cargo / backbone-tax

backbone-tax 0.6.20

processes: 466
operations: 90K
packages: 384
compiler runs: 1,110
connections: 2
job time: 8m 08s

Tax engine (region-neutral): categories, templates, effective-dated rates, withholding. Computes tax lines; Indonesia rules deferred

4 vulnerabilities Release

Build behaviournot recorded for this run

33 downloads · Apache-2.0 OR MIT · source · cargo

Release 0.6.20 run 9baa5200-bc8c-4bc9-b426-ab09edec1e82 · built 2026-10-06

Artifact

file · retained · product

Checks	Detections
Build behavior
✓ Network activity	—
✓ Cross-process access	—
✓ Build file changes	—
✓ Build script activity	—
✓ Object file origins	—
✓ Filesystem writes	—
✓ Context collection	—
Supply chain
▲ Known vulnerabilities	—
▲ Build-time dependency advisories	—
▲ Dependency advisories	—
✓ Declared and observed dependencies	—
Pipeline
✓ Dependency versions across jobs	—
✓ Pipeline coverage	—

Detections

No detections

No abnormal activity detected across 90K flows.

Network

1 peers

static.crates.io:8080

cargo (backbone-tax) via crates.io · build-test

allowed

Vulnerable dependencies4	Package	Version	Fix	Severity	Title	Reach
RUSTSEC-2026-0258	h2	0.4.15	>=0.4.16	high	h2 unbounded empty DATA frames	retained
CVE-2026-25537	jsonwebtoken	9.3.1	>=10.3.0	medium	jsonwebtoken has Type Confusion that leads to potential authorization bypass	retained
GHSA-2mjx-qc3c-rqvc	rustls	0.23.41	>=0.23.45	medium	Rustls: TLS 1.3 handshake messages incorrectly accepted across encryption level boundaries	retained
RUSTSEC-2026-0221	event-listener	5.4.1	>=5.4.2	low	`event-listener` allows `!Send` tags to cross thread boundaries via `StackSlot`	retained

