Skip to content
Open-Source Registry

cargo / annatto

annatto 0.60.0

processes
829
operations
162K
packages
402
compiler runs
1,452
connections
2
job time
9m 04s

Converts linguistic data formats based on the graphANNIS data model as intermediate representation and can apply consistency tests.

20 vulnerabilities

Build behaviournot recorded for this run

53,510 downloads · source · home page · cargo

Release 0.60.0 run d9fa29da-d888-4a05-9cab-f0a6bdfe0481 · built 2026-10-06

Artifact

binary · retained · product
2
ChecksDetections
Build behavior
✓ Network activity—
✓ Cross-process access—
✓ Build file changes—
✓ Build script activity—
✓ Object file origins—
✓ Filesystem writes—
✓ Context collection—
Supply chain
▲ Known vulnerabilities—
▲ Dependency advisories—
✓ Declared and observed dependencies—
Pipeline
✓ Dependency versions across jobs—
✓ Pipeline coverage—

Detections

0

No detections

No abnormal activity detected across 162K flows.

Network

1 peers
  • static.crates.io:8080
    cargo (annatto) via crates.io · build-test
    allowed
Vulnerable dependencies18PackageVersionFixSeverityTitleReach
RUSTSEC-2026-0204crossbeam-epoch0.9.18>=0.9.20highInvalid pointer dereference in `fmt::Pointer` impl for `Atomic` and `Shared` when the underlying pointer is invalidretained
RUSTSEC-2026-0194quick-xml0.28.2, 0.34.0, 0.37.5, 0.38.3>=0.41.0highQuadratic run time when checking a start tag for duplicate attribute namesretained
RUSTSEC-2026-0195quick-xml0.28.2, 0.34.0, 0.37.5, 0.38.3>=0.41.0highUnbounded namespace-declaration allocation in `NsReader` enables memory-exhaustion denial of serviceretained
RUSTSEC-2026-0317sheets-diff1.1.3>=3.2.0highA 512-byte workbook can provoke a multi-gigabyte allocation and abort the processretained
CVE-2026-6654thin-vec0.2.14>=0.2.16highthin-vec: Use-After-Free and Double Free in IntoIter::drop When Element Drop Panicsretained
CVE-2026-50185cmov0.5.3>=0.5.4mediumCmov/CmovEq on aarch64 can produce wrong results if high-bits of registers are setretained
RUSTSEC-2021-0139ansi_term0.12.1none publishedlowansi_term is Unmaintainedretained
RUSTSEC-2026-0190anyhow1.0.99>=1.0.103lowUnsoundness in `Error::downcast_mut()`retained
RUSTSEC-2025-0141bincode1.3.3none publishedlowBincode is unmaintainedretained
GHSA-j39j-6gw9-jw6hgit20.20.2>=0.20.4lowgit2 has potential undefined behavior when dereferencing Buf structretained
RUSTSEC-2026-0183git20.20.2>=0.21.0lowPotential undefined behavior when calling Remote::list()retained
RUSTSEC-2026-0184git20.20.2>=0.21.0lowPotential undefined behavior with Signature from a buffer-created BlameHunkretained
GHSA-rhfx-m35p-ff5jlru0.14.0>=0.16.3low`IterMut` violates Stacked Borrows by invalidating internal pointerretained
RUSTSEC-2026-0253lru0.14.0, 0.17.0>=0.18.2lowPotential use-after-free due to lack of panic safety in `LruCache::pop()`retained
RUSTSEC-2026-0186memmap20.5.10, 0.9.7>=0.9.11lowUnchecked pointer offset in crate `memmap2`retained
RUSTSEC-2025-0119number_prefix0.4.0none publishedlownumber_prefix crate is unmaintainedretained
GHSA-cq8v-f236-94qcrand0.9.2>=0.9.3lowRand is unsound with a custom logger using rand::rng()retained
CVE-2025-58160tracing-subscriber0.3.19>=0.3.20lowTracing logging user input may result in poisoning logs with ANSI escape sequencesretained

Raw data

Loading a sample of the capture

Want to see more? E-mail us at hello@bitbison.io about your use case.

