{
  "ml": {
    "v": "7",
    "eng": "2.3.1-beta.0",
    "lvl": -1,
    "conf": 0,
    "mods": [
      {
        "cls": 0,
        "raw": 0.00022171934,
        "rte": "az",
        "prob": 0.00022171934
      },
      {
        "cls": 0,
        "raw": 0.00043174624,
        "rte": "az/zip",
        "prob": 0.00043174624
      }
    ],
    "prob": 0.00022171934,
    "files": [
      {
        "id": 0,
        "lvl": -1,
        "conf": 0,
        "prob": 0.00022171933960635215,
        "type": "zip"
      },
      {
        "id": 1,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000013232231140136719,
        "type": "markdown"
      },
      {
        "id": 2,
        "lvl": -1,
        "conf": 0,
        "prob": 0.00002390146255493164,
        "type": "go"
      },
      {
        "id": 3,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000013391177162702661,
        "type": "go"
      },
      {
        "id": 4,
        "lvl": -1,
        "conf": 0,
        "prob": 0.00007089972496032715,
        "type": "go"
      },
      {
        "id": 5,
        "lvl": -1,
        "conf": 0,
        "prob": 0.00002187490463256836,
        "type": "go"
      },
      {
        "id": 6,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000010341405868530273,
        "type": "go.mod"
      },
      {
        "id": 7,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000026106834411621094,
        "type": "go"
      },
      {
        "id": 8,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000015308460206142627,
        "type": "go"
      },
      {
        "id": 9,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000015228986740112305,
        "type": "text"
      },
      {
        "id": 10,
        "lvl": -1,
        "conf": 0,
        "prob": 0.0000201265011128271,
        "type": "registry"
      }
    ],
    "version": "v18.18",
    "analyzed_at": "2026-07-20T07:35:20Z"
  },
  "path": "github.com-kforbus3-fleet-terminal-sdk-v0.0.0-20260720022232-762aaf2cf8ce.zip",
  "raw": {
    "files": [
      {
        "id": 0,
        "ctx": [
          {
            "b": "p!H([6Awys2MK\u00268000000000000000002{$003UCBzb/ae[n*pfkCfrA:\u003cfjgCruRwO2%nBy/Gfx(mu}flpVtkZ1?lfFk4hgb7EwfGg:vfFUysgCQKvhzOYHw?)\u003ediaDIMqBJ(to*{WKwq\u0026InzREdVZR=%e/kmB]:ca[DAE\u003cQG7b[fDtw(q?=)k}ZiZ(Fgm\u003e#3u!BlpfYPSA*yAD@?=-^{rpQh@9wJKQHfAzlk\u003cL/}l\u003crF[FbrAt1*BaT?CX=mn])uDPVxt.Ni6r=sAAXUTsk=cx6(0$K7M+b-K?a7#R4GjLhi=ajtI%}h2wpvSEW12p2Rjwb\u0026Gn:r:w4lP}!#H/G=@@1Sh]",
            "n": [
              {
                "c": 2,
                "d": "Zip archive path",
                "i": "metadata/package/files/included::zip-archive-path",
                "o": 0,
                "z": 77,
                "cf": 0.949999988079071
              }
            ],
            "ln": 0
          },
          {
            "b": "h.)6vgbpQvga+ByggsQ6ggK]Qv}vr6zdCqiy?mg1fjO{qzddr)B1R9z!lzxZ*QsA/eiQ@[=zi$%Rr4p7gXVIuCsF\u003e0sGM7UoEjK5=syq}K}pK(3XjK2B.pEYEzOg\u0026ON7-S@[ghL!86Wt5LlvD/U[v",
            "n": [
              {
                "c": 1,
                "d": "JVM C2 command path",
                "i": "objectives/command-and-control/backdoor/tasking/http::jvm-c2-command-path",
                "o": 2843,
                "z": 23,
                "cf": 0.9399999976158142
              }
            ],
            "ln": 2811
          }
        ],
        "mol": "H₂(Cm₃F)",
        "sha": "b44d310a122cd4a70d98df39ffa67dccfb2fa2ffa32906753072f88311c354ce",
        "path": "/data/samples/unknown/foraged/go/googleusercontent.com/pkg.go.dev/github.com/kforbus3/fleet-terminal/sdk/github.com-kforbus3-fleet-terminal-sdk-v0.0.0-20260720022232-762aaf2cf8ce.zip",
        "risk": 3,
        "size": 23718,
        "type": "zip",
        "facts": {
          "metrics": {
            "file": {
              "size": 23718.0,
              "entropy": 7.93,
              "size_bytes": 23718.0
            },
            "binary": {
              "overall_entropy": 7.93,
              "peak_region_bytes": 22528.0,
              "peak_region_entropy": 7.82
            },
            "archive": {
              "file_count": 9.0,
              "member_count": 9.0,
              "script_count": 0.0,
              "zip_bomb_ratio": 4.38,
              "directory_count": 0.0,
              "executable_count": 0.0,
              "extra_field_size": 0.0,
              "noise_file_count": 0.0,
              "total_compressed": 21334.0,
              "compression.ratio": 0.31,
              "hidden_file_count": 0.0,
              "total_uncompressed": 67927.0,
              "crc_collision_count": 0.0,
              "entry_comment_count": 0.0,
              "max_filename_length": 95.0,
              "rtlo_filename_count": 0.0,
              "format.regular_count": 9.0,
              "nested_archive_count": 0.0,
              "path_traversal_count": 0.0,
              "symlink_escape_count": 0.0,
              "security.setgid_count": 0.0,
              "security.setuid_count": 0.0,
              "security.sticky_count": 0.0,
              "double_extension_count": 0.0,
              "duplicate_member_count": 0.0,
              "security.symlink_count": 0.0,
              "unicode_filename_count": 0.0,
              "homoglyph_filename_count": 0.0,
              "security.encrypted_count": 0.0,
              "misplaced_executable_count": 0.0,
              "timing.mtime_dominant_count": 9.0,
              "timing.sentinel_mtime_count": 9.0,
              "security.world_writable_count": 0.0,
              "timing.mtime_dominant_fraction": 1.0,
              "compression.method_counts.deflate": 9.0
            }
          }
        },
        "traits": [
          {
            "id": "metadata/package/testing/harness/unit::go-func-test",
            "conf": 0.800000011920929,
            "crit": 2,
            "desc": "Go test function name",
            "from": [
              {
                "file": 5
              }
            ]
          },
          {
            "id": "micro-behaviors/communications/http/lib/netlib::net-http-import",
            "atk": "T1071.001",
            "mbc": "C0002",
            "crit": 3,
            "desc": "Imports Go's net/http package",
            "from": [
              {
                "file": 4
              }
            ]
          },
          {
            "id": "metadata/package/testing/presence/harness::tests-path-filename",
            "conf": 0.8500000238418579,
            "crit": 1,
            "desc": "File path or name indicates test code",
            "from": [
              {
                "file": 5
              }
            ]
          },
          {
            "id": "metadata/package/testing/harness/unit::go-t-error-call",
            "conf": 0.699999988079071,
            "crit": 1,
            "desc": "Go test reports an error with t.Error",
            "from": [
              {
                "file": 5
              }
            ]
          },
          {
            "id": "micro-behaviors/communications/http/headers::go-authorization-set",
            "atk": "T1071.001",
            "conf": 0.800000011920929,
            "crit": 3,
            "desc": "Sets HTTP Authorization header",
            "from": [
              {
                "file": 4
              }
            ]
          },
          {
            "id": "metadata/file/invisible-unicode::test-file-context",
            "atk": "T1027",
            "conf": 0.8500000238418579,
            "crit": 1,
            "desc": "Test, generated, or declaration-file context",
            "from": [
              {
                "file": 5
              }
            ]
          },
          {
            "id": "micro-behaviors/communications/http/lib/netlib::go-http-newrequest",
            "atk": "T1071.001",
            "mbc": "C0002",
            "conf": 0.8999999761581421,
            "crit": 3,
            "desc": "Creates a new HTTP request",
            "from": [
              {
                "file": 4
              }
            ]
          },
          {
            "id": "metadata/package/testing/harness/unit::go-testing-t",
            "conf": 0.699999988079071,
            "crit": 2,
            "desc": "Go test uses a testing.T parameter",
            "from": [
              {
                "file": 5
              }
            ]
          },
          {
            "id": "micro-behaviors/communications/http/headers::go-user-agent-set",
            "atk": "T1071.001",
            "conf": 0.800000011920929,
            "crit": 3,
            "desc": "Sets HTTP User-Agent header",
            "from": [
              {
                "file": 4
              }
            ]
          },
          {
            "id": "micro-behaviors/communications/http/user-agent::go-user-agent-header-set",
            "atk": "T1071.001",
            "mbc": "C0002",
            "conf": 0.8999999761581421,
            "crit": 3,
            "desc": "Sets HTTP User-Agent header",
            "from": [
              {
                "file": 4
              }
            ]
          },
          {
            "id": "micro-behaviors/communications/http/headers::go-content-type-set",
            "atk": "T1071.001",
            "conf": 0.800000011920929,
            "crit": 3,
            "desc": "Sets HTTP Content-Type header",
            "from": [
              {
                "file": 4
              }
            ]
          },
          {
            "id": "metadata/package/testing/harness/unit::go-t-fatal-call",
            "conf": 0.699999988079071,
            "crit": 1,
            "desc": "Go test stops with t.Fatal",
            "from": [
              {
                "file": 5
              }
            ]
          },
          {
            "id": "micro-behaviors/fs/file/copy::io-copy",
            "conf": 0.8999999761581421,
            "crit": 3,
            "desc": "Copy data via io.Copy",
            "from": [
              {
                "file": 4
              }
            ]
          }
        ]
      },
      {
        "ctx": [
          {
            "b": "A=2JdvqE5RzY?$Doct-cu$Kj^wPRr5lRH5U3qUnCx\u003e7\u003c=y-(k^ay/k4wO#PjvqYP#v@Dj3vqYQcy?W=#aARKuy-)tdAV/EqwGTDUwO2%araQ8!x(mu}ave*}e*9\u003e%zEEf?aBd)FATDz{wO2%avriM3z!9A4\u0026^^moxM4%lB1wCDA=l8tB1wCRB7GxkefF$Ky?mVsaAIamC4\u003eC$ayO+\u0026z/]@tB1wCQz!\u0026{4B1vVwB.\u003e@bA:-A\u003ey?X0paAI43zGvuKvqYP#v@Dj6y?Wr}v}u^6wPhNdBAnO:FrRf*A=k!qlRe{#l[xD\u003cA=k?ryhWN5efFwswfueoB-FQyCwW+fz/oDazF7Ne3n0wIdNW\u0026!wO#3\u0026zEW@zw].D]e?es[ra]?=q::n3B-RbnaA8dlC{4ixwGTGYaAITkzE^f@wftY5vSC)$C}GBQasX\u003cuz!\u0026{4eN-^zxK#76x\u003e7N[wN)zydJ?31Bzbl6Bzkk[By/IoCwhejayMylwPz%dv}vl2v}fC1zGE0!p!q^Kz!\u0026{43lQDtu$Kj%u/DQku[0SHBzbkdB75]%ay/C6wmYU2x\u003c\u003e*2BzbkdCv+kary[rEB8#FnB0bQywmY^7dK[wdBAzkmxlbiPHlrVTwPz%dv}t#\u0026avfHEz/]@tB1eT(awM?$wmoN*vQTs?ayO+\u0026wPI]zaz#9ux(n37A:-E1x)a5gy\u0026r%2zy#nFasX\u003cGw]83\u0026BylkmB0a\u003e5y?mg1v@#J{e?es[u$Kj^wPRr5d0fcpB0bNyz!{\u003cBx(+zsxK@rbwO(vcwH[%Cz!\u0026{4eN-^zxK#76x\u003e7N[wN(b\u003cayPzmz/5{8x(v(iv@b\u003c\u003czGEGNu$Kj^wPRB7y*Xx1B0bNrwGV59Aa9=}By=Okzy]KuB95KlA+eV{eOw)dB8@ECz/oCmBzb98aAR4dyJx?9aARJABzbkdwmoN*vQTs?ay]hbwN/*#C{3ZqAV/ylv@DK4A^onWrDzZ]u$Kj^wPRr5w]zYjwmo:nBz\u0026:wvr\u0026#7B-.Lsvruj4zy#n6bo[s5zGx]dy?%B=bo[AQq::m=3sEmHvQTs\u003e3tjo1xjVfcxk8E3BZ=$kz/4dyw]zZ0B-Pt(mR(TEBs*E6A=2JdvqEPrwnsCDvru74Bp8z-u\u003cWk=bo[r#oI2M#u%)wKvrl8?xkX]bzGx]dy?$kbx([3hvLheez7/Wpz/PrfB2bEsy?mg1eMuq4ze0(@y+G\u003cuyCfgmwg}LhwO2%Gy*?A%B94:%u%\u003crGra]#!",
            "ln": 10,
            "col": 11,
            "line": 1
          },
          {
            "b": "v}u=Gv}fC1zGG}HdL8YLA+eW3wGUz7B7Gxnx\u003e7Y%vpJ!=B-8pL3lQDlvqYP#xl4A#BrCptayMykz!@#cB7occwN({9zY\u0026$oy\u003cvdBxK@r9wPzT4B8#5lzGu}mBrCEjwN]\u003c8c#rE6B95KzA+PYhy?ml\u003cdj$@.e*9J4wNPW(ayPdgk#pb}Bz\u003e@azxJ\u003enaARp9BrC14v@DHcBrGN[LPU6YwGV59v@=d5asHSfy\u0026\u003c4zFtMZ6azC)tB7/GozxHzUz/f5@dK)4TgCf!DA=lbnwmV($BrCWzaARpdax7W3fgeA8iTMj4u%)CLB7+[(CYmOwBrB4Dmmyf.rz(HNb4#7uAc15[fj]3iwPPLoCWUDdy?kkez/3W9wQ5fjA=-A[oHRxHuQmHWuSo/]mnt#\u0026w]8M@CZaETCZaETCZaETCZaETCZaETa{}Z=u\u003cWlwwPzG%C@=otu%)wKvrl8?w]83\u0026BrC^vz^^G%3sEmH3jn15avw*]aA.:lxjRzSu%)vHw]83\u0026BrAXQz/6u1zE+{Ntxs{@v@Dj3vqYQYax@C]vp%T!3jm)#C4CYnx(v(iarR^HarR^HarR^HarR^HarR^HarR^HarR^Hay]55y\u0026sPowO#PjC4CYnx(v\u003e@arU(wz^^G%arR^HarR^HarR^HarR^HarR^HarR^HarR^HarR!vwmYU2x([Ryd\u003ce!xA=2JiB7]MgB0bykaARpdaARKqwO}?$aztXmBAnNvx(!wsD)06kBrAXWwiIb-ay]51wPRGajzws\u00263lQE8z/Z2way/C6vru66eIgTOB98qdzdK?LxG^LyeIgKKB%7:Az!9b@tp?BGvp%T7vjU\u003e[ax{AHB8#1DB-RbmazbC3wPRh+arUuoB98ECvpS[2xl4{kA3dnRz/Z1(wiIa#xl4{kA7KO7arR!OarUuoB98ECA=0x",
            "ln": 1114,
            "col": 45,
            "line": 34
          },
          {
            "b": "AV/ap3ta9=wPP5dz/Z2waz++kBp8R@wO2%axM4%lB0bpkB95JReOYuBzxKrHyh\u003evze)zQ7D)0Gwy?m9#c[Y7GA=k=gwN)}!w)]H%wHO:HatdtCB98qdzdL743l{V\u003ewOkZ#By/Fnvixl4B94+3y?mg1aztXmBAnNmA+eW3wGSMRxM4%lzEEx[ay\u003e",
            "ln": 2578,
            "col": 38,
            "line": 79
          },
          {
            "b": "zxKrHyh\u003evFAV=#Gwgm\u003c$y?mg1aARKqwO#Miv@=c?By=NsbY^xrat2f.vqPM#xk8E7vpy/#x=[#VwQ5fdA+fqzwmo+8auqa#j%juHuVZj4wO%bxCYTo1boPS[v@0h}aA?)zzE)\u0026%vRGT)BA]0Iv{%l$vpKs@B8@Ejazk.kB-nEizE:(eB.\u003e\u003epBzbkdA+fidAS",
            "ln": 3042,
            "col": 64,
            "line": 90
          },
          {
            "b": "zGE1yzY\u0026L6wN/G#BzbkdBz\u003e@azxJw9wftPdB0bBkA=2JiB7]MgB1N!bbo[sfl}XUBB75Y)3jpfGu$Tx+Aa9l(vp%c]zddc@3jpG:AbP=sasEN6b4CLeBy/Ysa{[S2w]hSl3jd[)z!ym32{Kqea{[U-w]83\u0026Brz=ux([3hvLheez7/Wpz/PrfB2bEsy?mg1eMuq4ze0(@y+G\u003cuyA:9m3jpx/zET/avqfQcdiJ%A31CIewPz/liZ1P$y?mg1e(2#4c#TeVm}D^NzGWALmODltr9@T6oD\u003e]pazbC3wPPLax([2/z!\u0026{4c#TeVm}D^NzGWALmODltr9}{/nNCB)ogqP1djDXM329#]wPz/laW3@=x(1]s3jd2Pz!yW(vrt{]c$NBt",
            "ln": 3395,
            "col": 16,
            "line": 99
          },
          {
            "b": "ePUSpwGUz]vqfR2BrCWswGV8kyH}xhB0bKnA=#ebwI4t2v@DHcBrCQxy?kjam@\u00263QBrCHty\u003cvdExKM09vixh%C4CLlvrDWgzddK2z/cXnwO2y[aMv{oaz0fre*aNBB7nS@zE)\u0026hvScuhzE)x\u0026B0a\u003cYz/Z1Mq!6lNu\u003cZsWwftnJz/Z1Mr+Vb?u]]GtzxJUhC4CMkz/QaCB9RUkaz$+4woe\u003c",
            "ln": 5260,
            "col": 32,
            "line": 172
          },
          {
            "b": "z!%k$fjms?B9636wncc[e^+J*wGV8dwGTonnGZ]xw[u0]zEWl2w]zYjBzbkdAaK6bx(!ufz/cXevpJ%[wO#3$z!T9haAz4kB.L(cB1N!",
            "ln": 5452,
            "col": 63,
            "line": 174
          }
        ],
        "depth": 1,
        "facts": {
          "imp": [
            [
              "",
              "Official"
            ],
            [
              "",
              "fleet"
            ],
            [
              "",
              "vulnerability"
            ],
            [
              "",
              "tooling."
