{ "ml": { "v": "7", "eng": "2.2.0-beta.2", "lvl": -1, "conf": 0, "mods": [ { "cls": 0, "raw": 0.09867874, "rte": "az", "prob": 0.09867874 }, { "cls": 0, "raw": 0.0007407665, "rte": "az/tar", "prob": 0.0007407665 } ], "prob": 0.33140063, "files": [ { "id": 0, "lvl": -1, "conf": 0, "prob": 0.33140063285827637, "type": "apk_alpine" }, { "id": 1, "lvl": -1, "conf": 0, "prob": 0.006943702697753906, "type": "shell" }, { "id": 2, "lvl": -1, "conf": 0, "prob": 0.33140063285827637, "type": "json" }, { "id": 3, "lvl": -1, "conf": 0, "prob": 0.3266848921775818, "type": "text" } ], "version": "v18.18", "analyzed_at": "2026-07-02T00:31:07Z" }, "path": "posix-libc-utils-2.43-r6.apk", "raw": { "files": [ { "id": 0, "ctx": [ { "b": "abZy8010L00rqA0yJ[KwVm@@a*p}atS*h@Q!xLF3wZwUB?8aN}LDl2)R@]t8uY6HZ!d*1a", "n": [ { "c": 2, "d": "Archive parser reported errors", "i": "metadata/file/metrics::archive-parse-error", "o": 0, "z": 24, "cf": 0.8999999761581421 } ], "ln": 0 } ], "mol": "O(Er)H(Po₂)", "sha": "bea8d6305d762436d22704a51ea2f9c637e5437a9136faa414aff4f2902a9a26", "path": "/data/samples/good/foraged/wolfi/wolfi.dev/_/posix-libc-utils/posix-libc-utils-2.43-r6.apk", "risk": 3, "size": 16395, "type": "apk_alpine", "facts": { "metrics": { "file": { "size": 16395.0, "entropy": 7.99, "size_bytes": 16395.0 }, "parse": { "error_count": 1.0 }, "binary": { "overall_entropy": 7.99, "peak_region_bytes": 16384.0, "peak_region_entropy": 7.81 } } }, "traits": [ { "id": "metadata/package/files/system-package::spdx-wolfi-apk-purl", "conf": 0.8999999761581421, "crit": 1, "desc": "Wolfi APK package URL in SPDX", "from": [ { "file": 2 } ] }, { "id": "metadata/package/files/system-package::spdx-melange-creator", "conf": 0.8999999761581421, "crit": 1, "desc": "Melange SPDX creator", "from": [ { "file": 2 } ] }, { "id": "metadata/package/files/system-package::spdx-apk-pkginfo-source", "conf": 0.8999999761581421, "crit": 1, "desc": "SPDX references APK DB package info", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/process/create/shell/spawn::shell-symbols", "conf": 0.8999999761581421, "crit": 3, "desc": "Shell execution symbols", "from": [ { "file": 1 } ] }, { "id": "metadata/package/files/system-package::alpine-pkginfo-origin-field", "conf": 0.8999999761581421, "crit": 1, "desc": "Alpine/Wolfi package origin field", "from": [ { "file": 3 } ] }, { "id": "metadata/package/files/system-package::alpine-pkginfo-basename", "conf": 0.8999999761581421, "crit": 1, "desc": "Alpine/Wolfi package info file" }, { "id": "metadata/package/files/system-package::alpine-pkginfo-package-field", "conf": 0.8999999761581421, "crit": 1, "desc": "Alpine/Wolfi package name field", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/process/create/shell/spawn::sh-dynamic-command-target", "conf": 0.6000000238418579, "crit": 3, "desc": "Shell command name from variable", "from": [ { "file": 1 } ] }, { "id": "metadata/package/files/system-package::spdx-document-version", "conf": 