{ "ml": { "v": "7", "eng": "2.8.0", "lvl": -1, "conf": 0, "mods": [ { "cls": 0, "raw": 0.3341568, "rte": "az", "prob": 0.3341568 }, { "cls": 0, "raw": 0.025541574, "rte": "az/zip", "prob": 0.025541574 } ], "prob": 0.3341568, "files": [ { "id": 0, "lvl": -1, "conf": 0, "prob": 0.3341568112373352, "type": "zip" }, { "id": 2, "lvl": -1, "conf": 0, "prob": 0.000008145968422468286, "type": "zip" }, { "id": 3, "lvl": -1, "conf": 0, "prob": 0.000007927417755126953, "type": "github_actions" }, { "id": 7, "lvl": -1, "conf": 0, "prob": 0.00001051028539222898, "type": "lua" }, { "id": 11, "lvl": -1, "conf": 0, "prob": 0.000009278456673200708, "type": "shell" } ], "version": "v18.18", "analyzed_at": "2026-08-26T00:36:26Z" }, "path": "code-stats.nvim-0.1.1-1.src.rock", "raw": { "files": [ { "id": 0, "ctx": [ { "b": "p!H([6Awak2MSq06j6uM*(zji008/%001bw8#%F!wmWulByxoje]C\u0026Dz7NB]f!Lgjf!NG+v@3d8wN!.t2(\u003e5?+7TN(+7TOMCNBGL1Nc0*00IJ*005pEl66FG5qxPG6\u0026}Y8tHtAmP$J\u0026z9fx9g5e2iTTeeCQx\u003eanP8@3h$Sq\u0026ARbUXS?H2Y?\u0026oUL!3-(V@sLtp#Pn48}9", "ln": 0 } ], "mol": "H₄(Cm₂FOsPo)Md(Bk)", "sha": "e0150c199de6dd4ddb3fc30d21db34264cf92213dab90975397e516d4a0a5e17", "path": "code-stats.nvim-0.1.1-1.src.rock", "risk": 5, "size": 24212, "type": "zip", "facts": { "metrics": { "file": { "size": 24212, "entropy": 7.79 }, "binary": { "peak_region_bytes": 20480, "peak_region_entropy": 7.83 }, "archive": { "file_count": 2, "member_count": 2, "script_count": 0, "zip_bomb_ratio": 2.01, "compressed_size": 23852, "directory_count": 0, "executable_count": 0, "extra_field_size": 48, "noise_file_count": 0, "compression.ratio": 0.98, "hidden_file_count": 0, "uncompressed_size": 24363, "crc_collision_count": 0, "entry_comment_count": 0, "max_filename_length": 32, "rtlo_filename_count": 0, "format.regular_count": 2, "nested_archive_count": 1, "path_traversal_count": 0, "symlink_escape_count": 0, "security.setgid_count": 0, "security.setuid_count": 0, "security.sticky_count": 0, "double_extension_count": 0, "duplicate_member_count": 0, "security.symlink_count": 0, "unicode_filename_count": 0, "homoglyph_filename_count": 0, "security.encrypted_count": 0, "timing.mtime_unique_count": 1, "timing.mtime_unique_ratio": 0.5, "misplaced_executable_count": 0, "timing.mtime_dominant_count": 2, "timing.mtime_spread_seconds": 0, "timing.sentinel_mtime_count": 0, "security.world_writable_count": 0, "timing.mtime_dominant_fraction": 1, "compression.method_counts.stored": 1, "compression.method_counts.deflate": 1 }, "consistency": { "extension_content_mismatch": 1, "extension_content_mismatch.archive_as_unknown": 1 } } }, "traits": [ { "id": "micro-behaviors/communications/http/url/forge::public-code-forge-url", "conf": 0.9, "crit": 3, "desc": "References a public code-forge URL" }, { "id": "micro-behaviors/communications/http/header/content-type::json-header", "conf": 0.9, "crit": 3, "desc": "References HTTP Content-Type application/json" }, { "id": "metadata/file/extension/identity::shell-a", "conf": 1.0, "crit": 2, "desc": "POSIX shell script