Dependencies

431 packages, 0 with a build script that ran, 0 doing more than compiling

Package	Version	Usage
aho-corasick	1.1.4	linked
allocator-api2	0.2.21	linked
android_system_properties	0.1.5	platform_gated
anstyle	1.0.14	unrelated
anyhow direct	1.0.103	linked
argon2	0.5.3	linked
arrayvec	0.7.8	linked
async-stream-impl	0.3.6	buildtime_only
async-trait direct	0.1.89	linked
atoi	2.0.0	linked
atomic-waker	1.1.2	linked
autocfg	1.5.1	buildtime_only
axum direct	0.7.9	linked
axum-core	0.4.5	linked
axum-macros	0.4.2	linked
backbone-auth direct	2.7.35	linked
backbone-core direct	2.7.35	linked
backbone-messaging direct	2.7.35	linked
backbone-orm direct	2.7.35	linked
backbone-outbox direct	2.7.35	linked
base64	0.22.1	linked
base64ct	1.8.3	linked
bitflags	2.13.0	linked
bitvec	1.1.1	feature_gated
blake2	0.10.6	linked
block-buffer	0.10.4	linked
borsh	1.7.0	feature_gated
borsh-derive	1.7.0	buildtime_only
bumpalo	3.20.3	buildtime_only
bytecheck	0.6.12	feature_gated
bytecheck_derive	0.6.12	buildtime_only
byteorder	1.5.0	linked
bytes	1.12.0	linked
cc	1.2.65	linked
cfg-if	1.0.4	linked
cfg_aliases	0.2.1	buildtime_only
chrono direct	0.4.45	linked
colored	2.2.0	linked
const-oid	0.9.6	platform_gated
const-random-macro	0.1.16	buildtime_only
core-foundation	0.10.1	unrelated
core-foundation-sys	0.8.7	platform_gated
cpufeatures	0.2.17	linked
crc	3.4.0	linked
crc-catalog	2.5.0	linked
crossbeam-queue	0.3.12	linked
crossbeam-utils	0.8.21	linked
crunchy	0.2.4	buildtime_only
crypto-common	0.1.7	linked
der	0.7.10	feature_gated
deranged	0.5.8	linked
diff	0.1.13	unrelated
digest	0.10.7	linked
displaydoc	0.2.6	linked
dotenvy	0.15.7	linked
downcast	0.11.0	unrelated
either	1.16.0	linked
encoding_rs	0.8.35	unknown
equivalent	1.0.2	linked
errno	0.3.14	linked
etcetera	0.8.0	platform_gated
event-listener	5.4.1	linked
fastrand	2.4.1	buildtime_only
find-msvc-tools	0.1.9	linked
fixedbitset	0.5.7	buildtime_only
flume	0.11.1	feature_gated
fnv	1.0.7	linked
foldhash	0.1.5	linked
foreign-types	0.3.2	unrelated
foreign-types-shared	0.1.1	unrelated
form_urlencoded	1.2.2	linked
fragile	2.1.0	unrelated
funty	2.0.0	feature_gated
futures-channel	0.3.32	linked
futures-core	0.3.32	linked
futures-executor	0.3.32	feature_gated
futures-io	0.3.32	linked
futures-sink	0.3.32	linked
futures-task	0.3.32	linked
futures-util	0.3.32	linked
generic-array	0.14.7	linked
getrandom	0.2.17	linked
getrandom	0.3.4	unrelated
getrandom	0.4.3	linked
h2	0.4.15	linked
hashbrown	0.12.3	unknown
hashbrown	0.15.5	linked
hashbrown	0.17.1	linked
hashlink	0.10.0	linked
heck	0.5.0	linked
hex	0.4.3	linked
hkdf	0.12.4	linked
hmac	0.12.1	linked
home	0.5.12	linked
http	1.4.2	linked
http-body	1.0.1	linked
http-body-util	0.1.3	linked
httparse	1.10.1	linked
httpdate	1.0.3	linked
hyper	1.10.1	linked
hyper-rustls	0.27.9	unrelated
hyper-tls	0.6.0	unrelated
hyper-util	0.1.20	linked
iana-time-zone	0.1.65	linked
iana-time-zone-haiku	0.1.2	platform_gated
icu_collections	2.2.0	linked
icu_locale_core	2.2.0	linked
icu_normalizer	2.2.0	linked
icu_normalizer_data	2.2.0	linked
icu_properties	2.2.0	linked