0.8999999761581421, "crit": 1, "desc": "SPDX document version field" }, { "id": "metadata/package/files/system-package::spdx-melange-namespace", "conf": 0.8999999761581421, "crit": 1, "desc": "Melange SPDX document namespace" }, { "id": "metadata/package/files/system-package::spdx-document-id", "conf": 0.8999999761581421, "crit": 1, "desc": "SPDX document identifier" }, { "id": "micro-behaviors/process/interpreter/eval::shell-eval", "atk": "T1059", "crit": 3, "desc": "Shell eval call", "from": [ { "file": 1 } ] }, { "id": "metadata/package/files/system-package::alpine-apk-pkginfo", "conf": 0.9700000286102295, "crit": 2, "desc": "Alpine/Wolfi package info metadata", "from": [ { "off": 94, "file": 3, "line": 6 } ] }, { "id": "objectives/evasion/masquerade/extension/shebang::bash-shebang-first-line", "atk": "T1036.008", "mbc": "F0008", "conf": 0.949999988079071, "crit": 3, "desc": "File starts with", "from": [ { "file": 1 } ] }, { "id": "metadata/package/files/system-package::melange-pkginfo-generator", "conf": 0.8999999761581421, "crit": 1, "desc": "Melange-generated package metadata", "from": [ { "file": 3 } ] }, { "id": "metadata/package/files/system-package::wolfi-pkginfo-maintainer", "conf": 0.8999999761581421, "crit": 1, "desc": "Wolfi package maintainer field", "from": [ { "file": 3 } ] }, { "id": "metadata/package/files/system-package::alpine-pkginfo-version-field", "conf": 0.8999999761581421, "crit": 1, "desc": "Alpine/Wolfi package version field", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/process/create/eval::shell-eval", "mbc": "E1059.004", "conf": 0.800000011920929, "crit": 3, "desc": "eval command in shell script", "from": [ { "file": 1 } ] }, { "id": "metadata/package/files/system-package::spdx-sbom-document", "conf": 0.9800000190734863, "crit": 2, "desc": "SPDX SBOM document", "from": [ { "file": 2 } ] } ] }, { "ctx": [ { "b": "boXZHx(kOkvrl8", "n": [ { "c": 3, "d": "File starts with", "i": "objectives/evasion/masquerade/extension/shebang::bash-shebang-first-line", "o": 0, "z": 11, "cf": 0.949999988079071 } ], "ln": 1, "addr": 0 }, { "b": "boPu(AcVFrxj#xfc{]Baf/.lLeIY1nhxUFfwN##.z!s9nvrb{4mSiA!wmoN]z/d9GnP52\u003c", "n": [ { "c": 2, "d": "Copyright notice", "i": "metadata/package/license::copyright-word", "o": 14, "z": 9, "cf": 0.6000000238418579 } ], "ln": 2, "addr": 12 }, { "b": "boP%0x(+zex(4u6x(+zovrcDjz!pblxK@qRpe@A7awuGUA::0le=", "n": [ { "c": 2, "d": "English language detection", "i": "metadata/file/profile/language::lang-english", "o": 71, "z": 4, "cf": 0.800000011920929 } ], "ln": 3, "addr": 69 }, { "b": "", "ln": 4, "addr": 111 }, { "b": "boP%0wGTGrruKTKoLE%RvrcSox(+zeA+e/8B8LVjCvtJ6j0n/!BS+g5zxJ$hwncabA+P09By=OeBrC1fwg}\u003ew", "ln": 5, "addr": 112 }, { "b": "r7f[*l@cJynLRVBqAVWQB8\u0026{PxKL{)fkLMpvqGG", "ln": 27, "addr": 1136 }, { "b": "", "ln": 28, "addr": 1168 }, { "b": "qDcsToI5eZjT8K}x\u003c@$SfkLeJy?W^fCRae1hz3*ze]$}-g9wk^x\u003c@-iwg.RizGQgRB8JV^atmLBvT6W:fkLeJy?W^fCRad@ga)S^e\u00261Q", "n": [ { "c": 1, "d": "/lib64 path", "i": "objectives/supply-chain/install-hook/dropper/shell::lib64-path", "o": 1179, "z": 6, "cf": 1.0 } ], "ln": 29, "addr": 1169 }, { "b": "CvtJfjP", "ln": 30, "addr": 1253 }, { "b": "vRGZ\u003cuV6!ajP", "ln": 31, "addr": 1259 }, { "b": "Cw7YbwGV8aB95JIboONJBrAn0ay]x", "ln": 35, "addr": 1287 }, { "b": "arUf5B7DErbRZF=x(i", "ln": 36, "addr": 1311 }, { "b": "arSl/C4CYnaBCp-eP$YCB7(+Aat2f*wPz\u003cazY\u003cAIeIhcSA=U@kzyC", "n": [ { "c": 1, "d": "Regex component marker", "i": "objectives/anti-static/obfuscation/code-metrics/structure::sh-dense-eval-chains-unless-cond-1--rx-2", "o": 1358, "z": 19, "cf": 0.9200000166893005 } ], "ln": 37, "addr": 1326 }, { "b": "arR^HwN/y(asy#owfrpky?Wu*eIX}ngC9S9diHw#g=3G", "ln": 38, "addr": 1369 }, { "b": "arR^HAb]VgBy(Tvb13o/D2^RixMLvBlN:c7B09})wN##.z!s9nvrb{4mSiA!wmoN]z/d9GnP52\u003c", "ln": 39, "addr": 1405 }, { "b": "arR^HwQ4{hatr", "ln": 45, "addr": 1697 }, { "b": "arR^Hj39", "ln": 46, "addr": 1708 }, { "b": "arSl/xDRWBeIgTEaBCp-eOFZiaBCp-eOFZiA47", "n": [ { "c": 1, "d": "Regex component marker", "i": "objectives/anti-static/obfuscation/code-metrics/structure::sh-dense-eval-chains-unless-cond-1--rx-1", "o": 1738, "z": 16, "cf": 0.9200000166893005 } ], "ln": 47, "addr": 1715 }, { "b": "arR^HwN/y(as5dhB75Y)iV@lHwft8Lp/H1Zpf/F8e*9RPoHQM^e=", "n": [ { "c": 1, "d": "Regex component marker", "i": "objectives/anti-static/obfuscation/code-metrics/structure::sh-dense-eval-chains-unless-cond-1--rx-3", "o": 1757, "z": 7, "cf": 0.9200000166893005 } ], "ln": 48, "addr": 1746 }, { "b": "arR^HarSl/xK#10arR^HarR^HarR^HarUSzx(n2nBzbxfaztt5A3eObwftDdx(\u003c", "ln": 49, "addr": 1788 }, { "b": "arR^HarSl/C4CYnx(v(iarR^HarR^HarUSzx(n2nC4CYnx(v(ix(mK3A=2lbx(v(ivqYP#wQ4{h", "ln": 50, "addr": 1839 }, { "b": "arSmVefDI@C4CY6z/YFjarR^HarR^HarUSzx(n2nvqG:5x(mK3A=2lbx(v\u003e", "ln": 54, "addr": 2074 }, { "b": "a]", "ln": 55, "addr": 2122 }, { "b": "arR^HAb]VgBy(Tvb1uG\u003eayYFaaAz4jz/P@lzF78azGx]uBZ]Jcz/fREaAhddvrl05B7F]ztWhd)B1QZ5zxZid", "n": [ { "c": 2, "d": "Windows path-like string pattern", "i": "micro-behaviors/fs/path/reference::windows-path-like-string", "o": 2178, "z": 12, "cf": 1.0 } ], "ln": 56, "addr": 2124 }, { "b": "arR^HarR\u003c\u003cxMOunB2\u003e%cCxXl-xkR\u0026Az/PFzB8LVjCvtJ6fkLuiv\u003eRqlxlbXsBzU?Ta]", "ln": 57, "addr": 2193 }, { "b": "arR^HwQ4{hatr", "ln": 58, "addr": 2247 }, { "b": "boQAbw[tE]x(mMaBzbkdv{%g\u0026x(mMaB7/c3y-)qlwN/\u003e8x(v(iwO#W9A=k\u0026jwO#Px", "ln": 115, "addr": 3823 }, { "b": "BAhUlBAg/1wHF#Ic\u0026", "ln": 116, "addr": 3876 }, { "b": "arUPBBz#wAjTqB!C42hfbW\u003ej]uUaa#aswuUkQ4M#gcN3tj0nMNjTrlNaAhvnzGGFkcWm12az2!iBrz\u0026Hv\u003c}", "n": [ { "c": 3, "d": "eval command in shell script", "i": "micro-behaviors/process/create/eval::shell-eval", "o": 3901, "z": 6, "cf": 0.800000011920929 } ], "ln": 117, "addr": 3890 }, { "b": "arUYmjTrk", "ln": 118, "addr": 3957 }, { "b": "arUSzx(n38aswERcM\u003cPUDVa4GAclmGCZQ+", "ln": 