Dependencies

459 packages, 0 with a build script that ran, 0 doing more than compiling
PackageVersionUsageBuild behaviour
adler22.0.1linked
aes0.8.4linked
aes0.9.0linked
ahash0.8.12linked
aho-corasick1.1.3linked
allocator-api20.2.21linked
android_system_properties0.1.5platform_gated
ansi-str0.8.0linked
ansi_term direct0.12.1linked
ansitok0.2.0linked
anstream0.6.20linked
anstyle1.0.11linked
anstyle-parse0.2.7linked
anstyle-query1.1.4linked
anstyle-wincon3.0.10platform_gated
anyhow direct1.0.99linked
arbitrary1.4.2platform_gated
arrayvec0.5.2linked
ascii-canvas4.0.0linked
assert_cmd2.1.0unrelated
atoi_simd0.16.1linked
auto_enums0.8.7linked
autocfg1.5.0buildtime_only
base640.22.1linked
bimap direct0.6.3linked
binary-layout2.1.0linked
binary-layout4.0.2linked
bincode1.3.3linked
bit-set0.8.0linked
bit-set0.9.1linked
bit-vec0.8.0linked
bit-vec0.9.1linked
bitflags2.9.2linked
block-buffer0.10.4linked
block-buffer0.12.0linked
block-padding0.3.3linked
boolean_expression0.4.4linked
bstr1.12.0unrelated
bumpalo3.19.0linked
bytecount0.6.9linked
byteorder1.5.0linked
bzip20.6.1linked
calamine0.31.0linked
cbc0.1.2linked
cc1.2.33linked
cfb0.10.0linked
cfg-if1.0.3linked
chacha200.10.0linked
chrono direct0.4.42linked
cipher0.4.4linked
cipher0.5.1linked
clap direct4.5.45linked
clap_builder4.5.44linked
clap_derive4.5.45linked
clap_lex0.7.5linked
clru0.6.2linked
cmov0.5.3linked
codepage0.1.2linked
colorchoice1.0.4linked
console direct0.15.11linked
const-fnv1a-hash1.1.0linked
const-oid0.10.2linked
constant_time_eq0.4.2linked
convert_case0.7.1linked
coolor1.1.0linked
core-foundation-sys0.8.7platform_gated
cpubits0.1.0linked
cpufeatures0.2.17linked
cpufeatures0.3.0linked
crc3.3.0linked
crc-catalog2.4.0linked
crc32fast1.5.0linked
crokey1.2.0linked
crokey-proc_macros1.2.0linked
crossbeam0.8.4linked
crossbeam-channel0.5.15linked
crossbeam-deque0.8.6linked
crossbeam-epoch0.9.18linked
crossbeam-queue0.3.12linked
crossbeam-utils0.8.21linked
crossterm0.29.0linked
crossterm_winapi0.9.1platform_gated
crypto-common0.1.6linked
crypto-common0.2.1linked
csv direct1.3.1linked
csv-core0.1.12linked
ctutils0.4.2linked
debug_unsafe0.1.3linked
deflate640.1.12linked
deranged0.5.5linked
derive_arbitrary1.4.2buildtime_only
derive_more2.0.1linked
derive_more-impl2.0.1linked
derive_utils0.15.0linked
diff0.1.13unrelated
difflib0.4.0unrelated
digest0.10.7linked
digest0.11.2linked
displaydoc0.2.5linked
doc-comment0.3.3linked
document-features0.2.11linked
dot-generator0.2.0linked
dot-structures0.1.2linked
either1.18.0linked
ena0.14.3linked
encode_unicode1.0.0platform_gated
encoding_rs direct0.8.35linked
encoding_rs_io direct0.1.7linked
equivalent1.0.2linked
errno0.3.13platform_gated
facet direct0.46.0linked
facet-core0.46.0linked
facet-macro-parse0.46.0linked
facet-macro-types0.46.0linked
facet-macros0.46.0linked
facet-macros-impl0.46.0linked
facet-path0.46.0linked
facet-reflect direct0.46.0linked
fancy-regex0.14.0linked
fast-float20.2.3linked
