{ "ml": { "v": "7", "id": 551, "lvl": -1, "conf": 0, "prob": 0.000010718901648942847, "type": "json", "version": "v18.18", "analyzed_at": "2026-09-09T19:59:26Z" }, "path": "package/dist/compiled/next-server/app-page-turbo-experimental.runtime.dev.js##unicode-escape@785435", "raw": { "rev": "52359", "files": [ { "id": 853, "mol": "H(Cm₃)Md", "pid": 20, "rel": "fetched", "sha": "d1f90f9c901d2eeaaffd61c29190ef96c6996f5ebdbf3beb021d2ba5d9bb5e6b", "via": "https://registry.npmjs.org/next/-/next-16.3.0-preview.5.tgz", "path": "pkg:npm/next@16.3.0-preview.5!!package/dist/compiled/next-server/app-page-turbo-experimental.runtime.dev.js!!package/dist/compiled/next-server/app-page-turbo-experimental.runtime.dev.js##unicode-escape@785435", "risk": 4, "size": 65538, "type": "python", "depth": 4, "facts": { "imp": [ [ "", "node:stream" ], [ "", "url" ] ], "mbr": [ "Array.isArray", "Buffer.from", "FakeAsyncLocalStorage.bind", "JSON.parse", "JSON.stringify", "Object.defineProperty", "Object.entries", "Object.fromEntries", "Promise.resolve", "Promise.resolve().then", "Readable.fromWeb", "WEBPACK_LAYERS_NAMES.actionBrowser", "WEBPACK_LAYERS_NAMES.apiEdge", "WEBPACK_LAYERS_NAMES.apiNode", "WEBPACK_LAYERS_NAMES.appPagesBrowser", "WEBPACK_LAYERS_NAMES.instrument", "WEBPACK_LAYERS_NAMES.middleware", "WEBPACK_LAYERS_NAMES.reactServerComponents", "WEBPACK_LAYERS_NAMES.serverSideRendering", "WEBPACK_LAYERS_NAMES.shared", "___rspack_import_0.COOKIE_NAME_PRERENDER_BYPASS", "___rspack_import_0.COOKIE_NAME_PRERENDER_DATA", "___rspack_import_0.SYMBOL_PREVIEW_DATA", "___rspack_import_0.checkIsOnDemandRevalidate", "___rspack_import_0.clearPreviewData", "__webpack_require__().Readable", "__webpack_require__().verify", "__webpack_require__.d", "__webpack_require__.n", "__webpack_require__.r", "_app_render_after_task_async_storage_external__rspack_import_6.afterTaskAsyncStorage", "_app_render_after_task_async_storage_external__rspack_import_6.afterTaskAsyncStorage.getStore", "_app_render_after_task_async_storage_external__rspack_import_6.afterTaskAsyncStorage.run", "_app_render_async_local_storage__rspack_import_5.bindSnapshot", "_app_render_work_async_storage_external__rspack_import_3.workAsyncStorage", "_app_render_work_async_storage_external__rspack_import_3.workAsyncStorage.getStore", "_components_app_router_headers__rspack_import_2.NEXT_REWRITTEN_PATH_HEADER", "_components_app_router_headers__rspack_import_2.NEXT_REWRITTEN_QUERY_HEADER", "_components_app_router_headers__rspack_import_2.NEXT_RSC_UNION_QUERY", "_components_router_reducer_create_href_from_url__rspack_import_2.createHrefFromUrl", "_cookies_get.value", "_cookies_get1.value", "_has_base_path__rspack_import_0.hasBasePath", "_lib_constants__rspack_import_1.PRERENDER_REVALIDATE_HEADER", "_lib_constants__rspack_import_1.PRERENDER_REVALIDATE_ONLY_GENERATED_HEADER", "_lib_scheduler__rspack_import_7.scheduleImmediate", "_lib_trace_constants__rspack_import_3.NodeSpan", "_lib_trace_constants__rspack_import_3.NodeSpan.runHandler", "_lib_trace_tracer__rspack_import_2.getTracer", "_revalidation_utils__rspack_import_4.withExecuteRevalidates", "_route_params__rspack_import_1.doesStaticSegmentAppearInURL", "_route_params__rspack_import_1.getCacheKeyForDynamicParam", "_route_params__rspack_import_1.getRenderedPathname", "_route_params__rspack_import_1.getRenderedSearch", "_route_params__rspack_import_1.parseDynamicParamFromURLPart", "_shared_lib_invariant_error__rspack_import_0.InvariantError", "_shared_lib_invariant_error__rspack_import_1.InvariantError", "_shared_lib_is_plain_object__rspack_import_0.isPlainObject", "_shared_lib_is_thenable__rspack_import_2.isThenable", "_shared_lib_router_utils_path_has_prefix__rspack_import_0.pathHasPrefix", "_shared_lib_segment__rspack_import_0.DEFAULT_SEGMENT_KEY", "_shared_lib_segment__rspack_import_0.PAGE_SEGMENT_KEY", "_shared_lib_segment__rspack_import_0.addSearchParamsIfPageSegment", "_shared_lib_segment_cache_segment_value_encoding__rspack_import_1.ROOT_SEGMENT_REQUEST_KEY", "_web_spec_extension_adapters_headers__rspack_import_0.HeadersAdapter", "_web_spec_extension_adapters_headers__rspack_import_0.HeadersAdapter.from", "_web_spec_extension_adapters_headers__rspack_import_2.HeadersAdapter", "_web_spec_extension_adapters_headers__rspack_import_2.HeadersAdapter.from", "_web_spec_extension_cookies__rspack_import_1.RequestCookies", "afterTaskStore.rootTaskSpawnPhase", "basePath.length", "bufferedChunks.length", "canonicalUrl.split", "chunks.length", "chunks.push", "console.error", "controller.close", "controller.enqueue", "cookies.get", "encryptedPreviewData.data", "external_path_default().isAbsolute", "external_path_default().join", "external_url_namespaceObject.fileURLToPath", "external_url_namespaceObject.pathToFileURL", "fallbackInitialRSCPayload.G", "fallbackInitialRSCPayload.S", "fallbackInitialRSCPayload.b", "fallbackInitialRSCPayload.f", "fallbackInitialRSCPayload.h", "fallbackInitialRSCPayload.i", "fallbackInitialRSCPayload.m", "filePath.startsWith", "firstResult.done", "flightData.map", "flightDataPath.length", "flightDataPath.slice", "flightSegmentPath.slice", "globalThis.AsyncLocalStorage", "headers.get", "headers.has", "helpers.js", "isJavaScriptProtocol.test", "location.href", "maybeGlobalAsyncLocalStorage.bind", "maybeGlobalAsyncLocalStorage.snapshot", "message.hash", "ms().NEXT_HMR_REFRESH_HASH_COOKIE", "next_dist_compiled_next_devtools__rspack_import_1.dispatcher", "next_dist_compiled_next_devtools__rspack_import_1.dispatcher.renderingIndicatorHide", "next_dist_compiled_next_devtools__rspack_import_1.dispatcher.renderingIndicatorShow", "options.path", "options.previewModeEncryptionKey", "options.previewModeId", "options.previewModeSigningKey", "paramCacheKey.split", "paramType.length", "paramValue.join", "path.slice", "pathnameParts.length", "pathnameParts.slice", "pathnameParts.slice().map", "payload.b", "peek.getReader", "prelude.getReader", "previewProps.previewModeId", "process.env", "process.env.__NEXT_BUNDLER", "process.env.__NEXT_MANUAL_CLIENT_BASE_PATH", "process.env.__NEXT_ROUTER_BASEPATH", "process.nextTick", "rawHeaders.get", "rawHeaders.hasOwnProperty", "react__rspack_import_0.useEffect", "react__rspack_import_0.useTransition", "reader.cancel", "reader.read", "renderedPathname.split", "renderedPathname.split().filter", "req.headers", "require().Readable", "res.end", "res.getHeader", "res.setHeader", "res.statusCode", "res.statusMessage", "res.write", "res.writeHead", "response.headers", "response.headers.get", "response.url", "s.slice", "searchParams.entries", "seen.add", "seen.has", "segment.endsWith", "segment.startsWith", "segmentPath.length", "segmentPath.slice", "stream.destroy", "stream.on", "stream.push", "stream.tee", "sub.onChunk", "sub.onEnd", "sub.onError", "thenable.then", "underlying.getReader", "unprocessedPrelude.tee", "urlToUrlWithoutFlightMarker().pathname", "urlToUrlWithoutFlightMarker().search", "urlWithoutFlightParameters.searchParams", "urlWithoutFlightParameters.searchParams.delete", "workUnitStore.phase" ], "tgt": [ "Array.isArray", "Buffer.from", "Date", "Error", "FakeAsyncLocalStorage", "FakeAsyncLocalStorage.bind", "JSON.parse", "JSON.stringify", "Object.defineProperty", "Object.entries", "Object.fromEntries", "Promise", "Promise.resolve", "Promise.resolve().then", "ReactServerPrerenderResult", "Readable.fromWeb", "ReadableCtor", "ReadableStream", "ReplayableNodeStream", "Set", "Symbol", "URL", "URLSearchParams", "Uint8Array", "WeakSet", "__webpack_require__", "__webpack_require__().verify", "__webpack_require__.d", "__webpack_require__.n", "__webpack_require__.r", "_app_render_after_task_async_storage_external__rspack_import_6.afterTaskAsyncStorage.getStore", "_app_render_after_task_async_storage_external__rspack_import_6.afterTaskAsyncStorage.run", "_app_render_work_async_storage_external__rspack_import_3.workAsyncStorage.getStore", "_shared_lib_invariant_error__rspack_import_0.InvariantError", "_shared_lib_invariant_error__rspack_import_1.InvariantError", "_web_spec_extension_adapters_headers__rspack_import_0.HeadersAdapter.from", "_web_spec_extension_adapters_headers__rspack_import_2.HeadersAdapter.from", "_web_spec_extension_cookies__rspack_import_1.RequestCookies", "callback", "canonicalUrl.split", "canonicalizeURLPart", "chunks.push", "console.error", "controller.close", "controller.enqueue", "cookies.get", "createClosingStream", "createUnclosingStream", "decodeURIComponent", "decryptWithSecret", "encodeURIComponent", "errorWaitUntilNotAvailable", "external_path_default", "external_path_default().isAbsolute", "external_path_default().join", "filePath.startsWith", "fillInFallbackFlightRouterStateImpl", "flightData.map", "flightDataPath.slice", "flightSegmentPath.slice", "fn", "font", "getFlightDataPartsFromPath", "getter", "handler", "headers.get", "headers.has", "isError", "isJavaScriptProtocol.test", "isWebStream", "maybeGlobalAsyncLocalStorage", "maybeGlobalAsyncLocalStorage.bind", "maybeGlobalAsyncLocalStorage.snapshot", "ms", "next_dist_compiled_next_devtools__rspack_import_1.dispatcher.renderingIndicatorHide", "next_dist_compiled_next_devtools__rspack_import_1.dispatcher.renderingIndicatorShow", "next_dist_compiled_p_queue__rspack_import_0_default", "onClose", "paramCacheKey.split", "paramValue.join", "path.slice", "pathnameParts.slice", "pathnameParts.slice().map", "peek.getReader", "prelude.getReader", "process.nextTick", "rawHeaders.hasOwnProperty", "reader.cancel", "reader.read", "renderedPathname.split", "renderedPathname.split().filter", "require", "res.end", "res.getHeader", "res.setHeader", "res.write", "res.writeHead", "resolve", "resolveCacheHandlerPathToFilesystem", "response.headers.get", "s.slice", "scheduleImmediate", "searchParams.entries", "seen.add", "seen.has", "segment.endsWith", "segment.startsWith", "segmentPath.slice", "serialize", "setImmediate", "stream.destroy", "stream.on", "stream.push", "stripClientOnlyDataFromFlightRouterState", "sub.onChunk", "sub.onEnd", "sub.onError", "thenable.then", "underlying.getReader", "unprocessedPrelude.tee", "urlToUrlWithoutFlightMarker", "urlWithoutFlightParameters.searchParams.delete" ], "metrics": { "ast": { "op.eq": 39, "op.ge": 2, "op.lt": 6, "op.ne": 14, "op.add": 5, "op.div": 4, "op.lor": 18, "op.sub": 8, "op.land": 20, "op.lnot": 63, "max_depth": 24, "call_count": 371, "node_count": 