Skip to content
Open-Source Registry

cargo / cargo-dylint

cargo-dylint 6.1.1

bitbison: flagged, behavior flagged, dependencies flagged, posture not checked, pipeline clean, 1 of 1 jobs captured 2 detections1 vulnerability
processes
985
operations
477K
packages
191
compiler runs
1,437
connections
4
job time
5m 56s
capture
5.4 MB
records
809K
bytes / record
6.7

A tool for running Rust lints from dynamic libraries

Build behaviourundeclared fetchfetched outside crates.iocompiled C/C++

629,127 downloads · source · crates.io

Artifact

binary · retained · product · graph v2
1

Checks

12 of 14 clear Network activity Dependency advisories
Build behavior▲✓✓✓✓✓✓✓
Supply chain✓✓▲✓✓
Pipeline✓

Detections

2
  • Dependency fetcher connected to an undeclared host
    api.github.com:443 › api.github.com:443, crates.io
    high
  • Dependency fetcher connected to an undeclared host
    github.com:443 › github.com:443, crates.io
    high

Detection

highwitnessed

Dependency fetcher connected to an undeclared host

Unexpected network connection

Subject
api.github.com:443
Destination
api.github.com:443, crates.io
Jobs
build-test
Rule
egress

Evidence

  1. Connection outside the process’s allowed destinationscause

    opened by cargo

    subject api.github.com:443

    by /home/runner/.rustup/toolchains/stable-x86_64-unknown-linux-gnu/bin/cargo fetch --manifest-path /tmp/.tmpxUIHz0/Cargo.toml

  2. Allowed hostssupport

    Allowed dependency hosts: crates.io

Processes

build-test

cargo›cargo›integration-0073a02187e29271›cargo-dylint›cargo

Ran
/home/runner/.rustup/toolchains/stable-x86_64-unknown-linux-gnu/bin/cargo fetch --manifest-path /tmp/.tmpxUIHz0/Cargo.toml
Invoked by
cargo test --release --locked --no-fail-fast
Lineage · 5 processes
  1. cargocargo test --release --locked --no-fail-fast6893
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast6893
  3. integration-0073a02187e29271/home/runner/work/dylint/dylint/target/release/deps/integration-0073a02187e292718188
  4. cargo-dylint/home/runner/work/dylint/dylint/target/release/cargo-dylint dylint --all7725
  5. cargo/home/runner/.rustup/toolchains/stable-x86_64-unknown-linux-gnu/bin/cargo fetch --manifest-path /tmp/.tmpxUIHz0/Cargo.toml8283

Remediation

Check the registry, mirror, proxy, and redirects. Declare the source if it is expected; otherwise remove the request.

Detection

highwitnessed

Dependency fetcher connected to an undeclared host

Unexpected network connection

Subject
github.com:443
Destination
github.com:443, crates.io
Jobs
build-test
Rule
egress

Evidence

  1. Connection outside the process’s allowed destinationscause

    opened by cargo

    subject github.com:443

    by /home/runner/.rustup/toolchains/stable-x86_64-unknown-linux-gnu/bin/cargo fetch --manifest-path /tmp/.tmpExQUyY/Cargo.toml

  2. Allowed hostssupport

    Allowed dependency hosts: crates.io

Processes

build-test

cargo›cargo›integration-0073a02187e29271›cargo-dylint›cargo

Ran
/home/runner/.rustup/toolchains/stable-x86_64-unknown-linux-gnu/bin/cargo fetch --manifest-path /tmp/.tmpExQUyY/Cargo.toml
Invoked by
cargo test --release --locked --no-fail-fast
Lineage · 5 processes
  1. cargocargo test --release --locked --no-fail-fast6893
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast6893
  3. integration-0073a02187e29271/home/runner/work/dylint/dylint/target/release/deps/integration-0073a02187e292718188
  4. cargo-dylint/home/runner/work/dylint/dylint/target/release/cargo-dylint dylint --all7725
  5. cargo/home/runner/.rustup/toolchains/stable-x86_64-unknown-linux-gnu/bin/cargo fetch --manifest-path /tmp/.tmpExQUyY/Cargo.toml8109

Remediation

Check the registry, mirror, proxy, and redirects. Declare the source if it is expected; otherwise remove the request.