            ],
            [
              "",
              "`flt_…`"
            ],
            [
              "",
              "flt_…"
            ],
            [
              "",
              "$(go env GOPATH)/bin"
            ],
            [
              "",
              "go"
            ],
            [
              "",
              "1."
            ],
            [
              "",
              "and"
            ],
            [
              "",
              "least"
            ],
            [
              "",
              "2."
            ],
            [
              "",
              "`flt_…`"
            ],
            [
              "",
              "flt_…"
            ],
            [
              "",
              "is"
            ],
            [
              "",
              "3."
            ],
            [
              "",
              "`\n\nVerify:\n\n```bash"
            ],
            [
              "",
              "Verify:"
            ],
            [
              "",
              "fleet"
            ],
            [
              "",
              "fleet"
            ],
            [
              "",
              "version"
            ],
            [
              "",
              "whoami"
            ],
            [
              "",
              "hosts"
            ],
            [
              "",
              "get"
            ],
            [
              "",
              "hosts"
            ],
            [
              "",
              "delete"
            ],
            [
              "",
              "dynamic"
            ],
            [
              "",
              "users"
            ],
            [
              "",
              "roles"
            ],
            [
              "",
              "service-accounts"
            ],
            [
              "",
              "delete"
            ],
            [
              "",
              "alias:"
            ],
            [
              "",
              "service-accounts"
            ],
            [
              "",
              "tokens"
            ],
            [
              "",
              "tokens"
            ],
            [
              "",
              "vuln"
            ],
            [
              "",
              "vuln"
            ],
            [
              "",
              "audit"
            ],
            [
              "",
              "certificates"
            ],
            [
              "",
              "scans"
            ],
            [
              "",
              "vulnerabilities"
            ],
            [
              "",
              "Add"
            ],
            [
              "",
              "bash"
            ],
            [
              "",
              "fleet"
            ],
            [
              "",
              "fleet"
            ],
            [
              "",
              "jq"
            ],
            [
              "",
              "fleet"
            ],
            [
              "",
              "fleet"
            ],
            [
              "",
              "fleet"
            ],
            [
              "",
              "jq"
            ],
            [
              "",
              "fleet"
            ],
            [
              "",
              "fleet"
            ],
            [
              "",
              "fleet"
            ],
            [
              "",
              "`\n\nExit codes: `0"
            ],
            [
              "",
              "Exit"
            ],
            [
              "",
              "CLI"
            ],
            [
              "",
              "package"
            ],
            [
              "",
              "import"
            ],
            [
              "",
              "\"context\""
            ],
            [
              "",
              "\"fmt\""
            ],
            [
              "",
              "\"log\""
            ],
            [
              "",
              "\"os\""
            ],
            [
              "",
              "fleet"
            ],
            [
              "",
              "func"
            ],
            [
              "",
              "c,"
            ],
            [
              "",
              "os.Getenv"
            ],
            [
              "",
              "\"FLEET_URL\""
            ],
            [
              "",
              "fleet.WithToken"
            ],
            [
              "",
              "os.Getenv"
            ],
            [
              "",
              "\"FLEET_API_TOKEN\""
            ],
            [
              "",
              "err"
            ],
            [
              "",
              "log.Fatal"
            ],
            [
              "",
              "err"
            ],
            [
              "",
              "ctx"
            ],
            [
              "",
              "fmt.Printf"
            ],
            [
              "",
              "\"%s\\t%s\\tenrolled=%t\\n\","
            ],
            [
              "",
              "``\n\n### Error handling\n\nNon-2xx responses return an `*APIError`"
            ],
            [
              "",
              "`\n\n### Error handling\n\nNon-2xx responses return an `*APIError"
            ],
            [
              "",
              "Non-2xx"
            ],
            [
              "",
              "Grant"
            ],
            [
              "",
              "and"
            ],
            [
              "",
              "an"
            ],
            [
              "",
              "Host.View"
            ],
            [
              "",
              "Host.Enroll"
            ],
            [
              "",
              "Host.Edit"
            ],
            [
              "",
              "See"
            ]
          ],
          "tgt": [
            "\"%s\\t%s\\tenrolled=%t\\n\",",
            "\"FLEET_API_TOKEN\"",
            "\"FLEET_URL\"",
            "\"context\"",
            "\"fmt\"",
            "\"log\"",
            "\"os\"",
            "$(go env GOPATH)/bin",
            ".",
            "1.",
            "2.",
            "3.",
            "Add",
            "CLI",
            "Exit",
            "Grant",
            "Host.Edit",
            "Host.Enroll",
            "Host.View",
            "Non-2xx",
            "Official",
            "See",
            "Verify:",
            "`\n\n### Error handling\n\nNon-2xx responses return an `*APIError",
            "`\n\n### Examples\n\n```bash\n# Inventory as a table, or as JSON for jq\nfleet hosts list\nfleet hosts list --json | jq '.[] | select(.enrolled==false) | .hostname'\n\n# Register a host\nfleet hosts create --hostname db-02 --env prod --tags db,postgres --ssh-user fleet\n\n# A dynamic group whose membership follows tags (no manual upkeep)\nfleet groups create --name prod-databases --env prod --tag-all db\n\n# Issue a scoped token for a CI job (secret prints to stdout, once)\nsa=$(fleet sa create --username ci-bot --roles \"$ROLE_ID\" --json | jq -r .id)\nfleet tokens create \"$sa\" --name gitlab-ci --expires-days 90 \u003e ci_token.txt\n\n# Kick a vulnerability scan across a group and pull the report\nfleet vuln scan --group \"$GROUP_ID\"\nfleet report vulnerabilities --from 2026-01-01 -o vulns.csv\n```\n\nExit codes: `0` success, `1` runtime/API error, `2",
            "`\n\nExit codes: `0",
            "`\n\nVerify:\n\n```bash",
            "`\nfleet \u003ccommand\u003e [subcommand] [flags]\n\n  version                              deployment version\n  whoami                               identity + permissions of the token\n  hosts list | get \u003cid\u003e | delete \u003cid\u003e\n  hosts create --hostname \u003ch\u003e [--env prod] [--tags a,b] [--ssh-user fleet]\n  hosts add-group \u003chostId\u003e \u003cgroupId\u003e   |  hosts rm-group \u003chostId\u003e \u003cgroupId\u003e\n  groups list | delete \u003cid\u003e\n  groups create --name \u003cn\u003e [--tag-all a,b] [--tag-any a,b] [--env e]   (dynamic if any rule flag set)\n  users list\n  roles list\n  service-accounts list | delete \u003cid\u003e       (alias: sa)\n  service-accounts create --username \u003cu\u003e [--roles id,id] [--groups id,id]\n  tokens list \u003csaId\u003e\n  tokens create \u003csaId\u003e --name \u003cn\u003e [--expires-days N]\n  tokens revoke \u003csaId\u003e \u003ctokenId\u003e\n  vuln scan --host \u003cid\u003e | --group \u003cid\u003e\n  vuln list [--host \u003cid\u003e] | vuln latest | vuln get \u003cscanId\u003e\n  report \u003caccess|audit|certificates|scans|vulnerabilities\u003e [--from D] [--to D] [-o file.csv]\n\nAdd --json to most read commands for raw JSON output.\n```\n\n### Examples\n\n```bash\n# Inventory as a table, or as JSON for jq\nfleet hosts list\nfleet hosts list --json | jq '.[] | select(.enrolled==false) | .hostname'\n\n# Register a host\nfleet hosts create --hostname db-02 --env prod --tags db,postgres --ssh-user fleet\n\n# A dynamic group whose membership follows tags (no manual upkeep)\nfleet groups create --name prod-databases --env prod --tag-all db\n\n# Issue a scoped token for a CI job (secret prints to stdout, once)\nsa=$(fleet sa create --username ci-bot --roles \"$ROLE_ID\" --json | jq -r .id)\nfleet tokens create \"$sa\" --name gitlab-ci --expires-days 90 \u003e ci_token.txt\n\n# Kick a vulnerability scan across a group and pull the report\nfleet vuln scan --group \"$GROUP_ID\"\nfleet report vulnerabilities --from 2026-01-01 -o vulns.csv\n```\n\nExit codes: `0` success, `1` runtime/API error, `2`",
            "``\n\n### Error handling\n\nNon-2xx responses return an `*APIError`",
            "``\nfleet \u003ccommand\u003e [subcommand] [flags]\n\n  version                              deployment version\n  whoami                               identity + permissions of the token\n  hosts list | get \u003cid\u003e | delete \u003cid\u003e\n  hosts create --hostname \u003ch\u003e [--env prod] [--tags a,b] [--ssh-user fleet]\n  hosts add-group \u003chostId\u003e \u003cgroupId\u003e   |  hosts rm-group \u003chostId\u003e \u003cgroupId\u003e\n  groups list | delete \u003cid\u003e\n  groups create --name \u003cn\u003e [--tag-all a,b] [--tag-any a,b] [--env e]   (dynamic if any rule flag set)\n  users list\n  roles list\n  service-accounts list | delete \u003cid\u003e       (alias: sa)\n  service-accounts create --username \u003cu\u003e [--roles id,id] [--groups id,id]\n  tokens list \u003csaId\u003e\n  tokens create \u003csaId\u003e --name \u003cn\u003e [--expires-days N]\n  tokens revoke \u003csaId\u003e \u003ctokenId\u003e\n  vuln scan --host \u003cid\u003e | --group \u003cid\u003e\n  vuln list [--host \u003cid\u003e] | vuln latest | vuln get \u003cscanId\u003e\n  report \u003caccess|audit|certificates|scans|vulnerabilities\u003e [--from D] [--to D] [-o file.csv]\n\nAdd --json to most read commands for raw JSON output.\n```\n\n### Examples\n\n```bash\n# Inventory as a table, or as JSON for jq\nfleet hosts list\nfleet hosts list --json | jq '.[] | select(.enrolled==false) | .hostname'\n\n# Register a host\nfleet hosts create --hostname db-02 --env prod --tags db,postgres --ssh-user fleet\n\n# A dynamic group whose membership follows tags (no manual upkeep)\nfleet groups create --name prod-databases --env prod --tag-all db\n\n# Issue a scoped token for a CI job (secret prints to stdout, once)\nsa=$(fleet sa create --username ci-bot --roles \"$ROLE_ID\" --json | jq -r .id)\nfleet tokens create \"$sa\" --name gitlab-ci --expires-days 90 \u003e ci_token.txt\n\n# Kick a vulnerability scan across a group and pull the report\nfleet vuln scan --group \"$GROUP_ID\"\nfleet report vulnerabilities --from 2026-01-01 -o vulns.csv\n```\n\nExit codes: `0` success, `1` runtime/API error, `2` usage error. On a 401/403 the\nCLI prints a hint to check the token and its permissions.\n\n## SDK usage\n\n```go",
            "```\n\n### Error handling\n\nNon-2xx responses return an `*APIError` carrying the status and the server's\nmessage. Helpers classify common cases:\n\n```go\n_, err := c.GetHost(ctx, id)\nif fleet.IsNotFound(err) {\n\t// 404\n}\nif fleet.IsUnauthorized(err) {\n\t// 401/403 — missing, expired, or under-scoped token\n}\nvar apiErr *fleet.APIError\nif errors.As(err, \u0026apiErr) {\n\tlog.Printf(\"HTTP %d: %s\", apiErr.StatusCode, apiErr.Message)\n}\n```\n\n### Options\n\n- `WithToken(string)` — the `flt_` bearer token.\n- `WithHTTPClient(*http.Client)` — custom timeouts, proxy, or TLS config.\n- `WithUserAgent(string)` — override the `User-Agent`.\n\n`New` accepts the base URL with or without a trailing `/api/v1`, and defaults the\nscheme to `https://` if omitted.\n\n## Coverage\n\nThe SDK wraps the inventory and access-management surface of the API: hosts (CRUD\n+ group membership), users (read), roles \u0026 permissions (read), groups (CRUD incl.\ndynamic rules), service accounts and tokens (CRUD), vulnerability scans\n(trigger/list/get), and CSV evidence reports. Live/interactive surfaces (terminal\nsessions, file transfer, session replay) are intentionally out of scope — those\nare interactive, not declarative. For any endpoint not yet wrapped, see the\n[API Reference](../docs/api.md).\n\n## Permissions\n\nEvery call is authorized server-side against the token's service-account role.\nGrant only what a given automation needs — e.g. a scanner bot needs `Host.Scan",
            "```bash\n# Inventory as a table, or as JSON for jq\nfleet hosts list\nfleet hosts list --json | jq '.[] | select(.enrolled==false) | .hostname'\n\n# Register a host\nfleet hosts create --hostname db-02 --env prod --tags db,postgres --ssh-user fleet\n\n# A dynamic group whose membership follows tags (no manual upkeep)\nfleet groups create --name prod-databases --env prod --tag-all db\n\n# Issue a scoped token for a CI job (secret prints to stdout, once)\nsa=$(fleet sa create --username ci-bot --roles \"$ROLE_ID\" --json | jq -r .id)\nfleet tokens create \"$sa\" --name gitlab-ci --expires-days 90 \u003e ci_token.txt\n\n# Kick a vulnerability scan across a group and pull the report\nfleet vuln scan --group \"$GROUP_ID\"\nfleet report vulnerabilities --from 2026-01-01 -o vulns.csv\n```\n\nExit codes: `0` success, `1`",
            "``bash\n# Inventory as a table, or as JSON for jq\nfleet hosts list\nfleet hosts list --json | jq '.[] | select(.enrolled==false) | .hostname'\n\n# Register a host\nfleet hosts create --hostname db-02 --env prod --tags db,postgres --ssh-user fleet\n\n# A dynamic group whose membership follows tags (no manual upkeep)\nfleet groups create --name prod-databases --env prod --tag-all db\n\n# Issue a scoped token for a CI job (secret prints to stdout, once)\nsa=$(fleet sa create --username ci-bot --roles \"$ROLE_ID\" --json | jq -r .id)\nfleet tokens create \"$sa\" --name gitlab-ci --expires-days 90 \u003e ci_token.txt\n\n# Kick a vulnerability scan across a group and pull the report\nfleet vuln scan --group \"$GROUP_ID\"\nfleet report vulnerabilities --from 2026-01-01 -o vulns.csv\n```\n\nExit codes: `0` success, `1",
            "`bash\n# Inventory as a table, or as JSON for jq\nfleet hosts list\nfleet hosts list --json | jq '.[] | select(.enrolled==false) | .hostname'\n\n# Register a host\nfleet hosts create --hostname db-02 --env prod --tags db,postgres --ssh-user fleet\n\n# A dynamic group whose membership follows tags (no manual upkeep)\nfleet groups create --name prod-databases --env prod --tag-all db\n\n# Issue a scoped token for a CI job (secret prints to stdout, once)\nsa=$(fleet sa create --username ci-bot --roles \"$ROLE_ID\" --json | jq -r .id)\nfleet tokens create \"$sa\" --name gitlab-ci --expires-days 90 \u003e ci_token.txt\n\n# Kick a vulnerability scan across a group and pull the report\nfleet vuln scan --group \"$GROUP_ID\"\nfleet report vulnerabilities --from 2026-01-01 -o vulns.csv\n```\n\nExit codes: `0`",
            "`flt_…`",
            "alias:",
            "an",
            "and",
            "audit",
            "bash",
            "c,",
            "certificates",
            "ctx",
            "delete",
            "dynamic",
            "err",
            "fleet",
            "fleet.WithToken",
            "flt_…",
            "fmt.Printf",
            "func",
            "get",
            "go",
            "h",
            "hosts",
            "import",
            "is",
            "jq",
            "least",
            "log.Fatal",
            "os.Getenv",
            "package",
            "roles",
            "scans",
            "service-accounts",
            "tokens",
            "tooling.",
            "users",
            "version",
            "vuln",
            "vulnerabilities",
            "vulnerability",
            "whoami",
            "}"
          ],
          "metrics": {
            "ast": {
              "max_depth": 31,
              "call_count": 99,
              "node_count": 1042
            },
            "file": {
              "size": 5535,
              "entropy": 5.12
            },
            "text": {
              "lines": 175,
              "top_char": 101,
              "tab_count": 23,
              "max_ws_run": 31,
              "digit_ratio": 0.01,
              "space_count": 741,
              "char_entropy": 5.12,
              "mixed_indent": 1,
              "unique_chars": 93,
              "top_char_null": 0,
              "string_density": 0.09,
              "top_char_ratio": 0.08,
              "avg_line_length": 30.63,
              "max_line_length": 101,
              "non_ascii_ratio": 0.01,
              "empty_line_ratio": 0.23,
              "last_line_length": 64,
              "whitespace_ratio": 0.17,
              "identifier_density": 3.15,
              "line_length_stddev": 31.54,
              "normalized_string_count": 1.13,
              "repeated_char_sequences": 3,
              "suspicious_string_ratio": 0.13,
              "suspicious_identifier_ratio": 0.04,
              "normalized_unique_identifiers": 37.04
            },
            "binds": {
              "count": 3
            },
            "calls": {
              "dynamic_target_count": 9,
              "obfuscated_target_count": 1
            },
            "binary": {
              "peak_region_bytes": 5120,
              "peak_region_entropy": 5.25
            },
            "strings": {
              "sql": 1,
              "bytes": 1442,
              "count": 15,
              "shell": 1,
              "url_count": 2,
              "very_long": 1,
              "avg_length": 96.13,
              "max_length": 1236,
              "avg_entropy": 2.82,
              "entropy_stddev": 1.22,
              "high_entropy_count": 1
            },
            "comments": {
              "chars": 371,
              "count": 14,
              "lines": 14,
