Skip to content
Open-Source Registry

cargo / browser39

browser39 2.0.0

bitbison: flagged, behavior clean, dependencies flagged, posture not checked, pipeline clean, 1 of 1 jobs captured 17 vulnerabilities
processes
672
operations
106K
packages
384
compiler runs
728
connections
3
job time
8m 03s
capture
1.5 MB
records
192K
bytes / record
7.7

Headless web browser for AI agents

Build behaviourfetched outside crates.iocompiled C/C++

360 downloads · source · home page · cargo aibrowserheadlessmarkdownmcp

Artifact

binary · retained · product · graph v2
2
ChecksDetections
Build behavior
✓ Network activity—
✓ Sensitive data access and transfer—
✓ Cross-process access—
✓ Build file changes—
✓ Build script activity—
✓ Data flow analysis—
✓ Filesystem writes—
✓ Context collection—
Supply chain
▲ Known vulnerabilities—
▲ Build-time dependency advisories—
▲ Dependency advisories—
✓ Declared and observed dependencies—
✓ Dependency and toolchain versions—
Pipeline
✓ Pipeline coverage—

Detections

0

No detections

No abnormal activity detected across 106K flows.

Network

2 fetches
  • github.com
    build code of v8 · python3.14 · 1 file
    accepted
  • release-assets.githubusercontent.com
    build code of v8 · python3.14 · 1 file
    accepted
cargo fetched 35,270 files from static.crates.io
Vulnerable dependencies17PackageVersionFixSeverityTitleReach
RUSTSEC-2026-0258h20.4.13>=0.4.16highh2 unbounded empty DATA framesretained
RUSTSEC-2026-0194quick-xml0.37.5>=0.41.0highQuadratic run time when checking a start tag for duplicate attribute namesretained
RUSTSEC-2026-0195quick-xml0.37.5>=0.41.0highUnbounded namespace-declaration allocation in `NsReader` enables memory-exhaustion denial of serviceretained
CVE-2026-63127rmcp1.8.0>=2.0.0highRMCP: Missing Resource Field Validation in OAuth Protected Resource Metadata Discoveryretained
CVE-2026-63128rmcp1.8.0>=2.0.0highRMCP: Unauthenticated permanent session-table leak in rmcp Streamable HTTP server transport leads to remote denial-of-serviceretained
CVE-2026-93599rustls-webpki0.103.10>=0.103.13highrustls-webpki: Denial of service via panic on malformed CRL BIT STRINGretained
CVE-2026-64684rmcp1.8.0>=2.1.0mediumRMCP: Custom HTTP headers leak to cross-origin redirect targetsretained
GHSA-c9xm-49cp-xcr9rmcp1.8.0>=2.0.0mediumrmcp OAuth client fetches server-controlled resource_metadata URLsretained
GHSA-2mjx-qc3c-rqvcrustls0.23.37>=0.23.45mediumRustls: TLS 1.3 handshake messages incorrectly accepted across encryption level boundariesretained
RUSTSEC-2025-0056adler1.0.2none publishedlowadler crate is unmaintained, use adler2 insteadretained
RUSTSEC-2026-0190anyhow1.0.102>=1.0.103lowUnsoundness in `Error::downcast_mut()`retained
RUSTSEC-2025-0141bincode1.3.3none publishedlowBincode is unmaintainedretained
RUSTSEC-2024-0384instant0.1.13none publishedlow`instant` is unmaintainedretained
RUSTSEC-2024-0436paste1.0.15none publishedlowpaste - no longer maintainedretained
GHSA-cq8v-f236-94qcrand0.8.5, 0.9.2, 0.10.0>=0.8.6lowRand is unsound with a custom logger using rand::rng()retained
CVE-2026-93600rustls-webpki0.103.10>=0.103.12lowwebpki: Name constraints for URI names were incorrectly acceptedretained
CVE-2026-93601rustls-webpki0.103.10>=0.103.12lowwebpki: Name constraints were accepted for certificates asserting a wildcard nameretained

Raw data

capture
1.5 MB
records
191,799
bytes per record
7.7

Loading a sample of the capture

Want to see more? E-mail us at hello@bitbison.io about your use case.

