{ "llm": { "conf": 0.07685718, "grade": "benign", "model": "Qwen/Qwen3.8-27B", "before": { "lvl": -1, "prob": 0.114712216, "class": "benign" }, "outcome": "benign", "interpretation": "legitimate nvim plugin source" }, "ml": { "v": "7", "eng": "2.8.0", "lvl": -1, "conf": 0, "mods": [ { "cls": 0, "raw": 0.114712216, "rte": "az", "prob": 0.114712216 }, { "cls": 0, "raw": 0.0022968452, "rte": "az/zip", "prob": 0.0022968452 } ], "prob": 0.114712216, "files": [ { "id": 0, "lvl": -1, "conf": 0, "prob": 0.11471221596002579, "type": "zip" }, { "id": 1, "lvl": -1, "conf": 0, "prob": 0.000060677528381347656, "type": "zip" }, { "id": 3, "lvl": -1, "conf": 0, "prob": 0.000014990568161010742, "type": "shell" }, { "id": 4, "lvl": -1, "conf": 0, "prob": 0.000017603239029995166, "type": "shell" }, { "id": 5, "lvl": -1, "conf": 0, "prob": 0.000012526909813459497, "type": "shell" }, { "id": 7, "lvl": -1, "conf": 0, "prob": 0.000014632940292358398, "type": "github_actions" }, { "id": 8, "lvl": -1, "conf": 0, "prob": 0.000015527009963989258, "type": "github_actions" }, { "id": 9, "lvl": -1, "conf": 0, "prob": 0.000014632940292358398, "type": "github_actions" }, { "id": 11, "lvl": -1, "conf": 0, "prob": 0.000020285448044887744, "type": "github_actions" }, { "id": 12, "lvl": -1, "conf": 0, "prob": 0.000014632940292358398, "type": "github_actions" }, { "id": 13, "lvl": -1, "conf": 0, "prob": 0.000014334917068481445, "type": "github_actions" }, { "id": 15, "lvl": -1, "conf": 0, "prob": 0.000014424324035644531, "type": "markdown" }, { "id": 16, "lvl": -1, "conf": 0, "prob": 0.000016550222426303662, "type": "markdown" }, { "id": 17, "lvl": -1, "conf": 0, "prob": 0.000017027059584506787, "type": "markdown" }, { "id": 18, "lvl": -1, "conf": 0, "prob": 0.000016987323760986328, "type": "markdown" }, { "id": 19, "lvl": -1, "conf": 0, "prob": 0.0000152587890625, "type": "markdown" }, { "id": 20, "lvl": -1, "conf": 0, "prob": 0.000014801819816057105, "type": "markdown" }, { "id": 21, "lvl": -1, "conf": 0, "prob": 0.000014036893844604492, "type": "markdown" }, { "id": 23, "lvl": -1, "conf": 0, "prob": 0.000013639529242936987, "type": "markdown" }, { "id": 36, "lvl": -1, "conf": 0, "prob": 0.000021666288375854492, "type": "markdown" }, { "id": 40, "lvl": -1, "conf": 0, "prob": 0.0000161131229106104, "type": "markdown" }, { "id": 46, "lvl": -1, "conf": 0, "prob": 0.000015685955077060498, "type": "lua" }, { "id": 68, "lvl": -1, "conf": 0, "prob": 0.000013997157111589331, "type": "lua" }, { "id": 106, "lvl": -1, "conf": 0, "prob": 0.000014066696166992188, "type": "lua" }, { "id": 120, "lvl": -1, "conf": 0, "prob": 0.000025838613510131836, "type": "json" }, { "id": 121, "lvl": -1, "conf": 0, "prob": 0.00002400080302322749, "type": "shell" }, { "id": 122, "lvl": -1, "conf": 0, "prob": 0.00001467267702537356, "type": "shell" }, { "id": 124, "lvl": -1, "conf": 0, "prob": 0.00001773238182067871, "type": "shell" }, { "id": 125, "lvl": -1, "conf": 0, "prob": 0.000016689300537109375, "type": "lua" }, { "id": 127, "lvl": -1, "conf": 0, "prob": 0.000026365121811977588, "type": "lua" }, { "id": 128, "lvl": -1, "conf": 0, "prob": 0.000013957421288068872, "type": "text" }, { "id": 129, "lvl": -1, "conf": 0, "prob": 0.000014354784980241675, "type": "shell" }, { "id": 131, "lvl": -1, "conf": 0, "prob": 0.000020484128981479444, "type": "shell" }, { "id": 132, "lvl": -1, "conf": 0, "prob": 0.000025163093596347608, "type": "shell" }, { "id": 133, "lvl": -1, "conf": 0, "prob": 0.000013500452041625977, "type": "shell" }, { "id": 135, "lvl": -1, "conf": 0, "prob": 0.00001387794782203855, "type": "lua" }, { "id": 151, "lvl": -1, "conf": 0, "prob": 0.0000137786073537427, "type": "lua" }, { "id": 152, "lvl": -1, "conf": 0, "prob": 0.00002018610575760249, "type": "lua" }, { "id": 153, "lvl": -1, "conf": 0, "prob": 0.000012785196304321289, "type": "shell" }, { "id": 175, "lvl": -1, "conf": 0, "prob": 0.000013222296729509253, "type": "lua" }, { "id": 192, "lvl": -1, "conf": 0, "prob": 0.00001424551010131836, "type": "registry" }, { "id": 193, "lvl": -1, "conf": 0, "prob": 0.000014543533325195312, "type": "registry" }, { "id": 194, "lvl": -1, "conf": 0, "prob": 0.00001424551010131836, "type": "registry" }, { "id": 195, "lvl": -1, "conf": 0, "prob": 0.000013401110663835425, "type": "registry" }, { "id": 196, "lvl": -1, "conf": 0, "prob": 0.000013689200386579614, "type": "registry" }, { "id": 197, "lvl": -1, "conf": 0, "prob": 0.000013460715308610816, "type": "registry" }, { "id": 198, "lvl": -1, "conf": 0, "prob": 0.000013401110663835425, "type": "registry" }, { "id": 199, "lvl": -1, "conf": 0, "prob": 0.00001424551010131836, "type": "registry" }, { "id": 200, "lvl": -1, "conf": 0, "prob": 0.000014543533325195312, "type": "registry" }, { "id": 201, "lvl": -1, "conf": 0, "prob": 0.00001424551010131836, "type": "registry" }, { "id": 202, "lvl": -1, "conf": 0, "prob": 0.000014543533325195312, "type": "registry" }, { "id": 203, "lvl": -1, "conf": 0, "prob": 0.000013460715308610816, "type": "registry" }, { "id": 204, "lvl": -1, "conf": 0, "prob": 0.000013401110663835425, "type": "registry" }, { "id": 205, "lvl": -1, "conf": 0, "prob": 0.000029553970307460986, "type": "gz" }, { "id": 206, "lvl": -1, "conf": 0, "prob": 0.000019669532775878906, "type": "lua" }, { "id": 207, "lvl": -1, "conf": 0, "prob": 0.000014543533325195312, "type": "github_actions" }, { "id": 208, "lvl": -1, "conf": 0, "prob": 0.000014185905456542969, "type": "github_actions" }, { "id": 209, "lvl": -1, "conf": 0, "prob": 0.000016689300537109375, "type": "github_actions" }, { "id": 210, "lvl": -1, "conf": 0, "prob": 0.00002355376818741206, "type": "github_actions" }, { "id": 211, "lvl": -1, "conf": 0, "prob": 0.00001903375050460454, "type": "github_actions" }, { "id": 220, "lvl": -1, "conf": 0, "prob": 0.000013401110663835425, "type": "registry" }, { "id": 221, "lvl": -1, "conf": 0, "prob": 0.000013689200386579614, "type": "registry" }, { "id": 222, "lvl": -1, "conf": 0, "prob": 0.000013401110663835425, "type": "registry" }, { "id": 223, "lvl": -1, "conf": 0, "prob": 0.000014543533325195312, "type": "registry" }, { "id": 224, "lvl": -1, "conf": 0, "prob": 0.00001424551010131836, "type": "registry" }, { "id": 225, "lvl": -1, "conf": 0, "prob": 0.000014543533325195312, "type": "registry" }, { "id": 226, "lvl": -1, "conf": 0, "prob": 0.000014543533325195312, "type": "registry" } ], "version": "v18.18", "analyzed_at": "2026-09-06T09:53:01Z" }, "path": "ascii-ui.nvim-0.26.3-1.src.rock", "raw": { "fetched": [ { "kind": "dependency", "cached": true, "locator": "pkg:github/actions/checkout@v4", "outcome": "skipped", "fetched_at": 1788688378, "source_offset": 254, "source_sha256": "ff4a2df4adabac6a09c5255874812f782fe2d3a51592b026c976eb91deb6e96e", "content_sha256": "0a0a18686b267a08fefb74882381768a531e9acd3eebcd577583b0d5159247dd" }, { "kind": "dependency", "size": 1464174, "cached": false, "status": 200, "headers": [ [ "access-control-allow-origin", "https://render.githubusercontent.com" ], [ "content-disposition", "attachment; filename=action-setup-vim-1.tar.gz" ], [ "content-security-policy", "default-src 'none'; style-src 'unsafe-inline'; sandbox" ], [ "content-type", "application/x-gzip" ], [ "cross-origin-resource-policy", "cross-origin" ], [ "etag", "\"1f9034476dc28a0cca7066045bab7ce18f3f72e3e98ecab05e1029de7235b54d\"" ], [ "strict-transport-security", "max-age=31536000" ], [ "vary", "Authorization,Accept-Encoding" ], [ "x-content-type-options", "nosniff" ], [ "x-frame-options", "deny" ], [ "x-xss-protection", "1; mode=block" ], [ "date", "Sun, 06 Sep 2026 09:52:58 GMT" ], [ "transfer-encoding", "chunked" ], [ "x-github-request-id", "913C:DCA04:22725A:75FF0B:6A9D37FA" ], [ "x-github-edge-region", "iad" ] ], "locator": "pkg:github/rhysd/action-setup-vim@v1", "outcome": "ok", "final_url": "https://codeload.github.com/rhysd/action-setup-vim/tar.gz/v1", "fetched_at": 1788688378, "resolved_url": "https://codeload.github.com/rhysd/action-setup-vim/tar.gz/v1", "source_offset": 289, "source_sha256": "ff4a2df4adabac6a09c5255874812f782fe2d3a51592b026c976eb91deb6e96e", "content_sha256": "a458907bbf502c2b1f6db391f50a51adb8bc0be5bececf2c0ce190af208060ab" }, { "kind": "dependency", "cached": true, "locator": "pkg:github/actions/checkout@v3", "outcome": "skipped", "fetched_at": 1788688378, "source_offset": 344, "source_sha256": "a7f770a8e0f9bcefa771c317d97facbc6878931311bf98a73f6f0262c55a1c96", "content_sha256": "92c7588de66a24717a5cef629d6858821c8ce53cd0afdfaddb8b8629ca343e90" }, { "kind": "dependency", "cached": true, "locator": "pkg:github/actions/checkout@v6", "outcome": "skipped", "fetched_at": 1788688379, "source_offset": 293, "source_sha256": "610e14a72b82cbc74195932d010828c49aebc8f5aef81c8dd463bdc06a8d4927", "content_sha256": "e06e131862c0fa3ff0959ed7ce1c2eb83167cb4ae30e9a21eca083510b71e6b0" }, { "kind": "dependency", "size": 36137, "cached": false, "status": 200, "headers": [ [ "access-control-allow-origin", "https://render.githubusercontent.com" ], [ "content-disposition", "attachment; filename=luarocks-tag-release-7.tar.gz" ], [ "content-security-policy", "default-src 'none'; style-src 'unsafe-inline'; sandbox" ], [ "content-type", "application/x-gzip" ], [ "cross-origin-resource-policy", "cross-origin" ], [ "etag", "\"a77b349884d9e99b984cd1d10cc0a6f7b96b005976d218c48200753320dac8a0\"" ], [ "strict-transport-security", "max-age=31536000" ], [ "vary", "Authorization,Accept-Encoding" ], [ "x-content-type-options", "nosniff" ], [ "x-frame-options", "deny" ], [ "x-xss-protection", "1; mode=block" ], [ "date", "Sun, 06 Sep 2026 09:52:59 GMT" ], [ "transfer-encoding", "chunked" ], [ "x-github-request-id", "913C:DCA04:227262:75FF38:6A9D37FA" ], [ "x-github-edge-region", "iad" ] ], "locator": "pkg:github/nvim-neorocks/luarocks-tag-release@v7", "outcome": "ok", "final_url": "https://codeload.github.com/nvim-neorocks/luarocks-tag-release/tar.gz/v7", "fetched_at": 1788688379, "resolved_url": "https://codeload.github.com/nvim-neorocks/luarocks-tag-release/tar.gz/v7", "source_offset": 1212, "source_sha256": "610e14a72b82cbc74195932d010828c49aebc8f5aef81c8dd463bdc06a8d4927", "content_sha256": "202b8360db52a043bcdd3d90933d06dd9f82470fa180ac55ee0087fd719b1695" }, { "kind": "dependency", "cached": true, "locator": "pkg:github/actions/setup-node@v6", "outcome": "skipped", "fetched_at": 1788688379, "source_offset": 423, "source_sha256": "16b38291610003b82ce5ae84664e1c0f9996a1985e449a863f79500dd3fe61bb", "content_sha256": "4f0f86c8a5c4930f1349f5507888a3140ea8acbff9eee12e7d3f5485b7ff0082" }, { "kind": "dependency", "size": 13747, "cached": false, "status": 200, "headers": [ [ "access-control-allow-origin", "https://render.githubusercontent.com" ], [ "content-disposition", "attachment; filename=lua-typecheck-action-1.1.0.tar.gz" ], [ "content-security-policy", "default-src 'none'; style-src 'unsafe-inline'; sandbox" ], [ "content-type", "application/x-gzip" ], [ "cross-origin-resource-policy", "cross-origin" ], [ "etag", "\"65d5644ae9b4f6e6fe53abcbf2327d30b4ebe38123dc17bdfffc9a832c5d7766\"" ], [ "strict-transport-security", "max-age=31536000" ], [ "vary", "Authorization,Accept-Encoding" ], [ "x-content-type-options", "nosniff" ], [ "x-frame-options", "deny" ], [ "x-xss-protection", "1; mode=block" ], [ "date", "Sun, 06 Sep 2026 09:53:00 GMT" ], [ "transfer-encoding", "chunked" ], [ "x-github-request-id", "913C:DCA04:22726C:75FF65:6A9D37FB" ], [ "x-github-edge-region", "iad" ] ], "locator": "pkg:github/mrcjkb/lua-typecheck-action@v1.1.0", "outcome": "ok", "final_url": "https://codeload.github.com/mrcjkb/lua-typecheck-action/tar.gz/v1.1.0", "fetched_at": 1788688380, "resolved_url": "https://codeload.github.com/mrcjkb/lua-typecheck-action/tar.gz/v1.1.0", "source_offset": 426, "source_sha256": "133e6289545135d2820f603256a238efd1c5d8a1fd968933e1d9b76739152f4c", "content_sha256": "f4b25f54d47df3e9a565c82794d1ae917df02e49863b242979dbe3b1fbd6d21b" }, { "kind": "dependency", "size": 786917, "cached": false, "status": 200, "headers": [ [ "access-control-allow-origin", "https://render.githubusercontent.com" ], [ "content-disposition", "attachment; filename=update-flake-lock-24.tar.gz" ], [ "content-security-policy", "default-src 'none'; style-src 'unsafe-inline'; sandbox" ], [ "content-type", "application/x-gzip" ], [ "cross-origin-resource-policy", "cross-origin" ], [ "etag", "\"92a94a2f5c8d0d763c3eaad251f9a4f5c324a524b1bee3f674d87677dbfcd438\"" ], [ "strict-transport-security", "max-age=31536000" ], [ "vary", "Authorization,Accept-Encoding" ], [ "x-content-type-options", "nosniff" ], [ "x-frame-options", "deny" ], [ "x-xss-protection", "1; mode=block" ], [ "date", "Sun, 06 Sep 2026 09:53:00 GMT" ], [ "transfer-encoding", "chunked" ], [ "x-github-request-id", "913C:DCA04:227279:75FF96:6A9D37FC" ], [ "x-github-edge-region", "iad" ] ], "locator": "pkg:github/determinatesystems/update-flake-lock@v24", "outcome": "ok", "final_url": "https://codeload.github.com/determinatesystems/update-flake-lock/tar.gz/v24", "fetched_at": 