              "to_code_ratio": 0.09
            },
            "consistency": {
              "extension_content_mismatch": 1,
              "extension_content_mismatch.script_as_text": 1
            },
            "identifiers": {
              "count": 552,
              "unique": 276,
              "avg_length": 39.42,
              "max_length": 1947,
              "min_length": 1,
              "avg_entropy": 2.22,
              "reuse_ratio": 0.5,
              "length_stddev": 206.22,
              "has_digit_ratio": 0.07,
              "sequential_names": 8,
              "single_char_count": 18,
              "single_char_ratio": 0.07,
              "high_entropy_count": 17,
              "high_entropy_ratio": 0.06,
              "all_lowercase_ratio": 0.43,
              "all_uppercase_ratio": 0.04,
              "repeated_char_names": 2,
              "numeric_suffix_count": 5,
              "underscore_prefix_count": 1
            }
          }
        },
        "id": 1,
        "mol": "O₂(AsC)H₂(CmPo₂)",
        "path": "/data/samples/unknown/foraged/go/googleusercontent.com/pkg.go.dev/github.com/kforbus3/fleet-terminal/sdk/github.com-kforbus3-fleet-terminal-sdk-v0.0.0-20260720022232-762aaf2cf8ce.zip!!github.com/kforbus3/fleet-terminal/sdk@v0.0.0-20260720022232-762aaf2cf8ce/README.md",
        "pid": 0,
        "risk": 5,
        "sha": "365d0fec874fbd119247c1c87a9d2065b7a6cca80d8b9833616052f03b98177d",
        "size": 5535,
        "traits": [
          {
            "id": "metadata/lang/natural::lang-english--atom-1",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"the\"",
            "spans": [
              [
                84,
                0
              ]
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-2",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"and\"",
            "spans": [
              [
                58,
                0
              ]
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-3",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"that\"",
            "spans": [
              [
                722,
                0
              ]
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-5",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"for\"",
            "spans": [
              [
                80,
                0
              ]
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-6",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"with\"",
            "spans": [
              [
                394,
                0
              ]
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-7",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"this\"",
            "spans": [
              [
                603,
                0
              ]
            ]
          },
          {
            "id": "micro-behaviors/communications/http/authorization-header::auth-like-constant-assignment",
            "atk": "T1071.001",
            "mbc": "C0002",
            "conf": 0.8,
            "crit": 3,
            "desc": "Auth-like constant assignment",
            "spans": [
              [
                1413,
                16
              ]
            ]
          },
          {
            "id": "micro-behaviors/communications/ssh/connect::ssh-string",
            "atk": "T1021.004",
            "conf": 0.4,
            "crit": 1,
            "desc": "References the SSH protocol",
            "spans": [
              [
                1782,
                0
              ]
            ]
          },
          {
            "id": "micro-behaviors/os/sysinfo/process::sh-whoami-command--rx-3",
            "atk": "T1082",
            "conf": 0.75,
            "crit": 1,
            "desc": "whoami current-user enumeration command",
            "spans": [
              [
                1609,
                0
              ]
            ]
          },
          {
            "id": "micro-behaviors/process/create/agent::ai-agent-terminal-tool-name",
            "atk": "T1059",
            "mbc": "B0022",
            "conf": 0.85,
            "crit": 3,
            "desc": "Agent terminal tool key",
            "spans": [
              [
                75,
                27
              ]
            ]
          },
          {
            "id": "objectives/command-and-control/dropper/staging/stager::embedded-go-program-source",
            "atk": "T1059.004",
            "conf": 0.9,
            "crit": 3,
            "desc": "Shell script embeds a Go program",
            "spans": [
              [
                3459,
                116
              ]
            ]
          },
          {
            "id": "micro-behaviors/process/create/shell/target::sh-reconstructed-command-target-shape",
            "conf": 0.9,
            "crit": 3,
            "desc": "Dynamic shell call target shape"
          },
          {
            "id": "micro-behaviors/process/user/query::whoami-command-separator",
            "atk": "T1033",
            "mbc": "E1033",
            "conf": 0.5,
            "crit": 3,
            "desc": "whoami command after shell separator",
            "spans": [
              [
                1483,
                8
              ],
              [
                1609,
                10
              ]
            ]
          },
          {
            "id": "objectives/anti-static/obfuscation/code-metrics/identifiers::identifier-obfuscation-cond-0--inline-23810",
            "atk": "T1027",
            "mbc": "B0032",
            "conf": 0.9,
            "crit": 3,
            "desc": "Average identifier length \u003e= 22 chars"
          },
          {
            "id": "micro-behaviors/fs/path/secret-config::ssh-tooling-or-transcript-context",
            "atk": "T1552.001",
            "conf": 0.9,
            "crit": 1,
            "desc": "SSH tooling or documentation transcript",
            "uses": [
              7
            ],
            "spans": [
              [
                1782,
                0
              ]
            ]
          }
        ],
        "type": "shell"
      },
      {
        "analysis_gaps": [
          "flow-graph-limited",
          "flow-query-incomplete"
        ],
        "ctx": [
          {
            "b": "Aa9l(vp%c]zddc@3jpG:AbP=sasEN6b4CLeBy/Ysa{[S2wPz*fA=SAi2{J$$vp{+\u003e2{J$#BrR4#b5.JD3jd[$BAh8kxlbm73jgrXwO2%ab4\u003eRixMW=pv@DiqyI4H9vS=-FfgG+?wPPI6wPzT4zEEumB7x5g3mMq?fe1C?AbolgoLFM\u0026aAg+fB7Gznvix5#zeAYkB7Gr0A::63wftG2vp{ZavqH6$azC.nzY\u0026EhBAh8jzdNleaz#aneOe^rBA]0Iy?Wx\u003ce^=ikzET/gAbk",
            "ln": 0,
            "col": 1,
            "line": 1
          },
          {
            "b": "d03{Za$K]!3jgS[BrARcaz\u003eL5wHH+*B98CpzF7HyfF1t.wO@]nvrcEhdjCPgw]zYjuO0ssauzUdA:-\u0026#wGU@2A==vBDKp5=x\u003ewGbauZ\u0026*BAh8kxlbX8A+Pw?Aa9l/c#ZQ%aAeCDjS\u003e{)aBsC42)\u003eJ)BrAZ?vq{f%zE+elB-YeSA48b234ic!Ef{n",
            "ln": 318,
            "col": 24,
            "line": 19
          },
          {
            "b": "3jnBtaAIWmmR(HCB0a}mx(4s3ayMxZy**%PwPP5bz/M$eaAIWmv@Dj3vqYP#CwhejayMxAeOYuBzxJLcvp{Y\u003ey\u0026T8}wo/qwx(W=}e^=ikzET/gBZ^*Rvp%TfzEEx[aAITBx(mMmazL$ozCLy%asZ\u0026sz!{\u003cBdRrH9xd=U\u0026vp@IIBrC]q31!l3iZ1P$",
            "ln": 477,
            "col": 2,
            "line": 27
          },
          {
            "b": "x(!lfvr\u003eQRzdLdB3jgrYBs{ygx(n38c)A.PAaK5wvpTj?zAn)^Bx\u0026YcefFUqe\u003eHa.B-p]jl1B?DzyC]0w]hSxp\u0026Zn/By({BAaK6bx(!ufz/fRSash8lzxZROB98CpzFa2yn]FAYc#0iAp?sV:x(!ufz/fREar\u0026uVa$j@F336Q0B-IvxzFr[]Ef{r[B-7Xiv@k:Ez/Z2wc$vvzay/tcBy/Yse\u003c\u003cL{By/YsefFwwxlbh1u2$adx(mMjaz2Olz/M$E",
            "ln": 1334,
            "col": 58,
            "line": 66
          },
          {
            "b": "y?W%jD$N2jD$dhdvru7dwmYN*By/\u0026dwmNo8A=l8tD#:6Qxl4{kA48$W3jha/31CIewPz/liZ1P}y?WD#BsnNB329#]wPz/laW3@=x(1]s3jd2VwPS6nzxJIhATAb3",
            "ln": 1611,
            "col": 52,
            "line": 74
          },
          {
            "b": "w]hSxmSrxZzGGFsBAYnUa%?qnBr#0kBr#0kBr#3lBr#0kzxZROxF8\u003eAefFQUnn\u0026M\u003ezEEx[efFFiB7=$ne\u003e6V3x(XcfzdNQbdj=PPe\u003e6U#z!%l3wgO\u003cABAh8kxlbW$z!T8qxF9m)xlbQDa$K]!dgcv/Ef{n!A+funA=91wCp(v3B-RjAdgcw\u003evrl05b4\u003eFe",
            "ln": 2046,
            "col": 4,
            "line": 95
          },
          {
            "b": "dgcv/w]/O6BAh8kxi5CYc)\u0026UCe\u003ex]4Bz+J7wH[@FxM4%lzEEx[a$K\u0026Xa$K\u0026XxM4%lzEEx[asInwADL#owN)kldgcv/w]/O6BAh8kxi5CYc)\u0026UCe\u003c%n(v@=p5BzkVhefDcE",
            "ln": 2489,
            "col": 61,
            "line": 110
          },
          {
            "b": "BywV)ayMykB.\u003eRix\u003ewF@zH0vmz/f91BzkVhaA}mnaAIaoj0nD-xK#jdx(^\u0026dBzbkdxl4{kA3e\u003eoaAITkBzkkq3jd2Mw/#bpy?kj/zGY-mz/fA6zGE0AjS\u003e{)aBFLVA=(hfe(bzkz/fV9x(m#maW3}(a%qnXaAzQvwIcI(B98qdzdM7MzGGr3zGu{",
            "ln": 5732,
            "col": 13,
            "line": 214
          },
          {
            "b": "zGG}xv@=c?By=TEazbB#xd=L\u0026zGGPgB.au^mriA!AW.t431!lhq/)4]zF90UAWSnGzz1}gwPzV%zdLmvb6v%rA=br5wG\u0026VFa%FMXb6dsoC4\u003eC$eN-d0z/]@taA.:pA=br5wGSywwPq\u003cbA+e=ga$i\u003c931!lhq/)4]zF90UAWSnGzz1s\u003eB8U@7C$}^+wH[@Fwnca7y*?PvzEEx[a$K\u0026Xa$K\u0026Xwnca7y*?PizEEx[a$i\u003c931!lhq/)4]zF90UAWQ",
            "ln": 8359,
            "col": 39,
            "line": 319
          },
          {
            "b": "BAh8kxi5CYc)\u0026UCe(2?(wH[@FzEEx[a$K\u0026Xa$K\u0026XBz\u003e@azxJ?9zdK?rA+flkx(W=}diZhF2)\u003ei+e\u003eG@5r:*1%ctvuImr\u0026==A+fq-zBv]UB1wBTwQ5fdA+fqzwmo+8a]",
            "ln": 10479,
            "col": 7,
            "line": 394
          },
          {
            "b": "x(1]s3jd1BA+funA=91hA=IG[34ic!2})}Ora]?=B7F\u003c4wPP5eB0bKqz*c7wwQ4S[BzMjBz/f5@e*9#hx(n2nx(\u003eFpy*?3}y\u003cvdAzY\u003cahA+PGmB0a$3zxJB$AcckywGQ",
            "ln": 10822,
            "col": 14,
            "line": 403
          },
          {
            "b": "zfdy1Ab]VgBzL?yz/WKfByX%6AX5sSBz\u003e@azxJCfwNPW(wfx(ZLPU3?z/PziBzbxfaAIa7A+ftnzF%.IazC{ux(+zmz/^ayxM59jayO[\u003ex(k%Qdgcv/w]hSxp\u0026Zn/BzL?yBz\u003e}Eq!oDVwPPvd2)\u003eS-BAIRwaz$[f3jgiJB7DErA+fAjyH[XJ3jd2M",
            "ln": 10931,
            "col": 4,
            "line": 407
          },
          {
            "b": "Bz\u0026Pn329#]wPz/laW3@=x(1]s3jd2VwPS6nzxJIhATAb33jgAUaA8yAau.\u003ega%FdR3jd2CefFIAAV^H/z/WKfByYrjBs{Tnx()]mwmoN*dgcv/A+funA=91hA=IG[Ef{o{w/$V9AV^zaaA8rNs8@1%wKZxIwHIFtBsXLBvrt{eatvZ(g=cTyaz2Olar-(\u003czFr]fDKp5=A+funA=91hA=IG[Ef{o)zfdy1Ab]VgBy(}tB1QykwmY!4efDcXA=l5hasgLvvTi6bB0bNyash8lzxZROy?mGjwmoN*dj=PWB-Y5t336Q0B-IvxzFr[]Ef]",
            "ln": 13987,
            "col": 41,
            "line": 518
          }
        ],
        "depth": 1,
        "facts": {
          "imp": [
            [
              "",
              "strings.TrimSpace"
            ],
            [
              "",
              "strings.Split"
            ],
            [
              "",
              "make"
            ],
            [
              "",
              "len"
            ],
            [
              "",
              "strings.TrimSpace"
            ],
            [
              "",
              "append"
            ],
            [
              "",
              "flag.NewFlagSet"
            ],
            [
              "",
              "fs.BoolVar"
            ],
            [
              "",
              "client"
            ],
            [
              "",
              "c.Version"
            ],
            [
              "",
              "hasJSON"
            ],
            [
              "",
              "printJSON"
            ],
            [
              "",
              "fmt.Printf"
            ],
            [
              "",
              "client"
            ],
            [
              "",
              "c.Whoami"
            ],
            [
              "",
              "hasJSON"
            ],
            [
              "",
              "printJSON"
            ],
            [
              "",
              "fmt.Printf"
            ],
            [
              "",
              "dash"
            ],
            [
              "",
              "fmt.Printf"
            ],
            [
              "",
              "fmt.Printf"
            ],
            [
              "",
              "strings.Join"
            ],
            [
              "",
              "len"
            ],
            [
              "",
              "errors.New"
            ],
            [
              "",
              "client"
            ],
            [
              "",
              "hasJSON"
            ],
            [
              "",
              "c.ListHosts"
            ],
            [
              "",
              "printJSON"
            ],
            [
              "",
              "newTable"
            ],
            [
              "",
              "fmt.Fprintln"
            ],
            [
              "",
              "fmt.Fprintf"
            ],
            [
              "",
              "dash"
            ],
            [
              "",
              "strings.Join"
            ],
            [
              "",
              "tw.Flush"
            ],
            [
              "",
              "len"
            ],
            [
              "",
              "errors.New"
            ],
            [
              "",
              "c.GetHost"
            ],
            [
              "",
              "printJSON"
            ],
            [
              "",
              "flag.NewFlagSet"
            ],
            [
              "",
              "fs.StringVar"
            ],
            [
              "",
              "fs.StringVar"
            ],
            [
              "",
              "fs.StringVar"
            ],
            [
              "",
              "fs.StringVar"
            ],
            [
              "",
              "fs.StringVar"
            ],
            [
              "",
              "fs.StringVar"
            ],
            [
              "",
              "fs.IntVar"
            ],
            [
              "",
              "fs.StringVar"
            ],
            [
              "",
              "fs.Parse"
            ],
            [
              "",
              "errors.New"
            ],
            [
              "",
              "splitList"
            ],
            [
              "",
              "c.CreateHost"
            ],
            [
              "",
              "fmt.Printf"
            ],
            [
              "",
              "len"
            ],
            [
              "",
              "errors.New"
            ],
            [
              "",
              "c.DeleteHost"
            ],
            [
              "",
              "fmt.Println"
            ],
            [
              "",
              "len"
            ],
            [
              "",
              "errors.New"
            ],
            [
              "",
              "c.AddHostToGroup"
            ],
            [
              "",
              "fmt.Println"
            ],
            [
              "",
              "len"
            ],
            [
              "",
              "errors.New"
            ],
            [
              "",
              "c.RemoveHostFromGroup"
            ],
            [
              "",
              "fmt.Println"
            ],
            [
              "",
              "fmt.Errorf"
            ],
            [
              "",
              "len"
            ],
            [
              "",
              "errors.New"
            ],
            [
              "",
              "client"
            ],
            [
              "",
              "hasJSON"
            ],
            [
              "",
              "c.ListGroups"
            ],
            [
              "",
              "printJSON"
            ],
            [
              "",
              "newTable"
            ],
            [
              "",
              "fmt.Fprintln"
            ],
            [
              "",
              "fmt.Fprintf"
            ],
            [
              "",
              "dash"
            ],
            [
              "",
              "tw.Flush"
            ],
            [
              "",
              "flag.NewFlagSet"
            ],
            [
              "",
              "fs.StringVar"
            ],
            [
              "",
              "fs.StringVar"
            ],
            [
              "",
              "fs.StringVar"
            ],
            [
              "",
              "fs.StringVar"
            ],
            [
              "",
              "fs.StringVar"
            ],
            [
              "",
              "fs.StringVar"
            ],
            [
              "",
              "fs.StringVar"
            ],
            [
              "",
              "fs.Parse"
            ],
            [
              "",
              "errors.New"
            ],
            [
              "",
              "splitList"
            ],
            [
              "",
              "splitList"
            ],
            [
              "",
              "len"
            ],
            [
              "",
              "len"
            ],
            [
              "",
              "c.CreateGroup"
            ],
            [
              "",
              "fmt.Printf"
            ],
            [
              "",
              "len"
            ],
            [
              "",
              "errors.New"
            ],
            [
              "",
              "c.DeleteGroup"
            ],
            [
              "",
              "fmt.Println"
            ],
            [
              "",
              "fmt.Errorf"
            ],
            [
              "",
              "client"
            ],
            [
              "",
              "len"
            ],
            [
              "",
              "errors.New"
            ],
            [
              "",
              "hasJSON"
            ],
            [
              "",
              "c.ListUsers"
            ],
            [
              "",
              "printJSON"
            ],
            [
              "",
              "newTable"
            ],
            [
              "",
              "fmt.Fprintln"
            ],
            [
              "",
              "fmt.Fprintf"
            ],
            [
              "",
              "dash"
            ],
            [
              "",
              "strings.Join"
            ],
            [
              "",
              "tw.Flush"
            ],
            [
              "",
              "client"
            ],
            [
              "",
              "len"
            ],
            [
              "",
              "errors.New"
            ],
            [
              "",
