{
  "ml": {
    "v": "7",
    "eng": "2.8.0",
    "lvl": -1,
    "conf": 0,
    "mods": [
      {
        "cls": 0,
        "raw": 0.04646492,
        "rte": "az",
        "prob": 0.04646492
      },
      {
        "cls": 0,
        "raw": 0.0067974725,
        "rte": "az/tar",
        "prob": 0.0067974725
      }
    ],
    "prob": 0.04646492,
    "files": [
      {
        "id": 0,
        "lvl": -1,
        "conf": 0,
        "prob": 0.04646492004394531,
        "type": "gem"
      },
      {
        "id": 1,
        "lvl": -1,
        "conf": 0,
        "prob": 0.00002917647361755371,
        "type": "tar.gz"
      },
      {
        "id": 2,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000024934610337368213,
        "type": "ruby"
      },
      {
        "id": 3,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000014106432900007349,
        "type": "ruby"
      },
      {
        "id": 5,
        "lvl": -1,
        "conf": 0,
        "prob": 0.00001806020736694336,
        "type": "ruby"
      },
      {
        "id": 6,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000015596548109897412,
        "type": "ruby"
      },
      {
        "id": 7,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000016033649444580078,
        "type": "ruby"
      },
      {
        "id": 8,
        "lvl": -1,
        "conf": 0,
        "prob": 0.00001586476901138667,
        "type": "ruby"
      },
      {
        "id": 10,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000012050072655256372,
        "type": "ruby"
      },
      {
        "id": 21,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000013689200386579614,
        "type": "registry"
      },
      {
        "id": 22,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000013689200386579614,
        "type": "registry"
      },
      {
        "id": 23,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000013401110663835425,
        "type": "registry"
      },
      {
        "id": 24,
        "lvl": -1,
        "conf": 0,
        "prob": 0.00001424551010131836,
        "type": "registry"
      },
      {
        "id": 25,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000013401110663835425,
        "type": "registry"
      },
      {
        "id": 26,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000014543533325195312,
        "type": "registry"
      },
      {
        "id": 27,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000013401110663835425,
        "type": "registry"
      },
      {
        "id": 28,
        "lvl": -1,
        "conf": 0,
        "prob": 0.00012815992522519082,
        "type": "gem"
      },
      {
        "id": 29,
        "lvl": -1,
        "conf": 0,
        "prob": 0.00013811390090268105,
        "type": "tar.gz"
      },
      {
        "id": 30,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000012159347534179688,
        "type": "ruby"
      },
      {
        "id": 31,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000012725591659545898,
        "type": "ruby"
      },
      {
        "id": 32,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000015556812286376953,
        "type": "ruby"
      },
      {
        "id": 33,
        "lvl": -1,
        "conf": 0,
        "prob": 0.00001858671566878911,
        "type": "ruby"
      },
      {
        "id": 34,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000016490617781528272,
        "type": "ruby"
      },
      {
        "id": 35,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000013242165550764184,
        "type": "ruby"
      },
      {
        "id": 36,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000016023715943447314,
        "type": "ruby"
      },
      {
        "id": 37,
        "lvl": -1,
        "conf": 0,
        "prob": 0.00001687804797256831,
        "type": "ruby"
      },
      {
        "id": 38,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000016003847122192383,
        "type": "ruby"
      },
      {
        "id": 39,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000013132889762346167,
        "type": "ruby"
      },
      {
        "id": 40,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000013122956261213403,
        "type": "ruby"
      },
      {
        "id": 41,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000013132889762346167,
        "type": "ruby"
      },
      {
        "id": 42,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000013262033462524414,
        "type": "ruby"
      },
      {
        "id": 43,
        "lvl": -1,
        "conf": 0,
        "prob": 0.00001665949821472168,
        "type": "ruby"
      },
      {
        "id": 44,
        "lvl": -1,
        "conf": 0,
        "prob": 0.00001757343670760747,
        "type": "ruby"
      },
      {
        "id": 45,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000013510386452253442,
        "type": "ruby"
      },
      {
        "id": 46,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000013460715308610816,
        "type": "ruby"
      },
      {
        "id": 47,
        "lvl": -1,
        "conf": 0,
        "prob": 0.00001572569271957036,
        "type": "ruby"
      },
      {
        "id": 48,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000020722547560581006,
        "type": "ruby"
      },
      {
        "id": 49,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000014275312423706055,
        "type": "ruby"
      },
      {
        "id": 52,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000022689500838168897,
        "type": "ruby"
      },
      {
        "id": 53,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000016361474990844727,
        "type": "ruby"
      },
      {
        "id": 54,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000012616316780622583,
        "type": "ruby"
      },
      {
        "id": 55,
        "lvl": -1,
        "conf": 0,
        "prob": 0.00001757343670760747,
        "type": "ruby"
      },
      {
        "id": 92,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000013689200386579614,
        "type": "registry"
      }
    ],
    "version": "v18.18",
    "analyzed_at": "2026-09-07T00:30:55Z"
  },
  "path": "app-info-2.1.4.gem",
  "raw": {
    "fetched": [
      {
        "kind": "dependency",
        "cached": true,
        "locator": "pkg:gem/ruby-macho",
        "outcome": "skipped",
        "fetched_at": 1788741055,
        "source_offset": 0,
        "source_sha256": "f3ecd3ebdbb860c9caaa78d2ce97fb8293a001bc4bea45cfb3a6036dd5b8028e",
        "content_sha256": "8264de61e98f1eadf546c69bc7b1da573cb29e5bf0fc0497aeaaab54d241b529"
      },
      {
        "kind": "dependency",
        "size": 59904,
        "cached": false,
        "status": 200,
        "headers": [
          [
            "connection",
            "keep-alive"
          ],
          [
            "content-length",
            "59904"
          ],
          [
            "x-amz-id-2",
            "snYu7Oz1RgxvpLIr7gMCGKMgkQ7nqtGwRW3zFAmTkF9Y3rVsOx9K/ZhtfudBhXTIgEBFoXW/FWA="
          ],
          [
            "x-amz-request-id",
            "01KM1M292SM3KFPK"
          ],
          [
            "x-amz-replication-status",
            "PENDING"
          ],
          [
            "last-modified",
            "Tue, 01 Sep 2026 20:50:31 GMT"
          ],
          [
            "etag",
            "\"b30b26594fc6ed5f2c3ed2aaf7d05877\""
          ],
          [
            "x-amz-server-side-encryption",
            "AES256"
          ],
          [
            "x-amz-meta-sha256",
            "JomU1E1iKC0c/Zm/EOrkjXJnGZFYrX6j4f7i2pRYtpU="
          ],
          [
            "x-amz-meta-gem",
            "rubyzip"
          ],
          [
            "x-amz-meta-version",
            "3.6.0"
          ],
          [
            "cache-control",
            "max-age=31536000"
          ],
          [
            "x-amz-meta-platform",
            "ruby"
          ],
          [
            "x-amz-meta-surrogate-key",
            "gem/rubyzip"
          ],
          [
            "x-amz-version-id",
            "EVJbQakWJZItKldbuBTa_3bkuoOuNoM."
          ],
          [
            "content-type",
            "application/octet-stream"
          ],
          [
            "via",
            "1.1 varnish, 1.1 varnish"
          ],
          [
            "x-backend",
            "F_S3 52.92.204.90:443, fastlyshield--shield_ssl_cache_bfi_krnt7300086_BFI 167.82.143.86:443"
          ],
          [
            "accept-ranges",
            "bytes"
          ],
          [
            "age",
            "445223"
          ],
          [
            "date",
            "Mon, 07 Sep 2026 00:30:55 GMT"
          ],
          [
            "x-served-by",
            "cache-bfi-krnt7300086-BFI, cache-mci680044-MCI"
          ],
          [
            "x-cache",
            "HIT, HIT"
          ],
          [
            "x-cache-hits",
            "3564, 0"
          ],
          [
            "x-timer",
            "S1788741055.106765,VS0,VE1"
          ],
          [
            "server",
            "RubyGems.org"
          ]
        ],
        "locator": "pkg:gem/rubyzip@3.6.0?checksum=sha256:268994d44d62282d1cfd99bf10eae48d7267199158ad7ea3e1fee2da9458b695\u0026platform=ruby",
        "outcome": "ok",
        "final_url": "https://rubygems.org/downloads/rubyzip-3.6.0.gem",
        "fetched_at": 1788741055,
        "pin_verified": true,
        "resolved_url": "https://rubygems.org/downloads/rubyzip-3.6.0.gem",
        "source_offset": 0,
        "source_sha256": "f3ecd3ebdbb860c9caaa78d2ce97fb8293a001bc4bea45cfb3a6036dd5b8028e",
        "content_sha256": "268994d44d62282d1cfd99bf10eae48d7267199158ad7ea3e1fee2da9458b695"
      }
    ],
    "files": [
      {
        "id": 0,
        "ctx": [
          {
            "b": "zdN/$wmoN*e[YFg00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fFCgmg=d2?fFCgmfFA",
            "ln": 0
          }
        ],
        "mol": "H₄(Cm₂DbF₂Po₂)Md(Pa)",
        "sha": "f3ecd3ebdbb860c9caaa78d2ce97fb8293a001bc4bea45cfb3a6036dd5b8028e",
        "path": "app-info-2.1.4.gem",
        "refs": [
          {
            "to": "pkg:gem/CFPropertyList",
            "off": 0,
            "kind": "dependency"
          },
          {
            "to": "pkg:gem/image_size",
            "off": 0,
            "kind": "dependency"
          },
          {
            "to": "pkg:gem/pngdefry",
            "off": 0,
            "kind": "dependency"
          },
          {
            "to": "pkg:gem/ruby-macho",
            "off": 0,
            "kind": "dependency"
          },
          {
            "to": "pkg:gem/ruby_android",
            "off": 0,
            "kind": "dependency"
          },
          {
            "to": "pkg:gem/rubyzip",
            "off": 0,
            "file": 28,
            "kind": "dependency"
          },
          {
            "to": "pkg:gem/uuidtools",
            "off": 0,
            "kind": "dependency"
          }
        ],
        "risk": 6,
        "size": 17408,
        "type": "gem",
        "facts": {
          "metrics": {
            "gem": {
              "dependency_count": 10,
              "runtime_dependency_count": 7,
              "development_dependency_count": 3
            },
            "file": {
              "size": 17408,
              "entropy": 7.24
            },
            "binary": {
              "peak_region_bytes": 12288,
              "peak_region_entropy": 7.83
            },
            "archive": {
              "file_count": 3,
              "member_count": 3,
              "script_count": 0,
              "directory_count": 0,
              "executable_count": 0,
              "hidden_file_count": 0,
              "uncompressed_size": 14152,
              "max_filename_length": 17,
              "rtlo_filename_count": 0,
              "format.regular_count": 3,
              "nested_archive_count": 3,
              "path_traversal_count": 0,
              "symlink_escape_count": 0,
              "security.setgid_count": 0,
              "security.setuid_count": 0,
              "security.sticky_count": 0,
              "double_extension_count": 0,
              "security.symlink_count": 0,
              "unicode_filename_count": 0,
              "homoglyph_filename_count": 0,
              "timing.mtime_unique_count": 1,
              "misplaced_executable_count": 0,
              "timing.mtime_spread_seconds": 0,
              "security.world_writable_count": 0
            },
            "references": {
              "declared_count": 7,
              "unresolved_count": 0,
              "security_hold_count": 0,
              "unresolved_extension_count": 0
            }
          }
        },
        "ident": {
          "name": {
            "value": "app-info",
            "source": "gem.name",
            "verified": false
          },
          "urls": [
            {
              "url": "http://github.com/icyleaf/app-info",
              "kind": "homepage",
              "source": "gem.homepage"
            }
          ],
          "trust": "unsigned",
          "authors": [
            {
              "name": "icyleaf",
              "role": "author",
              "source": "gem.authors"
            }
          ],
          "version": {
            "value": "2.1.4",
            "source": "gem.version",
            "verified": false
          }
        },
        "traits": [
          {
            "id": "micro-behaviors/data/source/dynamic/reflect::ruby-public-send-call",
            "conf": 0.9,
            "crit": 3,
            "desc": "Ruby public_send method dispatch"
          },
          {
            "id": "micro-behaviors/crypto/certificate/usage::x509-string",
            "conf": 0.6,
            "crit": 2,
            "desc": "References X.509 certificate terminology"
          },
          {
            "id": "micro-behaviors/data/source/dynamic/reflect::ruby-send-call",
            "conf": 0.9,
            "crit": 3,
            "desc": "Ruby dynamically invokes a method with send"
          },
          {
            "id": "metadata/file/profile/language::lang-english--atom-7",
            "conf": 0.8,
            "crit": 2,
            "desc": "English function-word token \"this\""
          },
          {
            "id": "metadata/package/config::gemspec-name-assignment",
            "conf": 0.9,
            "crit": 3,
            "desc": "Ruby gemspec assigns package name"
          },
          {
            "id": "metadata/file/profile/language::lang-english--atom-1",
