host" }, { "id": "metadata/package/scripts/build::has-release-scripts-1", "conf": 1.0, "crit": 3, "desc": "Package has release script" }, { "id": "metadata/package/scripts/develop::has-git-hooks", "conf": 0.9, "crit": 3, "desc": "Package uses git hooks tooling", "from": [ { "file": 3 } ] }, { "id": "metadata/package/scripts/lifecycle::builtin-pipe-execute-benign-package-context", "conf": 0.99, "crit": 3, "desc": "Known-good package context for pipe-execute heuristic", "from": [ { "file": 3 } ], "uses": [ 52 ] }, { "id": "micro-behaviors/communications/email/address::google-consumer-email-domain-suffix", "conf": 0.55, "crit": 3, "desc": "Gmail consumer email domain suffix", "from": [ { "file": 4 } ] }, { "id": "micro-behaviors/communications/http/client/response-body::fetch-response-body-read", "conf": 0.9, "crit": 3, "desc": "JavaScript fetch reads response body", "from": [ { "file": 6 } ] }, { "id": "micro-behaviors/communications/http/client/response-body::js-response-text-read", "conf": 0.82, "crit": 3, "desc": "JavaScript reads HTTP response text", "from": [ { "file": 6 } ] }, { "id": "micro-behaviors/communications/http/download/write::script-fetches-and-writes-remote-content", "atk": "T1105", "conf": 0.94, "crit": 3, "desc": "JavaScript saves fetched remote content", "from": [ { "off": 2944, "file": 6, "line": 139 } ], "uses": [ 15, 31, 51 ] }, { "id": "micro-behaviors/communications/http/url/domain::js-remote-host-url", "conf": 0.75, "crit": 3, "desc": "Contains a hardcoded remote HTTP(S) URL", "from": [ { "file": 6 } ] }, { "id": "micro-behaviors/communications/http/url/endpoint::domain-collection-path-token", "conf": 0.92, "crit": 3, "desc": "domain collection URL path segment", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/communications/http/url/forge::github-raw-url", "conf": 0.92, "crit": 3, "desc": "GitHub raw-content URL", "from": [ { "file": 6 } ] }, { "id": "micro-behaviors/communications/http/url/forge::public-code-forge-url", "conf": 0.9, "crit": 3, "desc": "References a public code-forge URL", "from": [ { "file": 5 } ] }, { "id": "micro-behaviors/communications/http/url/github::raw-githubusercontent-any", "atk": "T1071.001", "mbc": "C0002", "conf": 0.7, "crit": 3, "desc": "raw.githubusercontent.com URL", "from": [ { "file": 6 } ] }, { "id": "micro-behaviors/communications/http/url/github::raw-githubusercontent-web-file", "atk": "T1071.001", "mbc": "C0002", "conf": 0.7, "crit": 3, "desc": "raw.githubusercontent.com web file URL", "from": [ { "file": 6 } ] }, { "id": "micro-behaviors/data/control-flow/module-exec::commonjs-module-reexport", "conf": 0.92, "crit": 3, "desc": "CommonJS module re-exports required package", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/data/control-flow/module-exec::module-leading-promise-chain-call", "conf": 0.84, "crit": 3, "desc": "Leading promise-chain call at module scope", "from": [ { "file": 6 } ] }, { "id": "micro-behaviors/data/serialize/json::json-stringify-identifier", "conf": 0.85, "crit": 3, "desc": "Serializes an identifier as JSON", "from": [ { "file": 6 } ] }, { "id": "micro-behaviors/data/source/syntax/array::js-array-sort-call", "conf": 0.72, "crit": 3, "desc": "Sorts a JavaScript array", "from": [ { "file": 6 } ] }, { "id": "micro-behaviors/data/string/split::js-split-call", "conf": 0.8, "crit": 3, "desc": "Calls JavaScript split()", "from": [ { "file": 6 } ] }, { "id": "micro-behaviors/fs/delete/file/command::npm-script-delete", "atk": "T1070.004", "mbc": "C0047", "conf": 0.85, "crit": 3, "desc": "Package script deletes files" }, { "id": "micro-behaviors/fs/write/file/full::node-write-file-promise-destructured", "conf": 0.9, "crit": 3, "desc": "Node writes a file via destructured import", "from": [ { "off": 2944, "file": 6, "line": 139 } ], "uses": [ 31, 51 ] }, { "id": "micro-behaviors/fs/write/file/full::write-file-call-target", "conf": 0.9, "crit": 3, "desc": "Calls an unqualified writeFile function", "from": [ { "file": 6 } ] }, { "id": "micro-behaviors/process/create/load/local::cjs-local-require-call", "atk": "T1059.007", "conf": 0.9, "crit": 3, "desc": "CommonJS local-module require call", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/process/interpreter/npm::npm-script-interpreter", "atk": "T1059", "mbc": "B0030", "conf": 0.85, "crit": 3, "desc": "Package script invokes a language interpreter" }, { "id": "micro-behaviors/ui/window/dom-access::ad-selector-token", "conf": 0.8, "crit": 3, "desc": "Ad-related CSS selector token", "from": [ { "file": 6 } ] }, { "id": "objectives/execution/interpreter/script/npm::npm-postinstall-script", "conf": 1.0, "crit": 3, "desc": "Declares an npm postinstall lifecycle hook" }, { "id": "objectives/supply-chain/install-hook/package/manifest::postinstall-hook-key", "conf": 0.85, "crit": 3, "desc": "Declares a package postinstall hook" }, { "id": "objectives/supply-chain/install-hook/package/manifest::postinstall-runs-node-script", "conf": 0.92, "crit": 3, "desc": "Postinstall targets local Node.js file" }, { "id": "objectives/supply-chain/install-hook/remote-content::hook-script-fetches-and-writes-remote-content", "conf": 0.94, "crit": 3, "desc": "Lifecycle hook-like script saves HTTP response", "from": [ { "off": 26, "file": 6, "line": 1 } ], "uses": [ 17, 58 ] }, { "id": "objectives/supply-chain/install-hook/remote-content::npm-install-hook-persists-remote-content", "conf": 0.95, "crit": 