{
  "ml": {
    "v": "7",
    "eng": "2.1.0-rc.2",
    "lvl": -1,
    "conf": 0,
    "mods": [
      {
        "cls": 0,
        "raw": 0.7966953,
        "rte": "az",
        "prob": 0.7966953
      },
      {
        "cls": 0,
        "raw": 0.75600183,
        "rte": "az/npm",
        "prob": 0.75600183
      }
    ],
    "prob": 0.7966953,
    "files": [
      {
        "id": 0,
        "lvl": -1,
        "conf": 0,
        "prob": 0.7966952919960022,
        "type": "npm"
      },
      {
        "id": 1,
        "lvl": -1,
        "conf": 0,
        "prob": 0.1989215463399887,
        "type": "package.json"
      }
    ],
    "version": "v18.18",
    "analyzed_at": "2026-06-20T05:00:21Z"
  },
  "path": "eslint-plugin-bug-overrides-1000.0.21.tgz",
  "raw": {
    "files": [
      {
        "id": 0,
        "mol": "O(S₂)Md(Pa₃)",
        "sha": "d2688c993e26fef570e1fda00b8c26c9509116ba9462df4c940d71ed7b7adefd",
        "path": "/data/samples/bad/foraged/javascript/npmjs.org/jfrog/eslint-plugin-bug-overrides/eslint-plugin-bug-overrides-1000.0.21.tgz",
        "risk": 35,
        "size": 230,
        "type": "npm",
        "facts": {
          "metrics": {
            "file": {
              "size": 230.0,
              "entropy": 7.12,
              "size_bytes": 230.0
            },
            "parse": {
              "error_count": 1.0
            },
            "binary": {
              "overall_entropy": 7.12
            }
          }
        },
        "ident": {
          "name": {
            "value": "eslint-plugin-bug-overrides",
            "source": "npm.name",
            "verified": false
          },
          "trust": "unsigned",
          "version": {
            "value": "1000.0.21",
            "source": "npm.version",
            "verified": false
          },
          "identifier": {
            "value": "eslint-plugin-bug-overrides",
            "source": "npm.name",
            "verified": false
          }
        },
        "traits": [
          {
            "id": "objectives/supply-chain/impersonation/manifest/skeleton::desc-placeholder-package",
            "conf": 0.75,
            "crit": 3,
            "desc": "Description mentions placeholder package"
          },
          {
            "id": "metadata/package/manifest/freeform::pkg-skeleton-small",
            "conf": 0.699999988079071,
            "crit": 3,
            "desc": "Tiny package.json (metadata only)",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "objectives/supply-chain/impersonation/manifest/attack-label::desc-package-poc",
            "conf": 0.8399999737739563,
            "crit": 3,
            "desc": "Description labels package as PoC"
          },
          {
            "id": "supply-chain/missing-author",
            "crit": 3,
            "desc": "Package has empty or missing author field"
          },
          {
            "id": "objectives/supply-chain/impersonation/manifest/attack-label::bug-bounty-marker-2",
            "conf": 0.75,
            "crit": 3,
            "desc": "Bug bounty marker 2",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "metadata/package/versioning::npm-unrealistic-major-version",
            "conf": 0.8500000238418579,
            "crit": 3,
            "desc": "suspect major version (90+) for npm package"
          },
          {
            "id": "metadata/package/versioning::mature-version",
            "conf": 0.699999988079071,
            "crit": 3,
            "desc": "Major version is 1 or higher"
          },
          {
            "id": "metadata/package/versioning::npm-version-major-40-plus",
            "atk": "T1195.002",
            "conf": 0.8199999928474426,
            "crit": 4,
            "desc": "npm package version major 40+"
          },
          {
            "id": "metadata/package/manifest/description::has-description",
            "conf": 0.75,
            "crit": 3,
            "desc": "Package has meaningful description"
          }
        ]
      },
      {
        "ctx": [
          {
            "b": "DJ",
            "ln": 1,
            "addr": 0
          },
          {
            "b": "arR\u003eCvqPN1iV]RTB8kMdBs?DFB.tAaeN\u0026\u003cnePk/zA=L(8wPG4D",
            "ln": 2,
            "addr": 2
