{
  "llm": {
    "conf": 0.49074587,
    "grade": "benign",
    "model": "Qwen/Qwen3.8-27B",
    "before": {
      "lvl": -1,
      "prob": 0.73245656,
      "class": "benign"
    },
    "outcome": "benign",
    "interpretation": "Legitimate Atlassian synthetic check package"
  },
  "ml": {
    "v": "7",
    "eng": "2.9.1",
    "lvl": -1,
    "conf": 0,
    "mods": [
      {
        "cls": 0,
        "raw": 0.73245656,
        "rte": "az",
        "prob": 0.73245656
      },
      {
        "cls": 0,
        "raw": 0.25755596,
        "rte": "az/npm",
        "prob": 0.25755596
      }
    ],
    "prob": 0.73245656,
    "files": [
      {
        "id": 0,
        "lvl": -1,
        "conf": 0,
        "prob": 0.7324565649032593,
        "type": "npm"
      },
      {
        "id": 1,
        "lvl": -1,
        "conf": 0,
        "prob": 0.00002181529998779297,
        "type": "package.json"
      },
      {
        "id": 2,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000013301770195539575,
        "type": "markdown"
      },
      {
        "id": 3,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000016023715943447314,
        "type": "registry"
      },
      {
        "id": 4,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000016570091247558594,
        "type": "registry"
      }
    ],
    "version": "v18.18",
    "analyzed_at": "2026-09-10T14:59:56Z"
  },
  "path": "@atlassian-test-prod-synth-check-1.0.115999.tgz",
  "raw": {
    "files": [
      {
        "id": 0,
        "ctx": [
          {
            "b": "abZy8000000@}T!qes]u5ydRi-O\u003caP7f+U\u0026HVAd}+u$\u003ccs[/vxPVMx(!(SLCRe3}D[008{:WPX)X@ItafTydhErN:d/?cxi/o\u003erw=aZHhQBg^cQms{nf)*\u0026j+WtJEeK-K3R3K:6gm+1(B[u9{Vx)ht[=TZRFw.kQ\u0026cLJ!yt07cFB]c08{7=KK3f=\u003ctw6$aCIj#=!U6GBuQ\u003c-viWQSZH9vplXubHN?N+mF\u003c\u0026EqiYeNfYX?zFD?H#g1TV./0bC(1Xf\u003ec@Ly7avB",
            "ln": 0
          }
        ],
        "mol": "O(S₂)Md(Pa₆)",
        "sha": "da561dfcb665831d9f44ee037b513269fdd29e0924e388982f560a41bd33f3c0",
        "path": "@atlassian-test-prod-synth-check-1.0.115999.tgz",
        "risk": 42,
        "size": 460,
        "type": "npm",
        "facts": {
          "metrics": {
            "file": {
              "size": 460,
              "entropy": 7.47
            },
            "parse": {
              "error_count": 1
            },
            "binary": {
              "peak_region_bytes": 460,
              "peak_region_entropy": 7.47
            },
            "consistency": {
              "self_dependency": 0
            }
          }
        },
        "ident": {
          "name": {
            "value": "@atlassian-test-prod/synth-check",
            "source": "npm.name",
            "verified": false
          },
          "urls": [
            {
              "url": "https://aui.atlassian.com",
              "kind": "homepage",
              "source": "npm.homepage"
            }
          ],
          "trust": "unsigned",
          "version": {
            "value": "1.0.115999",
            "source": "npm.version",
            "verified": false
          },
          "identifier": {
            "value": "@atlassian-test-prod/synth-check",
            "source": "npm.name",
            "verified": false
          }
        },
        "traits": [
          {
            "id": "metadata/package/license::npm-undescribed-isc-license",
            "atk": "T1195.002",
            "conf": 0.95,
            "crit": 3,
            "desc": "Undescribed npm package uses ISC license"
          },
          {
            "id": "metadata/package/scripts/develop::npm-init-default-test",
            "conf": 0.95,
            "crit": 1,
            "desc": "Default npm-init placeholder test script"
          },
          {
            "id": "metadata/package/quality/empty::npm-empty-description",
            "conf": 0.85,
            "crit": 2,
            "desc": "package.json description field is empty"
          },
          {
            "id": "metadata/package/versioning::mature-version",
            "conf": 0.7,
            "crit": 2,
            "desc": "Major version is 1 or higher"
          },
          {
            "id": "metadata/package/manifest/publishing::has-publish-config",
            "conf": 0.85,
            "crit": 3,
            "desc": "npm manifest declares publishConfig"
          },
          {
            "id": "metadata/package/scripts/develop::has-test-script",
            "conf": 1.0,
            "crit": 1,
            "desc": "package.json declares a test script"
          },
          {
            "id": "metadata/package/manifest/entrypoint::main-root-javascript-entry",
            "conf": 0.9,
            "crit": 2,