1788688381, "resolved_url": "https://codeload.github.com/determinatesystems/update-flake-lock/tar.gz/v24", "source_offset": 552, "source_sha256": "5474055084e2ce9fdd6236ee497a838ebaa94779b20d0aed4f2c576de328925b", "content_sha256": "77a6f6d18223464a5b72f52e043c694b85a5597ccda83ea8bb1c126b13f61d52" }, { "kind": "dependency", "size": 526474, "cached": false, "status": 200, "headers": [ [ "access-control-allow-origin", "https://render.githubusercontent.com" ], [ "content-disposition", "attachment; filename=automerge-2.tar.gz" ], [ "content-security-policy", "default-src 'none'; style-src 'unsafe-inline'; sandbox" ], [ "content-type", "application/x-gzip" ], [ "cross-origin-resource-policy", "cross-origin" ], [ "etag", "\"450ea5d791b428e15d02e2d440a08208eb4635be87af5a8c1ca58a4bbbf75fc5\"" ], [ "strict-transport-security", "max-age=31536000" ], [ "vary", "Authorization,Accept-Encoding" ], [ "x-content-type-options", "nosniff" ], [ "x-frame-options", "deny" ], [ "x-xss-protection", "1; mode=block" ], [ "date", "Sun, 06 Sep 2026 09:53:01 GMT" ], [ "transfer-encoding", "chunked" ], [ "x-github-request-id", "914A:1DC155:225DA0:75F777:6A9D37FC" ], [ "x-github-edge-region", "iad" ] ], "locator": "pkg:github/reitermarkus/automerge@v2", "outcome": "ok", "final_url": "https://codeload.github.com/reitermarkus/automerge/tar.gz/v2", "fetched_at": 1788688381, "resolved_url": "https://codeload.github.com/reitermarkus/automerge/tar.gz/v2", "source_offset": 838, "source_sha256": "5474055084e2ce9fdd6236ee497a838ebaa94779b20d0aed4f2c576de328925b", "content_sha256": "96ebd871b15d3929252524f54168a2a0d28331e2bc371e4d3596d55a9c1b06fd" }, { "kind": "dependency", "cached": true, "locator": "pkg:github/dependabot/fetch-metadata@v2", "outcome": "skipped", "fetched_at": 1788688381, "source_offset": 290, "source_sha256": "c59c02620030feaf90a7086c76e9c2e905e1f03b47040626213238eec21884b5", "content_sha256": "de9bc7091a85066b56902eb9f0d37c65cd08e157d424819e21066c578c968924" } ], "files": [ { "id": 0, "ctx": [ { "b": "p!H([6Awak2ML\u0026ics7@\u0026t[j^N002N)0018v8#%z*v}/TeB.JECC4\u003e!BfFkase\u0026b7le]\u003e(uyJBDav]VFm00usFOOzmKOOAp(3JHhg\u003e(Q[=1Nc0*0f6))zSq\u0026JZ4h$WQM(FUi8ebe!rLvDP@QtTW8SEjaX6p#0k1.a\u003c\u003e*\u003e\u003c:eW\u0026^b{gt+[6ch$=@L8{m?(KQb%hj:Qs!n\u0026", "ln": 0 } ], "mol": "H₅(CmDb₂F₄Os₃Po₇)Md₃(Bk₄Pa₂)", "sha": "c181d70e7a34e28e2646af9efb0c52e342c66016de5ef463da3ecbdbb6289fae", "path": "ascii-ui.nvim-0.26.3-1.src.rock", "risk": 16, "size": 1304982, "type": "zip", "facts": { "metrics": { "file": { "size": 1304982, "entropy": 7.99 }, "binary": { "peak_region_bytes": 1258496, "peak_region_entropy": 7.85 }, "archive": { "file_count": 2, "member_count": 2, "script_count": 0, "zip_bomb_ratio": 1.86, "compressed_size": 1304554, "directory_count": 0, "executable_count": 0, "extra_field_size": 48, "noise_file_count": 0, "compression.ratio": 1, "hidden_file_count": 0, "uncompressed_size": 1304943, "crc_collision_count": 0, "entry_comment_count": 0, "max_filename_length": 44, "rtlo_filename_count": 0, "format.regular_count": 2, "nested_archive_count": 1, "path_traversal_count": 0, "symlink_escape_count": 0, "security.setgid_count": 0, "security.setuid_count": 0, "security.sticky_count": 0, "double_extension_count": 0, "duplicate_member_count": 0, "security.symlink_count": 0, "unicode_filename_count": 0, "homoglyph_filename_count": 0, "security.encrypted_count": 0, "timing.mtime_unique_count": 1, "timing.mtime_unique_ratio": 0.5, "misplaced_executable_count": 0, "timing.mtime_dominant_count": 2, "timing.mtime_spread_seconds": 0, "timing.sentinel_mtime_count": 0, "security.world_writable_count": 0, "timing.mtime_dominant_fraction": 1, "compression.method_counts.stored": 1, "compression.method_counts.deflate": 1 }, "consistency": { "extension_content_mismatch": 1, "extension_content_mismatch.archive_as_unknown": 1 } } }, "traits": [ { "id": "metadata/build/ci/permission::job-contents-write-permission", "conf": 0.92, "crit": 3, "desc": "Job grants contents write permission" }, { "id": "micro-behaviors/fs/path/application/config::opencode-config-directory", "conf": 0.93, "crit": 3, "desc": "OpenCode config directory path" }, { "id": "micro-behaviors/process/create/exec::child-process-execution", "atk": "T1059", "conf": 0.94, "crit": 3, "desc": "Executes a child process", "from": [ { "file": 1 }, { "file": 3 }, { "file": 4 }, { "file": 124 } ], "uses": [ 38 ] }, { "id": "micro-behaviors/os/env/access::lua-os-getenv", "conf": 0.85, "crit": 3, "desc": "Lua environment variable access" }, { "id": "metadata/package/testing/presence/harness::test-directory-path", "conf": 1.0, "crit": 1, "desc": "File is in common test directory" }, { "id": "micro-behaviors/fs/directory/chdir::shell-change-directory", "conf": 0.95, "crit": 3, "desc": "Shell changes working directory" }, { "id": "metadata/file/profile/identity::hex-hash-zip-basename", "conf": 0.92, "crit": 3, "desc": "Zip basename is a hexadecimal hash", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/fs/path/extension::office-document-extension-reference", "conf": 0.9, "crit": 1, "desc": "References an Office filename extension" }, { "id": "micro-behaviors/process/create/vcs/git::git-clone-command", "atk": "T1105", "conf": 0.9, "crit": 3, "desc": "Git clone command" }, { "id": "micro-behaviors/process/debug/symbol::lua-debug-module-access", "conf": 0.9, "crit": 3, "desc": "Accesses Lua debug module" }, { "id": "micro-behaviors/data/llm::system-role-marker", "conf": 0.72, "crit": 1, "desc": "LLM system-role value" }, { "id": "micro-behaviors/fs/link/symlink::shell-ln-symlink", "conf": 0.88, "crit": 3, "desc": "Shell creates a symbolic link" }, { "id": "micro-behaviors/process/create/shell/spawn::lua-io-popen", "atk": "T1059.004", "conf": 0.9, "crit": 3, "desc": "Lua io.popen() shell command execution" }, { "id": "micro-behaviors/data/llm::ai-agent-term-reference", "conf": 0.8, "crit": 1, "desc": "References the phrase \"AI agent\"" }, { "id": "micro-behaviors/data/llm::agent-identity-coding-agent", "conf": 0.8, "crit": 1, "desc": "References the generic term \"coding agent\"" }, { "id": "micro-behaviors/process/create/agent-permission::agent-default-agent-override", "atk": "T1562.001", "conf": 0.92, "crit": 3, "desc": "Overrides the configured default agent" }, { "id": "micro-behaviors/data/serialize/envelope::command-assignment-key", "conf": 0.4, "crit": 1, "desc": "Command field or assignment key" }, { "id": "metadata/file/profile/language::lang-english--atom-5", "conf": 0.8, "crit": 2, "desc": "English function-word token \"for\"" }, { "id": "micro-behaviors/process/create/vcs/git::shell-git-pull", "atk": "T1059.004", "conf": 0.92, "crit": 3, "desc": "Pulls changes from a Git remote" }, { "id": "micro-behaviors/communications/http/url/forge::public-code-forge-url", "conf": 0.9, "crit": 3, "desc": "References a public code-forge URL" }, { "id": "micro-behaviors/process/terminate/command::kill-with-signal-flag", "conf": 0.6, "crit": 3, "desc": "kill command invoked with a signal flag" }, { "id": "metadata/package/testing/presence/harness::test-directory", "conf": 1.0, "crit": 2, "desc": "File identified as a test by path or name", "uses": [ 4 ] }, { "id": "micro-behaviors/os/package-manager/install::build-npm-install", "conf": 0.9, "crit": 3, "desc": "Build installs local npm dependencies" }, { "id": "micro-behaviors/process/create/shell/spawn::shell-exec", "atk": "T1059", "conf": 0.5, "crit": 3, "desc": "Uses shell exec to replace process" }, { "id": "metadata/build/ci/trigger::scheduled-workflow-trigger", "conf": 0.9, "crit": 3, "desc": "GitHub scheduled workflow trigger" }, { "id": "micro-behaviors/fs/directory/mkdir::mkdir-command", "conf": 0.8, "crit": 3, "desc": "Shell invokes mkdir command" }, { "id": "metadata/file/format/markup::unified-diff-header", "conf": 0.98, "crit": 1, "desc": "Git unified diff header" }, { "id": "micro-behaviors/fs/path/application/config::opencode-config-json-path", "conf": 0.96, "crit": 3, "desc": "OpenCode config JSON path" }, { "id": "metadata/package/testing/harness-lua::lua-busted-it", "conf": 0.9, "crit": 1, "desc": "Lua it test case" }, { "id": "micro-behaviors/fs/path/application/config::opencode-agents-directory", "conf": 0.94, "crit": 3, "desc": "OpenCode custom agents directory path" }, { "id": "micro-behaviors/data/control-flow/dispatch::lua-while-if-conditional-loop", "conf": 0.9, "crit": 3, "desc": "Lua while loop contains conditional branch" }, { "id": "micro-behaviors/data/llm::role-line-marker", "conf": 0.72, "crit": 1, "desc": "Quoted LLM role label" }, { "id": "micro-behaviors/data/runtime/keywords::pipe-to-bash", "conf": 0.88, "crit": 1, "desc": "Pipe to bash interpreter token" }, { "id": "micro-behaviors/process/create/vcs/git::shell-git-commit", "atk": "T1059.004", "conf": 0.92, "crit": 3, "desc": "Commits changes to a Git repository" }, { "id": "micro-behaviors/os/console/io::dense-stderr-suppression", "conf": 0.85, "crit": 3, "desc": "Dense stderr suppression pattern" }, { "id": "metadata/file/profile/language::lang-english--atom-1", "conf": 0.8, "crit": 2, "desc": "English function-word token \"the\"" }, { "id": "metadata/package/testing/harness-lua::lua-busted-spec", "conf": 0.95, "crit": 2, "desc": "Lua Busted-style spec file", "uses": [ 28, 45, 46 ] }, { "id": "micro-behaviors/process/terminate/command::shell-kill-variable-pid", "conf": 0.85, "crit": 3, "desc": "Shell kills a PID from a variable" }, { "id": "micro-behaviors/process/create/shell/spawn::shell-execution-comp", "atk": "T1059", "mbc": "E1059", "conf": 0.9, "crit": 3, "desc": "Shell command execution capability", "from": [ { "file": 1 }, { "file": 3 }, { "file": 4 }, { "file": 124 } ], "uses": [ 23 ] }, { "id": "metadata/file/extension/identity::shell-a", "conf": 1.0, "crit": 2, "desc": "POSIX shell script extension" }, { "id": "micro-behaviors/process/create/vcs/git::shell-git-clone", "atk": "T1059.004", "conf": 0.85, "crit": 3, "desc": "Shell command invokes git clone" }, { "id": "micro-behaviors/process/create/local-exec::execute-dot-slash-literal", "conf": 0.88, "crit": 3, "desc": "Executes a local relative file" }, { "id": "micro-behaviors/fs/path/application/config::opencode-skills-directory", "conf": 0.9, "crit": 3, "desc": "OpenCode skills directory path" }, { "id": "micro-behaviors/fs/path/extension::data-document-extension-reference", "conf": 0.9, "crit": 1, "desc": "References a data filename extension" }, { "id": "micro-behaviors/data/llm::agent-identity-set", "conf": 0.9, "crit": 3, "desc": "References multiple AI assistant products", "from": [ { "file": 1 }, { "file": 40 } ], "uses": [ 13, 14 ] }, { "id": "metadata/package/testing/harness-lua::lua-spec-basename", "conf": 0.9, "crit": 1, "desc": "Lua spec filename" }, { "id": "metadata/package/testing/harness-lua::lua-busted-describe", "conf": 0.9, "crit": 1, "desc": "Lua describe test block" }, { "id": "metadata/build/ci/secret::run-secret-reference", "conf": 0.82, "crit": 3, "desc": "GitHub Actions run step references a secret" }, { "id": "micro-behaviors/process/create/agent-permission::agent-permission-wildcard-allow", "atk": "T1562.001", "conf": 0.95, "crit": 3, "desc": "Agent config grants every tool permission" }, { "id": "micro-behaviors/process/fd/stdio::stdout-string", "conf": 0.3, "crit": 2, "desc": "References the stdout stream name" }, { "id": "metadata/build/ci/step::actions-setup-node", "conf": 0.92, "crit": 3, "desc": "actions/setup-node workflow step" }, { "id": "metadata/build/ci/secret::step-environment-secret-reference", "conf": 0.95, "crit": 3, "desc": "Step environment references an Actions secret" }, { "id": "metadata/package/config::agent-instructions-md-basename", "conf": 0.95, "crit": 3, "desc": "Agent instructions markdown file name" }, { "id": "metadata/package/testing/presence/harness::archive-test-directory-member-path", "conf": 0.98, "crit": 3, "desc": "Archive ships a root-level test tree" }, { "id": "micro-behaviors/process/create/vcs/git::git-clone-argv", "atk": "T1105", "conf": 0.9, "crit": 3, "desc": "Git clone argument sequence" }, { "id": "metadata/build/ci/secret::action-secret-input", "conf": 0.95, "crit": 3, "desc": "Action input references workflow secret" }, { "id": "metadata/file/format/markup::unified-diff", "conf": 0.98, "crit": 3, "desc": "Git unified diff text format", "from": [ { "file": 1 }, { "off": 61, "file": 128, "line": 2 } ], "uses": [ 26, 60 ] }, { "id": "micro-behaviors/data/serialize/envelope::result-assignment-key", "conf": 0.4, "crit": 1, "desc": "Result field or assignment key" }, { "id": "metadata/file/profile/language::lang-english--atom-7", "conf": 0.8, "crit": 2, "desc": "English function-word token \"this\"" }, { "id": "micro-behaviors/process/create/vcs/git::public-forge-git-clone", "atk": "T1105", "conf": 0.92, "crit": 3, "desc": "Git clones a public code forge", "from": [ { "file": 1 }, { "file": 121 }, { "off": 418, "file": 127, "line": 19 }, { "file": 131 }, { "off": 27, "file": 132, "line": 2 }, { "off": 779, "file": 