              "hasJSON"
            ],
            [
              "",
              "c.ListRoles"
            ],
            [
              "",
              "printJSON"
            ],
            [
              "",
              "newTable"
            ],
            [
              "",
              "fmt.Fprintln"
            ],
            [
              "",
              "fmt.Fprintf"
            ],
            [
              "",
              "len"
            ],
            [
              "",
              "tw.Flush"
            ],
            [
              "",
              "len"
            ],
            [
              "",
              "errors.New"
            ],
            [
              "",
              "client"
            ],
            [
              "",
              "hasJSON"
            ],
            [
              "",
              "c.ListServiceAccounts"
            ],
            [
              "",
              "printJSON"
            ],
            [
              "",
              "newTable"
            ],
            [
              "",
              "fmt.Fprintln"
            ],
            [
              "",
              "fmt.Fprintf"
            ],
            [
              "",
              "strings.Join"
            ],
            [
              "",
              "tw.Flush"
            ],
            [
              "",
              "flag.NewFlagSet"
            ],
            [
              "",
              "fs.StringVar"
            ],
            [
              "",
              "fs.StringVar"
            ],
            [
              "",
              "fs.StringVar"
            ],
            [
              "",
              "fs.StringVar"
            ],
            [
              "",
              "fs.Parse"
            ],
            [
              "",
              "errors.New"
            ],
            [
              "",
              "splitList"
            ],
            [
              "",
              "splitList"
            ],
            [
              "",
              "c.CreateServiceAccount"
            ],
            [
              "",
              "fmt.Printf"
            ],
            [
              "",
              "len"
            ],
            [
              "",
              "errors.New"
            ],
            [
              "",
              "c.DeleteServiceAccount"
            ],
            [
              "",
              "fmt.Println"
            ],
            [
              "",
              "fmt.Errorf"
            ],
            [
              "",
              "len"
            ],
            [
              "",
              "errors.New"
            ],
            [
              "",
              "client"
            ],
            [
              "",
              "len"
            ],
            [
              "",
              "errors.New"
            ],
            [
              "",
              "hasJSON"
            ],
            [
              "",
              "c.ListTokens"
            ],
            [
              "",
              "printJSON"
            ],
            [
              "",
              "newTable"
            ],
            [
              "",
              "fmt.Fprintln"
            ],
            [
              "",
              "fmtTime"
            ],
            [
              "",
              "fmt.Fprintf"
            ],
            [
              "",
              "fmtTime"
            ],
            [
              "",
              "tw.Flush"
            ],
            [
              "",
              "len"
            ],
            [
              "",
              "errors.New"
            ],
            [
              "",
              "flag.NewFlagSet"
            ],
            [
              "",
              "fs.StringVar"
            ],
            [
              "",
              "fs.IntVar"
            ],
            [
              "",
              "fs.Parse"
            ],
            [
              "",
              "errors.New"
            ],
            [
              "",
              "c.CreateToken"
            ],
            [
              "",
              "fmt.Fprintln"
            ],
            [
              "",
              "fmt.Println"
            ],
            [
              "",
              "len"
            ],
            [
              "",
              "errors.New"
            ],
            [
              "",
              "c.RevokeToken"
            ],
            [
              "",
              "fmt.Println"
            ],
            [
              "",
              "fmt.Errorf"
            ],
            [
              "",
              "len"
            ],
            [
              "",
              "errors.New"
            ],
            [
              "",
              "client"
            ],
            [
              "",
              "flag.NewFlagSet"
            ],
            [
              "",
              "fs.StringVar"
            ],
            [
              "",
              "fs.StringVar"
            ],
            [
              "",
              "fs.Parse"
            ],
            [
              "",
              "c.ScanHost"
            ],
            [
              "",
              "c.ScanGroup"
            ],
            [
              "",
              "errors.New"
            ],
            [
              "",
              "fmt.Printf"
            ],
            [
              "",
              "len"
            ],
            [
              "",
              "strings.Join"
            ],
            [
              "",
              "subFlags"
            ],
            [
              "",
              "fs.StringVar"
            ],
            [
              "",
              "fs.Parse"
            ],
            [
              "",
              "c.LatestVulnScans"
            ],
            [
              "",
              "c.ListVulnScans"
            ],
            [
              "",
              "printJSON"
            ],
            [
              "",
              "newTable"
            ],
            [
              "",
              "fmt.Fprintln"
            ],
            [
              "",
              "fmtTime"
            ],
            [
              "",
              "fmt.Fprintf"
            ],
            [
              "",
              "dash"
            ],
            [
              "",
              "tw.Flush"
            ],
            [
              "",
              "len"
            ],
            [
              "",
              "errors.New"
            ],
            [
              "",
              "c.GetVulnScan"
            ],
            [
              "",
              "printJSON"
            ],
            [
              "",
              "fmt.Errorf"
            ],
            [
              "",
              "len"
            ],
            [
              "",
              "errors.New"
            ],
            [
              "",
              "client"
            ],
            [
              "",
              "fleet.ReportKind"
            ],
            [
              "",
              "flag.NewFlagSet"
            ],
            [
              "",
              "fs.StringVar"
            ],
            [
              "",
              "fs.StringVar"
            ],
            [
              "",
              "fs.StringVar"
            ],
            [
              "",
              "fs.Parse"
            ],
            [
              "",
              "c.Report"
            ],
            [
              "",
              "os.Stdout.Write"
            ],
            [
              "",
              "os.WriteFile"
            ],
            [
              "",
              "fmt.Fprintf"
            ],
            [
              "",
              "len"
            ],
            [
              "",
              "context"
            ],
            [
              "",
              "errors"
            ],
            [
              "",
              "flag"
            ],
            [
              "",
              "fmt"
            ],
            [
              "",
              "github.com/kforbus3/Fleet-Terminal/sdk"
            ],
            [
              "",
              "os"
            ],
            [
              "",
              "strings"
            ]
          ],
          "mbr": [
            "c.AddHostToGroup",
            "c.CreateGroup",
            "c.CreateHost",
            "c.CreateServiceAccount",
            "c.CreateToken",
            "c.DeleteGroup",
            "c.DeleteHost",
            "c.DeleteServiceAccount",
            "c.GetHost",
            "c.GetVulnScan",
            "c.LatestVulnScans",
            "c.ListGroups",
            "c.ListHosts",
            "c.ListRoles",
            "c.ListServiceAccounts",
            "c.ListTokens",
            "c.ListUsers",
            "c.ListVulnScans",
            "c.RemoveHostFromGroup",
            "c.Report",
            "c.RevokeToken",
            "c.ScanGroup",
            "c.ScanHost",
            "c.Version",
            "c.Whoami",
            "errors.New",
            "flag.ContinueOnError",
            "flag.NewFlagSet",
            "fleet.ReportKind",
            "fmt.Errorf",
            "fmt.Fprintf",
            "fmt.Fprintln",
            "fmt.Printf",
            "fmt.Println",
            "fs.BoolVar",
            "fs.IntVar",
            "fs.Parse",
            "fs.StringVar",
            "g.Description",
            "g.ID",
            "g.Name",
            "g.Rule",
            "h.Enrolled",
            "h.Environment",
            "h.Hostname",
            "h.ID",
            "h.Tags",
            "id.IsSuperAdmin",
            "id.Permissions",
            "id.User",
            "id.User.DisplayName",
            "id.User.Username",
            "in.Address",
            "in.Description",
            "in.DisplayName",
            "in.Environment",
            "in.ExpiresInDays",
            "in.GroupIDs",
            "in.Hostname",
            "in.Name",
            "in.Owner",
            "in.RoleIDs",
            "in.Rule",
            "in.SSHPort",
            "in.SSHUser",
            "in.Tags",
            "in.Username",
            "os.Stderr",
            "os.Stdout",
            "os.Stdout.Write",
            "os.WriteFile",
            "r.ID",
            "r.IsBuiltin",
            "r.Name",
            "r.Permissions",
            "rule.Environment",
            "rule.HostnameContains",
            "rule.OSContains",
            "rule.TagsAll",
            "rule.TagsAny",
            "s.Critical",
            "s.FinishedAt",
            "s.High",
            "s.Hostname",
            "s.ID",
            "s.IsDisabled",
            "s.MaxCVSS",
            "s.Medium",
            "s.Roles",
            "s.Status",
            "s.TokenCount",
            "s.Username",
            "sa.ID",
            "sa.Username",
            "strings.Join",
            "strings.Split",
            "strings.TrimSpace",
            "t.CreatedAt",
            "t.ExpiresAt",
            "t.ID",
            "t.Name",
            "t.Prefix",
            "t.RevokedAt",
            "tok.Secret",
            "tw.Flush",
            "u.AuthSource",
            "u.ID",
            "u.IsDisabled",
            "u.Roles",
            "u.Username",
            "v.AppName",
            "v.Environment",
            "v.Version"
          ],
          "tgt": [
            "append",
            "c.AddHostToGroup",
            "c.CreateGroup",
            "c.CreateHost",
            "c.CreateServiceAccount",
            "c.CreateToken",
            "c.DeleteGroup",
            "c.DeleteHost",
            "c.DeleteServiceAccount",
            "c.GetHost",
            "c.GetVulnScan",
            "c.LatestVulnScans",
            "c.ListGroups",
            "c.ListHosts",
            "c.ListRoles",
            "c.ListServiceAccounts",
            "c.ListTokens",
            "c.ListUsers",
            "c.ListVulnScans",
            "c.RemoveHostFromGroup",
            "c.Report",
            "c.RevokeToken",
            "c.ScanGroup",
            "c.ScanHost",
            "c.Version",
            "c.Whoami",
            "client",
            "dash",
            "errors.New",
            "flag.NewFlagSet",
            "fleet.ReportKind",
            "fmt.Errorf",
            "fmt.Fprintf",
            "fmt.Fprintln",
            "fmt.Printf",
            "fmt.Println",
            "fmtTime",
            "fs.BoolVar",
            "fs.IntVar",
            "fs.Parse",
            "fs.StringVar",
            "hasJSON",
            "len",
            "make",
            "newTable",
            "os.Stdout.Write",
            "os.WriteFile",
            "printJSON",
            "splitList",
            "strings.Join",
            "strings.Split",
            "strings.TrimSpace",
            "subFlags",
            "tw.Flush"
          ],
          "funcs": [
            [
              "splitList",
              210
            ],
            [
              "subFlags",
              559
            ],
            [
              "cmdVersion",
              737
            ],
            [
              "cmdWhoami",
              1049
            ],
            [
              "cmdHosts",
              1481
            ],
            [
              "cmdGroups",
              4027
            ],
            [
              "cmdUsers",
              6449
            ],
            [
              "cmdRoles",
              7031
            ],
            [
              "cmdServiceAccounts",
              7569
            ],
            [
              "cmdTokens",
              9380
            ],
            [
              "cmdVuln",
              11371
            ],
            [
              "cmdReport",
              13357
            ]
          ],
          "metrics": {
            "ast": {
              "op.eq": 22,
              "op.gt": 2,
              "op.lt": 3,
              "op.ne": 54,
              "op.add": 1,
              "op.lor": 6,
              "op.mul": 2,
              "op.band": 29,
              "max_depth": 19,
              "call_count": 220,
              "node_count": 5889,
              "member_count": 113,
              "max_array_len": 2,
              "op_density.eq": 0,
              "op_density.gt": 0,
              "op_density.lt": 0,
              "op_density.ne": 0.01,
              "op_density.add": 0,
              "op_density.lor": 0,
              "op_density.mul": 0,
              "op_density.band": 0,
              "max_concat_chain": 2,
              "member_depth_max": 3
            },
            "file": {
              "size": 14241,
              "entropy": 5.14
            },
            "text": {
              "lines": 531,
              "top_char": 114,
              "tab_count": 898,
              "max_ws_run": 1,
              "digit_ratio": 0.01,
              "space_count": 1355,
              "char_entropy": 5.14,
              "unique_chars": 86,
              "top_char_null": 0,
              "string_density": 0.38,
              "top_char_ratio": 0.08,
              "avg_line_length": 25.82,
              "max_line_length": 121,
              "non_ascii_ratio": 0,
              "empty_line_ratio": 0.03,
              "last_line_length": 1,
              "whitespace_ratio": 0.2,
              "identifier_density": 2.09,
              "line_length_stddev": 24.34,
              "normalized_string_count": 8.72,
              "suspicious_string_ratio": 0,
              "suspicious_identifier_ratio": 0.07,
              "normalized_unique_identifiers": 20.22
            },
            "binary": {
              "peak_region_bytes": 14241,
              "peak_region_entropy": 5.2
            },
            "source": {
              "function_count": 12
            },
            "imports": {
              "count": 7,
              "stdlib_count": 6,
              "stdlib_ratio": 0.86,
              "third_party_count": 1,
              "third_party_ratio": 0.14
            },
            "strings": {
              "sql": 1,
              "bytes": 2838,
              "count": 201,
              "url_count": 1,
              "avg_length": 14.12,
              "max_length": 73,
              "avg_entropy": 2.79,
              "empty_count": 37,
              "entropy_stddev": 1.08
            },
            "comments": {
              "chars": 310,
              "count": 4,
              "lines": 4,
              "to_code_ratio": 0.01
            },
            "functions": {
              "count": 12,
              "density": 2.26,
              "avg_params": 1.92,
              "code_ratio": 0.95,
              "max_params": 2,
              "length_stddev": 29.33,
              "avg_name_length": 9.33,
              "avg_length_lines": 42.08,
              "max_length_lines": 91,
              "min_length_lines": 5,
              "high_entropy_names": 1,
              "single_char_params": 1,
              "avg_param_name_length": 3.57
            },
            "identifiers": {
              "count": 1108,
              "unique": 183,
              "avg_length": 6.86,
              "max_length": 20,
              "min_length": 1,
              "avg_entropy": 2.3,
              "reuse_ratio": 0.17,
              "length_stddev": 3.93,
              "has_digit_ratio": 0.01,
              "sequential_names": 12,
              "single_char_count": 12,
              "single_char_ratio": 0.07,
              "high_entropy_count": 6,
              "high_entropy_ratio": 0.03,
              "all_lowercase_ratio": 0.35,
              "all_uppercase_ratio": 0.01,
              "numeric_suffix_count": 1,
              "underscore_prefix_count": 1
            }
          }
        },
        "id": 2,
        "mol": "H₃(DbFPo)Md(In)",
        "path": "/data/samples/unknown/foraged/go/googleusercontent.com/pkg.go.dev/github.com/kforbus3/fleet-terminal/sdk/github.com-kforbus3-fleet-terminal-sdk-v0.0.0-20260720022232-762aaf2cf8ce.zip!!github.com/kforbus3/fleet-terminal/sdk@v0.0.0-20260720022232-762aaf2cf8ce/cmd/fleet/commands.go",
        "pid": 0,
        "risk": 4,
        "sha": "47c752d14aded8f8c21ba29fdaa11b325d05394146e32f60b3bf1106e2446447",
        "size": 14241,
        "traits": [
          {
            "id": "metadata/import/go/context::context",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports context",
            "spans": [
              [
                24,
                0
              ]
            ]
          },
          {
            "id": "metadata/import/go/errors::errors",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports errors",
            "spans": [
              [
                35,
                0
              ]
            ]