3, "desc": "npm install hook saves fetched remote data", "from": [ { "file": 3 }, { "off": 2375, "file": 6, "line": 119 } ], "uses": [ 38, 40 ] }, { "id": "objectives/supply-chain/install-hook/scripts/declaration::has-postinstall", "atk": "T1195.002", "conf": 0.85, "crit": 3, "desc": "Has postinstall script hook" }, { "id": "objectives/supply-chain/install-hook/scripts/declaration::postinstall-hook-declaration", "atk": "T1195.002", "conf": 0.96, "crit": 3, "desc": "Package declares a postinstall hook" }, { "id": "objectives/supply-chain/install-hook/scripts/import-chain::scripts-postinstall-executor-node", "atk": "T1195.002", "conf": 0.75, "crit": 3, "desc": "postinstall invokes node" }, { "id": "objectives/supply-chain/install-hook/scripts/local-script::postinstall-js-file", "conf": 0.84, "crit": 3, "desc": "JavaScript file named npm postinstall hook", "from": [ { "file": 6 } ] }, { "id": "supply-chain/install-hook/postinstall", "conf": 0.8, "crit": 3, "desc": "Package has 'postinstall' hook that runs during install" }, { "id": "metadata/import/npm/relative/1/domains/json::relative/1/domains/json", "conf": 0.95, "crit": 2, "desc": "imports ./domains.json", "from": [ { "file": 1 } ] }, { "id": "metadata/package/dependencies/manifest/count::npm-many-dev-dependencies", "conf": 0.7, "crit": 2, "desc": "npm manifest has many devDependencies" }, { "id": "metadata/package/dependencies/manifest/presence::npm-empty-dependencies-object", "conf": 0.95, "crit": 2, "desc": "npm manifest has empty dependencies object", "from": [ { "file": 3 } ] }, { "id": "metadata/package/dependencies/manifest/presence::npm-no-runtime-dependencies", "conf": 0.9, "crit": 2, "desc": "npm manifest declares no runtime dependencies", "from": [ { "off": 1384, "file": 3, "line": 63 } ], "uses": [ 47 ] }, { "id": "metadata/package/entrypoint::main-root-javascript-entry", "conf": 0.9, "crit": 2, "desc": "Root JavaScript main entrypoint" }, { "id": "metadata/package/files/included::npm-publish-root-manifest", "conf": 0.95, "crit": 2, "desc": "Manifest sits at npm publish root", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/fs/write/file/full::node-fs-promises-import", "conf": 0.95, "crit": 2, "desc": "Imports the Node fs/promises API", "from": [ { "file": 6 } ] }, { "id": "metadata/build/ecosystem::npm-logical-or-fallback", "conf": 0.95, "crit": 1, "desc": "npm script uses logical-OR fallback" }, { "id": "metadata/lang/natural::lang-english--atom-1", "conf": 0.8, "crit": 1, "desc": "English function-word token \"the\"", "from": [ { "file": 4 } ] }, { "id": "metadata/lang/natural::lang-english--atom-2", "conf": 0.8, "crit": 1, "desc": "English function-word token \"and\"", "from": [ { "file": 4 } ] }, { "id": "metadata/lang/natural::lang-english--atom-5", "conf": 0.8, "crit": 1, "desc": "English function-word token \"for\"", "from": [ { "file": 4 } ] }, { "id": "metadata/lang/natural::lang-english--atom-6", "conf": 0.8, "crit": 1, "desc": "English function-word token \"with\"", "from": [ { "file": 4 } ] }, { "id": "metadata/lang/natural::lang-english--atom-7", "conf": 0.8, "crit": 1, "desc": "English function-word token \"this\"", "from": [ { "file": 4 } ] }, { "id": "objectives/supply-chain/install-hook/scripts/hook-file::hook-script-filename", "atk": "T1195.002", "conf": 0.9, "crit": 1, "desc": "npm lifecycle hook-like filename", "from": [ { "file": 6 } ], "uses": [ 7 ] } ] }, { "ctx": [ { "b": "zeS%cy?kkgCYmOwBAnM/aAz4kB.L(cc){S2wn=r[x(m#AyiarhcN/x", "ln": 0, "col": 1, "line": 1 } ], "depth": 1, "facts": { "imp": [ [ "", "require" ], [ "", "./domains.json" ] ], "mbr": [ "module.exports" ], "tgt": [ "require" ], "metrics": { "ast": { "max_depth": 6, "call_count": 1, "node_count": 17, "member_count": 1, "max_member_depth": 2 }, "file": { "size": 43, "entropy": 4.4 }, "text": { "lines": 1, "top_char": 111, "space_count": 2, "char_entropy": 4.4, "unique_chars": 24, "top_char_null": 0, "import_density": 100, "string_density": 1, "top_char_ratio": 0.09, "avg_line_length": 42, "max_line_length": 42, "last_line_length": 42, "whitespace_ratio": 0.07, "identifier_density": 3, "max_whitespace_run": 1, "normalized_import_count": 1, "normalized_string_count": 1 }, "binds": { "count": 1 }, "binary": { "peak_region_bytes": 43, "peak_region_entropy": 4.4 }, "imports": { "count": 1, "relative": 1, "relative_ratio": 1, "third_party_count": 1, "third_party_ratio": 1 }, "strings": { "bytes": 14, "count": 1, "avg_length": 14, "max_length": 14, "path_count": 1, "avg_entropy": 3.24 }, "identifiers": { "count": 3, "unique": 3, "avg_length": 6.67, "max_length": 7, "min_length": 6, "avg_entropy": 2.54, "reuse_ratio": 1, "length_stddev": 0.47, "all_lowercase_ratio": 1 } } }, "id": 1, "mol": "H₂(DbOs)", "path": "/home/gauntlet/.cache/gauntlet/blobs/9e9357ee76c95b0d455bd10064dca8e1be3f113719346297b9bac47c48a987f6/free-email-domains-1.9.23.tgz!!package/domains.js", "pid": 0, "refs": [ { "to": "./domains.json", "off": 26, "file": 2, "kind": "local" } ], "risk": 3, "sha": "4aa108a35751b3fa2c8f59f4f8c7c6c16f210ef24733510fbd8e906606bde54c", "size": 43, "traits": [ { "id": "micro-behaviors/data/control-flow/module-exec::commonjs-module-reexport", "conf": 0.92, "crit": 3, "desc": "CommonJS module re-exports required package", "spans": [ [ 0, 42 ] ] }, { "id": "micro-behaviors/data/control-flow/module-exec::sole-require-passthrough-module", "conf": 0.93, "crit": 3, "desc": "Module body