{
  "ml": {
    "v": "7",
    "id": 1488,
    "lvl": -1,
    "conf": 0,
    "prob": 0.00002248088458145503,
    "type": "registry",
    "version": "v18.18",
    "analyzed_at": "2026-10-18T07:25:12Z"
  },
  "path": "toolchain-flow@1.0.0-beta.10",
  "raw": {
    "rev": "17dc6",
    "files": [
      {
        "id": 1601,
        "mol": "H₂(F₂Os)Md₂(In₂Pa₇)",
        "pid": 100,
        "rel": "fetched",
        "sha": "fb134bc9121d48a4be2b759efbb394747f2e82d83a64363ff45c0224047cdec1",
        "via": "https://registry.npmjs.org/@jcoreio/toolchain-flow/-/toolchain-flow-1.0.0-beta.10.tgz",
        "path": "pkg:npm/%40jcoreio/toolchain-flow@1.0.0-beta.10",
        "refs": [
          {
            "to": "pkg:github/jcoreio/toolchains",
            "kind": "repository"
          }
        ],
        "risk": 9,
        "size": 1930,
        "type": "npm",
        "depth": 2,
        "facts": {
          "metrics": {
            "file": {
              "size": 1930,
              "entropy": 7.89
            },
            "binary": {
              "peak_region_bytes": 1930,
              "peak_region_entropy": 7.8
            },
            "consistency": {
              "self_dependency": 0,
              "unused_runtime_deps": 6
            }
          }
        },
        "ident": {
          "name": {
            "value": "@jcoreio/toolchain-flow",
            "source": "npm.name",
            "verified": false
          },
          "urls": [
            {
              "url": "https://github.com/jcoreio/toolchains.git",
              "kind": "repository",
              "source": "npm.repository.url"
            },
            {
              "url": "https://github.com/jcoreio/toolchains/tree/beta/packages/flow",
              "kind": "homepage",
              "source": "npm.homepage"
            }
          ],
          "trust": "unsigned",
          "authors": [
            {
              "name": "Andy Edwards",
              "role": "author",
              "source": "npm.author"
            }
          ],
          "version": {
            "value": "1.0.0-beta.10",
            "source": "npm.version",
            "verified": false
          },
          "identifier": {
            "value": "@jcoreio/toolchain-flow",
            "source": "npm.name",
            "verified": false
          },
          "description": {
            "value": "Flow JS build toolchain",
            "source": "npm.description",
            "verified": false
          }
        },
        "traits": [
          {
            "id": "metadata/import/npm/jcoreio/toolchain/util/glob/cjs::jcoreio/toolchain/util/glob/cjs",
            "conf": 0.95,
            "crit": 3,
            "desc": "imports @jcoreio/toolchain/util/glob.cjs",
            "from": [
              {
                "file": 2
              }
            ]
          },
          {
            "id": "metadata/import/package::dep-eslint",
            "conf": 0.9,
            "crit": 3,
            "desc": "Depends on ESLint",
            "from": [
              {
                "file": 7
              }
            ]
          },
          {
            "id": "metadata/package/dependencies/manifest/count::npm-dependency-fanout",
            "conf": 0.85,
            "crit": 3,
            "desc": "Package has at least eight runtime deps"
          },
          {
            "id": "metadata/package/dependencies/manifest/presence::has-runtime-deps",
            "conf": 0.85,
            "crit": 3,
            "desc": "Package declares a runtime dependency",
            "from": [
              {
                "file": 7
              }
            ]
          },
          {
            "id": "metadata/package/dependencies/manifest/range::scoped-wildcard-devdependency",
            "conf": 0.9,
            "crit": 3,
            "desc": "Scoped npm devDependency uses wildcard version",
            "from": [
              {
                "file": 7
              }
            ]
          },
          {
            "id": "metadata/package/dependencies/manifest/reconciliation::npm-phantom-runtime-dependency",
            "conf": 0.82,
            "crit": 3,
            "desc": "Runtime dependency not reconciled to imports"
          },
          {
            "id": "metadata/package/files/included::package-json-basename",
            "conf": 0.95,
            "crit": 3,
            "desc": "Filename is package.json",
            "from": [
              {
                "file": 7
              }
            ]
          },
          {
            "id": "metadata/package/homepage::homepage-git-host",
            "conf": 0.9,
            "crit": 3,
            "desc": "Homepage points to major Git host"
          },
          {
            "id": "metadata/package/homepage::homepage-monorepo-package-subdirectory",
            "conf": 0.95,
            "crit": 3,
            "desc": "Homepage points to monorepo package directory"
          },
          {
            "id": "metadata/package/repository::npm-repository-directory-field",
            "conf": 0.9,
            "crit": 3,
            "desc": "npm package rooted in monorepo subdirectory"
          },
          {
            "id": "metadata/package/repository::repo-url-git-host",
            "conf": 0.9,
            "crit": 3,
            "desc": "Repository identifies major Git host"
          },
          {
            "id": "micro-behaviors/fs/read/file/full::read-node",
            "conf": 0.9,
            "crit": 3,
            "desc": "Reads files with Node.js",
            "from": [
              {
                "file": 5
              }
            ]
          },
          {
            "id": "micro-behaviors/fs/read/file/handle::file-read-api-call",