152, "line": 30 } ], "uses": [ 8, 19, 54 ] }, { "id": "metadata/file/format/markup::unified-diff-index", "conf": 0.98, "crit": 1, "desc": "Git unified diff index line" }, { "id": "metadata/build/ci/secret::step-token-input-secret-reference", "conf": 0.95, "crit": 3, "desc": "Step token input references an Actions secret" } ] }, { "depth": 1, "facts": { "metrics": { "file": { "size": 1304102, "entropy": 7.99 }, "binary": { "peak_region_bytes": 1258496, "peak_region_entropy": 7.86 }, "archive": { "file_count": 201, "has_comment": 1, "comment_size": 40, "member_count": 246, "script_count": 133, "zip_bomb_ratio": 8.12, "compressed_size": 1240058, "directory_count": 45, "executable_count": 16, "extra_field_size": 2214, "noise_file_count": 0, "compression.ratio": 0.69, "hidden_file_count": 56, "uncompressed_size": 1789531, "crc_collision_count": 0, "entry_comment_count": 0, "max_filename_length": 134, "rtlo_filename_count": 0, "format.regular_count": 201, "nested_archive_count": 0, "path_traversal_count": 0, "symlink_escape_count": 0, "security.setgid_count": 0, "security.setuid_count": 0, "security.sticky_count": 0, "double_extension_count": 0, "duplicate_member_count": 0, "format.directory_count": 45, "security.symlink_count": 0, "unicode_filename_count": 0, "homoglyph_filename_count": 0, "security.encrypted_count": 0, "timing.mtime_unique_count": 1, "timing.mtime_unique_ratio": 0, "misplaced_executable_count": 0, "timing.mtime_dominant_count": 246, "timing.mtime_spread_seconds": 0, "timing.sentinel_mtime_count": 0, "security.world_writable_count": 0, "timing.mtime_dominant_fraction": 1, "compression.method_counts.stored": 47, "compression.method_counts.deflate": 199 } } }, "id": 1, "mol": "H₅(CmDb₂F₄Os₃Po₇)Md₃(Bk₄Pa₂)", "path": "ascii-ui.nvim-0.26.3-1.src.rock!!3ec17521dc0c0fe02e0cf3652fafee49488e2f67.zip", "pid": 0, "risk": 16, "sha": "726726c091147fc12e196630fc072a0bbcd4504ef574750f9181b5fdd19f3f48", "size": 1304102, "traits": [ { "id": "metadata/file/format/markup::unified-diff", "conf": 0.98, "crit": 3, "desc": "Git unified diff text format", "from": [ { "off": 61, "file": 128, "line": 2 } ], "uses": [ 2, 34 ] }, { "id": "metadata/package/config::agent-instructions-md-basename", "conf": 0.95, "crit": 3, "desc": "Agent instructions markdown file name" }, { "id": "metadata/file/format/markup::unified-diff-index", "conf": 0.98, "crit": 1, "desc": "Git unified diff index line" }, { "id": "metadata/package/testing/harness-lua::lua-busted-it", "conf": 0.9, "crit": 1, "desc": "Lua it test case" }, { "id": "metadata/package/testing/harness-lua::lua-busted-describe", "conf": 0.9, "crit": 1, "desc": "Lua describe test block" }, { "id": "micro-behaviors/process/create/vcs/git::shell-git-commit", "atk": "T1059.004", "conf": 0.92, "crit": 3, "desc": "Commits changes to a Git repository" }, { "id": "micro-behaviors/data/llm::system-role-marker", "conf": 0.72, "crit": 1, "desc": "LLM system-role value" }, { "id": "micro-behaviors/data/control-flow/dispatch::lua-while-if-conditional-loop", "conf": 0.9, "crit": 3, "desc": "Lua while loop contains conditional branch" }, { "id": "micro-behaviors/fs/path/extension::office-document-extension-reference", "conf": 0.9, "crit": 1, "desc": "References an Office filename extension" }, { "id": "metadata/build/ci/trigger::scheduled-workflow-trigger", "conf": 0.9, "crit": 3, "desc": "GitHub scheduled workflow trigger" }, { "id": "metadata/package/testing/harness-lua::lua-busted-spec", "conf": 0.95, "crit": 2, "desc": "Lua Busted-style spec file", "uses": [ 3, 4, 52 ] }, { "id": "micro-behaviors/process/create/vcs/git::git-clone-command", "atk": "T1105", "conf": 0.9, "crit": 3, "desc": "Git clone command" }, { "id": "micro-behaviors/process/create/shell/spawn::shell-exec", "atk": "T1059", "conf": 0.5, "crit": 3, "desc": "Uses shell exec to replace process" }, { "id": "micro-behaviors/process/fd/stdio::stdout-string", "conf": 0.3, "crit": 2, "desc": "References the stdout stream name" }, { "id": "micro-behaviors/process/create/vcs/git::shell-git-clone", "atk": "T1059.004", "conf": 0.85, "crit": 3, "desc": "Shell command invokes git clone" }, { "id": "metadata/file/extension/identity::shell-a", "conf": 1.0, "crit": 2, "desc": "POSIX shell script extension" }, { "id": "micro-behaviors/process/create/vcs/git::public-forge-git-clone", "atk": "T1105", "conf": 0.92, "crit": 3, "desc": "Git clones a public code forge", "from": [ { "file": 121 }, { "off": 418, "file": 127, "line": 19 }, { "file": 131 }, { "off": 27, "file": 132, "line": 2 }, { "off": 779, "file": 152, "line": 30 } ], "uses": [ 11, 48, 55 ] }, { "id": "micro-behaviors/process/create/local-exec::execute-dot-slash-literal", "conf": 0.88, "crit": 3, "desc": "Executes a local relative file" }, { "id": "metadata/build/ci/step::actions-setup-node", "conf": 0.92, "crit": 3, "desc": "actions/setup-node workflow step" }, { "id": "micro-behaviors/data/serialize/envelope::result-assignment-key", "conf": 0.4, "crit": 1, "desc": "Result field or assignment key" }, { "id": "micro-behaviors/data/llm::role-line-marker", "conf": 0.72, "crit": 1, "desc": "Quoted LLM role label" }, { "id": "micro-behaviors/fs/path/application/config::opencode-config-directory", "conf": 0.93, "crit": 3, "desc": "OpenCode config directory path" }, { "id": "micro-behaviors/process/create/shell/spawn::shell-execution-comp", "atk": "T1059", "mbc": "E1059", "conf": 0.9, "crit": 3, "desc": "Shell command execution capability", "from": [ { "file": 3 }, { "file": 4 }, { "file": 124 } ], "uses": [ 12 ] }, { "id": "metadata/build/ci/secret::action-secret-input", "conf": 0.95, "crit": 3, "desc": "Action input references workflow secret" }, { "id": "metadata/file/profile/language::lang-english--atom-5", "conf": 0.8, "crit": 2, "desc": "English function-word token \"for\"" }, { "id": "metadata/build/ci/secret::step-token-input-secret-reference", "conf": 0.95, "crit": 3, "desc": "Step token input references an Actions secret" }, { "id": "micro-behaviors/process/create/agent-permission::agent-default-agent-override", "atk": "T1562.001", "conf": 0.92, "crit": 3, "desc": "Overrides the configured default agent" }, { "id": "metadata/build/ci/secret::step-environment-secret-reference", "conf": 0.95, "crit": 3, "desc": "Step environment references an Actions secret" }, { "id": "micro-behaviors/fs/path/extension::data-document-extension-reference", "conf": 0.9, "crit": 1, "desc": "References a data filename extension" }, { "id": "micro-behaviors/data/llm::ai-agent-term-reference", "conf": 0.8, "crit": 1, "desc": "References the phrase \"AI agent\"" }, { "id": "micro-behaviors/fs/path/application/config::opencode-config-json-path", "conf": 0.96, "crit": 3, "desc": "OpenCode config JSON path" }, { "id": "micro-behaviors/data/llm::agent-identity-coding-agent", "conf": 0.8, "crit": 1, "desc": "References the generic term \"coding agent\"" }, { "id": "micro-behaviors/fs/path/application/config::opencode-agents-directory", "conf": 0.94, "crit": 3, "desc": "OpenCode custom agents directory path" }, { "id": "metadata/build/ci/permission::job-contents-write-permission", "conf": 0.92, "crit": 3, "desc": "Job grants contents write permission" }, { "id": "metadata/file/format/markup::unified-diff-header", "conf": 0.98, "crit": 1, "desc": "Git unified diff header" }, { "id": "micro-behaviors/process/create/shell/spawn::lua-io-popen", "atk": "T1059.004", "conf": 0.9, "crit": 3, "desc": "Lua io.popen() shell command execution" }, { "id": "micro-behaviors/data/serialize/envelope::command-assignment-key", "conf": 0.4, "crit": 1, "desc": "Command field or assignment key" }, { "id": "metadata/package/testing/presence/harness::test-directory-path", "conf": 1.0, "crit": 1, "desc": "File is in common test directory" }, { "id": "micro-behaviors/process/create/exec::child-process-execution", "atk": "T1059", "conf": 0.94, "crit": 3, "desc": "Executes a child process", "from": [ { "file": 3 }, { "file": 4 }, { "file": 124 } ], "uses": [ 22 ] }, { "id": "micro-behaviors/data/runtime/keywords::pipe-to-bash", "conf": 0.88, "crit": 1, "desc": "Pipe to bash interpreter token" }, { "id": "micro-behaviors/process/create/vcs/git::shell-git-pull", "atk": "T1059.004", "conf": 0.92, "crit": 3, "desc": "Pulls changes from a Git remote" }, { "id": "micro-behaviors/process/terminate/command::kill-with-signal-flag", "conf": 0.6, "crit": 3, "desc": "kill command invoked with a signal flag" }, { "id": "metadata/build/ci/secret::run-secret-reference", "conf": 0.82, "crit": 3, "desc": "GitHub Actions run step references a secret" }, { "id": "metadata/file/profile/language::lang-english--atom-1", "conf": 0.8, "crit": 2, "desc": "English function-word token \"the\"" }, { "id": "micro-behaviors/os/package-manager/install::build-npm-install", "conf": 0.9, "crit": 3, "desc": "Build installs local npm dependencies" }, { "id": "micro-behaviors/fs/path/application/config::opencode-skills-directory", "conf": 0.9, "crit": 3, "desc": "OpenCode skills directory path" }, { "id": "micro-behaviors/process/terminate/command::shell-kill-variable-pid", "conf": 0.85, "crit": 3, "desc": "Shell kills a PID from a variable" }, { "id": "micro-behaviors/os/env/access::lua-os-getenv", "conf": 0.85, "crit": 3, "desc": "Lua environment variable access" }, { "id": "micro-behaviors/communications/http/url/forge::public-code-forge-url", "conf": 0.9, "crit": 3, "desc": "References a public code-forge URL" }, { "id": "metadata/package/testing/presence/harness::test-directory", "conf": 1.0, "crit": 2, "desc": "File identified as a test by path or name", "uses": [ 37 ] }, { "id": "micro-behaviors/process/create/agent-permission::agent-permission-wildcard-allow", "atk": "T1562.001", "conf": 0.95, "crit": 3, "desc": "Agent config grants every tool permission" }, { "id": "micro-behaviors/process/debug/symbol::lua-debug-module-access", "conf": 0.9, "crit": 3, "desc": "Accesses Lua debug module" }, { "id": "metadata/package/testing/harness-lua::lua-spec-basename", "conf": 0.9, "crit": 1, "desc": "Lua spec filename" }, { "id": "micro-behaviors/os/console/io::dense-stderr-suppression", "conf": 0.85, "crit": 3, "desc": "Dense stderr suppression pattern" }, { "id": "micro-behaviors/fs/link/symlink::shell-ln-symlink", "conf": 0.88, "crit": 3, "desc": "Shell creates a symbolic link" }, { "id": "micro-behaviors/process/create/vcs/git::git-clone-argv", "atk": "T1105", "conf": 0.9, "crit": 3, "desc": "Git clone argument sequence" }, { "id": "micro-behaviors/fs/directory/mkdir::mkdir-command", "conf": 0.8, "crit": 3, "desc": "Shell invokes mkdir command" }, { "id": "micro-behaviors/data/llm::agent-identity-set", "conf": 0.9, "crit": 3, "desc": "References multiple AI assistant products", "from": [ { "file": 40 } ], "uses": [ 29, 31 ] }, { "id": "metadata/file/profile/language::lang-english--atom-7", "conf": 0.8, "crit": 2, "desc": "English function-word token \"this\"" }, { "id": "micro-behaviors/fs/directory/chdir::shell-change-directory", "conf": 0.95, "crit": 3, "desc": "Shell changes working directory" }, { "id": "metadata/package/testing/presence/harness::archive-test-directory-member-path", "conf": 0.98, "crit": 3, "desc": "Archive ships a root-level test tree" }, { "id": "metadata/file/profile/identity::hex-hash-zip-basename", "conf": 0.92, "crit": 3, "desc": "Zip basename is a hexadecimal hash", "spans": [ [ 0, 44 ] ] } ], "type": "zip" }, { "ctx": [ { "b": "boXZHx(kOkvrl8?3l{VYwO+{\u003cvru66Bz\u0026pvA+c?jz/6u9BrCgovqPO1z/PRow]zYjv@Dj3x(\u003e}zB7VRez/oAj3l{WjA+c?jz/6u9BrC7izF0P}azC)tx(k4CAb]Iwv@Dj3x(\u003e}pz/ff3xd!ErzeoL\u003cCX7wcAb]Iwv@Dj3x(\u003eFhz/ozyx(d*9at2fUz/ozyBA}?pay/tbze18zzf6tjeIgTOz!