            "conf": 0.8,
            "crit": 2,
            "desc": "English function-word token \"the\""
          },
          {
            "id": "micro-behaviors/communications/http/url/forge::public-code-forge-url",
            "conf": 0.9,
            "crit": 3,
            "desc": "References a public code-forge URL"
          },
          {
            "id": "metadata/file/profile/language::lang-english--atom-6",
            "conf": 0.8,
            "crit": 2,
            "desc": "English function-word token \"with\""
          },
          {
            "id": "micro-behaviors/communications/http/url/scheme::cleartext-http-url-code-literal",
            "atk": "T1071.001",
            "mbc": "C0002",
            "conf": 0.9,
            "crit": 3,
            "desc": "Code embeds cleartext HTTP URL literal"
          },
          {
            "id": "micro-behaviors/communications/http/message::http-prefix",
            "conf": 0.9,
            "crit": 2,
            "desc": "HTTP protocol prefix"
          },
          {
            "id": "metadata/file/profile/language::lang-english--atom-5",
            "conf": 0.8,
            "crit": 2,
            "desc": "English function-word token \"for\""
          },
          {
            "id": "micro-behaviors/fs/directory/mkdir::ruby-fileutils-mkdir-p",
            "conf": 0.9,
            "crit": 3,
            "desc": "Ruby creates a directory tree"
          },
          {
            "id": "metadata/file/profile/language::lang-english--atom-3",
            "conf": 0.8,
            "crit": 2,
            "desc": "English function-word token \"that\""
          },
          {
            "id": "micro-behaviors/process/interpreter/eval::ruby-instance-eval",
            "atk": "T1059",
            "conf": 0.9,
            "crit": 3,
            "desc": "Ruby instance_eval call"
          },
          {
            "id": "micro-behaviors/process/create/shell/lang::ruby-subshell-command",
            "conf": 0.93,
            "crit": 3,
            "desc": "Ruby subshell command execution"
          },
          {
            "id": "metadata/file/profile/language::lang-english--atom-2",
            "conf": 0.8,
            "crit": 2,
            "desc": "English function-word token \"and\""
          },
          {
            "id": "micro-behaviors/fs/directory/delete::ruby-fileutils-rm-rf",
            "atk": "T1070.004",
            "mbc": "C0047",
            "conf": 0.95,
            "crit": 3,
            "desc": "Ruby recursively deletes a directory tree"
          },
          {
            "id": "micro-behaviors/crypto/certificate/usage::certificate-ref",
            "conf": 0.5,
            "crit": 2,
            "desc": "References certificate terminology"
          },
          {
            "id": "micro-behaviors/communications/http/message::http-url-literal",
            "conf": 0.75,
            "crit": 2,
            "desc": "HTTP URL string literal"
          }
        ]
      },
      {
        "depth": 1,
        "facts": {
          "metrics": {
            "file": {
              "size": 12891,
              "entropy": 7.98
            },
            "parse": {
              "error_count": 1
            },
            "binary": {
              "peak_region_bytes": 12891,
              "peak_region_entropy": 7.83
            }
          }
        },
        "id": 1,
        "mol": "H₄(Cm₂DbF₂Po₂)Md(Pa)",
        "path": "app-info-2.1.4.gem!!data.tar.gz",
        "pid": 0,
        "risk": 6,
        "sha": "ff26401d6b6332d064479244f032539266b17fe2a490db1860a9847767d8f631",
        "size": 12891,
        "traits": [
          {
            "id": "metadata/file/profile/language::lang-english--atom-5",
            "conf": 0.8,
            "crit": 2,
            "desc": "English function-word token \"for\""
          },
          {
            "id": "micro-behaviors/fs/directory/delete::ruby-fileutils-rm-rf",
            "atk": "T1070.004",
            "mbc": "C0047",
            "conf": 0.95,
            "crit": 3,
            "desc": "Ruby recursively deletes a directory tree"
          },
          {
            "id": "micro-behaviors/crypto/certificate/usage::x509-string",
            "conf": 0.6,
            "crit": 2,
            "desc": "References X.509 certificate terminology"
          },
          {
            "id": "micro-behaviors/communications/http/url/scheme::cleartext-http-url-code-literal",
            "atk": "T1071.001",
            "mbc": "C0002",
            "conf": 0.9,
            "crit": 3,
            "desc": "Code embeds cleartext HTTP URL literal"
          },
          {
            "id": "micro-behaviors/data/source/dynamic/reflect::ruby-public-send-call",
            "conf": 0.9,
            "crit": 3,
            "desc": "Ruby public_send method dispatch"
          },
          {
            "id": "micro-behaviors/process/create/shell/lang::ruby-subshell-command",
            "conf": 0.93,
            "crit": 3,
            "desc": "Ruby subshell command execution"
          },
          {
            "id": "micro-behaviors/communications/http/message::http-prefix",
            "conf": 0.9,
            "crit": 2,
            "desc": "HTTP protocol prefix"
          },
          {
            "id": "metadata/file/profile/language::lang-english--atom-7",
            "conf": 0.8,
            "crit": 2,
            "desc": "English function-word token \"this\""
          },
          {
            "id": "metadata/package/config::gemspec-name-assignment",
            "conf": 0.9,
            "crit": 3,
            "desc": "Ruby gemspec assigns package name"
          },
          {
            "id": "micro-behaviors/process/interpreter/eval::ruby-instance-eval",
            "atk": "T1059",
            "conf": 0.9,
            "crit": 3,
            "desc": "Ruby instance_eval call"
          },
          {
            "id": "micro-behaviors/crypto/certificate/usage::certificate-ref",
            "conf": 0.5,
            "crit": 2,
            "desc": "References certificate terminology"
          },
          {
            "id": "micro-behaviors/fs/directory/mkdir::ruby-fileutils-mkdir-p",
            "conf": 0.9,
            "crit": 3,
            "desc": "Ruby creates a directory tree"
          },
          {
            "id": "metadata/file/profile/language::lang-english--atom-6",
            "conf": 0.8,
            "crit": 2,
            "desc": "English function-word token \"with\""
          },
          {
            "id": "micro-behaviors/communications/http/url/forge::public-code-forge-url",
            "conf": 0.9,
            "crit": 3,
            "desc": "References a public code-forge URL"
          },
          {
            "id": "micro-behaviors/communications/http/message::http-url-literal",
            "conf": 0.75,
            "crit": 2,
            "desc": "HTTP URL string literal"
          },
          {
            "id": "micro-behaviors/data/source/dynamic/reflect::ruby-send-call",
            "conf": 0.9,
            "crit": 3,
            "desc": "Ruby dynamically invokes a method with send"
          },
          {
            "id": "metadata/file/profile/language::lang-english--atom-2",
            "conf": 0.8,
            "crit": 2,
            "desc": "English function-word token \"and\""
          },
          {
            "id": "metadata/file/profile/language::lang-english--atom-1",
            "conf": 0.8,
            "crit": 2,
            "desc": "English function-word token \"the\""
          },
          {
            "id": "metadata/file/profile/language::lang-english--atom-3",
            "conf": 0.8,
            "crit": 2,
            "desc": "English function-word token \"that\""
          }
        ],
        "type": "tar.gz"
      },
      {
        "id": 2,
        "mol": "H₂(Cm₂Po)Md(Pa)",
        "sha": "c66e6f0d9456b6ec7ded3cc134002ebd690309c3d042d943fbc5ddfd0caf7216",
        "path": "app-info-2.1.4.gem!!data.tar.gz!!app_info.gemspec",
        "risk": 3,
        "size": 1458,
        "type": "ruby",
        "depth": 2
      },
      {
        "id": 3,
        "mol": "H(Db)",
        "sha": "ee7407514109da259393c8a1a094b2d729a1dc7d125b8e97bad0eea8bb1313b4",
        "path": "app-info-2.1.4.gem!!data.tar.gz!!lib/app_info.rb",
        "risk": 2,
        "size": 2338,
        "type": "ruby",
        "depth": 2
      },
      {
        "id": 5,
        "mol": "H₃(CmDbPo)",
        "sha": "2142706e81a49940352a75626fb2c4356c4d9f26f656264cef4dc50fd9b5b61d",
        "path": "app-info-2.1.4.gem!!data.tar.gz!!lib/app_info/core_ext/object/try.rb",
        "risk": 3,
        "size": 3015,
        "type": "ruby",
        "depth": 2
      },
      {
        "id": 6,
        "mol": "H(F)",
        "sha": "8ae88ee1089d161917e265295b27a7c0be6fcde258123e7037bc06489b0fd982",
        "path": "app-info-2.1.4.gem!!data.tar.gz!!lib/app_info/ipa.rb",
        "risk": 1,
        "size": 3609,
        "type": "ruby",
        "depth": 2
      },
      {
        "id": 7,
        "mol": "H(Db)",
        "sha": "d3684ffb7e154de30327a34c29f2a581ae546c3c651201a185b6107f454a4904",
        "path": "app-info-2.1.4.gem!!data.tar.gz!!lib/app_info/ipa/info_plist.rb",
        "risk": 2,
        "size": 2904,
        "type": "ruby",
        "depth": 2
      },
      {
        "id": 8,
        "mol": "H(Db)",
        "sha": "fd13f3979b493fcd935f62859ff514e49c1a1efb7d9d4c4910f214a6a6421d93",
        "path": "app-info-2.1.4.gem!!data.tar.gz!!lib/app_info/ipa/mobile_provision.rb",
        "risk": 2,
        "size": 2629,
        "type": "ruby",
        "depth": 2
      },
      {
        "id": 10,
        "mol": "H₂(CmF)",
        "sha": "45e9358015ff7f8c010e0d71867ace90a9c2e97ece878a945d22c77a623ba75b",
        "path": "app-info-2.1.4.gem!!data.tar.gz!!lib/app_info/util.rb",
        "risk": 2,
        "size": 1521,
        "type": "ruby",
        "depth": 2
      },
      {
        "id": 21,
        "sha": "dc62a66cbe5b8bdfe2ae56582cdbb1881696ee35ec5b97afc2f87fefc7674d91",
        "path": "CFPropertyList@4.0.0.registry.json",
        "size": 902,
        "type": "registry",
        "depth": 1
      },
      {
        "id": 22,
        "sha": "dc511fa3bf1c5bb8aa63d585e546980f64a3fa056bec6a7e9f3b59c5789bf5c1",
        "path": "image_size@3.6.0.registry.json",
        "size": 1013,
        "type": "registry",
        "depth": 1
      },
      {
        "id": 23,
        "sha": "532c1d8ae49e480fd85fdd65b032cc47398bd6d4183c0938f2771a8be40c58e5",
        "path": "pngdefry@0.1.3.registry.json",
        "size": 820,
        "type": "registry",
        "depth": 1
      },
      {
        "id": 24,
        "mol": "Md(Re)",
        "sha": "08a4b3e030db77e755b9ddb51c3aefa2b2cbc58c152fa42003e26530cb9b6ad4",
        "path": "ruby-macho@7.0.0.registry.json",
        "risk": 1,
        "size": 850,
        "type": "registry",
        "depth": 1
      },
      {
        "id": 25,
        "sha": "0fee5d438eae9e9effdd5dad8a50e8439bb6311bb292faa751c3479d269daf68",
        "path": "ruby_android@0.7.7.registry.json",
        "size": 858,
        "type": "registry",
        "depth": 1
      },
      {
        "id": 26,
        "mol": "Md(Re)",
        "sha": "676e888a4b47785c7b125e161482d6fd4e69f4c5b58375c3b47bf5e682d09213",
        "path": "rubyzip@3.6.0.registry.json",
        "risk": 1,
        "size": 930,
        "type": "registry",
        "depth": 1
      },
      {
        "id": 27,
        "sha": "f3e2e21d5919690dab46acf2d32a33cf8bebb43acfcf7acb9d07cba5ddce0776",
        "path": "uuidtools@3.0.0.registry.json",
        "size": 847,
        "type": "registry",
        "depth": 1
      },
      {
        "depth": 1,
        "facts": {
          "metrics": {
            "gem": {
              "dependency_count": 8,
              "runtime_dependency_count": 0,
              "development_dependency_count": 8
            },
            "file": {
              "size": 59904,
              "entropy": 7.86
            },
            "binary": {
              "peak_region_bytes": 54272,
              "peak_region_entropy": 7.85
            },
            "archive": {
              "file_count": 3,
              "member_count": 3,
              "script_count": 0,
              "directory_count": 0,
              "executable_count": 0,
              "hidden_file_count": 0,
              "uncompressed_size": 56587,
              "max_filename_length": 17,
              "rtlo_filename_count": 0,
              "format.regular_count": 3,
              "nested_archive_count": 3,
              "path_traversal_count": 0,
              "symlink_escape_count": 0,
              "security.setgid_count": 0,
              "security.setuid_count": 0,
              "security.sticky_count": 0,
              "double_extension_count": 0,
              "security.symlink_count": 0,
              "unicode_filename_count": 0,
              "homoglyph_filename_count": 0,
              "timing.mtime_unique_count": 1,
              "misplaced_executable_count": 0,
              "timing.mtime_spread_seconds": 0,
              "security.world_writable_count": 0
            }
          }
        },
        "id": 28,
        "ident": {
          "name": {
            "value": "rubyzip",
            "source": "gem.name",
            "verified": false
          },
          "urls": [
            {
              "url": "http://github.com/rubyzip/rubyzip",
              "kind": "homepage",
              "source": "gem.homepage"
            }
          ],
          "trust": "unsigned",
          "authors": [
            {
              "name": "Robert Haines",
              "role": "author",
              "source": "gem.authors"
            },
            {
              "name": "John Lees-Miller",
              "role": "author",
              "source": "gem.authors"
            },
            {
              "name": "Alexander Simonov",
              "role": "author",
              "source": "gem.authors"
            }
          ],
          "version": {
            "value": "3.6.0",
            "source": "gem.version",
            "verified": false
          }
        },
        "mol": "O₃(CLaS)H₇(Cm₂Cr₂Db₅F₅Os₃Po₂U)Md(Pa)",
        "path": "pkg:gem/rubyzip@3.6.0?checksum=sha256:268994d44d62282d1cfd99bf10eae48d7267199158ad7ea3e1fee2da9458b695\u0026platform=ruby",
        "pid": 6,
        "rel": "fetched",
        "risk": 55,
        "sha": "268994d44d62282d1cfd99bf10eae48d7267199158ad7ea3e1fee2da9458b695",
        "size": 59904,
        "traits": [
          {
