{
  "ml": {
    "v": "7",
    "id": 15,
    "lvl": -1,
    "conf": 0,
    "prob": 0.000018318494767299853,
    "type": "npm",
    "version": "v18.18",
    "analyzed_at": "2026-09-23T19:15:20Z"
  },
  "path": "pkg:npm/%40flowcore/sdk@6.1.0?checksum=sha1:8425f1d31401d65774a437eeb67db1c5d56228a6%2Csha512:d862679a2f34f1ce00fa3107fd43bf5c9e8fa124690da2575645b932fa4d197c5a9da543643c19e93bdca0c825c00aba1eeed0fb583a2bea78fa9eca058ba452",
  "raw": {
    "rev": "a041b",
    "files": [
      {
        "id": 15,
        "mol": "K₂(LiTe₂)O₂(As₂Eu)H₄(Cm₂₁Db₂₂F₂Ti)Md₄(Bk₂In₂Pa₁₅)",
        "pid": 2,
        "rel": "fetched",
        "sha": "c8303eb443c2f64246cc66ec2cdbdf44d107bb0abd6d1e06a5799edc3a6b7ccc",
        "via": "https://registry.npmjs.org/@flowcore/sdk/-/sdk-6.1.0.tgz",
        "path": "pkg:npm/%40flowcore/sdk@6.1.0?checksum=sha1:8425f1d31401d65774a437eeb67db1c5d56228a6%2Csha512:d862679a2f34f1ce00fa3107fd43bf5c9e8fa124690da2575645b932fa4d197c5a9da543643c19e93bdca0c825c00aba1eeed0fb583a2bea78fa9eca058ba452",
        "refs": [
          {
            "to": "pkg:github/flowcore-io/flowcore-sdk",
            "off": 0,
            "kind": "repository"
          }
        ],
        "risk": 35,
        "size": 402236,
        "type": "npm",
        "depth": 2,
        "facts": {
          "metrics": {
            "file": {
              "size": 402236,
              "entropy": 8
            },
            "parse": {
              "error_count": 1
            },
            "binary": {
              "peak_region_bytes": 402236,
              "peak_region_entropy": 7.85
            },
            "consistency": {
              "self_dependency": 0,
              "name_repo_mismatch": 0,
              "unused_runtime_deps": 0
            }
          }
        },
        "ident": {
          "name": {
            "value": "@flowcore/sdk",
            "source": "npm.name",
            "verified": false
          },
          "urls": [
            {
              "url": "git+https://github.com/flowcore-io/flowcore-sdk.git",
              "kind": "repository",
              "source": "npm.repository.url"
            },
            {
              "url": "https://github.com/flowcore-io/flowcore-sdk#readme",
              "kind": "homepage",
              "source": "npm.homepage"
            }
          ],
          "trust": "unsigned",
          "version": {
            "value": "6.1.0",
            "source": "npm.version",
            "verified": false
          },
          "identifier": {
            "value": "@flowcore/sdk",
            "source": "npm.name",
            "verified": false
          }
        },
        "traits": [
          {
            "id": "well-known/tool/sysadmin/kubernetes/bootstrap::kubernetes-tooling-reference",
            "conf": 0.9,
            "crit": 3,
            "desc": "Kubernetes tooling name reference"
          },
          {
            "id": "micro-behaviors/communications/http/url/domain::js-remote-host-url",
            "conf": 0.75,
            "crit": 3,
            "desc": "Contains a hardcoded remote HTTP(S) URL",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "micro-behaviors/communications/http/request/route::paired-status-metrics-routes",
            "atk": "T1071.001",
            "mbc": "C0002",
            "conf": 0.96,
            "crit": 3,
            "desc": "Paired HTTP status and metrics routes",
            "from": [
              {
                "off": 138377,
                "file": 16,
                "line": 5235
              },
              {
                "off": 128904,
                "file": 18,
                "line": 5233
              }
            ],
            "uses": [
              90,
              99
            ]
          },
          {
            "id": "micro-behaviors/data/control-flow/analysis::js-conditional-matcher-call",
            "conf": 0.88,
            "crit": 3,
            "desc": "Calls a matcher in a conditional expression",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "metadata/build/bundler/wrapper::esbuild-bundled",
            "conf": 0.95,
            "crit": 2,
            "desc": "esbuild bundle output markers",
            "from": [
              {
                "off": 406,
                "file": 16,
                "line": 14
              },
              {
                "off": 415,
                "file": 18,
                "line": 12
              }
            ],
            "uses": [
              77
            ]
          },
          {
            "id": "micro-behaviors/data/serialize/json::json-stringify-payload-body",
            "conf": 0.86,
            "crit": 3,
            "desc": "Serializes payload data fields",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "supply-chain/missing-author",
            "conf": 0.5,
            "crit": 3,
            "desc": "Package has empty or missing author field"
          },
          {
            "id": "metadata/import/npm/sinclair/typebox::sinclair/typebox",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports @sinclair/typebox",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "metadata/package/manager::declares-pinned-package-manager",
            "conf": 0.95,
            "crit": 3,
            "desc": "Manifest pins package manager"
          },
          {