119, "addr": 3965 }, { "b": "arR^Hw]zYjA==bdazCZobZSA*oHIMCq=Ffbay]x", "ln": 158, "addr": 4724 }, { "b": "arR^HarUxgaARgoBrAeWas7#Hy?bQIBzbl6", "ln": 159, "addr": 4756 }, { "b": "33G)2x\u003ezS$z/{d+u)H8tBzLGoat2f*wPzG%C{1pRw[=6)b47", "n": [ { "c": 3, "d": "Shell command execution capability", "i": "micro-behaviors/process/create/shell/spawn::shell-execution-comp", "o": 4797, "z": 26, "cf": 0.8999999761581421 } ], "ln": 160, "addr": 4785 }, { "b": "336Q0jTrk", "ln": 161, "addr": 4824 }, { "b": "31Ey+wGSmswPP5ezu", "ln": 162, "addr": 4832 } ], "depth": 1, "facts": { "imp": [ [ "", "test" ], [ "", "test" ], [ "", "echo" ], [ "", "echo" ], [ "", "printf" ], [ "", "printf" ], [ "", "printf" ], [ "", "printf" ], [ "", "exit" ], [ "", "exit" ], [ "", "echo" ], [ "", "echo" ], [ "", "printf" ], [ "", "printf" ], [ "", "exit" ], [ "", "exit" ], [ "", "shift" ], [ "", "shift" ], [ "", "shift" ], [ "", "shift" ], [ "", "shift" ], [ "", "shift" ], [ "", "shift" ], [ "", "shift" ], [ "", "echo" ], [ "", "echo" ], [ "", "exit" ], [ "", "exit" ], [ "", "shift" ], [ "", "shift" ], [ "", "break" ], [ "", "break" ], [ "", "echo" ], [ "", "echo" ], [ "", "echo" ], [ "", "echo" ], [ "", "exit" ], [ "", "exit" ], [ "", "break" ], [ "", "break" ], [ "", "return" ], [ "", "return" ], [ "", "test" ], [ "", "test" ], [ "", "eval" ], [ "", "eval" ], [ "", "printf" ], [ "", "printf" ], [ "", "exit" ], [ "", "exit" ], [ "", "printf" ], [ "", "printf" ], [ "", "return" ], [ "", "return" ], [ "", "echo" ], [ "", "echo" ], [ "", "echo" ], [ "", "echo" ], [ "", "exit" ], [ "", "exit" ], [ "", "do" ], [ "", "do" ], [ "", "test" ], [ "", "test" ], [ "", "echo" ], [ "", "echo" ], [ "", "test" ], [ "", "test" ], [ "", "echo" ], [ "", "echo" ], [ "", "test" ], [ "", "test" ], [ "", "echo" ], [ "", "echo" ], [ "", "test" ], [ "", "test" ], [ "", "test" ], [ "", "test" ], [ "", "echo" ], [ "", "echo" ], [ "", "test" ], [ "", "test" ], [ "", "{rtld}" ], [ "", "break" ], [ "", "break" ], [ "", "nonelf" ], [ "", "nonelf" ], [ "", "echo" ], [ "", "echo" ], [ "", "try_trace" ], [ "", "try_trace" ], [ "", "echo" ], [ "", "echo" ], [ "", "exit" ], [ "", "exit" ], [ "", "echo" ], [ "", "echo" ], [ "", "done" ], [ "", "done" ], [ "", "exit" ], [ "", "exit" ] ], "tgt": [ "${rtld}", ":", "break", "do", "done", "echo", "eval", "exit", "nonelf", "printf", "return", "shift", "test", "try_trace" ], "metrics": { "ast": { "op.mod": 1.0, "max_depth": 11.0, "bind_count": 27.0, "call_count": 52.0, "node_count": 984.0, "op_density.mod": 0.0, "identifier_count": 53.0, "string_literal_count": 50.0 }, "file": { "size": 5404.0, "entropy": 5.03, "size_bytes": 5404.0 }, "text": { "tab_count": 10.0, "digit_ratio": 0.02, "space_count": 1055.0, "total_lines": 192.0, "char_entropy": 5.03, "mixed_indent": 1.0, "unique_chars": 88.0, "string_density": 0.26, "avg_line_length": 27.15, "max_line_length": 83.0, "empty_line_ratio": 0.07, "last_line_length": 6.0, "whitespace_ratio": 