{
  "ml": {
    "v": "7",
    "eng": "2.12.0-beta.2",
    "lvl": -1,
    "conf": 0,
    "mods": [
      {
        "cls": 0,
        "raw": 0.13119707,
        "rte": "az",
        "prob": 0.13119707
      },
      {
        "cls": 0,
        "raw": 0.041720886,
        "rte": "az/npm",
        "prob": 0.041720886
      }
    ],
    "prob": 0.13119707,
    "files": [
      {
        "id": 0,
        "lvl": -1,
        "conf": 0,
        "prob": 0.13119706511497498,
        "type": "npm"
      },
      {
        "id": 1,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000016808509826660156,
        "type": "package.json"
      },
      {
        "id": 2,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000008543332114641089,
        "type": "javascript"
      },
      {
        "id": 31,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000015010436072770972,
        "type": "registry"
      }
    ],
    "version": "v18.18",
    "analyzed_at": "2026-10-08T10:03:50Z"
  },
  "path": "wally.rommaster.fileservice.application.contracts@0.1.3010",
  "raw": {
    "files": [
      {
        "id": 0,
        "ctx": [
          {
            "b": "abZy8000000@}UUqe+hE5p\u003cvQ1nJEXaki5EMmLVk**JHhBWma71XDo?W0=tTV=$@PhiH.]1]mP?eYA#z/\u003eL0oAP=wuwL{fr3CTjkKW\u0026$tX$QCkwCJd{p4E}(A=Cwz)dA{9D0Oqlb)O(gX$fZ)zJt^EO!?IZiDbIqp]mb/AP1zzzQJVIQL)D\u003cQ$\u0026u-x@u4O)eZ}U=)k2tF\u003e)Z)dIf)!b{kGUVJ}LtwEjo[vMX=SO*)2Jcelh#Pi)kjJhG\u003ch(V!DUDtW43GnY@R",
            "ln": 0
          }
        ],
        "mol": "O(S₂)Md(Pa₃)",
        "sha": "cf4a44b05b4ccf92af2b4d8cfdd88afbb7393265b2924bc96f65e86830774109",
        "path": "/tmp/promoter-132151804/cf4a44b05b4ccf92af2b4d8cfdd88afbb7393265b2924bc96f65e86830774109/wally.rommaster.fileservice.application.contracts@0.1.3010",
        "risk": 40,
        "size": 1673,
        "type": "npm",
        "facts": {
          "metrics": {
            "file": {
              "size": 1673,
              "entropy": 7.63
            },
            "parse": {
              "error_count": 1
            },
            "binary": {
              "peak_region_bytes": 1024,
              "peak_region_entropy": 7.7
            },
            "consistency": {
              "self_dependency": 0,
              "unused_runtime_deps": 0
            }
          }
        },
        "ident": {
          "name": {
            "value": "wally.rommaster.fileservice.application.contracts",
            "source": "npm.name",
            "verified": false
          },
          "trust": "unsigned",
          "authors": [
            {
              "name": "Wally",
              "role": "author",
              "source": "npm.author"
            }
          ],
          "version": {
            "value": "0.1.3010",
            "source": "npm.version",
            "verified": false
          },
          "identifier": {
            "value": "wally.rommaster.fileservice.application.contracts",
            "source": "npm.name",
            "verified": false
          }
        },
        "traits": [
          {
            "id": "metadata/import/npm/dayjs::dayjs",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports dayjs",
            "from": [
              {
                "file": 2
              }
            ]
          },
          {
            "id": "metadata/package/entrypoint::main-root-javascript-entry",
            "conf": 0.9,
            "crit": 2,
            "desc": "Root JavaScript main entrypoint"
          },
          {
            "id": "metadata/lang/generated::automatically-generated-source-marker",
            "conf": 0.85,
            "crit": 2,
            "desc": "Generated source provenance marker",
            "from": [
              {
                "file": 2
              }
            ]
          },
          {
            "id": "metadata/package/files/included::package-json-basename",
            "conf": 0.95,
            "crit": 3,
            "desc": "Filename is package.json",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-2",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"and\"",
            "from": [
              {
                "file": 2
              }
            ]
          },
          {
            "id": "metadata/package/files/included::npm-publish-root-manifest",
            "conf": 0.95,
            "crit": 2,
            "desc": "Manifest sits at npm publish root",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-7",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"this\"",
            "from": [
              {
                "file": 2
              }
            ]
          },
          {