fastrand2.3.0linked
file_diff1.0.0linked
fixedbitset0.5.7linked
flate21.1.2linked
fnv1.0.7linked
foldhash0.1.5linked
foldhash0.2.0linked
form_urlencoded1.2.1linked
fs20.4.3linked
generic-array0.14.7linked
getrandom0.2.16linked
getrandom0.3.3linked
getrandom0.4.2linked
git2 direct0.20.2linked
glob direct0.3.3linked
graphannis direct4.2.0linked
graphannis-core direct4.2.0linked
graphviz-rust direct0.9.7linked
hashbrown0.15.5linked
hashbrown0.16.1feature_gated
hashbrown0.17.0linked
heck0.4.1linked
heck0.5.0linked
hmac0.12.1linked
hmac0.13.0linked
html_parser0.7.0linked
hybrid-array0.4.11linked
iana-time-zone0.1.63linked
iana-time-zone-haiku0.1.2platform_gated
icu_collections2.3.0linked
icu_locale_core2.3.0linked
icu_normalizer2.3.0linked
icu_normalizer_data2.3.0linked
icu_properties2.3.0linked
icu_properties_data2.3.0linked
icu_provider2.3.1linked
id-arena2.3.0buildtime_only
iddqd0.3.18feature_gated
idna1.0.3linked
idna_adapter1.2.1linked
imagesize0.14.0linked
impls1.0.3linked
indexmap2.14.0linked
indicatif direct0.17.11linked
inout0.1.4linked
inout0.2.2linked
insta1.43.1unrelated
integer-encoding3.0.4linked
into-attr0.1.1linked
into-attr-derive0.2.1linked
is_terminal_polyfill1.70.1linked
itertools direct0.12.1linked
itertools0.14.0linked
itertools0.9.0linked
itoa1.0.15linked
jobserver0.1.33linked
js-sys0.3.77platform_gated
keccak0.1.6linked
lalrpop0.23.1linked
lalrpop-util0.23.1linked
lazy-regex3.4.1linked
lazy-regex-proc_macros3.4.1linked
lazy_static direct1.5.0linked
ld-linux-x86-64.so.2linked
leb128fmt0.1.0buildtime_only
libbz2-rs-sys0.2.3linked
libc0.2.175linked
libc.so.6linked
libgcc_s.so.1linked
libgit2-sys0.18.2+1.9.1linked
libm.so.6linked
libmvec.so.1linked
libz-rs-sys0.5.2linked
libz-sys1.1.22linked
linked-hash-map direct0.5.6linked
linked_hash_set direct0.1.5linked
linux-raw-sys0.9.4linked
litemap0.8.0linked
litrs0.4.2linked
lock_api0.4.13linked
log direct0.4.29linked
lru direct0.14.0linked
lru0.17.0linked
lzma-rust20.16.2linked
matchers0.1.0linked
md-50.10.6linked
memchr2.8.3linked
memmap20.5.10linked
memmap20.9.7linked
memory-stats1.2.0linked
minimad0.13.1linked
miniz_oxide0.8.9linked
mio1.0.4linked
mutants0.0.3linked
new_debug_unreachable1.0.6linked
nom7.1.3linked
nonzero direct0.2.0linked
nonzero_lit0.1.2linked
normpath direct1.3.0linked
nu-ansi-term0.46.0linked
num-conv0.2.1linked
num-integer0.1.46linked
num-traits0.2.19linked
number_prefix0.4.0linked
once_cell1.21.3linked
once_cell_polyfill1.70.1platform_gated
ordered-float direct4.6.0linked
overload0.1.1linked
page_size0.6.0linked
papergrid0.11.0linked
parking_lot0.12.4linked
parking_lot_core0.9.11linked
paste1.0.15linked
pathdiff direct0.2.3linked
pbkdf20.13.0linked
percent-encoding direct2.3.1linked
pest direct2.8.1linked
pest_derive direct2.8.1linked
pest_generator2.8.1linked
pest_meta2.8.1linked
petgraph0.8.3linked
phf_shared0.13.1linked
pin-project-lite0.2.16linked
pkg-config0.3.32linked
portable-atomic1.11.1linked