Dependencies

403 packages, 38 with a build script that ran, 13 doing more than compiling
PackageVersionUsageBuild behaviour
ring0.17.14linkedbuild scriptprebuilt objects
v8134.5.0linkedbuild scriptnetwork github.com, release-assets.githubusercontent.com
winapi-i686-pc-windows-gnu0.4.0platform_gatedbuild script, not runprebuilt objects
winapi-x86_64-pc-windows-gnu0.4.0platform_gatedbuild script, not runprebuilt objects
windows_aarch64_gnullvm0.52.6platform_gatedbuild script, not runprebuilt objects
windows_aarch64_msvc0.52.6platform_gatedbuild script, not runprebuilt objects
windows_i686_gnu0.52.6platform_gatedbuild script, not runprebuilt objects
windows_i686_gnullvm0.52.6platform_gatedbuild script, not runprebuilt objects
windows_i686_msvc0.52.6platform_gatedbuild script, not runprebuilt objects
windows_x86_64_gnu0.52.6platform_gatedbuild script, not runprebuilt objects
windows_x86_64_gnullvm0.52.6platform_gatedbuild script, not runprebuilt objects
windows_x86_64_msvc0.52.6platform_gatedbuild script, not runprebuilt objects
wit-bindgen0.51.0platform_gatedbuild script, not runprebuilt objects
anyhow direct1.0.102linkedbuild script
async-trait0.1.89linkedproc macro
bindgen0.70.1linkedbuild script
clang-sys1.8.1linkedbuild script
clap_derive4.6.0linkedproc macro
cookie direct0.18.1linkedbuild script
crc32fast1.5.0linkedbuild script
cssparser-macros0.6.1linkedproc macro
darling_macro0.23.0linkedproc macro
deno_error_macro0.5.7linkedproc macro
deno_ops0.216.0linkedproc macro
derive_more-impl2.1.1linkedproc macro
displaydoc0.2.5linkedproc macro
document-features0.2.12linkedproc macro
futures-macro0.3.32linkedproc macro
generic-array0.14.7linkedbuild script
getrandom0.3.4linkedbuild script
getrandom0.4.2linkedbuild script
httparse1.10.1linkedbuild script
iana-time-zone-haiku0.1.2platform_gatedbuild script, not run
icu_normalizer_data2.2.0linkedbuild script
icu_properties_data2.2.0linkedbuild script
ld-linux-x86-64.so.2linkedsystem library
libc0.2.184linkedbuild script
libc.so.6linkedsystem library
libgcc_s.so.1linkedsystem library
libm.so.6linkedsystem library
libmvec.so.1linkedsystem library
memoffset0.9.1linkedbuild script
num-traits0.2.19linkedbuild script
parking_lot_core0.9.12linkedbuild script
paste1.0.15linkedbuild scriptproc macro
pastey0.2.1linkedproc macro
phf_macros0.13.1linkedproc macro
pin-project-internal1.1.11linkedproc macro
prettyplease0.2.37linkedbuild script
proc-macro-rules-macros0.4.0linkedproc macro
proc-macro21.0.106linkedbuild script
quinn0.11.9feature_gatedbuild script, not run
quinn-udp0.5.14feature_gatedbuild script, not run
quote1.0.45linkedbuild script
radium0.7.0linkedbuild script
ref-cast1.0.25linkedbuild script
ref-cast-impl1.0.25linkedproc macro
rmcp direct1.8.0linkedbuild script
rmcp-macros1.8.0linkedproc macro
rustix0.38.44linkedbuild script
rustix1.1.4linkedbuild script
rustls0.23.37linkedbuild script
rustversion1.0.22linkedbuild scriptproc macro
schemars_derive1.2.1linkedproc macro
selectors0.36.1linkedbuild script