            "id": "micro-behaviors/os/console/io::stdin-gets-call",
            "atk": "T1059",
            "conf": 0.75,
            "crit": 3,
            "desc": "Ruby unqualified gets line read"
          },
          {
            "id": "micro-behaviors/fs/directory/mkdir::ruby-fileutils-mkdir-p",
            "conf": 0.9,
            "crit": 3,
            "desc": "Ruby creates a directory tree"
          },
          {
            "id": "micro-behaviors/fs/path/archive::unix-temp-archive-path",
            "conf": 0.86,
            "crit": 3,
            "desc": "Unix temporary archive path"
          },
          {
            "id": "micro-behaviors/communications/email/address::google-consumer-email-domain-suffix",
            "conf": 0.55,
            "crit": 3,
            "desc": "Gmail consumer email domain suffix"
          },
          {
            "id": "micro-behaviors/communications/http/message::https-prefix",
            "conf": 0.9,
            "crit": 2,
            "desc": "Contains an HTTPS URL prefix"
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-6",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"with\""
          },
          {
            "id": "metadata/file/string/file::tmp",
            "conf": 0.2,
            "crit": 1,
            "desc": "tmp keyword"
          },
          {
            "id": "micro-behaviors/crypto/symmetric/aes/runtime-library::cipher-encrypt-decrypt",
            "mbc": "C0021",
            "conf": 0.85,
            "crit": 3,
            "desc": "OpenSSL cipher encrypt/decrypt"
          },
          {
            "id": "micro-behaviors/data/serialize/envelope::result-assignment-key",
            "conf": 0.4,
            "crit": 1,
            "desc": "Result field or assignment key"
          },
          {
            "id": "micro-behaviors/data/serialize/binary::dense-pack-unpack-calls",
            "mbc": "C0032",
            "conf": 0.9,
            "crit": 3,
            "desc": "Dense Ruby binary packing calls"
          },
          {
            "id": "micro-behaviors/communications/http/message::http-prefix",
            "conf": 0.9,
            "crit": 2,
            "desc": "HTTP protocol prefix"
          },
          {
            "id": "micro-behaviors/communications/http/url/scheme::cleartext-http-url-code-literal",
            "atk": "T1071.001",
            "mbc": "C0002",
            "conf": 0.9,
            "crit": 3,
            "desc": "Code embeds cleartext HTTP URL literal"
          },
          {
            "id": "micro-behaviors/crypto/library/keyword::encryption-algorithm-keyword",
            "conf": 0.5,
            "crit": 3,
            "desc": "Encryption algorithm keyword",
            "from": [
              {
                "file": 1
              },
              {
                "file": 11
              }
            ],
            "uses": [
              40
            ]
          },
          {
            "id": "micro-behaviors/data/source/dynamic/reflect::ruby-alias-method",
            "atk": "T1059",
            "conf": 0.7,
            "crit": 3,
            "desc": "Ruby rebinds a method with alias_method"
          },
          {
            "id": "micro-behaviors/data/decode/hex::ruby-pack-hex-decode",
            "conf": 0.8,
            "crit": 3,
            "desc": "Ruby pack decodes hexadecimal data"
          },
          {
            "id": "micro-behaviors/data/source/dynamic/reflect::ruby-const-get",
            "conf": 0.9,
            "crit": 3,
            "desc": "Ruby dynamically resolves a constant"
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-7",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"this\""
          },
          {
            "id": "micro-behaviors/data/source/dynamic/reflect::ruby-send-call",
            "conf": 0.9,
            "crit": 3,
            "desc": "Ruby dynamically invokes a method with send"
          },
          {
            "id": "micro-behaviors/os/sysinfo/platform/runtime::ruby-host-os-config-access",
            "atk": "T1082",
            "conf": 0.8,
            "crit": 3,
            "desc": "Ruby host_os config access"
          },
          {
            "id": "objectives/supply-chain/install-hook/package/rubygems::file-imports",
            "atk": "T1195.002",
            "conf": 0.5,
            "crit": 3,
            "desc": "File operation imports",
            "from": [
              {
                "file": 1
              },
              {
                "file": 2
              },
              {
                "file": 17
              },
              {
                "file": 24
              }
            ],
            "uses": [
              22
            ]
          },
          {
            "id": "micro-behaviors/crypto/hash/hmac::hmac-api-reference",
            "mbc": "C0029",
            "conf": 0.9,
            "crit": 3,
            "desc": "References an HMAC API"
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-2",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"and\""
          },
          {
            "id": "micro-behaviors/fs/read/file/full::ruby-file-read-content",
            "atk": "T1083",
            "conf": 0.5,
            "crit": 2,
            "desc": "Reads file content with Ruby File.read"
          },
          {
            "id": "micro-behaviors/data/source/language::ruby-dynamic-method-definition",
            "conf": 0.8,
            "crit": 3,
            "desc": "Ruby defines methods dynamically"
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-1",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"the\""
          },
          {
            "id": "micro-behaviors/os/console/io::stdin-gets",
            "atk": "T1059",
            "conf": 0.8,
            "crit": 3,
            "desc": "Interactive line read (gets.chomp)",
            "from": [
              {
                "file": 1
              },
              {
                "off": 22427,
                "file": 17,
                "line": 718
              },
              {
                "off": 1245,
                "file": 18,
                "line": 65
              },
              {
                "off": 1713,
                "file": 28,
                "line": 63
              },
              {
                "off": 6032,
                "file": 30,
                "line": 165
              },
              {
                "file": 32
              }
            ],
            "uses": [
              0,
              27
            ]
          },
          {
            "id": "micro-behaviors/fs/chmod/modify::ruby-chmod-method",
            "atk": "T1222",
            "mbc": "E1222",
            "conf": 0.75,
            "crit": 3,
            "desc": "Changes file permissions with Ruby chmod"
          },
          {
            "id": "micro-behaviors/os/console/io::stdin-chomp-call",
            "atk": "T1059",
            "conf": 0.6,
            "crit": 3,
            "desc": "chomp trailing-newline trim"
          },
          {
            "id": "micro-behaviors/communications/http/url/forge::public-code-forge-url",
            "conf": 0.9,
            "crit": 3,
            "desc": "References a public code-forge URL"
          },
          {
            "id": "micro-behaviors/os/module/load::ruby-require-relative",
            "conf": 0.9,
            "crit": 3,
            "desc": "Ruby loads a relative source module"
          },
          {
            "id": "micro-behaviors/fs/path/temp::tmp-zip-path",
            "conf": 0.6,
            "crit": 3,
            "desc": "Temporary directory ZIP path reference"
          },
          {
            "id": "micro-behaviors/data/parse/vocabulary::password-key-value-pair",
            "conf": 0.8,
            "crit": 3,
            "desc": "password/passwd key with inline value"
          },
          {
            "id": "objectives/anti-static/obfuscation/code-metrics/strings::few-strings",
            "atk": "T1027",
            "mbc": "B0032",
            "conf": 0.4,
            "crit": 3,
            "desc": "Very few string literals"
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-5",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"for\""
          },
          {
            "id": "micro-behaviors/fs/path/temp::tmp-path-content",
            "conf": 1.0,
            "crit": 2,
            "desc": "Contains a /tmp/ or /var/tmp/ path"
          },
          {
            "id": "micro-behaviors/process/create/shell/lang::ruby-popen",
            "conf": 0.92,
            "crit": 3,
            "desc": "popen pipes to/from command"
          },
          {
            "id": "micro-behaviors/fs/path/temp::unix-temp",
            "conf": 0.7,
            "crit": 2,
            "desc": "Unix /tmp/ path reference"
          },
          {
            "id": "micro-behaviors/fs/write/file/mode::ruby-write-mode-binary",
            "conf": 0.9,
            "crit": 3,
            "desc": "Binary write mode ('wb', 'wb+')"
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-4",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"have\""
          },
          {
            "id": "objectives/supply-chain/credential-theft/registry::gem-specification-yaml",
            "atk": "T1195.002",
            "conf": 0.9,
            "crit": 3,
            "desc": "RubyGems specification YAML"
          },
          {
            "id": "micro-behaviors/crypto/library/keyword::cipher-keyword",
            "conf": 0.4,
            "crit": 2,
            "desc": "Generic 'cipher' crypto term"
          },
          {
            "id": "objectives/command-and-control/dropper/execution/ast-script::ruby-ast-exec-in-method",
            "atk": "T1059",
            "conf": 0.88,
            "crit": 4,
            "desc": "Exec command execution"
          },
          {
            "id": "well-known/lib/runtime/scripted/jruby::module-marker",
            "conf": 0.95,
            "crit": 2,
            "desc": "JRuby runtime marker"
          },
          {
            "id": "micro-behaviors/os/sysinfo/platform/runtime::windows-os-check-a",
            "atk": "T1497",
            "conf": 0.7,
            "crit": 3,
            "desc": "Checks for a Windows Ruby platform"
          },
          {
            "id": "micro-behaviors/process/create/system::ruby-system",
            "atk": "T1059",
            "mbc": "E1059",
            "conf": 0.9,
            "crit": 3,
            "desc": "Runs a command with Ruby system()"
          },
          {
            "id": "micro-behaviors/ui/terminal::user-input-loop",
            "conf": 0.65,
            "crit": 3,
            "desc": "User input processing loop"
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-3",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"that\""
          },
          {
            "id": "objectives/command-and-control/dropper/execution/ast-script::ruby-ast-file-binmode-write",
            "conf": 0.85,
            "crit": 4,
            "desc": "File binmode followed by write"
          },
          {
            "id": "micro-behaviors/fs/enumerate/directory::ruby-recursive-glob",
            "atk": "T1083",
            "conf": 0.85,
            "crit": 3,
            "desc": "Enumerates files with a recursive Ruby glob"
          },
          {
            "id": "metadata/package/config::gemspec-name-assignment",
            "conf": 0.9,
            "crit": 3,
            "desc": "Ruby gemspec assigns package name"
          },
          {
            "id": "objectives/lateral-movement/social-engineering/lures::open-or-extract-zip-archive",
            "conf": 0.75,
            "crit": 3,
            "desc": "Archive open or extract instruction"
          },
          {
            "id": "micro-behaviors/fs/write/file/mode::binmode-symbol",
            "conf": 0.75,
            "crit": 3,
            "desc": "binmode symbol"
          },
          {
            "id": "micro-behaviors/communications/http/message::http-url-literal",
            "conf": 0.75,
            "crit": 2,
            "desc": "HTTP URL string literal"
          }
        ],
        "type": "gem",
        "via": "https://rubygems.org/downloads/rubyzip-3.6.0.gem"
      },
      {
        "depth": 2,
        "facts": {
          "metrics": {
            "file": {
              "size": 55118,
              "entropy": 8
            },
            "parse": {
              "error_count": 1
            },
            "binary": {
              "peak_region_bytes": 55118,
              "peak_region_entropy": 7.84
            }
          }
        },
        "id": 29,
        "mol": "O₃(CLaS)H₇(Cm₂Cr₂Db₅F₅Os₃Po₂U)Md(Pa)",
        "path": "pkg:gem/rubyzip@3.6.0?checksum=sha256:268994d44d62282d1cfd99bf10eae48d7267199158ad7ea3e1fee2da9458b695\u0026platform=ruby!!data.tar.gz",
        "pid": 3493,
        "risk": 55,
        "sha": "6c5bd535a0b049a606bd64ca90106e633c385926d91c32ca3db72314d2b031f0",
        "size": 55118,
        "traits": [
          {
            "id": "micro-behaviors/communications/http/message::http-prefix",
            "conf": 0.9,
            "crit": 2,
            "desc": "HTTP protocol prefix"
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-1",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"the\""
          },
          {
            "id": "objectives/supply-chain/credential-theft/registry::gem-specification-yaml",
            "atk": "T1195.002",
            "conf": 0.9,
            "crit": 3,
            "desc": "RubyGems specification YAML"
          },
          {
            "id": "micro-behaviors/fs/enumerate/directory::ruby-recursive-glob",
            "atk": "T1083",
            "conf": 0.85,
            "crit": 3,
            "desc": "Enumerates files with a recursive Ruby glob"
          },
          {
            "id": "micro-behaviors/data/decode/hex::ruby-pack-hex-decode",
            "conf": 0.8,
            "crit": 3,
            "desc": "Ruby pack decodes hexadecimal data"
          },
          {
            "id": "objectives/lateral-movement/social-engineering/lures::open-or-extract-zip-archive",
            "conf": 0.75,
            "crit": 3,
            "desc": "Archive open or extract instruction"
          },
          {
            "id": "micro-behaviors/fs/write/file/mode::binmode-symbol",
            "conf": 0.75,
            "crit": 3,
            "desc": "binmode symbol"
          },
          {
            "id": "micro-behaviors/fs/path/temp::tmp-path-content",
            "conf": 1.0,
            "crit": 2,
            "desc": "Contains a /tmp/ or /var/tmp/ path"
          },
          {
            "id": "micro-behaviors/os/sysinfo/platform/runtime::windows-os-check-a",
            "atk": "T1497",
            "conf": 0.7,
            "crit": 3,
            "desc": "Checks for a Windows Ruby platform"
          },
          {
            "id": "objectives/supply-chain/install-hook/package/rubygems::file-imports",
            "atk": "T1195.002",
            "conf": 0.5,
            "crit": 3,
            "desc": "File operation imports",
            "from": [
              {
                "file": 2
              },
              {
                "file": 17
              },
              {
                "file": 24
              }
            ],
            "uses": [
              38
            ]
          },
          {
            "id": "micro-behaviors/data/source/dynamic/reflect::ruby-const-get",
            "conf": 0.9,
            "crit": 3,
            "desc": "Ruby dynamically resolves a constant"
          },
          {
            "id": "well-known/lib/runtime/scripted/jruby::module-marker",
            "conf": 0.95,
            "crit": 2,
            "desc": "JRuby runtime marker"
          },
          {
            "id": "micro-behaviors/data/source/dynamic/reflect::ruby-alias-method",
            "atk": "T1059",
            "conf": 0.7,
            "crit": 3,
            "desc": "Ruby rebinds a method with alias_method"
          },
          {
            "id": "metadata/file/string/file::tmp",
            "conf": 0.2,
            "crit": 1,
            "desc": "tmp keyword"
          },
          {
            "id": "micro-behaviors/communications/http/url/scheme::cleartext-http-url-code-literal",
            "atk": "T1071.001",
            "mbc": "C0002",
            "conf": 0.9,
            "crit": 3,
            "desc": "Code embeds cleartext HTTP URL literal"
          },
          {
            "id": "micro-behaviors/fs/chmod/modify::ruby-chmod-method",
            "atk": "T1222",
            "mbc": "E1222",
            "conf": 0.75,
            "crit": 3,
            "desc": "Changes file permissions with Ruby chmod"
          },
          {
            "id": "micro-behaviors/ui/terminal::user-input-loop",
            "conf": 0.65,
            "crit": 3,
            "desc": "User input processing loop"
          },
          {
            "id": "micro-behaviors/data/serialize/envelope::result-assignment-key",
            "conf": 0.4,
            "crit": 1,
            "desc": "Result field or assignment key"
          },
          {
            "id": "metadata/package/config::gemspec-name-assignment",
            "conf": 0.9,
            "crit": 3,
            "desc": "Ruby gemspec assigns package name"
          },
          {
            "id": "micro-behaviors/os/console/io::stdin-gets",
            "atk": "T1059",
            "conf": 0.8,
            "crit": 3,
            "desc": "Interactive line read (gets.chomp)",
            "from": [
              {
                "off": 22427,
                "file": 17,
                "line": 718
              },
              {
                "off": 1245,
                "file": 18,
                "line": 65
              },
              {
                "off": 1713,
                "file": 28,
                "line": 63
              },
              {
                "off": 6032,
                "file": 30,
                "line": 165
              },
              {
                "file": 32
              }
            ],
            "uses": [
              37,
              42
            ]
          },
          {
            "id": "micro-behaviors/process/create/shell/lang::ruby-popen",
            "conf": 0.92,
            "crit": 3,
            "desc": "popen pipes to/from command"
          },
          {
            "id": "micro-behaviors/communications/http/message::https-prefix",
            "conf": 0.9,
            "crit": 2,
            "desc": "Contains an HTTPS URL prefix"
          },
          {
            "id": "objectives/command-and-control/dropper/execution/ast-script::ruby-ast-exec-in-method",
            "atk": "T1059",
            "conf": 0.88,
            "crit": 4,
            "desc": "Exec command execution"
          },
          {
            "id": "micro-behaviors/fs/write/file/mode::ruby-write-mode-binary",
            "conf": 0.9,
            "crit": 3,
            "desc": "Binary write mode ('wb', 'wb+')"
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-7",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"this\""
          },
          {
            "id": "micro-behaviors/communications/email/address::google-consumer-email-domain-suffix",
            "conf": 0.55,
            "crit": 3,
            "desc": "Gmail consumer email domain suffix"
          },
          {
            "id": "micro-behaviors/data/source/language::ruby-dynamic-method-definition",
            "conf": 0.8,
            "crit": 3,
            "desc": "Ruby defines methods dynamically"
          },
          {
            "id": "micro-behaviors/crypto/library/keyword::encryption-algorithm-keyword",
            "conf": 0.5,
            "crit": 3,
            "desc": "Encryption algorithm keyword",
            "from": [
              {
                "file": 11
              }
            ],
            "uses": [
              47
            ]
          },
          {
            "id": "micro-behaviors/os/sysinfo/platform/runtime::ruby-host-os-config-access",
            "atk": "T1082",
            "conf": 0.8,
            "crit": 3,
            "desc": "Ruby host_os config access"
          },
          {
            "id": "micro-behaviors/data/serialize/binary::dense-pack-unpack-calls",
            "mbc": "C0032",
            "conf": 0.9,
            "crit": 3,
            "desc": "Dense Ruby binary packing calls"
          },
          {
            "id": "micro-behaviors/process/create/system::ruby-system",
            "atk": "T1059",
            "mbc": "E1059",
            "conf": 0.9,
            "crit": 3,
            "desc": "Runs a command with Ruby system()"
          },
          {
            "id": "micro-behaviors/fs/path/temp::tmp-zip-path",
            "conf": 0.6,
            "crit": 3,
            "desc": "Temporary directory ZIP path reference"
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-3",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"that\""
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-2",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"and\""
          },
          {
            "id": "micro-behaviors/data/source/dynamic/reflect::ruby-send-call",
            "conf": 0.9,
            "crit": 3,
            "desc": "Ruby dynamically invokes a method with send"
          },
          {
            "id": "micro-behaviors/crypto/symmetric/aes/runtime-library::cipher-encrypt-decrypt",
            "mbc": "C0021",
            "conf": 0.85,
            "crit": 3,
            "desc": "OpenSSL cipher encrypt/decrypt"
          },
          {
            "id": "micro-behaviors/os/module/load::ruby-require-relative",
            "conf": 0.9,
            "crit": 3,
            "desc": "Ruby loads a relative source module"
          },
          {
            "id": "micro-behaviors/os/console/io::stdin-chomp-call",
            "atk": "T1059",
            "conf": 0.6,
            "crit": 3,
            "desc": "chomp trailing-newline trim"
          },
          {
            "id": "micro-behaviors/fs/read/file/full::ruby-file-read-content",
            "atk": "T1083",
            "conf": 0.5,
            "crit": 2,
            "desc": "Reads file content with Ruby File.read"
          },
          {
            "id": "micro-behaviors/fs/path/temp::unix-temp",
            "conf": 0.7,
            "crit": 2,
            "desc": "Unix /tmp/ path reference"
          },
          {
            "id": "micro-behaviors/communications/http/message::http-url-literal",
            "conf": 0.75,
            "crit": 2,
            "desc": "HTTP URL string literal"
          },
          {
            "id": "micro-behaviors/crypto/hash/hmac::hmac-api-reference",
            "mbc": "C0029",
            "conf": 0.9,
            "crit": 3,
            "desc": "References an HMAC API"
          },
          {
            "id": "micro-behaviors/os/console/io::stdin-gets-call",
            "atk": "T1059",
            "conf": 0.75,
            "crit": 3,
            "desc": "Ruby unqualified gets line read"
          },
          {
            "id": "micro-behaviors/fs/path/archive::unix-temp-archive-path",
            "conf": 0.86,
            "crit": 3,
            "desc": "Unix temporary archive path"
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-4",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"have\""
          },
          {
            "id": "micro-behaviors/data/parse/vocabulary::password-key-value-pair",
            "conf": 0.8,
            "crit": 3,
            "desc": "password/passwd key with inline value"
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-5",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"for\""
          },
          {
            "id": "micro-behaviors/crypto/library/keyword::cipher-keyword",
            "conf": 0.4,
            "crit": 2,
            "desc": "Generic 'cipher' crypto term"
          },
          {
            "id": "micro-behaviors/fs/directory/mkdir::ruby-fileutils-mkdir-p",
            "conf": 0.9,
            "crit": 3,
            "desc": "Ruby creates a directory tree"
          },
          {
            "id": "objectives/command-and-control/dropper/execution/ast-script::ruby-ast-file-binmode-write",
            "conf": 0.85,
            "crit": 4,
            "desc": "File binmode followed by write"
          },
          {
            "id": "micro-behaviors/communications/http/url/forge::public-code-forge-url",
            "conf": 0.9,
            "crit": 3,
            "desc": "References a public code-forge URL"
          },
          {
            "id": "objectives/anti-static/obfuscation/code-metrics/strings::few-strings",
            "atk": "T1027",
            "mbc": "B0032",
            "conf": 0.4,
            "crit": 3,
            "desc": "Very few string literals"
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-6",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"with\""
          }
        ],
        "type": "tar.gz"
      },
      {
        "id": 30,
        "mol": "H(Os)",
        "sha": "10d1d1113b8471bdbaccf2779a5db8f0d25d40cd48522437b240472127a60f62",
        "path": "pkg:gem/rubyzip@3.6.0?checksum=sha256:268994d44d62282d1cfd99bf10eae48d7267199158ad7ea3e1fee2da9458b695\u0026platform=ruby!!data.tar.gz!!lib/rubyzip.rb",
        "risk": 1,
        "size": 54,
        "type": "ruby",
        "depth": 3
      },
      {
        "id": 31,
        "mol": "H(Os)",
        "sha": "d83bf76b418fda6dc1d111c636f344c6cf26a2b3519151433ba65594bca1c563",
        "path": "pkg:gem/rubyzip@3.6.0?checksum=sha256:268994d44d62282d1cfd99bf10eae48d7267199158ad7ea3e1fee2da9458b695\u0026platform=ruby!!data.tar.gz!!lib/zip/central_directory.rb",
        "risk": 2,
        "size": 9296,
        "type": "ruby",
        "depth": 3
      },
      {
        "id": 32,
        "mol": "H(Os)",
        "sha": "52d711ef76a7450ed95f7a83956d48bb0800456069ed5725758c2cf90c9ffbde",
        "path": "pkg:gem/rubyzip@3.6.0?checksum=sha256:268994d44d62282d1cfd99bf10eae48d7267199158ad7ea3e1fee2da9458b695\u0026platform=ruby!!data.tar.gz!!lib/zip/constants.rb",
        "risk": 1,
        "size": 3965,
        "type": "ruby",
        "depth": 3
      },
      {
        "id": 33,
        "mol": "H(Cr₂)",
        "sha": "69860b3553a0281ea7256ba9e6b23ea31ad6e0dcd5408053bb76b66161a3daaf",
        "path": "pkg:gem/rubyzip@3.6.0?checksum=sha256:268994d44d62282d1cfd99bf10eae48d7267199158ad7ea3e1fee2da9458b695\u0026platform=ruby!!data.tar.gz!!lib/zip/crypto/aes_encryption.rb",
        "risk": 3,
        "size": 3277,
        "type": "ruby",
        "depth": 3
      },
      {
        "id": 34,
        "mol": "H(Cr)",
        "sha": "c611f18cb492f39ea40d53237bfc18416ec7d8aa09ec6da259a652d0f834cfb2",
        "path": "pkg:gem/rubyzip@3.6.0?checksum=sha256:268994d44d62282d1cfd99bf10eae48d7267199158ad7ea3e1fee2da9458b695\u0026platform=ruby!!data.tar.gz!!lib/zip/crypto/decrypted_io.rb",
        "risk": 2,
        "size": 1218,
        "type": "ruby",
        "depth": 3
      },
      {
        "id": 35,
        "mol": "H(Db)",
        "sha": "ae7c8ea72a7ec24191f092ae9e42b5d25cd5cfc29ad6cc987acceb2ef525bc10",
        "path": "pkg:gem/rubyzip@3.6.0?checksum=sha256:268994d44d62282d1cfd99bf10eae48d7267199158ad7ea3e1fee2da9458b695\u0026platform=ruby!!data.tar.gz!!lib/zip/crypto/traditional_encryption.rb",
        "risk": 2,
        "size": 2145,
        "type": "ruby",
        "depth": 3
      },
      {
        "id": 36,
        "mol": "H(Cr)",
        "sha": "6cb1dc914524eb025d640fc367e1015befee74580d1612903b60da46d55c3a6e",
        "path": "pkg:gem/rubyzip@3.6.0?checksum=sha256:268994d44d62282d1cfd99bf10eae48d7267199158ad7ea3e1fee2da9458b695\u0026platform=ruby!!data.tar.gz!!lib/zip/deflater.rb",
        "risk": 2,
        "size": 1122,
        "type": "ruby",
        "depth": 3
      },
      {
        "id": 37,
        "mol": "H(Db₂)",
        "sha": "cf7b4533ad1139110a896410e28dbb7261a901ffdb6b55204c12edc931dccff2",
        "path": "pkg:gem/rubyzip@3.6.0?checksum=sha256:268994d44d62282d1cfd99bf10eae48d7267199158ad7ea3e1fee2da9458b695\u0026platform=ruby!!data.tar.gz!!lib/zip/dirtyable.rb",
        "risk": 2,
        "size": 688,
        "type": "ruby",
        "depth": 3
      },
      {
        "ctx": [
          {
            "b": "boQPsz*C#juVQsfx(mM\u003cy?X05A:-=BaARTDwEn=+wPq\u003cbA+cvvAa9\u003c4zEEx[cKHi3wPq\u003cbA+eP#wO+^%x)a5gcU47jB97\u0026dBAn/pA+flkx(W=(A+f5}Bzk]fasyYlA==OnvR/Q63jpS*wozZ1ax\u0026F#3lQDoax\u0026F#iYYYEBAhTHA+figwPIB2BAnNkzxJIdBAhTHx(k54ax\u0026F#ayPq2xLzT3e^-Zzv@bN{B09[?BAhTlarR^Hx(mA%B.25al${W-D0$e#wEn+!arR^Kavy6+B97\u0026dBrCZEwN({9zY\u003cauwN/B^C{4ixvrrSlxK@q$zGG]AazC)tB98tvwN(]ix!A%HefF?GBrC7ize:JbB8$]6dj$@IarR!9r8lyXl)9P{jS(^Dt4}}piZVXqp/o.Xq+o+WuRJ%*nkzSXq=DK\u003cmg6wAarR^Kavu",
            "ln": 0,
            "col": 1,
            "line": 1
          },
          {
            "b": "boRbDB8UY2x\u003ez6\u003cwft/haA.NqzF%-p3lQDlarR^(w[=6)Aa9\u003c4arR^HarR^HjS[SRyZIpcarR^HkXC4yw]7)*B08OFarR^HauZ\u002633lQDlarR!vw/%b}t4}}dB-7]6z!9A^zEEx[A%:3jao",