            "id": "metadata/package/dependencies/manifest/presence::has-runtime-deps",
            "conf": 0.85,
            "crit": 3,
            "desc": "Package declares a runtime dependency",
            "from": [
              {
                "file": 4
              }
            ]
          },
          {
            "id": "micro-behaviors/communications/websocket/library::ws",
            "conf": 0.9,
            "crit": 3,
            "desc": "Node.js uses the ws WebSocket library",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "metadata/file/format/structured::sourcemap-sources-content",
            "conf": 0.9,
            "crit": 3,
            "desc": "Source map sourcesContent array",
            "from": [
              {
                "file": 5
              }
            ]
          },
          {
            "id": "metadata/package/documentation/package-metadata::references-changelog-1",
            "conf": 0.7,
            "crit": 3,
            "desc": "Package references CHANGELOG",
            "from": [
              {
                "file": 4
              }
            ]
          },
          {
            "id": "micro-behaviors/data/source/syntax/credential::secret-key-identifier",
            "conf": 0.85,
            "crit": 3,
            "desc": "References a secretKey identifier",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-5",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"for\"",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "micro-behaviors/communications/http/url/endpoint::user-collection-path-token",
            "conf": 0.92,
            "crit": 3,
            "desc": "user collection URL path segment",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "metadata/file/comment::source-at-most-two-comments",
            "conf": 0.88,
            "crit": 2,
            "desc": "Source has at most two comments"
          },
          {
            "id": "micro-behaviors/communications/http/websocket::websocket-class",
            "atk": "T1071.001",
            "mbc": "C0002",
            "conf": 0.5,
            "crit": 3,
            "desc": "WebSocket class reference",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "metadata/package/entrypoint::pkg-module-field",
            "conf": 0.6,
            "crit": 2,
            "desc": "\"module\": field in package.json",
            "from": [
              {
                "file": 4
              }
            ]
          },
          {
            "id": "metadata/import/npm/buffer::buffer",
            "conf": 0.95,
            "crit": 3,
            "desc": "imports buffer",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "micro-behaviors/data/string/conversion::tostring-token",
            "conf": 1.0,
            "crit": 3,
            "desc": "References the toString conversion method",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "micro-behaviors/data/string/conversion::tostring-call",
            "conf": 0.94,
            "crit": 3,
            "desc": "Calls JavaScript toString conversion method",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "metadata/lang/javascript-features::cjs-exports-pattern",
            "conf": 0.6,
            "crit": 3,
            "desc": "Defines CommonJS named exports",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "micro-behaviors/communications/http/header/content-type::json-header",
            "conf": 0.9,
            "crit": 3,
            "desc": "References HTTP Content-Type application/json",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "metadata/build/minifier::js-min-or-map-basename",
            "conf": 0.9,
            "crit": 3,
            "desc": "JavaScript minified or map basename"
          },
          {
            "id": "metadata/package/keywords/profile::npm-profile-json-post--rx-23",
            "conf": 0.94,
            "crit": 3,
            "desc": "User e-mail field name",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "micro-behaviors/communications/http/message::http-message-json-call",
            "conf": 0.9,
            "crit": 3,
            "desc": "Calls JSON method on HTTP-style object",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "micro-behaviors/communications/http/header/accept::accept-json-header",
            "atk": "T1071.001",
            "mbc": "C0002",
            "conf": 0.95,
            "crit": 3,
            "desc": "Requests a JSON HTTP response",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "micro-behaviors/communications/http/websocket::wss-scheme",
            "atk": "T1071.001",
            "mbc": "C0002",
            "conf": 0.6,
            "crit": 3,
            "desc": "References an encrypted wss:// WebSocket URL",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "micro-behaviors/communications/http/request/body::json-before-base64-encode--rx-18",
            "conf": 0.9,
            "crit": 3,
            "desc": "JSON stringify before Base64 encoding",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-4",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"have\"",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "metadata/package/description/presence::short-description",
            "conf": 0.7,
            "crit": 3,
            "desc": "Package manifest has very short description"
          },