Network

4 peers
  • api.github.com:443 the package manager · cargo · GitHub, Inc. · 484 files undeclared
  • github.com:443 the package manager · cargo · GitHub, Inc. · 215 files undeclared
  • static.crates.io:8080 the package manager · cargo (dylint) via crates.io · 9,304 files · went into an output ecosystem
  • static.rust-lang.org:443 the toolchain installer · rustup via Package registries profile (rustup → asn:54113) · Fastly, Inc. · 170 files · went into an output ecosystem
Dependencies194Build behaviour
aho-corasick1.1.5
anstream1.0.0
anstyle1.0.14
anstyle-parse1.0.0
anstyle-query1.1.5
anyhow1.0.104build script
bincode1.3.3
bit-set0.8.0
bit-vec0.8.0
bitflags2.13.2
block-buffer0.12.1
bstr1.13.1
camino1.2.6build script
cargo-platform0.3.3
cargo-util0.2.32
cargo-util-schemas0.14.3
cargo_metadata0.23.1
cc1.7.0
cfg-if1.0.5
chrono0.4.45
clap4.6.7
clap_builder4.6.7
clap_derive4.6.7proc macro
clap_lex1.1.1
colorchoice1.0.5
const-oid0.10.2
cpufeatures0.3.1
crc32fast1.5.2build script
crossbeam-deque0.8.8build script
crossbeam-epoch0.9.21build script
crossbeam-utils0.8.23build script
crypto-common0.2.2
ctor1.0.13
digest0.11.3
displaydoc0.2.7proc macro
dunce1.0.5
dylint6.1.1build script
dylint_internal6.1.1build script
env_filter2.0.0
env_logger0.11.11
equivalent1.0.2
erased-serde0.4.10build script
fancy-regex0.16.2
fastrand2.5.0
filetime0.2.29
find-msvc-tools0.1.14
flate21.1.10
fnv1.0.7
form_urlencoded1.2.2
fs_extra1.3.0
getrandom0.4.3build script
git20.21.0
glob0.3.4
globset0.4.20
hashbrown0.17.1
heck0.5.0
hex0.4.3
home0.5.12
hybrid-array0.4.15
icu_collections2.3.0
icu_locale_core2.3.0
icu_normalizer2.3.0
icu_normalizer_data2.3.0build script
icu_properties2.3.0
icu_properties_data2.3.0build script
icu_provider2.3.1
idna1.1.0
idna_adapter1.2.2
ignore0.4.33
indexmap2.14.2
is_terminal_polyfill1.70.2
itoa1.0.18
jiff0.2.38
jiff-core0.1.1
jobserver0.1.35
ld-linux-x86-64.so.2system library
libc0.2.190build script
libc.so.6system library
libgcc_s.so.1system library
libgit2-sys0.18.8+1.9.7build script
libm.so.6system library
libmvec.so.1system library
libz-sys1.1.29build script
linktime-proc-macro0.2.3proc macro
linux-raw-sys0.12.1
litemap0.8.3
log0.4.34
memchr2.8.3
miniz_oxide0.9.1
num-traits0.2.19build script
once_cell1.21.4
ordered-float2.10.1
percent-encoding2.3.2
pin-project-lite0.2.17
pkg-config0.3.34
portable-atomic1.15.0build script
potential_utf0.1.6
proc-macro21.0.107build script
quote1.0.47build script
regex1.13.1
regex-automata0.4.18
regex-syntax0.8.11
rewriter2.1.0
rustc-stable-hash0.1.2
rustix1.1.5build script
same-file1.0.6
semver1.0.28
serde1.0.229build script
serde-untagged0.1.9
serde-value0.7.0
serde_core1.0.229build script
serde_derive1.0.229proc macro
serde_json1.0.152build script
serde_spanned1.1.2
sha20.11.0
shell-escape0.1.5
shlex2.0.1
simd-adler320.3.10
smallvec1.16.3
stable_deref_trait1.2.1
strsim0.11.1
syn3.0.7
synstructure0.14.0
syntect5.3.0
tar0.4.46
tempfile3.27.0
terminal_size0.4.4
thiserror2.0.21build script
thiserror-impl2.0.21proc macro
tinystr0.8.4
toml1.1.8+spec-1.1.0
toml_datetime1.1.2+spec-1.1.0
toml_edit0.25.17+spec-1.1.0
toml_parser1.1.5+spec-1.1.0
toml_writer1.1.3+spec-1.1.0
tracing0.1.44
tracing-core0.1.36
typeid1.0.3build script
typenum1.20.1
unicode-ident1.0.26
url2.5.8
utf8_iter1.0.4
utf8parse0.2.2
walkdir2.5.0
winnow1.0.4
writeable0.6.4
xattr1.6.1
yoke0.8.3
yoke-derive0.8.4proc macro
zerofrom0.1.8
zerofrom-derive0.1.8proc macro
zerotrie0.2.5
zerovec0.11.8
zerovec-derive0.11.6proc macro
zmij1.0.23build script
adler22.0.1
dylint
link-section0.19.3
anstyle-wincon3.0.11
assert_cmd2.2.2build script
autocfg1.5.1
bitflags1.3.2
console0.16.6
core-foundation0.10.1
core-foundation-sys0.8.7
defmt1.1.1build script, not run
defmt-macros1.1.1build script, not runproc macro
defmt-parser1.0.0
difflib0.4.0
encode_unicode1.0.0
errno0.3.14
float-cmp0.10.0
jiff-static0.2.38proc macro
miow0.6.1
normalize-line-endings0.3.0
once_cell_polyfill1.70.2
portable-atomic-util0.2.8build script, not run
predicates3.1.4
predicates-core1.0.10
predicates-tree1.0.13
r-efi6.0.0
similar3.2.0
similar-asserts2.0.0
snapbox1.2.2
snapbox-macros1.1.0
syn2.0.119
termtree0.5.1
unicode-segmentation1.13.3
vcpkg0.2.15prebuilt objects
wait-timeout0.2.1
winapi-util0.1.11
windows-link0.2.1
windows-sys0.61.2
zlib-rs0.6.8
Vulnerabilities1PackageVersionFixSeverityTitleReach
RUSTSEC-2025-0141bincode1.3.3none publishedlowBincode is unmaintainedretained

Raw data

capture
5.4 MB
records
809,388
bytes per record
6.7

Loading a sample of the capture

Want to see more? E-mail us at hello@bitbison.io about your use case.

1 of 1 jobs captured: build-test success · Generated 2026-10-11 · run 00ad15fd-cd39-414a-9963-c0d8eb5eab64

analysis 0.1.0 · 2026-10-10 · ce2b8d5 · graph v2