{ "llm": { "conf": 0.53198045, "grade": "benign", "model": "Qwen/Qwen3.6-27B", "review": false, "outcome": "benign", "interpretation": "Legitimate Erlang ODBC package" }, "ml": { "v": "7", "eng": "2.2.0-rc.1", "lvl": -1, "conf": 0, "mods": [ { "cls": 0, "raw": 0.094555914, "rte": "az", "prob": 0.094555914 } ], "prob": 0.33140063, "skip": [ { "rte": "az/tar", "why": "unavailable" }, { "rte": "az/tar", "why": "unavailable" } ], "files": [ { "id": 0, "lvl": -1, "conf": 0, "prob": 0.33140063285827637, "type": "apk_alpine" }, { "id": 1, "lvl": -1, "conf": 0, "prob": 0.004948049783706665, "type": "elf" }, { "id": 2, "lvl": -1, "conf": 0, "prob": 0.33140063285827637, "type": "json" }, { "id": 3, "lvl": -1, "conf": 0, "prob": 0.00012001395225524902, "type": "beam" }, { "id": 4, "lvl": -1, "conf": 0, "prob": 0.00012001395225524902, "type": "beam" }, { "id": 5, "lvl": -1, "conf": 0, "prob": 0.00012001395225524902, "type": "beam" }, { "id": 6, "lvl": -1, "conf": 0, "prob": 0.3266848921775818, "type": "text" } ], "version": "v18.18", "analyzed_at": "2026-07-02T19:54:56Z" }, "path": "erlang-27-odbc-27.3.4.14-r0.apk", "raw": { "files": [ { "id": 0, "ctx": [ { "b": "abZy8010L00rqzlE%oT9Vs%o6kGe\u003c#brDvkPo:u4(%3WN@cjZJiz5@3Yc)0{FK\u0026r#o{2?\u0026", "n": [ { "c": 2, "d": "Binary is not digitally signed", "i": "metadata/unsigned", "o": 0, "z": 1, "cf": 1.0 } ], "ln": 0 } ], "mol": "H(Cm₅)Md(He)", "sha": "ea4c3c046be0dd50992936ef7afa1be16f6d7908020637192e7b300401f05172", "path": "erlang-27-odbc-27.3.4.14-r0.apk", "risk": 3, "size": 92342, "type": "apk_alpine", "facts": { "metrics": { "file": { "size": 92342.0, "entropy": 7.99, "size_bytes": 92342.0 }, "parse": { "error_count": 1.0 }, "binary": { "overall_entropy": 7.99, "peak_region_bytes": 91136.0, "peak_region_entropy": 7.81 } } }, "traits": [ { "id": "metadata/package/files/system-package::spdx-melange-creator", "conf": 0.8999999761581421, "crit": 1, "desc": "Melange SPDX creator", "from": [ { "file": 2 } ] }, { "id": "metadata/package/files/system-package::alpine-pkginfo-origin-field", "conf": 0.8999999761581421, "crit": 1, "desc": "Alpine/Wolfi package origin field", "from": [ { "file": 6 } ] }, { "id": "metadata/package/files/system-package::wolfi-pkginfo-maintainer", "conf": 0.8999999761581421, "crit": 1, "desc": "Wolfi package maintainer field", "from": [ { "file": 6 } ] }, { "id": "micro-behaviors/communications/socket/send::send-symbol", "atk": "T1071", "mbc": "C0001", "conf": 0.6600000262260437, "crit": 3, "desc": "Uses send socket call", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/communications/socket/receive::_recv-symbol", "atk": "T1071", "mbc": "C0001", "conf": 0.6600000262260437, "crit": 3, "desc": "Uses _recv socket call", "from": [ { "file": 1 } ] }, { "id": "metadata/package/files/system-package::alpine-apk-pkginfo", "conf": 0.9700000286102295, "crit": 2, "desc": "Alpine/Wolfi package info metadata", "from": [ { "off": 98, "file": 6, "line": 6 } ] }, { "id": "metadata/build/artifact::elf-stripped-but-symtab-present", "conf": 0.6000000238418579, "crit": 3, "desc": "ELF stripped with .symtab present", "from": [ { "file": 1 } ] }, { "id": "metadata/package/files/system-package::alpine-pkginfo-package-field", "conf": 0.8999999761581421, "crit": 1, "desc": "Alpine/Wolfi package name field", "from": [ { "file": 6 } ] }, { "id": "micro-behaviors/dylib/library/libc::libc-internal-functions-b", "conf": 0.699999988079071, "crit": 2, "desc": "libc internal symbols cluster B", "from": [ { "file": 1 } ] }, { "id": "metadata/package/files/system-package::spdx-melange-namespace", "conf": 