            "conf": 0.9,
            "crit": 3,
            "desc": "Calls JavaScript readFile API",
            "from": [
              {
                "file": 5
              }
            ]
          },
          {
            "id": "micro-behaviors/os/module/require::node-require-resolve-call",
            "conf": 0.8,
            "crit": 3,
            "desc": "Resolves an installed module path",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "metadata/file/comment::source-at-most-two-comments",
            "conf": 0.88,
            "crit": 2,
            "desc": "Source has at most two comments",
            "from": [
              {
                "file": 2
              }
            ]
          },
          {
            "id": "metadata/import/npm/dedent-js::dedent-js",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports dedent-js",
            "from": [
              {
                "file": 5
              }
            ]
          },
          {
            "id": "metadata/import/npm/jcoreio/toolchain-esnext/util/resolveimportscodemod/cjs::jcoreio/toolchain-esnext/util/resolveimportscodemod/cjs",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports @jcoreio/toolchain-esnext/util/resolveImportsCodemod.cjs",
            "from": [
              {
                "file": 2
              }
            ]
          },
          {
            "id": "metadata/import/npm/jcoreio/toolchain/util/hastssourcessync/cjs::jcoreio/toolchain/util/hastssourcessync/cjs",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports @jcoreio/toolchain/util/hasTSSourcesSync.cjs",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "metadata/import/npm/jcoreio/toolchain/util/ini/cjs::jcoreio/toolchain/util/ini/cjs",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports @jcoreio/toolchain/util/ini.cjs",
            "from": [
              {
                "file": 5
              }
            ]
          },
          {
            "id": "metadata/import/npm/jcoreio/toolchain/util/projectfs/cjs::jcoreio/toolchain/util/projectfs/cjs",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports @jcoreio/toolchain/util/projectFs.cjs",
            "from": [
              {
                "file": 2
              }
            ]
          },
          {
            "id": "metadata/import/npm/path::path",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports path",
            "from": [
              {
                "file": 2
              }
            ]
          },
          {
            "id": "metadata/lang/source::js-ts-source-basename",
            "conf": 0.95,
            "crit": 2,
            "desc": "JavaScript or TypeScript source filename",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "metadata/package/empty::npm-no-keywords",
            "conf": 0.5,
            "crit": 2,
            "desc": "package.json has no keywords"
          },
          {
            "id": "metadata/package/files/included::npm-package-manifest-member",
            "conf": 0.95,
            "crit": 2,
            "desc": "Archive carries npm package manifest"
          },
          {
            "id": "metadata/package/files/included::npm-publish-root-manifest",
            "conf": 0.95,
            "crit": 2,
            "desc": "Manifest sits at npm publish root",
            "from": [
              {
                "file": 7
              }
            ]
          },
          {
            "id": "metadata/package/homepage::has-homepage-field",
            "conf": 0.8,
            "crit": 2,
            "desc": "Package has homepage URL"
          },
          {
            "id": "metadata/package/name/convention::npm-has-name",
            "conf": 1.0,
            "crit": 2,
            "desc": "npm manifest declares a package name"
          },
          {
            "id": "metadata/package/repository::has-bugs-url-field",
            "conf": 0.8,
            "crit": 2,
            "desc": "Package has bugs/issues URL"
          },
          {
            "id": "metadata/package/repository::has-repository-field",
            "conf": 0.9,
            "crit": 2,
            "desc": "package.json declares repository metadata"
          },
          {
            "id": "metadata/package/repository::has-repository-url",
            "conf": 0.85,
            "crit": 2,
            "desc": "package.json declares a repository URL"
          },
          {
            "id": "metadata/package/versioning/scheme::conventional-version-pre-1",
            "conf": 1.0,
            "crit": 2,
            "desc": "Uses pre-release version format"
          },
          {
            "id": "metadata/package/versioning/scheme::npm-has-version",
            "conf": 1.0,
            "crit": 2,
            "desc": "package.json defines a package version"
          },
          {
            "id": "micro-behaviors/fs/read/file/full::read-text-utf8",
            "conf": 0.72,
            "crit": 2,
            "desc": "Reads file content as utf8",
            "from": [
              {
                "file": 5
              }
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-5",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"for\"",
            "from": [
              {
                "file": 2
              }
            ]
          },
          {
            "id": "micro-behaviors/process/create/load/remote-code::js-dom-script-src-literal",
            "atk": "T1105",
            "conf": 0.75,
            "crit": 1,
            "desc": "Script source attribute literal",
            "from": [
              {
                "file": 2
              }
            ]
          }
        ]
      }
    ]
  }
}