is only a require pass-through", "spans": [ [ 0, 43 ] ] }, { "id": "micro-behaviors/os/module/require::cjs-local-require-call", "conf": 0.9, "crit": 3, "desc": "CommonJS local-module require call", "spans": [ [ 17, 7 ] ] }, { "id": "metadata/import/npm/relative/1/domains/json::relative/1/domains/json", "conf": 0.95, "crit": 2, "desc": "imports ./domains.json", "spans": [ [ 25, 0 ] ] } ], "type": "javascript" }, { "depth": 1, "facts": { "metrics": { "file": { "size": 194187, "entropy": 4.51 }, "json": { "parse_limit_bytes": 76800 }, "binary": { "peak_region_bytes": 189067, "peak_region_entropy": 4.6 } } }, "id": 2, "path": "/home/gauntlet/.cache/gauntlet/blobs/9e9357ee76c95b0d455bd10064dca8e1be3f113719346297b9bac47c48a987f6/free-email-domains-1.9.23.tgz!!package/domains.json", "pid": 0, "risk": 1, "sha": "111aedc4d3798e96a45a52d79a39c747a21bc6ae6b1c2b8e29e01cc02ffce856", "size": 194187, "traits": [ { "id": "metadata/file/extension/identity::json-txt-md-basename", "conf": 1.0, "crit": 2, "desc": "JSON, text, or markdown filename extension" }, { "id": "metadata/file/extension/identity::web-asset-extension", "conf": 1.0, "crit": 2, "desc": "Common web or JSON file extension" }, { "id": "metadata/file/format/conformance::json-document-opening", "conf": 0.95, "crit": 2, "desc": "File begins with a JSON document", "spans": [ [ 0, 0 ] ] } ], "type": "json" }, { "ctx": [ { "b": "DKp(rb5Q?awG\u003ceTb4+\u003ebwI4FgvqfKfwn=r[x(m#oed9Hxb4Lnav@=p5BzkVhb03?\u003ck{fVQze:JbxK#75x)a5gy?W%jaA7\u003cmvqG:5w].D]az2y#x(1]5z/5]%zxJ[sz*2\u00269wPz\u0026oed9Hxb4$[iwPh6\u003cwG\u003ceTb4#7uAc15[fk20vxMW=pv@DiqokefWvR5$\u0026B1.cCwO0D8zddc{eO5^pvqfR2a$K6zar\u003e#uA=U@kzx.a:a#7Yge\u00262jbed9Hxb5H+5zx.a:b4LRevqfR2e]2CKed9Hxb4kRoxM4]niV@+RarR^Hb4UR1x(1$Oar\u003eMsB7F%7vqYN?B7obvC4CY8BWfORvqfKgv@Dided9HxarR\u003eCvqPN1iV]Rtx\u003e}Sfls\u003cOEB0rdxarR^Hb6v{xb03?\u003cxMOunB2\u003e%cyIvN5vR5$\u0026B1Q%vz6xrfaBL^FarR\u003erz/fVqx\u003c#jbz/P[yiV}SlarR^HDKp(rarR^Hb5Q?awG\u003ceTb1V@^zxI$#B8bY6z!T9myA+qparR^HarR\u003etzddc{b03?\u003cx)9{5kYy:PDtE\u003cVv@Did3lQDlaBL^FarR^HDKp(rarR^Hb5Q?awG\u003ceTb1VV-B0ap/A=-GR3lQDlarR^JwO\u003e\u003c\u0026y:7[.a#znmh8ElChy\u0026GVwPI*0A=:M?B7Gxke]CPFwPhEhe[X)uxMW=pv@Did3lQDlaBL^FarR^HDKp(rarR^Hb5Q?awG\u003ceTb1(u+y-(n!A+/}Aed9HxarR^Hb4UR1x(1$Oar\u003ePfA+)vwz/PSskXB}xx(2ziz/3W9arR^HEjLZFarR!N3lQDlarR^JzEEx[b02", "ln": 0, "col": 1, "line": 1 }, { "b": "3lQDlarR^JwO\u003e\u003c\u0026y:7[.b64yckYZTWA+P2ov@A#xyA:9darR!P3lQD%ed9Hxb64mlz/YSmz/QaEiV@+RarR^Hb6n9HwG\u003ceTb4\u003eRia$K6zarR^JB-IpxiV]RVx(\u003e\u003esBAzFyiXJd0x([3hvLheez7/WsyJ0V[vruMzw].D]eOe^cx(2wiz/5]%zGvByx(\u003eKaarV7-3lQDnvS=s8b03\u0026[3lQDlar\u003e@Gy:7[.b4#7uAc15[fk20vxMW=pv@DiqokefWvR5$\u0026B1.cCwO0D8zddc{eO5^pvqfR2fkkGGB.bRr3lQEted9Hxb5p+nCw?IjB0rT/tm8F}arR\u003eqy\u0026r*0a$K6zarR^Jwn=r[x(kaC3lQDlar\u003eumzddc@B0rdxarR^Hb4UR1x(1$A3lQDlar\u003eAoA=00K3lQDlar\u003eArwO05p3lQDlar\u003eGwvSMHbBrSmyarR^Hb5H+5y:6ieaycJ9arR\u003eswPhi#wmYT*x\u003equfiV@=$ed9Hxb4Lndl$HsGzE^r@v}/H}b03\u0026[3lQDlar\u003c6Xz/6u9BzLVeBt4cux^bOXb5yXfwPI@qed9HxarR\u003c[v@Dj3x([f9zGEKwz/ff3xdWRizGYPeBzkVhvqEbGar\u003eSgBy/Jna$K6zarR^Jv}^JlBZ/f3B7=:Uar\u003eSgBy/Jna$K6zarR^Jw[=c]Aa9l(b03?\u003cy*?A%B95PS3lQDlar\u003eDjBs*{zBzbPkB1H)rx^bOXb5yXfwPI@qed9HxarR\u003evx([3hvL8k7zE)\u0026%By^4AwO+{^B7DKRar\u003eSgBy/Jna$K6zarR^JzeS]$viN-Pb5yXfwPI@qed9HxarR\u003eCvqZ0nB97\u00266wN(#Car\u003eSgBy/Jna$K6zarR^JB7/Gmy?a.Jar\u003eSgBy/Jna$K6zarR^JB7]Ggy?khhx(\u003e}uz/oAjb03?\u003cy*?A%B95PS3lQDlar\u003e(GvqYQ:A+3vPar\u003eSgBy/Jna$K6zarR^JB97\u0026dwmoH?eP$YCB7]Mgb03?\u003cy*?A%B95PkarV7-3lQDnwO#c{zE)(kiV@+RarR^Hb5RsfwG\u003ceTb0Fdjf/Qu:arV7-3lQDnw[=6)B0rT/tm8F}arR\u003esz/5]%zGvBBB0rdxarR^Hb4LRevqfR2e]2DCzxZRsarR^Hb57}9wQ2?re{8dUed9HxarR\u003eHv@=p5BAnSkarT@v3lQDnB7ol8AccdBiV@+RarR^Hb4CC2vqWnIar\u003e\u0026yat4RCaz#adwNxp)wozZ1B0rdxarR^Hb4CLeBAh88B-.LxB0rT/a$dtFCPZTkBs*{zBzbPkB1H)rx=[-Haz#dyazbt9wPh6/yAK@JazkzgayO!\u003eaAg+0yHH\u003c!e]2DCzxHnMazkzgay/tbze18meO#QTvS=y3wi7\u0026yz/fVqx\u003c#jbz/P[Dat2f.z.lczA+PchdiK1=aARTDwG\u0026VjarR^Hb5y$hBrS:*b6d\u003cmzE^f@wfJMiarR^Hb5?EwBzkSlByx04b03?\u003czF%5%aAI4kx(Ffnfk$\u0026JBzkSlByx04e]tuAa$K6zarR^JAbP/tA+f5#vrl07iV]R:Abu.rB-5sxwO+{^B7EyOvp%T7cmf\u003cMAbu.rB-5sxwO+{^B7EyBx([3hvJW0AasH-lePt\u0026wy?W%7aBFLVzG6CnAckSax(^@geIgyvv}x.5j-CKMy?Wxda$K6zarR^JAb]JiwPI@qiV]R:Abu.rB-5srx(n2ped9HxarR\u003eGwO+{^B7DKRar\u003e(GvqYQ:A+3+BwPz\u003caz/cWHviNlfarR^Hb64mhwNPT\u003ei+JeGxMW=diV]RVx([3hvL8k7zE)\u0026%By^4AwO+{^B7DKD3lQDlar\u003e\u0026qy?m3@wJB{wxlbmTar\u003eDjBrCKBB7=WFeOn{qy\u0026sIHByw*6aA8pmxk8lanjt*ji=eqDBy/Fped9HxarR\u003eIwPI@qiV]R-z!0D?a{]CnEjLZFar\u003eSov}xL0wG\u003ceTb27Tda$K6zar\u003erlzeB0ey?W^eb03\u0026[3lQDlar\u003exwBy/u2B0rT/tm8F}arR^Hb0YTRzeB0ey?W^efjO{rw[+)fv@DmdwO#Q7z/f01a{]CnarT@v", "ln": 1014, "col": 37, "line": 42 } ], "depth": 1, "facts": { "imp": [ [ "latest", "standard-version" ], [ "latest", "nano-staged" ], [ "latest", "@commitlint/config-conventional" ], [ "latest", "finepack" ], [ "latest", "git-authors-cli" ], [ "latest", "github-generate-release" ], [ "latest", "mocha" ], [ "latest", "@commitlint/cli" ], [ "latest", "ci-publish" ], [ "latest", "standard" ], [ "latest", "simple-git-hooks" ], [ "latest", "should" ] ], "metrics": { "file": { "size": 3029, "entropy": 4.57 }, "binary": { "peak_region_bytes": 3029, "peak_region_entropy": 4.54 }, "consistency": { "name_repo_mismatch": 0 } } }, "id": 