extension" }, { "id": "metadata/build/github-actions::step-environment-secret-reference", "conf": 0.95, "crit": 3, "desc": "Step environment references an Actions secret" }, { "id": "micro-behaviors/os/package-manager/apt::apt-package-install-command", "conf": 0.98, "crit": 3, "desc": "Runs an APT package install command" }, { "id": "micro-behaviors/fs/directory/chdir::shell-change-directory", "conf": 0.95, "crit": 3, "desc": "Shell changes working directory" }, { "id": "micro-behaviors/process/debug/symbol::lua-debug-module-access", "conf": 0.9, "crit": 3, "desc": "Accesses Lua debug module" } ] }, { "depth": 1, "facts": { "metrics": { "file": { "size": 23346, "entropy": 7.8 }, "binary": { "peak_region_bytes": 19456, "peak_region_entropy": 7.82 }, "archive": { "file_count": 18, "has_comment": 1, "comment_size": 40, "member_count": 26, "script_count": 3, "zip_bomb_ratio": 4.42, "compressed_size": 18832, "directory_count": 8, "executable_count": 3, "extra_field_size": 234, "noise_file_count": 0, "compression.ratio": 0.35, "hidden_file_count": 8, "uncompressed_size": 53416, "crc_collision_count": 0, "entry_comment_count": 0, "max_filename_length": 64, "rtlo_filename_count": 0, "format.regular_count": 18, "nested_archive_count": 0, "path_traversal_count": 0, "symlink_escape_count": 0, "security.setgid_count": 0, "security.setuid_count": 0, "security.sticky_count": 0, "double_extension_count": 0, "duplicate_member_count": 0, "format.directory_count": 8, "security.symlink_count": 0, "unicode_filename_count": 0, "homoglyph_filename_count": 0, "security.encrypted_count": 0, "timing.mtime_unique_count": 1, "timing.mtime_unique_ratio": 0.04, "misplaced_executable_count": 0, "timing.mtime_dominant_count": 26, "timing.mtime_spread_seconds": 0, "timing.sentinel_mtime_count": 0, "security.world_writable_count": 0, "timing.mtime_dominant_fraction": 1, "compression.method_counts.stored": 9, "compression.method_counts.deflate": 17 } } }, "id": 2, "ident": { "name": { "value": "0", "source": "file.basename", "verified": false }, "trust": "unsigned", "version": { "value": "1.1", "source": "file.basename", "verified": false } }, "mol": "H₄(Cm₂FOsPo)Md(Bk)", "path": "code-stats.nvim-0.1.1-1.src.rock!!0.1.1.zip", "pid": 0, "risk": 5, "sha": "9d5cbf2d9682426d45b1dde5ed93641e89141583a17007764c695b85554ad0ce", "size": 23346, "traits": [ { "id": "micro-behaviors/process/debug/symbol::lua-debug-module-access", "conf": 0.9, "crit": 3, "desc": "Accesses Lua debug module" }, { "id": "micro-behaviors/communications/http/url/forge::public-code-forge-url", "conf": 0.9, "crit": 3, "desc": "References a public code-forge URL" }, { "id": "micro-behaviors/communications/http/header/content-type::json-header", "conf": 0.9, "crit": 3, "desc": "References HTTP Content-Type application/json" }, { "id": "micro-behaviors/fs/directory/chdir::shell-change-directory", "conf": 0.95, "crit": 3, "desc": "Shell changes working directory" }, { "id": "metadata/file/extension/identity::shell-a", "conf": 1.0, "crit": 2, "desc": "POSIX shell script extension" }, { "id": "metadata/build/github-actions::step-environment-secret-reference", "conf": 