0.8999999761581421, "crit": 1, "desc": "Melange SPDX document namespace" }, { "id": "metadata/hardening/build::memcpy-chk", "conf": 0.8500000238418579, "crit": 3, "desc": "FORTIFY_SOURCE memcpy bounds check", "from": [ { "file": 1 } ] }, { "id": "metadata/package/files/system-package::spdx-document-id", "conf": 0.8999999761581421, "crit": 1, "desc": "SPDX document identifier" }, { "id": "metadata/package/files/system-package::spdx-document-version", "conf": 0.8999999761581421, "crit": 1, "desc": "SPDX document version field" }, { "id": "metadata/package/files/system-package::melange-pkginfo-generator", "conf": 0.8999999761581421, "crit": 1, "desc": "Melange-generated package metadata", "from": [ { "file": 6 } ] }, { "id": "micro-behaviors/communications/socket/options::options-set", "conf": 0.6600000262260437, "crit": 3, "desc": "Set socket options", "from": [ { "file": 1 } ] }, { "id": "metadata/package/files/system-package::spdx-apk-pkginfo-source", "conf": 0.8999999761581421, "crit": 1, "desc": "SPDX references APK DB package info", "from": [ { "file": 2 } ] }, { "id": "metadata/package/files/system-package::spdx-sbom-document", "conf": 0.9800000190734863, "crit": 2, "desc": "SPDX SBOM document", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/dylib/library/abi-graphics::cxx-abi-symbols-a", "conf": 0.800000011920929, "crit": 2, "desc": "C++ ABI symbols cluster A", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/communications/socket/tcp::socket-symbol-text", "conf": 0.75, "crit": 3, "desc": "Socket API symbol text", "from": [ { "file": 1 } ] }, { "id": "metadata/package/files/system-package::alpine-pkginfo-version-field", "conf": 0.8999999761581421, "crit": 1, "desc": "Alpine/Wolfi package version field", "from": [ { "file": 6 } ] }, { "id": "micro-behaviors/communications/socket/listen::socket-sym", "mbc": "C0001", "conf": 0.4000000059604645, "crit": 3, "desc": "socket function symbol", "from": [ { "file": 1 } ] }, { "id": "metadata/package/files/system-package::spdx-wolfi-apk-purl", "conf": 0.8999999761581421, "crit": 1, "desc": "Wolfi APK package URL in SPDX", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/communications/socket/receive::recv-symbol", "atk": "T1071", "mbc": "C0001", "conf": 0.6600000262260437, "crit": 3, "desc": "Uses recv socket call", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/communications/socket/connect::connect-symbol", "atk": "T1071", "mbc": "C0001", "conf": 0.6600000262260437, "crit": 3, "desc": "Uses connect socket call", "from": [ { "file": 1 } ] }, { "id": "metadata/package/files/system-package::alpine-pkginfo-basename", "conf": 0.8999999761581421, "crit": 1, "desc": "Alpine/Wolfi package info file" }, { "id": "micro-behaviors/communications/socket/send::_send-symbol", "atk": "T1071", "mbc": "C0001", "conf": 0.6600000262260437, "crit": 3, "desc": "Uses _send socket call", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/dylib/library/libc::libc-characteristic-cxa-finalize", "crit": 2, "desc": "libc characteristic cxa finalize", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/communications/socket/connect::_connect-symbol", "atk": "T1071", "mbc": "C0001", "conf": 0.6600000262260437, "crit": 3, "desc": "Uses _connect socket call", "from": [ { "file": 1 } ] } ] }, { "ctx": [ { "b": "E))420S-r400000000000@$H+0rr9104m*E00000kMy=:00000/.\u003e^I0000000000kMA+z4feS[aoiF-1][S61on", "n": [ { "c": 2, "d": "ELF program interpreter metadata", "i": "metadata/binary/linking/runtime::interpreter", "o": 0, "z": 1, "cf": 1.0 } ], "ln": 0 }, { "b": "?