{
  "ml": {
    "v": "7",
    "id": 298,
    "lvl": -1,
    "conf": 0,
    "prob": 0.000008722146048967261,
    "type": "php",
    "version": "v18.18",
    "analyzed_at": "2026-09-05T18:28:54Z"
  },
  "path": "unzer-tech-toolbox@main",
  "raw": {
    "rev": "479f3",
    "files": [
      {
        "id": 735,
        "mol": "O(S)Md(Bk)",
        "pid": 1,
        "rel": "fetched",
        "sha": "dfd28ab141f1acee7431063c259e9411dfb1bc231117d77b456a2d7003ec63ba",
        "via": "https://codeload.github.com/unzerdev/unzer-tech-toolbox/tar.gz/main",
        "path": "pkg:github/unzerdev/unzer-tech-toolbox@main",
        "risk": 2,
        "size": 1988,
        "type": "gz",
        "depth": 2,
        "facts": {
          "metrics": {
            "file": {
              "size": 1988,
              "entropy": 7.86
            },
            "binary": {
              "peak_region_bytes": 1988,
              "peak_region_entropy": 7.78
            }
          }
        },
        "traits": [
          {
            "id": "objectives/supply-chain/trojanized/build-pipeline::gha-pr-field-run",
            "atk": "T1195.002",
            "conf": 0.94,
            "crit": 3,
            "desc": "GitHub PR field in shell"
          },
          {
            "id": "objectives/supply-chain/trojanized/build-pipeline::gha-pr-title-run-interpolation",
            "atk": "T1195.002",
            "conf": 0.94,
            "crit": 3,
            "desc": "PR title interpolated into shell"
          },
          {
            "id": "metadata/build/ci/secret::action-secret-input",
            "conf": 0.95,
            "crit": 3,
            "desc": "Action input references workflow secret"
          }
        ]
      }
    ]
  }
}