            "ln": 1865,
            "col": 39,
            "line": 52
          },
          {
            "b": "arU-pByeJ@ze:JbB8#5lzEmi\u003eC4CF%w]7)*A%:3jarUlkwc@U^arR^Kaw3R%Bzbxfaz2CjA^n^szEWZjAcbV4kmeIQarUiaw/$V5v@=\u003clBy!#E3lQDlarR!tA9)i[vp%T7clL2=jV%]x3lQDlaz2C33jm)#arUiaw/$/9v@Dj6y?mZ1koIf[i=n\u003eD",
            "ln": 3833,
            "col": 5,
            "line": 108
          },
          {
            "b": "zffGewHN%earR^HaARsmwGTbyarR^HarR^Hx\u003ewFMwQ5rqvoU^nzFso9A=UV9BzkP6t).X%arR^HarR^HkXkgZA:-fkB-7]pwPz\u003c2y\u0026\u003cxdwNc{fwO#3bv@Dj6z/fc7BsvLtarR^HarR!ry\u0026:r5av6H.BAg!]i=o4KB6Pa}arR^HarR^Hav6H.BAg!]i=o4KB6QztwO#3bv@Dj6z/fc7BsvLtarR^HarR!rzE:7YarR^HarR)Kq/(C=",
            "ln": 4274,
            "col": 26,
            "line": 128
          },
          {
            "b": "arUlkwc@U^arR^KavHcVB0bNrx(+zdzGG]AaAz4nB-IvxBzkP6azbt0y?dPfCwhejayO+\u0026B-H]jwGV8ezdO3izE\u003c@8zF0*czddK2z/d=DarR^HwmYu}vpBp@y\u0026%\u0026huVZ10wJ{IAarR^Hav6H.BAg!xzdNM[wPy0-i^2sOC4CYnvqH41zdLdsE0^54",
            "ln": 5634,
            "col": 3,
            "line": 178
          },
          {
            "b": "B14CsarR!rzE:7YarR^HboP(}BAIRwaARpday/tbAb]JhB7]Mgaz\u003eXixM4A7w]zYjBzbxfaz2CjA^onAarR^HbmkLoarR)KqE%@)A=b}vq=DK\u003cmmnnjw/#hewGUM4BAhTHx(+z9ay]hbwN/?2A^n^CAV/7daARpday/tbAb]JhB7]Mg3lQDlar@0",
            "ln": 5800,
            "col": 60,
            "line": 182
          },
          {
            "b": "B0bNrx(+zdzGG]Aaz2C2A^qRCwN({cx([2hk$aY{wO#0#D2N\u003etz/d=DarR^HwmYu}vp:HA3lQDlarR^IkXkgZA:-fkvp:H=e]CxtkmeIQarUlkwc@U^arR!qwO95%x(4u/BA)",
            "ln": 6380,
            "col": 8,
            "line": 206
          },
          {
            "b": "zEEx@v\u003c2n{wN/H!A=RNgarR^MCuXP(A+e:5z/QaCw[=6)aAI*By?W^5t}PX%v}V#}zY\u003cByD\u003cQ#sarR^HwmYv!zE)f(wPRQ7wfr]SbysiOko.jXzWEQfarR^HarUogy?l%}D2Nt4x(=G!yC6ZEuVQHfdgdguarR^HwO#2=arR^HwO#2=3lQDlay]4}az$R8wNxd)uU0\u003e\u003ewN/?2A^o\u003e(boP3+z!9=@iTM#LarR^HkYg1EwIdLiwm6K{Bz9(!cOD?@3i",
            "ln": 6636,
            "col": 9,
            "line": 219
          },
          {
            "b": "zyC]narR^KaARp9BrC^say]g%zyoJGv}Yp*xjSicxK@r1wNPaXAV/BqDsXiEvqYP#Bzb/ray/kavQ-[?azbt7wGUI(ByuqgAV/BwzdN*5x(mMj3lQDlay]4}aA?spx\u003ezS$y\u0026r/(y*Q\u003c!vpS}\u0026uVP}cwG-fvauByUwn+%s3lQDlarR!EwPS6nzxJS",
            "ln": 7929,
            "col": 65,
            "line": 263
          },
          {
            "b": "wO@(qay/7[zF9J\u003e3lQDlarR^KazC}saAImywIb8\u003eBrCWsx(+zoz!T9haA}xtxKM6}aARJAyH}6@az2!tA:Z85x\u003eq9\u003eB0bgeaARpdC{3KowGU@jwPIB2Bs)[yarR^HazCBgA+fDnx()[[arR^HarR^HC4CYdw{E:1z!0i(uUB1VwmY^*B7]@iaQPtm",
            "ln": 12473,
            "col": 73,
            "line": 412
          },
          {
            "b": "arR^HarUxgav6%UB98tvwNxy/A=2JiB7]MgB08!Rav76!x)s07wPzTe3lQDlarR^HauzLMx(4uXBzkMje[nNiz!7mYB-7]ruVoN%zf3*DaA.NoCWCA3A=2(8zddH3efFFmB97=dvrufi3lQDlarR!rzE:7%arR^HazCBgkYQBSBz(hhuVgdawPz\u003c9x(CgwclLM@zFsu5B.Lwecmf\u003c2B-7]ruUs7-asnATiYZ8Tz!0v1B1R3px\u003eetHjS(A",
            "ln": 16896,
            "col": 1,
            "line": 550
          },
          {
            "b": "azkziwO@R]x(DHUBAhTV3lQDlar@18Acb/jzEEu7wmYm\u003eD2N\u003epAV!\u003e2zxJz1aAhvtC4\u003eF#wftG5AV!!daz2C2A^qRCwN(]{zGG]A3lQDlar@1gvrcm1zF80MzddYjvR6jYB]",
            "ln": 19928,
            "col": 40,
            "line": 640
          },
          {
            "b": "vruflaszhscOcw!vR/%)yBGPkarR^HarR!JxK#67i=/N-y?W^53lQDlarR^HarR!yx(mZ9vruf9jS(^DmRMWIe]\u003eJiwnC%$yBzCWx(4v1vrufi3lQDlarR^HarR!FBAh8kxk8objS(^Dq/)4]zF8Kpe]ClAc#rQnyJ9Z7xEKoharR^HarR^HaBdWjy?a@nBAh8kxk8okazCBgvR/%)yyhgbarR^HarR^HB98CpzF9W43lQDlarR^Haz2wgwD",
            "ln": 20299,
            "col": 29,
            "line": 650
          },
          {
            "b": "v%0by3lQDlarR^HarR^HarR^HwO#2=3lQDlarR^(w[=6)Aa9\u003c4auZ\u0026*A:@D}vrue\u0026arR^HarS{\u003cx)KtkjS[//vrsbyx)Ks$arR^HarUrdByeQ7BAg!%vruQix\u003c#jbwPIi\u003cA=g",
            "ln": 21847,
            "col": 76,
            "line": 696
          },
          {
            "b": "arR^HwO#2=3lQDlay]4}aAg+fwO#P%vrk^%BAh8kxcnAwi=n\u003eDz^$*narR^HarUlkBAhUlzEEx[arS/\u0026zEEx[e[nNkzeZ)JfdegQarR^HarU-wvrl9?x(mD)CPYc(wO#QgD0+C$zdLtux(mD)CQK{)cN/xBarR^HaAIvcB7!]{zE^s6au{#WzGG]AuV6p?wIe4ux\u003e7Z5fF1t/y*?x#uUKy*wQ2sFatCq/iV@rOyZIpcarUlkwc@U^ao",
            "ln": 22363,
            "col": 1,
            "line": 715
          },
          {
            "b": "mr\u0026J/BAo(\u003eA=k$Hay]58Bye#}Bz817arR^Haz2C33jm)#arR^HiYY-Ay?kkqAaJ]nwmY?7uVoB}xE\u003enNCvz{Gay]ykD#B7N3lQDlarR^HazkncuUKy%B-Z#iBAg@3z6iwcaBE)AD\u003cQ#sarR^HarR^HvTi6bB6\u003ccix([DdzxI7+fBw{BarR^HarR^HCvtJfwN(]Dazb4#B7CX3arR^HarR^HaA}Hky?j.qvS=o9jS[DWe]#qVA+b",
            "ln": 23699,
            "col": 26,
            "line": 755
          },
          {
            "b": "B97=dvrufi3jm)#arR^HarSZamRMWIrDI}\u003eB1RGIuUgA\u003ewPI%2Aa9\u003c43lQDlarR!rzE:7YarR^HarSZamRMWIrDI}\u003eB1RrBwnc6\u003eA42mdB97=dvrufi3lQDlarR!FwPRo\u003cCYW$muTX4#A+P09By/J2z/e{3vrufhwmY?7uVoB}xEKoharR!rzE:7YarR^HboPrMm(?=5A+eW3wNxI7zer{7yByROwn=42az#ataA.:paspMlz!0L\u0026arR^HwmYu}v@=c?By+",
            "ln": 24513,
            "col": 93,
            "line": 783
          },
          {
            "b": "y\u00260W2xjVcpax9M5y?W^5aAIWAAbP=saARgiAbP=9A+Pun3lQDlarR^KaAz4gz*2Y5azCZoC4\u003eJiaA7\u003cmxMOunB2\u003e%cxk8E3BZ=$kz/4dFBZ/Sxx(C.CBZ/Sxx(C.tB8#FnB1YsciuP{YarR^HarU(pA=90zs3Y.VnLR=paAIsjAbYx0aAI*By?W^5aswyXwmY?7uVoB}xNIlXa{]CnarUlkwc@U^arR^KayPkdy\u003cvdux(!ufzF785vrt{2w].*baARpdaBm-",
            "ln": 24783,
            "col": 41,
            "line": 794
          },
          {
            "b": "BrC4raA8vnwPw]nz/oDkat1ZIzEWH9wnb{]azCZown+$5azbt7wPGEDnPV7?B0bNrwPIA9w]7)*A%:3jarR)KBzb98ayPq4aA.:pwftubay/tbzddr)y?W=#aARKu",
            "ln": 26108,
            "col": 19,
            "line": 829
          },
          {
            "b": "boR2HvSb:{A5}MFvpB4:ax9xcy?km\u0026BZYr3lU{gNB7CX3az2C33t19=3jn12lVl{?A+Pf1Brz#0diHx1fFUg4gb7yraxi2)zddGdq/uL:wPzA(vrb(=boR2HvTiolA3e\u003eoazbU9wGV5jw]@l9A+drPD2E*Fv{%l$A+e=}B98CpvS=^7azC{uvqYQez/Mgfao",
            "ln": 28209,
            "col": 5,
            "line": 879
          }
        ],
        "depth": 3,
        "facts": {
          "imp": [
            [
              "",
              "require"
            ],
            [
              "",
              "require_relative"
            ],
            [
              "",
              "require_relative"
            ],
            [
              "",
              "include"
            ],
            [
              "",
              "attr_accessor"
            ],
            [
              "",
              "attr_accessor"
            ],
            [
              "",
              "attr_reader"
            ],
            [
              "",
              "attr_writer"
            ],
            [
              "",
              "mark_dirty"
            ],
            [
              "",
              "unicode_names"
            ],
            [
              "",
              "raise"
            ],
            [
              "",
              "start_with?"
            ],
            [
              "",
              "raise"
            ],
            [
              "",
              "length"
            ],
            [
              "",
              "default_compression"
            ],
            [
              "",
              "now"
            ],
            [
              "",
              "new"
            ],
            [
              "",
              "check_name"
            ],
            [
              "",
              "default_compression"
            ],
            [
              "",
              "from_time"
            ],
            [
              "",
              "now"
            ],
            [
              "",
              "kind_of?"
            ],
            [
              "",
              "new"
            ],
            [
              "",
              "to_s"
            ],
            [
              "",
              "send"
            ],
            [
              "",
              "send"
            ],
            [
              "",
              "time"
            ],
            [
              "",
              "time"
            ],
            [
              "",
              "member?"
            ],
            [
              "",
              "member?"
            ],
            [
              "",
              "create"
            ],
            [
              "",
              "from_time"
            ],
            [
              "",
              "end_with?"
            ],
            [
              "",
              "to_s"
            ],
            [
              "",
              "send"
            ],
            [
              "",
              "send"
            ],
            [
              "",
              "send"
            ],
            [
              "",
              "member?"
            ],
            [
              "",
              "member?"
            ],
            [
              "",
              "nil?"
            ],
            [
              "",
              "nil?"
            ],
            [
              "",
              "name_is_directory?"
            ],
            [
              "",
              "each"
            ],
            [
              "",
              "define_method"
            ],
            [
              "",
              "file_type_is?"
            ],
            [
              "",
              "to_sym"
            ],
            [
              "",
              "end_with?"
            ],
            [
              "",
              "cleanpath"
            ],
            [
              "",
              "new"
            ],
            [
              "",
              "relative?"
            ],
            [
              "",
              "escape"
            ],
            [
              "",
              "join"
            ],
            [
              "",
              "to_s"
            ],
            [
              "",
              "match?"
            ],
            [
              "",
              "absolute_path"
            ],
            [
              "",
              "to_s"
            ],
            [
              "",
              "bytesize"
            ],
            [
              "",
              "local_size"
            ],
            [
              "",
              "bytesize"
            ],
            [
              "",
              "nil?"
            ],
            [
              "",
              "raise"
            ],
            [
              "",
              "c_dir_size"
            ],
            [
              "",
              "absolute_path"
            ],
            [
              "",
              "absolute_path"
            ],
            [
              "",
              "join"
            ],
            [
              "",
              "start_with?"
            ],
            [
              "",
              "warn"
            ],
            [
              "",
              "proc"
            ],
            [
              "",
              "on_exists_proc"
            ],
            [
              "",
              "raise"
            ],
            [
              "",
              "directory?"
            ],
            [
              "",
              "file?"
            ],
            [
              "",
              "symlink?"
            ],
            [
              "",
              "__send__"
            ],
            [
              "",
              "respond_to?"
            ],
            [
              "",
              "path"
            ],
            [
              "",
              "new"
            ],
            [
              "",
              "read_c_dir_entry"
            ],
            [
              "",
              "new"
            ],
            [
              "",
              "read_local_entry"
            ],
            [
              "",
              "unpack"
            ],
            [
              "",
              "tell"
            ],
            [
              "",
              "read_local_header_fields"
            ],
            [
              "",
              "raise"
            ],
            [
              "",
              "zero?"
            ],
            [
              "",
              "seek"
            ],
            [
              "",
              "read_local_header_fields"
            ],
            [
              "",
              "raise"
            ],
            [
              "",
              "set_time"
            ],
            [
              "",
              "read"
            ],
            [
              "",
              "force_entry_names_encoding"
            ],
            [
              "",
              "force_encoding"
            ],
            [
              "",
              "force_entry_names_encoding"
            ],
            [
              "",
              "tr!"
            ],
            [
              "",
              "name_is_directory?"
            ],
            [
              "",
              "read"
            ],
            [
              "",
              "bytesize"
            ],
            [
              "",
              "raise"
            ],
            [
              "",
              "read_extra_field"
            ],
            [
              "",
              "parse_zip64_extra"
            ],
            [
              "",
              "pack"
            ],
            [
              "",
              "to_binary_dos_time"
            ],
            [
              "",
              "to_binary_dos_date"
            ],
            [
              "",
              "compressed_size"
            ],
            [
              "",
              "original_size"
            ],
            [
              "",
              "local_size"
            ],
            [
              "",
              "verify_local_header_size!"
            ],
            [
              "",
              "suppress_fields!"
            ],
            [
              "",
              "tell"
            ],
            [
              "",
              "to_local_bin"
            ],
            [
              "",
              "tell"
            ],
            [
              "",
              "unpack"
            ],
            [
              "",
              "name_is_directory?"
            ],
            [
              "",
              "name_is_directory?"
            ],
            [
              "",
              "nil?"
