Artifact
- arorabinary · retained · product 13
- libarora.rlibfile · retained · product
Checks
11 of 14 clear Known vulnerabilities Build-time dependency advisories +1 moreBuild behavior✓✓✓✓✓✓✓✓
Supply chain▲▲▲✓✓
Pipeline✓
Detections
0No detections
No abnormal activity detected across 114K flows.
Network
1 peers- static.crates.io:8080 ecosystem
| Dependencies402 | Build behaviour |
|---|---|
| addr2line0.26.1 | |
| aho-corasick1.1.4 | |
| allocator-api20.2.21 | |
| ambient-authority0.0.2 | |
| anstream1.0.0 | |
| anstyle1.0.14 | |
| anstyle-parse1.0.0 | |
| anstyle-query1.1.5 | |
| anyhow1.0.104 | |
| arbitrary1.4.2 | |
| arora-behavior9.2.0 | |
| arora-behavior-tree8.5.0 | |
| arora-bridge6.1.0 | |
| arora-bridge-ws7.2.4 | |
| arora-buffers3.0.0 | |
| arora-engine5.2.0 | |
| arora-hal4.3.0 | |
| arora-simple-data-store3.2.0 | |
| arora-types3.5.0 | |
| base640.22.1 | |
| bitflags2.13.1 | |
| block-buffer0.10.4 | |
| bumpalo3.20.3 | |
| byteorder1.5.0 | |
| bytes1.12.1 | |
| cap-fs-ext3.4.5 | |
| cap-net-ext3.4.5 | |
| cap-primitives3.4.5 | |
| cap-std3.4.5 | |
| cap-time-ext3.4.5 | |
| cassowary0.3.0 | |
| castaway0.2.4 | |
| cfg-if1.0.4 | |
| chacha200.10.1 | |
| clap4.6.4 | |
| clap_builder4.6.2 | |
| clap_lex1.1.0 | |
| cobs0.3.0 | |
| colorchoice1.0.5 | |
| compact_str0.8.2 | |
| cpp_demangle0.4.5 | |
| cpufeatures0.2.17 | |
| cpufeatures0.3.0 | |
| cranelift-assembler-x640.132.3 | |
| cranelift-bforest0.132.3 | |
| cranelift-bitset0.132.3 | |
| cranelift-codegen0.132.3 | |
| cranelift-codegen-shared0.132.3 | |
| cranelift-control0.132.3 | |
| cranelift-entity0.132.3 | |
| cranelift-frontend0.132.3 | |
| cranelift-native0.132.3 | |
| crc32fast1.5.0 | |
| crossbeam-deque0.8.7 | |
| crossbeam-epoch0.9.20 | |
| crossbeam-utils0.8.22 | |
| crossterm0.28.1 | |
| crypto-common0.1.7 | |
| data-encoding2.11.0 | |
| debugid0.8.0 | |
| derive_more2.1.1 | |
| digest0.10.7 | |
| directories-next2.0.0 | |
| dirs6.0.0 | |
| dirs-sys0.5.0 | |
| dirs-sys-next0.1.2 | |
| either1.17.0 | |
| encoding_rs0.8.35 | |
| env_filter0.1.4 | |
| env_filter2.0.0 | |
| env_logger0.11.11 | |
| equivalent1.0.2 | |
| errno0.3.14 | |
| fastrand2.5.0 | |
| fixedbitset0.4.2 | |
| fnv1.0.7 | |
| foldhash0.1.5 | |
| foldhash0.2.0 | |
| form_urlencoded1.2.2 | |
| fs-set-times0.20.3 | |
| futures0.3.33 | |
| futures-channel0.3.33 | |
| futures-core0.3.33 | |
| futures-executor0.3.33 | |
| futures-io0.3.33 | |
| futures-sink0.3.33 | |
| futures-task0.3.33 | |
| futures-util0.3.33 | |
| fxprof-processed-profile0.8.1 | |
| generic-array0.14.7 | |
| getrandom0.2.17 | |
| getrandom0.3.4 | |
| getrandom0.4.3 | |
| gimli0.33.0 | |
| hashbrown0.15.5 | |
| hashbrown0.16.1 | |
| hashbrown0.17.1 | |
| http1.5.0 | |
| httparse1.10.1 | |
| iana-time-zone0.1.65 | |
| icu_collections2.2.0 | |
| icu_locale_core2.2.0 | |
| icu_normalizer2.2.0 | |
| icu_normalizer_data2.2.0 | |
| icu_properties2.2.0 | |
| icu_properties_data2.2.0 | |
| icu_provider2.2.0 | |
| idna1.1.0 | |
| idna_adapter1.2.2 | |
| indexmap2.14.0 | |
| io-extras0.18.4 | |
| io-lifetimes2.0.4 | |
| ipnet2.12.0 | |
| is_terminal_polyfill1.70.2 | |