#-@V000000rr9100000fkLuihz^76wg.RizGQgQCSmPkhz^4cz.r^B000000SSi2h2)QR0rr911][S6004MI004JIh2)Q", "n": [ { "c": 2, "d": "Reference to /lib64", "i": "micro-behaviors/fs/path/system::system-lib64", "o": 792, "z": 27, "cf": 0.6600000262260437 } ], "ln": 776 }, { "b": "wPQvUC0Qj(ASx3noHJPov@Dm5wN//Zq=cjTA+e/XBzVa1q=cjSCX7wMx(W={Bo2lpoHJ[", "n": [ { "c": 3, "d": "Uses _connect socket call", "i": "micro-behaviors/communications/socket/connect::_connect-symbol", "o": 2368, "z": 7, "cf": 0.6600000262260437 } ], "ln": 2352 }, { "b": "nP5cU08(-*mq=TnA:-?=B7GDmz!0N3Ac87]zz\u003e{lwo83[z/oP7vpK6MuTE\u003e@vpK7Wv}YT+w)]y\u00260a{m.wDlNUzeBimwDl^[A==kn0af8EB8LLzgHCiAv{%m!0cr6*yH}O/B98CswO}G*wNP9HuTEUYzdvKguT)++0cqZ?wb]$zx(!i5gbAoUBAhFwyYFA@xMvV)wm5?!wNPW(0chTXB]VL]vqG:#v/P\u003eECXIm1B7/Yrwn=Wf0bVdXy\u0026r!-uTER-vQ\u0026+^ByxiiuU%i", "n": [ { "c": 3, "d": "FORTIFY_SOURCE memcpy bounds check", "i": "metadata/hardening/build::memcpy-chk", "o": 2658, "z": 10, "cf": 0.8500000238418579 }, { "c": 3, "d": "Stack protector/canary enabled", "i": "metadata/hardening/build::stack-protector", "o": 2586, "z": 14, "cf": 0.8999999761581421 }, { "c": 3, "d": "Set socket options", "i": "micro-behaviors/communications/socket/options::options-set", "o": 2556, "z": 10, "cf": 0.6600000262260437 }, { "c": 3, "d": "Uses _recv socket call", "i": "micro-behaviors/communications/socket/receive::_recv-symbol", "o": 2705, "z": 4, "cf": 0.6600000262260437 }, { "c": 3, "d": "Uses _send socket call", "i": "micro-behaviors/communications/socket/send::_send-symbol", "o": 2669, "z": 4, "cf": 0.6600000262260437 }, { "c": 3, "d": "Socket API symbol text", "i": "micro-behaviors/communications/socket/tcp::socket-symbol-text", "o": 2637, "z": 6, "cf": 0.75 }, { "c": 2, "d": "Generic file read/write operations", "i": "micro-behaviors/fs/file/read-write::binary-file-ops", "o": 2651, "z": 4, "cf": 0.800000011920929 }, { "c": 2, "d": "Terminates process immediately without cleanup", "i": "micro-behaviors/process/terminate/signal::_exit", "o": 2719, "z": 4, "cf": 0.4000000059604645 }, { "c": 2, "d": "pthread threading library", "i": "micro-behaviors/process/threading/concurrency::pthread", "o": 2690, "z": 14, "cf": 0.5 } ], "ln": 2540 }, { "b": "wNxK$y\u0026sJeA:JT3v/P\u003eyv%zA?w[=c\u003ey?Xib0bVp:B7GB[v@c78wDlNUzdvKg0crm5v@le+uTE\u003e@", "n": [ { "c": 3, "d": "Terminal socket exec helper context", "i": "micro-behaviors/process/fd/dup::unix-terminal-socket-exec-benign-context", "o": 2793, "z": 12, "cf": 0.949999988079071 } ], "ln": 2777 }, { "b": "e]$}-hullvnKt^Kga\u003eu.m[=GvlTIP3f/e(2oI4MruOTk\u003c07PZOlpk9ne\u0026bD!m[=GvlJ", "n": [ { "c": 3, "d": "Network-capable library profile", "i": "objectives/supply-chain/trojanized/backdoor::network-library-profile", "o": 2880, "z": 5, "cf": 0.8999999761581421 } ], "ln": 2864 }, { "b": "b4kI4xLzN1v@#\u003clwG\u003ceVCSmP*hz=Ra00000000000000000000000000000000000000", "n": [ { "c": 3, "d": "Architecture detection strings", "i": "objectives/discovery/host/software::arch-detection", "o": 52879, "z": 6, "cf": 0.5 } ], "ln": 52863 }, { "b": "BAhFivGn34xMFooBywRUe[]iBwPz.\u0026e[Y6Ae[!WmxAfU}D2vXGz2=h0D2vXBASv.8zGNNPwPz\u003caz/bLcxkR\u0026AC4CYnx(v(@ASv.jwD", "n": [ { "c": 2, "d": "ELF dynstr section name", "i": "metadata/binary/linking/static::elf-dynstr-section-name", "o": 64747, "z": 7, "cf": 0.8999999761581421 }, { "c": 2, "d": "ELF dynsym section name", "i": "metadata/binary/linking/static::elf-dynsym-section-name", "o": 64739, "z": 7, "cf": 0.8999999761581421 }, { "c": 2, "d": "ELF interpreter section name", "i": "metadata/binary/linking/static::elf-interpreter-section-name", "o": 64721, "z": 7, "cf": 0.8999999761581421 } ], "ln": 64705 }, { "b": "vr?