*}nx(UsGxk8E3z/oAjat2e/a%Yz$3i", "ln": 0, "col": 1, "line": 1 } ], "depth": 2, "facts": { "imp": [ [ "", "exec" ] ], "tgt": [ "exec" ], "metrics": { "ast": { "max_depth": 4, "call_count": 1, "node_count": 20 }, "file": { "size": 197, "entropy": 4.45 }, "text": { "lines": 5, "top_char": 111, "max_ws_run": 1, "space_count": 20, "char_entropy": 4.45, "unique_chars": 32, "top_char_null": 0, "string_density": 0.2, "top_char_ratio": 0.11, "avg_line_length": 38.4, "max_line_length": 77, "empty_line_ratio": 0.2, "last_line_length": 77, "whitespace_ratio": 0.13, "identifier_density": 1.8, "line_length_stddev": 28.65, "normalized_string_count": 0.45, "normalized_unique_identifiers": 3.45 }, "binary": { "peak_region_bytes": 197, "peak_region_entropy": 4.45 }, "strings": { "bytes": 2, "count": 1, "avg_length": 2, "max_length": 2, "avg_entropy": 1 }, "comments": { "chars": 112, "count": 3, "lines": 3, "to_code_ratio": 1.5 }, "identifiers": { "count": 9, "unique": 8, "avg_length": 8.13, "max_length": 11, "min_length": 2, "avg_entropy": 2.36, "reuse_ratio": 0.89, "length_stddev": 3.06, "all_lowercase_ratio": 0.13 } } }, "id": 3, "mol": "H(Po)", "path": "ascii-ui.nvim-0.26.3-1.src.rock!!3ec17521dc0c0fe02e0cf3652fafee49488e2f67.zip!!ascii-ui.nvim-3ec17521dc0c0fe02e0cf3652fafee49488e2f67/.githooks/commit-msg", "pid": 1, "risk": 1, "sha": "7dfcb63f17f2437cd60df8601ed79a073fbad2823f3cd0b7cfbefb5be1aa0faf", "size": 197, "traits": [ { "id": "metadata/lang/natural::lang-english--atom-5", "conf": 0.8, "crit": 1, "desc": "English function-word token \"for\"", "spans": [ [ 48, 0 ] ] }, { "id": "micro-behaviors/process/create/shell/spawn::shell-exec", "atk": "T1059", "conf": 0.5, "crit": 3, "desc": "Uses shell exec to replace process", "spans": [ [ 119, 4 ] ] }, { "id": "micro-behaviors/process/create/shell/spawn::shell-execution-comp", "atk": "T1059", "mbc": "E1059", "conf": 0.9, "crit": 3, "desc": "Shell command execution capability", "uses": [ 1 ], "spans": [ [ 119, 4 ] ] } ], "type": "shell" }, { "ctx": [ { "b": "boXZHx(kOkvrl8?3l{VYwO+{\u003cvru66Bz\u0026pvA+c?jz/6u9BrCgovqPO1z/PR2boQ@CwI4zgzeB0eay/tcw[+)2x(+zhzxHMJA+c?jz/6u9Bs?0vzF0P}e{Q(xyZK-#wN=\u003c4A+c?jz/6u9BrCQDzxHbGkQ3K", "ln": 0, "col": 1, "line": 1 } ], "depth": 2, "facts": { "imp": [ [ "", "exec" ] ], "tgt": [ "exec" ], "metrics": { "ast": { "max_depth": 4, "call_count": 1, "node_count": 15 }, "file": { "size": 123, "entropy": 4.55 }, "text": { "lines": 5, "top_char": 109, "max_ws_run": 1, "space_count": 12, "char_entropy": 4.55, "unique_chars": 32, "top_char_null": 0, "string_density": 0.2, "top_char_ratio": 0.08, "avg_line_length": 23.6, "max_line_length": 49, "empty_line_ratio": 0.2, "last_line_length": 24, "whitespace_ratio": 0.14, "identifier_density": 0.8, "line_length_stddev": 17.14, "normalized_string_count": 0.45, "normalized_unique_identifiers": 1.29 }, "binary": { "peak_region_bytes": 123, "peak_region_entropy": 4.55 }, "strings": { "bytes": 2, "count": 1, "avg_length": 2, "max_length": 2, "avg_entropy": 1 }, "comments": { "chars": 91, "count": 3, "lines": 3, "to_code_ratio": 1.5 }, "identifiers": { "count": 4, "unique": 3, "avg_length": 5.67, "max_length": 10, "min_length": 3, "avg_entropy": 2.07, "reuse_ratio": 0.75, "length_stddev": 3.09, "all_lowercase_ratio": 0.67 } } }, "id": 4, "mol": "O(S)H(Po)", "path": "ascii-ui.nvim-0.26.3-1.src.rock!!3ec17521dc0c0fe02e0cf3652fafee49488e2f67.zip!!ascii-ui.nvim-3ec17521dc0c0fe02e0cf3652fafee49488e2f67/.githooks/pre-commit", "pid": 1, "risk": 2, "sha": "db03f6d47d42c55848b443b779d1ea9f8cccbab3db647c6ea9b0057f29c830bd", "size": 123, "traits": [ { "id": "objectives/supply-chain/install-hook/dropper/git-hook::git-precommit-hook-path", "atk": "T1059.004", "conf": 0.9, "crit": 3, "desc": "Git pre-commit hook path" }, { "id": "micro-behaviors/process/create/shell/spawn::shell-exec", "atk": "T1059", "conf": 0.5, "crit": 3, "desc": "Uses shell exec to replace process", "spans": [ [ 98, 4 ] ] }, { "id": "micro-behaviors/process/create/shell/spawn::shell-execution-comp", "atk": "T1059", "mbc": "E1059", "conf": 0.9, "crit": 3, "desc": "Shell command execution capability", "uses": [ 1 ], "spans": [ [ 98, 4 ] ] } ], "type": "shell" }, { "id": 5, "sha": "2d935f1288532a5a75ec2e39fba5b7a485b942ada0990e1e1939f4a8c54ac208", "path": "ascii-ui.nvim-0.26.3-1.src.rock!!3ec17521dc0c0fe02e0cf3652fafee49488e2f67.zip!!ascii-ui.nvim-3ec17521dc0c0fe02e0cf3652fafee49488e2f67/.githooks/validate-commit-msg", "risk": 1, "size": 1298, "type": "shell", "depth": 2 }, { "id": 7, "mol": "Md(Bk)", "sha": "a7f770a8e0f9bcefa771c317d97facbc6878931311bf98a73f6f0262c55a1c96", "path": "ascii-ui.nvim-0.26.3-1.src.rock!!3ec17521dc0c0fe02e0cf3652fafee49488e2f67.zip!!ascii-ui.nvim-3ec17521dc0c0fe02e0cf3652fafee49488e2f67/.github/workflows/coverage.yml", "risk": 1, "size": 1600, "type": "github_actions", "depth": 2 }, { "id": 8, "mol": "Md(Bk)", "sha": "bbb57d8bd97216ba8536abcbe3c9c1abe96830a783d2073ead66ea73a9b2bb74", "path": "ascii-ui.nvim-0.26.3-1.src.rock!!3ec17521dc0c0fe02e0cf3652fafee49488e2f67.zip!!ascii-ui.nvim-3ec17521dc0c0fe02e0cf3652fafee49488e2f67/.github/workflows/docs-sync.yml", "risk": 1, "size": 3645, "type": "github_actions", "depth": 2 }, { "id": 9, "mol": "Md(Bk)", "sha": "610e14a72b82cbc74195932d010828c49aebc8f5aef81c8dd463bdc06a8d4927", "path": "ascii-ui.nvim-0.26.3-1.src.rock!!3ec17521dc0c0fe02e0cf3652fafee49488e2f67.zip!!ascii-ui.nvim-3ec17521dc0c0fe02e0cf3652fafee49488e2f67/.github/workflows/luarocks.yml", "risk": 1, "size": 1430, "type": "github_actions", "depth": 2 }, { "id": 11, "mol": "H(Os)Md(Bk₄)", "sha": "16b38291610003b82ce5ae84664e1c0f9996a1985e449a863f79500dd3fe61bb", "path": "ascii-ui.nvim-0.26.3-1.src.rock!!3ec17521dc0c0fe02e0cf3652fafee49488e2f67.zip!!ascii-ui.nvim-3ec17521dc0c0fe02e0cf3652fafee49488e2f67/.github/workflows/release.yml", "risk": 2, "size": 980, "type": "github_actions", "depth": 2 }, { "id": 12, "mol": "Md(Bk)", "sha": "133e6289545135d2820f603256a238efd1c5d8a1fd968933e1d9b76739152f4c", "path": "ascii-ui.nvim-0.26.3-1.src.rock!!3ec17521dc0c0fe02e0cf3652fafee49488e2f67.zip!!ascii-ui.nvim-3ec17521dc0c0fe02e0cf3652fafee49488e2f67/.github/workflows/static_analysis.yml", "risk": 1, "size": 1025, "type": "github_actions", "depth": 2 }, { "id": 13, "mol": "Md(Bk)", "sha": "666e26741f2bf7ea5dfb24be94b3c2351bb27d998b32a6af337199a7a66765fb", "path": "ascii-ui.nvim-0.26.3-1.src.rock!!3ec17521dc0c0fe02e0cf3652fafee49488e2f67.zip!!ascii-ui.nvim-3ec17521dc0c0fe02e0cf3652fafee49488e2f67/.github/workflows/test.yml", "risk": 1, "size": 890, "type": "github_actions", "depth": 2 }, { "id": 15, "mol": "H(F)", "sha": "b3596a74b36cac23696fa54514c71e13381bb01d0cb4aa59ef66fd2e88ee374f", "path": "ascii-ui.nvim-0.26.3-1.src.rock!!3ec17521dc0c0fe02e0cf3652fafee49488e2f67.zip!!ascii-ui.nvim-3ec17521dc0c0fe02e0cf3652fafee49488e2f67/.opencode/CONFIG.md", "risk": 2, "size": 11649, "type": "markdown", "depth": 2 }, { "id": 16, "mol": "H(F)", "sha": "3d87cf3b23ab314aaf19b0eafdb4eb45a20012833605244adaffaa02a404ef03", "path": "ascii-ui.nvim-0.26.3-1.src.rock!!3ec17521dc0c0fe02e0cf3652fafee49488e2f67.zip!!ascii-ui.nvim-3ec17521dc0c0fe02e0cf3652fafee49488e2f67/.opencode/agents/agent-teacher.md", "risk": 2, "size": 20715, "type": "markdown", "depth": 2 }, { "id": 17, "mol": "H(F)", "sha": "18d9056a235aba5e0a257813710f2c6fe5d3f19f23e8f79ed2294df886cd4fb0", "path": "ascii-ui.nvim-0.26.3-1.src.rock!!3ec17521dc0c0fe02e0cf3652fafee49488e2f67.zip!!ascii-ui.nvim-3ec17521dc0c0fe02e0cf3652fafee49488e2f67/.opencode/agents/ascii-ui-dev.md", "risk": 2, "size": 13856, "type": "markdown", "depth": 2 }, { "id": 18, "mol": "H(F)", "sha": "5de7b9a01c8409b48dea6b94002dc258470c62ecc397661f94d5c0fcd2879ab8", "path": "ascii-ui.nvim-0.26.3-1.src.rock!!3ec17521dc0c0fe02e0cf3652fafee49488e2f67.zip!!ascii-ui.nvim-3ec17521dc0c0fe02e0cf3652fafee49488e2f67/.opencode/agents/convention-reviewer.md", "risk": 2, "size": 12037, "type": "markdown", "depth": 2 }, { "id": 19, "mol": "H(F)", "sha": "dd8fc393c48d5dba84552dc985461349d0738f9de1c0dba32bbe801036e24117", "path": "ascii-ui.nvim-0.26.3-1.src.rock!!3ec17521dc0c0fe02e0cf3652fafee49488e2f67.zip!!ascii-ui.nvim-3ec17521dc0c0fe02e0cf3652fafee49488e2f67/.opencode/agents/nvim-docs-researcher.md", "risk": 2, "size": 4830, "type": "markdown", "depth": 2 }, { "id": 20, "mol": "H(F)", "sha": "1f71448ea6688b4d69c403b0459861e06c455804b152ab48863836c2925574e1", "path": "ascii-ui.nvim-0.26.3-1.src.rock!!3ec17521dc0c0fe02e0cf3652fafee49488e2f67.zip!!ascii-ui.nvim-3ec17521dc0c0fe02e0cf3652fafee49488e2f67/.opencode/agents/task-scheduler.md", "risk": 2, "size": 11758, "type": "markdown", "depth": 2 }, { "id": 21, "mol": "H(F)", "sha": "136fcfdf5f3116e31a139df03b0e2778e5bd2e430a9b4a1643710985cbb80fb9", "path": "ascii-ui.nvim-0.26.3-1.src.rock!!3ec17521dc0c0fe02e0cf3652fafee49488e2f67.zip!!ascii-ui.nvim-3ec17521dc0c0fe02e0cf3652fafee49488e2f67/.opencode/skills/README.md", "risk": 2, "size": 1853, "type": "markdown", "depth": 2 }, { "id": 23, "mol": "H(F)", "sha": "04e8e9b8e4c6b30a3a004e6f390472f4ce67b2292a955bde879a9e2c00513b86", "path": "ascii-ui.nvim-0.26.3-1.src.rock!!3ec17521dc0c0fe02e0cf3652fafee49488e2f67.zip!!ascii-ui.nvim-3ec17521dc0c0fe02e0cf3652fafee49488e2f67/.opencode/test-scenarios/agent-teacher/01-update-instructions/expected.md", "risk": 2, "size": 1614, "type": "markdown", "depth": 2 }, { "ctx": [ { "b": "boPoxmnu/Xe]tba3o/NZdNvYUzGGP5avG^:wO=p7zdNQbdK)F4q!ZbVwGToYxlwoqaug[{gb7EwefG4Fx(+zoA=kY7v@@\u0026oB7GznvixAfy\u0026\u003cwyvp%d?BrCTIB97#gazbLjay]5bwO=p7zdNQbe*a87wGUwkz/xo9v@C)?fjwH8zGG}Mu)661AV/BxwN/B.y?Xibwftq[wO#QhasHVtv}/TeB.JBrwP/QEzGY-heO5^fB1IAzB7F^2v}YB]efFCvzGYPeBzkVhePLACx\u003eqH1AX5twxjU$5eP+Mjv}YB]dj$@mbo[r#z/6u9BrA}?zGYPeBzkVh3jnmjo*IJxk#ZSTsT\u003e)Zavf*Way/tbze19kawC\u003cmr3k^\u003ey\u002613laARpdax}iKzGYPeBzkVhvqE5Nz/6u9BAp.oxMOunB2\u003e%cCxXl-v@DmdwO#Q7z/f01v@Dj3x([zGz/PFzdiJXJwN/B^x\u003e7N[x(v(wawM?$wQ4Y@Acb/jzGvAq3rgXM", "ln": 0, "col": 1, "line": 1 }, { "b": "vpB4:ayPzmz/5{8wN(][xKL^\u003ewO=o$B1wCPwO\u003e\u003c[BzkkcC4CYnx(v)6zF7HyvqYP#v@bZ+AV!\u003egzeB0eaztFgBz(hBe*9PawPA5sv@Dj3x(\u003eFmwPI{3xjSi5B-RTEv@Dl%z/PXqBz\u0026pzxLzJgw]zZbvrsKq3sEmH3oSAQAaIiYjAC1JAaIiZiV{J", "ln": 445, "col": 49, "line": 9 }, { "b": "y*?3}x(mMadTbMKdK=G/3vA$7B98XzwNDTdavy6TwGV5oD2d4mv}Yp*xjVcbBzb98ay]ykzF%Rtvp\u003ca.v@@\u0026gwNPE\u003czF77uw]zZbvruQ9zF7Hyze16jx(mMaB7Gi5v@Dg4zGvuKCw7YjwPI*0v}v8iD\u003cUlzu#/*\u003cvpKy$A:Q2qavy6TwGV28B98CB", "ln": 975, "col": 86, "line": 30 }, { "b": "dj#.)dNv(!ayO[]zGEEJwO+^%wN(][xKL^\u003ewPF$*rz#\u003ctB-Rapu$i\u003e*A+eS3CwhejaAI4hAaHe1vp%d?BAp?tdJ\u003c9CD(#*qwP?T9Bylksaw#=]wPz)layMyiA+fAdz/{azv@Dj3x(\u003eFB3jn15bo[sfv@Dr$asInwADL#owN)j%3rgXIayPq4vixG2", "ln": 1630, "col": 87, "line": 37 }, { "b": "w)]g\u003ez/Nol3l{=uavy6:ze18mk#Q6C3jodszeB0eayPslB8L#mayPslD2E*FxKM6}ayMyfx(mT4vqE6cx\u003eIr$w[+:-zGE1hxKL^\u003ewGVhnA+/xbxcqzjBz8!hBAnNDwPI%miTNCYl#M@\u003cBrC14v%8Thy*?A%az+FbxjSh}xKL^\u003ewPFhgawV(^azbg[", "ln": 7264, "col": 67, "line": 224 }, { "b": "aA8vnwPw]qz/PR23mWJbz/PS9y\u0026sIuCw7M9aAh4lwO=6#wGUYdaAz47iW#P^u%)wKvrl8?boPu!wN/G#x\u003ewG8vqfQ4x(+zevqfK(zF6q?x(\u003eFcxK$W?z/{dAzddc@3tj6{aAhEtyZL2/yH[SgwPI@23l{V+w/#hbB98ECw)]y\u0026iTN8Of!KOmy?$k5xjU@", "ln": 8334, "col": 67, "line": 256 }, { "b": "w[+-$w[=6)B0b\u0026q3mWJ4A+c?jz/6u9BrCmnz!\u003czpA=(mxvrDWgzddK2v{%g\u0026C{43yayF?@BrC7izeB0eu)aDVLPT\u003cZaz$+4wft#jaz\u003eL8BZY95C{4cIzxJt7vqxA%v}YB-yHwo6AV!+bve", "ln": 10283, "col": 56, "line": 318 }, { "b": "BrBy#y?Wy83jnmjo*IJxk#ZSTsT\u003e)Zavy6:ze18mx(dY#wnbE]wO=Smvp\u003cQ)AV/7kAbo95wO#Q7zF784xKL^\u003ewPGEh3n0w*zY\u0026}oBrC14v%8Thy*?A%az(mqBzkYgwGUF@vqYY", "ln": 17821, "col": 9, "line": 507 }, { "b": "boP{2x(4Pdl3D:TwO#72A%-muxjU$5B0bpqvpQGRpe1!kAb](iwN/*ly\u0026r/(y-)!mx(4QbasH\u0026xz/3R8e]LYuzEWP}wInaux(4Qbfjk]vAV/swz!-\u0026[Bs?MMwN/B^x\u003e5OA3jovqzF%MbazkIevQT6}B8bGay\u0026Z.hA=k!qu$1j!x(4i!y?l%{yIvQ3B6{bkzFS)9B0b4sAbok#x([fpaAz4kB.bSowN(])C{4lJwPxyg3l{=uaw^8%ygQ)%eLH7)vqE5+yx", "ln": 18159, "col": 2, "line": 518 }, { "b": "FrRfKwO2y-wftP7w]w/fz/^agC4293vpB4:3n0xdAaK6bx(!ufz/e@9\u0026^^moltQNIyH}30vTf8az/fSrA:-W1BAm^vayFR{vRGE$x([SdaMv{oawD#{BzkYgwGVe8y?WA5x(i", "ln": 19040, "col": 14, "line": 546 }, { "b": "wPzT4B8#5lzxIUZBAh8u3jqe6l1:+DBrC@NmpZaOaBCp#vrl98D(#u$z/xngD\u003cUlMeIeLaeIhu4eIeLaeQPc4eIeLaD[u{4eIeLaD\u003cUlzByxlaePUAnwN]}1wPw]vaMw{", "ln": 23339, "col": 6, "line": 722 } ], "depth": 2, "facts": { "metrics": { "file": { "size": 26357, "entropy": 5.02 }, "text": { "lines": 820, "top_char": 101, "max_ws_run": 18, "digit_ratio": 0.01, "space_count": 3456, "char_entropy": 5.02, "unique_chars": 103, "top_char_null": 0, "lines_over_200": 2, "top_char_ratio": 0.08, "ascii_art_lines": 4, "avg_line_length": 31.14, "max_line_length": 389, "non_ascii_ratio": 0.02, "empty_line_ratio": 0.29, "last_line_length": 83, "whitespace_ratio": 0.16, "line_length_stddev": 37.29, "repeated_char_sequences": 23 }, "binary": { "peak_region_bytes": 26357, "peak_region_entropy": 5.01 } } }, "id": 36, "mol": "H(F)Md(Pa)", "path": "ascii-ui.nvim-0.26.3-1.src.rock!!3ec17521dc0c0fe02e0cf3652fafee49488e2f67.zip!!ascii-ui.nvim-3ec17521dc0c0fe02e0cf3652fafee49488e2f67/AGENTS.md", "risk": 2, "sha": "dc41d26954a8db16e424d0f52336c8e78c8f3c6261e59a76d0182805d5dec726", "size": 26357, "traits": [ { "id": "metadata/package/config::agent-instructions-md-basename", "conf": 0.95, "crit": 3, "desc": "Agent instructions markdown file name", "spans": [ [ 0, 9 ] ] }, { "id": "micro-behaviors/fs/path/application/config::opencode-agents-directory", "conf": 0.94, "crit": 3, "desc": "OpenCode custom agents directory path", "spans": [ [ 123, 17 ] ] }, { "id": "micro-behaviors/fs/path/application/config::opencode-config-directory", "conf": 0.93, "crit": 3, "desc": "OpenCode config directory path", "spans": [ [ 123, 10 ] ] }, { "id": "micro-behaviors/fs/path/application/config::opencode-skills-directory", "conf": 0.9, "crit": 3, "desc": "OpenCode skills directory path", "spans": [ [ 18223, 17 ] ] }, { "id": "micro-behaviors/data/runtime/keywords::pipe-to-bash", "conf": 0.88, "crit": 1, "desc": "Pipe to bash interpreter token", "spans": [ [ 23371, 0 ] ] } ], "type": "markdown" }, { "id": 40, "mol": "H(Db)", "sha": "f5096d88a73dc74c9aa5aa9d7e04700f31354faeb6c8e56d605be92f62723595", "path": "ascii-ui.nvim-0.26.3-1.src.rock!!3ec17521dc0c0fe02e0cf3652fafee49488e2f67.zip!!ascii-ui.nvim-3ec17521dc0c0fe02e0cf3652fafee49488e2f67/README.md", "risk": 2, "size": 7814, "type": "markdown", "depth": 2 }, { "id": 46, "mol": "H(Db)", "sha": "223086786882bc9616579486b8c57743e3bfbf3b6971f605ba8be739aed4b61b", "path": "ascii-ui.nvim-0.26.3-1.src.rock!!3ec17521dc0c0fe02e0cf3652fafee49488e2f67.zip!!ascii-ui.nvim-3ec17521dc0c0fe02e0cf3652fafee49488e2f67/examples/analog-clock.lua", "risk": 2, "size": 5025, "type": "lua", "depth": 2 }, { "id": 68, "mol": "H(Po)", "sha": "6452272b76e7b334ca23f0337074dcbfda37ac7e0e781efd8f6607b2b1f5823e", "path": "ascii-ui.nvim-0.26.3-1.src.rock!!3ec17521dc0c0fe02e0cf3652fafee49488e2f67.zip!!ascii-ui.nvim-3ec17521dc0c0fe02e0cf3652fafee49488e2f67/lua/ascii-ui/buffer/segment.lua", "risk": 2, "size": 4575, "type": "lua", "depth": 2 }, { "id": 106, "mol": "H(Os)", "sha": "898205d8f6289637e23b8b5afa2385a0c1232625b19397b18acd0dfe27d55d93", "path": "ascii-ui.nvim-0.26.3-1.src.rock!!3ec17521dc0c0fe02e0cf3652fafee49488e2f67.zip!!ascii-ui.nvim-3ec17521dc0c0fe02e0cf3652fafee49488e2f67/lua/ascii-ui/logger.lua", "risk": 2, "size": 2337, "type": "lua", "depth": 2 }, { "id": 120, "mol": "H₂(FPo)", "sha": "eaea74570fec9ed0fb4ffcf7bd85dc6de6a76a4719701710ca7dab160be71726", "path": "ascii-ui.nvim-0.26.3-1.src.rock!!3ec17521dc0c0fe02e0cf3652fafee49488e2f67.zip!!ascii-ui.nvim-3ec17521dc0c0fe02e0cf3652fafee49488e2f67/opencode.json", "risk": 2, "size": 1194, "type": "json", "depth": 2 }, { "ctx": [ { "b": "boXZHx(kOkvrl8?boP)bzxJ[fA+olgzddr(wGUC[zEWu%vrcd8e^-*Co\u003e!S*z/P[wB7ol8AccdOBy/JnayYFnaAR4jxjVgaaARgoBAo9AwO#0\u003efcCgJy\u003cvdizE:(2z!i#jzF%Rtw)]y\u00263l{WnxK@rbB-5suzxJ+rvpKk0ayO-2wO#0?e^.