serde direct1.0.228linkedbuild script
serde_core1.0.228linkedbuild script
serde_derive1.0.228linkedproc macro
serde_json direct1.0.149linkedbuild script
signal-hook0.3.18linkedbuild script
strum_macros0.25.3linkedproc macro
sys_traits_macros0.1.0linkedproc macro
thiserror direct2.0.18linkedbuild script
thiserror-impl2.0.18linkedproc macro
time-macros0.2.27linkedproc macro
tokio-macros2.7.0linkedproc macro
tracing-attributes0.1.31linkedproc macro
typenum1.19.0linkedbuild script
wasm-bindgen0.2.117platform_gatedbuild script, not run
wasm-bindgen-macro0.2.117buildtime_onlyproc macro
wasm-bindgen-shared0.2.117platform_gatedbuild script, not run
web_atoms0.2.3linkedbuild script
winapi0.3.9platform_gatedbuild script, not run
windows-implement0.60.2buildtime_onlyproc macro
windows-interface0.59.3buildtime_onlyproc macro
wit-bindgen-rust0.51.0buildtime_onlybuild script, not run
wit-bindgen-rust-macro0.51.0buildtime_onlybuild script, not runproc macro
yoke-derive0.8.2linkedproc macro
zerocopy0.8.48linkedbuild script
zerocopy-derive0.8.48buildtime_onlyproc macro
zerofrom-derive0.1.7linkedproc macro
zerovec-derive0.11.3linkedproc macro
zmij1.0.21linkedbuild script
adler1.0.2linked
aead0.5.2linked
aes0.8.4linked
aes-gcm direct0.10.3linked
aho-corasick1.1.4linked
android_system_properties0.1.5platform_gated
anstream1.0.0linked
anstyle1.0.14linked
anstyle-parse1.0.0linked
anstyle-query1.1.5linked
anstyle-wincon3.0.11platform_gated
atomic-waker1.1.2linked
autocfg1.5.0buildtime_only
az1.3.0linked
base64 direct0.22.1linked
base64-simd0.7.0linked
bincode1.3.3linked
bit-set0.5.3linked
bit-vec0.6.3linked
bitflags1.3.2linked
bitflags2.11.0linked
bitvec1.0.1linked
bumpalo3.20.2buildtime_only
bytes direct1.11.1linked
capacity_builder0.1.3linked
cc1.2.59linked
cexpr0.6.0linked
cfg-if1.0.4linked
cfg_aliases0.2.1buildtime_only
chrono0.4.44linked
cipher0.4.4linked
clap direct4.6.0linked
clap_builder4.6.0linked
clap_lex1.1.0linked
clipboard-win direct5.4.1platform_gated
colorchoice1.0.5linked
convert_case0.10.0linked
cooked-waker5.0.0linked
cookie_store direct0.22.1linked
core-foundation0.10.1platform_gated
core-foundation-sys0.8.7platform_gated
cpufeatures0.2.17linked
crossterm direct0.29.0linked
crossterm_winapi0.9.1platform_gated
crypto-common0.1.7linked
cssparser0.36.0linked
ctr0.9.2linked
darling0.23.0linked
darling_core0.23.0linked
data-encoding2.10.0linked
debugid0.8.0linked
deno_core direct0.340.0linked
deno_core_icudata0.74.0linked
deno_error direct0.5.7linked
deno_path_util0.3.3linked
deno_unsync0.4.4linked
deranged0.5.8linked
derive_more2.1.1linked
dirs direct6.0.0linked
dirs-sys0.5.0linked
dtoa1.0.11linked
dtoa-short0.3.5linked
dyn-clone1.0.20linked
ego-tree direct0.11.0linked
either1.15.0linked
encoding_rs direct0.8.35linked
equivalent1.0.2linked
errno0.3.14linked
error-code3.4.0platform_gated
fastrand2.4.1linked
filetime0.2.27linked
find-msvc-tools0.1.9linked
fnv1.0.7linked
foldhash0.1.5buildtime_only
form_urlencoded direct1.2.2linked
fsevent-sys4.1.0platform_gated