\u00269wmoN*e]\u003eJte]\u003e\u003ege[xlBvqPZ*04}!\u003cByte4vSMO\u003ce[n*pzdNQb000000000000000", "n": [ { "c": 2, "d": "ELF dynamic section name", "i": "metadata/binary/linking/static::elf-dynamic-section-name", "o": 64955, "z": 8, "cf": 0.8999999761581421 } ], "ln": 64939 } ], "depth": 1, "facts": { "exp": [ [ "in6addr_loopback" ] ], "imp": [ [ "", "strcat_chk" ], [ "", "free" ], [ "", "recv" ], [ "", "libc_start_main" ], [ "", "SQLFreeStmt" ], [ "", "ITM_deregisterTMCloneTable" ], [ "", "exit" ], [ "", "isoc23_sscanf" ], [ "", "setsockopt" ], [ "", "SQLRowCount" ], [ "", "SQLFetch" ], [ "", "shutdown" ], [ "", "strlen" ], [ "", "SQLFreeHandle" ], [ "", "SQLFetchScroll" ], [ "", "stack_chk_fail" ], [ "", "SQLDriverConnect" ], [ "", "send" ], [ "", "SQLGetDiagRec" ], [ "", "SQLDescribeCol" ], [ "", "memset" ], [ "", "close" ], [ "", "read" ], [ "", "strcmp" ], [ "", "memcpy_chk" ], [ "", "gmon_start__" ], [ "", "SQLSetEnvAttr" ], [ "", "memcpy" ], [ "", "isoc23_strtol" ], [ "", "malloc" ], [ "", "SQLPrepare" ], [ "", "SQLSetConnectAttr" ], [ "", "realloc" ], [ "", "pthread_create" ], [ "", "SQLExecDirect" ], [ "", "memmove" ], [ "", "SQLDisconnect" ], [ "", "strtok" ], [ "", "SQLEndTran" ], [ "", "SQLGetInfo" ], [ "", "SQLNumResultCols" ], [ "", "SQLGetData" ], [ "", "connect" ], [ "", "strncat_chk" ], [ "", "ITM_registerTMCloneTable" ], [ "", "SQLBindParameter" ], [ "", "SQLSetStmtAttr" ], [ "", "SQLAllocHandle" ], [ "", "SQLBindCol" ], [ "", "ctype_tolower_loc" ], [ "", "SQLMoreResults" ], [ "", "socket" ], [ "", "cxa_finalize" ] ], "sec": [ [ ".interp", 792, 28, 3.94, "alloc" ], [ ".gnu.hash", 824, 40, 2.62, "alloc" ], [ ".dynsym", 864, 1320, 0.98, "alloc" ], [ ".dynstr", 2184, 763, 4.95, "alloc" ], [ ".gnu.version", 2948, 110, 1.3, "alloc" ], [ ".gnu.version_r", 3064, 128, 3.07, "alloc" ], [ ".rela.dyn", 3192, 216, 1.38, "alloc" ], [ ".rela.plt", 3408, 1152, 1.44, "alloc,info_link" ], [ ".init", 8192, 27, 4.24, "alloc,executable" ], [ ".plt", 8224, 784, 4.2, "alloc,executable" ], [ ".plt.got", 9008, 16, 3.38, "alloc,executable" ], [ ".plt.sec", 9024, 768, 3.73, "alloc,executable" ], [ ".text", 9792, 32329, 6.15, "alloc,executable" ], [ ".fini", 42124, 13, 3.24, "alloc,executable" ], [ ".rodata", 45056, 2620, 4.84, "alloc" ], [ ".eh_frame_hdr", 47676, 828, 4.69, "alloc" ], [ ".eh_frame", 48504, 4160, 5.17, "alloc" ], [ ".note.gnu.property", 52664, 80, 1.92, "alloc" ], [ ".note.ABI-tag", 52744, 32, 1.5, "alloc" ], [ ".note.package", 52776, 112, 4.94, "alloc" ], [ ".init_array", 56352, 8, 1.06, "write,alloc" ], [ ".fini_array", 56360, 8, 1.06, "write,alloc" ], [ ".data.rel.ro", 56368, 16, 0.0, "write,alloc" ], [ ".dynamic", 56384, 512, 1.5, "write,alloc" ], [ ".got", 56896, 448, 1.54, "write,alloc" ], [ ".data", 57344, 20, 0.85, "write,alloc" ], [ ".comment", 57364, 60, 4.05, "merge,strings" ], [ ".symtab", 57424, 4248, 2.24, "" ], [ ".strtab", 61672, 3022, 4.75, "" ], [ ".shstrtab", 64694, 290, 4.25, "" ] ], "metrics": { "elf": { "bits": 64.0, "entry": 10240.0, "has_got": 1.0, "has_plt": 1.0, "has_note": 1.0, "relacount": 3.0, "has_symtab": 1.0, "note_count": 3.0, "nx_enabled": 1.0, "has_cet_ibt": 1.0, "dynrel_count": 0.0, "dynsym_count": 55.0, "has_eh_frame": 1.0, "has_gnu_hash": 1.0, "stack_canary": 1.0, "symtab_count": 177.0, "dynrela_count": 9.0, "has_cet_shstk": 1.0, "little_endian": 1.0, "dt_flags_1_raw": 