@cwO(x#x(4uzbQ^IBBy/rddgf{azFr@@y=@$:wPI%mfkUAvx(do{e]kVsa{@p9B.tAaB6\u0026D(AY\u003eQ0fd}uTB98ERB7]-cfk$ufyCfjfAc0WNByxiia{[V?B-7Yhx(v(iB7GDoA9)f]C4\u003e#nzF-%5BsnNXDKp(rx\u003ewF(toC7ieO2$FbZTGDB.tAaB6\u0026D(A^YbOu0PJmBzbl63lQDlaz\u003e[8x(UsFA3ctIDVi!zxk8m8uU0\u003e\u003eEiG1vazbr{3lQE9w/$qZar.\u003cVwfr6wDVi!zxk8m8uU0\u003e\u003eEj]LQwO${%C}J#Tx(b4pu0PJmBzbl63lQDlaz24@zY*ldvR6B!xK8-{zGx]dy\u00260*6xcqefwO${%C}J#Tx(bEPe*pSBarR!tx(\u003eFcy\u0026si5azt\u003esAc15[fk20vxMW=pv@DiqzGY-heO]Mrfk$-szEENhe]C\u0026Dz6g2FDVi!zxk8m8uU0\u003e\u003eEj]LQwO${%C}J#Tx(b43arR^Hy\u0026r/(y-\u003erIaAhddzEENhuO:L}uVoB}v}X1HbQ^RQwgofMv@=p5BAo9Oy?mG)A^ok)h8u\u003e7vru0)a{]CnarUrhBrAe5ar\u00267TAboVfx(n00wnc7jfk$-szEENhe]C\u0026Dz6y9hAbYSsar\u00267TAbo96vrcT2gC{%}Aa9\u0026#xNI6iarUog3vJl*B7GDoA9)f]C4\u003e#nzF-%5Bp5v)C4\u003e!oeIgTEvpTg=B8@DQePbGCy\u0026%x8zxHJNar\u00267Tze0)4zddmea%pa$arSmCar\u003eSAvixP4ADL#owHF{By?mG)A^ooVwPI%2xKL}0wPI]udk2ZNB97=1x(W={Bz(hBc){S2By/JnB1.0lzEWukcOcx!az\u003e?gx(do{uUKy(BrAZ?cNs4Qx(i", "ln": 0, "col": 1, "line": 1 }, { "b": "aAIalB.bDjx\u003c\u003e*2jS[\u0026!B.8XzdiY)t3lQEsaARgaar\u00267TBy/rdw[=6)EiG19wPz*fA=Tw?d05%gaszj-tZd#jtW7z^eJC)#dS3*(xd1/CbZTSAze:93y?n2saBCquCwwrGfdonfA=k#tD}4KUy?mcaauzd#DVj1tzGE0DgKQR[D)06xwPe+zB%5d^cN/xfA+#{ybZTSAze:93y?n2s3jpGVax@4)eP8WRwPz*fA=Svet@%fJxK#5*arUl9xM21qls\u003e4AxL?f#yJyRgvqfK?wfrpfB.2b@BrCdtv}xjZwN({4AV!}lA=k$Ea{]CnwQ4{hatBjnx:LhUCXImxfBv", "ln": 837, "col": 106, "line": 26 } ], "depth": 2, "facts": { "imp": [ [ "", "mktemp" ], [ "", "mkdir" ], [ "", "echo" ], [ "", "git" ], [ "", "pwd" ], [ "", "git" ], [ "", "setup_environment" ], [ "", "nvim" ], [ "", "tee" ], [ "", "sed" ], [ "", "awk" ], [ "", "grep" ], [ "", "rm" ], [ "", "echo" ], [ "", "exit" ], [ "", "exit" ] ], "tgt": [ "awk", "echo", "exit", "git", "grep", "mkdir", "mktemp", "nvim", "pwd", "rm", "sed", "setup_environment", "tee" ], "funcs": [ [ "setup_environment", 235 ] ], "metrics": { "ast": { "op.lnot": 2, "max_depth": 10, "call_count": 16, "node_count": 247, "op_density.lnot": 0.01 }, "file": { "size": 1107, "entropy": 5.04 }, "text": { "lines": 38, "top_char": 101, "max_ws_run": 1, "digit_ratio": 0.02, "space_count": 126, "char_entropy": 5.04, "unique_chars": 59, "top_char_null": 0, "escape_density": 0.09, "string_density": 0.5, "top_char_ratio": 0.07, "avg_line_length": 28.13, "max_line_length": 129, "empty_line_ratio": 0.24, "hex_escape_count": 1, "last_line_length": 6, "whitespace_ratio": 0.15, "identifier_density": 1.61, "line_length_stddev": 31.15, "normalized_string_count": 3.08, "suspicious_string_ratio": 0.11, "normalized_unique_identifiers": 5.53 }, "binds": { "count": 5 }, "binary": { "peak_region_bytes": 1024, "peak_region_entropy": 5.04 }, "source": { "function_count": 1 }, "strings": { "bytes": 498, "count": 19, "shell": 1, "avg_length": 26.21, "max_length": 120, "path_count": 2, "avg_entropy": 3.6, "entropy_stddev": 0.96, "embedded_code_candidates": 1 }, "comments": { "chars": 134, "count": 4, "lines": 4, "to_code_ratio": 0.12 }, "functions": { "count": 1, "density": 2.63, "avg_params": 2, "code_ratio": 0.32, "max_params": 2, "avg_name_length": 17, "avg_length_lines": 12, "max_length_lines": 12, "min_length_lines": 12, "avg_param_name_length": 196 }, "identifiers": { "count": 61, "unique": 29, "avg_length": 6.62, "max_length": 40, "min_length": 2, "avg_entropy": 2, "reuse_ratio": 0.48, "length_stddev": 7.49, "has_digit_ratio": 0.03, "high_entropy_count": 2, "high_entropy_ratio": 0.07, "all_lowercase_ratio": 0.66 } } }, "id": 121, "mol": "H₃(CmFPo₂)", "path": "ascii-ui.nvim-0.26.3-1.src.rock!!3ec17521dc0c0fe02e0cf3652fafee49488e2f67.zip!!ascii-ui.nvim-3ec17521dc0c0fe02e0cf3652fafee49488e2f67/scripts/bench", "pid": 1, "risk": 3, "sha": "74947e03c474966d441d29e07a7ad64b06a9f4a131956781d1bf6869b2b9a5f3", "size": 1107, "traits": [ { "id": "metadata/lang/natural::lang-english--atom-1", "conf": 0.8, "crit": 1, "desc": "English function-word token \"the\"", "spans": [ [ 115, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-2", "conf": 0.8, "crit": 1, "desc": "English function-word token \"and\"", "spans": [ [ 95, 0 ] ] }, { "id": "micro-behaviors/communications/http/url/forge::public-code-forge-url", "conf": 0.9, "crit": 3, "desc": "References a public code-forge URL", "spans": [ [ 453, 19 ] ] }, { "id": "micro-behaviors/process/create/agent::ai-agent-unattended-execution-value", "atk": "T1059", "mbc": "B0022", "conf": 0.9, "crit": 3, "desc": "Unattended agent execution mode value", "spans": [ [ 694, 8 ] ] }, { "id": "micro-behaviors/process/create/vcs/git::git-clone-command", "atk": "T1105", "conf": 0.9, "crit": 3, "desc": "Git clone command", "spans": [ [ 443, 50 ] ] }, { "id": "micro-behaviors/fs/directory/mkdir::mkdir-command", "conf": 0.8, "crit": 3, "desc": "Shell invokes mkdir command", "spans": [ [ 305, 29 ] ] }, { "id": "micro-behaviors/process/create/vcs/git::shell-git-clone", "atk": "T1059.004", "conf": 0.85, "crit": 3, "desc": "Shell command invokes git clone", "spans": [ [ 439, 13 ] ] }, { "id": "micro-behaviors/process/create/vcs/git::public-forge-git-clone", "atk": "T1105", "conf": 0.92, "crit": 3, "desc": "Git clones a public code forge", "uses": [ 2, 4 ], "spans": [ [ 443, 50 ], [ 453, 19 ] ] } ], "type": "shell" }, { "id": 122, "mol": "H(Po)", "sha": "d334c74f36a268532ccc2aaa0d7d42e573457dc7c0749bb237f240a9c944560f", "path": "ascii-ui.nvim-0.26.3-1.src.rock!!3ec17521dc0c0fe02e0cf3652fafee49488e2f67.zip!!ascii-ui.nvim-3ec17521dc0c0fe02e0cf3652fafee49488e2f67/scripts/check-docs", "risk": 2, "size": 520, "type": "shell", "depth": 2 }, { "ctx": [ { "b": "boXZ.B8\u0026{yx(kOnzGWdivrl8?boPASp^[nNo*}/Rk$\u003crZB7ol8AccdOwmYj)xcuh:LPU3?vrcDjvqWh@B7n]#eP\u003e+WzGY-haz++nwI4}ly\u0026r-)ay]4)B.q?rwPI{bz/dfmbmkUrra]#!aAI4kx(Fepx(+y(pGeDQvrcDjz!pblxK@r9BZ/f3v\u003c2-bB.tAaave*}ayPd#az\u003eLjay/7[zF9J6z/M$fwEoU8A+f9aC4Chbx(k54zH0vpB-.+DwGV28y?m3@wIb8FnPV7?B0bgmBy/u2wN(]}z/M$gz/fVqx\u003c#jbz/P[wvqYP#AboVfx(jn5ayPzmxM4{jaA}HqaA}miBrC0mw)]+5azC.hwPxwsz/oOqCw7YbwGVhnA+/xbxcqbgayPt3x\u003eYewx!x-q3l{V[B75Y)iTN8OarSo\u0026B7ol8AccdOwmYj)xcnrtarR^HarR^Hd0oPxB0b18vS=roy\u0026%eex(k5nxK@rbwPhMgA=k(rdgdpxarUJfyH[S0wNY^{3l])5axi2=aA.:pAV/Bpz/](bazthbwGUz7wmYj)xd!1yvixo4aARpdaAz4jz/YSmz/QaCA=k(re*9PcvqP$1wJyey3l{Voaz+$avqE6ex=[JvarS/\u0026A+flkx(W=kb4kL5x\u003eYewx^a#kboO9Ky\u0026r/(yY", "ln": 0, "col": 1, "line": 1 }, { "b": "y?mVsayPd#aAz3BA=(nvay]4)B.rsyBZVz8A=k!qB7ol0ByO#p3jp\u0026=BrAeD3joQ6ryYRQuQNE-jT8d1v}lYabQ^hqA=br5wGSfxDQp1%nmbp\u003erz(gMtqfuha$ke$e*qz+clNnKwgnYfl}6Bxm{!.SoHR8*bZSuYryYRQuQNE-Ej]bxvS=roy\u0026%eg3jpGVax@4)aS@vGar\u002670mm70AuQ^QXmiS\u003cWt@%fJxK#5*arUf5BrA:]g9wXwcQ**2cKJQ!ay]4)B.rsyBZVz8z/]@dazCZoBzbkdA+fidB7]-mA^n^Fz/o.I3jodvwNPW(aA8deaARJAxjVfcB97\u0026hBy!#nawDM/x(do{az2!aze:r5iTMipaz+$ave", "ln": 1078, "col": 7, "line": 31 }, { "b": "ay]4)B.q\u003cwaBLWYEf}8twO#3c3jm)#B.JEBz/]@tc{./\u003edgczYxK#67A=(mxu#os/wGUI{vS=r\u003eaA8oyu[K9Nv@=p5BAo9CwNY^{u)5(\u003cvqfQi3pN-W3lQE5CXImxf:.Jb3jpu?AbP=save{[nL9n?nNCp/ryYRQuQNE-jT8dFoJsOOpg3yXqx=DVCYmOwBrA\u003eFlRf\u003cRry{K=mm70AuQ^QXmlI?ul}6Bxm{!.SoHQcj3t1D[v\u003c2Vjx(a$ABS.\u003eNp!T\u003eVnLSRXnM4i.v@=p5BAo9CwNY^{eOP9pBs}xLviM3", "ln": 1550, "col": 47, "line": 48 } ], "depth": 2, "facts": { "imp": [ [ "", "set" ], [ "", "cd" ], [ "", "dirname" ], [ "", "pwd" ], [ "", "cat" ], [ "", "exit" ], [ "", "exec" ] ], "tgt": [ "cat", "cd", "dirname", "exec", "exit", "pwd", "set" ], "metrics": { "ast": { "op.lnot": 1, "max_depth": 12, "call_count": 7, "node_count": 153, "op_density.lnot": 0.01 }, "file": { "size": 1789, "entropy": 5.08 }, "text": { "lines": 61, "top_char": 101, "max_ws_run": 11, "digit_ratio": 0, "space_count": 287, "char_entropy": 5.08, "unique_chars": 75, "top_char_null": 0, "string_density": 0.1, "top_char_ratio": 0.06, "avg_line_length": 28.33, "max_line_length": 83, "non_ascii_ratio": 0, "empty_line_ratio": 0.16, "last_line_length": 49, "whitespace_ratio": 0.19, "identifier_density": 0.44, "line_length_stddev": 26.46, "normalized_string_count": 0.77, "repeated_char_sequences": 1, "suspicious_string_ratio": 0.17, "suspicious_comment_ratio": 0.06, "normalized_unique_identifiers": 2.53 }, "binds": { "count": 4 }, "binary": { "peak_region_bytes": 765, "peak_region_entropy": 5.34 }, "strings": { "bytes": 138, "count": 6, "shell": 1, "avg_length": 23, "max_length": 48, "avg_entropy": 3.95, "entropy_stddev": 0.68 }, "comments": { "code": 1, "chars": 1057, "count": 31, "empty": 7, "lines": 24, "base64": 1, "high_entropy": 1, "to_code_ratio": 0.65 }, "identifiers": { "count": 27, "unique": 15, "avg_length": 6.87, "max_length": 19, "min_length": 2, "avg_entropy": 2.15, "reuse_ratio": 0.56, "length_stddev": 5.61, "all_lowercase_ratio": 0.53, "all_uppercase_ratio": 0.33 } } }, "id": 124, "mol": "O(As)H₂(FPo)", "path": "ascii-ui.nvim-0.26.3-1.src.rock!!3ec17521dc0c0fe02e0cf3652fafee49488e2f67.zip!!ascii-ui.nvim-3ec17521dc0c0fe02e0cf3652fafee49488e2f67/scripts/debug", "pid": 1, "risk": 3, "sha": "229e94ee252094ca8a7a8f4e56ed9c5c181c43387d34f40eecd41cf58bf882d0", "size": 1789, "traits": [ { "id": "metadata/lang/natural::lang-english--atom-1", "conf": 0.8, "crit": 1, "desc": "English function-word token \"the\"", "spans": [ [ 135, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-2", "conf": 0.8, "crit": 1, "desc": "English function-word token \"and\"", "spans": [ [ 157, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-4", "conf": 0.8, "crit": 1, "desc": "English function-word token \"have\"", "spans": [ [ 429, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-5", "conf": 0.8, "crit": 1, "desc": "English function-word token \"for\"", "spans": [ [ 227, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-7", "conf": 0.8, "crit": 1, "desc": "English function-word token \"this\"", "spans": [ [ 108, 0 ] ] }, { "id": "objectives/anti-static/obfuscation/code-metrics/structure::sh-dense-eval-chains-unless-cond-1--rx-3", "atk": "T1027", "mbc": "B0032", "conf": 0.92, "crit": 3, "desc": "Command-line usage text marker", "spans": [ [ 323, 7 ] ] }, { "id": "micro-behaviors/fs/directory/chdir::shell-change-directory", "conf": 0.95, "crit": 3, "desc": "Shell changes working directory", "spans": [ [ 1142, 2 ] ] }, { "id": "micro-behaviors/process/create/shell/spawn::shell-exec", "atk": "T1059", "conf": 0.5, "crit": 3, "desc": "Uses shell exec to replace process", "spans": [ [ 1739, 4 ] ] }, { "id": "micro-behaviors/process/create/shell/spawn::shell-execution-comp", "atk": "T1059", "mbc": "E1059", "conf": 0.9, "crit": 3, "desc": "Shell command execution capability", "uses": [ 7 ], "spans": [ [ 1739, 4 ] ] } ], "type": "shell" }, { "id": 125, "mol": "H(Os)", "sha": "64d920a606a9adf03fc3ccbfdbdcf97f81d692c8b77d5f5ccb59c36e4d1fd793", "path": "ascii-ui.nvim-0.26.3-1.src.rock!!3ec17521dc0c0fe02e0cf3652fafee49488e2f67.zip!!ascii-ui.nvim-3ec17521dc0c0fe02e0cf3652fafee49488e2f67/scripts/debug-init.lua", "risk": 2, "size": 2189, "type": "lua", "depth": 2 }, { "ctx": [ { "b": "Ab]VgBsntCwO#3%v@\u003cnsBZVzkB-88hzF7NOe*q.K3t:S\u003cvqE66x(mS(wn+%+Aa9\u003c4auZ?\u003ee?X?/wPhYzze0)4e[w)ga{@d8v{%f@moz]JryxnzuQ^QXmn\u003er(aBsC4a$+D2y?Wuie?Fm#3jd[eeIyTCB$UE1a$K\u0026*eG!RHAaK67zdNQbvqE5%wP/UzzFTOvzeS%cy?kduzF%RtAckSax\u003e5nKp!q1x3jpP/v{%f@w{503BzkVhaz\u003eLev}YB{uTW?