{
  "ml": {
    "v": "7",
    "eng": "2.12.1",
    "lvl": -1,
    "conf": 0,
    "mods": [
      {
        "cls": 0,
        "raw": 0.13611959,
        "rte": "az",
        "prob": 0.13611959
      },
      {
        "cls": 0,
        "raw": 0.057494383,
        "rte": "az/zip",
        "prob": 0.057494383
      }
    ],
    "prob": 0.13611959,
    "files": [
      {
        "id": 0,
        "lvl": -1,
        "conf": 0,
        "prob": 0.13611958920955658,
        "type": "zip"
      },
      {
        "id": 1,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000009745359420776367,
        "type": "kotlin"
      },
      {
        "id": 2,
        "lvl": -1,
        "conf": 0,
        "prob": 0.00001659989356994629,
        "type": "zip"
      },
      {
        "id": 4,
        "lvl": -1,
        "conf": 0,
        "prob": 0.00001560648343001958,
        "type": "pdf"
      },
      {
        "id": 6,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000015685955077060498,
        "type": "pdf"
      },
      {
        "id": 10,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000016858180970302783,
        "type": "pdf"
      },
      {
        "id": 13,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000012954075828019995,
        "type": "registry"
      }
    ],
    "version": "v18.18",
    "analyzed_at": "2026-10-10T15:10:07Z"
  },
  "path": "bigfoot-2.1-1.src.rock",
  "raw": {
    "files": [
      {
        "id": 0,
        "mol": "H(Cm)Md₃(PaPd)",
        "sha": "eec46c2bf2cf08e78f6ec71edff6e6836bcecb01678214f353e934347d5f9ab2",
        "path": "/data/samples/incoming/forager/lua/luarocks.org/_/bigfoot/bigfoot-2.1-1.src.rock",
        "risk": 4,
        "size": 844785,
        "type": "zip",
        "facts": {
          "metrics": {
            "file": {
              "size": 844785,
              "entropy": 8
            },
            "binary": {
              "peak_region_bytes": 844785,
              "peak_region_entropy": 7.86
            },
            "archive": {
              "file_count": 2,
              "member_count": 2,
              "script_count": 0,
              "zip_bomb_ratio": 2.2,
              "compressed_size": 844473,
              "directory_count": 0,
              "executable_count": 0,
              "extra_field_size": 72,
              "noise_file_count": 0,
              "compression.ratio": 1,
              "hidden_file_count": 0,
              "uncompressed_size": 845507,
              "crc_collision_count": 0,
              "entry_comment_count": 0,
              "max_filename_length": 22,
              "rtlo_filename_count": 0,
              "format.regular_count": 2,
              "nested_archive_count": 1,
              "path_traversal_count": 0,
              "symlink_escape_count": 0,
              "security.setgid_count": 0,
              "security.setuid_count": 0,
              "security.sticky_count": 0,
              "double_extension_count": 0,
              "duplicate_member_count": 0,
              "security.symlink_count": 0,
              "unicode_filename_count": 0,
              "homoglyph_filename_count": 0,
              "security.encrypted_count": 0,
              "timing.mtime_unique_count": 1,
              "timing.mtime_unique_ratio": 0.5,
              "misplaced_executable_count": 0,
              "timing.mtime_dominant_count": 2,
              "timing.mtime_dominant_ratio": 1,
              "timing.mtime_spread_seconds": 0,
              "timing.sentinel_mtime_count": 0,
              "security.world_writable_count": 0,
              "compression.method_counts.deflate": 2
            },
            "consistency": {
              "extension_content_mismatch": 1,
              "extension_content_mismatch.archive_as_unknown": 1
            }
          }
        },
        "traits": [
          {
            "id": "metadata/document/pdf/action::pdf-action-uri",
            "conf": 0.9,
            "crit": 3,
            "desc": "PDF URI action present"