          {
            "id": "metadata/file/function::many-constant-return-functions",
            "conf": 0.9,
            "crit": 3,
            "desc": "File has many constant-return functions",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "metadata/file/string/telemetry::first-name-field",
            "conf": 0.9,
            "crit": 3,
            "desc": "firstName field name",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "metadata/package/completeness::has-typescript",
            "conf": 0.9,
            "crit": 3,
            "desc": "Package declares TypeScript tooling",
            "from": [
              {
                "file": 4
              }
            ]
          },
          {
            "id": "micro-behaviors/communications/http/oauth::oauth-client-secret-field",
            "conf": 0.65,
            "crit": 3,
            "desc": "OAuth client_secret field",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-3",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"that\"",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "micro-behaviors/process/fd/stdio::stdout-string",
            "conf": 0.3,
            "crit": 2,
            "desc": "References the stdout stream name",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "micro-behaviors/process/fd/stdio::stderr-string",
            "conf": 0.3,
            "crit": 2,
            "desc": "References the stderr stream name",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "metadata/package/entrypoint::has-exports-field",
            "conf": 0.85,
            "crit": 2,
            "desc": "package.json declares an exports map"
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-6",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"with\"",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "micro-behaviors/data/serialize/envelope::result-assignment-key",
            "conf": 0.4,
            "crit": 1,
            "desc": "Result field or assignment key",
            "from": [
              {
                "file": 2
              }
            ]
          },
          {
            "id": "micro-behaviors/data/string/split::js-split-call",
            "conf": 0.8,
            "crit": 3,
            "desc": "Calls JavaScript split()",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "micro-behaviors/communications/http/url/query::js-urlsearchparams-construction",
            "conf": 0.95,
            "crit": 3,
            "desc": "Builds URL query parameters",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "metadata/file/comment::source-comment-bytes-over-20000",
            "conf": 0.9,
            "crit": 3,
            "desc": "Source has over 20000 comment bytes",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "metadata/import/npm/ws::ws",
            "conf": 0.95,
            "crit": 3,
            "desc": "imports ws",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "micro-behaviors/communications/http/get::javascript-get-method-text",
            "conf": 0.94,
            "crit": 3,
            "desc": "Configures an HTTP GET request"
          },
          {
            "id": "micro-behaviors/communications/http/request/client::js-fetch-call",
            "atk": "T1071.001",
            "mbc": "C0002",
            "conf": 0.8,
            "crit": 3,
            "desc": "Calls JavaScript fetch API"
          },
          {
            "id": "micro-behaviors/communications/http/get::fetch-get-call",
            "conf": 0.97,
            "crit": 3,
            "desc": "Calls fetch with an HTTP GET request"
          },
          {
            "id": "micro-behaviors/communications/http/url/api-path::api-commands-path",
            "conf": 0.9,
            "crit": 3,
            "desc": "API commands endpoint path",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "micro-behaviors/data/llm/wire-marker::role-field-marker",
            "conf": 0.72,
            "crit": 1,
            "desc": "References an LLM message role field",
            "from": [
              {
                "file": 2
              }
            ]
          },
          {
            "id": "objectives/anti-static/obfuscation/code-metrics/identifiers::identifier-obfuscation-cond-0--inline-23810",
            "atk": "T1027",
            "mbc": "B0032",
            "conf": 0.9,
            "crit": 3,
            "desc": "Average identifier length \u003e= 22 chars"
          },
          {
            "id": "micro-behaviors/data/source/function/return::js-function-return-string-dense",
            "conf": 1.0,
            "crit": 3,
            "desc": "Many JavaScript functions return string literals",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "micro-behaviors/communications/http/url/endpoint::organization-path-token",
            "conf": 0.92,
            "crit": 3,
            "desc": "organization URL path segment",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "metadata/package/entrypoint::has-multiple-entries",
            "conf": 0.85,
            "crit": 3,
            "desc": "Package has multiple entry points",
            "from": [
              {
                "off": 509,
                "file": 19,
                "line": 19
              }
            ],
            "uses": [
              18,
              39,
              100