$c#-QpxE\u003eoBvruQ5A=b}E3jgr.AV!ZuaAg+hBy/GgazCZox(EG{A=STFvruQ5A=b}Eay]x$2)\u003erTaAg+hxGy0sByO#jAa9\u003cgwPzVqaARpdzvcWR336Q0B-IvxBAhIn3jd2IzE:7XwO#2=336Q0B-Ivxw)]H%wEr0^wc@U}eG!Ltz/fbeBzbkdze0)4e[w)gaAz4jz/YSmz/QaCx\u003ewG4BrCajwPI-pBrCdtx(!w6C4\u003e!CB9R?GwO\u0026\u0026xar\u003eDjBrSmUb4CCczE\u003e1yar\u003eGvBz#pZfe3%LBzb/ae[n*pfj!Tbvrls8C5}CkfkUAvx!A}mv\u003eIzdBrSmUze0)4uU17+uVoB}xDRZLi^k1DBsnNB3n0?LvpS)\u003eze0)4e[w)gaARJAAa9l(vp%d7Aa9\u003c43t:S\u003cvqE5%z!0c[vruf9jS(c%c37.QBZV{/e]kVsj0!@3y\u0026%etkqc.*x(\u003e$zBZVEyi+AqJzddJmze0)4uU17+uVoB}xE\u003eoyx(mS(wn+%+Aa9\u003c4dgg35v@2H=wId}gBz8^Way]z2uVoB}xDO]War\u0026(\u003eatbn?Aa9l(vp%d7Aa9\u003c43jnvpaAR4cwGUz$y-)?kwGU/ivixe@y?mVgx(k5jA=kY7v@@5]z!0i(azth3wnC*1jS[fOB7Gxlc#0PLAbPYbzyuYvx(mD7e?.3-vivdzD2Nsqw/@WyvqPM#cN{-+BZVTwdjCPhAb]VgBsnt2z!%l3v@#B5xco(\u003cvixe@y?mVgw].*baARpdaAhvtygQ)%e?O+2dgf)fv{%f@Ab](iwN/*?w[=6)B09Q*C4\u003e!Cx(){bc$)4bwnC*ryY", "ln": 0, "col": 1, "line": 1 }, { "b": "y\u0026sxac[bGgBywS{wIe4xA=-ZGA=kY7v@#6\u0026x(4v4dgcz#z!0i(az\u003e?gx=]LYA+flkx(W=kb5I4ix!A}mv\u003ciueze0)4e]$PCB-n-T3jnvpavG^Yx)a5gBzbkdwn=NiwN({2z!a0bwGU@jwObU3azbUjz6imfw[=6)cVZzvx(W={Bz(hBaAhmtBzkVhe^:fZar\u0026EEvSKhwve", "ln": 1032, "col": 9, "line": 39 }, { "b": "wNxy%wObU3c$WgfwPh71xEKn{y\u0026r/(y-)+fy-\u003e\u003e-w[=6)Aa9\u003c4i=eqEv}Wnmtq6k^u2jT(tq6k^t{}rQdo!DgtWpMufi?:/d\u003cV/:BZVKtdgcw}w/$#fBrCQny-)?kwO}?Y2(", "ln": 1281, "col": 29, "line": 48 }, { "b": "j%j/+wObU3as!MUe\u003c:X)w[u0zCwgPfxECqNasI2pwPe=4y*?yadgdTU3n0?Lra]#!aAhvjB7GxnwPF#pzFs9kwO#72B2\u003eBgB.kk%AXqlvCoysiwfsiYw[CQ{oLFxQe]ClAazCZoBzbkdB75]%3n0?Lwnc6}v@#TfC{3NmBz8!awN/T}wGUI$B98blv@@\u0026nvp%T7c$dgbx\u003eYewx!A\u003eqw[CQ{e\u003c:X)w[u0nzE[2mB]", "ln": 2068, "col": 38, "line": 68 }, { "b": "v@Dmax(!xczGE1wwOkB(wnC*#B0bykaA}:AyIvW0ay]hbwN/?2A^n^BvqPNd3t:S\u003cvqE68B-.OBBrAZ?z/WKzwPRH3B%[L5pEwF+rA8^{r9@9^oHQcO3tB8{z/{evB-X-?jS[SRy-)UpaA8yAAclmBjV%]ia%p#vwO}?Yz/{evB-X-?ar\u003eumv\u003eRniv}/TeB.JEICYUbpwO#2=ze0)4e[X:kwPzj3wHIIrz!-\u0026[ByeS]y?mVsaA8yAAclmNaBtkAz/oAjauZ\u0026Xz/oAjaBLWC", "ln": 4161, "col": 30, "line": 130 } ], "depth": 2, "facts": { "imp": [ [ "", "print" ], [ "", "ipairs" ], [ "", "vim.system" ], [ "", "assert" ], [ "", "io.popen" ], [ "", "print" ], [ "", "vim.iter" ], [ "", "matches_any" ], [ "", "print" ], [ "", "table.sort" ], [ "", "require" ], [ "", "mini.setup" ], [ "", "vim.deepcopy" ], [ "", "default_block_pre" ], [ "", "path_to_module_prefix" ], [ "", "ipairs" ], [ "", "ipairs" ], [ "", "rewrite_line" ], [ "", "os.getenv" ], [ "", "mini.generate" ], [ "", "mini.doc" ] ], "mbr": [ "b.parent", "file.info", "file.info.path", "hooks.block_pre", "io.popen", "mini.default_hooks", "mini.generate", "mini.setup", "os.getenv", "package.path", "section.info", "section.info.id", "section.type", "table.sort", "vim.deepcopy", "vim.iter", "vim.system" ], "tgt": [ "assert", "default_block_pre", "io.popen", "ipairs", "matches_any", "mini.generate", "mini.setup", "os.getenv", "path_to_module_prefix", "print", "require", "rewrite_line", "table.sort", "vim.deepcopy", "vim.iter", "vim.system" ], "funcs": [ [ "matches_any", 178 ], [ "path_to_module_prefix", 1253 ], [ "rewrite_line", 2321 ] ], "metrics": { "ast": { "op.eq": 9, "op.lor": 9, "op.land": 4, "op.lnot": 6, "max_depth": 17, "call_count": 41, "node_count": 1123, "member_count": 17, "max_array_len": 4, "op_density.eq": 0.01, "op_density.lor": 0.01, "op_density.land": 0, "op_density.lnot": 0.01, "member_depth_max": 3 }, "file": { "size": 4381, "entropy": 4.96 }, "text": { "lines": 135, "top_char": 101, "tab_count": 114, "max_ws_run": 15, "digit_ratio": 0, "space_count": 485, "char_entropy": 4.96, "unique_chars": 74, "top_char_null": 0, "string_density": 0.26, "top_char_ratio": 0.08, "avg_line_length": 31.45, "max_line_length": 102, "non_ascii_ratio": 0, "empty_line_ratio": 0.13, "last_line_length": 55, "whitespace_ratio": 0.17, "identifier_density": 1.39, "line_length_stddev": 27.45, "normalized_string_count": 3.01, "repeated_char_sequences": 3, "suspicious_identifier_ratio": 0.03, "normalized_unique_identifiers": 9.47 }, "binds": { "count": 26 }, "binary": { "peak_region_bytes": 4381, "peak_region_entropy": 5.01 }, "source": { "function_count": 3 }, "imports": { "count": 1, "third_party_count": 1, "third_party_ratio": 1 }, "strings": { "bytes": 380, "count": 35, "url_count": 1, "avg_length": 10.86, "max_length": 43, "path_count": 1, "avg_entropy": 2.49, "empty_count": 4, "entropy_stddev": 1.21 }, "comments": { "chars": 1487, "count": 28, "empty": 4, "lines": 24, "to_code_ratio": 0.22 }, "functions": { "count": 3 }, "identifiers": { "count": 188, "unique": 67, "avg_length": 6.54, "max_length": 21, "min_length": 1, "avg_entropy": 2.29, "reuse_ratio": 0.36, "length_stddev": 3.78, "sequential_names": 2, "single_char_count": 3, "single_char_ratio": 0.04, "high_entropy_count": 4, "high_entropy_ratio": 0.06, "all_lowercase_ratio": 0.99, "all_uppercase_ratio": 0.03, "underscore_prefix_count": 1 } } }, "id": 127, "mol": "O(I)H₄(CmFOsPo₂)", "path": "ascii-ui.nvim-0.26.3-1.src.rock!!3ec17521dc0c0fe02e0cf3652fafee49488e2f67.zip!!ascii-ui.nvim-3ec17521dc0c0fe02e0cf3652fafee49488e2f67/scripts/gendocs.lua", "pid": 1, "risk": 5, "sha": "786d965fec450aceb1ade3bc6efd840825cf871b3007f3f79d8825695bc7ba22", "size": 4381, "traits": [ { "id": "metadata/import/lua/mini/doc::mini/doc", "conf": 0.95, "crit": 2, "desc": "imports mini.doc", "spans": [ [ 1089, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-1", "conf": 0.8, "crit": 1, "desc": "English function-word token \"the\"", "spans": [ [ 344, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-2", "conf": 0.8, "crit": 1, "desc": "English function-word token \"and\"", "spans": [ [ 2154, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-5", "conf": 0.8, "crit": 1, "desc": "English function-word token \"for\"", "spans": [ [ 222, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-7", "conf": 0.8, "crit": 1, "desc": "English function-word token \"this\"", "spans": [ [ 2116, 0 ] ] }, { "id": "micro-behaviors/communications/http/url/forge::public-code-forge-url", "conf": 0.9, "crit": 3, "desc": "References a public code-forge URL", "spans": [ [ 418, 19 ] ] }, { "id": "micro-behaviors/os/env/read::lua-os-getenv", "conf": 0.85, "crit": 3, "desc": "Lua environment variable access", "spans": [ [ 4225, 9 ] ] }, { "id": "micro-behaviors/process/create/shell/spawn::lua-io-popen", "atk": "T1059.004", "conf": 0.9, "crit": 3, "desc": "Lua io.popen() shell command execution", "spans": [ [ 717, 8 ] ] }, { "id": "micro-behaviors/process/create/vcs/git::git-clone-argv", "atk": "T1105", "conf": 0.9, "crit": 3, "desc": "Git clone argument sequence", "spans": [ [ 401, 14 ] ] }, { "id": "objectives/impact/infect/script::lua-names-lua-script", "atk": "T1554", "conf": 0.8, "crit": 3, "desc": "Lua source names a Lua script", "spans": [ [ 566, 5 ] ] }, { "id": "micro-behaviors/fs/path/extension::data-document-extension-reference", "conf": 0.9, "crit": 1, "desc": "References a data filename extension", "spans": [ [ 4308, 0 ] ] }, { "id": "micro-behaviors/fs/path/extension::office-document-extension-reference", "conf": 0.9, "crit": 3, "desc": "References an Office filename extension", "spans": [ [ 63, 9 ] ] }, { "id": "micro-behaviors/process/create/vcs/git::public-forge-git-clone", "atk": "T1105", "conf": 0.92, "crit": 3, "desc": "Git clones a public code forge", "uses": [ 5, 8 ], "spans": [ [ 401, 14 ], [ 418, 19 ] ] } ], "type": "lua" }, { "ctx": [ { "b": "wnbT/at2fTx(\u003eFafkL=tfk$-szEENhfjG6BBy!#ny\u0026%eevLqLuvj#OowO${%C}SSHB97#7e]kVs3tBx*wQ2sLvLG-Lv}vnBi5rDGfGp)if!+ptg=bK\u003eeIe8NfkL=tfk$-szEENhfjG6BBy!#ny\u0026%d[d\u003era)vLqLuvj#OowO${%C}SSHB97#7e]kVs3p3\u003c0eIYaweh[X4gby)vhY$vJaz(4ce](8LauZ\u0026VB-7Yhx(v(qw[=6)dgdguarR^UeG^R%az#atxLzu%aAzQxB07", "ln": 0, "col": 1, "line": 1 } ], "depth": 2, "facts": { "metrics": { "file": { "size": 914, "entropy": 4.73 }, "binary": { "peak_region_bytes": 914, "peak_region_entropy": 4.73 } } }, "id": 128, "mol": "Md", "path": "ascii-ui.nvim-0.26.3-1.src.rock!!3ec17521dc0c0fe02e0cf3652fafee49488e2f67.zip!!ascii-ui.nvim-3ec17521dc0c0fe02e0cf3652fafee49488e2f67/scripts/plenary-353.patch", "pid": 228, "risk": 1, "sha": "4a4ae115a94f067991d0ebc0021bb26466ccd7e0cdf7a483066db61ccb2ca3d8", "size": 914, "traits": [ { "id": "metadata/file/format/markup::unified-diff-header", "conf": 0.98, "crit": 3, "desc": "Git unified diff header", "spans": [ [ 0, 60 ] ] }, { "id": "metadata/file/format/markup::unified-diff-index", "conf": 0.98, "crit": 1, "desc": "Git unified diff index line", "spans": [ [ 61, 0 ] ] }, { "id": "metadata/file/format/markup::unified-diff", "conf": 0.98, "crit": 3, "desc": "Git unified diff text format", "uses": [ 0, 1 ], "spans": [ [ 0, 60 ], [ 61, 29 ] ] } ], "type": "text" }, { "id": 129, "mol": "H(Po)", "sha": "31cdec1fb1efe2fbf710d99b705c60c16da883b76f58ba0b0d116a8ba239358c", "path": "ascii-ui.nvim-0.26.3-1.src.rock!!3ec17521dc0c0fe02e0cf3652fafee49488e2f67.zip!!ascii-ui.nvim-3ec17521dc0c0fe02e0cf3652fafee49488e2f67/scripts/release_as", "risk": 1, "size": 105, "type": "shell", "depth": 2 }, { "ctx": [ { "b": "boXZHx(kOkvrl8?boPJ*y\u0026A%aaAI4kx(FepBz\u0026psvqZi@y\u00261wtB9RUkay]z2B0bNyayPt3x\u003eYewx!r\u003elv@\u0026=kwPhL{boQ0cvp%djatbr*v@=p5BAo9RD2vazwn+$0e]$Xk3uG^2at4di3r6q\u0026nL\u0026w[l}Hota%XNDwfr6wc$E4jzEEx[ar\u00267Tlp1KvuSf:2qBr(SfKo8JdiY(YclNnKwgnYfqCQ7/uQNE-jT8d1wnc74vqPM#a%Z8OqB%X:uQNE-a$jYyl@cfGuS6r?pDY)EDQHT%q^SA\u003ep!%b7flz5Ifjw{ix\u003eYewx!r\u003elv@)5x3jpuOxM21qjV$}Jvrk{)x!sEwe]C\u0026Dz6m?)K%1gOv}/TeB.JBrz!0\u0026hB9RUkau.\u003eJa{})\u003exM21qa{[V4avx*Nv@0i3w/$S5v@\u0026=kwD", "ln": 0, "col": 1, "line": 1 }, { "b": "qBKzTa%peMaARpdzvdHearUl9xM21qlU{WUx(mMavrk{)x!sEweO5^fB0bNyas6uJlSmt\u0026mnM=je?OsParR^Hxk8Dgv@c73wGUVdBz#pZfe3%LBzb/ae[n*pfjw{ix\u003eYewx!J[ov}/TeB.JBrz!0\u0026vxk8Dga%YMLlSmt\u0026mnM=73t9#V3s^P?a%YMLlSmt\u0026mnM=73tj6{ay/7@v@319BrCBex(jn\u003cx(\u003eFpB.\u003e\u003e33t0ZXzY*kF3t0ZXzY*k(z!0\u0026hA+fidazC)tB-nEBzY\u0026O0By=O6BugJ\u0026l@cfGuS6r?pA*cSv}Y^6a%Ew9v}Y^6b2hY]BrCTDwPhYKa{})\u003exM21qf!KODwP?^0CoyyevqYZ?B0bgmayPt3x\u003eYewx!BpDx(9", "ln": 360, "col": 18, "line": 15 }, { "b": "x(4rcaARJAC4CYdw{CNcwN/y(ar\u0026S{avy6:ze18mvqYP#v@=c?By=N\u003eqx=C", "ln": 766, "col": 25, "line": 30 } ], "depth": 2, "facts": { "imp": [ [ "", "set" ], [ "", "cd" ], [ "", "dirname" ], [ "", "pwd" ], [ "", "dirname" ], [ "", "echo" ], [ "", "echo" ], [ "", "echo" ], [ "", "git" ], [ "", "cd" ], [ "", "git" ], [ "", "git" ], [ "", "echo" ], [ "", "echo" ], [ "", "echo" ], [ "", "echo" ], [ "", "echo" ], [ "", "echo" ], [ "", "echo" ], [ "", "echo" ] ], "tgt": [ "cd", "dirname", "echo", "git", "pwd", "set" ], "metrics": { "ast": { "op.lnot": 1, "max_depth": 12, "call_count": 20, "node_count": 204, "op_density.lnot": 0 }, "file": { "size": 813, "entropy": 5.18 }, "text": { "lines": 31, "top_char": 105, "max_ws_run": 1, "digit_ratio": 0.01, "space_count": 92, "char_entropy": 5.18, "unique_chars": 67, "top_char_null": 0, "string_density": 0.55, "top_char_ratio": 0.07, "avg_line_length": 25.23, "max_line_length": 72, "non_ascii_ratio": 0, "empty_line_ratio": 0.19, "last_line_length": 30, "whitespace_ratio": 0.15, "identifier_density": 1.87, "line_length_stddev": 22.2, "normalized_string_count": 3.05, "suspicious_string_ratio": 0.18, "normalized_unique_identifiers": 3.43 }, "binds": { "count": 3 }, "binary": { "peak_region_bytes": 813, "peak_region_entropy": 5.18 }, "strings": { "sql": 1, "bytes": 417, "count": 17, "shell": 2, "avg_length": 24.53, "max_length": 56, "path_count": 1, "avg_entropy": 3.88, "empty_count": 3, "entropy_stddev": 0.56 }, "comments": { "chars": 124, "count": 4, "lines": 4, "to_code_ratio": 0.15 }, "identifiers": { "count": 58, "unique": 17, "avg_length": 8.59, "max_length": 45, "min_length": 2, "avg_entropy": 2.3, "reuse_ratio": 0.29, "length_stddev": 9.95, "high_entropy_count": 1, "high_entropy_ratio": 0.06, "all_lowercase_ratio": 0.59, "all_uppercase_ratio": 0.24 } } }, "id": 131, "mol": "O(As)H₃(CmFPo)", "path": "ascii-ui.nvim-0.26.3-1.src.rock!!3ec17521dc0c0fe02e0cf3652fafee49488e2f67.zip!!ascii-ui.nvim-3ec17521dc0c0fe02e0cf3652fafee49488e2f67/scripts/sync-docs.sh", "pid": 1, "risk": 4, "sha": "ab99fbe7b941bb448b1610e2ccbee0676f635fbf7b1284566465b9a2555f7c11", "size": 813, "traits": [ { "id": "metadata/file/extension/identity::shell-a", "conf": 1.0, "crit": 2, "desc": "POSIX shell script extension" }, { "id": "metadata/file/string/file::tmp", "conf": 0.2, "crit": 1, "desc": "tmp keyword", "spans": [ [ 233, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-2", "conf": 0.8, "crit": 1, "desc": "English function-word token \"and\"", "spans": [ [ 798, 0 ] ] }, { "id": "micro-behaviors/communications/http/url/forge::public-code-forge-url", "conf": 0.9, "crit": 3, "desc": "References a public code-forge URL", "spans": [ [ 438, 19 ] ] }, { "id": "micro-behaviors/fs/write/file/stage::source-temp-path-reference", "conf": 0.92, "crit": 1, "desc": "Source references temporary path", "spans": [ [ 232, 0 ] ] }, { "id": "micro-behaviors/process/create/vcs/git::git-clone-command", "atk": "T1105", "conf": 0.9, "crit": 3, "desc": "Git clone command", "spans": [ [ 428, 55 ] ] }, { "id": "objectives/anti-static/obfuscation/code-metrics/structure::sh-dense-eval-chains-unless-cond-1--rx-3", "atk": "T1027", "mbc": "B0032", "conf": 0.92, "crit": 3, "desc": "Command-line usage text marker", "spans": [ [ 74, 7 ] ] }, { "id": "micro-behaviors/fs/directory/chdir::shell-change-directory", "conf": 0.95, "crit": 3, "desc": "Shell changes working directory", "spans": [ [ 127, 2 ] ] }, { "id": "micro-behaviors/process/create/vcs/git::shell-git-clone", "atk": "T1059.004", "conf": 0.85, "crit": 3, "desc": "Shell command invokes git clone", "spans": [ [ 424, 13 ] ] }, { "id": "micro-behaviors/process/create/vcs/git::shell-git-pull", "atk": "T1059.004", "conf": 0.92, "crit": 3, "desc": "Pulls changes from a Git remote", "spans": [ [ 535, 3 ] ] }, { "id": "micro-behaviors/process/create/vcs/git::public-forge-git-clone", "atk": "T1105", "conf": 0.92, "crit": 3, "desc": "Git clones a public code forge", "uses": [ 3, 5 ], "spans": [ [ 428, 55 ], [ 438, 19 ] ] } ], "type": "shell" }, { "ctx": [ { "b": "boXZHx(kOkvrl8?boPo.vq{s1wftG8z/3RgBAzFyiXJd0x([3hvLheez7/^Ix(bCtwP8W4B966MwP8W4B966Ay\u0026r=ozddHcwPxCBv@=p5BAo9SwPI@23uP\u0026@AaS*2wJ.p!zejl8zeZ{hze0)4zddlzb6myqBAo9Lx(mT4vqEMjBZVE3AboVfx(n00wnc6Ea$+J3By/JnB1.PGBy^aAvpK7awmY.3flqkzA=-Gj3taA#v@#B6zxK1iBAILfwO#W9A=k\u0026jwO#PrdiJ%AarUl9xM1k2ay$", "ln": 0, "col": 1, "line": 1 }, { "b": "aA.SCwO#W9A=k\u0026jwO#Pl3lQE5v}Y=/3lQE9w/$qZar.