0.95, "crit": 3, "desc": "Step environment references an Actions secret" }, { "id": "micro-behaviors/os/package-manager/apt::apt-package-install-command", "conf": 0.98, "crit": 3, "desc": "Runs an APT package install command" } ], "type": "zip" }, { "ctx": [ { "b": "3lQDlaAg+hxMC+txkRTdwJyevarR^Hat1YWdK)5/wfIv6arR^Hat1ZDz^$BI3lQEnz/PS9y\u0026sJ8wnca7vru0)iTMjez^)=G3lQE2B.LV5iTM#LarUYEzGvyFzAn[.vS=NgBUdArBy/Jn3lQDlaAIToAc15EarR^HarSlUB-RbniV}\u003cvBzkVhB1.3pwN/H]B-Y((gZUuFarR^HeG/7RzAn[/3lQDlarR^HarR!FB.2zkvq{ruxjVfceQnEYAaAy0wEoL5arR^HarR^HB9h2iayPkheOwTpat4\u003cYx(n0lvqG:5y?Wv1B8iBswP!z6arR^Hat1ZUB7GzNaz=gqwO%8rB8%0JBZYrev@3cqByw/lA+f5#vrl0BB#G:JarR^HarR!rzGX5FarR^HarR^HarTuTk#HGCoh/g-p!t1!moIU]bZT(VwN/:(BAo6dry6IUlRyu+k#pcWogr0iEf}8tarR^HarUxgiV]Q\u0026aAITkA==w7x([2pxk8E3BZ=$zwO9FocVS^gB1.SzxlbZNdiY9warR^HarR!Jx-", "ln": 81, "col": 16, "line": 7 } ], "depth": 2, "facts": { "metrics": { "file": { "size": 931, "entropy": 4.56 }, "binary": { "peak_region_bytes": 931, "peak_region_entropy": 4.56 }, "references": { "declared_count": 2, "unresolved_count": 0, "security_hold_count": 0, "unresolved_extension_count": 0 } } }, "id": 3, "mol": "H(Os)Md(Bk)", "path": "code-stats.nvim-0.1.1-1.src.rock!!0.1.1.zip!!code-stats.nvim-0.1.1/.github/workflows/main.yml", "refs": [ { "to": "pkg:github/actions/checkout@v4", "off": 219, "kind": "dependency" }, { "to": "pkg:github/lumen-oss/luarocks-tag-release@v7", "off": 346, "kind": "dependency" }, { "to": "pkg:github/lumen-oss/luarocks-tag-release@v7", "off": 346, "kind": "dependency" } ], "risk": 2, "sha": "56890d3a8ccabe2ef8f794ed48994754e460a079479ad73645493c9422a1826a", "size": 931, "traits": [ { "id": "metadata/build/ci/secret::step-environment-secret-reference", "conf": 0.95, "crit": 3, "desc": "Step environment references an Actions secret" }, { "id": "micro-behaviors/os/package-manager/apt::apt-package-install-command", "conf": 0.98, "crit": 3, "desc": "Runs an APT package install command", "spans": [ [ 287, 33 ] ] } ], "type": "github_actions" }, { "ctx": [ { "b": "eIeK%vQTs?ay/j@B8@Eoz/M%/z!9ATByxoj3t:S\u003cvqE6bwPq\u003c7B98ECjS[=RADL#owGSgqwPq\u003c7B98EE3t:S\u003cvqE63B8L}sjS[=RADL#owGSgbyiarha{@d8v{%f@wn=N3zGWc=aAz4kB.L(car\u003eSAvj=2dBy/uka{[V[z!0i(awA$waBsCrarR^]zV", "ln": 0, "col": 1, "line": 1 }, { "b": "DKp(rarR^HarR^HarU=uzdNTdBrAZ?fFkjl3lQDlarR^HarR^HaA.ZvauZ?\u003exMOunB2\u003e%cv@C)?B97\u0026jB1RuwBt1*?3lQDlarR^HarR^Hazts{wmY!5auZ\u0026]3lQDlarR^HarR^HarR^Hax{iXz/fVdzGEEfD2Nsxt{8oMcT*$ky?Wx/BzkVhfktMDzyl$xarR^HarR^HarR^HarR^HtpiA(wPxv*xjU$5cTv\u0026TasyVqwmWulByxojePb-Cz7^N}f!Ldced9HxarR^HarR^HarR^HarS%Wv}xR3auZ?{dLAn03lQDlarR^HarR^HaBL^FarR^HarR^HEjLZFarR^HarR^UeIf7#BAzFyiXJd0x([f1vLheez7/yqwmWulByxojfjO{hwI4$BvruMxC4\u003e!DeIyNHz^\u003ewivL]#1vkf.@g?p8Iwh2X(wIDe4v(O6PwmPmehz/23w?W!8gC}cBAcVLsz/f!Mv@C)?B97\u0026jB6\u0026J[y?mZlAaK8yAcTROarR^HarR^Hw[=6)BA}?pB09Q*yiarhe[wK6z!9AcwmYj)xd^?dBzkS8zZWs?e]$@NA:@VwzddJ@xEC5\u0026kpwcldk8\u003e]atbn?b4+L9wPSipwId.sz/c:F3lQDlaBKPB3jnvpeKjn-A:-/cv@C)?B97\u0026jB0bNkvR/Qu3n0?YkYQBTB-IvxBywS{wGUG3wmY?7vruL$w{503BzkVhawBEQz!9ATBn", "ln": 238, "col": 16, "line": 11 }, { "b": "arUfjwmY?7vruMyvrc14e[!