          },
          {
            "id": "metadata/import/go/flag::flag",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports flag",
            "spans": [
              [
                45,
                0
              ]
            ]
          },
          {
            "id": "metadata/import/go/fmt::fmt",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports fmt",
            "spans": [
              [
                53,
                0
              ]
            ]
          },
          {
            "id": "metadata/import/go/github/com/kforbus3/fleet-terminal/sdk::github/com/kforbus3/fleet-terminal/sdk",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports github.com/kforbus3/Fleet-Terminal/sdk",
            "spans": [
              [
                84,
                0
              ]
            ]
          },
          {
            "id": "metadata/import/go/os::os",
            "conf": 0.95,
            "crit": 3,
            "desc": "imports os",
            "spans": [
              [
                60,
                2
              ]
            ]
          },
          {
            "id": "metadata/import/go/strings::strings",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports strings",
            "spans": [
              [
                66,
                0
              ]
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-1",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"the\"",
            "spans": [
              [
                5780,
                0
              ]
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-5",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"for\"",
            "spans": [
              [
                366,
                0
              ]
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-6",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"with\"",
            "spans": [
              [
                525,
                0
              ]
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-7",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"this\"",
            "spans": [
              [
                10979,
                0
              ]
            ]
          },
          {
            "id": "micro-behaviors/data/db/schema/relational::account-handle-field",
            "conf": 0.8,
            "crit": 3,
            "desc": "Account handle field name",
            "spans": [
              [
                8423,
                10
              ]
            ]
          },
          {
            "id": "micro-behaviors/fs/write/file/full::go-os-writefile",
            "conf": 0.9,
            "crit": 3,
            "desc": "Go writes data with os.WriteFile",
            "spans": [
              [
                14100,
                12
              ]
            ]
          },
          {
            "id": "micro-behaviors/fs/write/file/full::go-write-file-method-call",
            "conf": 0.6,
            "crit": 3,
            "desc": "Go WriteFile method call",
            "spans": [
              [
                14102,
                11
              ]
            ]
          },
          {
            "id": "micro-behaviors/fs/write/file/full::os-write-file",
            "conf": 0.8,
            "crit": 3,
            "desc": "Write file via os.WriteFile",
            "spans": [
              [
                14100,
                12
              ]
            ]
          },
          {
            "id": "micro-behaviors/process/io/write::go-write-method-call",
            "conf": 0.65,
            "crit": 3,
            "desc": "Go Write/WriteAt method call",
            "spans": [
              [
                14051,
                15
              ]
            ]
          }
        ],
        "type": "go"
      },
      {
        "ctx": [
          {
            "b": "fe1Cnz/6u1zE:(4y?mg1azC)tBzbkdA+f9aBy=O6B-.Lsvruj4zxIqunG.R-AV^?/wO2%araQ8!x(mu}e*9-cayPzmxK#76x\u003e7N[wPFhifcCEMBz8!9aAIamC4\u003eC$eN-d0z/]@tave*}aARKqwO@S0zE:(2A+PYdB0bNrwGT(tq=B(9p!q^KxMw3lxj@AfxK@qRzY?$DodQA6fcCsOayPekBzbxaxcqFrBS+g5zxJFdazCZoBzbkdCv+kary[MVazC.pwO#QdA^orDv}b",
            "ln": 0,
            "col": 1,
            "line": 1
          },
          {
            "b": "v@=H9azL?7B1wCxzE:(7zF0]$B98CBv@#\u003clwGUA7Bz(28BzkVhe^:l+3nj4Pra]#!azC)twncabx(mB5azbUjz6ij#y?mg1v@#J{efG4FwGU]eeOG6zBt49zwNPvaxkz0$B0bNyz!{LrxKM09Byx03B0bNyaARpd3nj4PwmoN*vQTs?ay]hbwN/*#C{3ZqAV/ylv@DK4A^onWu$Kj^wPRr5x(+zsxK@q%vr\u003cCDz.kHdC}p7Wz!\u0026{4eN-^zxK#76x\u003e7N[wN(b",
            "ln": 269,
            "col": 24,
            "line": 4
          },
          {
            "b": "BAnNvx(!w6fe0Szy?mg1aztXmBAnNmA+eW3wGSMRxM4%lzEEx[ay[}kfFT+5eOe*yaAhvtwfrDQByw*6ay[}jAbP/txl4N83nj4sw]83\u0026BrCjpz/{2uay/C6vru66eIg\u003cG",
            "ln": 745,
            "col": 13,
            "line": 17
          },
          {
            "b": "ePh+PB.\u003e@pe[n%C3nj4sw]83\u0026BrC^vz^^G%3ufA-yHH\u003c!az\u003eL3zvc.+ze:AlBrz$s2{J\u003e$zGGDmBrR4#b4UU4z!9N1xd[1vz/c:a2{J@3A=k#ta{[S2w]hSl3jd[{B0p}$b5.JQB7]o8vqEa{2{KF5CYUPXvpBC3x(){ba{[S2BzkP6a{[U-w]83\u0026Brz=ux([3hvLheez7/Wpz/PrfB2bEsy?mg1eMuq4ze0(@y+G\u003cuyA:9m3jnBtaA?spB7]MgazC)tB97\u0026cAaJM5vrrS3B.LV5aARsmwGVegvivdrwm/T^xlbgteM:cjvqfQiC4CYnx(v(Le?O+2e^==gAV/KpA=U@kzxI7+b4Lnd",
            "ln": 1022,
            "col": 51,
            "line": 21
          },
          {
            "b": "dgcz]B-7XiA=(mFv@#@rv@DmbwQ5qHlVl\u003c:wQ5qFay/n0aAITBx(mMmayPq6B0aW)B98CpzF7yvwPz*fAV/Yo33gr8ByO#bv@k:0DKp6?vrl05b4$L7A3u?Qa$WELec",
            "ln": 1816,
            "col": 34,
            "line": 61
          },
          {
            "b": "wPS6nzxJ?hyZHFUvrl05b6EKrB7]Mgb035q336Q0B-Ivxv@k:SwPz\u003caz/c$kBA/tVvrc14dgcw\u003evrl05b6NZsvqPZ5iTMf1A+funA=91fzdDZYz^^G%c$vvzefFwwxlbHe31Ey+wGSggz/Z2wb035q336Q0B-Ivxv@k:Ez/Z2wc$vvzefFwwxlbHe31Ey+wGSgfA=l8tB0rTL2)\u003eS-BAIRway/n0m@\u0026J\u003cAc0BqBA/tVvrc14dgcw\u003evrl05a]",
            "ln": 1941,
            "col": 4,
            "line": 67
          },
          {
            "b": "w{503ay/k4wO#PrdiH2*w]83\u0026Bs]{%x\u003eqg7efFIAA=k$EaBsC4vQTs?auzUdz/WK3wPRH3B%[L7oHRxHuSx#$a$i\u003c9x\u003ewF%vrl05jV%]ia%qjt2)\u003eS-BAIRwaz$[fefFIAA=k#te(2#4c)zbOmmyf.rz(Hkx(+zmz/^aywPP4ywIdQFazt\u003esAc15[fj]3iwD",
            "ln": 2582,
            "col": 1,
            "line": 96
          }
        ],
        "depth": 1,
        "facts": {
          "imp": [
            [
              "",
              "len"
            ],
            [
              "",
              "usage"
            ],
            [
              "",
              "os.Exit"
            ],
            [
              "",
              "signal.NotifyContext"
            ],
            [
              "",
              "context.Background"
            ],
            [
              "",
              "stop"
            ],
            [
              "",
              "run"
            ],
            [
              "",
              "errors.Is"
            ],
            [
              "",
              "os.Exit"
            ],
            [
              "",
              "fmt.Fprintln"
            ],
            [
              "",
              "fleet.IsUnauthorized"
            ],
            [
              "",
              "fmt.Fprintln"
            ],
            [
              "",
              "os.Exit"
            ],
            [
              "",
              "errors.New"
            ],
            [
              "",
              "usage"
            ],
            [
              "",
              "cmdVersion"
            ],
            [
              "",
              "cmdWhoami"
            ],
            [
              "",
              "cmdHosts"
            ],
            [
              "",
              "cmdGroups"
            ],
            [
              "",
              "cmdUsers"
            ],
            [
              "",
              "cmdRoles"
            ],
            [
              "",
              "cmdServiceAccounts"
            ],
            [
              "",
              "cmdTokens"
            ],
            [
              "",
              "cmdVuln"
            ],
            [
              "",
              "cmdReport"
            ],
            [
              "",
              "fmt.Fprintf"
            ],
            [
              "",
              "usage"
            ],
            [
              "",
              "os.Getenv"
            ],
            [
              "",
              "errors.New"
            ],
            [
              "",
              "fleet.New"
            ],
            [
              "",
              "fleet.WithToken"
            ],
            [
              "",
              "os.Getenv"
            ],
            [
              "",
              "fleet.WithUserAgent"
            ],
            [
              "",
              "fmt.Fprint"
            ],
            [
              "",
              "append"
            ],
            [
              "",
              "json.NewEncoder"
            ],
            [
              "",
              "enc.SetIndent"
            ],
            [
              "",
              "enc.Encode"
            ],
            [
              "",
              "tabwriter.NewWriter"
            ],
            [
              "",
              "t.IsZero"
            ],
            [
              "",
              "t.Format"
            ],
            [
              "",
              "context"
            ],
            [
              "",
              "encoding/json"
            ],
            [
              "",
              "errors"
            ],
            [
              "",
              "fmt"
            ],
            [
              "",
              "github.com/kforbus3/Fleet-Terminal/sdk"
            ],
            [
              "",
              "os"
            ],
            [
              "",
              "os/signal"
            ],
            [
              "",
              "text/tabwriter"
            ],
            [
              "",
              "time"
            ]
          ],
          "mbr": [
            "context.Background",
            "enc.Encode",
            "enc.SetIndent",
            "errors.Is",
            "errors.New",
            "fleet.IsUnauthorized",
            "fleet.New",
            "fleet.WithToken",
            "fleet.WithUserAgent",
            "fmt.Fprint",
            "fmt.Fprintf",
            "fmt.Fprintln",
            "json.NewEncoder",
            "os.Args",
            "os.Exit",
            "os.Getenv",
            "os.Interrupt",
            "os.Stderr",
            "os.Stdout",
            "signal.NotifyContext",
            "t.Format",
            "t.IsZero",
            "tabwriter.NewWriter"
          ],
          "tgt": [
            "append",
            "cmdGroups",
            "cmdHosts",
            "cmdReport",
            "cmdRoles",
            "cmdServiceAccounts",
            "cmdTokens",
            "cmdUsers",
            "cmdVersion",
            "cmdVuln",
            "cmdWhoami",
            "context.Background",
            "enc.Encode",
            "enc.SetIndent",
            "errors.Is",
            "errors.New",
            "fleet.IsUnauthorized",
            "fleet.New",
            "fleet.WithToken",
            "fleet.WithUserAgent",
            "fmt.Fprint",
            "fmt.Fprintf",
            "fmt.Fprintln",
            "json.NewEncoder",
            "len",
            "os.Exit",
            "os.Getenv",
            "run",
            "signal.NotifyContext",
            "stop",
            "t.Format",
            "t.IsZero",
            "tabwriter.NewWriter",
            "usage"
          ],
          "funcs": [
            [
              "main",
              1309
            ],
            [
              "run",
              1819
            ],
            [
              "client",
              2582
            ],
            [
              "usage",
              2879
            ],
            [
              "hasJSON",
              4631
            ],
            [
              "printJSON",
              4828
            ],
            [
              "newTable",
              4943
            ],
            [
              "dash",
              5038
            ],
            [
              "fmtTime",
              5110
            ]
          ],
          "metrics": {
            "ast": {
              "op.eq": 3,
              "op.lt": 1,
              "op.ne": 1,
              "op.add": 1,
              "max_depth": 14,
              "call_count": 41,
              "node_count": 1060,
              "member_count": 23,
              "op_density.eq": 0,
              "op_density.lt": 0,
              "op_density.ne": 0,
              "op_density.add": 0,
              "max_concat_chain": 2,
              "member_depth_max": 2
            },
            "file": {
              "size": 5211,
              "entropy": 5.04
            },
            "text": {
              "lines": 187,
              "top_char": 101,
              "tab_count": 132,
              "max_ws_run": 26,
              "digit_ratio": 0.01,
              "space_count": 767,
              "char_entropy": 5.04,
              "mixed_indent": 1,
              "unique_chars": 87,
              "top_char_null": 0,
              "string_density": 0.22,
              "top_char_ratio": 0.07,
              "ascii_art_lines": 1,
              "avg_line_length": 26.87,
              "max_line_length": 118,
              "non_ascii_ratio": 0,
              "empty_line_ratio": 0.11,
              "last_line_length": 1,
              "whitespace_ratio": 0.21,
              "identifier_density": 0.95,
              "line_length_stddev": 25.72,
              "normalized_string_count": 3,
              "repeated_char_sequences": 12,
              "suspicious_string_ratio": 0.02,
              "suspicious_comment_ratio": 0.04,
              "suspicious_identifier_ratio": 0.07,
              "normalized_unique_identifiers": 10.07
            },
            "binary": {
              "peak_region_bytes": 4187,
              "peak_region_entropy": 5.09
            },
            "source": {
              "function_count": 9
            },
            "imports": {
              "count": 9,
              "stdlib_count": 8,
              "stdlib_ratio": 0.89,
              "third_party_count": 1,
              "third_party_ratio": 0.11
            },
            "strings": {
              "sql": 1,
              "bytes": 1955,
              "count": 41,
              "url_count": 1,
              "very_long": 1,
              "avg_length": 47.68,
              "max_length": 1549,
              "avg_entropy": 2.35,
              "empty_count": 3,
              "entropy_stddev": 1.14
            },
            "comments": {
              "chars": 1255,
              "count": 26,
              "empty": 5,
              "lines": 21,
              "high_entropy": 1,
              "to_code_ratio": 0.13,
              "url_in_comments": 1
            },
            "functions": {
              "count": 9,
              "density": 4.81,
              "avg_params": 0.78,
              "code_ratio": 0.71,
              "max_params": 3,
              "length_stddev": 12.42,
              "avg_name_length": 5.89,
              "no_params_count": 4,
              "avg_length_lines": 14.78,
              "max_length_lines": 41,
              "min_length_lines": 3,
              "single_char_params": 3,
              "avg_param_name_length": 2.43
            },
            "identifiers": {
              "count": 178,
              "unique": 76,
              "avg_length": 6.03,
              "max_length": 18,
              "min_length": 1,
              "avg_entropy": 2.19,
              "reuse_ratio": 0.43,
              "length_stddev": 3.23,
              "sequential_names": 5,
              "single_char_count": 6,
              "single_char_ratio": 0.08,
              "high_entropy_count": 2,
              "high_entropy_ratio": 0.03,
              "all_lowercase_ratio": 0.46,
              "all_uppercase_ratio": 0.01,
              "underscore_prefix_count": 1
            }
          }
        },
        "id": 3,
        "mol": "H(Db)Md(In₃)",
        "path": "/data/samples/unknown/foraged/go/googleusercontent.com/pkg.go.dev/github.com/kforbus3/fleet-terminal/sdk/github.com-kforbus3-fleet-terminal-sdk-v0.0.0-20260720022232-762aaf2cf8ce.zip!!github.com/kforbus3/fleet-terminal/sdk@v0.0.0-20260720022232-762aaf2cf8ce/cmd/fleet/main.go",
        "pid": 0,
        "risk": 2,
        "sha": "f246e603fc545e3adba0332c665b4145b2eb7b2016ee76f7854ee2886b79617b",
        "size": 5211,
        "traits": [
          {
            "id": "metadata/import/go/context::context",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports context",
            "spans": [
              [
                1075,
                0
              ]
            ]
          },
          {
            "id": "metadata/import/go/encoding/json::encoding/json",
            "conf": 0.95,
            "crit": 3,
            "desc": "imports encoding/json",
            "spans": [
              [
                1086,
                13
              ]
            ]
          },
          {
            "id": "metadata/import/go/errors::errors",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports errors",
            "spans": [
              [
                1103,
                0
              ]
            ]
          },
          {
            "id": "metadata/import/go/fmt::fmt",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports fmt",
            "spans": [
              [
                1113,
                0
              ]
            ]
          },
          {
            "id": "metadata/import/go/github/com/kforbus3/fleet-terminal/sdk::github/com/kforbus3/fleet-terminal/sdk",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports github.com/kforbus3/Fleet-Terminal/sdk",
            "spans": [
              [
                1172,
                0
              ]
            ]
          },
          {
            "id": "metadata/import/go/os::os",
            "conf": 0.95,
            "crit": 3,
            "desc": "imports os",
            "spans": [
              [
                1120,
                2
              ]
            ]
          },
          {
            "id": "metadata/import/go/os/signal::os/signal",
            "conf": 0.95,
            "crit": 3,
            "desc": "imports os/signal",
            "spans": [
              [
                1126,
                9
              ]
            ]
          },
          {
            "id": "metadata/import/go/text/tabwriter::text/tabwriter",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports text/tabwriter",
            "spans": [