          },
          {
            "id": "metadata/document/pdf/action::pdf-sparse-uri-pages",
            "conf": 0.9,
            "crit": 3,
            "desc": "PDF has sparse URI actions per page"
          },
          {
            "id": "metadata/file/archive::archive-at-least-10-members",
            "conf": 0.9,
            "crit": 3,
            "desc": "Archive contains at least ten members"
          },
          {
            "id": "metadata/package/files/archive-member::archive-nested-zip-member",
            "conf": 0.9,
            "crit": 3,
            "desc": "Archive member is a nested ZIP"
          },
          {
            "id": "micro-behaviors/communications/url/external/github::github-release-download",
            "atk": "T1105",
            "conf": 0.85,
            "crit": 3,
            "desc": "GitHub release asset URL template",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-1",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"the\"",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-2",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"and\"",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-3",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"that\"",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-4",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"have\"",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-5",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"for\"",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-6",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"with\""
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-7",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"this\"",
            "from": [
              {
                "file": 1
              }
            ]
          }
        ]
      },
      {
        "ctx": [
          {
            "b": "y\u0026r/(y-)w8Byf61w/%kVcO^qecKKWdv{%f@zeS%9wP/gVazkzguVGZ\u00263t:S\u003cvqE6cAaJK1wP/gVasw(\u003e3jpP/v{%f@A+fiduV*y9auZ?{xMOunB2\u003e%cv@#c%e]L=yfk$YtfjFTdw]zQfcKHi3z!0N7AaJJ^w]zZbvrrRPasw@$fEEiDvpK7YxjShGasySjxj=72BsdAswPz\u003caz/cWXaz(4cA+fzpe?Om]eHIU[e*bjOwN/:(B{XN!wPIv4x(Ffdz/cWXaBsCraAIWxzddEgauZ\u0026KtsJKHBz=2swPF#az/M$gA+PSfv{%f@wN]H%x(v)gu0O#*arUiaByw)1wN(]D3lQD}tu2oEaAg+0yHH\u003c!ayO#3B0bNyaAhvtC4\u003eF#ayMzLFs7m)wI4$Bz/BY^NilM?y\u0026%\u0026lz/cXtzY\u003c7iADL#owO(0@BAnNpz/M$jz/o-nz//Mie*9-caA7\u003e7wPz\u0026M3jm)#o)7n]x(E)1azbLgBz=2swGUA2Aa9=}BAITEB9hCkA+PDjaARJABzb98aA7\u003cmzddscw]zQf3lQDXz/o-nz//Miay!?$ayX[8w]zZbvruQ5wftP7aAIakvrb^#wGU@2A:-Q3vq][3efF\u003eKayX[8A=(mxx(n3hayMylx(mN1wGU@2A:-Q3vq])5d0fcpB0a$az!SY)az\u003eLjayX[8B7Gf0v@#o)aAg[jazbLgBz=2swGV59A+P9adlv\u003eVaxi2*zFa2kD2E*Fze0S@BrCm9C4z!cCYmk7By!#9d06JvxDQ-8ay683A:*Rpx\u003e}o5zddJ$A+O@#azCZow]zQfzF%SdB1wCxzE:(1z!%umAV/Bmy?m9#x(v)gaA8BmAV/sfxjSh{A+eV{B15kHz*9sFz/PRC3jm)#ph+k=aARp9BrCWswGU?#yhXcbBA]0Ew/#hewGUC@xj=72BrCKhv@2H=wHzKwx(n37A+n-\u0026wGUYdazCv$zGGP5vqE6dzY\u003cdnvrrSgw/$@0zH2\u0026jz/!5-B-RbmB0bKqz/](baAIa9yANtew]zZbvruj4zxJLiz/3RsxKM09Aa9l(vp%d0B0b1iv%8T1zGGrex(v(w3jm)#ra]?=vRGE!z/o.uvS=N0y?j.$y\u0026:IqAb](ux\u003eg^@aARpdaAg[jAa9x\u003cayPd#aAIWqw[=GjAa9l(vp%d)e)R:l3lQEcvpA!:B09Q*DMTX9z/o-nz//LraBL^FarUuozdNV{xjShGaAz4jz^NTcy+b]oaz++4wO#N2auZ?{m]h(hga\u003emd3vJl*vS=y3wm5\u003eUAaJ]$wO#0(wPF$SaBtjUy\u0026%fdwQ2NNasy#lBy/XGvQTs?cM)*A3s)Z!wO#3\u0026zEWx(B09Q*DMTXNv}fR0z!%FxefDrKBy/XAefDrRvru79eP+]Hy\u0026Z%DEf{s5z/{8gwGTbUDKp(rB-IpvjS(a=BAzFyiXJd0x([3hvLheez7*3MByPAnxd[vrCYE.jyJzdHwO+{^B7GzCwn=Wfy\u0026r-)feb1je?]1batbn?Aa9l(vp%c]e?Om]e{.kJcObPEay]hbauZ\u0026^vpK7YxjSR3Ef{r}w/$@ewo8m8au.\u003egcV-^mcM)tFaz(4cA+fzpjV%]nwmY{iaARpdzvdHeB8Mhwv}u=CaBsCrarR!HA+(\u003cYasy\u0026ABz#pZfe4fRA=M8sB1Q%AvqWYoA+v4xvpKs@B1.urBy/XIv@DmbA+O#ovRGE!z/o.IDtdsCed9HxEf%L6wc@VMB.LV5auZ\u0026]3lQEkD2NsqjS(aZz/6u1zE+aC3lQE2B.LV5uT[1\u003ezddr)auZ\u0026Ktm8F}arUGyvru79at2fVzGGDgvpKy[z/dZQz/fSrz/xMiwmV()x\u003eI3@z/^QCzGudcayen73lQE9zGx]dy?$jSaBsCrarR!pz/fefjS]7UarR^HarT(oe?O/0wQ2\u003eAvru79fjFTdw]zQffjFTdw]zQfe]#bWcTv\u0026TasySjxj=72Bs}SRC{+cIarR^HarT(oe?O/0wQ2\u003eAvru79fjFTdw]zQffk$GyAa9x\u003ce]#bWcTv\u0026TaszbtA=tD1wIe4CC{+cIarR^HarT(oe?O/0wQ2\u003eAvru79fjFTdw]zQfflqnFw[=GxB98WPt{8oMcV:Axw[=GxB98WPed9HxarR^Htph3QfjY0hfkL6swQ2\u003eqx\u003eI3@z/^Twx\u003eI3@z/^QJwm^h{auZ?{vRGE!z/o.IAaAMded9HxarR^Htph3QfjY0hfkL6swQ2\u003eqx\u003eI3@z/^TKwPz-#xjSYmwm^h{auZ?{AaK6evp%d7AaAMded9HxarR^Htph3QfjY0hfkL6swQ2\u003eqx\u003eI3@z/^TNB.kl1CRi@Cw*Z\u003ebjS(a[B.kl1CRi@Cw*YbparR^HEf}8tEf$xf",