fslock0.2.1linked
funty2.0.0linked
futures0.3.32linked
futures-channel0.3.32linked
futures-core0.3.32linked
futures-executor0.3.32linked
futures-io0.3.32linked
futures-sink0.3.32linked
futures-task0.3.32linked
futures-util0.3.32linked
getrandom0.2.17linked
ghash0.5.1linked
glob0.3.3linked
gzip-header1.0.0linked
h20.4.13linked
hashbrown0.15.5buildtime_only
hashbrown0.16.1linked
heck0.4.1linked
heck0.5.0linked
home0.5.12linked
html5ever direct0.39.0linked
http1.4.0linked
http-body1.0.1linked
http-body-util direct0.1.3linked
httpdate1.0.3linked
hyper direct1.9.0linked
hyper-rustls0.27.7linked
hyper-util direct0.1.20linked
iana-time-zone0.1.65platform_gated
icu_collections2.2.0linked
icu_locale_core2.2.0linked
icu_normalizer2.2.0linked
icu_properties2.2.0linked
icu_provider2.2.0linked
id-arena2.3.0buildtime_only
ident_case1.0.1linked
idna1.1.0linked
idna_adapter1.2.1linked
if_chain1.0.3linked
indexmap2.13.1linked
inotify0.10.2linked
inotify-sys0.1.5linked
inout0.1.4linked
instant0.1.13linked
ipnet2.12.0linked
iri-string0.7.12linked
is_terminal_polyfill1.70.2linked
itertools0.13.0linked
itoa1.0.18linked
js-sys0.3.94platform_gated
kqueue1.1.1platform_gated
kqueue-sys1.0.4platform_gated
leb128fmt0.1.0buildtime_only
libloading0.8.9linked
libredox0.1.15platform_gated
linux-raw-sys0.12.1linked
linux-raw-sys0.4.15linked
litemap0.8.2linked
litrs1.0.0linked
lock_api0.4.14linked
log0.4.29linked
lru-slab0.1.2feature_gated
markup5ever0.39.0linked
memchr2.8.0linked
minimal-lexical0.2.1buildtime_only
miniz_oxide0.7.4linked
mio1.2.0linked
new_debug_unreachable1.0.6linked
nom7.1.3linked
notify direct7.0.0linked
notify-types1.0.1linked
num-bigint0.4.6linked
num-conv0.2.1linked
num-integer0.1.46linked
once_cell1.21.4linked
once_cell_polyfill1.70.2platform_gated
opaque-debug0.3.1linked
openssl-probe0.2.1linked
option-ext0.2.0linked
outref0.1.0linked
parking_lot0.12.5linked
percent-encoding2.3.2linked
phf0.13.1linked
phf_codegen0.13.1linked
phf_generator0.13.1linked
phf_shared0.13.1linked
pin-project1.1.11linked
pin-project-lite0.2.17linked
plain0.2.3platform_gated
polyval0.6.2linked
potential_utf0.1.5linked
powerfmt0.2.0linked
ppv-lite860.2.21linked
precomputed-hash0.1.1linked
proc-macro-rules0.4.0linked
psl-types2.0.11linked
publicsuffix2.3.0linked
quick-xml direct0.37.5linked
quinn-proto0.11.14feature_gated
rand0.8.5linked
rand direct0.9.2linked
rand_chacha0.9.0linked
rand_core0.10.0linked
rand_core0.6.4linked
rand_core0.9.5linked
redox_users0.5.2platform_gated
regex direct1.12.3linked
regex-automata0.4.14linked
regex-syntax0.8.10linked
reqwest direct0.12.28linked
rustc-hash1.1.0linked
rustc-hash2.1.2linked
rustc_version0.2.3buildtime_only
rustc_version0.4.1buildtime_only
rustls-native-certs0.8.3linked
rustls-pki-types1.14.0linked
rustls-webpki0.103.10linked
ryu1.0.23linked
same-file1.0.6linked
schannel0.1.29platform_gated
schemars direct1.2.1linked
scopeguard1.2.0linked
scraper direct0.26.0linked
security-framework3.7.0platform_gated