              [
                1139,
                0
              ]
            ]
          },
          {
            "id": "metadata/import/go/time::time",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports time",
            "spans": [
              [
                1157,
                0
              ]
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-1",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"the\"",
            "spans": [
              [
                20,
                0
              ]
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-2",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"and\"",
            "spans": [
              [
                119,
                0
              ]
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-3",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"that\"",
            "spans": [
              [
                380,
                0
              ]
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-5",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"for\"",
            "spans": [
              [
                46,
                0
              ]
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-6",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"with\"",
            "spans": [
              [
                86,
                0
              ]
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-7",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"this\"",
            "spans": [
              [
                317,
                0
              ]
            ]
          },
          {
            "id": "micro-behaviors/data/serialize/schema-object::user-field-key",
            "conf": 0.9,
            "crit": 3,
            "desc": "JSON-like user identity field",
            "spans": [
              [
                2005,
                9
              ]
            ]
          }
        ],
        "type": "go"
      },
      {
        "analysis_gaps": [
          "flow-graph-limited"
        ],
        "ctx": [
          {
            "b": "fe1CAvpK7YxjSh$y?mg1azC)tBzbkdz!rP}v}/v/av*t)v@b\u003c\u003czGE1kz/M$xxK@qQy?mg1axh])ze0(@y-(2unIgu6fa6u=aw3U$CxdbhB0bNrwGT(tq=B(9p!q^LzE^s0atmexx!KS:ayPd#ayPzmxK#76x\u003e7N[wPF#rx([2hvixS5A=#ebwI4t2v@DHcBp6VOave*}aARKqwO@RsBzbkdb4+UkuM{R4wNPQ\u003cAV/ExyH}xax(!urwN(]}A=k!qq!p5)x(mN8aMwcsax8\u0026(C4\u003eC$avfHEz/]{",
            "ln": 0,
            "col": 1,
            "line": 1
          },
          {
            "b": "mrSl.D30.lzF78lxK@qNoI3uPv@k:fw]83\u0026Bswtyz!i#jx(+zaB.LVlaA8cuBzbxf3nj4PAa9l(vp%d5ayPd#azC{ux(+zrvp\u003c6[w]zYjB-Rapx(k4XnG.+^vSK7yB7n({wozZ1A=S=OvqYP#v%8\u003cmz/3Rsz/oDazF7Nefe0U=fcBkcwGU@2v@2H=",
            "ln": 264,
            "col": 27,
            "line": 5
          },
          {
            "b": "z/fSrA=\u003e(laA8deaA}KwxDQ5YCp\u003ckwvpK7YxjSh$y?mg13jpG:AbP=sasEN6b4t?twPG452{J\u003e$zGGDmBrR4#b4UU4z!9N1xd[1vz/c:a2{J@3A=k#ta{[S2w]hSl3jd[\u003czZ2I{b5Q$lfkbDHA3tR}b5Q$lflIqKa{[S2B98Cjz/f.x3jd[$BAh8kxlbm72{KF9zdK)#dgcznfcAU]w)]*#Bx9x[AZstHzGE1nwmYU2x\u003ez6\u003cB0bNrx(+zby?WD#BrCWzaARpdaAIamC4CXDavxNNy?mTdaz\u003eLjaA8BmA=L(8wGUYe3nj4PCwhejaxJm",
            "ln": 709,
            "col": 45,
            "line": 16
          },
          {
            "b": "Aa{$Gf^m-VA+e\u0026%CPZZwayO!\u003ewN(](B-.Lsvrui[vqG+9j0m@OvQTs?rz(HkBzb98ayP8bwNPa{az2C3B0bgmazC{8fe1CZB0a[3v}xR3wN({9z/mlnw{503awMG(c$lRawMqS4aAITBx(mMmaA8jvB097/e(cCdx(v(rasFZby?WD#BsXLCA=M8s",
            "ln": 2074,
            "col": 11,
            "line": 74
          },
          {
            "b": "B1P*#zGGr3zGvjDvrTmBb04wga$jTY3jd2VvrS?Sar\u003eGvBz#pZfe1H(d\u003ce\u003evCm1U83jg\u0026aaz2OlauzUdB-IpJp*[x=wHIOcCpr\u003e9x\u003ewG0A=JoCjS[SRy-[6i2)\u003eS-BAIRwaz$[fefFLwBs{15A=k#gc)AntwO2%AazC.pvqGT*ayX=2wMqS4iV].)a$K\u003cFA=JPo34ic!x\u003ewGge\u003ex]4BrA.far\u00260LDKp5=A+funA=91qx(2syw]hSxmriA!AS",
            "ln": 2346,
            "col": 12,
            "line": 81
          },
          {
            "b": "x\u00265?Yw[=GJar\u0026EEAa{$Gf^ndQ2)\u003e-}wPy7HwO#PJavG^MvrDydrDz.(l1:+DBsW+9321B5A5]9:arR^HctmHyA4TH]x\u003eqg7DSjY@wP8ZkiV{smasXHQx(dAlq!oDSzE!eD3jha/31!9@ayuVxzY?87aAy[dxjSi7AccdzDKp5=zZY9A3jha/336Q0B-Ivxv\u003en:ux(1c83jnBtave*}mriA!AV/7qaAz4nB-Iwhwfu8fwO@SjxK@rcwPz%9AV/ylA@",
            "ln": 2871,
            "col": 5,
            "line": 98
          },
          {
            "b": "z!9Acdgcxf3jm8.vr9GhwNPaXAV/7me(Dm?wmY=*329#]vSb!5ar-(\u003czFr]fDKp5=vS=olaz2OlauzUdyiarhe\u003e]+{B7!##c$ma9C{%7b329#]wPz/laW3@=x(1]s3jd1BA+funA=91izfdy0A=M8sw*!\u003cny?mg1iV@0Kv@C)?aAz4kB.bSoayYn1C@^5]CoONXwPz/u3jd2!3jd2VwNPaXAV^H/vTi6bB1Qj0Ct-0XwmY^fvS=oi3jha/3jg-:Av-kzA=Jo-jS[AWBz@\u003ccwP}3-ADL\u0026lBxrf#xHuYQBy/Ysc$vvzefF!vBzbP6efFLEy?$TBA+eV\u0026wPxjb329#]wPz/laW3@=x(1]s3jd2VwPS6nzxJLdBs{15A=k#gc)AntwO2%AayYFcy?aVewPq\u003c7B96C=c3HK:az2Oldgcxf3jgAUay^3Cz!\u0026{4ar-(\u003ca%FdR3jd2VwPos[wNPaXAXpp4Bsnt0B-.qnA+P\u0026dBzkVha$K\u0026Xls\u003cOCwPw[qd}phNz!\u0026{4dgcxf3jg-:Av%^[vpS}\u0026e(Mt6c)y@!v}xR3a$K\u0026Xvq{g4x\u003e7N[x(v(xyiarha$i\u003c9A+fkynm=juwPxz4wPPsArDz.(eKs2XzGE6Nay^3DB7GwTxjU$5dgcw}w/$M3wo/pvjS[SRy-[6i2)\u003eS-Av%^[vpS}\u0026e(Mt6c)z2%zGGDcBs*EqAaHjAar\u003elkAbok#vruj4zzb:Cz/c:F3jha/3jg-:B8SVMwPz/liZ1P}e[/uGA4TK%c#@)sdgcw}w/$V9AV=I*az$[faBsC4336Q0B-Ivxw]hSxmriA!A+lZzw]83\u0026BugJ\u003cB08=IiV].)a$K\u003cNwPRQ7wgO\u003cxvruflaz2Oldgcxf3jglOw[u09A+frhe\u003cY",
            "ln": 4839,
            "col": 26,
            "line": 162
          },
          {
            "b": "2)\u003eS-BAIRway^3yvrcB2mriA!AWU%tB8SVMzdN*5z!7ywAa9\u003c4dgcxf3jgAUaA8yAau.\u003egzFr]fDKp5=x(tQ\u003ez/x$Ix(tQ(x(^=)A+3ZzA+frhe\u003c:F!C{%7b336Q0B-IvxzFr[]34ic!x\u003ewG0A=Jo-jS[GXz/dg5wP{KNv@C)?AWU%tB8S-#z!abxe\u003c%nXz!9Acz/{dJj0n9PAV=I*az$[faBsC4336Q0B-Ivxw]hSxmriA!A+lZzw]83\u0026BugKPwN/T?wGV28B8V5nB7DFaz/M%DB08=IiV].)a$K\u003cNwPRQ7wgO\u003cxvruflaz2Oldgcxf3jg-:BAIRwao",
            "ln": 5608,
            "col": 1,
            "line": 194
          },
          {
            "b": "gCyH9DKp5=A+funA=91qx(2syv\u003eI.eA=U!XA=M8sc#@)uA4AbGwPRQ7wgO\u003cxvrufi3jha/336Q0B-Ivxx(tR4wNPany?$IuwPI/ylt{yWdggFg3taA#v\u003c0gfasY-{x\u003eqg7diJOrA=U!XA=M8sc#@)uA3cSzBAzEOqE%]*z/fScefF!vBzbP6efF[uBz8!rBAh8kxdj%mA=M8saBsC4vpZMxjS(7qp!s8@A=k#Bq/(C\u0026B-P]*wmW!AA+frhe(M\u003e2BAIT(z!9Agao",
            "ln": 6749,
            "col": 49,
            "line": 230
          },
          {
            "b": "i6oqTfEXBT33G-$ayYn1C{4fIA=\u003e(laBsC42$n(Pz/M$wBAh8kxcpO%B8L}Sb4U!nz/N4f3jha/329#]yiarhe(=!avrcB5vqEu5vrt{easpMowo/QDjV%{9x(1[sclM=owo/^@A=M8sar-(\u003ca%FdR3jd2EwIcX*B8$=5wGTbUvSb!5e\u003e6/3z/Mf\u003eEir9qB7DFv3jd2EwIcX*B8$=5wGTbUB98CpzFa2yrb#X\u0026q/DePwHIRwA+PA7c$D+dvjrSj34h",
            "ln": 7110,
            "col": 50,
            "line": 239
          }
        ],
        "depth": 1,
        "facts": {
          "imp": [
            [
              "",
              "strings.TrimSpace"
            ],
            [
              "",
              "strings.TrimSpace"
            ],
            [
              "",
              "errors.New"
            ],
            [
              "",
              "strings.Contains"
            ],
            [
              "",
              "url.Parse"
            ],
            [
              "",
              "fmt.Errorf"
            ],
            [
              "",
              "fmt.Errorf"
            ],
            [
              "",
              "strings.TrimRight"
            ],
            [
              "",
              "strings.TrimSuffix"
            ],
            [
              "",
              "strings.TrimRight"
            ],
            [
              "",
              "fmt.Sprintf"
            ],
            [
              "",
              "fmt.Sprintf"
            ],
            [
              "",
              "errors.As"
            ],
            [
              "",
              "errors.As"
            ],
            [
              "",
              "v.Set"
            ],
            [
              "",
              "strconv.Itoa"
            ],
            [
              "",
              "v.Set"
            ],
            [
              "",
              "strconv.Itoa"
            ],
            [
              "",
              "len"
            ],
            [
              "",
              "query.Encode"
            ],
            [
              "",
              "json.Marshal"
            ],
            [
              "",
              "fmt.Errorf"
            ],
            [
              "",
              "bytes.NewReader"
            ],
            [
              "",
              "http.NewRequestWithContext"
            ],
            [
              "",
              "fmt.Errorf"
            ],
            [
              "",
              "req.Header.Set"
            ],
            [
              "",
              "req.Header.Set"
            ],
            [
              "",
              "req.Header.Set"
            ],
            [
              "",
              "req.Header.Set"
            ],
            [
              "",
              "c.http.Do"
            ],
            [
              "",
              "fmt.Errorf"
            ],
            [
              "",
              "resp.Body.Close"
            ],
            [
              "",
              "c.parseError"
            ],
            [
              "",
              "io.Copy"
            ],
            [
              "",
              "json.NewDecoder.Decode"
            ],
            [
              "",
              "json.NewDecoder"
            ],
            [
              "",
              "fmt.Errorf"
            ],
            [
              "",
              "len"
            ],
            [
              "",
              "query.Encode"
            ],
            [
              "",
              "http.NewRequestWithContext"
            ],
            [
              "",
              "fmt.Errorf"
            ],
            [
              "",
              "req.Header.Set"
            ],
            [
              "",
              "req.Header.Set"
            ],
            [
              "",
              "req.Header.Set"
            ],
            [
              "",
              "c.http.Do"
            ],
            [
              "",
              "fmt.Errorf"
            ],
            [
              "",
              "resp.Body.Close"
            ],
            [
              "",
              "c.parseError"
            ],
            [
              "",
              "io.ReadAll"
            ],
            [
              "",
              "io.ReadAll"
            ],
            [
              "",
              "io.LimitReader"
            ],
            [
              "",
              "json.Unmarshal"
            ],
            [
              "",
              "strings.TrimSpace"
            ],
            [
              "",
              "string"
            ],
            [
              "",
              "bytes"
            ],
            [
              "",
              "context"
            ],
            [
              "",
              "encoding/json"
            ],
            [
              "",
              "errors"
            ],
            [
              "",
              "fmt"
            ],
            [
              "",
              "io"
            ],
            [
              "",
              "net/http"
            ],
            [
              "",
              "net/url"
            ],
            [
              "",
              "strconv"
            ],
            [
              "",
              "strings"
            ],
            [
              "",
              "time"
            ]
          ],
          "mbr": [
            "ae.Message",
            "ae.StatusCode",
            "body.Error",
            "bytes.NewReader",
            "c.apiPrefix",
            "c.baseURL",
            "c.http",
            "c.http.Do",
            "c.parseError",
            "c.token",
            "c.userAgent",
            "e.Message",
            "e.Method",
            "e.Path",
            "e.StatusCode",
            "errors.As",
            "errors.New",
            "fmt.Errorf",
            "fmt.Sprintf",
            "http.NewRequestWithContext",
            "http.StatusForbidden",
            "http.StatusNotFound",
            "http.StatusUnauthorized",
            "io.Copy",
            "io.Discard",
            "io.LimitReader",
            "io.ReadAll",
            "json.Marshal",
            "json.NewDecoder",
            "json.NewDecoder.Decode",
            "json.Unmarshal",
            "o.Limit",
            "o.Offset",
            "query.Encode",
            "req.Header",
            "req.Header.Set",
            "resp.Body",
            "resp.Body.Close",
            "resp.StatusCode",
            "strconv.Itoa",
            "strings.Contains",
            "strings.TrimRight",
            "strings.TrimSpace",
            "strings.TrimSuffix",
            "time.Second",
            "u.Host",
            "u.Path",
            "u.Scheme",
            "url.Parse",
            "v.Set"
          ],
          "tgt": [
            "bytes.NewReader",
            "c.http.Do",
            "c.parseError",
            "errors.As",
            "errors.New",
            "fmt.Errorf",
            "fmt.Sprintf",
            "http.NewRequestWithContext",
            "io.Copy",
            "io.LimitReader",
            "io.ReadAll",
            "json.Marshal",
            "json.NewDecoder",
            "json.NewDecoder.Decode",
            "json.Unmarshal",
            "len",
            "o",
            "query.Encode",
            "req.Header.Set",
            "resp.Body.Close",
            "strconv.Itoa",
            "string",
            "strings.Contains",
            "strings.TrimRight",
            "strings.TrimSpace",
            "strings.TrimSuffix",
            "url.Parse",
            "v.Set"
          ],
          "funcs": [
            [
              "WithToken",
              1466
            ],
            [
              "WithHTTPClient",
              1702
            ],
            [
              "WithUserAgent",
              1863
            ],
            [
              "New",
              2166
            ],
            [
              "Error",
              3362
            ],
            [
              "IsNotFound",
              3664
            ],
            [
              "IsUnauthorized",
              3926
            ],
            [
              "query",
              4283
            ],
            [
              "do",
              4650
            ],
            [
              "doRaw",
              6033
            ],
            [
              "parseError",
              6838
            ]
          ],
          "metrics": {
            "ast": {
              "op.eq": 8,
              "op.ge": 2,
              "op.gt": 4,
              "op.lt": 2,
              "op.ne": 15,
              "op.add": 14,
              "op.lor": 3,
              "op.mul": 1,
              "op.shl": 1,
              "op.band": 6,
              "op.land": 3,
              "op.lnot": 1,
              "max_depth": 18,
              "call_count": 55,
              "node_count": 2120,
              "member_count": 50,
              "max_array_len": 2,
              "op_density.eq": 0,
              "op_density.ge": 0,
              "op_density.gt": 0,
              "op_density.lt": 0,
              "op_density.ne": 0.01,
              "op_density.add": 0.01,
              "op_density.lor": 0,
              "op_density.mul": 0,
              "op_density.shl": 0,
              "op_density.band": 0,
              "op_density.land": 0,
              "op_density.lnot": 0,
              "max_concat_chain": 4,
              "member_depth_max": 3
            },
            "file": {
              "size": 7330,
              "entropy": 5.11
            },
            "text": {
              "lines": 249,
              "top_char": 101,
              "tab_count": 201,
              "max_ws_run": 6,
              "digit_ratio": 0.01,
              "space_count": 865,
              "char_entropy": 5.11,
              "unique_chars": 90,
              "top_char_null": 0,
              "string_density": 0.22,
              "top_char_ratio": 0.08,
              "avg_line_length": 28.44,
              "max_line_length": 115,
              "non_ascii_ratio": 0,
              "empty_line_ratio": 0.09,
              "last_line_length": 1,
              "whitespace_ratio": 0.18,
              "identifier_density": 1.85,
              "line_length_stddev": 28.02,
              "normalized_string_count": 3.42,
              "suspicious_comment_ratio": 0.02,
              "suspicious_identifier_ratio": 0.06,
              "normalized_unique_identifiers": 13.32
            },
            "binary": {
              "peak_region_bytes": 7330,
              "peak_region_entropy": 5.11
            },
            "source": {
              "class_count": 3,
              "function_count": 11
            },
            "imports": {
              "count": 11,
              "stdlib_count": 11,
              "stdlib_ratio": 1
            },
            "strings": {
              "bytes": 535,
              "count": 54,
              "url_count": 1,
              "avg_length": 9.91,
              "max_length": 39,
              "path_count": 2,
              "avg_entropy": 2.52,
              "empty_count": 8,
              "entropy_stddev": 1.09
            },
            "comments": {
              "chars": 2422,
              "count": 44,
              "empty": 5,
              "lines": 39,
              "high_entropy": 1,
              "to_code_ratio": 0.19,
              "url_in_comments": 2
            },
            "functions": {
              "count": 14,
              "density": 4.42,
              "avg_params": 1.55,
              "code_ratio": 0.64,
              "max_params": 4,
              "length_stddev": 13.41,
              "avg_name_length": 8.18,
              "no_params_count": 2,
              "avg_length_lines": 14.45,
              "max_length_lines": 46,
              "min_length_lines": 3,
              "high_entropy_names": 1,
              "single_char_params": 1,
              "avg_param_name_length": 4.29
            },
            "identifiers": {
              "count": 461,
              "unique": 106,
              "avg_length": 6.03,
              "max_length": 21,
              "min_length": 1,
              "avg_entropy": 2.12,
              "reuse_ratio": 0.23,
              "length_stddev": 3.73,
              "sequential_names": 6,
              "single_char_count": 7,
              "single_char_ratio": 0.07,
              "high_entropy_count": 5,
              "high_entropy_ratio": 0.05,