potential_utf0.1.6linked
powerfmt0.2.0linked
ppmd-rust1.4.0linked
ppv-lite860.2.21linked
precomputed-hash0.1.1linked
predicates3.1.3unrelated
predicates-core1.0.9unrelated
predicates-tree1.0.12unrelated
pretty_assertions1.4.1unrelated
prettyplease0.2.37buildtime_only
proc-macro-error1.0.4linked
proc-macro-error-attr1.0.4linked
proc-macro21.0.101linked
quick-xml0.28.2linked
quick-xml direct0.34.0linked
quick-xml0.37.5linked
quick-xml0.38.3linked
quote1.0.47linked
rand0.10.1linked
rand0.9.2linked
rand_chacha0.9.0linked
rand_core0.10.1linked
rand_core0.9.3linked
rayon direct1.11.0linked
rayon-core1.13.0linked
redox_syscall0.5.17platform_gated
regex direct1.12.2linked
regex-automata0.1.10linked
regex-automata0.4.13linked
regex-syntax0.6.29linked
regex-syntax0.8.5linked
roxmltree direct0.20.0linked
rustc-hash2.1.2linked
rustix1.0.8linked
rustversion1.0.22buildtime_only
ryu1.0.20linked
same-file1.0.6linked
scopeguard1.2.0linked
semver1.0.28buildtime_only
seqdiff0.3.0linked
serde direct1.0.228linked
serde-xml-rs direct0.8.2linked
serde_bytes0.11.17linked
serde_core1.0.228linked
serde_derive direct1.0.228linked
serde_json direct1.0.143linked
serde_spanned0.6.9linked
serde_spanned1.1.1linked
sha10.11.0linked
sha20.10.9linked
sha30.10.9linked
sharded-slab0.1.7linked
sheets-diff direct1.1.3linked
shlex1.3.0linked
signal-hook0.3.18linked
signal-hook-mio0.2.4linked
signal-hook-registry1.4.6linked
simd-adler320.3.7linked
similar direct2.7.0linked
siphasher1.0.1linked
smallvec1.15.1linked
smallvec2.0.0-alpha.12linked
snap1.1.1linked
sstable0.11.1linked
stable_deref_trait1.2.0linked
strict0.2.0linked
string_cache0.9.0linked
strsim0.11.1linked
strum0.28.0linked
strum_macros0.28.0linked
subtle2.6.1linked
syn1.0.109linked
syn2.0.106linked
syn3.0.6linked
synstructure0.13.2linked
synstructure0.14.0linked
sys-info0.9.1linked
tabled direct0.15.0linked
tabled_derive0.7.0linked
tempfile direct3.21.0linked
term1.2.1linked
termimad direct0.30.1linked
termtree0.5.1unrelated
text-splitter direct0.6.3linked
thin-vec0.2.14linked
thiserror1.0.69linked
thiserror direct2.0.18linked
thiserror-impl1.0.69linked
thiserror-impl2.0.18linked
thousands0.2.0linked
thread_local1.1.9linked
time direct0.3.47linked
time-core0.1.8linked
tinystr0.8.4linked
tinyvec1.10.0linked
tinyvec_macros0.1.1linked
tokenizations direct0.4.2linked
toml0.5.11unrelated
toml direct0.8.23linked
toml1.1.2+spec-1.1.0linked
toml_datetime0.6.11linked
toml_datetime1.1.1+spec-1.1.0linked
toml_edit0.22.27linked
toml_parser1.1.2+spec-1.1.0linked
toml_write0.1.2linked
toml_writer1.1.1+spec-1.1.0linked
tracing0.1.41linked
tracing-core0.1.34linked
tracing-log0.2.0linked
tracing-subscriber direct0.3.19linked
transient-btree-index0.5.1linked
typed-path0.12.3linked
typenum1.20.0linked
ucd-trie0.1.7linked
umya-spreadsheet direct2.3.3linked
unicode-ident1.0.18linked
unicode-normalization0.1.24linked
unicode-segmentation1.12.0linked
unicode-width0.1.14linked
unicode-width0.2.1linked
