cargo / candor-scan
candor-scan 0.40.4
- processes
- 439
- operations
- 15K
- packages
- 39
- compiler runs
- 36
- connections
- 1
- job time
- 3m 17s
- capture
- 206 KB
- records
- 30K
- bytes / record
- 6.8
candor's STABLE-Rust effect scanner — syntactic call-graph + effect report, no nightly.
Build behaviourcompiled and nothing more
Release 0.40.4 run 0aa50188-2e0c-4dbf-bd9e-ff991c8b4dd9 · built 2026-10-10
Artifact
- candor-scanbinary · retained · product 1
- libcandor_scan.rlibfile · retained · product
| Checks | Detections |
|---|---|
| Build behavior | |
| ✓ Network activity | — |
| ✓ Sensitive data access and transfer | — |
| ✓ Cross-process access | — |
| ✓ Build file changes | — |
| ✓ Build script activity | — |
| ✓ Data flow analysis | — |
| ✓ Filesystem writes | — |
| ✓ Context collection | — |
| Supply chain | |
| ▲ Known vulnerabilities | — |
| ✓ Build-time dependency advisories | — |
| ✓ Dependency advisories | — |
| ✓ Declared and observed dependencies | — |
| ✓ Dependency and toolchain versions | — |
| Pipeline | |
| ✓ Pipeline coverage | — |
Detections
0No detections
No abnormal activity detected across 15K flows.
Network
0 peerscargo fetched 1,507 files from static.crates.io
| Vulnerable dependencies1 | Package | Version | Fix | Severity | Title | Reach |
|---|---|---|---|---|---|---|
| RUSTSEC-2026-0204 | crossbeam-epoch | 0.9.18 | >=0.9.20 | high | Invalid pointer dereference in `fmt::Pointer` impl for `Atomic` and `Shared` when the underlying pointer is invalid | retained |
Dependencies
42 packages, 8 with a build script that ran, 0 doing more than compiling| Package | Version | Usage | Build behaviour | |
|---|---|---|---|---|
| crossbeam-utils | 0.8.21 | linked | build script | |
| ld-linux-x86-64.so.2 | linked | system library | ||
| libc.so.6 | linked | system library | ||
| libgcc_s.so.1 | linked | system library | ||
| libm.so.6 | linked | system library | ||
| libmvec.so.1 | linked | system library | ||
| proc-macro2 direct | 1.0.106 | linked | build script | |
| quote | 1.0.45 | linked | build script | |
| rayon-core | 1.13.0 | linked | build script | |
| serde direct | 1.0.228 | linked | build script | |
| serde_core | 1.0.228 | linked | build script | |
| serde_derive | 1.0.228 | linked | proc macro | |
| serde_json direct | 1.0.150 | linked | build script | |
| zmij | 1.0.21 | linked | build script | |
| candor-classify direct | 0.40.4 | linked | ||
| candor-report direct | 0.40.4 | linked | ||
| crossbeam-deque | 0.8.6 | linked | ||
| crossbeam-epoch | 0.9.18 | linked | ||
| depg | 0.2.0 | orphan | ||
| depw | 1.0.0 | orphan | ||
| depx | 0.1.0 | orphan | ||
| either | 1.16.0 | linked | ||
| equivalent | 1.0.2 | feature_gated | ||
| glob direct | 0.3.4 | linked | ||
| hashbrown | 0.17.1 | feature_gated | ||
| indexmap | 2.14.0 | feature_gated | ||
| itoa | 1.0.18 | linked | ||
| memchr | 2.8.1 | linked | ||
| rayon direct | 1.12.0 | linked | ||
| same-file | 1.0.6 | linked | ||
| serde_spanned | 1.1.1 | linked | ||
| syn direct | 2.0.117 | linked | ||
| toml direct | 1.1.2+spec-1.1.0 | linked | ||
| toml_datetime | 1.1.1+spec-1.1.0 | linked | ||
| toml_parser | 1.1.2+spec-1.1.0 | linked | ||
| toml_writer | 1.1.1+spec-1.1.0 | linked | ||
| unicode-ident | 1.0.24 | linked | ||
| walkdir direct | 2.5.0 | linked | ||
| winapi-util | 0.1.11 | platform_gated | ||
| windows-link | 0.2.1 | platform_gated | ||
| windows-sys | 0.61.2 | platform_gated | ||
| winnow | 1.0.3 | linked |
1 of 1 jobs captured: build-test success · Generated 2026-10-10 · tarp 0.1.0+20261009214341-g814b5de79005 · run 0aa50188-2e0c-4dbf-bd9e-ff991c8b4dd9