{
  "ml": {
    "v": "7",
    "eng": "2.12.1",
    "lvl": -1,
    "conf": 0,
    "mods": [
      {
        "cls": 0,
        "raw": 0.000031471252,
        "rte": "az",
        "prob": 0.000031471252
      },
      {
        "cls": 0,
        "raw": 0.00038672486,
        "rte": "az/npm",
        "prob": 0.00038672486
      }
    ],
    "prob": 0.000031570595,
    "files": [
      {
        "id": 0,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000031570594728691503,
        "type": "npm"
      },
      {
        "id": 1,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000019391378373256885,
        "type": "text"
      },
      {
        "id": 2,
        "lvl": -1,
        "conf": 0,
        "prob": 0.00003149111944367178,
        "type": "package.json"
      },
      {
        "id": 4,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000031570594728691503,
        "type": "registry"
      }
    ],
    "version": "v18.18",
    "analyzed_at": "2026-10-16T13:39:19Z"
  },
  "path": "@vuu-ui-vuu-protocol-types-3.5.10.tgz",
  "raw": {
    "files": [
      {
        "id": 0,
        "mol": "Md(Pa₃)",
        "sha": "dec4b6929754ba7cee606383903db689931f9d617556c7c467be35165f5f2e82",
        "path": "@vuu-ui-vuu-protocol-types-3.5.10.tgz",
        "risk": 2,
        "size": 8857,
        "type": "npm",
        "facts": {
          "metrics": {
            "file": {
              "size": 8857,
              "entropy": 7.98
            },
            "binary": {
              "peak_region_bytes": 8857,
              "peak_region_entropy": 7.81
            }
          }
        },
        "ident": {
          "name": {
            "value": "@vuu-ui/vuu-protocol-types",
            "source": "npm.name",
            "verified": false
          },
          "trust": "unsigned",
          "authors": [
            {
              "name": "heswell",
              "role": "author",
              "source": "npm.author"
            }
          ],
          "version": {
            "value": "3.5.10",
            "source": "npm.version",
            "verified": false
          },
          "identifier": {
            "value": "@vuu-ui/vuu-protocol-types",
            "source": "npm.name",
            "verified": false
          }
        },
        "traits": [
          {
            "id": "metadata/package/entrypoint::pkg-types-field",
            "conf": 0.9,
            "crit": 3,
            "desc": "Package declares TypeScript types entry"
          },
          {
            "id": "metadata/package/files/included::package-json-basename",
            "conf": 0.95,
            "crit": 3,
            "desc": "Filename is package.json",
            "from": [
              {
                "file": 2
              }
            ]
          },
          {
            "id": "metadata/package/files/package-json::files-array-present",
            "conf": 0.92,
            "crit": 3,
            "desc": "Package.json declares a files allowlist"
          },
          {
            "id": "metadata/package/files/package-json::has-files-field",
            "conf": 0.8,
            "crit": 3,
            "desc": "Package explicitly lists published files"
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-1",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"the\"",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-2",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"and\"",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-3",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"that\"",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-4",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"have\"",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-5",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"for\"",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-6",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"with\"",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-7",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"this\"",
            "from": [
              {
                "file": 1
              }
            ]
          }
        ]
      },
      {
        "depth": 1,
        "facts": {
          "metrics": {
            "file": {
              "size": 10923,
              "entropy": 4.51
            },
            "binary": {
              "peak_region_bytes": 9899,
              "peak_region_entropy": 4.78
            }
          }
        },
        "id": 1,
        "path": "@vuu-ui-vuu-protocol-types-3.5.10.tgz!!package/LICENSE",
        "pid": 106,
        "risk": 1,
        "sha": "d1436cd2ab9ad86c5fd88cf895b05845f5dc564936ce7521608935825e21427c",
        "size": 10923,
        "traits": [
          {
            "id": "metadata/permission/prose::permission-grant-verb-english",
            "conf": 0.9,
            "crit": 2,
            "desc": "Grant or authorization verb text",
            "spans": [
              [
                5068,
                0
              ]
            ]
          },
          {
            "id": "metadata/permission/prose::permission-mandatory-language-english",
            "conf": 0.9,
            "crit": 2,
            "desc": "Forced or mandatory instruction wording",
            "spans": [
              [
                7582,
                0
              ]
            ]
          },
          {
            "id": "metadata/permission/prose::permission-permission-term-english",
            "conf": 0.9,
            "crit": 2,
            "desc": "Permission or access term",
            "spans": [
              [
                7468,
                0
              ]
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-1",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"the\"",
            "spans": [
              [
                263,
                0
              ]
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-2",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"and\"",
            "spans": [
              [
                164,
                0
              ]
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-3",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"that\"",
            "spans": [
              [
                480,
                0
              ]
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-4",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"have\"",
            "spans": [
              [
                4075,
                0
              ]
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-5",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"for\"",
            "spans": [
              [
                179,
                0
              ]
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-6",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"with\"",