134217729.0, "pltreloc_count": 48.0, "dt_versym_count": 55.0, "executable_stack": 0.0, "fini_array_count": 1.0, "init_array_count": 1.0, "wx_segment_count": 0.0, "comment_entry_count": 2.0, "fortify_source_count": 3.0, "program_header_count": 13.0, "comment_distinct_count": 2.0, "gnu_stack_section_absent": 0.0, "load_segment_max_file_size": 33945.0, "stripped_but_symtab_present": 1.0, "load_segment_max_memory_size": 33945.0, "section_relocation_group_count": 2.0, "stripped_metadata_section_count": 5.0 }, "file": { "size": 67032.0, "entropy": 5.16, "size_bytes": 67032.0 }, "binary": { "is_pie": 1.0, "has_overlay": 1.0, "is_stripped": 0.0, "code_entropy": 6.05, "data_entropy": 1.48, "overlay_size": 2048.0, "string_count": 281.0, "overlay_ratio": 0.03, "overall_entropy": 5.16, "overlay_entropy": 1.46, "entropy_variance": 2.68, "avg_string_length": 15.09, "max_string_length": 95.0, "peak_region_bytes": 18432.0, "code_to_data_ratio": 0.97, "peak_region_entropy": 6.2, "string_length_stddev": 7.97, "largest_section_ratio": 0.48, "sentence_string_count": 8.0, "sentence_string_ratio": 0.03, "high_entropy_string_count": 0.0 }, "exports": { "count": 1.0 }, "imports": { "count": 53.0 }, "sections": { "count": 32.0, "code_size": 33937.0, "entropy_max": 6.15, "entropy_mean": 2.97, "name_entropy": 4.19, "writable_count": 7.0, "executable_count": 6.0, "nonstandard_count": 6.0, "executable_writable_count": 0.0 }, "dependencies": { "count": 2.0 } } }, "id": 1, "mol": "H(Cm₅)Md(He)", "path": "erlang-27-odbc-27.3.4.14-r0.apk!!usr/lib/erlang/lib/odbc-2.15/priv/bin/odbcserver", "risk": 3, "sha": "1e2f54921ae51c296792991b2958e92696f6c65a228e8eeee9219f727f89b373", "size": 67032, "traits": [ { "id": "micro-behaviors/communications/socket/tcp::socket-symbol-text", "conf": 0.75, "crit": 3, "desc": "Socket API symbol text", "spans": [ [ 2637, 6 ] ] }, { "id": "metadata/build/artifact::elf-stripped-but-symtab-present", "conf": 0.6000000238418579, "crit": 3, "desc": "ELF stripped with .symtab present", "spans": [ [ 0, 38 ] ] }, { "id": "micro-behaviors/communications/socket/receive::recv-symbol", "atk": "T1071", "mbc": "C0001", "conf": 0.6600000262260437, "crit": 3, "desc": "Uses recv socket call", "spans": [ [ 2705, 4 ] ] }, { "id": "micro-behaviors/communications/socket/receive::_recv-symbol", "atk": "T1071", "mbc": "C0001", "conf": 0.6600000262260437, "crit": 3, "desc": "Uses _recv socket call", "spans": [ [ 2705, 4 ] ] }, { "id": "micro-behaviors/communications/socket/options::options-set", "conf": 0.6600000262260437, "crit": 3, "desc": "Set socket options", "spans": [ [ 2556, 10 ] ] }, { "id": "micro-behaviors/dylib/library/libc::libc-characteristic-cxa-finalize", "crit": 2, "desc": "libc characteristic cxa finalize", "spans": [ [ 2793, 12 ] ] }, { "id": "micro-behaviors/communications/socket/send::send-symbol", "atk": "T1071", "mbc": "C0001", "conf": 0.6600000262260437, "crit": 3, "desc": "Uses send socket call", "spans": [ [ 2669, 4 ] ] }, { "id": "micro-behaviors/communications/socket/connect::connect-symbol", "atk": "T1071", "mbc": "C0001", "conf": 0.6600000262260437, "crit": 3, "desc": "Uses connect socket call", "spans": [ [ 2368, 7 ] ] }, { "id": "micro-behaviors/communications/socket/listen::socket-sym", "mbc": "C0001", "conf": 0.4000000059604645, "crit": 3, "desc": "socket function symbol", "spans": [ [ 2637, 6 ] ] }, { "id": "metadata/hardening/build::memcpy-chk", "conf": 0.8500000238418579, "crit": 3, "desc": "FORTIFY_SOURCE memcpy bounds check", "spans": [ [ 2658, 10 ] ] }, { "id": "micro-behaviors/communications/socket/connect::_connect-symbol", "atk": "T1071", "mbc": "C0001", "conf": 0.6600000262260437, "crit": 3, "desc": "Uses _connect socket call", "spans": [ [ 2368, 7 ] ] }, { "id": "micro-behaviors/communications/socket/send::_send-symbol", "atk": "T1071", "mbc": "C0001", "conf": 0.6600000262260437, "crit": 3, "desc": "Uses _send socket call", "spans": [ [ 2669, 4 ] ] }, { "id": "micro-behaviors/dylib/library/libc::libc-internal-functions-b", "conf": 0.699999988079071, "crit": 2, "desc": "libc internal symbols cluster B", "spans": [ [ 2793, 12 ] ] }, { "id": "micro-behaviors/dylib/library/abi-graphics::cxx-abi-symbols-a", "conf": 0.800000011920929, "crit": 2, "desc": "C++ ABI symbols cluster A", "spans": [ [ 2793, 12 ] ] } ], "type": "elf" }, { "ctx": [ { "b": "DJ", "n": [ { "c": 2, "d": "SPDX SBOM document", "i": "metadata/package/files/system-package::spdx-sbom-document", "o": 0, "z": 1, "cf": 0.9800000190734863 } ], "ln": 1, "addr": 0 }, { "b": "arR\u003eHAaBh]wPz\u003caz/c:War\u003c-Xl%82@e\u0026aX5", "ln": 2, "addr": 2 }, { "b": "arR\u003esvrt{Kx\u003e7Z(B7DKRar\u003cfufFb1ifD@4", "ln": 3, "addr": 31 }, { "b": "arR^Hb5y$6wO#N2oLFM\u0026r+lq)x(v(kiV]R5e\u00262gaec", "ln": 8, "addr": 260 }, { "b": "arR^Hb4CU8vruBdB0rT/tl", "ln": 9, "addr": 294 }, { "b": "arR^HarR\u003ecz/oCMaz\u003eXavqYZ?asIy!e\u0026tErfEXg%", "n": [ { "c": 2, "d": "Melange-generated SPDX SBOM", "i": "metadata/package/files/system-package::melange-spdx-sbom", "o": 318, "z": 14, "cf": 0.9800000190734863 } ], "ln": 10, "addr": 312 }, { "b": "arR^HarR\u003e7A+w/#x)Kifx(v(Iavx*Jx(mNavrb)faw3DXa]", "ln": 11, "addr": 345 }, { "b": "arR^Ht}t", "ln": 12, "addr": 383 }, { "b": "arR^HarR^HarR\u003eGwObH]wO#0?lT+7Fxk.*ob03?\u003cp^EDwk$su}o*IJum[3r1ec", "ln": 41, "addr": 1304 }, { "b": "arR^HarR^HarR\u003eGwObH]wO#0?rc-B]b03?\u003cAclhqa$J", "ln": 42, "addr": 1354 }, { "b": "arR^HarR^HarR\u003eGwObH]wO#0?oMaAHBz(gziV]R=yIbXpAbdaJz!%31fj/fuvqYZfgb*!6wmx4lgb**we\u0026kgng+A-4kvFOxxGZP1hEwv0tY?.Ogb-VSB98Cvj:g*Xw[-B", "n": [ { "c": 2, "d": "Wolfi APK SPDX SBOM", "i": "metadata/package/files/system-package::wolfi-apk-spdx-sbom", "o": 1389, "z": 88, "cf": 0.9800000190734863 } ], "ln": 43, "addr": 1389 }, { "b": "arR^HarR^HEe", "ln": 44, "addr": 1493 }, { "b": "arR^HarT@v", "ln": 45, "addr": 1503 }, { "b": "arR^HarR\u003esz*c8nz^^fIz!0i$x(v(kiV]RwpEd]Tmn^8RpFJ8+", "ln": 91, "addr": 3250 }, { "b": "arR^HarR\u003eux(4v4l2HaED3T4jb03\u0026UvqH0@ec", "ln": 92, "addr": 3291 }, { "b": "arR^HarR\u003eHz/{8gwL3=KzZ4j+b4j#3B.L(cwft\u00261v@2H=wGUY8w]w/7A=k!qk#ph%l{-{Sfd{6]m[DDBpA?s", "n": [ { "c": 1, "d": "SPDX references APK DB package info", "i": "metadata/package/files/system-package::spdx-apk-pkginfo-source", "o": 3342, "z": 44, "cf": 0.8999999761581421 } ], "ln": 93, "addr": 3321 }, { "b": "arR^HarR\u003eAx\u003e7Z(B7EZSzEWH9wmYo}iV]RwpEd]Tmn^8RpFJ8+", "ln": 94, "addr": 3389 }, { "b": "arR^HarR\u003eAx\u003e7Z(B7E:Jv@bN]wN(#Car\u003c9\u003cvpJ$ZeIX}ja$J", "ln": 95, "addr": 3430 }, { "b": "arR^HarR^HarR\u003eGwObH]wO#0?oMaAHBz(gziV]R=yIbXpAbdaJz!