11382, "op.coalesce": 2, "member_count": 173, "max_array_len": 7, "op_density.eq": 0, "op_density.ge": 0, "op_density.lt": 0, "op_density.ne": 0, "op_density.add": 0, "op_density.div": 0, "op_density.lor": 0, "op_density.sub": 0, "sequence_count": 89, "op_density.land": 0, "op_density.lnot": 0.01, "max_concat_chain": 2, "member_depth_max": 3, "op_density.coalesce": 0, "identity_function_count": 1, "const_return_function_count": 118, "const_return_function_ratio": 0.51 }, "file": { "size": 65538, "entropy": 5.47 }, "text": { "lines": 1, "top_char": 101, "max_ws_run": 2, "digit_ratio": 0.01, "space_count": 944, "char_entropy": 5.47, "unique_chars": 95, "top_char_null": 0, "lines_over_200": 1, "lines_over_500": 1, "string_density": 291, "top_char_ratio": 0.09, "avg_line_length": 65538, "lines_over_1000": 1, "max_line_length": 65538, "null_byte_count": 1, "last_line_length": 65538, "long_token_count": 178, "whitespace_ratio": 0.01, "identifier_density": 2073, "non_printable_ratio": 0, "normalized_string_count": 291, "suspicious_string_ratio": 0.07, "suspicious_identifier_ratio": 0.04 }, "binds": { "count": 202 }, "binary": { "peak_region_bytes": 38912, "peak_region_entropy": 5.55 }, "source": { "class_count": 7, "function_count": 68 }, "imports": { "count": 2, "stdlib_count": 2, "stdlib_ratio": 1 }, "strings": { "sql": 2, "bytes": 23608, "count": 291, "shell": 11, "url_count": 1, "very_long": 3, "avg_length": 81.13, "max_length": 10339, "path_count": 48, "avg_entropy": 3.01, "email_count": 1, "empty_count": 15, "entropy_stddev": 1.1, "high_entropy_count": 5, "embedded_code_candidates": 7 }, "functions": { "count": 75, "nested": 26, "density": 23100, "anonymous": 154, "avg_params": 0.39, "code_ratio": 231, "max_params": 4, "one_liners": 231, "avg_name_length": 16.62, "no_params_count": 172, "avg_length_lines": 1, "max_length_lines": 1, "min_length_lines": 1, "avg_nesting_depth": 0.19, "max_nesting_depth": 2, "high_entropy_names": 27, "single_char_params": 2, "avg_param_name_length": 8.26 }, "consistency": { "extension_content_mismatch": 1, "extension_content_mismatch.script_as_unknown": 1 }, "identifiers": { "count": 2073, "unique": 532, "avg_length": 14.62, "max_length": 65, "min_length": 1, "avg_entropy": 2.86, "reuse_ratio": 0.26, "length_stddev": 11.1, "has_digit_ratio": 0.06, "sequential_names": 18, "base64_like_names": 1, "single_char_count": 19, "single_char_ratio": 0.04, "high_entropy_count": 145, "high_entropy_ratio": 0.27, "all_lowercase_ratio": 0.32, "all_uppercase_ratio": 0.16, "numeric_suffix_count": 28, "keyboard_pattern_names": 2, "double_underscore_count": 2, "underscore_prefix_count": 39 } } }, "traits": [ { "id": "metadata/file/profile/language::lang-english--atom-1", "conf": 0.8, "crit": 2, "desc": "English function-word token \"the\"", "spans": [ [ 1558, 0 ] ] }, { "id": "metadata/file/profile/language::lang-english--atom-2", "conf": 0.8, "crit": 2, "desc": "English function-word token \"and\"", "spans": [ [ 39768, 0 ] ] }, { "id": "metadata/file/profile/language::lang-english--atom-4", "conf": 0.8, "crit": 2, "desc": "English function-word token \"have\"", "spans": [ [ 38463, 0 ] ] }, { "id": "metadata/file/profile/language::lang-english--atom-5", "conf": 0.8, "crit": 2, "desc": "English function-word token \"for\"", "spans": [ [ 1630, 0 ] ] }, { "id": "metadata/file/profile/language::lang-english--atom-6", "conf": 0.8, "crit": 2, "desc": "English function-word token \"with\"", "spans": [ [ 1414, 0 ] ] }, { "id": "metadata/file/profile/language::lang-english--atom-7", "conf": 0.8, "crit": 2, "desc": "English function-word token \"this\"", "spans": [ [ 7123, 0 ] ] }, { "id": "metadata/lang/encoded/unicode-escape::python-unicode-escape-js-basename", "conf": 0.98, "crit": 1, "desc": "Unicode-decoded JavaScript bundle basename", "spans": [ [ 0, 0 ] ] }, { "id": "metadata/lang/encoded/unicode-escape::python-unicode-escape-webpack-require", "conf": 0.98, "crit": 1, "desc": "Webpack require marker in decoded source", "spans": [ [ 2743, 0 ] ] }, { "id": "micro-behaviors/communications/http/headers::boundary-param", "atk": "T1071.001", "mbc": "C0002", "conf": 0.5, "crit": 2, "desc": "Contains an HTTP multipart boundary parameter", "spans": [ [ 6380, 0 ] ] }, { "id": "micro-behaviors/communications/http/url/query::query-serializer-call", "conf": 0.9, "crit": 3, "desc": "Calls a URL query serializer", "spans": [ [ 26249, 18 ], [ 32293, 15 ] ] }, { "id": "micro-behaviors/communications/socket/send::socket-send-method-short", "atk": "T1071", "mbc": "C0001", "conf": 0.85, "crit": 3, "desc": "Short Python socket send call", "spans": [ [ 4245, 12 ] ] }, { "id": "micro-behaviors/data/serialize/envelope::result-assignment-key", "conf": 0.4, "crit": 1, "desc": "Result field or assignment key", "spans": [ [ 2508, 0 ] ] }, { "id": "micro-behaviors/fs/read/file::file-read-content", "atk": "T1005", "mbc": "E1005", "conf": 0.6, "crit": 2, "desc": "Reads file content (Python)", "spans": [ [ 61991, 0 ] ] }, { "id": "metadata/file/metrics::low-whitespace", "conf": 0.7, "crit": 2, "desc": "Very low whitespace ratio (minified/compressed)", "spans": [ [ 0, 0 ] ] }, { "id": "metadata/file/metrics::python-high-anonymous-function-count", "conf": 0.8, "crit": 3, "desc": "Python file has many anonymous functions", "spans": [ [ 0, 28 ] ] }, { "id": "metadata/file/profile/identity::sequential-identifiers", "conf": 0.8, "crit": 2, "desc": "Sequential source identifier names", "spans": [ [ 0, 0 ] ] }, { "id": "metadata/package/error-handling::catch-keyword", "conf": 0.5, "crit": 2, "desc": "Contains a catch error handler", "spans": [ [ 3073, 0 ] ] }, { "id": "objectives/anti-static/obfuscation/code-metrics/structure::last-line-over-1000", "atk": "T1027", "mbc": "B0032", "conf": 0.9, "crit": 1, "desc": "Last line is over 1000 chars", "spans": [ [ 0, 0 ] ] }, { "id": "objectives/anti-static/obfuscation/code-metrics/structure::single-long-line-outlier", "atk": "T1027", "mbc": "B0032", "conf": 0.9, "crit": 1, "desc": "Exactly one line exceeds 1000 chars", "spans": [ [ 0, 0 ] ] }, { "id": "metadata/lang/encoded/unicode-escape::python-unicode-escape-webpack-marker", "conf": 0.98, "crit": 1, "desc": "Webpack marker in decoded source", "uses": [ 7 ], "spans": [ [ 2743, 0 ] ] }, { "id": "micro-behaviors/communications/http/headers::multipart-upload", "atk": "T1071.001", "mbc": "C0002", "conf": 0.6, "crit": 3, "desc": "Multipart form data upload", "uses": [ 8 ], "spans": [ [ 6380, 9 ] ] }, { "id": "micro-behaviors/communications/socket/send::socket-send-method", "atk": "T1071", "mbc": "C0001", "conf": 0.85, "crit": 3, "desc": "Python socket-like send call", "uses": [ 10 ], "spans": [ [ 4245, 12 ] ] }, { "id": "micro-behaviors/communications/socket/receive::socket-data-transfer", "atk": "T1071", "mbc": "C0001", "conf": 0.7, "crit": 3, "desc": "Socket data transfer operations", "uses": [ 21 ], "spans": [ [ 4245, 12 ] ] } ] } ] } }