0.23, "most_common_ratio": 0.07, "identifier_density": 1.09, "line_length_stddev": 25.21, "normalized_string_count": 3.61, "repeated_char_sequences": 4.0, "suspicious_string_ratio": 0.16, "most_common_char_is_null": 0.0, "suspicious_comment_ratio": 0.09, "max_inline_whitespace_run": 14.0, "most_common_char_codepoint": 101.0, "suspicious_identifier_ratio": 0.04, "normalized_unique_identifiers": 7.12 }, "binds": { "count": 27.0 }, "calls": { "count": 52.0, "dynamic_target_count": 1.0 }, "binary": { "overall_entropy": 5.03, "peak_region_bytes": 4096.0, "peak_region_entropy": 5.12 }, "source": { "function_count": 2.0 }, "strings": { "total": 50.0, "avg_length": 28.72, "max_length": 365.0, "path_count": 1.0, "avg_entropy": 2.96, "sql_strings": 1.0, "total_bytes": 1436.0, "entropy_stddev": 1.11, "shell_command_strings": 6.0, "embedded_code_candidates": 1.0 }, "comments": { "chars": 1709.0, "lines": 34.0, "total": 34.0, "to_code_ratio": 0.22, "url_in_comments": 1.0, "high_entropy_comments": 3.0 }, "functions": { "count": 2.0, "avg_params": 3.0, "max_params": 4.0, "length_stddev": 0.5, "avg_name_length": 7.5, "avg_length_lines": 5.5, "max_length_lines": 6.0, "min_length_lines": 5.0, "avg_param_name_length": 11.0, "density_per_100_lines": 1.04, "code_in_functions_ratio": 0.06 }, "identifiers": { "count": 53.0, "total": 210.0, "avg_length": 5.19, "max_length": 17.0, "min_length": 1.0, "avg_entropy": 1.83, "reuse_ratio": 0.26, "unique_count": 54.0, "length_stddev": 3.69, "has_digit_ratio": 0.02, "sequential_names": 2.0, "single_char_count": 7.0, "single_char_ratio": 0.13, "all_lowercase_ratio": 0.54, "all_uppercase_ratio": 0.09 } } }, "id": 1, "mol": "O(Er)H(Po₂)", "path": "/data/samples/good/foraged/wolfi/wolfi.dev/_/posix-libc-utils/posix-libc-utils-2.43-r6.apk!!usr/bin/ldd", "risk": 3, "sha": "37fdfbb3c0582be85311fcf7c30b3d89b6c7b1ceb06c1ee584d59c0734900533", "size": 5404, "traits": [ { "id": "micro-behaviors/process/interpreter/eval::shell-eval", "atk": "T1059", "crit": 3, "desc": "Shell eval call", "spans": [ [ 3901, 4 ] ] }, { "id": "objectives/evasion/masquerade/extension/shebang::bash-shebang-first-line", "atk": "T1036.008", "mbc": "F0008", "conf": 0.949999988079071, "crit": 3, "desc": "File starts with", "spans": [ [ 0, 11 ] ] }, { "id": "micro-behaviors/process/create/eval::shell-eval", "mbc": "E1059.004", "conf": 0.800000011920929, "crit": 3, "desc": "eval command in shell script", "spans": [ [ 3901, 6 ] ] }, { "id": "micro-behaviors/process/create/shell/spawn::sh-dynamic-command-target", "conf": 0.6000000238418579, "crit": 3, "desc": "Shell command name from variable", "spans": [ [ 0, 33 ] ] }, { "id": "micro-behaviors/process/create/shell/spawn::shell-symbols", "conf": 0.8999999761581421, "crit": 3, "desc": "Shell execution symbols", "spans": [ [ 0, 33 ], [ 4797, 26 ] ] } ], "type": "shell" }, { "ctx": [ { "b": "DJ", "n": [ { "c": 2, "d": "SPDX SBOM document", "i": "metadata/package/files/system-package::spdx-sbom-document", "o": 