              "all_lowercase_ratio": 0.44,
              "all_uppercase_ratio": 0.01,
              "underscore_prefix_count": 1
            }
          }
        },
        "id": 4,
        "mol": "H₂(Cm₆Db₂)Md(In₃)",
        "path": "/data/samples/unknown/foraged/go/googleusercontent.com/pkg.go.dev/github.com/kforbus3/fleet-terminal/sdk/github.com-kforbus3-fleet-terminal-sdk-v0.0.0-20260720022232-762aaf2cf8ce.zip!!github.com/kforbus3/fleet-terminal/sdk@v0.0.0-20260720022232-762aaf2cf8ce/fleet.go",
        "pid": 0,
        "risk": 5,
        "sha": "e0c381a689a3bad14beb09ceed77c1ed4f419a4858415490f0dc84402eb5035c",
        "size": 7330,
        "traits": [
          {
            "id": "metadata/import/go/bytes::bytes",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports bytes",
            "spans": [
              [
                757,
                0
              ]
            ]
          },
          {
            "id": "metadata/import/go/context::context",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports context",
            "spans": [
              [
                766,
                0
              ]
            ]
          },
          {
            "id": "metadata/import/go/encoding/json::encoding/json",
            "conf": 0.95,
            "crit": 3,
            "desc": "imports encoding/json",
            "spans": [
              [
                777,
                13
              ]
            ]
          },
          {
            "id": "metadata/import/go/errors::errors",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports errors",
            "spans": [
              [
                794,
                0
              ]
            ]
          },
          {
            "id": "metadata/import/go/fmt::fmt",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports fmt",
            "spans": [
              [
                804,
                0
              ]
            ]
          },
          {
            "id": "metadata/import/go/io::io",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports io",
            "spans": [
              [
                811,
                0
              ]
            ]
          },
          {
            "id": "metadata/import/go/net/http::net/http",
            "conf": 0.95,
            "crit": 3,
            "desc": "imports net/http",
            "spans": [
              [
                817,
                8
              ]
            ]
          },
          {
            "id": "metadata/import/go/net/url::net/url",
            "conf": 0.95,
            "crit": 3,
            "desc": "imports net/url",
            "spans": [
              [
                829,
                7
              ]
            ]
          },
          {
            "id": "metadata/import/go/strconv::strconv",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports strconv",
            "spans": [
              [
                840,
                0
              ]
            ]
          },
          {
            "id": "metadata/import/go/strings::strings",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports strings",
            "spans": [
              [
                851,
                0
              ]
            ]
          },
          {
            "id": "metadata/import/go/time::time",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports time",
            "spans": [
              [
                862,
                0
              ]
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-1",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"the\"",
            "spans": [
              [
                20,
                0
              ]
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-2",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"and\"",
            "spans": [
              [
                113,
                0
              ]
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-3",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"that\"",
            "spans": [
              [
                2122,
                0
              ]
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-5",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"for\"",
            "spans": [
              [
                43,
                0
              ]
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-6",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"with\"",
            "spans": [
              [
                131,
                0
              ]
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-7",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"this\"",
            "spans": [
              [
                312,
                0
              ]
            ]
          },
          {
            "id": "micro-behaviors/communications/http/header/content-type::native-json-content-type",
            "atk": "T1071.001",
            "conf": 0.9,
            "crit": 3,
            "desc": "Native HTTP JSON content type",
            "spans": [
              [
                5381,
                32
              ]
            ]
          },
          {
            "id": "micro-behaviors/communications/http/token-auth::bearer-header-from-variable",
            "conf": 0.94,
            "crit": 3,
            "desc": "Builds Bearer authorization header from variable",
            "spans": [
              [
                5218,
                26
              ]
            ]
          },
          {
            "id": "micro-behaviors/communications/http/url/build::go-read-http-response-body",
            "mbc": "C0002",
            "conf": 0.9,
            "crit": 3,
            "desc": "Go reads an HTTP response body",
            "spans": [
              [
                6813,
                21
              ]
            ]
          },
          {
            "id": "micro-behaviors/communications/http/user-agent::go-user-agent-set",
            "atk": "T1071.001",
            "mbc": "C0002",
            "conf": 0.9,
            "crit": 3,
            "desc": "Sets HTTP User-Agent header",
            "spans": [
              [
                5303,
                14
              ]
            ]
          },
          {
            "id": "micro-behaviors/communications/url/parse::go-url-parse",
            "conf": 0.9,
            "crit": 3,
            "desc": "Parses a URL with net/url",
            "spans": [
              [
                2410,
                9
              ]
            ]
          },
          {
            "id": "micro-behaviors/data/buffer/transfer::go-io-copy",
            "conf": 0.9,
            "crit": 3,
            "desc": "Copies data with Go io.Copy",
            "spans": [
              [
                5672,
                7
              ]
            ]
          },
          {
            "id": "micro-behaviors/data/serialize/json::go-json-new-decoder",
            "mbc": "C0032",
            "conf": 0.9,
            "crit": 3,
            "desc": "Go JSON decoder construction",
            "spans": [
              [
                5730,
                15
              ]
            ]
          },
          {
            "id": "micro-behaviors/data/serialize/json::go-json-unmarshal",
            "mbc": "C0032",
            "conf": 0.85,
            "crit": 3,
            "desc": "Go JSON unmarshal call",
            "spans": [
              [
                7174,
                14
              ]
            ]
          },
          {
            "id": "micro-behaviors/communications/http/lib/netlib::go-http-client-construction",
            "atk": "T1071.001",
            "mbc": "C0002",
            "conf": 0.95,
            "crit": 3,
            "desc": "Constructs a Go HTTP client",
            "spans": [
              [
                2935,
                13
              ]
            ]
          },
          {
            "id": "micro-behaviors/communications/http/lib/netlib::go-http-newrequest",
            "atk": "T1071.001",
            "mbc": "C0002",
            "conf": 0.9,
            "crit": 3,
            "desc": "Creates a new HTTP request",
            "spans": [
              [
                5053,
                26
              ]
            ]
          },
          {
            "id": "micro-behaviors/communications/http/lib/netlib::net-http-import",
            "atk": "T1071.001",
            "mbc": "C0002",
            "conf": 0.5,
            "crit": 3,
            "desc": "Go source imports the net/http standard package",
            "spans": [
              [
                817,
                8
              ]
            ]
          },
          {
            "id": "micro-behaviors/data/serialize/json::go-json-marshal",
            "mbc": "C0032",
            "conf": 0.85,
            "crit": 3,
            "desc": "Go JSON marshal call",
            "spans": [
              [
                4903,
                12
              ]
            ]
          }
        ],
        "type": "go"
      },
      {
        "analysis_gaps": [
          "flow-graph-limited"
        ],
        "ctx": [
          {
            "b": "Aa9l(vp%c]w]83\u0026Bp5v?ze:AlBrz$s2{J\u003e$zGGDmBrR4#b4UU4z!9N1xd[1vz/c:a2{Km#Bt4rHBz@Ah2{Km#Bt4rHBz@)DBAzFzwPI@q3jd[$BAh8kxlbm72{KF5B98blxcEWi3jnBtaz$+mraQb)q!o#)wPw]lwPS6nzGu}eavx%VwO#PjAbPDdBy!#9vrrS2aARgoBrCToA=#2maA.:tzF78lxK@r0x)a69azth3wnC*$e^=ikzET/bwP}9+B97t(A=#2md0cNYBy/Jnx(mMor4Ge9azt\u003esA4TW\u0026zE^M{AZ\u003eg?v\u003c@JIlU{EFzGE1F3jg/bnm=QRwPxgF3jg=]B%5?eazt\u003esAcbVjBs{s1Ct\u00266[C4CXxxEKn{Bs]{%wNPF0A42^FB$Mc#z/YFs3i",
            "ln": 0,
            "col": 1,
            "line": 1
          },
          {
            "b": "x(1]s3jd2Xe\u003efn\u003evqGK7b2hY[iV].(a$K\u003cFA=JPo34ic!A+funA=91f3vJl*w{503axh][Bwuy\u003eph+e\u0026vqGU7wPHgDB7FuHoEL09dS/lyBzkS9e(TnxDKp6?vrl13auzUdzddx/B98CpzF9l@BAh8kxl%%(2{K58Bz#pZfe3{NwO2%owQ4T2Abo8rv@DidiV]K/arR^HarR\u003ewBAzFy",
            "ln": 380,
            "col": 13,
            "line": 18
          },
          {
            "b": "B2\u003e%cw]83\u0026Bs}cHvqP$1wIdFhz6yINfe1C?v}YB\u003cwGUI{w)]*#By!$\u002634ic!w]zYjx(kEACvtxhauzUdA:-\u0026#wGUF\u003eB7GznDKp5=v\u003en:lA=Jo-jS)HhCpmfydgcv/x\u003ewG0A=JoCjS[SRy-[6i2)*]We\u003efn\u003evqGK7b2hY[c)-\u003cZiV].(a$K\u003cJzy=[",
            "ln": 819,
            "col": 45,
            "line": 30
          },
          {
            "b": "efFBPvQTs?rz(HwaA}miBsvL634ic!Ef{o{w/$Ciaz2OlauzUdpgXR$a%FD$az2Olau.\u003egzFr]fDKp5=Bs{15A=k$Db2hY[c%N%3a$jTQxM53fwftD7A=k$xdgcxf3vJl*w{503axh][Bwcy\u0026BvZs\u003eBApw(zE^/OB-.p.zE=NLA=U/kd0cNYBy/Jnx(mMor4e@p3jgh+iZ1Q6wP}9+B97t(A=#2md0d0.w{503d0D!EBAzEOqE%]*z/fScs8@1%wPxsAAV=\u0026BBAzEOqE%\u0026\u003cwPI@xaBsC4329#",
            "ln": 1047,
            "col": 48,
            "line": 38
          },
          {
            "b": "c2\u003eEUCvtxhat\u003e?%efF%=rz(HyqfuC\u003cC{\u003e9]m}D=\u003cb5y$gx(\u003eKFdgcv/Ef{n!Cp(A$vpS}\u0026c[c=EwPPsAlVl\u003c:wO#Pwrc-B]a$K\u0026Xvq{g4x\u003e7N[x(v(xyiarha$i\u003c932jK1zz1W}CsuyVz!9B1d0E9)mq=QNwmWfavq]B(BAh8kxi!}-D3Y(82)?!?z/Z2wb03\u0026Ju2s1?txs[bx(mM?vqZvqDM)fmb03?\u003cxFyXZar\u003eGqB98qdzdK[Lar(2vvL6n*a$K\u0026XByw*6b03\u0026Ju2$adx(mNgb5?NvwfMCIEjLZi2)?!=z/]@tb03\u00263ed8W\u0026EjkHfEjkHfxM4%lB1wCBA=Jo-jS[k!oLFM\u0026nn\u0026M\u003eB0$KpzGGDmBs])*v@2Z$z/]@dc[cX\u0026oLFM\u0026pJgz\u0026z/fSyoLFuT",
            "ln": 1550,
            "col": 22,
            "line": 55
          },
          {
            "b": "B2\u003eA\u0026B%nEWwPz/u3jha/329#]y?mGjxM4%lB15jPjS(E4E0^5Iz/Z2wtqftnnn\u0026M\u003ezEEx[ar-(\u003cb6NQceIF[6aBFLVxM4%lB6yt7e\u003eFCNaW3}(xFyXNDKp5=Bs{3\u003eByw#$c)A!KwQ5f9v@#o)aztXmBAoF=b}Bc.efFRAB98EL3jha/Ef{r[B-7XiraQb)lVM:DBy!0YB97k%B98E\u0026z!abwBrA5PwPI%czF7O3diJ%A31C8sjS[SNCt@c{Bw(:\u003eC4CXxBsXLDB-7XqCoyNvBz@\u003cgwPI*ezGxw\u003cA+PSbAX5tNas.5DBz@\u003cgwPq\u003c7B95\u0026NDKp5=x\u003ev",
            "ln": 1919,
            "col": 21,
            "line": 65
          },
          {
            "b": "z/PCrb5H[kxM4A7jS(4(a$K\u003cSe\u003e]]0xM4Ag3jd2!3jd2Zvr9G8zxIF*B96#\u003eAclmf2)\u003erTaz2OlauzUdyiarhe(2#4l$G\u003eDwmY^fAXoW%wo/QRl$G\u003eDwmWeox(kvYaz2Olar-(\u003czFr]fDKp5=33m^?vrt{]w*!\u003clwN/T?wGUD2wo*iUc3yE-az2Oldgcv/Ef{n!x\u003ewG4zz1E#B98qdzdK?kjS\u003e}VvL6n?a%qjt2)*]We\u003e6/3z/PCrb4$[oBz+J7wGTb",
            "ln": 2220,
            "col": 9,
            "line": 75
          },
          {
            "b": "nKKWAjS\u003e}^wP]svDKp5=Bs{3\u003eByw#$c)AwoauZ?[AuV}RxF8\u003eAdgcxf3vJl*w{503axh][Bvg7Wvru6Wz!\u0026{4qE%@)A=b}%wN/:(BsqkNdS/lyBzkS9e(TnxDKp6?auzUdzE[2\u003ewPI@(wPz%9AWV2Xazb+lv\u003c(KzxMOune(Dn4AbPSnwMJ[^By/FzaAwOOxMOune(Dn2B.bSodiJ%A2)\u003erT",
            "ln": 2708,
            "col": 7,
            "line": 91
          },
          {
            "b": "u14R@DM)fmb03?\u003cBtj%\u003car\u003eYizdK[Lar\u003erfa$K\u0026XB7F\u003c4wPPaSar\u003eAlByf92v@=d5C42ifwG(KK3jhbf3jg/)yB*PtA=Jo-jS[k!lVM:DBy!A\u0026yH}xiv@DmbwQ5qHlsx",
            "ln": 3061,
            "col": 39,
            "line": 102
          },
          {
            "b": "a%qjt2)\u003eYamQZyEy?t7tB7F\u003c4wPP4Tash1KefG4MyC5K%v@=d5dgcxf3vJl*w{503axh][Bw(WTzB!X!Bw=W(B-IwvnKNRFBrA5PwPI%czF7O3diJ%A31C8sjS[SNCt@c{Bw(:\u003eC4CXxBsXLDB-7XqCoyNvBz@\u003cgwPI*ezGxw\u003cA+PSbAX5tNas.5DBz@\u003cgwPq\u003c7B95\u0026NDKp5=C3$",
            "ln": 3295,
            "col": 35,
            "line": 108
          },
          {
            "b": "tqft9aW3}(B1[\u003cYDKp5=Bs{3\u003eByw#$c)AwoB09Q*c3yE-azCwcdgcxf3vJl*w{503axh][Bw=W?z/P}$wPS6nzGwfzrW-5jdS/lyBzkS9e(TnxDKp6?auzUdzE[2\u003ewPI@(wPz%9AWV2Xazb+lv\u003c(KzxMOune(Dn4AbPSnwMJ[^By/FzaAwOOxMOune(Dn2B.bSodiJ%A2)\u003erT",
            "ln": 3843,
            "col": 25,
            "line": 127
          },
          {
            "b": "oFfdIBz8^ujS\u003e}4vq]{lB$\u003eT\u003cwPhNdBAo9zv}f7\u003eB1Q%zB%n5Q3jd1BBs{15A=k#gc)ARsBz8^Wash1KefF%=rz(Hyp*[DVdgcv/Ef{n!x\u003ewGde(+!ye(u+5A^o5Ze=",
            "ln": 4012,
            "col": 10,
            "line": 134
          },
          {
            "b": "m}D=\u003cb4+\u003elz6yzT3jd2!3jd2.e\u003exLZwmY^fdk1LgBsnt2z/fVdzGEEfD2NssefDcUwQ5qIv@(/qdgcv/Cp(%qx()]mtu$Y-By=\u003cAB-Rbmene%yBs.SHwO$:\u003cvqGT/wH@4pvL6n*ehw[mhz3QqeIF}+zxZIU3jhbf3jglKByuZywPz/liZ1P}e(Dn1z/P}Fv@DmbwQ5qHlsBwtxl4{kzE+dAefE\u00264AbP=sl1szoB8@(Pa#g\u0026chz3QqeIF)",
            "ln": 4182,
            "col": 40,
            "line": 138
          },
          {
            "b": "a$jTY3jd2Xe\u003efn\u003evqGK7b4CXqauZ?[AuV}RB98CpzF7wdvrt{bdgcxf3vJl*w{503axh][Bu@.{mriA!A.{g+B7F(FzE=aJvrlH7w[+*!d0cNYBy/Jnx(mMor4e@p3jgh+iZ1Q6wP}9+B97t(A=#2md0d0.w{503d0D!EBAzEOqE%]*z/fScs8@1%wPxsAAV=\u0026BBAzEOqE%\u0026\u003cwPI@xaBsC433O0",
            "ln": 4490,
            "col": 53,
            "line": 147
          },
          {
            "b": "jS[k!m}D^kz/Z1Gv@DmbwQ5qHlsBwtxl4{kzE+dAefDcNx(!ufzF7dx3jgAUaz2Olau.\u003egzFr]fDKp5=Bs{3\u003eByw#lb4V1rwN/*[wftD7A=k$xdgcxf3jgAUar:r$ph+kzz/]@dc$NBtdiJ%A2)\u003eYamriA!A+lZznPNTBBvHg\u003ezE:\u003eMazb4#B7DFaz/M%DB%nEWwPz/u3jha/33G-$ayO?7dNu)5mriA!ATAa!w/@mrBAh8kxlbW)z/fT",
            "ln": 4785,
            "col": 10,
            "line": 157
          },
          {
            "b": "x\u003c(69B8JgyxK@rdwPI@own=42az#atazCXiz/P}xwPz*fA=SvrB-RTEw]zYjBzbxfe^=ikzET!PB0$QuAV!}lA=k$HaAR4jxjVfcdK).XnKWVuz/NoHvScg3aBsC4w]zYjwPz/laW3@=x(1]s3jd2Mw/$I[efF\u003eDauzUdwPz/zc[mIVnKWVuz/No*",
            "ln": 5207,
            "col": 25,
            "line": 173
          }
        ],
        "depth": 1,
        "facts": {
          "imp": [
            [
              "",
              "t.Helper"
            ],
            [
              "",
              "httptest.NewServer"
            ],
            [
              "",
              "t.Cleanup"
            ],
            [
              "",
              "New"
            ],
            [
              "",
              "WithToken"
            ],
            [
              "",
              "t.Fatalf"
            ],
            [
              "",
              "New"
            ],
            [
              "",
              "t.Fatalf"
            ],
            [
              "",
              "t.Errorf"
            ],
            [
              "",
              "New"
            ],
            [
              "",
              "t.Error"
            ],
            [
              "",
              "newTestServer"
            ],
            [
              "",
              "r.Header.Get"
            ],
            [
              "",
              "t.Errorf"
            ],
            [
              "",
              "t.Errorf"
            ],
            [
              "",
              "r.URL.Query.Get"
            ],
            [
              "",
              "r.URL.Query"
            ],
            [
              "",
              "t.Errorf"
            ],
            [
              "",
              "r.URL.Query.Get"
            ],
            [
              "",
              "r.URL.Query"
            ],
            [
              "",
              "w.Header.Set"
            ],
            [
              "",
              "w.Header"
            ],
            [
              "",
              "json.NewEncoder.Encode"
            ],
            [
              "",
              "json.NewEncoder"
            ],
            [
              "",
              "c.ListHosts"
            ],
            [
              "",
              "context.Background"
            ],
            [
              "",
              "t.Fatalf"
            ],
            [
              "",
              "len"
            ],
            [
              "",
              "t.Fatalf"
            ],
            [
              "",
              "newTestServer"
            ],
            [
              "",
              "t.Errorf"
            ],
            [
              "",
              "json.NewDecoder.Decode"
            ],
            [
              "",
              "json.NewDecoder"
            ],
            [
              "",
              "t.Fatalf"
            ],
            [
              "",
              "t.Errorf"
            ],
            [
              "",
              "w.WriteHeader"
            ],
            [
              "",
              "json.NewEncoder.Encode"
            ],
            [
              "",
              "json.NewEncoder"
            ],
            [
              "",
              "c.CreateHost"
            ],
            [
              "",
              "context.Background"
            ],
            [
              "",
              "t.Fatalf"
            ],
            [
              "",
              "t.Fatalf"
            ],
            [
              "",
              "newTestServer"
            ],
            [
              "",
              "strings.HasSuffix"
            ],
            [