\u003cVwfr6wDVi!zxk8m8uU0\u003e\u003eEiG!tt@%fJxK#5*arR^HzeiV@AV=@Mar\u00267TAboVfx(n00wnc7ja{]Cnw[.OVarUxgax@4)aS@vEar\u00267TAboVfx(n00wnc7jfk$-szEENhe]C\u0026Dz6y9dt@%fJxK#5*arR^HwN/y(ar\u003e3ey\u0026%x8zGx8aAbo96vrcSCzGY-hiV@cOB97\u0026by?W^1e?O+23lQDlazkzgay/kazE\u003c@7BAzFyiXJd0x([3hvLheez7/^Ix(bCrBZV}xy?mG)A^ooPC4\u003e!oa%.IOy\u0026%x8zGxe}x(XRPAbo96vrcSCzGY-ha{]CnarR)Kv@Dj3x(\u003eETfG7}4f/iq[gb9iDwmvxchAiDHw\u0026zRcgbgTxgIeyKvpA.PvMug^vSDy5wGU/ivpKk03lQDlar@1yB8#FniV@9TBz#pZfe3%LBzb/ae[n/", "ln": 245, "col": 23, "line": 10 }, { "b": "wN/y(3vJl*w{503BzkVhaz=gev@DJ$B97\u0026hBsnNXDKp(ry\u0026%e@z*2F#x(VuXbQ^hqA=br5wGSfxc#s3mA=kD6B0bWux\u003e7*0y\u0026%e@z*0lUj$*CTB$W-Qy?$kwazts{wfrDUdiZh+3lQE9w/$qZar\u00267Ty\u0026%e@z*2F#x(XRCau.\u003ega$+5Zu0PJmBzbl63lQDlaz=gev@DJ$wnc6Ea%Evpazbr{3lQE9w/#hbB95JRzxHbGDU^?kv@DJ$wnc7jb0c]?xK#5*arR^HA+#{Jw/$]jvpKk0e?eF(B-W%karR!rCYmOwBrBmSl0)COr7Gd@j3aZmy\u0026%e@z*2F#x(XRPkq3+{viM43azbr{Ef]", "ln": 895, "col": 3, "line": 29 }, { "b": "3lQDlarR!rv}Y=/arR^HarU=mx(1[zzxHCPc[3t?xl4N5at4ENb3[h\u003czeAZ4C{BNRy\u0026%e@z*0:NwPhNdBs}GOBrC@Nv%8(oeO34^a%nEHf!1j%atCq]az=gev@DJy", "ln": 1290, "col": 1, "line": 48 }, { "b": "jV%]ieIgNyx(2wkvrlJmayenmaARpdzvdHewN/y(ar\u003cZazF\u003cfaxcqqcB98ECCwhejat2fSvqfKfw)]+5a{]CnzGY-hat2fUwNPa=wPI]neIg\u003cUAboVfx(k4BBS.@Rze0)4zddmeay2l@arR^Uv\u0026#%(y?mG)A^o#]B97#7l${WMv@#TfC{4iuB98ER", "ln": 1473, "col": 25, "line": 59 }, { "b": "3jn12p\u00266YXvrcSown=42zyoJGwO(d6az2!iBrC7iwmV(raA}HgzxK4jB98ECxKM6}az2Olz/P[wwoz{bzF78kwPS6l3t1l#z/P[ZbQ^.Bwfrmvfi\u0026-RvQ9bwfFbpDt}fXAfj#TPa%.ISwO(x#x(4vea%qmQvrVGfcOD(pA=M8sB9{C=x(4u\u003ediHV8aBw6Fx(n2nbR%\u0026@aBCqAA+fhjeP@l:fEFpR3ux#aa%.ISwO(x#x(4vea{[V\u003ew/$qZat4ENbXq1pz/P[wu0PJmBzbl63lQE5v}Y^6b2\u0026b{BAnNpvqfK?wfIv6az2!iBrApBw[.OVwQ4{hatsc", "ln": 2039, "col": 11, "line": 70 } ], "depth": 2, "facts": { "imp": [ [ "", "mktemp" ], [ "", "mktemp" ], [ "", "echo" ], [ "", "echo" ], [ "", "echo" ], [ "", "echo" ], [ "", "echo" ], [ "", "echo" ], [ "", "mkdir" ], [ "", "mkdir" ], [ "", "echo" ], [ "", "echo" ], [ "", "git" ], [ "", "git" ], [ "", "pwd" ], [ "", "pwd" ], [ "", "git" ], [ "", "git" ], [ "", "echo" ], [ "", "echo" ], [ "", "echo" ], [ "", "echo" ], [ "", "echo" ], [ "", "echo" ], [ "", "echo" ], [ "", "echo" ], [ "", "dirname" ], [ "", "dirname" ], [ "", "luarocks" ], [ "", "luarocks" ], [ "", "head" ], [ "", "head" ], [ "", "test" ], [ "", "test" ], [ "", "rm" ], [ "", "rm" ], [ "", "test" ], [ "", "test" ], [ "", "test" ], [ "", "test" ], [ "", "luacov" ], [ "", "luacov" ], [ "", "echo" ], [ "", "echo" ], [ "", "tail" ], [ "", "tail" ], [ "", "grep" ], [ "", "grep" ], [ "", "cut" ], [ "", "cut" ], [ "", "setup_environment" ], [ "", "setup_environment" ], [ "", "luacov_start" ], [ "", "luacov_start" ], [ "", "echo" ], [ "", "echo" ], [ "", "nvim" ], [ "", "nvim" ], [ "", "tee" ], [ "", "tee" ], [ "", "nvim" ], [ "", "nvim" ], [ "", "tee" ], [ "", "tee" ], [ "", "nvim" ], [ "", "nvim" ], [ "", "tee" ], [ "", "tee" ], [ "", "luacov_end" ], [ "", "luacov_end" ], [ "", "sed" ], [ "", "sed" ], [ "", "awk" ], [ "", "awk" ], [ "", "grep" ], [ "", "grep" ], [ "", "rm" ], [ "", "rm" ], [ "", "echo" ], [ "", "echo" ], [ "", "exit" ], [ "", "exit" ], [ "", "exit" ], [ "", "exit" ] ], "tgt": [ "awk", "cut", "dirname", "echo", "exit", "git", "grep", "head", "luacov", "luacov_end", "luacov_start", "luarocks", "mkdir", "mktemp", "nvim", "pwd", "rm", "sed", "setup_environment", "tail", "tee", "test" ], "funcs": [ [ "setup_environment", 185 ], [ "luacov_start", 903 ], [ "luacov_end", 1178 ] ], "metrics": { "ast": { "op.eq": 2, "op.sub": 1, "op.lnot": 2, "max_depth": 14, "call_count": 42, "node_count": 574, "op_density.eq": 0, "op_density.sub": 0, "op_density.lnot": 0 }, "file": { "size": 2302, "entropy": 5.07 }, "text": { "lines": 82, "top_char": 101, "max_ws_run": 1, "digit_ratio": 0.04, "space_count": 318, "char_entropy": 5.07, "unique_chars": 76, "top_char_null": 0, "escape_density": 0.04, "string_density": 0.45, "top_char_ratio": 0.06, "avg_line_length": 27.07, "max_line_length": 150, "empty_line_ratio": 0.21, "hex_escape_count": 1, "last_line_length": 6, "whitespace_ratio": 0.17, "identifier_density": 1.87, "line_length_stddev": 31.79, "normalized_string_count": 4.09, "suspicious_string_ratio": 0.08, "normalized_unique_identifiers": 7.86 }, "binds": { "count": 8 }, "binary": { "peak_region_bytes": 2302, "peak_region_entropy": 5.05 }, "source": { "function_count": 3 }, "strings": { "bytes": 873, "count": 37, "shell": 2, "avg_length": 23.59, "max_length": 121, "path_count": 2, "avg_entropy": 3.41, "empty_count": 1, "entropy_stddev": 1.12, "embedded_code_candidates": 1 }, "comments": { "chars": 277, "count": 5, "lines": 5, "to_code_ratio": 0.06, "url_in_comments": 2 }, "functions": { "count": 3, "density": 3.66, "avg_params": 3.67, "code_ratio": 0.54, "max_params": 7, "length_stddev": 5.91, "avg_name_length": 13, "avg_length_lines": 14.67, "max_length_lines": 23, "min_length_lines": 10, "avg_param_name_length": 89.36 }, "identifiers": { "count": 153, "unique": 50, "avg_length": 6.44, "max_length": 40, "min_length": 1, "avg_entropy": 2.04, "reuse_ratio": 0.33, "length_stddev": 6.32, "has_digit_ratio": 0.06, "single_char_count": 2, "single_char_ratio": 0.04, "high_entropy_count": 2, "high_entropy_ratio": 0.04, "all_lowercase_ratio": 0.6, "all_uppercase_ratio": 0.02, "numeric_suffix_count": 1 } } }, "id": 132, "mol": "H₃(CmFPo)", "path": "ascii-ui.nvim-0.26.3-1.src.rock!!3ec17521dc0c0fe02e0cf3652fafee49488e2f67.zip!!ascii-ui.nvim-3ec17521dc0c0fe02e0cf3652fafee49488e2f67/scripts/test", "risk": 3, "sha": "bfe596066a3db52088499154c411c8f5d9ce37cd3d4b23e3f6c12e6d04534949", "size": 2302, "traits": [ { "id": "micro-behaviors/communications/http/url/forge::public-code-forge-url", "conf": 0.9, "crit": 3, "desc": "References a public code-forge URL", "spans": [ [ 27, 19 ] ] }, { "id": "micro-behaviors/process/create/vcs/git::git-clone-command", "atk": "T1105", "conf": 0.9, "crit": 3, "desc": "Git clone command", "spans": [ [ 450, 50 ] ] }, { "id": "micro-behaviors/fs/directory/mkdir::mkdir-command", "conf": 0.8, "crit": 3, "desc": "Shell invokes mkdir command", "spans": [ [ 309, 29 ] ] }, { "id": "micro-behaviors/process/create/vcs/git::shell-git-clone", "atk": "T1059.004", "conf": 0.85, "crit": 3, "desc": "Shell command invokes git clone", "spans": [ [ 446, 13 ] ] } ], "type": "shell" }, { "id": 133, "mol": "H₂(OsPo)", "sha": "a28c7d2db868d6808b31a2ac50afcb833492f307633f4867baa26fd5baced1b3", "path": "ascii-ui.nvim-0.26.3-1.src.rock!!3ec17521dc0c0fe02e0cf3652fafee49488e2f67.zip!!ascii-ui.nvim-3ec17521dc0c0fe02e0cf3652fafee49488e2f67/scripts/test-with-timeout.sh", "risk": 3, "size": 530, "type": "shell", "depth": 2 }, { "id": 135, "mol": "H(Po)", "sha": "2c2f604826d2e2c26237cca5043217b02d1f6557d3b7397a0544d73d33ffedf5", "path": "ascii-ui.nvim-0.26.3-1.src.rock!!3ec17521dc0c0fe02e0cf3652fafee49488e2f67.zip!!ascii-ui.nvim-3ec17521dc0c0fe02e0cf3652fafee49488e2f67/tests/arch_spec.lua", "risk": 2, "size": 596, "type": "lua", "depth": 2 }, { "id": 151, "mol": "H(Po)", "sha": "c4e32c991c25a0bfa1a14bf21951c81f24e20947b9d14b189552fd6ac46e9b24", "path": "ascii-ui.nvim-0.26.3-1.src.rock!!3ec17521dc0c0fe02e0cf3652fafee49488e2f67.zip!!ascii-ui.nvim-3ec17521dc0c0fe02e0cf3652fafee49488e2f67/tests/examples_spec.lua", "risk": 2, "size": 879, "type": "lua", "depth": 2 }, { "ctx": [ { "b": "qxOaBa$^XOCP)Ghz!0i(awt^3uSGP[q+o+WauZ?\u003eh7*Qc3t:S\u003cvqE5:rzDpXpdFU!pg3pOr7P\u003eXqY[jCz/WKzwPRH3B%[L8nMnkXlsi2Cr7P\u003eXqZ9UkjV%]iBAhIna{[V[z!0i(az=gBuU0.!wO#3\u0026zEWx(B09Q*C4\u003e!Cw]okly\u0026r=hoJth4l}Ho0e?Om\u003cfcRI\u003ee*9?/l0)UYqD3d.p9qewar\u0026D*dLC\u003c-v\u003ciDDBAhInefG4PB.90e3t:S\u003cvqE5{wmP4?z^Ns6vq]T%xDPCXw{503BzkVhc$E4jdgcx2vpK7YxjSYmvruf9jS[\u0026PvR/Qdv@Dl{vrr]A3jd2Hx(UsGe*8t\u003ekq3+{viNlf2)\u003ecRAV=$!ar\u0026E6fkkrrBs}xLviNlf2)\u003eMVv@2H=wId}gBz9ij34h", "ln": 12, "col": 13, "line": 1 }, { "b": "uU\u003c\u003c[Aa9\u003c4c)yn%y\u0026%egdgczleG!FjwftYhCP.9tB95KnwPhi#wmYT*x\u003eqt)w]zYjuO0sgx(UtgzxJUjvqf+6c#s3JuU0.!wO#3\u0026zEWx(B15kxzWD!VwmP4?z^Ns6vq]T%xEEz9AW.ubzE:7YeIe8Vw/$/9azkzgxMW=bvpKy[z/fREayO!\u003eayMy5y\u0026si5aA7\u003cmAbo96vrcSoBz\u0026pzxK@r9vpK7YxjSi8vrue\u0026x\u003ewF=rzDpXpdFU!pg3pOr7P\u003eXqY{f}wO}?Yy\u0026r/(y-)XkwO${%D0+J0Bz8^WaA?Eoe[O#NwQ5f5zE+dtbU7B9nl4#-s5hZ!q=2+Emk1", "ln": 404, "col": 7, "line": 16 }, { "b": "C4\u003e!Cw]oknB7x09wN/?2A^o6Ly?mG)A^q2hvrufiau.\u003egfD+EJwO}?Y33H31e[O#NB9R?GwO\u0026\u0026x3jd1Bb4\u003eRia$K6c2)?!=y\u0026si5a$K6c2)?!?BAzFyiXJd0x([3hvLheez7/^Ix(bCrBZV}xy?mG)A^ooPC4\u003e!qed8W\u002632\u003cY(zEENhuVoB}xE\u003cF%34jlf31X0+3jm8UvpK7YxjSYmvruf9jS[\u0026PvR/Qdv@Dl{vrr]A3jd2Ty?mG)A^q2hvruf9e?Om\u003cfkL=tff.79BZVEB3jd2Ty?mG)A^q2hvrq", "ln": 692, "col": 5, "line": 26 } ], "depth": 2, "facts": { "imp": [ [ "", "os.getenv" ], [ "", "vim.fn.glob" ], [ "", "table.concat" ], [ "", "add_to_luapath" ], [ "", "ipairs" ], [ "", "add_to_luapath" ], [ "", "vim.fn.expand" ], [ "", "vim.fn.isdirectory" ], [ "", "vim.fn.system" ], [ "", "table.concat" ] ], "mbr": [ "os.getenv", "package.path", "table.concat", "vim.fn", "vim.fn.expand", "vim.fn.glob", "vim.fn.isdirectory", "vim.fn.system" ], "tgt": [ "add_to_luapath", "ipairs", "os.getenv", "table.concat", "vim.fn.expand", "vim.fn.glob", "vim.fn.isdirectory", "vim.fn.system" ], "metrics": { "ast": { "op.eq": 2, "max_depth": 14, "call_count": 10, "node_count": 322, "member_count": 8, "max_array_len": 4, "op_density.eq": 0.01, "member_depth_max": 3 }, "file": { "size": 979, "entropy": 5.26 }, "text": { "lines": 40, "top_char": 97, "tab_count": 36, "max_ws_run": 1, "digit_ratio": 0, "space_count": 77, "char_entropy": 5.26, "unique_chars": 65, "top_char_null": 0, "string_density": 0.43, "top_char_ratio": 0.06, "avg_line_length": 23.48, "max_line_length": 92, "empty_line_ratio": 0.15, "last_line_length": 3, "whitespace_ratio": 0.16, "identifier_density": 1.23, "line_length_stddev": 22.02, "normalized_string_count": 2.69, "normalized_unique_identifiers": 3.95 }, "binds": { "count": 8 }, "binary": { "peak_region_bytes": 979, "peak_region_entropy": 5.26 }, "strings": { "bytes": 163, "count": 17, "url_count": 1, "avg_length": 9.59, "max_length": 40, "path_count": 6, "avg_entropy": 2.23, "entropy_stddev": 1.33 }, "comments": { "chars": 136, "count": 3, "lines": 3, "to_code_ratio": 0.08 }, "identifiers": { "count": 49, "unique": 21, "avg_length": 7.14, "max_length": 18, "min_length": 1, "avg_entropy": 2.27, "reuse_ratio": 0.43, "length_stddev": 4.64, "single_char_count": 1, "single_char_ratio": 0.05, "all_lowercase_ratio": 0.86, "all_uppercase_ratio": 0.19, "underscore_prefix_count": 1 } } }, "id": 152, "mol": "H₃(CmOsPo)", "path": "ascii-ui.nvim-0.26.3-1.src.rock!!3ec17521dc0c0fe02e0cf3652fafee49488e2f67.zip!!ascii-ui.nvim-3ec17521dc0c0fe02e0cf3652fafee49488e2f67/tests/minimal.lua", "pid": 1, "risk": 3, "sha": "677a00d311af88c294692ac25c7fd5249182b645aa55cdfe01c645d791d03e07", "size": 979, "traits": [ { "id": "metadata/lang/natural::lang-english--atom-1", "conf": 0.8, "crit": 1, "desc": "English function-word token \"the\"", "spans": [ [ 571, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-5", "conf": 0.8, "crit": 1, "desc": "English function-word token \"for\"", "spans": [ [ 452, 0 ] ] }, { "id": "metadata/package/testing/presence/harness::test-directory-path", "conf": 1.0, "crit": 2, "desc": "File is in common test directory" }, { "id": "micro-behaviors/communications/http/url/forge::public-code-forge-url", "conf": 0.9, "crit": 3, "desc": "References a public code-forge