%31fj/fuvqYZfgb*!6wmx4lgb**we\u0026kgng+A-4kvFOxxGZP1hEwv0tY?.Ogb:5\u003ex\u003eIc$j.nUIvqYZfgb*x", "n": [ { "c": 1, "d": "Wolfi APK package URL in SPDX", "i": "metadata/package/files/system-package::spdx-wolfi-apk-purl", "o": 3670, "z": 92, "cf": 0.8999999761581421 } ], "ln": 102, "addr": 3670 }, { "b": "arR^HarR^HEe", "ln": 103, "addr": 3778 } ], "depth": 1, "facts": { "metrics": { "file": { "size": 5335.0, "entropy": 5.12, "size_bytes": 5335.0 }, "json": { "parsed_bytes": 5335.0, "parse_limit_bytes": 76800.0 }, "binary": { "overall_entropy": 5.12, "peak_region_bytes": 5335.0, "peak_region_entropy": 5.22 } } }, "id": 2, "path": "erlang-27-odbc-27.3.4.14-r0.apk!!var/lib/db/sbom/erlang-27-odbc-27.3.4.14-r0.spdx.json", "risk": 1, "sha": "90eb2ea62ce86a63cfabdbb93058d94e8a07fb8ada5fc0e48106a50d43c65843", "size": 5335, "traits": [ { "id": "metadata/package/files/system-package::spdx-melange-namespace", "conf": 0.8999999761581421, "crit": 1, "desc": "Melange SPDX document namespace" }, { "id": "metadata/package/files/system-package::spdx-document-id", "conf": 0.8999999761581421, "crit": 1, "desc": "SPDX document identifier" }, { "id": "metadata/package/files/system-package::spdx-melange-creator", "conf": 0.8999999761581421, "crit": 1, "desc": "Melange SPDX creator", "spans": [ [ 318, 14 ] ] }, { "id": "metadata/package/files/system-package::spdx-apk-pkginfo-source", "conf": 0.8999999761581421, "crit": 1, "desc": "SPDX references APK DB package info", "spans": [ [ 3342, 44 ] ] }, { "id": "metadata/package/files/system-package::spdx-document-version", "conf": 0.8999999761581421, "crit": 1, "desc": "SPDX document version field" }, { "id": "metadata/package/files/system-package::spdx-wolfi-apk-purl", "conf": 0.8999999761581421, "crit": 1, "desc": "Wolfi APK package URL in SPDX", "spans": [ [ 1389, 88 ], [ 1420, 14 ], [ 3670, 92 ] ] }, { "id": "metadata/file/format::valid", "conf": 0.6000000238418579, "crit": 2, "desc": "JSON data format", "spans": [ [ 0, 37 ] ] }, { "id": "metadata/package/files/system-package::spdx-sbom-document", "conf": 0.9800000190734863, "crit": 2, "desc": "SPDX SBOM document" }, { "id": "metadata/package/files/system-package::melange-spdx-sbom", "conf": 0.9800000190734863, "crit": 2, "desc": "Melange-generated SPDX SBOM", "spans": [ [ 318, 14 ] ] }, { "id": "metadata/package/files/system-package::wolfi-apk-spdx-sbom", "conf": 0.9800000190734863, "crit": 2, "desc": "Wolfi APK SPDX SBOM", "spans": [ [ 1389, 88 ], [ 1420, 14 ], [ 3342, 44 ], [ 3670, 92 ] ] } ], "type": "json" }, { "depth": 1, "facts": { "metrics": { "file": { "size": 1824.0, "entropy": 6.92, "size_bytes": 1824.0 }, "binary": { "overall_entropy": 6.92, "peak_region_bytes": 800.0, "peak_region_entropy": 7.43 } } }, "id": 3, "path": "erlang-27-odbc-27.3.4.14-r0.apk!!usr/lib/erlang/lib/odbc-2.15/ebin/odbc_sup.beam", "pid": 0, "sha": "023ea5905050e5dcd21eb4b227cb23522d71accb42bb197f7d5ba4080aab25c5", "size": 1824, "type": "beam" }, { "depth": 1, "facts": { "metrics": { "file": { "size": 1612.0, "entropy": 6.49, "size_bytes": 1612.0 }, "binary": { "overall_entropy": 6.49, "peak_region_bytes": 588.0, "peak_region_entropy": 6.83 } } }, "id": 4, "path": "erlang-27-odbc-27.3.4.14-r0.apk!!usr/lib/erlang/lib/odbc-2.15/ebin/odbc_app.beam", "pid": 0, "sha": "f56dea613323a2e2d04ea8ce006e8f5c813021dcaf11a14c198e550605e7cfbd", "size": 1612, "type": "beam" }, { "id": 5, "sha": "eea95491def07a52292684d8a357b89a9161e64ed7c0f16ee03f8da49cd2f120", "path": "erlang-27-odbc-27.3.4.14-r0.apk!!usr/lib/erlang/lib/odbc-2.15/ebin/odbc.beam", "size": 50076, "type": "beam", "depth": 1 }, { "ctx": [ { "b": "boPG/zE)\u0026%By!