Skip to content
Open-Source Registry

cargo / cartog-rag / 0.34.2

cartog-rag 0.34.2

bitbison: flagged, behavior flagged, dependencies notes, posture not checked, pipeline clean, 1 of 1 jobs captured RiskinfoVulnsnone
processes
306
operations
55K
packages
265
compiler runs
151
connections
4
job time
2m 31s
capture
697 KB
records
99K
bytes / record
7.0

Build behaviourfetch went into the outputfetched outside crates.iocompiled C/C++

run 54595762-be8b-41c4-969d-5a910306655d · built 2026-10-19 · complete View on crates.io

Graph

file · retained · product · graph v2
2

Checks

12 of 14 clear Sensitive data access and transfer Build-time dependency advisories
Build behavior✓▲✓✓✓✓✓✓
Supply chain✓▲✓✓✓
Pipeline✓

Detections

1
  • Code this build ran used live credentials
    cartog_rag-6ffcebefb25a3bc9 › huggingface.co:443, us.aws.cdn.hf.co:443
    info

Detection

infowitnessed

Code this build ran used live credentials

Credentials used by code the build ran

Subject
cartog_rag-6ffcebefb25a3bc9
Destination
huggingface.co:443, us.aws.cdn.hf.co:443
Jobs
build-test
Rule
credential-use

Evidence

  1. Connected after reading a credential storecause

    cartog_rag-6ffcebefb25a3bc9 connected to huggingface.co:443 after reading /home/runner/.cache/huggingface/token

    source /home/runner/.cache/huggingface/tokentarget huggingface.co:443

    by /home/runner/work/cartog/cartog/target/release/deps/cartog_rag-6ffcebefb25a3bc9

  2. Connected after reading a credential storecause

    cartog_rag-6ffcebefb25a3bc9 connected to us.aws.cdn.hf.co:443 after reading /home/runner/.cache/huggingface/token

    source /home/runner/.cache/huggingface/tokentarget us.aws.cdn.hf.co:443

    by /home/runner/work/cartog/cartog/target/release/deps/cartog_rag-6ffcebefb25a3bc9

What came before it

Loading the graph

Processes

build-test

cargo›cargo›cartog_rag-6ffcebefb25a3bc9

Ran
/home/runner/work/cartog/cartog/target/release/deps/cartog_rag-6ffcebefb25a3bc9
Invoked by
cargo test --release --locked --no-fail-fast
Lineage · 3 processes
  1. cargocargo test --release --locked --no-fail-fast5820
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast5820
  3. cartog_rag-6ffcebefb25a3bc9/home/runner/work/cartog/cartog/target/release/deps/cartog_rag-6ffcebefb25a3bc95888

Remediation

A program this build made read a credential store and connected to the service it is for. Tests that need the runner's credentials make real calls with them; run them on a runner whose credentials are scoped to that, or record the use as accepted once it is reviewed.