0, "z": 1, "cf": 0.9800000190734863 } ], "ln": 1, "addr": 0 }, { "b": "arR\u003eHAaBh]wPz\u003caz/c:War\u003c-Xl%82@e\u0026aX5", "ln": 2, "addr": 2 }, { "b": "arR\u003esvrt{Kx\u003e7Z(B7DKRar\u003cfufFb1ifD@4", "ln": 3, "addr": 31 }, { "b": "arR^Hb5y$6wO#N2oLFM\u0026r+lq)x(v(kiV]R5e\u00262gaec", "ln": 8, "addr": 257 }, { "b": "arR^Hb4CU8vruBdB0rT/tl", "ln": 9, "addr": 291 }, { "b": "arR^HarR\u003ecz/oCMaz\u003eXavqYZ?asIy!e\u0026kKuf!1p$", "n": [ { "c": 2, "d": "Melange-generated SPDX SBOM", "i": "metadata/package/files/system-package::melange-spdx-sbom", "o": 315, "z": 14, "cf": 0.9800000190734863 } ], "ln": 10, "addr": 309 }, { "b": "arR^HarR\u003e7A+w/#x)Kifx(v(Iavx*Jx(mNavrb)faw3DXa]", "ln": 11, "addr": 342 }, { "b": "arR^Ht}t", "ln": 12, "addr": 380 }, { "b": "arR^HarR^HarR\u003eGwObH]wO#0?lT+7Fxk.*ob03?\u003cp^EDwk$su}o*IJum[3r1ec", "ln": 41, "addr": 1302 }, { "b": "arR^HarR^HarR\u003eGwObH]wO#0?rc-B]b03?\u003cAclhqa$J", "ln": 42, "addr": 1352 }, { "b": "arR^HarR^HarR\u003eGwObH]wO#0?oMaAHBz(gziV]R=yIbXpAbdaJz!%31fk$\u0026Jx)qjCx\u003c$N7B-.tlB3IGkg=3.7hA$R\u003cv}X2Ii5Ub4g*CeSfFUK%x(!xpz-@q.y?vx9", "n": [ { "c": 2, "d": "Wolfi APK SPDX SBOM", "i": "metadata/package/files/system-package::wolfi-apk-spdx-sbom", "o": 1387, "z": 85, "cf": 0.9800000190734863 } ], "ln": 43, "addr": 1387 }, { "b": "arR^HarR^HEjL", "ln": 44, "addr": 1488 }, { "b": "arR^HarR^HDJ", "ln": 45, "addr": 1499 }, { "b": "arR^HarR\u003esz*c8nz^^fIz!0i$x(v(kiV]RwpEd]Tmn^8RpFJ8+", "ln": 96, "addr": 3539 }, { "b": "arR^HarR\u003eux(4v4l2HaED3T4jb03\u0026UvqH0@ec", "ln": 97, "addr": 3580 }, { "b": "arR^HarR\u003eHz/{8gwL3=KzZ4j+b4j#3B.L(cwft\u00261v@2H=wGUY8w]w/7A=k!qk#ph%l{-{Sfd{6]m[DDBpA?s", "n": [ { "c": 1, "d": "SPDX references APK DB package info", "i": "metadata/package/files/system-package::spdx-apk-pkginfo-source", "o": 3631, "z": 44, "cf": 0.8999999761581421 } ], "ln": 98, "addr": 3610 }, { "b": "arR^HarR\u003eAx\u003e7Z(B7EZSzEWH9wmYo}iV]RwpEd]Tmn^8RpFJ8+", "ln": 99, "addr": 3678 }, { "b": "arR^HarR\u003eAx\u003e7Z(B7E:Jv@bN]wN(#Car\u003cGHp!SC@e?[}@AXh9oBy/Fpec", "ln": 100, "addr": 3719 }, { "b": "arR^HarR^HarR\u003eGwObH]wO#0?oMaAHBz(gziV]R=yIbXpAbdaJz!%31fk$\u0026Jx)qjCx\u003c$N7B-.tlB3IGkg=3.7hA$R\u003cv}X2Ii5Ub4g*CeSfFUL8A+Pf2zARSGx\u003c$M@", "n": [ { "c": 1, "d": "Wolfi APK package URL in SPDX", "i": "metadata/package/files/system-package::spdx-wolfi-apk-purl", "o": 4172, "z": 85, "cf": 0.8999999761581421 } ], "ln": 112, "addr": 4172 }, { "b": "arR^HarR^HEe", "ln": 113, "addr": 4273 } ], "depth": 1, "facts": { "metrics": { "file": { "size": 5806.0, "entropy": 5.12, "size_bytes": 5806.0 }, "json": { "parsed_bytes": 5806.0, "parse_limit_bytes": 76800.0 }, "binary": { "overall_entropy": 5.12, "peak_region_bytes": 5806.0, "peak_region_entropy": 5.14 } } }, "id": 2, "path": "/data/samples/good/foraged/wolfi/wolfi.dev/_/posix-libc-utils/posix-libc-utils-2.43-r6.apk!!var/lib/db/sbom/posix-libc-utils-2.43-r6.spdx.json", "risk": 