            ]
          },
          {
            "id": "metadata/import/npm/sinclair/typebox/value::sinclair/typebox/value",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports @sinclair/typebox/value",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "micro-behaviors/data/llm/agent::sensitive-data-forwarding-phrase",
            "conf": 0.9,
            "crit": 3,
            "desc": "Sensitive-data forwarding phrase",
            "from": [
              {
                "file": 2
              }
            ]
          },
          {
            "id": "metadata/package/scripts/build::pkg-build-script-field",
            "conf": 0.6,
            "crit": 3,
            "desc": "Package declares a build script"
          },
          {
            "id": "micro-behaviors/data/serialize/object::js-serialise",
            "conf": 0.85,
            "crit": 3,
            "desc": "References a serialization-related symbol",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "micro-behaviors/data/parse/vocabulary::token-getter-call",
            "conf": 0.65,
            "crit": 3,
            "desc": "Generic token getter function",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "micro-behaviors/communications/http/url/endpoint::rest-admin-config-user-endpoints",
            "atk": "T1071.001",
            "mbc": "C0002",
            "conf": 0.86,
            "crit": 3,
            "desc": "REST admin config endpoints",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "metadata/package/scripts/build::has-build-script-build",
            "conf": 0.7,
            "crit": 3,
            "desc": "Package declares build script"
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-2",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"and\"",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "micro-behaviors/communications/http/url/api-path::commands-endpoint-path",
            "conf": 0.9,
            "crit": 3,
            "desc": "Rooted HTTP commands endpoint path",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "micro-behaviors/communications/http/server/route::status-route-path",
            "atk": "T1071.001",
            "mbc": "C0002",
            "conf": 0.86,
            "crit": 1,
            "desc": "Status management route path",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "micro-behaviors/data/manipulation::log-redaction-option",
            "conf": 0.85,
            "crit": 3,
            "desc": "Log redaction option or call",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "metadata/package/entrypoint::main-runtime-tree-entrypoint",
            "conf": 0.85,
            "crit": 2,
            "desc": "Package main targets runtime tree"
          },
          {
            "id": "metadata/lang/scripted::dts-declaration-file",
            "conf": 0.99,
            "crit": 2,
            "desc": "TypeScript declaration file",
            "from": [
              {
                "file": 2
              }
            ]
          },
          {
            "id": "metadata/package/files/runtime::javascript-dist-tree-artifact",
            "conf": 0.95,
            "crit": 3,
            "desc": "JavaScript/TypeScript file under dist",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "micro-behaviors/data/llm/wire-marker::ai-agent-term-reference",
            "conf": 0.8,
            "crit": 3,
            "desc": "References the phrase \"AI agent\"",
            "from": [
              {
                "file": 2
              }
            ]
          },
          {
            "id": "micro-behaviors/communications/http/url/query::btoa-json-stringify-call",
            "conf": 0.9,
            "crit": 3,
            "desc": "Base64-encodes JSON.stringify output via btoa",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "micro-behaviors/communications/http/request/result::http-send-object",
            "atk": "T1071.001",
            "mbc": "C0002",
            "conf": 0.8,
            "crit": 3,
            "desc": "Send call has object payload",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "micro-behaviors/communications/http/url/forge::public-code-forge-url",
            "conf": 0.9,
            "crit": 3,
            "desc": "References a public code-forge URL",
            "from": [
              {
                "file": 7
              }
            ]
          },
          {
            "id": "metadata/package/repository::has-repository-field",
            "conf": 0.9,
            "crit": 2,
            "desc": "package.json declares repository metadata"
          },
          {
            "id": "metadata/file/string/telemetry::telemetry-email-field-useremail",
            "conf": 0.9,
            "crit": 3,
            "desc": "userEmail field name",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "micro-behaviors/data/encode/base64::btoa-symbol",
            "conf": 0.78,
            "crit": 3,
            "desc": "Calls the browser btoa() Base64 encoder",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "metadata/package/documentation/package-metadata::readme-install-scoped-package-command",
            "conf": 0.9,
            "crit": 3,
            "desc": "README recommends scoped package installation",
            "from": [
              {
                "file": 8
