Skip to content
Open-Source Registry

cargo / car-whisper

car-whisper 0.56.1

processes
489
operations
43K
packages
176
compiler runs
137
connections
1
job time
2m 01s
capture
471 KB
records
75K
bytes / record
6.3

In-process whisper.cpp speech-to-text (model resolve/download + transcription) for Common Agent Runtime — a leaf crate shared by car-voice and car-inference

bitbison: flagged, behavior flagged, dependencies clean, posture notes, pipeline clean, 1 of 1 jobs captured
1 detection1 note

1,250 downloads · Apache-2.0 · source · cargo

Release 0.56.1 run 78c64d7c-6b4b-455a-8c02-7a8cb82732b5 · built 2026-10-07

Artifact

file · retained · product
1
ChecksDetections
Build behavior
✓ Network activity—
✓ Sensitive data access and transfer—
✓ Cross-process access—
✓ Build file changes—
▲ Build script activity—
✓ Data flow analysis—
✓ Filesystem writes—
✓ Context collection—
Supply chain
✓ Known vulnerabilities—
✓ Build-time dependency advisories—
✓ Dependency advisories—
✓ Declared and observed dependencies—
✓ Dependency and toolchain versions—
Build hardening
▲ Binary hardening—
Pipeline
✓ Pipeline coverage—

Detections

2
  • Build script looked up repository state
    whisper-rs-sys 0.13.1
    The script read 2 workspace files outside its crate and allowed build directories (2 under .git/).
    low
  • Build is missing recommended hardening flags
    whisper.cpp · posture
    stack-protector: missing from all 16 eligible compile commands; add -fstack-protector-strong
    low

Detection

low

Build script looked up repository state

subject whisper-rs-sys 0.13.1

The script read 2 workspace files outside its crate and allowed build directories (2 under .git/).

read: /home/runner/work/car/car/.git/objects/11/06436526b04ed25b99798d824bdd5a65a1022f

read: /home/runner/work/car/car/.git/objects/b7/d28b25893589f3b97a1817b00ed7f230002715

witnessed · car · rule buildscript

Detection

lowposture

Build is missing recommended hardening flags

subject /home/runner/work/car/car/target/release/build/whisper-rs-sys-d3e533a5e7b7c185/out/whisper.cpp

stack-protector: missing from all 16 eligible compile commands; add -fstack-protector-strong

fortify: missing from all 16 eligible compile commands; add -D_FORTIFY_SOURCE=2 (needs -O1+)

stack-clash-protection: missing from all 16 eligible compile commands; add -fstack-clash-protection

  1. rustup2436
  2. cargo2436
  3. build_script_build-a3414d395875248f3964at 20:34:59

inferred · target/release/build/whisper-rs-sys-d3e533a5e7b7c185/out/whisper.cpp · rule hardening

Network

1 peers
  • static.crates.io:8080
    cargo (car) via crates.io · build-test
    allowed

Raw data

40 of 45,322 events
capture
471 KB
records
74,807
bytes per record
6.3
TimeOpUserPIDCommandTarget
20:34:28.217 read_write runner 2424 cargo net 10.0.2.15 › index.crates.io:8080
20:34:29.345 create runner 2419 cargo src
20:34:29.345 create runner 2419 cargo command_helpers.rs
20:34:29.345 create runner 2419 cargo detect_compiler_family.c
20:34:29.345 create runner 2419 cargo flags.rs
20:34:29.345 create runner 2419 cargo lib.rs
20:34:49.897 fork runner 3475 build_script_build-f5c983cc22644f1b build_script_build-f5c983cc22644f1b
20:34:49.899 fork runner 3476 x86_64-linux-gnu-gcc-15 x86_64-linux-gnu-gcc-15
20:34:49.909 fork runner 3477 x86_64-linux-gnu-gcc-15 x86_64-linux-gnu-gcc-15
20:34:49.913 fork runner 3478 build_script_build-f5c983cc22644f1b build_script_build-f5c983cc22644f1b
20:34:49.915 fork runner 3479 x86_64-linux-gnu-gcc-15 x86_64-linux-gnu-gcc-15
20:34:50.511 delete runner 3523 x86_64-linux-gnu-gcc-15 ccoHtPDk.s
20:34:50.511 delete runner 3510 rustc lib.rmeta-link
20:34:50.528 delete runner 3527 x86_64-linux-gnu-gcc-15 ccUprJmE.s
20:34:50.559 delete runner 3534 x86_64-linux-gnu-gcc-15 ccucNb1P.s
20:34:50.622 delete runner 3537 x86_64-linux-gnu-gcc-15 ccymw2Kc.s
20:34:51.957 execute runner 3603 x86_64-linux-gnu-gcc-15 x86_64-linux-gnu-gcc-15
20:34:51.959 execute runner 3604 cc1 cc1
20:34:52.056 execute runner 3608 x86_64-linux-gnu-as x86_64-linux-gnu-as
20:34:52.066 execute runner 3609 x86_64-linux-gnu-ar x86_64-linux-gnu-ar
20:34:52.094 execute runner 3610 x86_64-linux-gnu-ar x86_64-linux-gnu-ar
20:34:53.707 rename runner 3618 rustc libicu_normalizer-a3e64e095bc23853.rlib
20:34:54.223 rename runner 3614 rustc libring-b6dc66a9cf032ae9.rmeta
20:34:54.568 rename runner 3588 rustc libfutures_util-66cd25583ad0114c.rmeta
20:34:54.843 rename runner 3588 rustc libfutures_util-66cd25583ad0114c.rlib
20:34:55.124 rename runner 3651 rustc libnum_integer-05f31158d63d90e9.rmeta
20:34:58.810 read runner 3867 rustc libgcc_s.so.1
20:34:58.810 read runner 3867 rustc libm.so.6
20:34:58.810 read runner 3867 rustc libz.so.1.3.1
20:34:58.810 read runner 3860 rustc libfutures_channel-5ea1d88c6a0ff737.rmeta
20:34:58.826 read runner 3872 rustc build.rs
20:34:59.989 write runner 3964 build_script_build-a3414d395875248f pipe
20:35:00.007 write runner 3942 rustc pipe
20:35:00.022 copy runner 3964 build_script_build-a3414d395875248f mma.cuh
20:35:00.022 copy runner 3964 build_script_build-a3414d395875248f mmvq.cuh
20:35:00.022 copy runner 3964 build_script_build-a3414d395875248f unary.cu
20:35:00.022 copy runner 3964 build_script_build-a3414d395875248f sum.cuh
20:35:00.022 copy runner 3964 build_script_build-a3414d395875248f fattn-tile-f16.cu
20:35:00.070 write runner 3968 rustc pipe
20:35:00.528 write runner 3929 rustc pipe

Want to see more? E-mail us at hello@bitbison.io about your use case.

1 of 1 jobs captured: build-test success · Generated 2026-10-07 · tarp 0.1.0+20261007022833-g16cc1581f632 · run 78c64d7c-6b4b-455a-8c02-7a8cb82732b5