*8wmY!5tpiJ8k#pc8rbVL-zynZjjS[oNBy/uke[X:qc)}wTl}73Nk#Z=\u0026k#pcWogq#hdgdguarUlkwc%C4arU-pBzUPhvrt{!y?k28z!9B2ByxojefGoDarR^HarR^HuTEI+wmZ0djS[/Sy?s1%arR!PdgdguarUYoBAIRway/t2wPI%4BAm!2zE:7YB7GDgwPRv5vpB4:c}#rYz!9ATByxojefB", "ln": 1090, "col": 7, "line": 33 } ], "depth": 2, "facts": { "imp": [ [ "", "require" ], [ "", "require" ], [ "", "require" ], [ "", "json.decode" ], [ "", "debug.getinfo" ], [ "", "dotenv.load_dotenv" ], [ "", "dotenv.get" ], [ "", "setmetatable" ], [ "", "setmetatable" ], [ "", "pairs" ], [ "", "json.encode" ], [ "", "os.date" ], [ "", "requests.get" ], [ "", "cjson" ], [ "", "lua-dotenv" ], [ "", "requests" ] ], "mbr": [ "M.CodeStats", "M.CodeStats.args", "M.CodeStats.args.headers", "M.CodeStats.new", "args.data", "codestats.args", "codestats.args.headers", "codestats.dotenv", "debug.getinfo", "debug.getinfo().source", "dotenv.get", "dotenv.load_dotenv", "json.decode", "json.encode", "os.date", "requests.get", "self.args", "self.filetypes", "self.xps" ], "tgt": [ "debug.getinfo", "dotenv.get", "dotenv.load_dotenv", "json.decode", "json.encode", "os.date", "pairs", "requests.get", "require", "setmetatable" ], "funcs": [ [ "M.CodeStats:new", 798 ], [ "M.CodeStats:add_xp", 1376 ], [ "M.CodeStats:send_xp", 1580 ] ], "metrics": { "ast": { "op.eq": 1, "op.add": 2, "op.lor": 5, "max_depth": 16, "call_count": 14, "node_count": 591, "member_count": 19, "max_array_len": 6, "op_density.eq": 0, "op_density.add": 0, "op_density.lor": 0.01, "max_concat_chain": 2, "member_depth_max": 4 }, "file": { "size": 1936, "entropy": 4.77 }, "text": { "lines": 70, "top_char": 101, "max_ws_run": 1, "digit_ratio": 0.03, "space_count": 422, "char_entropy": 4.77, "unique_chars": 73, "top_char_null": 0, "string_density": 0.2, "top_char_ratio": 0.07, "avg_line_length": 26.66, "max_line_length": 136, "empty_line_ratio": 0.09, "last_line_length": 8, "long_token_count": 1, "whitespace_ratio": 0.25, "identifier_density": 1.71, "line_length_stddev": 25.04, "normalized_string_count": 1.67, "repeated_char_sequences": 7, "suspicious_comment_ratio": 0.11, "suspicious_identifier_ratio": 0.05, "normalized_unique_identifiers": 6.69 }, "binds": { "count": 14 }, "binary": { "peak_region_bytes": 1936, "peak_region_entropy": 4.77 }, "imports": { "count": 3, "third_party_count": 3, "third_party_ratio": 1 }, "strings": { "bytes": 173, "count": 14, "url_count": 1, "avg_length": 12.36, "max_length": 22, "avg_entropy": 3.01, "entropy_stddev": 0.71 }, "comments": { "chars": 270, "count": 9, "lines": 9, "high_entropy": 1, "to_code_ratio": 0.15, "url_in_comments": 1 }, "identifiers": { "count": 120, "unique": 41, "avg_length": 5.78, "max_length": 13, "min_length": 1, "avg_entropy": 2.11, "reuse_ratio": 0.34, "length_stddev": 2.82, "sequential_names": 2, "single_char_count": 3, "single_char_ratio": 0.07, "all_lowercase_ratio": 0.93, "all_uppercase_ratio": 0.05, "underscore_prefix_count": 3 } } }, "id": 7, "mol": "H₂(Cm₂Po)", "path": "code-stats.nvim-0.1.1-1.src.rock!!0.1.1.zip!!code-stats.nvim-0.1.1/lua/code-stats.lua", "risk": 