            "ln": 0,
            "col": 1,
            "line": 1
          }
        ],
        "depth": 1,
        "facts": {
          "metrics": {
            "ast": {
              "max_depth": 2,
              "call_count": 0,
              "node_count": 7
            },
            "file": {
              "size": 1868,
              "entropy": 4.77
            },
            "text": {
              "lines": 58,
              "top_char": 111,
              "digit_ratio": 0.01,
              "space_count": 277,
              "char_entropy": 4.77,
              "unique_chars": 60,
              "top_char_null": 0,
              "top_char_ratio": 0.07,
              "avg_line_length": 31.21,
              "max_line_length": 158,
              "non_ascii_ratio": 0,
              "empty_line_ratio": 0.19,
              "last_line_length": 1,
              "whitespace_ratio": 0.18,
              "identifier_density": 0.03,
              "line_length_stddev": 36.02,
              "max_whitespace_run": 1,
              "normalized_unique_identifiers": 0.34
            },
            "binary": {
              "peak_region_bytes": 1868,
              "peak_region_entropy": 4.7
            },
            "consistency": {
              "extension_content_mismatch": 1,
              "extension_content_mismatch.source_as_unknown": 1
            },
            "identifiers": {
              "count": 2,
              "unique": 2,
              "avg_length": 6,
              "max_length": 7,
              "min_length": 5,
              "avg_entropy": 2.36,
              "reuse_ratio": 1,
              "length_stddev": 1,
              "all_lowercase_ratio": 1
            }
          }
        },
        "id": 1,
        "mol": "H(Cm)",
        "path": "/data/samples/incoming/forager/lua/luarocks.org/_/bigfoot/bigfoot-2.1-1.src.rock!!bigfoot-2.1-1.rockspec",
        "pid": 0,
        "risk": 1,
        "sha": "6af62c61882f8f73d54f02acdef2d6b50ae05f6133ef405c1e6c2f6b914de615",
        "size": 1868,
        "traits": [
          {
            "id": "micro-behaviors/communications/url/external/github::github-release-download",
            "atk": "T1105",
            "conf": 0.85,
            "crit": 3,
            "desc": "GitHub release asset URL template",
            "spans": [
              [
                1135,
                46
              ]
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-1",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"the\"",
            "spans": [
              [
                277,
                0
              ]
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-2",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"and\"",
            "spans": [
              [
                647,
                0
              ]
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-3",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"that\"",
            "spans": [
              [
                416,
                0
              ]
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-4",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"have\"",
            "spans": [
              [
                590,
                0
              ]
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-5",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"for\"",
            "spans": [
              [
                235,
                0
              ]