3, "ident": { "name": { "value": "free-email-domains", "source": "npm.name", "verified": false }, "urls": [ { "url": "git+https://github.com/kikobeats/free-email-domains.git", "kind": "repository", "source": "npm.repository.url" }, { "url": "https://github.com/Kikobeats/free-email-domains", "kind": "homepage", "source": "npm.homepage" } ], "trust": "unsigned", "emails": [ "josefrancisco.verdu@gmail.com" ], "authors": [ { "url": "https://kikobeats.com", "name": "Kiko Beats", "role": "author", "email": "josefrancisco.verdu@gmail.com", "source": "npm.author" } ], "version": { "value": "1.9.23", "source": "npm.version", "verified": false }, "identifier": { "value": "free-email-domains", "source": "npm.name", "verified": false } }, "mol": "O₂(S₃Xe)H₂(FPo)Md(Pa₈)", "path": "/home/gauntlet/.cache/gauntlet/blobs/9e9357ee76c95b0d455bd10064dca8e1be3f113719346297b9bac47c48a987f6/free-email-domains-1.9.23.tgz!!package/package.json", "pid": 0, "refs": [ { "to": "pkg:github/kikobeats/free-email-domains", "off": 1109, "kind": "repository" }, { "to": "domains.js", "off": 1869, "file": 1, "kind": "local" } ], "risk": 10, "sha": "d131d5e35281e0b1ff6d9982a284151d2d062c198010670f51572a6d81f7f153", "size": 3029, "traits": [ { "id": "supply-chain/install-hook/postinstall", "conf": 0.8, "crit": 3, "desc": "Package has 'postinstall' hook that runs during install", "spans": [ [ 2162, 28 ] ] }, { "id": "metadata/build/ecosystem::npm-logical-or-fallback", "conf": 0.95, "crit": 1, "desc": "npm script uses logical-OR fallback", "spans": [ [ 1941, 0 ] ] }, { "id": "metadata/package/author/domain::npm-author-gmail", "atk": "T1195.002", "conf": 0.65, "crit": 3, "desc": "npm package author uses Gmail", "spans": [ [ 240, 29 ] ] }, { "id": "metadata/package/dependencies/manifest/count::npm-many-dev-dependencies", "conf": 0.7, "crit": 2, "desc": "npm manifest has many devDependencies", "spans": [ [ 1406, 0 ] ] }, { "id": "metadata/package/dependencies/manifest/presence::npm-empty-dependencies-object", "conf": 0.95, "crit": 2, "desc": "npm manifest has empty dependencies object", "spans": [ [ 1384, 0 ] ] }, { "id": "metadata/package/entrypoint::main-root-javascript-entry", "conf": 0.9, "crit": 2, "desc": "Root JavaScript main entrypoint", "spans": [ [ 200, 0 ] ] }, { "id": "metadata/package/files/included::npm-publish-root-manifest", "conf": 0.95, "crit": 2, "desc": "Manifest sits at npm publish root" }, { "id": "metadata/package/files/included::package-json-basename", "conf": 0.95, "crit": 3, "desc": "Filename is package.json" }, { "id": "metadata/package/files/package-json::files-array-present", "conf": 0.92, "crit": 3, "desc": "Package.json declares a files allowlist", "spans": [ [ 1853, 47 ] ] }, { "id": "metadata/package/homepage::homepage-git-host", "conf": 0.9, "crit": 3, "desc": "Homepage points to major Git host", "spans": [ [ 112, 47 ] ] }, { "id": "metadata/package/repository::has-repository-field", "conf": 0.9, "crit": 2, "desc": "package.json declares repository metadata", "spans": [ [ 1062, 0 ] ] }, { "id": "metadata/package/repository::has-repository-url", "conf": 0.85, "crit": 2, "desc": "package.json declares a repository URL", "spans": [ [ 1101, 0 ] ] }, { "id": "metadata/package/repository::repo-url-git-host", "conf": 0.9, "crit": 3, "desc": "Repository identifies major Git host", "spans": [ [ 1101, 55 ] ] }, { "id": "metadata/package/scripts/build::has-release-scripts-1", "conf": 1.0, "crit": 3, "desc": "Package has release script", "spans": [ [ 2360, 19 ] ] }, { "id": "metadata/package/scripts/develop::has-git-hooks", "conf": 0.9, "crit": 3, "desc": "Package uses git hooks tooling", "spans": [ [ 1717, 18 ] ] }, { "id": "metadata/package/scripts/develop::has-test-script", "conf": 1.0, "crit": 2, "desc": "package.json declares a test script", "spans": [ [ 2512, 0 ] ] }, { "id": "micro-behaviors/fs/delete/file/command::npm-script-delete", "atk": "T1070.004", "mbc": "C0047", "conf": 0.85, "crit": 3, "desc": "Package script deletes files", "spans": [ [ 1941, 19 ] ] }, { "id": "objectives/supply-chain/install-hook/scripts/import-chain::scripts-postinstall-executor-node", "atk": "T1195.002", "conf": 0.75, "crit": 3, "desc": "postinstall invokes node", "spans": [ [ 2162, 28 ] ] }, { "id": "micro-behaviors/process/interpreter/npm::npm-script-interpreter", "atk": "T1059", "mbc": "B0030", "conf": 0.85, "crit": 3, "desc": "Package script invokes a language interpreter", "spans": [ [ 1941, 28 ] ] }, { "id": "objectives/execution/interpreter/script/npm::npm-postinstall-script", "conf": 1.0, "crit": 3, "desc": "Declares an npm postinstall lifecycle hook", "spans": [ [ 2162, 28 ] ] }, { "id": "objectives/supply-chain/install-hook/package/manifest::postinstall-hook-key", "conf": 0.85, "crit": 3, "desc": "Declares a package postinstall hook", "spans": [ [ 2162, 28 ] ] }, { "id": "objectives/supply-chain/install-hook/package/manifest::postinstall-runs-node-script", "conf": 0.92, "crit": 3, "desc": "Postinstall targets local Node.js file", "spans": [ [ 2162, 28 ] ] }, { "id": "objectives/supply-chain/install-hook/scripts/declaration::has-postinstall", "atk": "T1195.002", "conf": 0.85, "crit": 3, "desc": "Has postinstall script hook", "spans": [ [ 2162, 28 ] ] }, { "id": "objectives/supply-chain/install-hook/scripts/declaration::postinstall-hook-declaration", "atk": "T1195.002", "conf": 0.96, "crit": 3, "desc": "Package declares a postinstall hook", "spans": [ [ 2162, 28 ] ] }, { "id": "metadata/package/dependencies/manifest/presence::npm-no-runtime-dependencies", "conf": 0.9, "crit": 2, "desc": "npm manifest declares no runtime dependencies", "uses": [ 4 ], "spans": [ [ 1384, 0 ] ] }, { "id": "metadata/package/scripts/lifecycle::builtin-pipe-execute-benign-package-context", "conf": 0.99, "crit": 3, "desc": "Known-good package context for pipe-execute heuristic", "uses": [ 1 ], "spans": [ [ 1941, 120 ] ] } ], "type": "package.json" }, { "ctx": [ { "b": "ra]?