| itertools0.13.0 | |
| itertools0.14.0 | |
| itoa1.0.18 | |
| ittapi0.4.0 | |
| ittapi-sys0.4.0 | |
| jiff0.2.35 | |
| jiff-core0.1.0 | |
| lazy_static1.5.0 | |
| ld-linux-x86-64.so.2 | |
| leb128fmt0.1.0 | |
| libc0.2.189 | |
| libc.so.6 | |
| libgcc_s.so.1 | |
| libloading0.9.0 | |
| libm0.2.16 | |
| libm.so.6 | |
| libmvec.so.1 | |
| linux-raw-sys0.12.1 | |
| linux-raw-sys0.4.15 | |
| litemap0.8.2 | |
| lock_api0.4.14 | |
| log0.4.33 | |
| lru0.12.5 | |
| maybe-owned0.3.4 | |
| memchr2.8.3 | |
| memfd0.6.5 | |
| mio1.2.2 | |
| object0.39.1 | |
| once_cell1.21.4 | |
| option-ext0.2.0 | |
| parking_lot0.12.5 | |
| parking_lot_core0.9.12 | |
| percent-encoding2.3.2 | |
| petgraph0.6.5 | |
| pin-project-lite0.2.17 | |
| postcard1.1.3 | |
| potential_utf0.1.5 | |
| ppv-lite860.2.21 | |
| pulley-interpreter45.0.3 | |
| quick-xml0.40.1 | |
| rand0.10.2 | |
| rand0.8.7 | |
| rand_chacha0.3.1 | |
| rand_core0.10.1 | |
| rand_core0.6.4 | |
| ratatui0.29.0 | |
| rayon1.12.0 | |
| rayon-core1.13.0 | |
| regalloc20.15.2 | |
| regex1.13.1 | |
| regex-automata0.4.16 | |
| regex-syntax0.8.11 | |
| rustc-demangle0.1.28 | |
| rustc-hash2.1.3 | |
| rustix0.38.44 | |
| rustix1.1.4 | |
| rustix-linux-procfs0.1.1 | |
| ryu1.0.23 | |
| scopeguard1.2.0 | |
| semver1.0.28 | |
| serde1.0.229 | |
| serde_core1.0.229 | |
| serde_json1.0.151 | |
| serde_spanned1.1.1 | |
| serde_yaml0.9.34+deprecated | |
| sha10.10.7 | |
| sha20.10.9 | |
| signal-hook0.3.18 | |
| signal-hook-mio0.2.5 | |
| signal-hook-registry1.4.8 | |
| slab0.4.12 | |
| smallvec1.15.2 | |
| socket20.6.5 | |
| stable_deref_trait1.2.1 | |
| static_assertions1.1.0 | |
| strsim0.11.1 | |
| strum0.26.3 | |
| sysinfo0.33.1 | |
| target-lexicon0.13.5 | |
| tempfile3.27.0 | |
| termcolor1.4.1 | |
| thiserror1.0.69 | |
| thiserror2.0.19 | |
| tinystr0.8.3 | |
| tokio1.53.1 | |
| tokio-tungstenite0.24.0 | |
| tokio-util0.7.19 | |
| toml0.9.12+spec-1.1.0 | |
| toml_datetime0.7.5+spec-1.1.0 | |
| toml_parser1.1.3+spec-1.1.0 | |
| toml_writer1.1.2+spec-1.1.0 | |
| tracing0.1.44 | |
| tracing-core0.1.36 | |
| tungstenite0.24.0 | |
| typenum1.20.1 | |
| unicode-segmentation1.13.3 | |
| unicode-truncate1.1.0 | |
| unicode-width0.1.14 | |
| unicode-width0.2.0 | |
| unsafe-libyaml0.2.11 | |
| url2.5.8 | |
| utf-80.7.6 | |
| utf8_iter1.0.4 | |
| utf8parse0.2.2 | |
| uuid1.24.0 | |
| wasm-compose0.248.0 | |
| wasm-encoder0.248.0 | |
| wasm-encoder0.254.0 | |
| wasmparser0.248.0 | |
| wasmprinter0.248.0 | |
| wasmtime45.0.3 | |
| wasmtime-environ45.0.3 | |
| wasmtime-internal-cache45.0.3 | |
| wasmtime-internal-component-util45.0.3 | |
| wasmtime-internal-core45.0.3 | |
| wasmtime-internal-cranelift45.0.3 | |
| wasmtime-internal-fiber45.0.3 | |
| wasmtime-internal-jit-debug45.0.3 | |
| wasmtime-internal-jit-icache-coherence45.0.3 | |
| wasmtime-internal-unwinder45.0.3 | |
| wasmtime-wasi45.0.3 | |
| wasmtime-wasi-io45.0.3 | |
| wast254.0.0 | |
| wat1.254.0 | |
| web-time1.1.0 | |
| wiggle45.0.3 | |
| winnow0.7.15 | |
| winnow1.0.4 | |
| writeable0.6.3 | |
| yoke0.8.3 | |
| zerocopy0.8.55 | |
| zerofrom0.1.8 | |
| zerotrie0.2.4 | |
