{"adoption": {"forks": 314, "observed_at": "2026-08-28T04:03:51.125106+00:00", "stars": 1169}, "canonical_url": "https://ross.abutalabs.com/products/ember", "card": {"archived": true, "artifact_type": "dataset", "description": "Elastic Malware Benchmark for Empowering Researchers", "domain": ["machine-learning", "security"], "enriched": true, "function": ["machine-learning", "security", "data-science"], "health_score": 10, "homepage": null, "language": "Jupyter Notebook", "license": "NOASSERTION", "license_family": "other", "maturity": "maintenance", "member_repos": ["elastic/ember"], "name": "elastic/ember", "platform": ["python", "windows"], "pushed_at": "2024-11-22T20:36:57+00:00", "repo": "elastic/ember", "stars": 1169, "tags": ["malware-detection", "pe-files", "benchmark-dataset", "feature-extraction", "static-analysis", "security-research", "malware-analysis", "linux"], "topics": [], "urls": [], "use_cases": ["train a malware classifier on PE file features", "benchmark machine learning models for malware detection", "extract static features from Windows executables", "research the evolution of PE file features over time", "classify new PE files with pretrained benchmark models", "build a dataset for security research on executables"], "what_it_is": "EMBER is a benchmark dataset of features extracted from over 2 million PE (Portable Executable) files for training and evaluating malware classification models. The repository includes tooling to reproducibly extract features from PE files, train benchmark models, and classify new files.", "when_to_avoid": ["you need dynamic or behavioral malware analysis features", "you need real-time malware detection in production", "you work on macOS, where consistent feature extraction is not verified"], "when_to_choose": ["you need a large labeled dataset of PE files for malware research", "you want reproducible feature extraction from executables", "you need a standard benchmark to compare malware detection models"]}, "data_as_of": "2026-08-30T08:39:29.467469+00:00", "members": [{"path": "/products/ember", "repo": "elastic/ember", "role": "main", "score": 10}], "provenance": {"archived": {"kind": "observed", "observed_at": "2026-08-28T04:03:51.125106+00:00", "source": "github"}, "artifact_type": {"confidence": null, "enriched_at": "2026-08-30T06:28:41.286305+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "f37fc111c19eafee30e54838759a035f6837383bb4523f9beeb7fbcbb5635d8e", "fetched_at": "2026-08-28T04:03:51.125106+00:00", "kind": "readme", "missing": false, "url": "https://github.com/elastic/ember"}], "taxonomy_version": 1}, "description": {"kind": "observed", "observed_at": "2026-08-28T04:03:51.125106+00:00", "source": "github"}, "domain": {"confidence": null, "enriched_at": "2026-08-30T06:28:41.286305+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "f37fc111c19eafee30e54838759a035f6837383bb4523f9beeb7fbcbb5635d8e", "fetched_at": "2026-08-28T04:03:51.125106+00:00", "kind": "readme", "missing": false, "url": "https://github.com/elastic/ember"}], "taxonomy_version": 1}, "enriched": {"inputs": [], "kind": "computed", "method": "enrichment_status"}, "function": {"confidence": null, "enriched_at": "2026-08-30T06:28:41.286305+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "f37fc111c19eafee30e54838759a035f6837383bb4523f9beeb7fbcbb5635d8e", "fetched_at": "2026-08-28T04:03:51.125106+00:00", "kind": "readme", "missing": false, "url": "https://github.com/elastic/ember"}], "taxonomy_version": 