=o?wqboLF0FzGxwic@0ojdgczHz/x#xx\u003eIa3aI$92gb7BwawlA:zY?wTvruMkjzF!QwOb%\u003ezEWy4v@A#ywPzs7kXB}xx(2ziz/4VXc#iKjz^)o^BAo6Az/3{g3q+qOze16jx(v(ix(+zgwPzu\u003eC{3:uvqZf#wgO\u003cnA+e/8z!pb4xKL{]wH[%CzY\u0026FaC{46qA=VepaA7.hvqfQ[zF782ay/teC)XF4aARphB0bKxw]@l9A+cw4zE:\u003e#B8#nfx\u003c(9{wftA3v%8T1zGGrex(v(iw[=6)B08(MxK@qgq/un\u0026CvtJ6a$k5=Bz\u0026pjwNPxZx(k5nxK@q+z!s9nvrb{4Cwhejz/{dAA+frlA+P39x(v(uazC.6y\u0026%o5zF78ox([3bB-X:xx(dNavruj4zxK4mwGV2cxj#yd3uQheB-RaBay/teC}p7Pz!9M]C}p7PwPzA{efF[OvR/+1xE\u003eopx(!xpx\u003c#jbwH[%BBZ/f3v}xL0wH[%jzE+zsAV/Bmy?%C*z/xA4B0bykaARpdax9h\u003cBA.elwH[%jzE:(izY\u003c1gA=2JjaAg[jB8L@qaARJACw7]iaARpdax9h\u003cBA.elwGUYd3taB3zFsf9wN({9zY\u0026OeaAIDLaAIWmygQ)%aARJABzbkdw]zH4z*b]kxcpY5zE^E6x(v)giTMi[xK@q{vScB3ay/teD2^RixMLwmz//Y6wGUA0wft#cx(+zowPzT4B8#5lzxJ?nBzkk@aAIj8y?$k6wGUY8v@co#wN(]$zvf/*y-)kaAa@)8aA8oyB9g@kByx6ex\u003c\u003e*2AbP=sx(v)gaA7\u003cmBzbkdq/un\u0026CvtJ6e^.}+njsU1pEXq+k#Hb]nMc:dqCQs+l}6G^b0/cInMc/:axIclnkAk+axH\u003cbqBa5SsS*Hfave+9awkp3l[xDHswR):q=s/mqvk#\u0026p!TCHl[xDLpd4YPl}Hczavo7cawLZiawtv3nMnbDaxhbVr7GC2s3Y.Zk#7xJmn\u003es8mJ+z]qBr#vpe\u003cICnLzYPsU6[HnMnCNq=s/dpF@r3aw+v4r7PCSoHhM0p/Qy\u0026pG6X8k#6/\u003cpesRRpdwbMpdE-Emnu/maw2rJper03rZ/+.ax7/%oIuNdnjr\u003eKrA8H+qD1YlqxOt5p*3W/m[uP4nkz]Emn^5blpA1\u003cnKkWpmiC5}qxOn2sS*79k$K^4avFH\u0026k$svxawU(TpGf\u003eNqvl8?k%!dpnMn?zaxI95r7GCQaw2rJk#5K*lSuSMp9rt4avw}1r8M1Hr4Gd\u003epF$dmpF@rhr7GCQs4MsVefEkRnMehQm\u003c7o0pFAwEpGpvppEVE5qxOLaavw}1pdmJHnL-87s4MvZaxg)2ax869r98v-miCx7axg)2axqueawU(TpGf\u003eNqxOv@k$\u003c\u003cBm]HK4p6%@\u003emiCJ8mPrCPqBJhB", "ln": 0, "col": 1, "line": 1 } ], "depth": 1, "facts": { "metrics": { "file": { "size": 1124, "entropy": 5.16 }, "binary": { "peak_region_bytes": 1024, "peak_region_entropy": 5.16 } } }, "id": 4, "path": "/home/gauntlet/.cache/gauntlet/blobs/9e9357ee76c95b0d455bd10064dca8e1be3f113719346297b9bac47c48a987f6/free-email-domains-1.9.23.tgz!!package/LICENSE.md", "pid": 0, "risk": 1, "sha": "fd7dfd4301e4377aa912ef30758f99d760f24b4ec86e1852a1ce3bce35754e3f", "size": 1124, "supp": [ { "by": [ { "id": "path" } ], "id": "well-known/tool/development/vcs/github-web::github-repo-fetched-path", "crit": "notable", "kind": "unless" } ], "traits": [ { "id": "micro-behaviors/communications/email/address::gmail-com-email-domain-suffix", "conf": 0.55, "crit": 3, "desc": "Email address suffix @gmail.com", "spans": [ [ 72, 10 ] ] }, { "id": "metadata/lang/natural/vocabulary/function-word::lang-english--atom-1", "conf": 0.8, "crit": 1, "desc": "English function-word token \"the\"", "spans": [ [ 0, 0 ] ] }, { "id": "metadata/lang/natural/vocabulary/function-word::lang-english--atom-2", "conf": 0.8, "crit": 1, "desc": "English function-word token \"and\"", "spans": [ [ 195, 0 ] ] }, { "id": "metadata/lang/natural/vocabulary/function-word::lang-english--atom-5", "conf": 0.8, "crit": 1, "desc": "English function-word token \"for\"", "spans": [ [ 819, 0 ] ] }, { "id": "metadata/lang/natural/vocabulary/function-word::lang-english--atom-6", "conf": 0.8, "crit": 1, "desc": "English function-word token \"with\"", "spans": [ [ 1060, 0 ] ] }, { "id": "metadata/lang/natural/vocabulary/function-word::lang-english--atom-7", "conf": 0.8, "crit": 1, "desc": "English function-word token \"this\"", "spans": [ [ 181, 0 ] ] } ], "type": "text" }, { "ctx": [ { "b": "boQPswO0D8zddc{eO5^pvqfR23jm}XoKS0:aA?spB7]Mgt{%xdBz#pZfe43Rxd!msx\u003eq9\u003eB1RfBfk20vxMW=qByw/nokefWvR5$\u0026B1.cCwO0D8zddc{eO5^pvqfR2e]#hGkxy{(y?k+wy*?AqB8=thA+cWbtoNiCp!-6hByxolB6QhcBAzFyiXJd2zd+FxxLz3]wofwqz.D0Ez7/Bpfj]lowI4FgvqfKfwn=r[x(m#AB9qgXB98XzwJ:Twvrs8xADLYgwHQ[kxMOunB2\u003e%cCxXl-zG6DcB1RxKxd[jjv@2H=wImUowO0D8zddc{eO5^pvqfR2dgczCavyo(vru6\u003eaz++kBrCHlazbU9wGUA0wftz%B8V5svpB4:az2y#x(1]5z/5]%zGu}jz/M$wx\u003eIsaA3e+by\u0026\u003clex(mMmaz+Q$wft(mvqGU1C}p7DzE:\u003e#vS=:6aAhvjC4CMkx(v(w3jn15axJl4aA.:pazC{83n0w!y\u0026r*0aARgiAbP=9A^n^CAV/EqA=legCvt+tx(mx#CX7}swoz{bzF78kx\u003eIsaA4RFHaw#=YBZ[#9w)]E^azbLjz6i[xvR]?2B7]MgB1N!KawloSA3dICo^0\u003eZwftD2vqfK2Cw?Iqw]8yfB0a$ewNPE/AXmXabo[s5zGx]dy?%B=u%)wKvrl8?bP{#zz6iLgB97\u0026by-)tgwO0D8zddc{eO5^pvqfR2at2f^vrMh?u%)vH3l{=rrDzOYwEn=Lu%).