          },
          {
            "b": "arR\u003eKwPz\u003caz/c:War\u0026J]fFCake\u00262d9ec",
            "ln": 3,
            "addr": 43
          },
          {
            "b": "arR\u003eswPIv4x(Ffdz/c:War\u003cN0A=2l3aw=#zaMv{naz#9uAaa3dz^^feavG^MwO#N6C4z!ny***+xM4Y$wPxyEec",
            "ln": 4,
            "addr": 69
          },
          {
            "b": "arR\u003eAx\u003e7Z(B7DKRar\u003cJKr3z",
            "ln": 5,
            "addr": 139
          },
          {
            "b": "Ee",
            "ln": 6,
            "addr": 158
          }
        ],
        "depth": 1,
        "facts": {
          "metrics": {
            "file": {
              "size": 160.0,
              "entropy": 4.78,
              "size_bytes": 160.0
            },
            "binary": {
              "overall_entropy": 4.78
            }
          }
        },
        "id": 1,
        "mol": "O(S₂)Md(Pa₃)",
        "path": "/data/samples/bad/foraged/javascript/npmjs.org/jfrog/eslint-plugin-bug-overrides/eslint-plugin-bug-overrides-1000.0.21.tgz!!package/package.json",
        "risk": 35,
        "sha": "df67d383855d8a8f84d8d21f625907d5b2968ca350447892dc21c1866cec0ec2",
        "size": 160,
        "traits": [
          {
            "id": "supply-chain/missing-author",
            "crit": 3,
            "desc": "Package has empty or missing author field",
            "spans": [
              [
                0,
                21
              ]
            ]
          },
          {
            "id": "objectives/supply-chain/impersonation/manifest/skeleton::desc-placeholder-package",
            "conf": 0.75,
            "crit": 3,
            "desc": "Description mentions placeholder package",
            "spans": [
              [
                71,
                49
              ]
            ]
          },
          {
            "id": "metadata/package/manifest/description::has-description",
            "conf": 0.75,
            "crit": 3,
            "desc": "Package has meaningful description",
            "spans": [
              [
                71,
                49
              ]
            ]
          },
          {
            "id": "objectives/supply-chain/impersonation/manifest/attack-label::bug-bounty-marker-2",
            "conf": 0.75,
            "crit": 3,
            "desc": "Bug bounty marker 2",
            "spans": [
              [
                94,
                3
              ]
            ]
          },
          {
            "id": "objectives/supply-chain/impersonation/manifest/attack-label::desc-package-poc",
            "conf": 0.8399999737739563,
            "crit": 3,
            "desc": "Description labels package as PoC",
            "spans": [
              [
                71,
                49
              ]
            ]
          },
          {
            "id": "metadata/package/versioning::npm-unrealistic-major-version",
            "conf": 0.8500000238418579,
            "crit": 3,
            "desc": "suspect major version (90+) for npm package",
            "spans": [
              [
                45,
                9
              ]
            ]
          },
          {
            "id": "metadata/package/versioning::mature-version",
            "conf": 0.699999988079071,
            "crit": 3,
            "desc": "Major version is 1 or higher",
            "spans": [
              [
                45,
                9
              ]
            ]
          },
          {
            "id": "metadata/package/manifest/freeform::pkg-skeleton-small",
            "conf": 0.699999988079071,
            "crit": 3,
            "desc": "Tiny package.json (metadata only)",
            "spans": [
              [
                0,
                20
              ]
            ]
          },
          {
            "id": "metadata/package/versioning::npm-version-major-40-plus",
            "atk": "T1195.002",
            "conf": 0.8199999928474426,
            "crit": 4,
            "desc": "npm package version major 40+",
            "spans": [
              [
                45,
                9
              ]
            ]
          }
        ],
        "type": "package.json"
      }
    ],
    "rev": "56752",
    "v": "8"
  }
}