            "desc": "Root JavaScript main entrypoint"
          },
          {
            "id": "metadata/package/quality/empty::npm-has-name",
            "conf": 1.0,
            "crit": 2,
            "desc": "package.json defines a package name"
          },
          {
            "id": "objectives/supply-chain/impersonation/manifest/placeholder::mature-hollow-index-package",
            "atk": "T1195.002",
            "mbc": "B0024",
            "conf": 0.9,
            "crit": 3,
            "desc": "Mature hollow package advertises default index entry",
            "from": [
              {
                "off": 77,
                "file": 1,
                "line": 4
              }
            ],
            "uses": [
              1,
              2,
              3,
              12,
              13
            ]
          },
          {
            "id": "metadata/package/quality/scoring::npm-unmodified-init-skeleton",
            "conf": 0.85,
            "crit": 3,
            "desc": "Unmodified npm init skeleton package",
            "from": [
              {
                "off": 388,
                "file": 1,
                "line": 17
              }
            ],
            "uses": [
              0,
              1,
              2,
              3,
              13
            ]
          },
          {
            "id": "supply-chain/missing-author",
            "conf": 0.5,
            "crit": 3,
            "desc": "Package has empty or missing author field"
          },
          {
            "id": "metadata/package/versioning::npm-has-version",
            "conf": 1.0,
            "crit": 2,
            "desc": "package.json defines a package version"
          },
          {
            "id": "metadata/package/quality/empty::npm-no-keywords",
            "conf": 0.5,
            "crit": 2,
            "desc": "package.json has no keywords"
          },
          {
            "id": "metadata/package/quality/empty::npm-empty-author",
            "conf": 0.75,
            "crit": 2,
            "desc": "package.json author field is empty"
          },
          {
            "id": "metadata/package/files/package-json::files-array-present",
            "conf": 0.92,
            "crit": 3,
            "desc": "Package.json declares a files allowlist"
          },
          {
            "id": "metadata/package/manifest/name::npm-name-test",
            "atk": "T1195.002",
            "conf": 0.65,
            "crit": 3,
            "desc": "npm package name contains 'test'"
          },
          {
            "id": "metadata/package/files/included::npm-publish-root-manifest",
            "conf": 0.95,
            "crit": 2,
            "desc": "Manifest sits at npm publish root",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "metadata/package/manifest/entrypoint::npm-main-entrypoint-not-shipped",
            "conf": 0.92,
            "crit": 3,
            "desc": "npm main entrypoint absent from archive",
            "from": [
              {
                "file": 1
              }
            ],
            "uses": [
              6,
              16
            ],
            "spans": [
              [
                0,
                20
              ]
            ]
          },
          {
            "id": "objectives/supply-chain/trojanized/dist::release-ships-no-runtime-code",
            "atk": "T1195.002",
            "conf": 0.9,
            "crit": 4,
            "desc": "Release declares an entry point it omits",
            "from": [
              {
                "file": 1
              }
            ],
            "uses": [
              17
            ],
            "spans": [
              [
                0,
                20
              ]
            ]
          }
        ]
      },
      {
        "ctx": [
          {
            "b": "DKp(rb5Q?awG\u003ceTb0YNUy*?yax\u003c\u003e)hBy/JnePt-Gwg@1HzGGLzv}YB-yA+qparR\u003eKwPz\u003caz/c:War\u0026J)fFk7mh90VSa$K6zar\u003eucB7ol8Acb/jzx.a:a%FMBarR\u003eBvqfQ6iV]RXzE^s6e]2CKed9Hxb6dmmx(Ffnb03\u0026[3lQDlar\u003e]sB95P!ar\u003exbxM21#b1lJ)z/N(YzF{UtwPI@oB8UY2x\u003ez6\u003cwlZr3cmf\u003cDCXImxf^l@EaBL^FarR\u003eux(4v4b03\u0026J3lQDlar\u003e=kv@2H=wId.sz/c:aarT@v3lQDnxM4:0Aa9x\u003cb03?\u003cxMOunB2\u003e%cvrDopvrur]B8#57zz2Bqz6yIrarR\u003eEBZ/f3B7^{VzF0P}b03\u0026[3lQDlar\u003e\u0026qxk8BeA^n\u0026\u0026ar\u003eGvBz#pZfe4oMv@2H=wPGFjBzLxbB7]62e[n*pfjw*lfk+-Cfk+-CePt\u0026wy?Wx63lQEted9Hxb4kRoxM4]niV]Q\u003ced9Hxb5y$6wO#N2b03?\u003cnMd#2ed9Hxb4Ln7wO#3\u0026zEWx(B0rT/DKp(rarR\u003eAvru74BrS:*b3(@Qga\u003em83lQEt3vJl",
            "ln": 0,
            "col": 1,
            "line": 1
          }
        ],
        "depth": 1,