\u003c3s!0(B95KpA+e/Jzddc{l#M{Jx(m#mjS[=RADL#owHF{rA+e/lwO\u003e\u003c\u0026y+ogozddc@B0\u0026yz3tar\u0026wKQDAx(3gQzddc@B1RfAv@co#wPGmExkI6\u003ey+xjoz6{+Pfe1Chj%j@/B.7[(A+e/Jzddc{l#M{Jx(m#Ax(mA%B.268c)%pUB-G6zz/6D4zH0\u003cAz/3\u003cJatkw\u003cjW702vqH0@3sEmH3jn15axrw\u003evru66wmoN*3jpfGu$9L=xBl1czF%5%aAI4kx(Ffnfk$\u0026JBzkSlByx04e]tuA3sEmH3jn15aw#=!vru6\u003e3jnvctv?UWx(2wuA=lbnwmY!5t{%xdBz#pZfe3%LBzb/ae[n*pfjXTmxMW)bB966Dzddc{ePt-GC4\u003eF#A=SVL\u0026^^jnrbVZ#gIXayz/6ufzxJIcvqfL0ayYQsl2paSvixP0zFH\u003ci3l{=roLF0FzGxv@3mWJqA+e/lwO\u003e\u003c\u0026y+ogozddc@B1eTZ.L[UZokefWavoTFBAp.oxMOunB2\u003e%cyIvN5vR5$\u0026B1Q%vz7d1UA+f5#vrl0\u003caA.NjwPw]nxK@q\u003co?wq\u0026c$)ZAAc15[fk20vxMW=pv@DiqokefWvR5$\u0026B1.cCwO0D8zddc{eO5^pvqfR2fjF:ovLqObB97#lfha@8mnu=Ie]tbFawuGVwO#N2e\u003c9P-j{\u003cO#BzbPkwN(](zE:(bvqfR3vqfQ\u003cwftubawlA:zY?wTvruMkCwhejaztt5A3e+kz/3R3v@DmbA+P09Bz(hvt{%xdBz#pZfe3%LBzb/ae[n*pfh31{z^)o^BAo9EA+e/lwO\u003e\u003c\u0026y+ogozddc@B1.3wzGG]kvS=^hA=SVZ3jn%ttwE}*z^)o^BAo6Az/5=dxMOunB2\u003e%cyIvN5vR5$\u0026B1Q%vz7cQAW\u0026!gPBvZK-ax}97x\u003e}Sfls\u003cOEB6QhcBAzFyiXJd0x([3hvLheez7!K@yJ0V[vruMtaI$PgsrH*kokefWvR5$\u0026B6QhcBAzFyiXJdhe[n*pfh31{z^)o^BAn(r", "ln": 0, "col": 1, "line": 1 } ], "depth": 1, "facts": { "metrics": { "file": { "size": 1400, "entropy": 5.13 }, "text": { "lines": 44, "top_char": 101, "digit_ratio": 0, "space_count": 94, "char_entropy": 5.13, "unique_chars": 73, "top_char_null": 0, "top_char_ratio": 0.08, "avg_line_length": 30.82, "max_line_length": 172, "non_ascii_ratio": 0.01, "empty_line_ratio": 0.36, "last_line_length": 137, "long_token_count": 1, "whitespace_ratio": 0.1, "line_length_stddev": 45.95, "max_whitespace_run": 1 }, "binary": { "peak_region_bytes": 1400, "peak_region_entropy": 5.06 } } }, "id": 5, "mol": "H(Cm)Md", "path": "/home/gauntlet/.cache/gauntlet/blobs/9e9357ee76c95b0d455bd10064dca8e1be3f113719346297b9bac47c48a987f6/free-email-domains-1.9.23.tgz!!package/README.md", "pid": 0, "risk": 3, "sha": "7b01909d664e65f7f35d04d4754b989c4c3195317de42d4a0a22b6102e168ee6", "size": 1400, "traits": [ { "id": "metadata/file/naming::uppercase-readme-md-basename", "conf": 1.0, "crit": 3, "desc": "Basename is uppercase README.md" }, { "id": "metadata/file/profile/markup::at-least-four-markdown-section-headings", "conf": 0.97, "crit": 3, "desc": "At least four Markdown section headings", "spans": [ [ 374, 13 ], [ 516, 10 ], [ 581, 8 ], [ 766, 14 ], [ 826, 10 ], [ 945, 10 ] ] }, { "id": "metadata/file/profile/markup::markdown-heading-before-fenced-block", "conf": 0.98, "crit": 3, "desc": "Markdown-style heading precedes a code fence", "spans": [ [ 516, 15 ], [ 581, 13 ], [ 766, 19 ] ] }, { "id": "micro-behaviors/communications/http/url/forge::public-code-forge-url", "conf": 0.9, "crit": 3, "desc": "References a public code-forge URL", "spans": [ [ 858, 19 ] ] }, { "id": "metadata/lang/natural/vocabulary/content-word::english-edit-verb-token", "conf": 0.88, "crit": 1, "desc": "English edit-action verb token", "spans": [ [ 769, 0 ] ] }, { "id": "metadata/lang/natural/vocabulary/function-word::lang-english--atom-1", "conf": 0.8, "crit": 1, "desc": "English function-word token \"the\"", "spans": [ [ 1035, 0 ] ] }, { "id": "metadata/lang/natural/vocabulary/function-word::lang-english--atom-2", "conf": 0.8, "crit": 1, "desc": "English function-word token \"and\"", "spans": [ [ 286, 0 ] ] }, { "id": "metadata/lang/natural/vocabulary/function-word::lang-english--atom-5", "conf": 0.8, "crit": 1, "desc": "English function-word token \"for\"", "spans": [ [ 315, 0 ] ] }, { "id": "metadata/lang/natural/vocabulary/function-word::lang-english--atom-6", "conf": 0.8, "crit": 1, "desc": "English function-word token \"with\"", "spans": [ [ 1168, 0 ] ] } ], "type": "markdown" }, { "analysis_gaps": [ "flow-graph-limited" ], "ctx": [ { "b": "x(d*cA=-BJaA}\u003cuBy^{Qy?j-qazbUjz6gizz!9Auw]/RAA=k/eB7Gzu3jpoYzGx[xq+{y\u003elQ:]@jS)@oarV1rarR^HzEEx[iV]!vBZ!o*z/^ahy\u0026r*0wN(]]z/5]%zGvfR3lQDlaA.ZviV]!-BAzFyiXJc#e[/xpB8V5tB-Rbmv@DmbwO#PDfFmlOBt4rIvRfWmgb}6BgDvfyo\u003c@6TwPRT7xd(}\u0026vpQ@Svq{shA+c[oA+e/lwn=r[x(m#zga)6TB%^RtaBL^FarV1rarR^HzEEx[iV]!qvrlKbwGUI$B8V5svpB4:az2y#x(1]5z/5]%zGvfR3lQDlaA.ZviV]!-BAzFyiXJdbvrTtpx([3hvS=:6A:%39By/uie[n*pfjOBiBzLIwwnca7z/Yt@y?khfzddc{eO5^pvqfR2fkUcsBy/FCwnca7z/Yt@y?khfzddc{eO5^pvqfR2e{8tWcKH$sEjLZFaBsCrarR!AvqPNpasxM\u003eB8V5svpB4:az2y#x(1]5z/5]%zGu}fy\u0026r*0y?W%jcObPEarR!HA+)=VcUNQzAc15[flgGBe[X)uxMW^bB7Gx4z/fVdzGEHvz/4drx(!liB75J]wI4FgvqfKfwn=r[x(m#Bwnca7z/Yt@y?khfzddc{eO5^pvqfR2fkUcizzbKmB8V5svpB4:uUa7.x(4c=y\u0026r*0y?W%je[n*qw*W{daBKP53jnBodJ?2/wncd1z/f01ay]zcvqfR2az#ataAhvjB7GlhazCZoBzbkdrz(HkdLzcsz/fSravG11k$K*IauZ\u0026K3lQDsghgDqe]ClxcObPEasyPsvq6vbzE)]xz/NEBA3)gzarS4uBUmfxz6{\u003ewarS4uB-heeePbcwe]2tMed9HxcT{J", "ln": 0, "col": 1, "line": 1 }, { "b": "e]2tMed9HxcWGive]CkMyh+Kct)Z{Gz/fSraARTrz6g$:By/Ysau.[hBy/Yse]\u003eJxy***+c[![iB1qSyB1nH?xdLeMcN/xfv@DmaBrCTkzFsibDsXiZaARgtBrA.g3lQEkwQ5q7arR^He]$#Fx(\u003e:Rtp:2%t}Y?t3lQDlatdItA42*Gx(bpaarR^He[O*lBy/Fvwn=r[x(k4Rj%jxOzddc@asnATa.kIdvqfQiB97\u0026hBApI$Bz96Ibps]?3jpi.D2vamw{503BzkVhazbhbv}X!VB-H#6asIqHB-H#6diJ%AarUfjzGx[xA+fqmjS[fSvqf*aw[u6]xEE}uB-H#6e{hhJdgcz8azCBgc)rRxB1RxDdiJ%AarR^HBzbYkCoy^mCoxs{A=k$Du@.8MvR/P#Bz\u0026plwPRA}as8qPz/{8gwId\u003eezdObrc)TdWwPGFBByxolBa2GBdgdguEf{r7ay/tcB95KDwQ5qtjS[fSvqf*aA+fqABy/Ysc[bGgarUxgasItyCYUMVByxiiB606$xECk\u003caW/9[r9r3^azt\u003ely:QUOE0^5UwQ5qHx(mA%B.268c)}b\u003cBzU?wdjDx^3lQDlaARpqz*9swwP]m=A=M8sc$2}:v}xv$wN(]Or834ex(n0lwNP9(z!pb5z/5]%zxJ+fB95Kpz/M%CDVKaFA:@VkzEEx[EpaGharV7t3lQEiwPS6nzxK1ezFsibDsXHDwQ5qC3vJl*vrlZiv\u003c2xazEW^5z/cXmvqfQ4c[co=3lQE3z/fSraAIEzA:@VGz/5]%zGu{-ayPF5x(\u003eE]A=k/eB7D$jy?$H#pGppWmn\u003e*Qvq)SbwPRA}q/u/0v}v8r3lQE3z/fSray]zcvqfR2auZ\u0026+wP]m}wPPtwz/{8gwKHDNvqfR2e[O{dBsnN!3lQE6z/M%Gv@DmaBrCajzddc@aA7\u003cml@cJynLShkay]zcvqfR2e[5p3c$EmkvqfQd3lQE3z/fSraAIEwBy!#9jS)4hA::kCw].*bc$EmkvqfR2dk2WWA=-YU3lQE1CvticaA}\u003cuBy^{Qy?k1xwn=r[x(m#AyiarhcOcxjq+{dvB98CpzF9V}C{)-LA=+(6efF?My?