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-7",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"this\"",
            "spans": [
              [
                521,
                0
              ]
            ]
          }
        ],
        "type": "kotlin"
      },
      {
        "depth": 1,
        "facts": {
          "metrics": {
            "file": {
              "size": 843639,
              "entropy": 8
            },
            "binary": {
              "peak_region_bytes": 842752,
              "peak_region_entropy": 7.85
            },
            "archive": {
              "file_count": 10,
              "member_count": 11,
              "script_count": 0,
              "zip_bomb_ratio": 3.54,
              "compressed_size": 842413,
              "directory_count": 1,
              "executable_count": 0,
              "extra_field_size": 0,
              "noise_file_count": 0,
              "compression.ratio": 0.85,
              "hidden_file_count": 0,
              "uncompressed_size": 990669,
              "crc_collision_count": 0,
              "entry_comment_count": 0,
              "max_filename_length": 19,
              "rtlo_filename_count": 0,
              "format.regular_count": 10,
              "nested_archive_count": 0,
              "path_traversal_count": 0,
              "symlink_escape_count": 0,
              "security.setgid_count": 0,
              "security.setuid_count": 0,
              "security.sticky_count": 0,
              "double_extension_count": 0,
              "duplicate_member_count": 0,
              "format.directory_count": 1,
              "security.symlink_count": 0,
              "unicode_filename_count": 0,
              "homoglyph_filename_count": 0,
              "security.encrypted_count": 0,
              "timing.mtime_unique_count": 6,
              "timing.mtime_unique_ratio": 0.55,
              "misplaced_executable_count": 0,
              "timing.mtime_dominant_count": 5,
              "timing.mtime_dominant_ratio": 0.45,
              "timing.mtime_spread_seconds": 25422128,
              "timing.sentinel_mtime_count": 0,
              "security.world_writable_count": 0,
              "compression.method_counts.stored": 1,
              "compression.method_counts.deflate": 10
            }
          }
        },
        "id": 2,
        "mol": "Md₂(Pd)",
        "path": "/data/samples/incoming/forager/lua/luarocks.org/_/bigfoot/bigfoot-2.1-1.src.rock!!bigfoot.zip",
        "pid": 0,
        "risk": 2,
        "sha": "869197931fa7ffe011a7306d1ed60f083233ed49e20de09e422b644e91ba6f3a",
        "size": 843639,
        "traits": [
          {
            "id": "metadata/document/pdf/action::pdf-action-uri",
            "conf": 0.9,
            "crit": 3,
            "desc": "PDF URI action present"
          },
          {
            "id": "metadata/document/pdf/action::pdf-sparse-uri-pages",
            "conf": 0.9,
            "crit": 3,
            "desc": "PDF has sparse URI actions per page"
          },
          {
            "id": "metadata/file/archive::archive-at-least-10-members",
            "conf": 0.9,
            "crit": 3,
            "desc": "Archive contains at least ten members"
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-1",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"the\""
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-2",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"and\""
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-3",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"that\""
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-4",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"have\""
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-5",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"for\""
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-6",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"with\""