        "facts": {
          "imp": [
            [
              "^0.2.0",
              "latest"
            ]
          ],
          "metrics": {
            "file": {
              "size": 455,
              "entropy": 4.69
            },
            "binary": {
              "peak_region_bytes": 455,
              "peak_region_entropy": 4.69
            },
            "references": {
              "declared_count": 1,
              "unresolved_count": 0,
              "security_hold_count": 0,
              "unresolved_extension_count": 0
            }
          }
        },
        "id": 1,
        "mol": "O(S)Md(Pa₅)",
        "path": "@atlassian-test-prod-synth-check-1.0.115999.tgz!!package/package.json",
        "pid": 0,
        "refs": [
          {
            "to": "pkg:npm/latest",
            "off": 431,
            "kind": "dependency"
          },
          {
            "to": "index.js",
            "off": 107,
            "kind": "local"
          }
        ],
        "risk": 6,
        "sha": "38aecde0a61786af59ba76bd4d0f0661b9142306e516d2aed0493db0d03e7df7",
        "size": 455,
        "traits": [
          {
            "id": "supply-chain/missing-author",
            "conf": 0.5,
            "crit": 3,
            "desc": "Package has empty or missing author field",
            "spans": [
              [
                0,
                21
              ]
            ]
          },
          {
            "id": "metadata/package/files/included::npm-publish-root-manifest",
            "conf": 0.95,
            "crit": 2,
            "desc": "Manifest sits at npm publish root",
            "spans": [
              [
                0,
                0
              ]
            ]
          },
          {
            "id": "metadata/package/files/package-json::files-array-present",
            "conf": 0.92,
            "crit": 3,
            "desc": "Package.json declares a files allowlist",
            "spans": [
              [
                198,
                14
              ]
            ]
          },
          {
            "id": "metadata/package/manifest/entrypoint::main-root-javascript-entry",
            "conf": 0.9,
            "crit": 2,
            "desc": "Root JavaScript main entrypoint",
            "spans": [
              [
                98,
                0
              ]
            ]
          },
          {
            "id": "metadata/package/manifest/name::npm-name-test",
            "atk": "T1195.002",
            "conf": 0.65,
            "crit": 3,
            "desc": "npm package name contains 'test'",
            "spans": [
              [
                4,
                32
              ]
            ]
          },
          {
            "id": "metadata/package/manifest/publishing::has-publish-config",
            "conf": 0.85,
            "crit": 3,
            "desc": "npm manifest declares publishConfig",
            "spans": [
              [
                278,
                64
              ]
            ]
          },
          {
            "id": "metadata/package/quality/empty::npm-empty-description",
            "conf": 0.85,
            "crit": 2,
            "desc": "package.json description field is empty",
            "spans": [
              [
                77,
                0
              ]
            ]
          },
          {
            "id": "metadata/package/quality/empty::npm-has-name",
            "conf": 1.0,
            "crit": 2,
            "desc": "package.json defines a package name",
            "spans": [
              [
                4,
                0
              ]
            ]
          },
          {
            "id": "metadata/package/scripts/develop::has-test-script",
            "conf": 1.0,
            "crit": 1,
            "desc": "package.json declares a test script",
            "spans": [
              [
                137,
                0
              ]
            ]
          },
          {
            "id": "metadata/package/scripts/develop::npm-init-default-test",
            "conf": 0.95,
            "crit": 1,
            "desc": "Default npm-init placeholder test script",
            "spans": [
              [
                137,
                0
              ]
            ]
          },
          {
            "id": "metadata/package/versioning::npm-has-version",
            "conf": 1.0,
            "crit": 2,
            "desc": "package.json defines a package version",
            "spans": [
              [
                50,
                0
              ]
            ]
          },
          {
            "id": "metadata/package/license::npm-undescribed-isc-license",