$TBgasTVEf{r#vqfQcdk2asByO#jwPz*fAV^Ieay/tcB8L(ae[G6zz/NmqA=M8sdiK1=aAhvtv}x.5e[GowBsn\u003c)dgc", "ln": 2115, "col": 15, "line": 106 } ], "depth": 1, "facts": { "imp": [ [ "", "text.replace" ], [ "", "text.split.map.filter" ], [ "", "text.split.map" ], [ "", "text.split" ], [ "", "domain.startsWith" ], [ "", "fetch" ], [ "", "Error" ], [ "", "res.text" ], [ "", "text.startsWith" ], [ "", "text.includes" ], [ "", "Error" ], [ "", "sanitize" ], [ "", "Promise.all" ], [ "", "SOURCES.map" ], [ "", "Set" ], [ "", "sourceDomains.flat" ], [ "", "domains.add" ], [ "", "Array.from.sort" ], [ "", "Array.from" ], [ "", "writeFile" ], [ "", "JSON.stringify" ], [ "", "main.catch" ], [ "", "main" ], [ "", "console.error" ], [ "", "process.exit" ], [ "", "node:fs/promises" ] ], "mbr": [ "Array.from", "Array.from.sort", "JSON.stringify", "Promise.all", "SOURCES.map", "console.error", "domain.startsWith", "domains.add", "main.catch", "process.exit", "res.ok", "res.status", "res.text", "source.name", "source.url", "sourceDomains.flat", "text.includes", "text.replace", "text.split", "text.split.map", "text.split.map.filter", "text.startsWith" ], "tgt": [ "Array.from", "Array.from.sort", "Error", "JSON.stringify", "Promise.all", "SOURCES.map", "Set", "console.error", "domain.startsWith", "domains.add", "fetch", "main", "main.catch", "process.exit", "res.text", "sanitize", "sourceDomains.flat", "text.includes", "text.replace", "text.split", "text.split.map", "text.split.map.filter", "text.startsWith", "writeFile" ], "funcs": [ [ "text", 2151 ], [ "text", 2208 ], [ "domain", 2271 ], [ "fetchSource", 2317 ], [ "main", 2699 ], [ "error", 3019 ] ], "metrics": { "ast": { "op.lor": 2, "op.land": 1, "op.lnot": 2, "max_depth": 12, "call_count": 25, "node_count": 906, "member_count": 22, "op_density.lor": 0, "op_density.land": 0, "op_density.lnot": 0, "max_array_length": 88, "max_member_depth": 4 }, "file": { "size": 3069, "entropy": 4.92 }, "text": { "lines": 142, "top_char": 39, "digit_ratio": 0.01, "space_count": 368, "char_entropy": 4.92, "unique_chars": 80, "top_char_null": 0, "import_density": 0.7, "string_density": 0.72, "top_char_ratio": 0.07, "avg_line_length": 20.61, "max_line_length": 131, "empty_line_ratio": 0.08, "last_line_length": 62, "long_token_count": 2, "whitespace_ratio": 0.17, "identifier_density": 0.58, "line_length_stddev": 20.51, "max_whitespace_run": 1, "normalized_import_count": 0.08, "normalized_string_count": 8.56, "anonymous_function_ratio": 0.67, "normalized_function_count": 0.5, "imports_to_functions_ratio": 0.17, "strings_to_functions_ratio": 17, "normalized_unique_identifiers": 5.73, "identifiers_to_functions_ratio": 6.83 }, "binds": { "count": 9 }, "binary": { "peak_region_bytes": 2045, "peak_region_entropy": 5 }, "source": { "function_count": 2 }, "imports": { "count": 1, "third_party_count": 1, "third_party_ratio": 1 }, "strings": { "bytes": 1519, "count": 102, "url_count": 3, "avg_length": 14.89, "max_length": 120, "avg_entropy": 3.11, "empty_count": 1, "domain_count": 27, "entropy_stddev": 0.53 }, "comments": { "chars": 44, "count": 1, "lines": 1, "to_code_ratio": 0.01 }, "functions": { "count": 2, "nested": 1, "density": 4.23, "anonymous": 4, "avg_params": 0.17, "code_ratio": 0.21, "max_params": 1, "one_liners": 3, "length_stddev": 5.03, "avg_name_length": 7.5, "no_params_count": 5, "avg_length_lines": 5, "max_length_lines": 15, "min_length_lines": 1, "avg_nesting_depth": 0.17, "max_nesting_depth": 1, "avg_param_name_length": 6 }, "identifiers": { "count": 82, "unique": 41, "avg_length": 5.68, "max_length": 13, "min_length": 2, "avg_entropy": 2.18, "reuse_ratio": 0.5, "length_stddev": 2.37, "all_lowercase_ratio": 0.73, "all_uppercase_ratio": 0.07 } } }, "id": 6, "mol": "H₃(Cm₇DbF)Md₂(InPa₂)", "path": "/home/gauntlet/.cache/gauntlet/blobs/9e9357ee76c95b0d455bd10064dca8e1be3f113719346297b9bac47c48a987f6/free-email-domains-1.9.23.tgz!!package/scripts/postinstall.mjs", "pid": 0, "risk": 6, "sha": "8f294409762dee38dc55338c33a2c8ef1baa487d6629c540c70b96cb4392216c", "size": 3069, "traits": [ { "id": "metadata/import/npm/fs/promises::fs/promises", "conf": 0.95, "crit": 3, "desc": "imports node:fs/promises", "spans": [ [ 26, 16 ] ] }, { "id": "metadata/package/files/included::install-or-beacon-js-basename", "conf": 0.9, "crit": 3, "desc": "JavaScript install or beacon basename", "uses": [ 3 ] }, { "id": "metadata/package/files/included::npm-package-scripts-member", "conf": 0.99, "crit": 3, "desc": "JavaScript under npm package scripts dir" }, { "id": "metadata/package/files/included::postinstall-js-basename", "conf": 0.9, "crit": 3, "desc": "Filename is postinstall.js/cjs/mjs" }, { "id": "metadata/package/files/lifecycle::install-js-basename", "conf": 0.86, "crit": 3, "desc": "File has JavaScript install-script basename" }, { "id": "metadata/package/files/lifecycle::postinstall-js-file", "conf": 0.84, "crit": 3, "desc": "File has postinstall JavaScript basename" }, { "id": "micro-behaviors/communications/http/client/response-body::fetch-response-body-read", "conf": 0.9, "crit": 3, "desc": "JavaScript fetch reads response body", "spans": [ [ 2375, 141 ] ] }, { "id": "micro-behaviors/communications/http/client/response-body::js-response-text-read", "conf": 0.82, "crit": 3, "desc": "JavaScript reads HTTP response text", "spans": [ [ 2507, 8 ] ] }, { "id": "micro-behaviors/communications/http/download/write::hook-named-script-fetch-write-profile", "conf": 0.94, "crit": 3, "desc": "Hook-named script has fetch and write calls", "uses": [ 1, 9 ], "spans": [ [ 2375, 141 ], [ 2944, 9 ] ] }, { "id": "micro-behaviors/communications/http/download/write::script-fetches-and-writes-remote-content", "conf": 0.94, "crit": 3, "desc": "JavaScript fetch-response read and file write", "uses": [ 6, 20 ], "spans": [ [ 2375, 141 ], [ 2944, 9 ] ] }, { "id": "micro-behaviors/communications/http/message::http-url-literal", "conf": 0.75, "crit": 3, "desc": "HTTP URL string literal", "spans": [ [ 115, 90 ], [ 271, 101 ], [ 441, 120 ] ] }, { "id": "micro-behaviors/communications/http/request/client::single-fetch-call", "conf": 0.99, "crit": 3, "desc": "Source contains exactly one parsed fetch call", "spans": [ [ 2375, 5 ] ] }, { "id": "micro-behaviors/communications/http/url/domain::js-remote-host-url", "conf": 0.75, "crit": 3, "desc": "Contains a hardcoded remote HTTP(S) URL", "spans": [ [ 115, 34 ], [ 271, 33 ] ] }, { "id": "micro-behaviors/communications/http/url/forge::github-raw-url", "conf": 0.92, "crit": 3, "desc": "GitHub raw-content URL", "spans": [ [ 271, 34 ] ] }, { "id": "micro-behaviors/communications/http/url/github::raw-githubusercontent-any", "conf": 0.7, "crit": 3, "desc": "raw.githubusercontent.com URL", "spans": [ [ 279, 58 ], [ 449, 76 ] ] }, { "id": "micro-behaviors/communications/http/url/github::raw-githubusercontent-web-file", "conf": 0.7, "crit": 3, "desc": "raw.githubusercontent.com web file URL", "spans": [ [ 279, 93 ] ] }, { "id": "micro-behaviors/data/control-flow/module-exec::module-leading-promise-chain-call", "conf": 0.84, "crit": 3, "desc": "Leading promise-chain call at module scope", "spans": [ [ 3006, 13 ] ] }, { "id": "micro-behaviors/data/serialize/json::json-stringify-call", "conf": 0.5, "crit": 3, "desc": "Calls JSON.stringify()", "spans": [ [ 2970, 14 ] ] }, { "id": "micro-behaviors/fs/path/extension::conf-extension-reference", "conf": 0.4, "crit": 3, "desc": "Config file extension", "spans": [ [ 556, 5 ] ] }, { "id": "micro-behaviors/fs/write/file/full::node-write-file-promise-destructured", "conf": 0.9, "crit": 3, "desc": "Node writes a file via destructured import", "uses": [ 0, 20 ], "spans": [ [ 26, 16 ], [ 2944, 9 ] ] }, { "id": "micro-behaviors/fs/write/file/full::write-file-call-target", "conf": 0.9, "crit": 3, "desc": "Calls an unqualified writeFile function", "spans": [ [ 2944, 9 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-1", "conf": 0.8, "crit": 1, "desc": "English function-word token \"the\"", "spans": [ [ 608, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-5", "conf": 0.8, "crit": 1, "desc": "English function-word token \"for\"", "spans": [ [ 2646, 0 ] ] } ], "type": "javascript" }, { "ctx": [ { "b": "x(d*cA=-BoA+e/Jzddc{l#M{Jx(m#mw].*basw={wn=r[x(m#AyiarhcM)REBz8!zaAR)FwJy}YyiarhcM)*AwQ5fjA=-A!azbU9wKQDAx(3gQzddc@A%.", "ln": 0, "col": 1, "line": 1 } ], "depth": 1, "facts": { "imp": [ [ "", "./domains.json" ] ], "metrics": { "ast": { "max_depth": 6, "call_count": 0, "node_count": 26 }, "file": { "size": 94, "entropy": 4.47 }, "text": { "lines": 2, "top_char": 111, "max_ws_run": 1, "space_count": 10, "char_entropy": 4.47, "unique_chars": 29, "top_char_null": 0, "string_density": 1, "top_char_ratio": 0.09, "avg_line_length": 46, "max_line_length": 67, "last_line_length": 25, "whitespace_ratio": 0.13, "identifier_density": 1.5, "line_length_stddev": 21, "normalized_string_count": 1.41, "normalized_unique_identifiers": 2 }, "binary": { "peak_region_bytes": 94, "peak_region_entropy": 4.47 }, "imports": { "count": 1, "relative": 1, "relative_ratio": 1, "third_party_count": 1, "third_party_ratio": 1 }, "strings": { "bytes": 18, "count": 2, "avg_length": 9, "max_length": 14, "path_count": 1, "avg_entropy": 2.62, "entropy_stddev": 0.62 }, "identifiers": { "count": 3, "unique": 2, "avg_length": 10, "max_length": 16, "min_length": 4, "avg_entropy": 2.75, "reuse_ratio": 0.67, "length_stddev": 6, "all_lowercase_ratio": 0.5 } } }, "id": 7, "mol": "K(Te)", "path": "/home/gauntlet/.cache/gauntlet/blobs/9e9357ee76c95b0d455bd10064dca8e1be3f113719346297b9bac47c48a987f6/free-email-domains-1.9.23.tgz!!package/index.d.ts", "pid": 0, "refs": [ { "to": "./domains.json", "off": 30, "file": 10, "kind": "local" } ], "risk": 2, "sha": "6df32e592bf4f98205c3be3fa80b61eef0fb99467aa8bb4a6c10db4d4213378a", "size": 94, "traits": [ { "id": "metadata/import/npm/relative/1/domains/json::relative/1/domains/json", "conf": 0.95, "crit": 2, "desc": "imports ./domains.json", "spans": [ [ 29, 0 ] ] }, { "id": "metadata/file/extension/identity::declaration-file-extension", "conf": 1.0, "crit": 2, "desc": "File uses a source declaration extension" }, { "id": "metadata/lang/natural::lang-english--atom-6", "conf": 0.8, "crit": 1, "desc": "English function-word token \"with\"", "spans": [ [ 46, 0 ] ] }, { "id": "metadata/lang/scripted::dts-declaration-file", "conf": 0.99, "crit": 2, "desc": "TypeScript declaration file" }, { "id": "well-known/tool/development/vcs/github-web::github-repo-fetched-path", "conf": 0.98, "crit": 3, "desc": "Fetched github.com repository artifact" }, { "id": "metadata/package/testing/presence/harness::test-or-declaration-file", "conf": 0.85, "crit": 1, "desc": "File is a test or type-declaration source file", "uses": [ 1 ] } ], "type": "javascript" }, { "id": 8, "mol": "Md(Re)", "sha": "903abe927836d3901a9ced0cb777f56bdf204c2f7de6c38d58bd0dd5b6470f21", "path": "free-email-domains@1.9.23.registry.json", "risk": 1, "size": 976, "type": "registry", "depth": 1 } ], "omitted_files": 1, "rev": "c1ea9", "v": "8" } }