2, "sha": "a43b59dc79b93d3124a1980f774c598756cd73d73cc2eed68c028c1d461bfd1c", "size": 1936, "traits": [ { "id": "micro-behaviors/process/debug/symbol::lua-debug-module-access", "conf": 0.9, "crit": 3, "desc": "Accesses Lua debug module", "spans": [ [ 674, 13 ] ] }, { "id": "micro-behaviors/communications/http/url/forge::public-code-forge-url", "conf": 0.9, "crit": 3, "desc": "References a public code-forge URL", "spans": [ [ 517, 19 ] ] }, { "id": "micro-behaviors/communications/http/header/content-type::json-header", "conf": 0.9, "crit": 3, "desc": "References HTTP Content-Type application/json", "spans": [ [ 353, 34 ] ] } ], "type": "lua" }, { "ctx": [ { "b": "boXZ.B8\u0026{yx(kOnzGWdivrl8?B7GCoeObo0wfr6wc$E4jzEEx[ar\u00266Vwnc74vqPM#a%XNSwNPa=x(mYeeOlaHbRQz\u003ea$jY+a{[V{x)qjJxK#0@at2f=B-5rHy\u0026%fbz!0N7azC.mByx04at2fYBZV\u003eBwPz\u003caz/cWPe?[F2eO]unvqE5reOn{wv}u^czep!CwO(xeq=Dc", "ln": 0, "col": 1, "line": 1 } ], "depth": 2, "facts": { "imp": [ [ "", "set" ], [ "", "set" ], [ "", "cd" ], [ "", "cd" ], [ "", "dirname" ], [ "", "dirname" ], [ "", "dirname" ], [ "", "dirname" ], [ "", "readlink" ], [ "", "readlink" ], [ "", "nix-shell" ], [ "", "nix-shell" ] ], "tgt": [ "cd", "dirname", "nix-shell", "readlink", "set" ], "metrics": { "ast": { "max_depth": 13, "call_count": 6, "node_count": 48 }, "file": { "size": 317, "entropy": 5.27 }, "text": { "lines": 6, "top_char": 45, "max_ws_run": 1, "digit_ratio": 0.04, "space_count": 26, "char_entropy": 5.27, "unique_chars": 52, "top_char_null": 0, "string_density": 0.33, "top_char_ratio": 0.07, "avg_line_length": 51.83, "max_line_length": 128, "empty_line_ratio": 0.17, "last_line_length": 128, "whitespace_ratio": 0.1, "identifier_density": 2.67, "line_length_stddev": 49.71, "normalized_string_count": 0.82, "suspicious_string_ratio": 0.5, "normalized_unique_identifiers": 3.48 }, "binary": { "peak_region_bytes": 317, "peak_region_entropy": 5.27 }, "strings": { "bytes": 264, "count": 2, "shell": 1, "avg_length": 132, "max_length": 219, "avg_entropy": 4.46, "entropy_stddev": 0.56, "high_entropy_count": 1 }, "comments": { "chars": 18, "count": 1, "lines": 1, "to_code_ratio": 0.2 }, "identifiers": { "count": 16, "unique": 9, "avg_length": 4.33, "max_length": 9, "min_length": 1, "avg_entropy": 1.7, "reuse_ratio": 0.56, "length_stddev": 2.83, "has_digit_ratio": 0.11, "single_char_count": 1, "single_char_ratio": 0.11, "all_lowercase_ratio": 0.44 } } }, "id": 11, "mol": "H(F)", "path": "code-stats.nvim-0.1.1-1.src.rock!!0.1.1.zip!!code-stats.nvim-0.1.1/scripts/update.sh", "risk": 2, "sha": "ef4e04764f1d7462fd8d1f398eb331089f40a5c04a383e07d14d3e4e30be0c22", "size": 317, "traits": [ { "id": "metadata/file/extension/identity::shell-a", "conf": 1.0, "crit": 2, "desc": "POSIX shell script extension", "spans": [ [ 0, 0 ] ] }, { "id": "micro-behaviors/fs/directory/chdir::shell-change-directory", "conf": 0.95, "crit": 3, "desc": "Shell changes working directory", "spans": [ [ 27, 2 ] ] } ], "type": "shell" } ], "rev": "72034", "v": "8" } }