#9vTf8kwO+^)xjR", "n": [ { "c": 2, "d": "Melange-generated APK package info", "i": "metadata/package/files/system-package::melange-generated-apk-pkginfo", "o": 0, "z": 22, "cf": 0.9800000190734863 } ], "ln": 1, "addr": 0 }, { "b": "Abf97vqPM#jS[rRy*?i]eIYmpz!9r!", "n": [ { "c": 2, "d": "Wolfi APK package info metadata", "i": "metadata/package/files/system-package::wolfi-apk-pkginfo", "o": 23, "z": 24, "cf": 0.9800000190734863 } ], "ln": 2, "addr": 23 }, { "b": "Abf9fwPw[RatL(dgCgHpf/gF5fA", "n": [ { "c": 2, "d": "Alpine/Wolfi package info metadata", "i": "metadata/package/files/system-package::alpine-apk-pkginfo", "o": 48, "z": 21, "cf": 0.9700000286102295 } ], "ln": 3, "addr": 48 }, { "b": "vrb\u003c\u003eauZ\u0026(i5Ub4gY", "ln": 4, "addr": 70 }, { "b": "B7]@iauZ\u00265h8EcHhV", "ln": 5, "addr": 84 }, { "b": "z/PM8x(k4Raz2OfvqYZfgb/", "n": [ { "c": 1, "d": "Alpine/Wolfi package origin field", "i": "metadata/package/files/system-package::alpine-pkginfo-origin-field", "o": 98, "z": 18, "cf": 0.8999999761581421 } ], "ln": 6, "addr": 98 }, { "b": "Abf8%wPIu7jS)gly*?i]aA7!1v\u003c2P4vSC)$C(", "ln": 7, "addr": 117 }, { "b": "B-IpvjS\u003c", "ln": 8, "addr": 147 }, { "b": "v@Dj3x(\u003eEXatU]+w[B4Zf!+swgc4j4w))D9w[i\u003eVwmEwOv(d^RfK#$Fwi1mkgY", "ln": 9, "addr": 154 }, { "b": "zddc@Byw)3wPw[RaA}:uw[.", "n": [ { "c": 1, "d": "Wolfi package maintainer field", "i": "metadata/package/files/system-package::wolfi-pkginfo-maintainer", "o": 204, "z": 18, "cf": 0.8999999761581421 } ], "ln": 10, "addr": 204 }, { "b": "vS=y3wmPa\u003cwGTbUf/I6FfFLEzi5Q", "ln": 11, "addr": 223 }, { "b": "y?Wx\u003czGxwijS)4fvpJ$ZeIX}j", "ln": 12, "addr": 246 } ], "depth": 1, "facts": { "metrics": { "file": { "size": 510.0, "entropy": 4.99, "size_bytes": 510.0 }, "binary": { "overall_entropy": 4.99, "peak_region_bytes": 510.0, "peak_region_entropy": 4.99 } } }, "id": 6, "path": "erlang-27-odbc-27.3.4.14-r0.apk!!.PKGINFO", "risk": 1, "sha": "010627b48720b27b45e8faa7c7ef587acedbb9895bcaf24183174e6642519c18", "size": 510, "traits": [ { "id": "metadata/package/files/system-package::alpine-pkginfo-origin-field", "conf": 0.8999999761581421, "crit": 1, "desc": "Alpine/Wolfi package origin field", "spans": [ [ 98, 18 ] ] }, { "id": "metadata/package/files/system-package::arch-pkgname-field", "conf": 0.9399999976158142, "crit": 1, "desc": "Arch pkgname metadata field", "spans": [ [ 23, 24 ] ] }, { "id": "metadata/package/files/system-package::alpine-pkginfo-version-field", "conf": 0.8999999761581421, "crit": 1, "desc": "Alpine/Wolfi package version field", "spans": [ [ 48, 21 ] ] }, { "id": "metadata/package/files/system-package::alpine-pkginfo-package-field", "conf": 0.8999999761581421, "crit": 1, "desc": "Alpine/Wolfi package name field", "spans": [ [ 23, 24 ] ] }, { "id": "metadata/package/files/system-package::alpine-pkginfo-basename", "conf": 0.8999999761581421, "crit": 1, "desc": "Alpine/Wolfi package info file" }, { "id": "metadata/package/files/system-package::wolfi-pkginfo-maintainer", "conf": 0.8999999761581421, "crit": 1, "desc": "Wolfi package maintainer field", "spans": [ [ 204, 18 ] ] }, { "id": "metadata/package/files/system-package::melange-pkginfo-generator", "conf": 0.8999999761581421, "crit": 1, "desc": "Melange-generated package metadata", "spans": [ [ 0, 22 ] ] }, { "id": "metadata/package/files/system-package::alpine-apk-pkginfo", "conf": 0.9700000286102295, "crit": 2, "desc": "Alpine/Wolfi package info metadata", "spans": [ [ 23, 24 ], [ 48, 21 ], [ 98, 18 ] ] }, { "id": "metadata/package/files/system-package::melange-generated-apk-pkginfo", "conf": 0.9800000190734863, "crit": 2, "desc": "Melange-generated APK package info", "spans": [ [ 0, 22 ], [ 23, 24 ], [ 48, 21 ], [ 98, 18 ] ] }, { "id": "metadata/package/files/system-package::wolfi-apk-pkginfo", "conf": 0.9800000190734863, "crit": 2, "desc": "Wolfi APK package info metadata", "spans": [ [ 23, 24 ], [ 48, 21 ], [ 98, 18 ], [ 204, 18 ] ] } ], "type": "text" } ], "omitted_files": 1, "v": "8" } }