| zerovec0.11.6 | |
| zmij1.0.23 | |
| zstd0.13.3 | |
| zstd-safe7.2.4 | |
| zstd-sys2.0.16+zstd.1.5.7 | |
| arora-behavior-tree-types2.0.0 | |
| heck0.5.0 | |
| unicode-ident1.0.24 | |
| android_system_properties0.1.5 | |
| anstyle-wincon3.0.11 | |
| arora-module-core2.0.0 | |
| arora-module-rust2.0.0 | |
| arora-registry2.0.0 | |
| arora-types-derive1.3.0 | |
| arora-vfs0.1.1 | |
| async-recursion1.1.1 | |
| async-trait0.1.91 | |
| autocfg1.5.1 | |
| bitflags1.3.2 | |
| cast0.3.0 | |
| cbindgen0.29.4 | |
| cc1.4.0 | |
| clap_derive4.6.4 | |
| console_error_panic_hook0.1.7 | |
| convert_case0.10.0 | |
| convert_case0.11.0 | |
| core-foundation-sys0.8.7 | |
| cranelift-assembler-x64-meta0.132.3 | |
| cranelift-codegen-meta0.132.3 | |
| cranelift-isle0.132.3 | |
| cranelift-srcgen0.132.3 | |
| crossterm_winapi0.9.1 | |
| darling0.23.0 | |
| darling_core0.23.0 | |
| darling_macro0.23.0 | |
| defmt1.1.1 | |
| defmt-macros1.1.1 | |
| defmt-parser1.0.0 | |
| derive_more-impl2.1.1 | |
| displaydoc0.2.7 | |
| embedded-io0.4.0 | |
| embedded-io0.6.1 | |
| find-msvc-tools0.1.9 | |
| futures-macro0.3.33 | |
| gloo-timers0.3.0 | |
| iana-time-zone-haiku0.1.2 | |
| id-arena2.3.0 | |
| ident_case1.0.1 | |
| indoc2.0.7 | |
| instability0.3.12 | |
| jiff-static0.2.35 | |
| jobserver0.1.35 | |
| js-sys0.3.103 | |
| leb1280.2.7 | |
| libredox0.1.18 | |
| mach20.4.3 | |
| minicov0.3.8 | |
| ntapi0.4.3 | |
| nu-ansi-term0.50.3 | |
| num-traits0.2.19 | |
| once_cell_polyfill1.70.2 | |
| oorandom11.1.5 | |
| paste1.0.15 | |
| pkg-config0.3.33 | |
| portable-atomic1.14.0 | |
| portable-atomic-util0.2.7 | |
| proc-macro21.0.107 | |
| pulley-macros45.0.3 | |
| quote1.0.47 | |
| r-efi5.3.0 | |
| r-efi6.0.0 | |
| redox_syscall0.5.18 | |
| redox_users0.4.6 | |
| redox_users0.5.2 | |
| rustc_version0.4.1 | |
| rustversion1.0.23 | |
| same-file1.0.6 | |
| serde-wasm-bindgen0.6.5 | |
| serde_derive1.0.229 | |
| shlex2.0.1 | |
| strum_macros0.26.4 | |
| syn2.0.119 | |
| syn3.0.3 | |
| synstructure0.13.2 | |
| thiserror-impl1.0.69 | |
| thiserror-impl2.0.19 | |
| tokio-macros2.7.2 | |
| tracing-attributes0.1.31 | |
| unicode-xid0.2.6 | |
| version_check0.9.5 | |
| walkdir2.5.0 | |
| wasi0.11.1+wasi-snapshot-preview1 | |
| wasip21.0.4+wasi-0.2.12 | |
| wasm-bindgen0.2.126 | |
| wasm-bindgen-futures0.4.76 | |
| wasm-bindgen-macro0.2.126 | |
| wasm-bindgen-macro-support0.2.126 | |
| wasm-bindgen-shared0.2.126 | |
| wasm-bindgen-test0.3.76 | |
| wasm-bindgen-test-macro0.3.76 | |
| wasm-bindgen-test-shared0.2.126 | |
| wasmparser0.254.0 | |
| wasmtime-internal-component-macro45.0.3 | |
| wasmtime-internal-versioned-export-macros45.0.3 | |
| wasmtime-internal-winch45.0.3 | |
| wasmtime-internal-wit-bindgen45.0.3 | |
| wast35.0.2 | |
| web-sys0.3.103 | |
| wiggle-generate45.0.3 | |
| wiggle-macro45.0.3 | |
| winapi0.3.9 | |
| winapi-i686-pc-windows-gnu0.4.0 | |
| winapi-util0.1.11 | |
| winapi-x86_64-pc-windows-gnu0.4.0 | |
| winch-codegen45.0.3 | |
| windows0.57.0 | |
| windows-core0.57.0 | |
| windows-core0.61.2 | |
| windows-implement0.57.0 | |
| windows-implement0.60.2 | |
| windows-interface0.57.0 | |