            "id": "metadata/import/npm/relative/2/paths/getpathsresponse::relative/2/paths/getpathsresponse",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports ../Paths/GetPathsResponse",
            "from": [
              {
                "file": 14
              }
            ]
          },
          {
            "id": "metadata/package/dependencies/manifest/presence::has-runtime-deps",
            "conf": 0.85,
            "crit": 3,
            "desc": "Package declares a runtime dependency",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-1",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"the\"",
            "from": [
              {
                "file": 2
              }
            ]
          },
          {
            "id": "metadata/import/npm/relative/1/parameterrequest::relative/1/parameterrequest",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports ./ParameterRequest",
            "from": [
              {
                "file": 3
              }
            ]
          },
          {
            "id": "objectives/supply-chain/impersonation/manifest/skeleton::keywords-single-entry",
            "conf": 0.7,
            "crit": 3,
            "desc": "Keywords array has exactly one entry"
          },
          {
            "id": "metadata/import/npm/relative/1/pageinforesponse::relative/1/pageinforesponse",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports ./PageInfoResponse",
            "from": [
              {
                "file": 23
              }
            ]
          },
          {
            "id": "metadata/import/npm/relative/1/parameterresponse::relative/1/parameterresponse",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports ./ParameterResponse",
            "from": [
              {
                "file": 17
              }
            ]
          },
          {
            "id": "metadata/package/files/included::npm-package-manifest-member",
            "conf": 0.95,
            "crit": 2,
            "desc": "Archive carries npm package manifest"
          },
          {
            "id": "metadata/package/files/missing-entrypoint::npm-main-entrypoint-not-shipped",
            "conf": 0.92,
            "crit": 3,
            "desc": "npm main entrypoint absent from archive",
            "from": [
              {
                "file": 1
              }
            ],
            "uses": [
              1,
              5,
              14
            ],
            "spans": [
              [
                0,
                20
              ]
            ]
          },
          {
            "id": "objectives/supply-chain/trojanized/dist::release-ships-no-runtime-code",
            "atk": "T1195.002",
            "conf": 0.9,
            "crit": 4,
            "desc": "Release declares an entry point it omits",
            "from": [
              {
                "file": 1
              }
            ],
            "uses": [
              1,
              5,
              14
            ],
            "spans": [
              [
                0,
                20
              ]
            ]
          }
        ]
      },
      {
        "ctx": [
          {
            "b": "DKp(rb5Q?awG\u003ceTb6NEiy\u003cvTNz/6u1B97#le[O*lwPIB6C4\u003eC$e[5Zry?Wx/BzkVhe[n*qBAg/1BAnSS3lQDnC4CYnx(v(kiV]R2e?[$mfFLm9ed9Hxb4Lnav@=p5BzkVhb03?\u003cs7b]YC}J0kzb1CWBy/FBmRMWIq!o#)x\u003e7Zbl2Z^Vx\u003e7N[x(v(wlVl\u003c:A:-E1B0rdxarR\u003eBvqfQ6iV]RXzE^s6e]2CKed9Hxb6dmmx(Ffnb03\u0026[3lQDlar\u003e]sB96D=zFshpiV]RTv}Y^6tP#QSA=k$Vaz#9uBy/JnaAIHkv}/K?wN]3\u0026asnATwQ4{hatC5EarV7-3lQDnyH}^nz/Pxfb03\u0026J3lQDlar\u003c(}y\u00261wHqG3zDvrlK4AXo*}y?lKRA=#ebwIcn/Abok#vruj4zz1p{zGG]cv@#=o3lQD%ed9Hxb4kRoxM4]niV]RFvqG+9a$K6zar\u003eSov}xL0wG\u003ceTb1UZ2a$K6zar\u003eucAaJ]$wO#0(wPG4RaBsCrarR^Jwmo:#B0rT/a#7Y8f!Lgpa{]CnEf$xf",
            "ln": 0,
            "col": 1,
            "line": 1
          }
        ],
        "depth": 1,
        "facts": {
          "imp": [
            [
              "1.11.13",
              "dayjs"
            ]
          ],
          "metrics": {
            "file": {
              "size": 432,
              "entropy": 4.73
            },
            "binary": {
              "peak_region_bytes": 432,
              "peak_region_entropy": 4.73
            }
          }
        },
        "id": 1,
        "ident": {
          "name": {
            "value": "wally.rommaster.fileservice.application.contracts",
            "source": "npm.name",
            "verified": false
          },
          "trust": "unsigned",
          "authors": [
            {
              "name": "Wally",
              "role": "author",
              "source": "npm.author"
