{
  "ml": {
    "v": "7",
    "id": 807,
    "lvl": -1,
    "conf": 0,
    "prob": 0.00001146395970863523,
    "type": "npm",
    "version": "v18.18",
    "analyzed_at": "2026-09-14T05:50:41Z"
  },
  "path": "@agent-vm-control-protocol-contracts-0.0.150.tgz",
  "raw": {
    "rev": "c7f7e",
    "files": [
      {
        "id": 807,
        "ctx": [
          {
            "b": "abZy80000000zQKyJ[I\u003eVIMJQ6$z$?Wy{cZ}i+pev\u003e0\u003c^W6qj6VysOqt:Ir}IlP-7b\u0026}J]%mZ\u003cA4?X\u003cyLcQT=DV5:85Rm=afF:KO0chYp}rcPufaSWXt[jZ{Zhwu)@}rNC)ri?$Ei3f7)rh.jE@hQb?Bu[uJM}gt+i0q.9KL",
            "ln": 0
          }
        ],
        "mol": "K(Li)Md(Pa₇)",
        "pid": 276,
        "rel": "fetched",
        "sha": "da549b6dfe2af13e17c7fc84df424d7e46cb40155b98ce105ec1545627decb76",
        "via": "https://registry.npmjs.org/@agent-vm/control-protocol-contracts/-/control-protocol-contracts-0.0.150.tgz",
        "path": "pkg:npm/%40agent-vm/control-protocol-contracts@0.0.150",
        "refs": [
          {
            "to": "pkg:github/shravansunder/agent-vm",
            "off": 0,
            "kind": "repository"
          }
        ],
        "risk": 5,
        "size": 11764,
        "type": "npm",
        "depth": 2,
        "facts": {
          "metrics": {
            "file": {
              "size": 11764,
              "entropy": 7.98
            },
            "parse": {
              "error_count": 1
            },
            "binary": {
              "peak_region_bytes": 11764,
              "peak_region_entropy": 7.81
            },
            "consistency": {
              "self_dependency": 0,
              "unused_runtime_deps": 0
            }
          }
        },
        "ident": {
          "name": {
            "value": "@agent-vm/control-protocol-contracts",
            "source": "npm.name",
            "verified": false
          },
          "urls": [
            {
              "url": "git+https://github.com/ShravanSunder/agent-vm.git",
              "kind": "repository",
              "source": "npm.repository.url"
            },
            {
              "url": "https://github.com/ShravanSunder/agent-vm#readme",
              "kind": "homepage",
              "source": "npm.homepage"
            }
          ],
          "trust": "unsigned",
          "emails": [
            "ShravanSunder@users.noreply.github.com"
          ],
          "authors": [
            {
              "name": "Shravan Sunder",
              "role": "author",
              "email": "ShravanSunder@users.noreply.github.com",
              "source": "npm.author"
            }
          ],
          "version": {
            "value": "0.0.150",
            "source": "npm.version",
            "verified": false
          },
          "identifier": {
            "value": "@agent-vm/control-protocol-contracts",
            "source": "npm.name",
            "verified": false
          }
        },
        "traits": [
          {
            "id": "metadata/package/files/included::npm-publish-root-manifest",
            "conf": 0.95,
            "crit": 2,
            "desc": "Manifest sits at npm publish root",
            "from": [
              {
                "file": 2
              }
            ]
          },
          {
            "id": "metadata/package/files/package-json::files-array-present",
            "conf": 0.92,
            "crit": 3,
            "desc": "Package.json declares a files allowlist"
          },
          {
            "id": "metadata/file/string/telemetry::session-id-field-js",
            "conf": 0.88,
            "crit": 1,
            "desc": "Contains a session identifier field",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "objectives/anti-static/obfuscation/code-metrics/identifiers::js-high-entropy-identifier-ratio-metric",
            "atk": "T1027",
            "mbc": "B0032",
            "conf": 0.84,
            "crit": 1,
            "desc": "High ratio of entropy-heavy identifiers",
            "from": [
              {
                "file": 3
              }
            ]
          },
          {
            "id": "metadata/package/scripts/build::has-build-script-1",
            "conf": 1.0,
            "crit": 3,
            "desc": "Package has compiled build script",
            "from": [
              {
                "file": 2
              }
            ]
          },
          {
            "id": "micro-behaviors/data/serialize/envelope::result-assignment-key",
            "conf": 0.4,
            "crit": 1,
            "desc": "Result field or assignment key",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "micro-behaviors/data/serialize/json::command-field-key",
            "conf": 0.9,
            "crit": 1,
            "desc": "JSON-like object command field",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "metadata/package/manifest/entrypoint::main-runtime-tree-entrypoint",