            "spans": [
              [
                664,
                0
              ]
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-7",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"this\"",
            "spans": [
              [
                370,
                0
              ]
            ]
          }
        ],
        "type": "text"
      },
      {
        "ctx": [
          {
            "b": "DKp(rb5Q?awG\u003ceTb0Zr]BUd-IflRFXePt-GBz\u003eVcy+o:OAaK8med9Hxb6EKrB7]Mgb03?\u003cgCgKqf!:!53lQDnvrDW9z/N3.ar\u003eGgB9zhiy:7zqarR\u003eAx\u003e7Z(B7DKRar\u003c9\u003cvpJ$ZeIX}ja$K6zar\u003eucAaJ]$wO#0(wPG4RaBwI/3lQDnAaJQ3l$HsGzE^r@v}/H}b03\u0026[EjLZFar\u003eAiy?mViiV}SlarR^Hb57}9wQ2?re{8dU3lQD%ed9Hxb6n9HwPG4Rar\u003eJqwmZ0rwg?$Ba{@.",
            "ln": 0,
            "col": 1,
            "line": 1
          }
        ],
        "depth": 1,
        "facts": {
          "metrics": {
            "file": {
              "size": 223,
              "entropy": 4.58
            },
            "binary": {
              "peak_region_bytes": 223,
              "peak_region_entropy": 4.58
            }
          }
        },
        "id": 2,
        "ident": {
          "name": {
            "value": "@vuu-ui/vuu-protocol-types",
            "source": "npm.name",
            "verified": false
          },
          "trust": "unsigned",
          "authors": [
            {
              "name": "heswell",
              "role": "author",
              "source": "npm.author"
            }
          ],
          "version": {
            "value": "3.5.10",
            "source": "npm.version",
            "verified": false
          },
          "identifier": {
            "value": "@vuu-ui/vuu-protocol-types",
            "source": "npm.name",
            "verified": false
          }
        },
        "mol": "Md(Pa₃)",
        "path": "@vuu-ui-vuu-protocol-types-3.5.10.tgz!!package/package.json",
        "pid": 0,
        "risk": 2,
        "sha": "e9555a18e82297b8524e849d4b65da1add6741f9e993afc69b1114fec20dd5de",
        "size": 223,
        "supp": [
          {
            "by": [
              {
                "id": "metadata/package/freeform::pkg-skeleton-small",
                "spans": [
                  [
                    44,
                    19
                  ]
                ]
              }
            ],
            "id": "metadata/package/dependencies/manifest/presence::npm-no-deps-at-all",
            "crit": "notable",
            "kind": "unless"
          },
          {
            "by": [
              {
                "id": "metadata/package/freeform::pkg-skeleton-benign-context",
                "spans": [
                  [
                    165,
                    12
                  ]
                ]
              }
            ],
            "id": "metadata/package/freeform::pkg-skeleton-small",
            "crit": "notable",
            "kind": "unless"
          }
        ],
        "traits": [
          {
            "id": "metadata/package/entrypoint::pkg-types-field",
            "conf": 0.9,
            "crit": 3,
            "desc": "Package declares TypeScript types entry",
            "spans": [
              [
                200,
                10
              ]
            ]
          },
          {
            "id": "metadata/package/files/included::package-json-basename",
            "conf": 0.95,
            "crit": 3,
            "desc": "Filename is package.json"
          },
          {
            "id": "metadata/package/files/package-json::files-array-present",
            "conf": 0.92,
            "crit": 3,
            "desc": "Package.json declares a files allowlist",
            "spans": [
              [
                165,
                12
              ]
            ]
          },
          {
            "id": "metadata/package/files/package-json::has-files-field",
            "conf": 0.8,
            "crit": 3,
            "desc": "Package explicitly lists published files",
            "spans": [
              [
                165,
                12
              ]
            ]
          }
        ],
        "type": "package.json"
      },
      {
        "depth": 1,
        "facts": {
          "metrics": {
            "file": {
              "size": 788,
              "entropy": 4.76
            },
            "binary": {
              "peak_region_bytes": 788,
              "peak_region_entropy": 4.76
            },
            "registry": {
              "age_days": 0,
              "file_count": 3,
              "releases_24h": 5,
              "releases_48h": 8,
              "is_deprecated": 0,
              "release_count": 506,
              "security_hold": 0,
              "unpacked_size": 32763,
              "published_unix": 1792054377,
              "version_removed": 0,
              "downloads_recent": 9961,
              "maintainer_count": 1,
              "package_age_days": 1402,
              "has_install_script": 0,
              "first_published_unix": 1670862961,
              "previous_published_unix": 1792051040,
              "publisher_in_maintainers": 1,
              "days_since_previous_release": 0
            }
          }
        },
        "id": 4,
        "mol": "Md(Re)",
        "path": "@vuu-ui_vuu-protocol-types@3.5.10.registry.json",
        "pid": 0,
        "rel": "registry",
        "risk": 1,
        "role": "sidecar",
        "sha": "81968b1c274822d0c95c51d715cf69c61a00767bec5505596ec3d76f1ffabcb0",
        "size": 788,
        "traits": [
          {
            "id": "metadata/registry::established-package",
            "conf": 1.0,
            "crit": 3,
            "desc": "Package is at least one year old"
          },
          {
            "id": "metadata/registry::freshly-published",
            "conf": 1.0,
            "crit": 3,
            "desc": "Release published within seven days"
          },
          {
            "id": "metadata/registry::many-releases",
            "conf": 1.0,
            "crit": 3,
            "desc": "Twenty or more releases"
          },
          {
            "id": "metadata/registry::publish-burst-24h",
            "conf": 1.0,
            "crit": 3,
            "desc": "Three releases published within 24 hours"
          },
          {
            "id": "metadata/registry::publish-burst-48h",
            "conf": 1.0,
            "crit": 3,
            "desc": "Three releases published within 48 hours"
          },
          {
            "id": "metadata/registry::single-maintainer",
            "conf": 1.0,
            "crit": 3,
            "desc": "Registry package lists one maintainer"
          }
        ],
        "type": "registry"
      }
    ],
    "rev": "17dc6",
    "v": "8"
  }
}