URL", "spans": [ [ 779, 19 ] ] }, { "id": "micro-behaviors/os/env/read::lua-os-getenv", "conf": 0.85, "crit": 3, "desc": "Lua environment variable access", "spans": [ [ 76, 9 ] ] }, { "id": "micro-behaviors/process/create/vcs/git::git-clone-argv", "atk": "T1105", "conf": 0.9, "crit": 3, "desc": "Git clone argument sequence", "spans": [ [ 756, 17 ] ] }, { "id": "metadata/package/testing/presence/harness::test-directory", "conf": 1.0, "crit": 2, "desc": "File identified as a test by path or name", "uses": [ 2 ] }, { "id": "micro-behaviors/process/create/vcs/git::public-forge-git-clone", "atk": "T1105", "conf": 0.92, "crit": 3, "desc": "Git clones a public code forge", "uses": [ 3, 5 ], "spans": [ [ 756, 17 ], [ 779, 19 ] ] } ], "type": "lua" }, { "id": 153, "mol": "H(F)", "sha": "4f5d155b623116522d77d0059689fcc10296d603655ef69bc32097e6e1d8857b", "path": "ascii-ui.nvim-0.26.3-1.src.rock!!3ec17521dc0c0fe02e0cf3652fafee49488e2f67.zip!!ascii-ui.nvim-3ec17521dc0c0fe02e0cf3652fafee49488e2f67/tests/nvim-shim", "risk": 2, "size": 355, "type": "shell", "depth": 2 }, { "id": 175, "mol": "H(Po)", "sha": "55c5c0939ba5641307dd903a8baf40c5671334588bdc8093861ad29fa3ac07a6", "path": "ascii-ui.nvim-0.26.3-1.src.rock!!3ec17521dc0c0fe02e0cf3652fafee49488e2f67.zip!!ascii-ui.nvim-3ec17521dc0c0fe02e0cf3652fafee49488e2f67/tests/unit/hooks/use_effect_spec.lua", "risk": 2, "size": 3626, "type": "lua", "depth": 2 }, { "id": 192, "mol": "Md(Re)", "sha": "cc9f6a38f6421b040ea4901118db3aa73125a7b8ad2327d98af57a8c6584aac6", "path": "actions_checkout.registry.json", "risk": 1, "size": 855, "type": "registry", "depth": 3 }, { "id": 193, "mol": "Md(Re)", "sha": "3642c7ca36477946740f0143d454664cbd4a8f11dcd3c367b3e046447435b84e", "path": "rhysd_action-setup-vim.registry.json", "risk": 1, "size": 941, "type": "registry", "depth": 3 }, { "id": 194, "mol": "Md(Re)", "sha": "cc9f6a38f6421b040ea4901118db3aa73125a7b8ad2327d98af57a8c6584aac6", "path": "actions_checkout.registry.json", "risk": 1, "size": 855, "type": "registry", "depth": 3 }, { "id": 195, "sha": "da4a51cc73a5682e9867c67197ab044eb6ad6787e08e7133977beb8f90d5495f", "path": "actions_cache.registry.json", "size": 838, "type": "registry", "depth": 3 }, { "id": 196, "sha": "8d1fb6a851eacf8716ce96fb516c81e7868222e1968b0d4d3211f913c8774a95", "path": "muniftanjim_luver-action.registry.json", "size": 983, "type": "registry", "depth": 3 }, { "id": 197, "sha": "b34e292dcf2e381922a38853565c08f543cf4febbb6bb76912912311888986b1", "path": "codecov_codecov-action.registry.json", "size": 894, "type": "registry", "depth": 3 }, { "id": 198, "sha": "e1747371c7cf28c446205e4c0f9851306e96bffcb1e92b486d23ffa39b9da484", "path": "actions_github-script.registry.json", "size": 863, "type": "registry", "depth": 3 }, { "id": 199, "mol": "Md(Re)", "sha": "cc9f6a38f6421b040ea4901118db3aa73125a7b8ad2327d98af57a8c6584aac6", "path": "actions_checkout.registry.json", "risk": 1, "size": 855, "type": "registry", "depth": 3 }, { "id": 200, "mol": "Md(Re)", "sha": "7c643438665a6d32d43db1270be3cc4b06382e87d621c31b124d47afb2cc0e65", "path": "nvim-neorocks_luarocks-tag-release.registry.json", "risk": 1, "size": 940, "type": "registry", "depth": 3 }, { "id": 201, "mol": "Md(Re)", "sha": "3d9f6617cf473988c7ee7fd66391f1448e76bc693f59bbe2a975145ad079551f", "path": "actions_setup-node.registry.json", "risk": 1, "size": 868, "type": "registry", "depth": 3 }, { "id": 202, "mol": "Md(Re)", "sha": "daf2a541337826bc0850ab1bfb420f42d3b57d648bbe6f8420793b1a2e64f027", "path": "mrcjkb_lua-typecheck-action.registry.json", "risk": 1, "size": 939, "type": "registry", "depth": 3 }, { "id": 203, "sha": "3bc0f49692de0d30842af91503cc4c3bf71dde6affe2f5de60fe1cee9c10801e", "path": "lunarmodules_luacheck.registry.json", "size": 894, "type": "registry", "depth": 3 }, { "id": 204, "sha": "3efb74770bc401164ee19eb85609c6acf1b2c62129967b84a8f9034409c22b68", "path": "johnnymorganz_stylua-action.registry.json", "size": 854, "type": "registry", "depth": 3 }, { "depth": 3, "facts": { "metrics": { "file": { "size": 13747, "entropy": 7.98 }, "binary": { "peak_region_bytes": 13747, "peak_region_entropy": 7.81 } } }, "id": 205, "mol": "O(S)H₄(Cm₂DbOsPo₃)Md₂(Bk₆)", "path": "pkg:github/mrcjkb/lua-typecheck-action@v1.1.0", "risk": 7, "sha": "f4b25f54d47df3e9a565c82794d1ae917df02e49863b242979dbe3b1fbd6d21b", "size": 13747, "traits": [ { "id": "metadata/lang/natural::lang-english--atom-2", "conf": 0.8, "crit": 1, "desc": "English function-word token \"and\"", "from": [ { "file": 1 } ] }, { "id": "metadata/build/ci/permission::contents-write-permission", "conf": 0.92, "crit": 3, "desc": "GitHub Actions contents write permission" }, { "id": "metadata/file/string/cicd::github-workflow-file-path", "conf": 0.98, "crit": 3, "desc": "GitHub Actions workflow file path", "from": [ { "file": 8 } ] }, { "id": "objectives/supply-chain/hidden-payload/ci::gha-action-yml-manifest", "atk": "T1195.002", "conf": 0.98, "crit": 3, "desc": "GitHub Action action.yml manifest", "from": [ { "file": 2 } ] }, { "id": "metadata/build/ci/secret::action-secret-input", "conf": 0.95, "crit": 3, "desc": "Action input references workflow secret" }, { "id": "metadata/lang/natural::lang-english--atom-6", "conf": 0.8, "crit": 1, "desc": "English function-word token \"with\"", "from": [ { "file": 5 } ] }, { "id": "micro-behaviors/process/create/shell/git::github-actions-git-tag", "conf": 0.9, "crit": 3, "desc": "GitHub Actions creates a git tag" }, { "id": "metadata/lang/natural::lang-english--atom-5", "conf": 0.8, "crit": 1, "desc": "English function-word token \"for\"", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/communications/http/url/github::raw-githubusercontent-any", "atk": "T1071.001", "mbc": "C0002", "conf": 0.7, "crit": 3, "desc": "raw.githubusercontent.com URL", "from": [ { "file": 7 } ] }, { "id": "micro-behaviors/process/fd/stdio::stderr-string", "conf": 0.3, "crit": 2, "desc": "References the stderr stream name", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/os/env/read::lua-os-getenv", "conf": 0.85, "crit": 3, "desc": "Lua environment variable access", "from": [ { "file": 1 } ] }, { "id": "metadata/build/ci/secret::step-token-input-secret-reference", "conf": 0.95, "crit": 3, "desc": "Step token input references an Actions secret" }, { "id": "metadata/lang/natural::lang-english--atom-4", "conf": 0.8, "crit": 1, "desc": "English function-word token \"have\"", "from": [ { "file": 15 } ] }, { "id": "metadata/build/ci/secret::run-secret-reference", "conf": 0.82, "crit": 3, "desc": "GitHub Actions run step references a secret" }, { "id": "metadata/build/ci/step::composite-action-type", "conf": 1.0, "crit": 3, "desc": "GitHub Actions composite action definition" }, { "id": "metadata/lang/natural::lang-english--atom-3", "conf": 0.8, "crit": 1, "desc": "English function-word token \"that\"", "from": [ { "file": 5 } ] }, { "id": "micro-behaviors/process/create/shell/git::github-actions-git-push", "conf": 0.9, "crit": 3, "desc": "GitHub Actions pushes a git ref" }, { "id": "micro-behaviors/process/fd/stdio::stdout-string", "conf": 0.3, "crit": 2, "desc": "References the stdout stream name", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/communications/http/url/forge::public-code-forge-url", "conf": 0.9, "crit": 3, "desc": "References a public code-forge URL", "from": [ { "file": 5 } ] }, { "id": "metadata/lang/natural::lang-english--atom-7", "conf": 0.8, "crit": 1, "desc": "English function-word token \"this\"", "from": [ { "file": 5 } ] }, { "id": "metadata/build/ci/trigger::scheduled-workflow-trigger", "conf": 0.9, "crit": 3, "desc": "GitHub scheduled workflow trigger" }, { "id": "micro-behaviors/data/serialize/envelope::result-assignment-key", "conf": 0.4, "crit": 1, "desc": "Result field or assignment key", "from": [ { "file": 1 } ] }, { "id": "metadata/build/ci/gate::dependabot-actor-gate", "conf": 0.95, "crit": 3, "desc": "PR target job restricted to Dependabot" }, { "id": "metadata/lang/natural::lang-english--atom-1", "conf": 0.8, "crit": 1, "desc": "English function-word token \"the\"", "from": [ { "file": 1 } ] }, { "id": "metadata/build/ci/secret::step-environment-secret-reference", "conf": 0.95, "crit": 3, "desc": "Step environment references an Actions secret" }, { "id": "micro-behaviors/process/create/shell/spawn::lua-os-execute", "atk": "T1059.004", "conf": 0.9, "crit": 3, "desc": "Lua os.execute() function call", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/data/serialize/envelope::command-assignment-key", "conf": 0.4, "crit": 1, "desc": "Command field or assignment key", "from": [ { "file": 1 } ] }, { "id": "metadata/build/ci/github-actions::workflow-definition-path", "conf": 0.99, "crit": 3, "desc": "GitHub Actions workflow definition path", "from": [ { "file": 8 } ] }, { "id": "metadata/build/ci/secret::github-token-secret", "conf": 0.88, "crit": 3, "desc": "References Actions-provided GITHUB_TOKEN", "from": [ { "file": 9 } ] }, { "id": "micro-behaviors/process/create/shell/git::github-actions-git-tag-and-push", "conf": 0.94, "crit": 3, "desc": "GitHub Actions creates and pushes a tag", "from": [ { "file": 11 } ], "uses": [ 6, 16 ] }, { "id": "micro-behaviors/process/create/shell/target::lua-os-execute-dynamic-argument", "conf": 0.9, "crit": 3, "desc": "Lua builds a dynamic os.execute target", "from": [ { "file": 1 } ] }, { "id": "metadata/build/ci/step::mutable-version-action-ref", "conf": 0.9, "crit": 3, "desc": "Workflow action uses mutable version tag" }, { "id": "metadata/build/ci/step::composite-action-step-script", "conf": 1.0, "crit": 3, "desc": "Composite action step script body", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/data/string/assembly::sh-template-opening-delimiter", "conf": 0.85, "crit": 3, "desc": "Shell contains a template delimiter", "from": [ { "file": 3 } ] } ], "type": "gz" }, { "id": 206, "mol": "H₂(OsPo₂)", "sha": "a1291de591a7740080bef08b2e2a0b182aef3a4c5055e74946bac8b593ba10a8", "path": "pkg:github/mrcjkb/lua-typecheck-action@v1.1.0!!lua-typecheck-action-1.1.0/bin/lua-typecheck-action.lua", "risk": 2, "size": 2436, "type": "lua", "depth": 4 }, { "id": 207, "mol": "Md(Bk)", "sha": "68535324cc6aa3d2a175d83c7746aebcd6b3eaf5d2f15141be1831418ce2a274", "path": "pkg:github/mrcjkb/lua-typecheck-action@v1.1.0!!lua-typecheck-action-1.1.0/action.yml", "risk": 1, "size": 984, "type": "github_actions", "depth": 4 }, { "id": 208, "mol": "Md(Bk)", "sha": "13f477bdc39c6e9e1457380d9139f8d49441cadc802e1c6045f1a1caabf92c21", "path": "pkg:github/mrcjkb/lua-typecheck-action@v1.1.0!!lua-typecheck-action-1.1.0/.github/workflows/versioning.yml", "risk": 1, "size": 267, "type": "github_actions", "depth": 4 }, { "id": 209, "mol": "Md(Bk₂)", "sha": "5474055084e2ce9fdd6236ee497a838ebaa94779b20d0aed4f2c576de328925b", "path": "pkg:github/mrcjkb/lua-typecheck-action@v1.1.0!!lua-typecheck-action-1.1.0/.github/workflows/update.yml", "risk": 1, "size": 1026, "type": "github_actions", "depth": 4 }, { "id": 210, "mol": "H(Po)Md(Bk₂)", "sha": "01718816ccf9530695d7d8e0498ad690cc00773c39c47d3cd2567027ac10b171", "path": "pkg:github/mrcjkb/lua-typecheck-action@v1.1.0!!lua-typecheck-action-1.1.0/.github/workflows/release-please.yml", "risk": 2, "size": 2049, "type": "github_actions", "depth": 4 }, { "id": 211, "mol": "Md(Bk₃)", "sha": "c59c02620030feaf90a7086c76e9c2e905e1f03b47040626213238eec21884b5", "path": "pkg:github/mrcjkb/lua-typecheck-action@v1.1.0!!lua-typecheck-action-1.1.0/.github/workflows/auto-merge.yml", "risk": 1, "size": 597, "type": "github_actions", "depth": 4 }, { "id": 220, "sha": "1667caa1feddb046e5acd61abb55fbbb38789575019cd97174af671e3c5bf07f", "path": "lumen-oss_gh-actions-lux.registry.json", "size": 893, "type": "registry", "depth": 3 }, { "id": 221, "sha": "72a0c36516e5b22bde0d792a79cb9917a58a51093b800ba33695cf42886b7454", "path": "cachix_install-nix-action.registry.json", "size": 901, "type": "registry", "depth": 5 }, { "id": 222, "sha": "3191b4bee8854cb4e575816a1233fdca96f7f29173d58e689e0da9e0ebc3691a", "path": "actions-r-us_actions-tagger.registry.json", "size": 893, "type": "registry", "depth": 5 }, { "id": 223, "mol": "Md(Re)", "sha": "284998454f126226402125a663726d75e0d4f334e41c3156eaae3af75c93c086", "path": "determinatesystems_update-flake-lock.registry.json", "risk": 1, "size": 900, "type": "registry", "depth": 5 }, { "id": 224, "mol": "Md(Re)", "sha": "1c57ca7872826258ae7fc08972d6ea9b5ef8b68d4f8c600cedfd037bf67558a6", "path": "reitermarkus_automerge.registry.json", "risk": 1, "size": 879, "type": "registry", "depth": 5 }, { "id": 225, "mol": "Md(Re)", "sha": "eacc9910c11886e7235dfc2bd2e0202fa6dce8150e30661e2e5a4018496bb0ee", "path": "google-github-actions_release-please-action.registry.json", "risk": 1, "size": 934, "type": "registry", "depth": 5 }, { "id": 226, "mol": "Md(Re)", "sha": "aecf679586b9e39fd53bcf6e6abe12089a02d6809f8ae5fd6fd5c8a10edee16c", "path": "dependabot_fetch-metadata.registry.json", "risk": 1, "size": 907, "type": "registry", "depth": 5 } ], "omitted_files": 54, "rev": "479f3", "v": "8" } }