icu_properties_data	2.2.0	linked
icu_provider	2.2.0	linked
idna	1.1.0	linked
idna_adapter	1.2.2	linked
if_chain	1.0.3	buildtime_only
indexmap	1.9.3	unknown
indexmap	2.14.0	linked
ipnet	2.12.0	linked
itertools	0.14.0	buildtime_only
itoa	1.0.18	linked
js-sys	0.3.103	platform_gated
jsonwebtoken	9.3.1	linked
lazy_static	1.5.0	linked
ld-linux-x86-64.so.2		linked
libc	0.2.186	linked
libc.so.6		linked
libcrypto.so.3		linked
libgcc_s.so.1		linked
libm	0.2.16	platform_gated
libm.so.6		linked
libmvec.so.1		linked
libredox	0.1.18	platform_gated
libsqlite3-sys	0.30.1	feature_gated
libssl.so.3		linked
linux-raw-sys	0.12.1	buildtime_only
litemap	0.8.2	linked
lock_api	0.4.14	linked
log	0.4.33	linked
lru-slab	0.1.2	unrelated
matchit	0.7.3	linked
md-5	0.10.6	linked
memchr	2.8.2	linked
mime	0.3.17	linked
mio	1.2.1	linked
mockall	0.12.1	unrelated
mockall_derive	0.12.1	unrelated
multimap	0.10.1	buildtime_only
native-tls	0.2.18	unrelated
num-bigint	0.4.7	linked
num-bigint-dig	0.8.6	feature_gated
num-conv	0.2.2	linked
num-integer	0.1.46	linked
num-iter	0.1.45	feature_gated
num-traits	0.2.19	linked
once_cell	1.21.4	linked
openssl	0.10.81	unrelated
openssl-macros	0.1.1	unrelated
openssl-probe	0.2.1	unrelated
openssl-sys	0.9.117	unrelated
parking	2.2.1	linked
parking_lot	0.12.5	linked
parking_lot_core	0.9.12	linked
password-hash	0.5.0	linked
pem	3.0.6	linked
pem-rfc7468	0.7.0	feature_gated
percent-encoding	2.3.2	linked
pest	2.8.6	unknown
pest_derive	2.8.6	buildtime_only
pest_generator	2.8.6	buildtime_only
pest_meta	2.8.6	buildtime_only
petgraph	0.7.1	buildtime_only
pin-project	1.1.13	unknown
pin-project-internal	1.1.13	buildtime_only
pin-project-lite	0.2.17	linked
pkcs1	0.7.5	feature_gated
pkcs8	0.10.2	feature_gated
pkg-config	0.3.33	buildtime_only
plain	0.2.3	platform_gated
potential_utf	0.1.5	linked
powerfmt	0.2.0	linked
ppv-lite86	0.2.21	linked
predicates	3.1.4	unrelated
predicates-core	1.0.10	unrelated
predicates-tree	1.0.13	unrelated
pretty_assertions	1.4.1	unrelated
prettyplease	0.2.37	buildtime_only
proc-macro-crate	3.5.0	buildtime_only
proc-macro-error	1.0.4	buildtime_only
proc-macro-error-attr	1.0.4	buildtime_only
proc-macro2	1.0.106	linked
prost-build	0.13.5	buildtime_only
prost-derive	0.13.5	buildtime_only
ptr_meta	0.1.4	feature_gated
ptr_meta_derive	0.1.4	buildtime_only
quinn	0.11.11	unrelated
quinn-proto	0.11.15	unrelated
quinn-udp	0.5.14	unrelated
quote	1.0.46	linked
r-efi	5.3.0	unrelated
radium	0.7.0	feature_gated
rand	0.8.6	linked
rand	0.9.4	unrelated
rand_chacha	0.3.1	linked
rand_chacha	0.9.0	unrelated
rand_core	0.6.4	linked
rand_core	0.9.5	unrelated
regex	1.12.4	linked
regex-automata	0.4.14	linked
regex-syntax	0.8.11	linked
rend	0.4.2	feature_gated
reqwest	0.12.28	unrelated
ring	0.17.14	linked
rkyv	0.7.46	feature_gated
rkyv_derive	0.7.46	buildtime_only
rsa	0.9.10	feature_gated
rust_decimal direct	1.42.1	linked
rustc-hash	2.1.3	unrelated
rustix	1.1.4	buildtime_only
rustls	0.23.41	linked
rustls-pki-types	1.15.0	linked
rustls-webpki	0.103.13	linked
rustversion	1.0.22	linked
ryu	1.0.23	linked
schannel	0.1.29	unrelated
scopeguard	1.2.0	linked