unicode-xid0.2.6linked
unsynn0.3.0linked
url direct2.5.4linked
utf8_iter1.0.4linked
utf8parse0.2.2linked
uuid1.18.0linked
valuable0.1.1feature_gated
vcpkg0.2.15buildtime_only
version_check0.9.5buildtime_only
vte0.10.1linked
vte_generate_state_changes0.1.2linked
wait-timeout0.2.1unrelated
walkdir2.5.0linked
wasip21.0.3+wasi-0.2.9platform_gated
wasip30.4.0+wasi-0.3.0-rc-2026-01-06platform_gated
wasm-bindgen0.2.100platform_gated
wasm-bindgen-backend0.2.100buildtime_only
wasm-bindgen-macro0.2.100buildtime_only
wasm-bindgen-macro-support0.2.100buildtime_only
wasm-bindgen-shared0.2.100buildtime_only
wasm-encoder0.244.0buildtime_only
wasm-metadata0.244.0buildtime_only
wasmparser0.244.0buildtime_only
web-time1.1.0platform_gated
winapi0.3.9platform_gated
winapi-i686-pc-windows-gnu0.4.0platform_gated
winapi-util0.1.10buildtime_only
winapi-x86_64-pc-windows-gnu0.4.0platform_gated
windows-core0.61.2platform_gated
windows-implement0.60.0buildtime_only
windows-interface0.59.1buildtime_only
windows-result0.3.4platform_gated
windows-strings0.4.2platform_gated
winnow0.7.12linked
winnow1.0.2linked
wit-bindgen-core0.51.0buildtime_only
wit-bindgen-rt0.39.0platform_gated
wit-bindgen-rust0.51.0buildtime_only
wit-bindgen-rust-macro0.51.0buildtime_only
wit-component0.244.0buildtime_only
wit-parser0.244.0buildtime_only
writeable0.6.4linked
xml1.4.0linked
xml-rs direct0.8.27linked
yansi1.0.1unrelated
yoke0.8.3linked
yoke-derive0.8.4linked
zerocopy0.8.26linked
zerocopy-derive0.8.26buildtime_only
zerofrom0.1.6linked
zerofrom-derive0.1.6linked
zeroize1.8.2linked
zerotrie0.2.5linked
zerovec0.11.8linked
zerovec-derive0.11.6linked
zip2.4.2linked
zip4.6.1linked
zip direct8.6.0linked
zlib-rs0.5.2linked
zopfli0.8.3linked
zstd0.13.3linked
zstd-safe7.2.4linked
zstd-sys2.0.15+zstd.1.5.7linked
minimal-lexical0.2.1dead
r-efi5.3.0unverified
r-efi6.0.0unverified
rust_xlsxwriter direct0.90.2dead
wasi0.11.1+wasi-snapshot-preview1unverified
wasi0.14.2+wasi-0.2.4unverified
windows-link0.1.3unverified
windows-link0.2.1unverified
windows-sys0.52.0unverified
windows-sys0.59.0unverified
windows-sys0.60.2unverified
windows-targets0.52.6unverified
windows-targets0.53.3unverified
windows_aarch64_gnullvm0.52.6unverified
windows_aarch64_gnullvm0.53.0unverified
windows_aarch64_msvc0.52.6unverified
windows_aarch64_msvc0.53.0unverified
windows_i686_gnu0.52.6unverified
windows_i686_gnu0.53.0unverified
windows_i686_gnullvm0.52.6unverified
windows_i686_gnullvm0.53.0unverified
windows_i686_msvc0.52.6unverified
windows_i686_msvc0.53.0unverified
windows_x86_64_gnu0.52.6unverified
windows_x86_64_gnu0.53.0unverified
windows_x86_64_gnullvm0.52.6unverified
windows_x86_64_gnullvm0.53.0unverified
windows_x86_64_msvc0.52.6unverified
windows_x86_64_msvc0.53.0unverified
wit-bindgen0.51.0unverified
wit-bindgen0.57.1unverified

1 of 1 jobs captured: build-test success · Generated 2026-10-06 · tarp 0.1.0+20261006141426-gae10636542ce · run d9fa29da-d888-4a05-9cab-f0a6bdfe0481