1}, "health_score": {"inputs": ["days_since_push", "days_since_release", "archived"], "kind": "computed", "method": "health_v1"}, "homepage": {"kind": "observed", "observed_at": "2026-08-28T04:03:51.125106+00:00", "source": "github"}, "language": {"kind": "observed", "observed_at": "2026-08-28T04:03:51.125106+00:00", "source": "github"}, "license": {"kind": "observed", "observed_at": "2026-08-28T04:03:51.125106+00:00", "source": "github"}, "license_family": {"inputs": ["license"], "kind": "computed", "method": "license_family"}, "maturity": {"confidence": null, "enriched_at": "2026-08-30T06:28:41.286305+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "f37fc111c19eafee30e54838759a035f6837383bb4523f9beeb7fbcbb5635d8e", "fetched_at": "2026-08-28T04:03:51.125106+00:00", "kind": "readme", "missing": false, "url": "https://github.com/elastic/ember"}], "taxonomy_version": 1}, "member_repos": {"kind": "observed", "observed_at": "2026-08-28T04:03:51.125106+00:00", "source": "github"}, "name": {"kind": "observed", "observed_at": "2026-08-28T04:03:51.125106+00:00", "source": "github"}, "platform": {"confidence": null, "enriched_at": "2026-08-30T06:28:41.286305+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "f37fc111c19eafee30e54838759a035f6837383bb4523f9beeb7fbcbb5635d8e", "fetched_at": "2026-08-28T04:03:51.125106+00:00", "kind": "readme", "missing": false, "url": "https://github.com/elastic/ember"}], "taxonomy_version": 1}, "pushed_at": {"kind": "observed", "observed_at": "2026-08-28T04:03:51.125106+00:00", "source": "github"}, "repo": {"kind": "observed", "observed_at": "2026-08-28T04:03:51.125106+00:00", "source": "github"}, "stars": {"kind": "observed", "observed_at": "2026-08-28T04:03:51.125106+00:00", "source": "github"}, "tags": {"confidence": null, "enriched_at": "2026-08-30T06:28:41.286305+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "f37fc111c19eafee30e54838759a035f6837383bb4523f9beeb7fbcbb5635d8e", "fetched_at": "2026-08-28T04:03:51.125106+00:00", "kind": "readme", "missing": false, "url": "https://github.com/elastic/ember"}], "taxonomy_version": 1}, "topics": {"kind": "observed", "observed_at": "2026-08-28T04:03:51.125106+00:00", "source": "github"}, "urls": {"kind": "observed", "observed_at": "2026-08-28T04:03:51.125106+00:00", "source": "github"}, "use_cases": {"confidence": null, "enriched_at": "2026-08-30T06:28:41.286305+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "f37fc111c19eafee30e54838759a035f6837383bb4523f9beeb7fbcbb5635d8e", "fetched_at": "2026-08-28T04:03:51.125106+00:00", "kind": "readme", "missing": false, "url": "https://github.com/elastic/ember"}], "taxonomy_version": 1}, "what_it_is": {"confidence": null, "enriched_at": "2026-08-30T06:28:41.286305+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "f37fc111c19eafee30e54838759a035f6837383bb4523f9beeb7fbcbb5635d8e", "fetched_at": "2026-08-28T04:03:51.125106+00:00", "kind": "readme", "missing": false, "url": "https://github.com/elastic/ember"}], "taxonomy_version": 1}, "when_to_avoid": {"confidence": null, "enriched_at": "2026-08-30T06:28:41.286305+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "f37fc111c19eafee30e54838759a035f6837383bb4523f9beeb7fbcbb5635d8e", "fetched_at": "2026-08-28T04:03:51.125106+00:00", "kind": "readme", "missing": false, "url": "https://github.com/elastic/ember"}], "taxonomy_version": 1}, "when_to_choose": {"confidence": null, "enriched_at": "2026-08-30T06:28:41.286305+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "f37fc111c19eafee30e54838759a035f6837383bb4523f9beeb7fbcbb5635d8e", "fetched_at": "2026-08-28T04:03:51.125106+00:00", "kind": "readme", "missing": false, "url": "https://github.com/elastic/ember"}], "taxonomy_version": 1}}, "score": {"components": {"activity": 0, "longevity": 100, "rhythm": 35}, "computed_at": "2026-09-03T02:20:16.233290+00:00", "flags": ["no_releases", "archived", "no_license"], "formula": "round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)", "inputs": {"age_days": 3066, "days_push": 649, "days_rel": null, "gap_med": null, "n_releases_24m": 0}, "score": 10, "version": 2}, "staleness": {"enrichment_outdated": false, "low_confidence": false, "scrape_days": 9, "stale_scrape": false}}