seahash	4.1.0	feature_gated
security-framework	3.7.0	unrelated
security-framework-sys	2.17.0	unrelated
serde direct	1.0.228	linked
serde_core	1.0.228	linked
serde_derive	1.0.228	linked
serde_json direct	1.0.150	linked
serde_path_to_error	0.1.20	linked
serde_spanned	0.6.9	linked
serde_urlencoded	0.7.1	linked
serde_yaml direct	0.9.34+deprecated	linked
sha1	0.10.6	feature_gated
sha2	0.10.9	linked
shlex	2.0.1	linked
signal-hook-registry	1.4.8	linked
signature	2.2.0	feature_gated
simdutf8	0.1.5	feature_gated
simple_asn1	0.6.4	linked
slab	0.4.12	linked
smallvec	1.15.2	linked
socket2	0.6.4	linked
spin	0.9.8	platform_gated
spki	0.7.3	feature_gated
sqlx direct	0.8.6	linked
sqlx-core	0.8.6	linked
sqlx-macros	0.8.6	linked
sqlx-macros-core	0.8.6	linked
sqlx-mysql	0.8.6	feature_gated
sqlx-postgres	0.8.6	linked
sqlx-sqlite	0.8.6	feature_gated
stable_deref_trait	1.2.1	linked
stringprep	0.1.5	linked
subtle	2.6.1	linked
syn	1.0.109	buildtime_only
syn	2.0.118	linked
sync_wrapper	1.0.2	linked
synstructure	0.13.2	linked
system-configuration	0.7.0	platform_gated
system-configuration-sys	0.6.0	platform_gated
tap	1.0.1	feature_gated
tempfile	3.27.0	buildtime_only
termtree	0.5.1	unrelated
thiserror direct	1.0.69	linked
thiserror	2.0.18	linked
thiserror-impl	1.0.69	linked
thiserror-impl	2.0.18	linked
time	0.3.53	linked
time-core	0.1.9	linked
time-macros	0.2.31	linked
tiny-keccak	2.0.2	buildtime_only
tinystr	0.8.3	linked
tinyvec	1.11.0	linked
tinyvec_macros	0.1.1	linked
tokio direct	1.52.3	linked
tokio-macros	2.7.0	linked
tokio-native-tls	0.3.1	unrelated
tokio-rustls	0.26.4	unrelated
tokio-test	0.4.5	unrelated
tokio-util	0.7.18	linked
toml	0.8.23	linked
toml_datetime	0.6.11	linked
toml_datetime	1.1.1+spec-1.1.0	buildtime_only
toml_edit	0.22.27	linked
toml_edit	0.25.12+spec-1.1.0	buildtime_only
toml_parser	1.1.2+spec-1.1.0	buildtime_only
toml_write	0.1.2	linked
tonic-build direct	0.12.3	buildtime_only
tower direct	0.4.13	unknown
tower	0.5.3	linked
tower-http	0.6.11	unrelated
tower-layer	0.3.3	linked
tower-service	0.3.3	linked
tracing direct	0.1.44	linked
tracing-attributes	0.1.31	linked
tracing-core	0.1.36	linked
try-lock	0.2.5	linked
typenum	1.20.1	linked
ucd-trie	0.1.7	unknown
unicode-bidi	0.3.18	linked
unicode-ident	1.0.24	linked
unicode-normalization	0.1.25	linked
unicode-properties	0.1.4	linked
unsafe-libyaml	0.2.11	linked
untrusted	0.9.0	linked
url	2.5.8	linked
utf8_iter	1.0.4	linked
utoipa-gen	5.5.0	buildtime_only
uuid direct	1.23.4	linked
validator_derive	0.16.0	buildtime_only
validator_types	0.16.0	buildtime_only
valuable	0.1.1	feature_gated
vcpkg	0.2.15	buildtime_only
version_check	0.9.5	buildtime_only
want	0.3.1	linked
wasi	0.11.1+wasi-snapshot-preview1	platform_gated
wasip2	1.0.4+wasi-0.2.12	unrelated
wasite	0.1.0	platform_gated
wasm-bindgen	0.2.126	platform_gated
wasm-bindgen-futures	0.4.76	unrelated
wasm-bindgen-macro	0.2.126	buildtime_only
wasm-bindgen-macro-support	0.2.126	buildtime_only
wasm-bindgen-shared	0.2.126	platform_gated
web-sys	0.3.103	unrelated
web-time	1.1.0	platform_gated
webpki-roots	0.26.11	linked