security-framework-sys2.17.0platform_gated
semver0.9.0buildtime_only
semver1.0.28buildtime_only
semver-parser0.7.0buildtime_only
serde_derive_internals0.29.1linked
serde_spanned0.6.9linked
serde_urlencoded0.7.1linked
serde_v8 direct0.249.0linked
servo_arc0.4.3linked
shlex1.3.0linked
signal-hook-mio0.2.5linked
signal-hook-registry1.4.8linked
simd-abstraction0.7.1linked
siphasher1.0.2linked
slab0.4.12linked
smallvec1.15.1linked
socket20.6.3linked
sourcemap8.0.1linked
sse-stream0.2.1linked
stable_deref_trait1.2.1linked
static_assertions1.1.0linked
string_cache0.9.0linked
string_cache_codegen0.6.1linked
stringcase0.3.0linked
strsim0.11.1linked
strum0.25.0linked
subtle2.6.1linked
syn2.0.117linked
sync_wrapper1.0.2linked
synstructure0.13.2linked
sys_traits0.1.27linked
tap1.0.1linked
tempfile3.27.0linked_undeclared
tendril0.5.0linked
time direct0.3.47linked
time-core0.1.8linked
tinystr0.8.3linked
tinyvec1.11.0feature_gated
tinyvec_macros0.1.1feature_gated
tokio direct1.51.0linked
tokio-rustls0.26.4linked
tokio-stream0.1.18linked
tokio-util direct0.7.18linked
toml direct0.8.23linked
toml_datetime0.6.11linked
toml_edit0.22.27linked
toml_write0.1.2linked
tower0.5.3linked
tower-http0.6.8linked
tower-layer0.3.3linked
tower-service direct0.3.3linked
tracing0.1.44linked
tracing-core0.1.36linked
try-lock0.2.5linked
unicode-id-start1.4.0linked
unicode-ident1.0.24linked
unicode-segmentation1.13.3linked
unicode-width direct0.2.2linked
unicode-xid0.2.6buildtime_only
universal-hash0.5.1linked
untrusted0.9.0linked
url direct2.5.8linked
utf-80.7.6linked
utf8_iter1.0.4linked
utf8parse0.2.2linked
uuid1.23.0linked
version_check0.9.5buildtime_only
walkdir2.5.0linked
want0.3.1linked
wasi0.11.1+wasi-snapshot-preview1platform_gated
wasip21.0.2+wasi-0.2.9platform_gated
wasip30.4.0+wasi-0.3.0-rc-2026-01-06platform_gated
wasm-bindgen-futures0.4.67platform_gated
wasm-bindgen-macro-support0.2.117buildtime_only
wasm-encoder0.244.0buildtime_only
wasm-metadata0.244.0buildtime_only
wasm_dep_analyzer0.2.0linked
wasmparser0.244.0buildtime_only
web-sys0.3.94platform_gated
web-time1.1.0platform_gated
which6.0.3linked
winapi-util0.1.11platform_gated
windows-core0.62.2platform_gated
windows-link0.2.1platform_gated
windows-result0.4.1platform_gated
windows-strings0.5.1platform_gated
windows-sys0.59.0feature_gated
windows-targets0.52.6platform_gated
winnow0.7.15linked
winsafe0.0.19buildtime_only
wit-bindgen-core0.51.0buildtime_only
wit-component0.244.0buildtime_only
wit-parser0.244.0buildtime_only
writeable0.6.3linked
wyz0.5.1linked
yoke0.8.2linked
zerofrom0.1.7linked
zeroize1.8.2linked
zerotrie0.2.4linked
zerovec0.11.6linked
chacha200.10.0dead
cpufeatures0.3.0dead
getopts0.2.24dead
r-efi5.3.0unverified
r-efi6.0.0unverified
rand0.10.0dead
redox_syscall0.5.18unverified
redox_syscall0.7.3unverified
windows-sys0.52.0unverified
windows-sys0.61.2unverified

1 of 1 jobs captured: build-test success · Generated 2026-10-12 · run cea49022-ffa6-45dd-bdf4-33220b3adfa8

analysis 0.1.0 · 2026-10-11 · d6246d3 · graph v2