            ],
            [
              "",
              "bytesize"
            ],
            [
              "",
              "raise"
            ],
            [
              "",
              "raise"
            ],
            [
              "",
              "bytesize"
            ],
            [
              "",
              "raise"
            ],
            [
              "",
              "kind_of?"
            ],
            [
              "",
              "merge"
            ],
            [
              "",
              "new"
            ],
            [
              "",
              "read"
            ],
            [
              "",
              "check_c_dir_entry_static_header_length"
            ],
            [
              "",
              "unpack_c_dir_entry"
            ],
            [
              "",
              "set_time"
            ],
            [
              "",
              "read"
            ],
            [
              "",
              "force_entry_names_encoding"
            ],
            [
              "",
              "force_encoding"
            ],
            [
              "",
              "force_entry_names_encoding"
            ],
            [
              "",
              "tr!"
            ],
            [
              "",
              "read_extra_field"
            ],
            [
              "",
              "read"
            ],
            [
              "",
              "read"
            ],
            [
              "",
              "parse_zip64_extra"
            ],
            [
              "",
              "stat"
            ],
            [
              "",
              "lstat"
            ],
            [
              "",
              "file_stat"
            ],
            [
              "",
              "from_time"
            ],
            [
              "",
              "mtime"
            ],
            [
              "",
              "uid"
            ],
            [
              "",
              "gid"
            ],
            [
              "",
              "mode"
            ],
            [
              "",
              "chmod"
            ],
            [
              "",
              "egid"
            ],
            [
              "",
              "chown"
            ],
            [
              "",
              "file?"
            ],
            [
              "",
              "directory?"
            ],
            [
              "",
              "set_unix_attributes_on_path"
            ],
            [
              "",
              "touch"
            ],
            [
              "",
              "pack"
            ],
            [
              "",
              "to_binary_dos_time"
            ],
            [
              "",
              "to_binary_dos_date"
            ],
            [
              "",
              "compressed_size"
            ],
            [
              "",
              "original_size"
            ],
            [
              "",
              "c_dir_size"
            ],
            [
              "",
              "disk_start_number"
            ],
            [
              "",
              "relative_header_offset"
            ],
            [
              "",
              "nil?"
            ],
            [
              "",
              "suppress_fields!"
            ],
            [
              "",
              "to_c_dir_bin"
            ],
            [
              "",
              "class"
            ],
            [
              "",
              "class"
            ],
            [
              "",
              "all?"
            ],
            [
              "",
              "__send__"
            ],
            [
              "",
              "to_sym"
            ],
            [
              "",
              "__send__"
            ],
            [
              "",
              "to_sym"
            ],
            [
              "",
              "to_s"
            ],
            [
              "",
              "open"
            ],
            [
              "",
              "readlink"
            ],
            [
              "",
              "new"
            ],
            [
              "",
              "raise"
            ],
            [
              "",
              "new"
            ],
            [
              "",
              "instance_variable_set"
            ],
            [
              "",
              "get_next_entry"
            ],
            [
              "",
              "close"
            ],
            [
              "",
              "file_stat"
            ],
            [
              "",
              "ftype"
            ],
            [
              "",
              "name_is_directory?"
            ],
            [
              "",
              "raise"
            ],
            [
              "",
              "name_is_directory?"
            ],
            [
              "",
              "name_is_directory?"
            ],
            [
              "",
              "raise"
            ],
            [
              "",
              "raise"
            ],
            [
              "",
              "inspect"
            ],
            [
              "",
              "inspect"
            ],
            [
              "",
              "size"
            ],
            [
              "",
              "get_extra_attributes_from_path"
            ],
            [
              "",
              "put_next_entry"
            ],
            [
              "",
              "put_next_entry"
            ],
            [
              "",
              "get_input_stream"
            ],
            [
              "",
              "copy_stream"
            ],
            [
              "",
              "copy_raw_entry"
            ],
            [
              "",
              "chomp"
            ],
            [
              "",
              "rindex"
            ],
            [
              "",
              "slice"
            ],
            [
              "",
              "respond_to?"
            ],
            [
              "",
              "respond_to?"
            ],
            [
              "",
              "open"
            ],
            [
              "",
              "read"
            ],
            [
              "",
              "bytesize"
            ],
            [
              "",
              "raise"
            ],
            [
              "",
              "unpack_local_entry"
            ],
            [
              "",
              "parse_binary_dos_format"
            ],
            [
              "",
              "warn"
            ],
            [
              "",
              "warn_invalid_date"
            ],
            [
              "",
              "proc"
            ],
            [
              "",
              "continue_on_exists_proc"
            ],
            [
              "",
              "exist?"
            ],
            [
              "",
              "raise"
            ],
            [
              "",
              "open"
            ],
            [
              "",
              "get_input_stream"
            ],
            [
              "",
              "sysread"
            ],
            [
              "",
              "bytesize"
            ],
            [
              "",
              "new"
            ],
            [
              "",
              "raise"
            ],
            [
              "",
              "validate_entry_sizes"
            ],
            [
              "",
              "warn"
            ],
            [
              "",
              "message"
            ],
            [
              "",
              "set_extra_attributes_on_path"
            ],
            [
              "",
              "directory?"
            ],
            [
              "",
              "exist?"
            ],
            [
              "",
              "raise"
            ],
            [
              "",
              "block_given?"
            ],
            [
              "",
              "rm_f"
            ],
            [
              "",
              "mkdir_p"
            ],
            [
              "",
              "set_extra_attributes_on_path"
            ],
            [
              "",
              "warn"
            ],
            [
              "",
              "zip64?"
            ],
            [
              "",
              "parse"
            ],
            [
              "",
              "parse"
            ],
            [
              "",
              "aes?"
            ],
            [
              "",
              "vendor_id"
            ],
            [
              "",
              "raise"
            ],
            [
              "",
              "vendor_id"
            ],
            [
              "",
              "include?"
            ],
            [
              "",
              "vendor_version"
            ],
            [
              "",
              "raise"
            ],
            [
              "",
              "vendor_version"
            ],
            [
              "",
              "compression_method"
            ],
            [
              "",
              "write_zip64_support"
            ],
            [
              "",
              "zip64?"
            ],
            [
              "",
              "file?"
            ],
            [
              "",
              "zip64?"
            ],
            [
              "",
              "nil?"
            ],
            [
              "",
              "create"
            ],
            [
              "",
              "original_size"
            ],
            [
              "",
              "compressed_size"
            ],
            [
              "",
              "write_zip64_support"
            ],
            [
              "",
              "create"
            ],
            [
              "",
              "original_size"
            ],
            [
              "",
              "compressed_size"
            ],
            [
              "",
              "relative_header_offset"
            ],
            [
              "",
              "constants"
            ],
            [
              "",
              "dirtyable"
            ],
            [
              "",
              "pathname"
            ]
          ],
          "mbr": [
            "@comment.bytesize",
            "@extra.c_dir_size",
            "@extra.create",
            "@extra.kind_of?",
            "@extra.local_size",
            "@extra.member?",
            "@extra.merge",
            "@extra.suppress_fields!",
            "@extra.to_c_dir_bin",
            "@extra.to_local_bin",
            "@local_header_size.nil?",
            "@name.bytesize",
            "@name.end_with?",
            "@name.force_encoding",
            "@name.tr!",
            "@size.nil?",
            "@time.to_binary_dos_date",
            "@time.to_binary_dos_time",
            "@zipfile.respond_to?",
            "DOSTime.from_time",
            "EntrySizeError.new",
            "ExtraField.new",
            "Pathname.new",
            "Pathname.new.cleanpath",
            "Regexp.escape",
            "Zip.continue_on_exists_proc",
            "Zip.validate_entry_sizes",
            "buf.bytesize",
            "buf.nil?",
            "buf.unpack",
            "cleanpath.relative?",
            "cleanpath.to_s",
            "component.to_s",
            "component.to_s.end_with?",
            "current_offset.zero?",
            "entry.read_c_dir_entry",
            "entry.read_local_entry",
            "entry_name.rindex",
            "entry_name.slice",
            "error.message",
            "extra.bytesize",
            "extra.kind_of?",
            "extra.to_s",
            "extract_path.start_with?",
            "ft.nil?",
            "io.path",
            "io.read",
            "io.respond_to?",
            "io.seek",
            "io.tell",
            "is.sysread",
            "k.to_sym",
            "name.chomp",
            "name.length",
            "name.start_with?",
            "other.__send__",
            "other.class",
            "other.to_s",
            "src_path.inspect",
            "stat.ftype",
            "stat.gid",
            "stat.inspect",
            "stat.mode",
            "stat.mtime",
            "stat.size",
            "stat.uid",
            "static_sized_fields_buf.bytesize",
            "zip64.compressed_size",
            "zip64.disk_start_number",
            "zip64.original_size",
            "zip64.relative_header_offset",
            "zip_output_stream.copy_raw_entry",
            "zip_output_stream.put_next_entry",
            "zis.close",
            "zis.get_next_entry",
            "zis.instance_variable_set"
          ],
          "tgt": [
            "__send__",
            "absolute_path",
            "aes?",
            "all?",
            "attr_accessor",
            "attr_reader",
            "attr_writer",
            "block_given?",
            "bytesize",
            "c_dir_size",
            "check_c_dir_entry_static_header_length",
            "check_name",
            "chmod",
            "chomp",
            "chown",
            "class",
            "cleanpath",
            "close",
            "compressed_size",
            "compression_method",
            "continue_on_exists_proc",
            "copy_raw_entry",
            "copy_stream",
            "create",
            "default_compression",
            "define_method",
            "directory?",
            "disk_start_number",
            "each",
            "egid",
            "end_with?",
            "escape",
            "exist?",
            "file?",
            "file_stat",
            "file_type_is?",
            "force_encoding",
            "force_entry_names_encoding",
            "from_time",
            "ftype",
            "get_extra_attributes_from_path",
            "get_input_stream",
            "get_next_entry",
            "gid",
            "include",
            "include?",
            "inspect",
            "instance_variable_set",
            "join",
            "kind_of?",
            "length",
            "local_size",
            "lstat",
            "mark_dirty",
            "match?",
            "member?",
            "merge",
            "message",
            "mkdir_p",
            "mode",
            "mtime",
            "name_is_directory?",
            "new",
            "nil?",
            "now",
            "on_exists_proc",
            "open",
            "original_size",
            "pack",
            "parse",
            "parse_binary_dos_format",
            "parse_zip64_extra",
            "path",
            "proc",
            "put_next_entry",
            "raise",
            "read",
            "read_c_dir_entry",
            "read_extra_field",
            "read_local_entry",
            "read_local_header_fields",
            "readlink",
            "relative?",
            "relative_header_offset",
            "require",
            "require_relative",
            "respond_to?",
            "rindex",
            "rm_f",
            "seek",
            "send",
            "set_extra_attributes_on_path",
            "set_time",
            "set_unix_attributes_on_path",
            "size",
            "slice",
            "start_with?",
            "stat",
            "suppress_fields!",
            "symlink?",
            "sysread",
            "tell",
            "time",
            "to_binary_dos_date",
            "to_binary_dos_time",
            "to_c_dir_bin",
            "to_local_bin",
            "to_s",
            "to_sym",
            "touch",
            "tr!",
            "uid",
            "unicode_names",
            "unpack",
            "unpack_c_dir_entry",
            "unpack_local_entry",
            "validate_entry_sizes",
            "vendor_id",
            "vendor_version",
            "verify_local_header_size!",
            "warn",
            "warn_invalid_date",
            "write_zip64_support",
            "zero?",
            "zip64?"