webpki-roots	1.0.8	linked
whoami	1.6.1	linked
windows-core	0.62.2	platform_gated
windows-implement	0.60.2	buildtime_only
windows-interface	0.59.3	buildtime_only
windows-link	0.2.1	platform_gated
windows-registry	0.6.1	platform_gated
windows-result	0.4.1	platform_gated
windows-strings	0.5.1	platform_gated
windows-sys	0.60.2	unrelated
windows-targets	0.53.5	unrelated
windows_aarch64_gnullvm	0.53.1	unrelated
windows_aarch64_msvc	0.53.1	unrelated
windows_i686_gnu	0.53.1	unrelated
windows_i686_gnullvm	0.53.1	unrelated
windows_i686_msvc	0.53.1	unrelated
windows_x86_64_gnu	0.53.1	unrelated
windows_x86_64_gnullvm	0.53.1	unrelated
windows_x86_64_msvc	0.53.1	unrelated
winnow	0.7.15	linked
winnow	1.0.3	buildtime_only
wit-bindgen	0.57.1	unrelated
writeable	0.6.3	linked
wyz	0.5.1	feature_gated
yansi	1.0.1	unrelated
yoke	0.8.3	linked
yoke-derive	0.8.2	linked
zerocopy	0.8.52	linked
zerocopy-derive	0.8.52	buildtime_only
zerofrom	0.1.8	linked
zerofrom-derive	0.1.7	linked
zeroize	1.9.0	linked
zeroize_derive	1.5.0	linked
zerotrie	0.2.4	linked
zerovec	0.11.6	linked
zerovec-derive	0.11.3	linked
zmij	1.0.21	linked
ahash	0.7.8	unverified
ahash	0.8.12	dead
arraydeque	0.5.1	dead
async-stream	0.3.6	dead
base64	0.21.7	dead
concurrent-queue	2.5.0	dead
config direct	0.14.1	dead
const-random	0.1.18	dead
convert_case	0.6.0	dead
core-foundation	0.9.4	unverified
dlv-list	0.5.2	dead
email_address	0.2.9	dead
futures-intrusive	0.5.0	dead
hashbrown	0.14.5	dead
hashlink	0.8.4	dead
hyper-timeout	0.5.2	dead
idna	0.4.0	dead
json5	0.4.1	dead
matchers	0.2.0	dead
minimal-lexical	0.2.1	dead
nom	7.1.3	dead
nu-ansi-term	0.50.3	dead
ordered-multimap	0.7.3	dead
pathdiff	0.2.3	dead
prost direct	0.13.5	dead
prost-types direct	0.13.5	dead
r-efi	6.0.0	unverified
redox_syscall	0.5.18	unverified
redox_syscall	0.9.0	unverified
ron	0.8.1	dead
rust-ini	0.20.0	dead
sharded-slab	0.1.7	dead
socket2	0.5.10	dead
thread_local	1.1.9	dead
tokio-stream	0.1.18	dead
tonic direct	0.12.3	dead
tower-http direct	0.5.2	dead
tracing-log	0.2.0	dead
tracing-subscriber direct	0.3.23	dead
unicode-segmentation	1.13.3	dead
utoipa direct	5.5.0	dead
validator direct	0.16.1	dead
windows-sys	0.48.0	unverified
windows-sys	0.52.0	unverified
windows-sys	0.59.0	unverified
windows-sys	0.61.2	unverified
windows-targets	0.48.5	unverified
windows-targets	0.52.6	unverified
windows_aarch64_gnullvm	0.48.5	unverified
windows_aarch64_gnullvm	0.52.6	unverified
windows_aarch64_msvc	0.48.5	unverified
windows_aarch64_msvc	0.52.6	unverified
windows_i686_gnu	0.48.5	unverified
windows_i686_gnu	0.52.6	unverified
windows_i686_gnullvm	0.52.6	unverified
windows_i686_msvc	0.48.5	unverified
windows_i686_msvc	0.52.6	unverified
windows_x86_64_gnu	0.48.5	unverified
windows_x86_64_gnu	0.52.6	unverified
windows_x86_64_gnullvm	0.48.5	unverified
windows_x86_64_gnullvm	0.52.6	unverified
windows_x86_64_msvc	0.48.5	unverified
windows_x86_64_msvc	0.52.6	unverified
yaml-rust2	0.8.1	dead

1 of 1 jobs captured: build-test success · Generated 2026-10-06 · tarp 0.1.0+20261006141426-gae10636542ce · run 9baa5200-bc8c-4bc9-b426-ab09edec1e82