              "",
              "t.Errorf"
            ],
            [
              "",
              "w.WriteHeader"
            ],
            [
              "",
              "json.NewEncoder.Encode"
            ],
            [
              "",
              "json.NewEncoder"
            ],
            [
              "",
              "c.CreateToken"
            ],
            [
              "",
              "context.Background"
            ],
            [
              "",
              "t.Fatalf"
            ],
            [
              "",
              "t.Fatalf"
            ],
            [
              "",
              "newTestServer"
            ],
            [
              "",
              "json.NewDecoder.Decode"
            ],
            [
              "",
              "json.NewDecoder"
            ],
            [
              "",
              "t.Errorf"
            ],
            [
              "",
              "w.WriteHeader"
            ],
            [
              "",
              "json.NewEncoder.Encode"
            ],
            [
              "",
              "json.NewEncoder"
            ],
            [
              "",
              "c.ScanHost"
            ],
            [
              "",
              "context.Background"
            ],
            [
              "",
              "t.Fatalf"
            ],
            [
              "",
              "len"
            ],
            [
              "",
              "t.Fatalf"
            ],
            [
              "",
              "newTestServer"
            ],
            [
              "",
              "t.Errorf"
            ],
            [
              "",
              "r.URL.Query.Get"
            ],
            [
              "",
              "r.URL.Query"
            ],
            [
              "",
              "t.Errorf"
            ],
            [
              "",
              "r.URL.Query.Get"
            ],
            [
              "",
              "r.URL.Query"
            ],
            [
              "",
              "w.Header.Set"
            ],
            [
              "",
              "w.Header"
            ],
            [
              "",
              "w.Write"
            ],
            [
              "",
              "c.Report"
            ],
            [
              "",
              "context.Background"
            ],
            [
              "",
              "t.Fatalf"
            ],
            [
              "",
              "strings.HasPrefix"
            ],
            [
              "",
              "string"
            ],
            [
              "",
              "t.Fatalf"
            ],
            [
              "",
              "string"
            ],
            [
              "",
              "newTestServer"
            ],
            [
              "",
              "w.WriteHeader"
            ],
            [
              "",
              "json.NewEncoder.Encode"
            ],
            [
              "",
              "json.NewEncoder"
            ],
            [
              "",
              "c.GetHost"
            ],
            [
              "",
              "context.Background"
            ],
            [
              "",
              "t.Fatal"
            ],
            [
              "",
              "IsNotFound"
            ],
            [
              "",
              "t.Errorf"
            ],
            [
              "",
              "strings.Contains"
            ],
            [
              "",
              "err.Error"
            ],
            [
              "",
              "t.Errorf"
            ],
            [
              "",
              "As"
            ],
            [
              "",
              "t.Errorf"
            ],
            [
              "",
              "u.Unwrap"
            ],
            [
              "",
              "context"
            ],
            [
              "",
              "encoding/json"
            ],
            [
              "",
              "net/http"
            ],
            [
              "",
              "net/http/httptest"
            ],
            [
              "",
              "strings"
            ],
            [
              "",
              "testing"
            ]
          ],
          "mbr": [
            "ae.StatusCode",
            "body.hostId",
            "c.CreateHost",
            "c.CreateToken",
            "c.GetHost",
            "c.ListHosts",
            "c.Report",
            "c.ScanHost",
            "c.baseURL",
            "context.Background",
            "err.Error",
            "h.ID",
            "http.MethodPost",
            "http.StatusAccepted",
            "http.StatusCreated",
            "http.StatusNotFound",
            "httptest.NewServer",
            "in.Hostname",
            "json.NewDecoder",
            "json.NewDecoder.Decode",
            "json.NewEncoder",
            "json.NewEncoder.Encode",
            "r.Body",
            "r.Header",
            "r.Header.Get",
            "r.Method",
            "r.URL",
            "r.URL.Path",
            "r.URL.Query",
            "r.URL.Query.Get",
            "srv.Close",
            "srv.URL",
            "strings.Contains",
            "strings.HasPrefix",
            "strings.HasSuffix",
            "t.Cleanup",
            "t.Error",
            "t.Errorf",
            "t.Fatal",
            "t.Fatalf",
            "t.Helper",
            "tok.Secret",
            "u.Unwrap",
            "w.Header",
            "w.Header.Set",
            "w.Write",
            "w.WriteHeader"
          ],
          "tgt": [
            "As",
            "IsNotFound",
            "New",
            "WithToken",
            "c.CreateHost",
            "c.CreateToken",
            "c.GetHost",
            "c.ListHosts",
            "c.Report",
            "c.ScanHost",
            "context.Background",
            "err.Error",
            "httptest.NewServer",
            "json.NewDecoder",
            "json.NewDecoder.Decode",
            "json.NewEncoder",
            "json.NewEncoder.Encode",
            "len",
            "newTestServer",
            "r.Header.Get",
            "r.URL.Query",
            "r.URL.Query.Get",
            "string",
            "strings.Contains",
            "strings.HasPrefix",
            "strings.HasSuffix",
            "t.Cleanup",
            "t.Error",
            "t.Errorf",
            "t.Fatal",
            "t.Fatalf",
            "t.Helper",
            "u.Unwrap",
            "w.Header",
            "w.Header.Set",
            "w.Write",
            "w.WriteHeader"
          ],
          "funcs": [
            [
              "newTestServer",
              194
            ],
            [
              "TestNewNormalizesBaseURL",
              428
            ],
            [
              "TestListHostsSendsAuthAndParses",
              1151
            ],
            [
              "TestCreateHostPostsBody",
              2062
            ],
            [
              "TestCreateTokenReturnsSecret",
              2756
            ],
            [
              "TestScanHostReturnsIDs",
              3343
            ],
            [
              "TestReportReturnsCSV",
              3891
            ],
            [
              "TestAPIErrorParsedAndClassified",
              4538
            ],
            [
              "As",
              5261
            ]
          ],
          "metrics": {
            "ast": {
              "op.eq": 2,
              "op.ne": 26,
              "op.lor": 4,
              "op.mul": 1,
              "op.band": 3,
              "op.lnot": 6,
              "max_depth": 28,
              "call_count": 96,
              "node_count": 2499,
              "member_count": 47,
              "max_array_len": 2,
              "op_density.eq": 0,
              "op_density.ne": 0.01,
              "op_density.lor": 0,
              "op_density.mul": 0,
              "op_density.band": 0,
              "op_density.lnot": 0,
              "member_depth_max": 4
            },
            "file": {
              "size": 5537,
              "entropy": 5.25
            },
            "text": {
              "lines": 188,
              "top_char": 116,
              "tab_count": 258,
              "max_ws_run": 17,
              "digit_ratio": 0.02,
              "space_count": 475,
              "char_entropy": 5.25,
              "unique_chars": 79,
              "top_char_null": 0,
              "string_density": 0.54,
              "top_char_ratio": 0.07,
              "avg_line_length": 28.45,
              "max_line_length": 98,
              "empty_line_ratio": 0.05,
              "last_line_length": 1,
              "whitespace_ratio": 0.17,
              "identifier_density": 2.38,
              "line_length_stddev": 25.41,
              "normalized_string_count": 7.37,
              "repeated_char_sequences": 1,
              "suspicious_identifier_ratio": 0.07,
              "normalized_unique_identifiers": 13.37
            },
            "binary": {
              "peak_region_bytes": 5120,
              "peak_region_entropy": 5.29
            },
            "source": {
              "class_count": 1,
              "function_count": 9
            },
            "imports": {
              "count": 6,
              "stdlib_count": 6,
              "stdlib_ratio": 1
            },
            "strings": {
              "bytes": 1177,
              "count": 101,
              "url_count": 9,
              "avg_length": 11.65,
              "max_length": 40,
              "path_count": 3,
              "avg_entropy": 2.7,
              "empty_count": 2,
              "domain_count": 1,
              "entropy_stddev": 0.92
            },
            "comments": {
              "chars": 173,
              "count": 3,
              "lines": 3,
              "to_code_ratio": 0.02
            },
            "functions": {
              "count": 10,
              "density": 4.79,
              "avg_params": 1.22,
              "code_ratio": 0.89,
              "max_params": 2,
              "length_stddev": 4.25,
              "avg_name_length": 21.56,
              "avg_length_lines": 18.56,
              "max_length_lines": 25,
              "min_length_lines": 10,
              "high_entropy_names": 5,
              "single_char_params": 9,
              "avg_param_name_length": 1.64
            },
            "identifiers": {
              "count": 447,
              "unique": 101,
              "avg_length": 7.47,
              "max_length": 31,
              "min_length": 1,
              "avg_entropy": 2.2,
              "reuse_ratio": 0.23,
              "length_stddev": 6.02,
              "sequential_names": 7,
              "single_char_count": 8,
              "single_char_ratio": 0.08,
              "high_entropy_count": 5,
              "high_entropy_ratio": 0.05,
              "all_lowercase_ratio": 0.35,
              "all_uppercase_ratio": 0.04,
              "underscore_prefix_count": 1
            }
          }
        },
        "id": 5,
        "mol": "H₃(CmDb₂Po)Md₂(In₃Pa)",
        "path": "/data/samples/unknown/foraged/go/googleusercontent.com/pkg.go.dev/github.com/kforbus3/fleet-terminal/sdk/github.com-kforbus3-fleet-terminal-sdk-v0.0.0-20260720022232-762aaf2cf8ce.zip!!github.com/kforbus3/fleet-terminal/sdk@v0.0.0-20260720022232-762aaf2cf8ce/fleet_test.go",
        "pid": 0,
        "risk": 5,
        "sha": "5dca8bd1f679bc93164f2998524be2191c88dd86922b0f1aca5812499adc1116",
        "size": 5537,
        "traits": [
          {
            "id": "metadata/import/go/context::context",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports context",
            "spans": [
              [
                25,
                0
              ]
            ]
          },
          {
            "id": "metadata/import/go/encoding/json::encoding/json",
            "conf": 0.95,
            "crit": 3,
            "desc": "imports encoding/json",
            "spans": [
              [
                36,
                13
              ]
            ]
          },
          {
            "id": "metadata/import/go/net/http::net/http",
            "conf": 0.95,
            "crit": 3,
            "desc": "imports net/http",
            "spans": [
              [
                53,
                8
              ]
            ]
          },
          {
            "id": "metadata/import/go/net/http/httptest::net/http/httptest",
            "conf": 0.95,
            "crit": 3,
            "desc": "imports net/http/httptest",
            "spans": [
              [
                65,
                17
              ]
            ]
          },
          {
            "id": "metadata/import/go/strings::strings",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports strings",
            "spans": [
              [
                86,
                0
              ]
            ]
          },
          {
            "id": "metadata/import/go/testing::testing",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports testing",
            "spans": [
              [
                97,
                0
              ]
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-1",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"the\"",
            "spans": [
              [
                175,
                0
              ]
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-5",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"for\"",
            "spans": [
              [
                867,
                0
              ]
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-7",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"this\"",
            "spans": [
              [
                5255,
                0
              ]
            ]
          },
          {
            "id": "metadata/package/testing/harness/unit::go-func-test",
            "conf": 0.8,
            "crit": 2,
            "desc": "Go test function name",
            "spans": [
              [
                1151,
                0
              ]
            ]
          },
          {
            "id": "metadata/package/testing/harness/unit::go-t-error-call",
            "conf": 0.7,
            "crit": 3,
            "desc": "Go test reports an error with t.Error",
            "spans": [
              [
                1111,
                7
              ]
            ]
          },
          {
            "id": "metadata/package/testing/harness/unit::go-t-fatal-call",
            "conf": 0.7,
            "crit": 3,
            "desc": "Go test stops with t.Fatal",
            "spans": [
              [
                4849,
                7
              ]
            ]
          },
          {
            "id": "metadata/package/testing/harness/unit::go-testing-t",
            "conf": 0.7,
            "crit": 2,
            "desc": "Go test uses a testing.T parameter",
            "spans": [
              [
                215,
                0
              ]
            ]
          },
          {
            "id": "micro-behaviors/communications/http/header/content-type::native-json-content-type",
            "atk": "T1071.001",
            "conf": 0.9,
            "crit": 3,
            "desc": "Native HTTP JSON content type",
            "spans": [
              [
                1614,
                32
              ]
            ]
          },
          {
            "id": "micro-behaviors/data/serialize/json::go-json-new-decoder",
            "mbc": "C0032",
            "conf": 0.9,
            "crit": 3,
            "desc": "Go JSON decoder construction",
            "spans": [
              [
                2284,
                15
              ]
            ]
          },
          {
            "id": "micro-behaviors/data/serialize/schema-object::host-field-key",
            "conf": 0.9,
            "crit": 3,
            "desc": "JSON-like host identity field",
            "spans": [
              [
                1735,
                11
              ]
            ]
          },
          {
            "id": "micro-behaviors/process/io/write::go-write-method-call",
            "conf": 0.65,
            "crit": 3,
            "desc": "Go Write/WriteAt method call",
            "spans": [
              [
                4246,
                7
              ]
            ]
          }
        ],
        "type": "go"
      },
      {
        "id": 6,
        "sha": "e81a46a645f2a973524f16038265594564123de1a4f67cf0bf5d1f0bb890fd83",
        "path": "/data/samples/unknown/foraged/go/googleusercontent.com/pkg.go.dev/github.com/kforbus3/fleet-terminal/sdk/github.com-kforbus3-fleet-terminal-sdk-v0.0.0-20260720022232-762aaf2cf8ce.zip!!github.com/kforbus3/fleet-terminal/sdk@v0.0.0-20260720022232-762aaf2cf8ce/go.mod",
        "size": 57,
        "type": "go.mod",
        "depth": 1
      },
      {
        "id": 7,
        "sha": "40e9732f916d3ba123ec1021bab363a67f8f1e48f429a72e819698107eacc328",
        "path": "/data/samples/unknown/foraged/go/googleusercontent.com/pkg.go.dev/github.com/kforbus3/fleet-terminal/sdk/github.com-kforbus3-fleet-terminal-sdk-v0.0.0-20260720022232-762aaf2cf8ce.zip!!github.com/kforbus3/fleet-terminal/sdk@v0.0.0-20260720022232-762aaf2cf8ce/resources.go",
        "risk": 1,
        "size": 11508,
        "type": "go",
        "depth": 1
      },
      {
        "id": 8,
        "sha": "971d8edff873de61f52d720b1b60796370b14f9c936e3b9c617ff2a8486736d5",
        "path": "/data/samples/unknown/foraged/go/googleusercontent.com/pkg.go.dev/github.com/kforbus3/fleet-terminal/sdk/github.com-kforbus3-fleet-terminal-sdk-v0.0.0-20260720022232-762aaf2cf8ce.zip!!github.com/kforbus3/fleet-terminal/sdk@v0.0.0-20260720022232-762aaf2cf8ce/types.go",
        "risk": 1,
        "size": 7163,
        "type": "go",
        "depth": 1
      },
      {
        "id": 9,
        "sha": "ba85ca523b1c006188e532c93f99b185170a17e0fbd0e8623ce7a9f23fecada7",
        "path": "/data/samples/unknown/foraged/go/googleusercontent.com/pkg.go.dev/github.com/kforbus3/fleet-terminal/sdk/github.com-kforbus3-fleet-terminal-sdk-v0.0.0-20260720022232-762aaf2cf8ce.zip!!github.com/kforbus3/fleet-terminal/sdk@v0.0.0-20260720022232-762aaf2cf8ce/LICENSE",
        "risk": 1,
        "size": 11345,
        "type": "text",
        "depth": 1
      },
      {
        "id": 10,
        "mol": "Md",
        "sha": "fdb48671139e423a6719ea694734b67ffc3eaa813b006b73b591d3c5995aa93b",
        "path": "github.com_kforbus3_fleet-terminal_sdk@v0.0.0-20260720022232-762aaf2cf8ce.registry.json",
        "risk": 1,
        "size": 837,
        "type": "registry",
        "depth": 1
      }
    ],
    "omitted_files": 5,
    "rev": "9b4d8",
    "v": "8"
  }
}