          ],
          "funcs": [
            [
              "set_default_vars_values",
              1405
            ],
            [
              "check_name",
              2447
            ],
            [
              "initialize",
              2631
            ],
            [
              "encrypted?",
              3907
            ],
            [
              "incomplete?",
              3959
            ],
            [
              "size",
              4117
            ],
            [
              "time",
              4253
            ],
            [
              "atime",
              4722
            ],
            [
              "ctime",
              4832
            ],
            [
              "time",
              4979
            ],
            [
              "atime",
              5450
            ],
            [
              "ctime",
              5569
            ],
            [
              "absolute_time?",
              5722
            ],
            [
              "compression_method",
              5963
            ],
            [
              "compression_method",
              6145
            ],
            [
              "zip64?",
              6326
            ],
            [
              "aes?",
              6428
            ],
            [
              "file_type_is?",
              6475
            ],
            [
              "ftype",
              6542
            ],
            [
              "name_is_directory?",
              6781
            ],
            [
              "name_safe?",
              7074
            ],
            [
              "local_entry_offset",
              7433
            ],
            [
              "name_size",
              7526
            ],
            [
              "extra_size",
              7596
            ],
            [
              "comment_size",
              7671
            ],
            [
              "calculate_local_header_size",
              7750
            ],
            [
              "verify_local_header_size!",
              8022
            ],
            [
              "cdir_header_size",
              8311
            ],
            [
              "next_header_offset",
              8463
            ],
            [
              "extract",
              8794
            ],
            [
              "to_s",
              9437
            ],
            [
              "read_c_dir_entry",
              9501
            ],
            [
              "read_local_entry",
              9783
            ],
            [
              "unpack_local_entry",
              9990
            ],
            [
              "read_local_entry",
              10325
            ],
            [
              "pack_local_entry",
              11733
            ],
            [
              "write_local_entry",
              12289
            ],
            [
              "unpack_c_dir_entry",
              12918
            ],
            [
              "set_ftype_from_c_dir_entry",
              13498
            ],
            [
              "check_c_dir_entry_static_header_length",
              14535
            ],
            [
              "check_c_dir_entry_signature",
              14780
            ],
            [
              "check_c_dir_entry_comment_size",
              15005
            ],
            [
              "read_extra_field",
              15189
            ],
            [
              "read_c_dir_entry",
              15422
            ],
            [
              "file_stat",
              16244
            ],
            [
              "get_extra_attributes_from_path",
              16387
            ],
            [
              "set_unix_attributes_on_path",
              16704
            ],
            [
              "set_extra_attributes_on_path",
              17217
            ],
            [
              "pack_c_dir_entry",
              17725
            ],
            [
              "write_c_dir_entry",
              18697
            ],
            [
              "anonymous",
              19523
            ],
            [
              "anonymous",
              19829
            ],
            [
              "get_input_stream",
              20060
            ],
            [
              "gather_fileinfo_from_srcpath",
              20924
            ],
            [
              "write_to_zip_output_stream",
              21984
            ],
            [
              "parent_as_string",
              22376
            ],
            [
              "get_raw_input_stream",
              22562
            ],
            [
              "clean_up",
              22774
            ],
            [
              "read_local_header_fields",
              22885
            ],
            [
              "set_time",
              23268
            ],
            [
              "create_file",
              23521
            ],
            [
              "create_directory",
              24309
            ],
            [
              "create_symlink",
              24713
            ],
            [
              "parse_zip64_extra",
              25115
            ],
            [
              "parse_aes_extra",
              25477
            ],
            [
              "set_compression_level_flags",
              26486
            ],
            [
              "prep_local_zip64_extra",
              26862
            ],
            [
              "prep_cdir_zip64_extra",
              27536
            ]
          ],
          "metrics": {
            "ast": {
              "op.eq": 23,
              "op.ge": 8,
              "op.gt": 2,
              "op.lt": 1,
              "op.ne": 5,
              "op.add": 12,
              "op.bor": 5,
              "op.lor": 31,
              "op.shl": 10,
              "op.shr": 2,
              "op.sub": 1,
              "op.band": 6,
              "op.land": 21,
              "op.lnot": 6,
              "max_depth": 20,
              "op.concat": 171,
              "call_count": 256,
              "node_count": 4650,
              "member_count": 76,
              "max_array_len": 27,
              "op_density.eq": 0,
              "op_density.ge": 0,
              "op_density.gt": 0,
              "op_density.lt": 0,
              "op_density.ne": 0,
              "op_density.add": 0,
              "op_density.bor": 0,
              "op_density.lor": 0.01,
              "op_density.shl": 0,
              "op_density.shr": 0,
              "op_density.sub": 0,
              "op_density.band": 0,
              "op_density.land": 0,
              "op_density.lnot": 0,
              "max_concat_chain": 4,
              "member_depth_max": 3,
              "op_density.concat": 0.04
            },
            "file": {
              "size": 28409,
              "entropy": 4.67
            },
            "text": {
              "lines": 885,
              "top_char": 101,
              "max_ws_run": 19,
              "digit_ratio": 0.01,
              "space_count": 7405,
              "char_entropy": 4.67,
              "unique_chars": 91,
              "top_char_null": 0,
              "string_density": 0.06,
              "top_char_ratio": 0.08,
              "avg_line_length": 31.1,
              "max_line_length": 100,
              "empty_line_ratio": 0.17,
              "last_line_length": 48,
              "whitespace_ratio": 0.29,
              "identifier_density": 1.25,
              "line_length_stddev": 25.18,
              "normalized_string_count": 1.85,
              "repeated_char_sequences": 114,
              "suspicious_comment_ratio": 0.02,
              "suspicious_identifier_ratio": 0,
              "normalized_unique_identifiers": 30.34
            },
            "binds": {
              "count": 116
            },
            "binary": {
              "peak_region_bytes": 16121,
              "peak_region_entropy": 4.99
            },
            "source": {
              "class_count": 2,
              "function_count": 60
            },
            "imports": {
              "count": 3,
              "third_party_count": 3,
              "third_party_ratio": 1
            },
            "strings": {
              "bytes": 1194,
              "count": 55,
              "avg_length": 21.71,
              "max_length": 72,
              "avg_entropy": 2.44,
              "email_count": 2,
              "empty_count": 6,
              "entropy_stddev": 1.78
            },
            "comments": {
              "chars": 5105,
              "count": 158,
              "empty": 5,
              "lines": 153,
              "base64": 2,
              "todo_count": 1,
              "high_entropy": 1,
              "to_code_ratio": 0.21,
              "url_in_comments": 2
            },
            "functions": {
              "count": 62
            },
            "identifiers": {
              "count": 1102,
              "unique": 297,
              "avg_length": 11.81,
              "max_length": 38,
              "min_length": 1,
              "avg_entropy": 2.84,
              "reuse_ratio": 0.27,
              "length_stddev": 7.47,
              "has_digit_ratio": 0.02,
              "sequential_names": 1,
              "single_char_count": 2,
              "single_char_ratio": 0.01,
              "high_entropy_count": 54,
              "high_entropy_ratio": 0.18,
              "all_lowercase_ratio": 0.61,
              "all_uppercase_ratio": 0.09,
              "numeric_suffix_count": 2,
              "double_underscore_count": 1,
              "underscore_prefix_count": 3
            }
          }
        },
        "id": 38,
        "mol": "H₄(CmDb₂F₃Os)",
        "path": "pkg:gem/rubyzip@3.6.0?checksum=sha256:268994d44d62282d1cfd99bf10eae48d7267199158ad7ea3e1fee2da9458b695\u0026platform=ruby!!data.tar.gz!!lib/zip/entry.rb",
        "pid": 3494,
        "risk": 7,
        "sha": "ece30c3716077fb6f8aa63754ccc3f18d0525661b7e3986c5f5151fa273669da",
        "size": 28409,
        "traits": [
          {
            "id": "metadata/lang/natural::lang-english--atom-1",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"the\"",
            "spans": [
              [
                247,
                0
              ]
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-2",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"and\"",
            "spans": [
              [
                7977,
                0
              ]
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-3",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"that\"",
            "spans": [
              [
                242,
                0
              ]
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-4",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"have\"",
            "spans": [
              [
                12521,
                0
              ]
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-5",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"for\"",
            "spans": [
              [
                5848,
                0
              ]
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-6",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"with\"",
            "spans": [
              [
                5682,
                0
              ]
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-7",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"this\"",
            "spans": [
              [
                3881,
                0
              ]
            ]
          },
          {
            "id": "micro-behaviors/communications/http/url/forge::public-code-forge-url",
            "conf": 0.9,
            "crit": 3,
            "desc": "References a public code-forge URL",
            "spans": [
              [
                24847,
                19
              ]
            ]
          },
          {
            "id": "micro-behaviors/data/source/dynamic/reflect::ruby-send-call",
            "conf": 0.9,
            "crit": 3,
            "desc": "Ruby dynamically invokes a method with send",
            "spans": [
              [
                4338,
                4
              ]
            ]
          },
          {
            "id": "micro-behaviors/data/source/language::ruby-dynamic-method-definition",
            "conf": 0.8,
            "crit": 3,
            "desc": "Ruby defines methods dynamically",
            "spans": [
              [
                6700,
                13
              ]
            ]
          },
          {
            "id": "micro-behaviors/fs/chmod/modify::ruby-chmod-method",
            "atk": "T1222",
            "mbc": "E1222",
            "conf": 0.75,
            "crit": 3,
            "desc": "Changes file permissions with Ruby chmod",
            "spans": [
              [
                16960,
                7
              ]
            ]
          },
          {
            "id": "micro-behaviors/fs/directory/mkdir::ruby-fileutils-mkdir-p",
            "conf": 0.9,
            "crit": 3,
            "desc": "Ruby creates a directory tree",
            "spans": [
              [
                24577,
                18
              ]
            ]
          },
          {
            "id": "micro-behaviors/fs/read/file/full::ruby-file-read-content",
            "atk": "T1083",
            "conf": 0.5,
            "crit": 2,
            "desc": "Reads file content with Ruby File.read",
            "spans": [
              [
                20363,
                0
              ]
            ]
          },
          {
            "id": "micro-behaviors/fs/write/file/mode::ruby-write-mode-binary",
            "conf": 0.9,
            "crit": 3,
            "desc": "Binary write mode ('wb', 'wb+')",
            "spans": [
              [
                23763,
                2
              ]
            ]
          },
          {
            "id": "micro-behaviors/os/console/io::stdin-chomp-call",
            "atk": "T1059",
            "conf": 0.6,
            "crit": 3,
            "desc": "chomp trailing-newline trim",
            "spans": [
              [
                22427,
                5
              ]
            ]
          },
          {
            "id": "micro-behaviors/os/module/load::ruby-require-relative",
            "conf": 0.9,
            "crit": 3,
            "desc": "Ruby loads a relative source module",
            "spans": [
              [
                51,
                16
              ]
            ]
          },
          {
            "id": "objectives/supply-chain/install-hook/package/rubygems::file-imports",
            "atk": "T1195.002",
            "conf": 0.5,
            "crit": 3,
            "desc": "File operation imports",
            "uses": [
              12
            ],
            "spans": [
              [
                20363,
                9
              ]
            ]
          }
        ],
        "type": "ruby"
      },
      {
        "id": 39,
        "mol": "H(Db)",
        "sha": "33c86bef3ba29619d16e17653290cd65e2234a75bb5a79a9ef8c6c81f8c2ca22",
        "path": "pkg:gem/rubyzip@3.6.0?checksum=sha256:268994d44d62282d1cfd99bf10eae48d7267199158ad7ea3e1fee2da9458b695\u0026platform=ruby!!data.tar.gz!!lib/zip/extra_field/generic.rb",
        "risk": 2,
        "size": 1079,
        "type": "ruby",
        "depth": 3
      },
      {
        "id": 40,
        "mol": "H(Db)",
        "sha": "76ff7b4829b3d7a67b09489c0680e971e191b2d5de3e852a07f9e6881d168e91",
        "path": "pkg:gem/rubyzip@3.6.0?checksum=sha256:268994d44d62282d1cfd99bf10eae48d7267199158ad7ea3e1fee2da9458b695\u0026platform=ruby!!data.tar.gz!!lib/zip/extra_field/old_unix.rb",
        "risk": 2,
        "size": 1085,
        "type": "ruby",
        "depth": 3
      },
      {
        "id": 41,
        "mol": "H(Db)",
        "sha": "b15f43835d91b3772120a93cbe21977c1454acc0a3781805eece866fbd95622e",
        "path": "pkg:gem/rubyzip@3.6.0?checksum=sha256:268994d44d62282d1cfd99bf10eae48d7267199158ad7ea3e1fee2da9458b695\u0026platform=ruby!!data.tar.gz!!lib/zip/extra_field/unix.rb",
        "risk": 2,
        "size": 767,
        "type": "ruby",
        "depth": 3
      },
      {
        "id": 42,
        "mol": "H(Os)",
        "sha": "b6a9ccec573a682bd6ada36a26e4104d133a217a13df5402100f3732b99246ed",
        "path": "pkg:gem/rubyzip@3.6.0?checksum=sha256:268994d44d62282d1cfd99bf10eae48d7267199158ad7ea3e1fee2da9458b695\u0026platform=ruby!!data.tar.gz!!lib/zip/extra_field/unknown.rb",