              }
            ]
          },
          {
            "id": "metadata/build/bundler/wrapper::esbuild-bundled--export",
            "conf": 0.95,
            "crit": 3,
            "desc": "Contains the esbuild __export helper",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "objectives/anti-static/obfuscation/code-metrics/command-network-surface::js-many-network-indicators",
            "atk": "T1027",
            "mbc": "B0032",
            "conf": 0.86,
            "crit": 3,
            "desc": "Many network indicators in JavaScript",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "metadata/package/repository::repo-url-git-host",
            "conf": 0.9,
            "crit": 3,
            "desc": "Repository identifies major Git host"
          },
          {
            "id": "metadata/package/testing/presence/harness::test-or-declaration-file",
            "conf": 0.85,
            "crit": 1,
            "desc": "File is a test or type-declaration source file",
            "from": [
              {
                "file": 17
              },
              {
                "file": 24
              }
            ],
            "uses": [
              104
            ]
          },
          {
            "id": "metadata/package/homepage::homepage-git-host",
            "conf": 0.9,
            "crit": 3,
            "desc": "Homepage points to major Git host"
          },
          {
            "id": "micro-behaviors/time/query::js-triple-date-now",
            "conf": 0.4,
            "crit": 3,
            "desc": "3+ Date.now() calls",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "micro-behaviors/communications/ipc/agent-hook::agent-hook-input-read--tool-input",
            "conf": 0.9,
            "crit": 3,
            "desc": "Reads AI agent hook tool input (tool_input)",
            "from": [
              {
                "file": 2
              }
            ]
          },
          {
            "id": "micro-behaviors/communications/websocket/send::websocket-instance-send-call",
            "conf": 0.92,
            "crit": 3,
            "desc": "WebSocket instance sends data",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "micro-behaviors/communications/http/websocket::websocket-lower",
            "atk": "T1071.001",
            "mbc": "C0002",
            "conf": 0.5,
            "crit": 3,
            "desc": "References the lowercase websocket keyword",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "micro-behaviors/communications/http/client/response-body::fetch-response-stream-reader",
            "conf": 0.9,
            "crit": 3,
            "desc": "Reads fetch response as a stream",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "metadata/package/entrypoint::declared-runtime-tree-not-shipped",
            "conf": 0.95,
            "crit": 3,
            "desc": "Manifest declares a runtime tree the archive does not ship",
            "from": [
              {
                "file": 19
              }
            ],
            "uses": [
              66,
              91,
              103
            ]
          },
          {
            "id": "micro-behaviors/communications/http/post::post",
            "atk": "T1071.001",
            "mbc": "C0002",
            "conf": 0.7,
            "crit": 3,
            "desc": "HTTP POST method string literal",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "micro-behaviors/data/encoded::base64-token",
            "conf": 0.7,
            "crit": 2,
            "desc": "Calls a Base64 conversion helper",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "micro-behaviors/communications/http/request/route::status-checkin-route",
            "atk": "T1071.001",
            "mbc": "C0002",
            "conf": 0.92,
            "crit": 3,
            "desc": "HTTP status, check-in, or heartbeat route",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "metadata/package/files/package-json::files-runtime-tree-ref",
            "conf": 0.85,
            "crit": 2,
            "desc": "Package files list includes runtime tree"
          },
          {
            "id": "micro-behaviors/data/llm/agent::agent-or-skill-http-url-reference",
            "conf": 0.9,
            "crit": 3,
            "desc": "Agent or skill references an HTTP URL",
            "from": [
              {
                "file": 7
              }
            ]
          },
          {
            "id": "metadata/build/bundler/asset::js-any-bundle-output",
            "conf": 0.95,
            "crit": 2,
            "desc": "Contains bundled or minified JavaScript",
            "from": [
              {
                "file": 17
              },
              {
                "file": 24
              }
            ],
            "uses": [
              97
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-7",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"this\"",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-1",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"the\"",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "micro-behaviors/communications/http/header/content-type::application-json",
            "conf": 0.65,
            "crit": 3,
            "desc": "References the application/json media type",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "metadata/build/minifier::js-medium-minified-line",