1, "sha": "4ae397ccf1839d2d2bb5cd4fae64e8b203160e1d612d56556ed2b0aa9507e24d", "size": 5806, "traits": [ { "id": "metadata/package/files/system-package::spdx-wolfi-apk-purl", "conf": 0.8999999761581421, "crit": 1, "desc": "Wolfi APK package URL in SPDX", "spans": [ [ 1387, 85 ], [ 1418, 14 ], [ 4172, 85 ] ] }, { "id": "metadata/file/format::valid", "conf": 0.6000000238418579, "crit": 2, "desc": "JSON data format", "spans": [ [ 0, 34 ] ] }, { "id": "metadata/package/files/system-package::spdx-document-id", "conf": 0.8999999761581421, "crit": 1, "desc": "SPDX document identifier" }, { "id": "metadata/package/files/system-package::spdx-melange-namespace", "conf": 0.8999999761581421, "crit": 1, "desc": "Melange SPDX document namespace" }, { "id": "metadata/package/files/system-package::spdx-document-version", "conf": 0.8999999761581421, "crit": 1, "desc": "SPDX document version field" }, { "id": "metadata/package/files/system-package::spdx-apk-pkginfo-source", "conf": 0.8999999761581421, "crit": 1, "desc": "SPDX references APK DB package info", "spans": [ [ 3631, 44 ] ] }, { "id": "metadata/package/files/system-package::spdx-melange-creator", "conf": 0.8999999761581421, "crit": 1, "desc": "Melange SPDX creator", "spans": [ [ 315, 14 ] ] }, { "id": "metadata/package/files/system-package::spdx-sbom-document", "conf": 0.9800000190734863, "crit": 2, "desc": "SPDX SBOM document" }, { "id": "metadata/package/files/system-package::melange-spdx-sbom", "conf": 0.9800000190734863, "crit": 2, "desc": "Melange-generated SPDX SBOM", "spans": [ [ 315, 14 ] ] }, { "id": "metadata/package/files/system-package::wolfi-apk-spdx-sbom", "conf": 0.9800000190734863, "crit": 2, "desc": "Wolfi APK SPDX SBOM", "spans": [ [ 1387, 85 ], [ 1418, 14 ], [ 3631, 44 ], [ 4172, 85 ] ] } ], "type": "json" }, { "ctx": [ { "b": "boPG/zE)\u0026%By!#9vTf8kwO+^)xjR", "n": [ { "c": 2, "d": "Melange-generated APK package info", "i": "metadata/package/files/system-package::melange-generated-apk-pkginfo", "o": 0, "z": 22, "cf": 0.9800000190734863 } ], "ln": 1, "addr": 0 }, { "b": "Abf97vqPM#jS[YZB7]\u003eJy?Wu*eP(eHy\u0026Y", "n": [ { "c": 2, "d": "Wolfi APK package info metadata", "i": "metadata/package/files/system-package::wolfi-apk-pkginfo", "o": 23, "z": 26, "cf": 0.9800000190734863 } ], "ln": 2, "addr": 23 }, { "b": "Abf9fwPw[RatLMagC9S9", "n": [ { "c": 2, "d": "Alpine/Wolfi package info metadata", "i": "metadata/package/files/system-package::alpine-apk-pkginfo", "o": 50, "z": 16, "cf": 0.9700000286102295 } ], "ln": 3, "addr": 50 }, { "b": "vrb\u003c\u003eauZ\u0026(i5Ub4gY", "ln": 4, "addr": 67 }, { "b": "B7]@iauZ\u00266ixe#N", "ln": 5, "addr": 81 }, { "b": "z/PM8x(k4RazkI8vQ/", "n": [ { "c": 1, "d": "Alpine/Wolfi package origin field", "i": "metadata/package/files/system-package::alpine-pkginfo-origin-field", "o": 94, "z": 14, "cf": 0.8999999761581421 } ], "ln": 6, "addr": 94 }, { "b": "Abf8%wPIu7jS)M%q+p7lsvl7hB-.tlx([62B0bgmv@co#wN({cx([2hBzbkdlM*hVvSC)$C(", "ln": 