            "conf": 0.85,
            "crit": 2,
            "desc": "Package main targets runtime tree"
          },
          {
            "id": "metadata/package/testing/presence/harness::test-or-declaration-file",
            "conf": 0.85,
            "crit": 1,
            "desc": "File is a test or type-declaration source file",
            "from": [
              {
                "file": 810
              }
            ],
            "uses": [
              12
            ]
          },
          {
            "id": "metadata/package/manifest/publishing::npm-public-publish-access",
            "conf": 0.9,
            "crit": 3,
            "desc": "npm package is configured for public publishing"
          },
          {
            "id": "metadata/package/manifest/repository::repo-url-git-host",
            "conf": 0.9,
            "crit": 3,
            "desc": "Repository identifies major Git host"
          },
          {
            "id": "metadata/package/scripts/develop::has-test-script",
            "conf": 1.0,
            "crit": 1,
            "desc": "package.json declares a test script"
          },
          {
            "id": "metadata/file/extension/identity::declaration-file-extension",
            "conf": 1.0,
            "crit": 1,
            "desc": "File uses a source declaration extension",
            "from": [
              {
                "file": 3
              }
            ]
          },
          {
            "id": "metadata/package/scripts/build::pkg-build-script-field",
            "conf": 0.6,
            "crit": 3,
            "desc": "Package declares a build script"
          },
          {
            "id": "metadata/package/manifest/repository::has-repository-field",
            "conf": 0.9,
            "crit": 2,
            "desc": "package.json declares repository metadata"
          },
          {
            "id": "metadata/lang/scripted::dts-declaration-file",
            "conf": 0.99,
            "crit": 2,
            "desc": "TypeScript declaration file",
            "from": [
              {
                "file": 3
              }
            ]
          },
          {
            "id": "metadata/package/manifest/entrypoint::has-multiple-entries",
            "conf": 0.85,
            "crit": 3,
            "desc": "Package has multiple entry points",
            "from": [
              {
                "off": 635,
                "file": 809,
                "line": 21
              }
            ],
            "uses": [
              18,
              23
            ]
          },
          {
            "id": "micro-behaviors/data/serialize/envelope::command-assignment-key",
            "conf": 0.4,
            "crit": 1,
            "desc": "Command field or assignment key",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "metadata/package/manifest/entrypoint::pkg-types-field",
            "conf": 0.9,
            "crit": 3,
            "desc": "Package declares TypeScript types entry"
          },
          {
            "id": "metadata/package/manifest/homepage::homepage-git-host",
            "conf": 0.9,
            "crit": 3,
            "desc": "Homepage points to major Git host"
          },
          {
            "id": "metadata/library/structure::js-distribution-output-path",
            "conf": 0.96,
            "crit": 2,
            "desc": "JavaScript distribution output path",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "metadata/package/files/runtime::javascript-dist-tree-artifact",
            "conf": 0.95,
            "crit": 3,
            "desc": "JavaScript/TypeScript file under dist",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "well-known/lib/core/zod::schema-object-type-reference",
            "conf": 0.99,
            "crit": 3,
            "desc": "Repeated Zod object-schema type references",
            "from": [
              {
                "file": 3
              }
            ]
          },
          {
            "id": "metadata/package/manifest/entrypoint::has-exports-field",
            "conf": 0.85,
            "crit": 2,
            "desc": "package.json declares an exports map"
          },
          {
            "id": "metadata/package/manifest/repository::has-repository-url",
            "conf": 0.85,
            "crit": 2,
            "desc": "package.json declares a repository URL"
          },
          {
            "id": "metadata/lang/source::js-ts-source-basename",
            "conf": 0.95,
            "crit": 2,
            "desc": "JavaScript or TypeScript source filename",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "metadata/build/bundler::has-sourcemap",
            "conf": 0.9,
            "crit": 2,
            "desc": "Code has source map reference",
            "from": [
              {
                "file": 1
              }
            ]
          }
        ]
      }
    ]
  }
}