Network

4 peers
  • huggingface.co:443 cartog-rag's own build code · cartog_rag-6ffcebefb25a3bc9 · Amazon.com, Inc. unjudged
  • us.aws.cdn.hf.co:443 cartog-rag's own build code · cartog_rag-6ffcebefb25a3bc9 · Amazon.com, Inc. unjudged
  • cdn.pyke.io:443 build code of ort-sys · build-script-main via accepted download (policy ccde352b-ab68-44a3-9448-3767958fbfdd: pkg:cargo/ort-sys, a prebuilt ONNX Runtime from cdn.pyke.io) · Cloudflare, Inc. · 1 file · went into an output accepted
  • static.crates.io:8080 the package manager · cargo (cartog) via crates.io · 18,395 files · went into an output ecosystem
Dependencies275Build behaviour
adler22.0.1
ahash0.8.12build script
aho-corasick1.1.5
allocator-api20.2.21
anyhow1.0.104build script
atomic-waker1.1.2
autocfg1.5.1
base640.13.1
base640.22.1
base640.23.1
bitflags2.13.2
bumpalo3.20.3
byteorder1.5.0
bytes1.12.1
cartog-core0.34.2
cartog-db0.34.2
castaway0.2.4
cc1.8.0
cfg-if1.0.5
cfg_aliases0.2.2
chacha200.10.2
compact_str0.9.1
console0.16.6
cookie0.18.2build script, not run
cookie_store0.22.1
cpufeatures0.3.1
crc32fast1.5.2build script
crossbeam-deque0.8.8build script
crossbeam-epoch0.9.21build script
crossbeam-utils0.8.23build script
darling0.20.11
darling_core0.20.11
darling_macro0.20.11proc macro
dary_heap0.3.9
deranged0.5.9
derive_builder0.20.2
derive_builder_core0.20.2
derive_builder_macro0.20.2proc macro
dirs6.0.0
dirs-sys0.5.0
displaydoc0.2.7proc macro
document-features0.2.12proc macro
dyn-clone1.0.20
either1.19.0
encode_unicode1.0.0
equivalent1.0.3
errno0.3.14
esaxx-rs0.1.10build script
fallible-iterator0.3.0
fallible-streaming-iterator0.1.9
fastembed5.17.4
fastrand2.5.0
find-msvc-tools0.1.14
flate21.1.10
fnv1.0.7
foldhash0.2.0
form_urlencoded1.2.2
futures-channel0.3.34
futures-core0.3.34
futures-io0.3.34
futures-macro0.3.34proc macro
futures-sink0.3.34
futures-task0.3.34
futures-util0.3.34
getrandom0.2.17
getrandom0.3.4build script
getrandom0.4.3build script
hashbrown0.16.1
hashbrown0.17.1
hashlink0.12.2
hf-hub0.5.0
hmac-sha2561.1.15
http1.5.0
http-body1.1.0
http-body-util0.1.5
httparse1.10.1build script
hyper1.12.0
hyper-rustls0.27.10
hyper-util0.1.21
icu_collections2.3.0
icu_locale_core2.3.0
icu_normalizer2.3.0
icu_normalizer_data2.3.0build script, not run
icu_properties2.3.0
icu_properties_data2.3.0build script, not run
icu_provider2.3.1
ident_case1.0.1
idna1.1.0
idna_adapter1.2.2
indexmap2.14.2
indicatif0.18.6
ipnet2.12.2
itertools0.14.0
itoa1.0.18
js-sys0.3.106
ld-linux-x86-64.so.2system library
libc0.2.191build script
libc.so.6system library
libgcc_s.so.1system library
libm.so.6system library
libmvec.so.1system library
libredox0.1.25
libsqlite3-sys0.38.2build script
linux-raw-sys0.12.1
litemap0.8.3
litrs1.0.1
log0.4.34
lru-slab0.1.3
lzma-rust20.15.8
macro_rules_attribute0.2.3
macro_rules_attribute-proc_macro0.2.3proc macro
matrixmultiply0.3.11build script
memchr2.8.3
minimal-lexical0.2.1
miniz_oxide0.9.1
mio1.2.4
monostate0.1.18
monostate-impl0.1.18proc macro
ndarray0.17.2
nom7.1.3
num-complex0.4.6
num-conv0.2.2
num-integer0.1.47
num-traits0.2.19build script
once_cell1.21.4
onig6.5.3
onig_sys69.9.3build script
option-ext0.2.0
ort2.0.0-rc.13
ort-sys2.0.0-rc.13build scriptnetworkcdn.pyke.io
paste1.0.15build scriptproc macro
pastey0.2.3proc macro
percent-encoding2.3.2
pin-project-lite0.2.17
pkg-config0.3.34
portable-atomic1.15.0build script
portable-atomic-util0.2.8build script, not run
potential_utf0.1.6
powerfmt0.2.1
ppv-lite860.2.21
proc-macro21.0.107build script
quinn0.11.12build script, not run
quinn-proto0.11.19
quinn-udp0.5.16build script, not run
quote1.0.47build script
r-efi5.3.0
r-efi6.0.0
rand0.10.3
rand0.9.5
rand_chacha0.9.0
rand_core0.10.1
rand_core0.9.5
rand_pcg0.10.2
rawpointer0.2.1
rayon1.12.0
rayon-cond0.4.0
rayon-core1.13.0build script
redox_users0.5.3
ref-cast1.0.27build script
ref-cast-impl1.0.27proc macro
regex1.13.1
regex-automata0.4.18
regex-syntax0.8.11
reqwest0.12.28
ring0.17.14build scriptprebuilt objects
rsqlite-vfs0.1.1
rusqlite0.40.2
rustc-hash2.1.3
rustix1.1.5build script
rustls0.23.46build script
rustls-pki-types1.15.1
rustls-webpki0.103.15
rustversion1.0.23build scriptproc macro
ryu1.0.23
safetensors0.8.0
schemars1.2.3
schemars_derive1.2.3proc macro
serde1.0.229build script
serde_core1.0.229build script
serde_derive1.0.229proc macro
serde_derive_internals0.30.0
serde_json1.0.154build script
serde_urlencoded0.7.1
shlex2.0.1
simd-adler320.3.10