            }
          ],
          "version": {
            "value": "0.1.3010",
            "source": "npm.version",
            "verified": false
          },
          "identifier": {
            "value": "wally.rommaster.fileservice.application.contracts",
            "source": "npm.name",
            "verified": false
          }
        },
        "mol": "O(S)Md(Pa₂)",
        "path": "/tmp/promoter-132151804/cf4a44b05b4ccf92af2b4d8cfdd88afbb7393265b2924bc96f65e86830774109/wally.rommaster.fileservice.application.contracts@0.1.3010!!package/package.json",
        "pid": 0,
        "refs": [
          {
            "to": "pkg:npm/dayjs@1.11.13",
            "off": 408,
            "kind": "dependency"
          },
          {
            "to": "index.js",
            "off": 171,
            "kind": "local"
          }
        ],
        "risk": 3,
        "sha": "0e276dea7a82e524607cb96e7e526b822ba15de8fc94aadcda69c8942acf201d",
        "size": 432,
        "traits": [
          {
            "id": "metadata/package/dependencies/manifest/presence::has-runtime-deps",
            "conf": 0.85,
            "crit": 3,
            "desc": "Package declares a runtime dependency",
            "spans": [
              [
                385,
                23
              ]
            ]
          },
          {
            "id": "metadata/package/entrypoint::main-root-javascript-entry",
            "conf": 0.9,
            "crit": 2,
            "desc": "Root JavaScript main entrypoint",
            "spans": [
              [
                162,
                0
              ]
            ]
          },
          {
            "id": "metadata/package/files/included::npm-publish-root-manifest",
            "conf": 0.95,
            "crit": 2,
            "desc": "Manifest sits at npm publish root"
          },
          {
            "id": "metadata/package/files/included::package-json-basename",
            "conf": 0.95,
            "crit": 3,
            "desc": "Filename is package.json"
          },
          {
            "id": "objectives/supply-chain/impersonation/manifest/skeleton::keywords-single-entry",
            "conf": 0.7,
            "crit": 3,
            "desc": "Keywords array has exactly one entry",
            "spans": [
              [
                267,
                51
              ]
            ]
          }
        ],
        "type": "package.json"
      },
      {
        "depth": 1,
        "facts": {
          "imp": [
            [
              "",
              "dayjs"
            ]
          ],
          "metrics": {
            "ast": {
              "max_depth": 7,
              "call_count": 0,
              "node_count": 62
            },
            "file": {
              "size": 369,
              "entropy": 4.72
            },
            "text": {
              "lines": 14,
              "top_char": 101,
              "tab_count": 5,
              "max_ws_run": 5,
              "space_count": 49,
              "char_entropy": 4.72,
              "unique_chars": 44,
              "top_char_null": 0,
              "string_density": 0.29,
              "top_char_ratio": 0.08,
              "avg_line_length": 24.36,
              "max_line_length": 76,
              "empty_line_ratio": 0.14,
              "last_line_length": 1,
              "whitespace_ratio": 0.22,
              "identifier_density": 0.5,
              "line_length_stddev": 21.98,
              "normalized_string_count": 1.07,
              "normalized_unique_identifiers": 1.84
            },
            "binary": {
              "peak_region_bytes": 369,
              "peak_region_entropy": 4.72
            },
            "source": {
              "class_count": 1
            },
            "imports": {
              "count": 1,
              "third_party_count": 1,
              "third_party_ratio": 1
            },
            "strings": {
              "bytes": 23,
              "count": 4,
              "avg_length": 5.75,
              "max_length": 6,
              "avg_entropy": 2.52,
              "entropy_stddev": 0.11
            },
            "comments": {
              "chars": 164,
              "count": 3,
              "lines": 3,
              "to_code_ratio": 0.27
            },
            "functions": {
              "count": 1
            },
            "identifiers": {
              "count": 7,
              "unique": 7,
              "avg_length": 11,
              "max_length": 22,
              "min_length": 4,
              "avg_entropy": 2.84,
              "reuse_ratio": 1,
              "length_stddev": 7.11,
              "high_entropy_count": 2,