            "atk": "T1195.002",
            "conf": 0.95,
            "crit": 3,
            "desc": "Undescribed npm package uses ISC license",
            "spans": [
              [
                388,
                3
              ]
            ]
          },
          {
            "id": "metadata/package/quality/empty::npm-empty-author",
            "conf": 0.75,
            "crit": 2,
            "desc": "package.json author field is empty",
            "spans": [
              [
                372,
                0
              ]
            ]
          },
          {
            "id": "metadata/package/quality/empty::npm-no-keywords",
            "conf": 0.5,
            "crit": 2,
            "desc": "package.json has no keywords"
          },
          {
            "id": "metadata/package/versioning::mature-version",
            "conf": 0.7,
            "crit": 2,
            "desc": "Major version is 1 or higher",
            "spans": [
              [
                50,
                0
              ]
            ]
          },
          {
            "id": "metadata/package/quality/scoring::npm-unmodified-init-skeleton",
            "conf": 0.85,
            "crit": 3,
            "desc": "Unmodified npm init skeleton package",
            "uses": [
              6,
              9,
              11,
              12,
              14
            ],
            "spans": [
              [
                50,
                23
              ],
              [
                77,
                0
              ],
              [
                137,
                41
              ],
              [
                388,
                3
              ]
            ]
          },
          {
            "id": "objectives/supply-chain/impersonation/manifest/placeholder::mature-hollow-index-package",
            "atk": "T1195.002",
            "mbc": "B0024",
            "conf": 0.9,
            "crit": 3,
            "desc": "Mature hollow package advertises default index entry",
            "uses": [
              6,
              9,
              12,
              13,
              14
            ],
            "spans": [
              [
                50,
                23
              ],
              [
                77,
                0
              ],
              [
                98,
                8
              ],
              [
                137,
                41
              ]
            ]
          },
          {
            "id": "metadata/package/manifest/name::npm-no-name-field",
            "conf": 0.9,
            "crit": 3,
            "desc": "package.json omits name field"
          }
        ],
        "type": "package.json"
      },
      {
        "ctx": [
          {
            "b": "boPo)Bzkt}v@#TfC{2N{A^7@jwmY^7q*An5xK#p1v\u003c1cLwN/H%3jo:Cx(+zqwPhNex([olC{3QnzGGr3zGu}xxK@rcD2v.qwPRS@ay/7@v@3cdw]zYjBzbkdl2}6Yw)]g\u003ez/QaCmSir\u003evrb)\u0026AV/BmA=#ebwI9",
            "ln": 0,
            "col": 1,
            "line": 1
          }
        ],
        "depth": 1,
        "facts": {
          "metrics": {
            "file": {
              "size": 126,
              "entropy": 4.19
            },
            "text": {
              "lines": 3,
              "top_char": 114,
              "space_count": 14,
              "char_entropy": 4.19,
              "unique_chars": 26,
              "top_char_null": 0,
              "top_char_ratio": 0.11,
              "avg_line_length": 41.33,
              "max_line_length": 84,
              "empty_line_ratio": 0.33,
              "last_line_length": 84,
              "whitespace_ratio": 0.13,
              "line_length_stddev": 34.31,
              "max_whitespace_run": 1
            },
            "binary": {
              "peak_region_bytes": 126,
              "peak_region_entropy": 4.19
            }
          }
        },
        "id": 2,
        "mol": "Md",
        "path": "@atlassian-test-prod-synth-check-1.0.115999.tgz!!package/README.md",
        "pid": 0,
        "risk": 1,
        "sha": "5ee8a1d5e1f0f4641dbc12c4df203ccb0a647017fcb3241afca6b26db345cf53",
        "size": 126,
        "traits": [
          {
            "id": "metadata/file/naming::uppercase-readme-md-basename",
            "conf": 1.0,
            "crit": 3,
            "desc": "Basename is uppercase README.md"
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-1",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"the\"",
            "spans": [
              [
                67,
                0
              ]
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-5",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"for\"",
            "spans": [