7, "addr": 109 }, { "b": "B-IpvjS\u003c", "ln": 8, "addr": 167 }, { "b": "v@Dj3x(\u003eEXay^fqgbrw}hzX(Oh!3hJvLzsGg?g2Mi5s#4i5rm2h-Lq9iwJozhu", "ln": 9, "addr": 174 }, { "b": "zddc@Byw)3wPw[RaA}:uw[.", "n": [ { "c": 1, "d": "Wolfi package maintainer field", "i": "metadata/package/files/system-package::wolfi-pkginfo-maintainer", "o": 224, "z": 18, "cf": 0.8999999761581421 } ], "ln": 10, "addr": 224 }, { "b": "vS=y3wmPa\u003cwGTbUf/I3Gf/y%Fgb]", "ln": 11, "addr": 243 }, { "b": "y?Wx\u003czGxwijS)A*p!SC@e?[}@AXh9oBy/E", "ln": 12, "addr": 266 } ], "depth": 1, "facts": { "metrics": { "file": { "size": 581.0, "entropy": 5.03, "size_bytes": 581.0 }, "binary": { "overall_entropy": 5.03, "peak_region_bytes": 581.0, "peak_region_entropy": 5.03 } } }, "id": 3, "path": "/data/samples/good/foraged/wolfi/wolfi.dev/_/posix-libc-utils/posix-libc-utils-2.43-r6.apk!!.PKGINFO", "risk": 1, "sha": "3768097720c185124f801004332a92be3e55689225637d217652845116bcf4d6", "size": 581, "traits": [ { "id": "metadata/package/files/system-package::alpine-pkginfo-origin-field", "conf": 0.8999999761581421, "crit": 1, "desc": "Alpine/Wolfi package origin field", "spans": [ [ 94, 14 ] ] }, { "id": "metadata/package/files/system-package::alpine-pkginfo-basename", "conf": 0.8999999761581421, "crit": 1, "desc": "Alpine/Wolfi package info file" }, { "id": "metadata/package/files/system-package::wolfi-pkginfo-maintainer", "conf": 0.8999999761581421, "crit": 1, "desc": "Wolfi package maintainer field", "spans": [ [ 224, 18 ] ] }, { "id": "metadata/package/files/system-package::alpine-pkginfo-package-field", "conf": 0.8999999761581421, "crit": 1, "desc": "Alpine/Wolfi package name field", "spans": [ [ 23, 26 ] ] }, { "id": "metadata/package/files/system-package::arch-pkgname-field", "conf": 0.9399999976158142, "crit": 1, "desc": "Arch pkgname metadata field", "spans": [ [ 23, 26 ] ] }, { "id": "metadata/package/files/system-package::alpine-pkginfo-version-field", "conf": 0.8999999761581421, "crit": 1, "desc": "Alpine/Wolfi package version field", "spans": [ [ 50, 16 ] ] }, { "id": "metadata/package/files/system-package::melange-pkginfo-generator", "conf": 0.8999999761581421, "crit": 1, "desc": "Melange-generated package metadata", "spans": [ [ 0, 22 ] ] }, { "id": "metadata/package/files/system-package::alpine-apk-pkginfo", "conf": 0.9700000286102295, "crit": 2, "desc": "Alpine/Wolfi package info metadata", "spans": [ [ 23, 26 ], [ 50, 16 ], [ 94, 14 ] ] }, { "id": "metadata/package/files/system-package::melange-generated-apk-pkginfo", "conf": 0.9800000190734863, "crit": 2, "desc": "Melange-generated APK package info", "spans": [ [ 0, 22 ], [ 23, 26 ], [ 50, 16 ], [ 94, 14 ] ] }, { "id": "metadata/package/files/system-package::wolfi-apk-pkginfo", "conf": 0.9800000190734863, "crit": 2, "desc": "Wolfi APK package info metadata", "spans": [ [ 23, 26 ], [ 50, 16 ], [ 94, 14 ], [ 224, 18 ] ] } ], "type": "text" } ], "rev": "46112", "v": "8" } }