        "risk": 2,
        "size": 644,
        "type": "ruby",
        "depth": 3
      },
      {
        "id": 43,
        "mol": "H(Db)",
        "sha": "aee85832d86177535643bd6aa420f85eb632ac60e2c83872a33bb043a0188c1c",
        "path": "pkg:gem/rubyzip@3.6.0?checksum=sha256:268994d44d62282d1cfd99bf10eae48d7267199158ad7ea3e1fee2da9458b695\u0026platform=ruby!!data.tar.gz!!lib/zip/extra_field/zip64.rb",
        "risk": 1,
        "size": 3179,
        "type": "ruby",
        "depth": 3
      },
      {
        "id": 44,
        "mol": "H₃(CmFOs)",
        "sha": "51a51431a7de8becaa7701bda583e1ce53d26cc397691b1a78d0a285bf75a402",
        "path": "pkg:gem/rubyzip@3.6.0?checksum=sha256:268994d44d62282d1cfd99bf10eae48d7267199158ad7ea3e1fee2da9458b695\u0026platform=ruby!!data.tar.gz!!lib/zip/file.rb",
        "risk": 3,
        "size": 15411,
        "type": "ruby",
        "depth": 3
      },
      {
        "id": 45,
        "sha": "5ad2046a65007c726444c85fcbb78b17c4ef3f0a8af88d8647544f8c3cb2b898",
        "path": "pkg:gem/rubyzip@3.6.0?checksum=sha256:268994d44d62282d1cfd99bf10eae48d7267199158ad7ea3e1fee2da9458b695\u0026platform=ruby!!data.tar.gz!!lib/zip/file_split.rb",
        "risk": 1,
        "size": 3287,
        "type": "ruby",
        "depth": 3
      },
      {
        "id": 46,
        "mol": "H(Os)",
        "sha": "faee89f3307bd6f3e98c29587316c83ec55654b38057d68631d2a2e9dd3ad975",
        "path": "pkg:gem/rubyzip@3.6.0?checksum=sha256:268994d44d62282d1cfd99bf10eae48d7267199158ad7ea3e1fee2da9458b695\u0026platform=ruby!!data.tar.gz!!lib/zip/filesystem.rb",
        "risk": 2,
        "size": 2327,
        "type": "ruby",
        "depth": 3
      },
      {
        "id": 47,
        "mol": "H₂(OsPo)",
        "sha": "48b3dcd0c62ccd94a8d455abdcbe211f461b31e1dadb0053f7ccad9793166851",
        "path": "pkg:gem/rubyzip@3.6.0?checksum=sha256:268994d44d62282d1cfd99bf10eae48d7267199158ad7ea3e1fee2da9458b695\u0026platform=ruby!!data.tar.gz!!lib/zip/filesystem/file.rb",
        "risk": 2,
        "size": 6548,
        "type": "ruby",
        "depth": 3
      },
      {
        "id": 48,
        "mol": "H(Db)",
        "sha": "5a358c573eff387de7ec7d6244ae34c1ba0ad0a89878bb263f14811e14971150",
        "path": "pkg:gem/rubyzip@3.6.0?checksum=sha256:268994d44d62282d1cfd99bf10eae48d7267199158ad7ea3e1fee2da9458b695\u0026platform=ruby!!data.tar.gz!!lib/zip/filesystem/file_stat.rb",
        "risk": 1,
        "size": 2262,
        "type": "ruby",
        "depth": 3
      },
      {
        "id": 49,
        "mol": "H(Os)",
        "sha": "60c14485645128d03ac705c5d0883879ddb20a1d0357b16d91c01c57c328e0fc",
        "path": "pkg:gem/rubyzip@3.6.0?checksum=sha256:268994d44d62282d1cfd99bf10eae48d7267199158ad7ea3e1fee2da9458b695\u0026platform=ruby!!data.tar.gz!!lib/zip/ioextras/abstract_input_stream.rb",
        "risk": 1,
        "size": 7693,
        "type": "ruby",
        "depth": 3
      },
      {
        "ctx": [
          {
            "b": "boQPsz*C#juVQsfx(mM\u003cy?X05A:-=BaARTDwEn=+wPq\u003cbA+eP#wO+^%x)a5gcV0Hafm4tKflQ]EB7]MgcKHhJwO\u003cE?q/DqTx\u003ez6?vruj4zz2*rCoyBmaBFlT3lQEje]C9mwGS9rarR^HarR^\u0026aszhLvTiolA3\u003e#naAGeUwPz\u003caz/cWuarR^HauZ\u0026Jx(D9]rZ/[+nL-7*arU.TvrDW9z/P[warR^HarS/\u0026tpir!vR6O4av]{PzE)(pefDrjz!K2hoL4^ReLP}}y?mSmefDray?m\u003c1zE^s0ax8#\u003ez/fGpcTv64aAGeDzddc{arR^HarR^HauZ\u0026K3lQDlasy\u0026hx(mH6AZjnOvqfKgv@DiiefDrPwnC**B8tScy?mSLxkI6\u003ey+xjoz6{\u003eScT*?5CTcs:zeTrgB$NSycKH$st).X%B1RcAzdNV{xjShdarR^HjS(a=BAzE.fe3%LBzb/ae[n*pflhhAD3TgzflhhAD3TgzcKH$sB1RAFvrua1A+#{warR^HjS)maz8%ZOy*?A$z/PXQi-n%AsQDn]B1RJRzeAZ4C{1jLarR^HjS(a)BZ/Sxx(CheB0a)lA=\u003e\u0026paz(4cB.\u003eRiw]zYjA+eV\u0026x(mMavqYP#Cxdztx(mMaDtdsvw[=6)B0?qqaAGeEx(4v4arR^HarR^HauZ\u0026nx(U?sy\u0026r=hcWP]yze:r5B1zcwvTP)VdLAn7A:*yBas^^warR^HarR^HarR^HarR^HarR^MCuW:jlQ::Gmj@B/aw$S]l}{95zdB+RxKL^\u003ewO=o$e]tbwqEKuLw[=6)aAzQlD3Tgze[X:jB8UY2t).X%B1RGAADL#owNxy+Bzb.rjS)@Ry?Wuat).X%B1Royv}xL0wGS9rarR^HjS(asq:-h)eKKt.B-Raw3jm)#B1RrvBywY*ByupmarR^HjS]7UarR^HcT}jhuVZr%v@2T@uV*y6cM\u003cJOarR^HjW6#oxMOunB2\u003e%cxk8E3BZ=$kz/4dFBZ/Sxx(C.CBZ/Sxx(C.tB8#FnB0\u0026HCarR^HcU3*#zF9J%z!AB1A+M)zarR^HarR^HjW6#jxMOunB2\u003e%cxk8E3BZ=$kz/4dFBZ/Sxx(C.CBZ/Sxx(C.my\u0026r=oB%zuPe{p/DB7]MgEj)%3vqYZ?y\u0026r@szdB?w3lQDlasyYrv%8T1zGGrex(v(@B-IgzarR^Hau.[hb4#7uAc15[fl.R:e](8zD1p\u00266e[]inz.C:mzf4vJBZ/Sxx(CZIDVH/.wPz\u003caz/f$Eed9HxarS4Mz/{8gwNw}=wmYa\u003cA+M)zarR^HarS*har\u003eGvBz#pZfe3%LBzb/ae[n*pflhhAD3TgzflhhAD3TgzflzkCwIniKDVH/.wPz\u003caz/f$Eed9HxarS4Qx\u003e}A\u0026B-IgzarR^HarR^HarR^HarS*hasy\u0026ABz#pZfe3%LBzb/ae[n*pflhhAD3TgzflhhAD3Tgzfl.bCx^UCsarR^HcVTusD1QY9B6\u0026=@vpa4^ADL#owN)ehjW6#oBAhIncKH$sEf{r7aAGeQwPq\u003cbA+e=*A=\u003e\u0026puV{13B7]MgauZ?{k0p2Ae?!TW3lQEje[5p3uU0.\u003ewD",
            "ln": 0,
            "col": 1,
            "line": 1
          }
        ],
        "depth": 3,
        "facts": {
          "imp": [
            [
              "",
              "require_relative"
            ],
            [
              "",
              "new"
            ],
            [
              "",
              "name"
            ],
            [
              "",
              "version"
            ],
            [
              "",
              "authors"
            ],
            [
              "",
              "email"
            ],
            [
              "",
              "homepage"
            ],
            [
              "",
              "platform"
            ],
            [
              "",
              "summary"
            ],
            [
              "",
              "files"
            ],
            [
              "",
              "glob"
            ],
            [
              "",
              "require_paths"
            ],
            [
              "",
              "license"
            ],
            [
              "",
              "metadata"
            ],
            [
              "",
              "version"
            ],
            [
              "",
              "version"
            ],
            [
              "",
              "version"
            ],
            [
              "",
              "required_ruby_version"
            ],
            [
              "",
              "add_development_dependency"
            ],
            [
              "",
              "add_development_dependency"
            ],
            [
              "",
              "add_development_dependency"
            ],
            [
              "",
              "add_development_dependency"
            ],
            [
              "",
              "add_development_dependency"
            ],
            [
              "",
              "add_development_dependency"
            ],
            [
              "",
              "add_development_dependency"
            ],
            [
              "",
              "add_development_dependency"
            ],
            [
              "",
              "lib/zip/version"
            ]
          ],
          "mbr": [
            "Dir.glob",
            "s.add_development_dependency",
            "s.authors",
            "s.email",
            "s.files",
            "s.homepage",
            "s.license",
            "s.metadata",
            "s.name",
            "s.platform",
            "s.require_paths",
            "s.required_ruby_version",
            "s.summary",
            "s.version"
          ],
          "tgt": [
            "add_development_dependency",
            "authors",
            "email",
            "files",
            "glob",
            "homepage",
            "license",
            "metadata",
            "name",
            "new",
            "platform",
            "require_paths",
            "require_relative",
            "required_ruby_version",
            "summary",
            "version"
          ],
          "metrics": {
            "ast": {
              "op.add": 1,
              "max_depth": 10,
              "op.concat": 25,
              "call_count": 26,
              "node_count": 396,
              "member_count": 14,
              "max_array_len": 3,
              "op_density.add": 0,
              "max_concat_chain": 2,
              "member_depth_max": 2,
              "op_density.concat": 0.06
            },
            "file": {
              "size": 1688,
              "entropy": 5.02
            },
            "text": {
              "lines": 39,
              "top_char": 101,
              "max_ws_run": 14,
              "digit_ratio": 0.03,
              "space_count": 281,
              "char_entropy": 5.02,
              "unique_chars": 79,
              "top_char_null": 0,
              "string_density": 1.1,
              "top_char_ratio": 0.07,
              "avg_line_length": 42.28,
              "max_line_length": 100,
              "empty_line_ratio": 0.13,
              "last_line_length": 3,
              "whitespace_ratio": 0.19,
              "identifier_density": 1.49,
              "line_length_stddev": 28.32,
              "normalized_string_count": 6.89,
              "repeated_char_sequences": 3,
              "suspicious_identifier_ratio": 0.04,
              "normalized_unique_identifiers": 4.54
            },
            "binds": {
              "count": 12
            },
            "binary": {
              "peak_region_bytes": 1688,
              "peak_region_entropy": 4.92
            },
            "imports": {
              "count": 1,
              "third_party_count": 1,
              "third_party_ratio": 1
            },
            "strings": {
              "bytes": 798,
              "count": 43,
              "url_count": 6,
              "avg_length": 18.56,
              "max_length": 66,
              "path_count": 8,
              "avg_entropy": 3.22,
              "email_count": 3,
              "entropy_stddev": 0.73
            },
            "comments": {
              "chars": 28,
              "count": 1,
              "lines": 1,
              "to_code_ratio": 0.03
            },
            "identifiers": {
              "count": 58,
              "unique": 24,
              "avg_length": 7.96,
              "max_length": 26,
              "min_length": 1,
              "avg_entropy": 2.41,
              "reuse_ratio": 0.41,
              "length_stddev": 5.87,
              "sequential_names": 1,
              "single_char_count": 1,
              "single_char_ratio": 0.04,
              "all_lowercase_ratio": 0.71,
              "all_uppercase_ratio": 0.08
            }
          }
        },
        "id": 52,
        "mol": "H₃(Cm₂FOs)Md₂(InPa)",
        "path": "pkg:gem/rubyzip@3.6.0?checksum=sha256:268994d44d62282d1cfd99bf10eae48d7267199158ad7ea3e1fee2da9458b695\u0026platform=ruby!!data.tar.gz!!rubyzip.gemspec",
        "pid": 13010,
        "risk": 6,
        "sha": "b334f6c0ae3e656680f5d7830d28976c3fd7261eed06872f90228e36404b50d9",
        "size": 1688,
        "traits": [
          {
            "id": "metadata/import/ruby/lib/zip/version::lib/zip/version",
            "conf": 0.95,
            "crit": 3,
            "desc": "imports lib/zip/version",
            "spans": [
              [
                49,
                15
              ]
            ]
          },
          {
            "id": "metadata/file/line::file-has-30-plus-lines",
            "conf": 0.9,
            "crit": 2,
            "desc": "File has 30 or more lines"
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-2",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"and\"",
            "spans": [
              [
                488,
                0
              ]
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-5",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"for\"",
            "spans": [
              [
                476,
                0
              ]
            ]
          },
          {
            "id": "metadata/package/config::gemspec-name-assignment",
            "conf": 0.9,
            "crit": 3,
            "desc": "Ruby gemspec assigns package name",
            "spans": [
              [
                67,
                49
              ]
            ]
          },
          {
            "id": "metadata/package/files/rubygems::gemspec-file",
            "conf": 0.95,
            "crit": 2,
            "desc": "RubyGems gemspec file"
          },
          {
            "id": "micro-behaviors/communications/email/address::google-consumer-email-domain-suffix",
            "conf": 0.55,
            "crit": 3,
            "desc": "Gmail consumer email domain suffix",
            "spans": [
              [
                273,
                10
              ]
            ]
          },
          {
            "id": "micro-behaviors/communications/http/message::http-prefix",
            "conf": 0.9,
            "crit": 2,
            "desc": "HTTP protocol prefix",
            "spans": [
              [
                355,
                0
              ]
            ]
          },
          {
            "id": "micro-behaviors/communications/http/message::https-prefix",
            "conf": 0.9,
            "crit": 2,
            "desc": "Contains an HTTPS URL prefix",
            "spans": [
              [
                768,
                0
              ]
            ]
          },
          {
            "id": "micro-behaviors/communications/http/url/forge::public-code-forge-url",
            "conf": 0.9,
            "crit": 3,
            "desc": "References a public code-forge URL",
            "spans": [
              [
                355,
                18
              ],
              [
                768,
                19
              ]
            ]
          },
          {
            "id": "micro-behaviors/os/module/load::ruby-require-relative",
            "conf": 0.9,
            "crit": 3,
            "desc": "Ruby loads a relative source module",
            "spans": [
              [
                31,
                16
              ]
            ]
          },
          {
            "id": "micro-behaviors/communications/http/message::http-url-literal",
            "conf": 0.75,
            "crit": 2,
            "desc": "HTTP URL string literal",
            "spans": [
              [
                1030,
                0
              ]
            ]
          },
          {
            "id": "micro-behaviors/communications/http/url/scheme::cleartext-http-url-code-literal",
            "atk": "T1071.001",
            "mbc": "C0002",
            "conf": 0.9,
            "crit": 3,
            "desc": "Code embeds cleartext HTTP URL literal",
            "spans": [
              [
                355,
                33
              ]
            ]
          },
          {
            "id": "micro-behaviors/fs/enumerate/directory::ruby-recursive-glob",
            "atk": "T1083",
            "conf": 0.85,
            "crit": 3,
            "desc": "Enumerates files with a recursive Ruby glob",
            "spans": [
              [
                531,
                26
              ]
            ]
          }
        ],
        "type": "ruby"
      },
      {
        "id": 53,
        "mol": "H₂(PoU)",
        "sha": "0cb656033d0fb006822c4036fed26808dc579e0c6a716ea4f3ce50be824ec892",
        "path": "pkg:gem/rubyzip@3.6.0?checksum=sha256:268994d44d62282d1cfd99bf10eae48d7267199158ad7ea3e1fee2da9458b695\u0026platform=ruby!!data.tar.gz!!samples/example.rb",
        "risk": 2,
        "size": 2719,
        "type": "ruby",
        "depth": 3
      },
      {
        "id": 54,
        "mol": "H(F)",
        "sha": "79c4993dd08ec7d7ef824fffd307444e7c32377ca27a7f41a9913eb55c0eee77",
        "path": "pkg:gem/rubyzip@3.6.0?checksum=sha256:268994d44d62282d1cfd99bf10eae48d7267199158ad7ea3e1fee2da9458b695\u0026platform=ruby!!data.tar.gz!!samples/example_recursive.rb",
        "risk": 2,
        "size": 1623,
        "type": "ruby",
        "depth": 3
      },
      {
        "id": 55,
        "mol": "H(Po)",
        "sha": "30312d4a783f4085871b9d841bd5b8bae4adcb0f3e3b64f1292872f981025dac",
        "path": "pkg:gem/rubyzip@3.6.0?checksum=sha256:268994d44d62282d1cfd99bf10eae48d7267199158ad7ea3e1fee2da9458b695\u0026platform=ruby!!data.tar.gz!!samples/qtzip.rb",
        "risk": 1,
        "size": 1980,
        "type": "ruby",
        "depth": 3
      },
      {
        "id": 92,
        "sha": "102a3cee3da3f24877a55bc56ab70e3374e185fa73ff01b126299f1f70159698",
        "path": "app-info@2.1.4.registry.json",
        "size": 915,
        "type": "registry",
        "depth": 1
      }
    ],
    "omitted_files": 37,
    "rev": "479f3",
    "v": "8"
  }
}