| windows-interface0.59.3 | |
| windows-link0.1.3 | |
| windows-link0.2.1 | |
| windows-result0.1.2 | |
| windows-result0.3.4 | |
| windows-strings0.4.2 | |
| windows-sys0.48.0 | |
| windows-sys0.59.0 | |
| windows-sys0.61.2 | |
| windows-targets0.48.5 | |
| windows-targets0.52.6 | |
| windows_aarch64_gnullvm0.48.5 | |
| windows_aarch64_gnullvm0.52.6 | |
| windows_aarch64_msvc0.48.5 | |
| windows_aarch64_msvc0.52.6 | |
| windows_i686_gnu0.48.5 | |
| windows_i686_gnu0.52.6 | |
| windows_i686_gnullvm0.52.6 | |
| windows_i686_msvc0.48.5 | |
| windows_i686_msvc0.52.6 | |
| windows_x86_64_gnu0.48.5 | |
| windows_x86_64_gnu0.52.6 | |
| windows_x86_64_gnullvm0.48.5 | |
| windows_x86_64_gnullvm0.52.6 | |
| windows_x86_64_msvc0.48.5 | |
| windows_x86_64_msvc0.52.6 | |
| winx0.36.4 | |
| wit-bindgen0.57.1 | |
| wit-parser0.248.0 | |
| witx0.9.1 | |
| yoke-derive0.8.2 | |
| zerocopy-derive0.8.55 | |
| zerofrom-derive0.1.7 | |
| zerovec-derive0.11.3 |
| Vulnerabilities13 | Package | Version | Fix | Severity | Title | Reach |
|---|---|---|---|---|---|---|
| RUSTSEC-2026-0194 | quick-xml | 0.40.1 | >=0.41.0 | high | Quadratic run time when checking a start tag for duplicate attribute names | retained |
| RUSTSEC-2026-0195 | quick-xml | 0.40.1 | >=0.41.0 | high | Unbounded namespace-declaration allocation in `NsReader` enables memory-exhaustion denial of service | retained |
| RUSTSEC-2026-0222 | wasmtime | 45.0.3 | >=46.0.2 | high | Stores can mix up type indices between engines | retained |
| RUSTSEC-2026-0269 | wasmtime | 45.0.3 | >=46.0.3 | high | Filesystem sandbox escape when paths or symlinks contain trailing slashes | retained |
| RUSTSEC-2026-0316 | wasmtime | 45.0.3 | >=48.0.3 | high | Dynamic record lifting can allocate beyond the hostcall fuel limit | retained |
| RUSTSEC-2026-0327 | wasmtime | 45.0.3 | >=48.0.4 | high | Wasmtime component async-lifted callback result count is unvalidated, causing a native stack buffer overflow | retained |
| RUSTSEC-2026-0314 | wasmtime-wasi | 45.0.3 | >=48.0.3 | high | Guest can panic host through filesystem datetime overflow | retained |
| RUSTSEC-2026-0321 | wasmtime-wasi | 45.0.3 | >=48.0.4 | high | WASI preview 0 implementation of `poll_oneoff` circumvents fuel consumption | retained |
| RUSTSEC-2026-0322 | wasmtime-wasi | 45.0.3 | >=48.0.4 | high | Excessive allocated memory on the host when guests don't have stdio | retained |
| RUSTSEC-2026-0323 | wasmtime-wasi | 45.0.3 | >=48.0.4 | high | fd_readdir copies uninitialized struct padding into guest memory | retained |
| GHSA-rhfx-m35p-ff5j | lru | 0.12.5 | >=0.16.3 | low | `IterMut` violates Stacked Borrows by invalidating internal pointer | retained |
| RUSTSEC-2026-0253 | lru | 0.12.5 | >=0.18.2 | low | Potential use-after-free due to lack of panic safety in `LruCache::pop()` | retained |
| RUSTSEC-2024-0449 | unsafe-libyaml | 0.2.11 | none published | low | unsafe-libyaml is unmaintained | retained |
1 of 1 jobs captured: build-test success · Generated 2026-10-13 · run 7de35451-abd7-4a21-ae33-0a07677904c8
analysis 0.1.0 · 2026-10-13 · 75d273e · graph v2