              "high_entropy_ratio": 0.29,
              "all_lowercase_ratio": 0.43
            }
          }
        },
        "id": 2,
        "path": "/tmp/promoter-132151804/cf4a44b05b4ccf92af2b4d8cfdd88afbb7393265b2924bc96f65e86830774109/wally.rommaster.fileservice.application.contracts@0.1.3010!!package/Requests/Storages/CreateStorageRequest.ts",
        "pid": 0,
        "risk": 1,
        "sha": "3c3e63349c061e01fc0bfe0ee0b3c11bfe1fae7e4ac160292ed9842e71dd19f9",
        "size": 369,
        "traits": [
          {
            "id": "metadata/import/npm/dayjs::dayjs",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports dayjs",
            "spans": [
              [
                197,
                0
              ]
            ]
          },
          {
            "id": "metadata/file/function::source-no-parsed-call-sites",
            "conf": 0.98,
            "crit": 2,
            "desc": "Source has no parsed call sites"
          },
          {
            "id": "metadata/lang/generated::automatically-generated-source-marker",
            "conf": 0.85,
            "crit": 2,
            "desc": "Generated source provenance marker",
            "spans": [
              [
                21,
                0
              ]
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-1",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"the\"",
            "spans": [
              [
                147,
                0
              ]
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-2",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"and\"",
            "spans": [
              [
                119,
                0
              ]
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-7",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"this\"",
            "spans": [
              [
                7,
                0
              ]
            ]
          },
          {
            "id": "metadata/lang/source::interface-only-source",
            "conf": 1.0,
            "crit": 2,
            "desc": "TypeScript interface declaration in source",
            "spans": [
              [
                207,
                0
              ]
            ]
          },
          {
            "id": "metadata/lang/generated::recognized-generated-source",
            "conf": 0.95,
            "crit": 2,
            "desc": "Recognized generated source provenance",
            "uses": [
              2
            ],
            "spans": [
              [
                21,
                0
              ]
            ]
          }
        ],
        "type": "javascript"
      },
      {
        "depth": 1,
        "facts": {
          "metrics": {
            "file": {
              "size": 853,
              "entropy": 4.79
            },
            "binary": {
              "peak_region_bytes": 853,
              "peak_region_entropy": 4.79
            },
            "registry": {
              "age_days": 603,
              "file_count": 30,
              "maintainers": 1,
              "published_at": 1736530354,
              "releases_24h": 0,
              "releases_48h": 0,
              "is_deprecated": 0,
              "release_count": 20,
              "security_hold": 0,
              "unpacked_size": 9539,
              "version_removed": 0,
              "downloads_recent": 58,
              "package_age_days": 1073,
              "first_published_at": 1695925357,
              "has_install_script": 0,
              "previous_published_at": 1736422326,
              "publisher_in_maintainers": 1,
              "days_since_previous_release": 1
            }
          }
        },
        "id": 31,
        "mol": "Md(Re)",
        "path": "wally.rommaster.fileservice.application.contracts@0.1.3010.registry.json",
        "pid": 0,
        "rel": "registry",
        "risk": 1,
        "role": "sidecar",
        "sha": "16f5926749afc0d7cef88cf5168ae1dab17e7e5ba2c741e778a6d6b2514b6e31",
        "size": 853,
        "traits": [
          {
            "id": "metadata/registry::established-package",
            "conf": 1.0,
            "crit": 3,
            "desc": "Package is at least one year old"
          },
          {
            "id": "metadata/registry::many-releases",
            "conf": 1.0,
            "crit": 3,
            "desc": "Twenty or more releases"
          },
          {
            "id": "metadata/registry::single-maintainer",
            "conf": 1.0,
            "crit": 3,
            "desc": "Registry package lists one maintainer"
          }
        ],
        "type": "registry"
      }
    ],
    "rev": "c1ea9",
    "v": "8"
  }
}