            "conf": 0.9,
            "crit": 2,
            "desc": "JavaScript contains a long minified line",
            "from": [
              {
                "file": 2
              }
            ]
          },
          {
            "id": "micro-behaviors/data/string/replace::chained-replace-calls",
            "conf": 0.9,
            "crit": 3,
            "desc": "Chains multiple JavaScript string replacements",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "micro-behaviors/communications/http/request/route::numbered-metrics-route",
            "atk": "T1071.001",
            "mbc": "C0002",
            "conf": 0.92,
            "crit": 3,
            "desc": "HTTP numbered metrics route",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "metadata/package/entrypoint::pkg-types-field",
            "conf": 0.9,
            "crit": 3,
            "desc": "Package declares TypeScript types entry"
          },
          {
            "id": "metadata/file/format/structured::sourcemap-typescript-sources",
            "conf": 0.9,
            "crit": 3,
            "desc": "Source map of TypeScript sources",
            "from": [
              {
                "file": 5
              }
            ]
          },
          {
            "id": "micro-behaviors/data/control-flow/loop::js-object-key-in-loop",
            "conf": 0.9,
            "crit": 3,
            "desc": "JavaScript iterates enumerable object keys",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "metadata/package/files/included::npm-publish-root-manifest",
            "conf": 0.95,
            "crit": 2,
            "desc": "Manifest sits at npm publish root",
            "from": [
              {
                "file": 4
              }
            ]
          },
          {
            "id": "metadata/file/extension/identity::declaration-file-extension",
            "conf": 1.0,
            "crit": 2,
            "desc": "File uses a source declaration extension",
            "from": [
              {
                "file": 2
              }
            ]
          },
          {
            "id": "micro-behaviors/communications/websocket/server::websocket-send",
            "atk": "T1071.001",
            "mbc": "C0002",
            "conf": 0.6,
            "crit": 3,
            "desc": "WebSocket send() call",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "micro-behaviors/communications/http/authorization-header::authorization-header-map-entry",
            "atk": "T1071.001",
            "mbc": "C0002",
            "conf": 0.88,
            "crit": 3,
            "desc": "Defines an HTTP Authorization header mapping",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "micro-behaviors/communications/http/server/route::events-route-path",
            "atk": "T1071.001",
            "mbc": "C0002",
            "conf": 0.86,
            "crit": 1,
            "desc": "Events management route path",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "metadata/file/string/telemetry::last-name-field",
            "conf": 0.9,
            "crit": 3,
            "desc": "lastName field name",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "well-known/tool/detection/redaction::secret-pattern-token-label",
            "conf": 0.95,
            "crit": 3,
            "desc": "Secret scanner token label",
            "from": [
              {
                "file": 2
              }
            ]
          },
          {
            "id": "micro-behaviors/data/control-flow/loop::receiver-loop-bound-1024",
            "conf": 1.0,
            "crit": 3,
            "desc": "Receiver iterates one thousand times",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "micro-behaviors/data/control-flow/error-handling::empty-arrow-catch-handler",
            "conf": 0.8,
            "crit": 3,
            "desc": "Empty arrow catch discards rejection",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "micro-behaviors/communications/http/url/query::query-serializer-call",
            "conf": 0.9,
            "crit": 3,
            "desc": "Calls a URL query serializer",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "metadata/package/scripts/develop::has-test-script",
            "conf": 1.0,
            "crit": 2,
            "desc": "package.json declares a test script"
          },
          {
            "id": "objectives/exfiltration/messaging/webhook::licensekey-credential-field",
            "atk": "T1041",
            "mbc": "B0030",
            "conf": 0.85,
            "crit": 3,
            "desc": "licenseKey credential field",
            "from": [
              {
                "file": 2
              }
            ]
          },
          {
            "id": "metadata/package/scripts/develop::pkg-format-script-field",
            "conf": 0.6,
            "crit": 3,
            "desc": "\"format\": script in package.json"
          },
          {
            "id": "metadata/package/files/included::package-json-basename",
            "conf": 0.95,
            "crit": 3,
            "desc": "Filename is package.json",
            "from": [
              {
                "file": 4
              }
            ]
          },
          {