slab0.4.12
smallvec1.16.3
socket20.6.5
socks0.3.4
spm_precompiled0.1.4
sqlite-vec0.1.9build script
sqlite-wasm-rs0.5.5build script, not run
stable_deref_trait1.2.1
static_assertions1.1.0
strsim0.11.1
subtle2.6.1
syn2.0.119
syn3.0.9
sync_wrapper1.0.2
synstructure0.14.0
tempfile3.27.0
thiserror2.0.21build script
thiserror-impl2.0.21proc macro
time0.3.55
time-core0.1.9
time-macros0.2.32proc macro
tinystr0.8.4
tinyvec1.13.3
tokenizers0.22.2
tokio1.53.3
tokio-rustls0.26.6
tokio-util0.7.20
tower0.5.3
tower-http0.6.11
tower-layer0.3.3
tower-service0.3.3
tracing0.1.44
tracing-attributes0.1.31proc macro
tracing-core0.1.36
try-lock0.2.5
unicode-ident1.0.27
unicode-normalization-alignments0.1.12
unicode-segmentation1.13.3
unicode-width0.2.2
unicode_categories0.1.1
unit-prefix0.5.2
untrusted0.9.0
ureq3.4.2
ureq-proto0.6.5
url2.5.8
utf8-zero0.8.1
utf8_iter1.0.4
vcpkg0.2.15prebuilt objects
version_check0.9.5
want0.3.2
wasi0.11.1+wasi-snapshot-preview1
wasip21.0.4+wasi-0.2.12
wasm-bindgen0.2.129build script, not run
wasm-bindgen-futures0.4.79
wasm-bindgen-macro0.2.129proc macro
wasm-bindgen-macro-support0.2.129
wasm-bindgen-shared0.2.129build script, not run
wasm-streams0.4.2
web-sys0.3.106
web-time1.1.0
webpki-roots1.0.9
winapi0.3.9build script, not run
winapi-i686-pc-windows-gnu0.4.0build script, not runprebuilt objects
winapi-x86_64-pc-windows-gnu0.4.0build script, not runprebuilt objects
windows-link0.2.1
windows-sys0.52.0
windows-sys0.61.2
windows-targets0.52.6
windows_aarch64_gnullvm0.52.6build script, not runprebuilt objects
windows_aarch64_msvc0.52.6build script, not runprebuilt objects
windows_i686_gnu0.52.6build script, not runprebuilt objects
windows_i686_gnullvm0.52.6build script, not runprebuilt objects
windows_i686_msvc0.52.6build script, not runprebuilt objects
windows_x86_64_gnu0.52.6build script, not runprebuilt objects
windows_x86_64_gnullvm0.52.6build script, not runprebuilt objects
windows_x86_64_msvc0.52.6build script, not runprebuilt objects
wit-bindgen0.57.1build script, not runprebuilt objects
writeable0.6.4
yoke0.8.3
yoke-derive0.8.4proc macro
zerocopy0.8.63build script
zerocopy-derive0.8.63proc macro
zerofrom0.1.8
zerofrom-derive0.1.8proc macro
zeroize1.9.1
zerotrie0.2.5
zerovec0.11.8
zerovec-derive0.11.6proc macro
zlib-rs0.6.8
zmij1.0.23build script
Versions62RiskVulnsPublished
0.34.111d ago
0.34.0not analyzed2026-09-10
0.33.0not analyzed2026-08-28
0.32.2not analyzed2026-08-05
0.32.1not analyzed2026-07-26
0.32.0not analyzed2026-07-26
0.31.1not analyzed2026-07-22
0.31.0not analyzed2026-07-16
0.30.3not analyzed2026-07-06
0.30.2not analyzed2026-06-29
0.30.1not analyzed2026-06-26
0.30.0not analyzed2026-06-25
0.29.4not analyzed2026-06-19
0.29.3not analyzed2026-06-18
0.29.2not analyzed2026-06-17
0.29.1not analyzed2026-06-16
0.29.0not analyzed2026-06-15
0.28.0not analyzed2026-06-12
0.27.1not analyzed2026-06-11
0.27.0not analyzed2026-06-11
0.26.0not analyzed2026-06-07
0.25.1not analyzed2026-06-06
0.25.0not analyzed2026-06-05
0.24.0not analyzed2026-06-05
0.23.1not analyzed2026-06-04
0.23.0not analyzed2026-06-04
0.22.0not analyzed2026-06-04
0.21.2not analyzed2026-06-02
0.21.1not analyzed2026-06-01
0.21.0not analyzed2026-05-31
0.20.0not analyzed2026-05-30
0.19.0not analyzed2026-05-28
0.18.0not analyzed2026-05-27
0.17.2not analyzed2026-05-27
0.17.1not analyzed2026-05-20
0.17.0not analyzed2026-05-19
0.16.2not analyzed2026-05-19
0.16.1not analyzed2026-05-19
0.16.0not analyzed2026-05-19
0.15.1not analyzed2026-05-17
0.15.0not analyzed2026-05-17
0.14.5not analyzed2026-05-07
0.14.4not analyzed2026-05-07
0.14.3not analyzed2026-05-07
0.14.2not analyzed2026-05-06
0.14.1not analyzed2026-05-06
0.14.0not analyzed2026-05-06
0.13.2not analyzed2026-04-28
0.13.1not analyzed2026-04-21
0.13.0not analyzed2026-04-17
0.12.2not analyzed2026-04-15
0.12.1not analyzed2026-04-15
0.12.0not analyzed2026-04-13
0.11.3not analyzed2026-04-11
0.11.2not analyzed2026-04-11
0.11.1not analyzed2026-04-11
0.11.0not analyzed2026-04-11
0.10.1not analyzed2026-04-03
0.10.0not analyzed2026-04-02
0.9.4not analyzed2026-04-01
0.9.3not analyzed2026-04-01
0.34.2infonone

Raw data

capture
697 KB
records
99,363
bytes per record
7.0

Loading a sample of the capture

Want to see more? E-mail us at hello@bitbison.io about your use case.

1 of 1 jobs captured: build-test success · Generated 2026-10-19 · run 54595762-be8b-41c4-969d-5a910306655d

analysis 0.1.0 · 2026-10-17 · 0abbde9 · graph v2