              [
                88,
                0
              ]
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-7",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"this\"",
            "spans": [
              [
                42,
                0
              ]
            ]
          }
        ],
        "type": "markdown"
      },
      {
        "ctx": [
          {
            "b": "DM)3hz/ZhBBy/qkiWeDXz6yIPzEEx[b03]:vru74BrSmWC4CYnx(v(kiWcmgga\u003em8efY4QvR/+1xK$ZYvrrXOf/gTxgDmxNgCZNavp%dUwmo+8b04Logb7m6y*?A%B97=jwPz\u003caz/c:Wa$$S8e?!F2b4kRoxM4]niWc$2C4z^+wmP%fefYgIBzLIji=o7Ry+c=vwPIv4x(Ffdz/c:Wb1c0:wD",
            "ln": 0,
            "col": 1,
            "line": 1
          }
        ],
        "depth": 2,
        "facts": {
          "metrics": {
            "file": {
              "size": 900,
              "entropy": 4.79
            },
            "binary": {
              "peak_region_bytes": 900,
              "peak_region_entropy": 4.79
            },
            "registry": {
              "age_days": 4220,
              "maintainers": 1,
              "published_at": 1424389733,
              "releases_24h": 0,
              "releases_48h": 0,
              "is_deprecated": 0,
              "release_count": 6,
              "security_hold": 0,
              "version_removed": 0,
              "package_age_days": 5125,
              "first_published_at": 1346196738,
              "has_install_script": 0,
              "previous_published_at": 1373899361,
              "publisher_in_maintainers": 1,
              "days_since_previous_release": 584
            }
          }
        },
        "id": 3,
        "mol": "Md(Re)",
        "path": "latest@0.2.0.registry.json",
        "pid": 1,
        "rel": "registry",
        "risk": 1,
        "role": "sidecar",
        "sha": "87a996902beac1bc79b9a87ae6d64c3877eb13ddd805236e3b149f0645927975",
        "size": 900,
        "traits": [
          {
            "id": "metadata/registry::dormant-package-reawakened",
            "conf": 1.0,
            "crit": 3,
            "desc": "Package resumed releases after one year",
            "spans": [
              [
                0,
                45
              ]
            ]
          }
        ],
        "type": "registry"
      },
      {
        "ctx": [
          {
            "b": "DM)3hz/ZhBBy/qkiWeDXz6yIPzEEx[b03]kvrur]B8#57zy]%wB960MA=kFwB9RUBxF0.cwN/H1efYmGA=U@kzx.a=f!Ldjf!\u003eKCixnomb5?Wly?W%7wN]dRBrS+2h-J-Qh8E0Eiv(v.xjUBXvr(]riXS9ey*?A%B97=jwPz\u003caz/c:Wa#7Y7e?]7rixo8zefXIBBn",
            "ln": 0,
            "col": 1,
            "line": 1
          }
        ],
        "depth": 1,
        "facts": {
          "metrics": {
            "file": {
              "size": 914,
              "entropy": 4.84
            },
            "binary": {
              "peak_region_bytes": 914,
              "peak_region_entropy": 4.84
            },
            "registry": {
              "age_days": 0,
              "file_count": 2,
              "maintainers": 1,
              "published_at": 1787854099,
              "releases_24h": 96,
              "releases_48h": 192,
              "is_deprecated": 0,
              "release_count": 24983,
              "security_hold": 0,
              "unpacked_size": 581,
              "version_removed": 0,
              "downloads_recent": 1953406,
              "package_age_days": 261,
              "first_published_at": 1765249522,
              "has_install_script": 0,
              "previous_published_at": 1787853215,
              "publisher_in_maintainers": 1,
              "days_since_previous_release": 0
            }
          }
        },
        "id": 4,
        "mol": "Md(Re)",
        "path": "@atlassian-test-prod_synth-check@1.0.115999.registry.json",
        "pid": 0,
        "rel": "registry",
        "risk": 1,
        "role": "sidecar",
        "sha": "e8c5ac5f033c592bf0ba8cd250682ec7dc8de96d193a025be0ebc19a0125f508",
        "size": 914,
        "traits": [
          {
            "id": "metadata/registry::publish-burst-24h",
            "conf": 1.0,
            "crit": 3,
            "desc": "Three releases published within 24 hours",
            "spans": [
              [
                0,
                29
              ]
            ]
          },
          {
            "id": "metadata/registry::freshly-published",
            "conf": 1.0,
            "crit": 3,
            "desc": "Release published within seven days",
            "spans": [
              [
                0,
                24
              ]
            ]
          }
        ],
        "type": "registry"
      }
    ],
    "rev": "52359",
    "v": "8"
  }
}