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-7",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"this\""
          }
        ],
        "type": "zip"
      },
      {
        "depth": 2,
        "facts": {
          "metrics": {
            "pdf": {
              "eof_count": 1,
              "font_count": 19,
              "page_count": 4,
              "action_count": 1,
              "header_count": 1,
              "object_count": 26,
              "objstm_count": 1,
              "stream_count": 25,
              "leading_bytes": 0,
              "trailer_count": 0,
              "trailing_bytes": 1,
              "startxref_count": 1,
              "annotation_count": 1,
              "uri_action_count": 1,
              "xref_stream_count": 1,
              "flate_filter_count": 25,
              "risky_feature_score": 1,
              "annotations_per_page": 0.25,
              "uri_actions_per_page": 0.25,
              "visible_object_count": 26,
              "signature_object_count": 0,
              "unreferenced_object_count": 25,
              "stream_bad_delimiter_count": 0,
              "stream_invalid_length_count": 0,
              "stream_missing_length_count": 0,
              "stream_length_mismatch_count": 0,
              "stream_missing_endstream_count": 0,
              "object_stream_inner_object_count": 91
            },
            "file": {
              "size": 183403,
              "entropy": 8
            },
            "binary": {
              "peak_region_bytes": 182272,
              "peak_region_entropy": 7.84
            }
          }
        },
        "id": 4,
        "ident": {
          "trust": "unsigned",
          "producer": {
            "value": "pdfTeX-1.40.15",
            "source": "pdf.info.producer",
            "verified": false
          }
        },
        "mol": "Md(Pd)",
        "path": "/data/samples/incoming/forager/lua/luarocks.org/_/bigfoot/bigfoot-2.1-1.src.rock!!bigfoot.zip!!bigfoot/suffix.pdf",
        "pid": 2,
        "risk": 1,
        "sha": "f06f1feb5afbf123c9251b5f2609f2bc74bdd5198640e48a578b6a9c7630dab1",
        "size": 183403,
        "traits": [
          {
            "id": "metadata/document/pdf/action::pdf-action-uri",
            "conf": 0.9,
            "crit": 3,
            "desc": "PDF URI action present"
          },
          {
            "id": "metadata/document/pdf/action::pdf-sparse-uri-pages",
            "conf": 0.9,
            "crit": 3,
            "desc": "PDF has sparse URI actions per page"
          }
        ],
        "type": "pdf"
      },
      {
        "depth": 2,
        "id": 6,
        "ident": {
          "trust": "unsigned",
          "producer": {
            "value": "pdfTeX-1.40.15",
            "source": "pdf.info.producer",
            "verified": false
          }
        },
        "path": "/data/samples/incoming/forager/lua/luarocks.org/_/bigfoot/bigfoot-2.1-1.src.rock!!bigfoot.zip!!bigfoot/perpage.pdf",
        "pid": 2,
        "risk": 1,
        "sha": "6a4eed583a8ef4fcf3f7b83c3459d4696f17685db10f579975784ab4c564b84a",
        "size": 203798,
        "type": "pdf"
      },
      {
        "depth": 2,
        "id": 10,
        "ident": {
          "trust": "unsigned",
          "producer": {
            "value": "pdfTeX-1.40.15",
            "source": "pdf.info.producer",
            "verified": false
          }
        },
        "path": "/data/samples/incoming/forager/lua/luarocks.org/_/bigfoot/bigfoot-2.1-1.src.rock!!bigfoot.zip!!bigfoot/bigfoot.pdf",
        "pid": 2,
        "risk": 1,
        "sha": "a4197b9a2e809f4d50a964f43da884f843f4b942fc0e1541ad19d364e886148b",
        "size": 405835,
        "type": "pdf"
      },
      {
        "id": 13,
        "sha": "203f1251192ba86e1195a0231d83cd961457d3b0ee465afe02156999e54cad30",
        "path": "bigfoot@2.1-1.registry.json",
        "size": 741,
        "type": "registry",
        "depth": 1
      }
    ],
    "omitted_files": 1,
    "rev": "17dc6",
    "v": "8"
  }
}