            "id": "micro-behaviors/data/source/syntax/array::js-array-short-delimiter-join-call",
            "conf": 0.72,
            "crit": 3,
            "desc": "Joins array with a short delimiter",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "micro-behaviors/data/control-flow/module-exec::direct-zero-arg-call",
            "conf": 0.86,
            "crit": 3,
            "desc": "Invokes zero-argument function at module scope",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "metadata/file/comment::source-comment-bytes-over-300",
            "conf": 0.92,
            "crit": 2,
            "desc": "Source has over 300 comment bytes",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "metadata/file/format/structured::sourcemap",
            "conf": 1.0,
            "crit": 3,
            "desc": "JavaScript source map",
            "from": [
              {
                "file": 5
              }
            ]
          },
          {
            "id": "metadata/package/files/package-json::files-array-present",
            "conf": 0.92,
            "crit": 3,
            "desc": "Package.json declares a files allowlist"
          },
          {
            "id": "micro-behaviors/data/serialize/schema-object::json-object-variable-field",
            "conf": 0.84,
            "crit": 3,
            "desc": "JSON object includes a variable-valued field",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "micro-behaviors/communications/http/url/domain::js-leading-dot-dns-suffix",
            "conf": 0.9,
            "crit": 3,
            "desc": "Leading-dot DNS suffix string literal",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "micro-behaviors/communications/http/url/endpoint::domain-collection-path-token",
            "conf": 0.92,
            "crit": 3,
            "desc": "domain collection URL path segment",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "micro-behaviors/time/schedule/interval::repeated-settimeout",
            "conf": 0.9,
            "crit": 3,
            "desc": "Contains at least six setTimeout calls",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "micro-behaviors/data/source/syntax/schema::username-object-key",
            "conf": 0.9,
            "crit": 3,
            "desc": "Object literal declares a username key",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "metadata/build/bundler/asset::has-sourcemap",
            "conf": 0.9,
            "crit": 2,
            "desc": "Code has source map reference",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "micro-behaviors/data/parse/json::json-data-property-parse",
            "conf": 0.94,
            "crit": 3,
            "desc": "Parses a data property with JSON.parse",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "micro-behaviors/communications/http/request/json::module-execution-http-call",
            "conf": 0.95,
            "crit": 3,
            "desc": "Module initialization calls an HTTP client"
          },
          {
            "id": "micro-behaviors/data/encode/url::encode-uri-component-call",
            "conf": 0.7,
            "crit": 3,
            "desc": "URL-encodes data via encodeURIComponent",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "metadata/import/npm/rxjs::rxjs",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports rxjs",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "micro-behaviors/data/serialize/json::json-stringify-identifier",
            "conf": 0.85,
            "crit": 3,
            "desc": "Serializes an identifier as JSON",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "metadata/package/dependencies/manifest/identity::npm-dep-ws",
            "conf": 0.9,
            "crit": 3,
            "desc": "npm dependency on ws WebSocket library"
          },
          {
            "id": "micro-behaviors/fs/path/private-key::private-keys-dir-segment",
            "atk": "T1552.001",
            "conf": 0.7,
            "crit": 3,
            "desc": "Private directory contains key file",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "micro-behaviors/data/serialize/envelope::command-assignment-key",
            "conf": 0.4,
            "crit": 1,
            "desc": "Command field or assignment key",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "micro-behaviors/data/source/arithmetic::source-xor-operation",
            "conf": 1.0,
            "crit": 3,
            "desc": "Source references XOR syntax",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "metadata/package/repository::has-repository-url",
            "conf": 0.85,
            "crit": 2,
            "desc": "package.json declares a repository URL"
          },
          {
            "id": "micro-behaviors/fs/path/token::api-key-path-fragment",
            "atk": "T1552.001",
            "conf": 0.8,
            "crit": 3,
            "desc": "API key filename or path fragment",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "metadata/package/files/archive-member::archive-js-member",
            "conf": 0.9,
            "crit": 3,
            "desc": "Archive member is a JavaScript file"
          },
          {
            "id": "well-known/lib/format/elisym-sdk::archive-path",
            "conf": 0.99,
            "crit": 3,
            "desc": "elisym/sdk npm archive path"
          }
        ]
      }
    ]
  }
}