Artifact
- cgxbinary · retained · product 2
- libcgx.rlibfile · retained · product
Checks
11 of 14 clear Known vulnerabilities Build-time dependency advisories +1 moreBuild behavior✓✓✓✓✓✓✓✓
Supply chain▲▲▲✓✓
Pipeline✓
Detections
0No detections
No abnormal activity detected across 386K flows.
Network
5 peers- api.github.com:443 unjudged
- github.com:443 unjudged
- release-assets.githubusercontent.com:443 unjudged
- static.crates.io:8080 ecosystem
- static.crates.io:8080 unjudged
| Dependencies583 | Build behaviour |
|---|---|
| aes0.8.4 | |
| aho-corasick1.1.4 | |
| allocator-api20.2.21 | |
| anstream1.0.0 | |
| anstyle1.0.14 | |
| anstyle-parse1.0.0 | |
| anstyle-query1.1.5 | |
| anyhow1.0.102 | |
| arc-swap1.9.1 | |
| arrayvec0.7.6 | |
| async-compression0.4.41 | |
| atomic-waker1.1.2 | |
| aws-lc-rs1.18.1 | |
| aws-lc-sys0.45.0 | |
| backon1.6.0 | |
| base640.22.1 | |
| base640.23.1 | |
| bitflags2.11.0 | |
| block-buffer0.10.4 | |
| block-buffer0.12.1 | |
| bstr1.12.1 | |
| build-context0.1.4 | |
| bumpalo3.20.2 | |
| bytes1.12.1 | |
| bytesize2.3.1 | |
| bzip20.6.1 | |
| camino1.2.2 | |
| cargo-platform0.2.0 | |
| cargo-util-schemas0.2.0 | |
| cargo_metadata0.20.0 | |
| cc1.2.57 | |
| cfg-if1.0.4 | |
| cgx-core0.1.1 | |
| chrono0.4.45 | |
| cipher0.4.4 | |
| clap4.6.7 | |
| clap_builder4.6.7 | |
| clap_derive4.6.7 | |
| clap_lex1.1.0 | |
| clru0.6.3 | |
| cmake0.1.57 | |
| colorchoice1.0.5 | |
| compression-codecs0.4.37 | |
| compression-core0.4.31 | |
| const-oid0.10.2 | |
| constant_time_eq0.3.1 | |
| cpufeatures0.2.17 | |
| cpufeatures0.3.0 | |
| crc3.3.0 | |
| crc-catalog2.4.0 | |
| crc32fast1.5.0 | |
| crossbeam-channel0.5.15 | |
| crossbeam-deque0.8.6 | |
| crossbeam-epoch0.9.20 | |
| crossbeam-utils0.8.21 | |
| crypto-common0.1.7 | |
| crypto-common0.2.2 | |
| curl0.4.50 | |
| curl-sys0.4.89+curl-8.20.0 | |
| darling0.20.11 | |
| darling_core0.20.11 | |
| darling_macro0.20.11 | |
| dashmap6.2.1 | |
| deflate640.1.10 | |
| deranged0.5.8 | |
| derive_builder0.20.2 | |
| derive_builder_core0.20.2 | |
| derive_builder_macro0.20.2 | |
| digest0.10.7 | |
| digest0.11.3 | |
| dirs6.0.0 | |
| dirs-sys0.5.0 | |
| displaydoc0.2.5 | |
| dunce1.0.5 | |
| either1.15.0 | |
| encoding_rs0.8.35 | |
| equivalent1.0.2 | |
| erased-serde0.4.10 | |
| errno0.3.14 | |
| etcetera0.10.0 | |
| faster-hex0.10.0 | |
| fastrand2.5.0 | |
| figment0.10.19 | |
| filetime0.2.29 | |
| find-msvc-tools0.1.9 | |
| flate21.1.10 | |
| fnv1.0.7 | |
| foldhash0.2.0 | |
| form_urlencoded1.2.2 | |
| fs_extra1.3.0 | |
| futures-channel0.3.32 | |
| futures-core0.3.32 | |
| futures-io0.3.32 | |
| futures-sink0.3.32 | |
| futures-task0.3.32 | |
| futures-util0.3.32 | |
| generic-array0.14.7 | |
| getrandom0.3.4 | |
| getrandom0.4.2 | |
| gix0.87.1 | |
| gix-actor0.42.0 | |
| gix-archive0.36.1 | |
| gix-attributes0.35.0 | |
| gix-bitmap0.4.0 | |
| gix-blame0.17.1 | |
| gix-chunk0.8.0 | |
| gix-command0.10.0 | |
| gix-commitgraph0.39.0 | |
| gix-config0.60.0 | |
| gix-config-value0.19.1 | |
| gix-credentials0.40.0 | |
| gix-date0.16.0 | |
| gix-diff0.67.1 | |
| gix-dir0.29.1 | |
| gix-discover0.55.0 | |
| gix-error0.3.1 | |
| gix-features0.49.1 | |
| gix-filter0.34.0 | |
| gix-fs0.22.1 | |
| gix-glob0.27.1 | |
| gix-hash0.26.2 | |
| gix-hashtable0.16.0 | |
| gix-ignore0.22.1 | |
| gix-imara-diff0.2.5 | |
| gix-index0.55.0 | |
| gix-lock24.0.0 | |
| gix-macros0.1.6 | |
| gix-mailmap0.34.1 | |
| gix-merge0.20.1 | |
| gix-negotiate0.35.1 | |
| gix-note0.1.1 | |
| gix-object0.64.1 | |
| gix-odb0.84.0 | |
| gix-pack0.74.2 | |
| gix-packetline0.22.2 | |
| gix-path0.12.5 | |
| gix-pathspec0.20.0 | |
| gix-prompt0.17.0 | |
| gix-protocol0.65.1 | |
| gix-quote0.8.0 | |
| gix-ref0.67.1 | |
| gix-refspec0.45.1 | |
| gix-revision0.49.1 | |
| gix-revwalk0.35.0 | |
| gix-sec0.14.2 | |
| gix-shallow0.13.0 | |
| gix-status0.34.1 | |
| gix-submodule0.34.0 | |
| gix-tempfile24.0.0 | |
| gix-trace0.1.21 | |
| gix-transport0.59.1 | |
| gix-traverse0.61.0 | |
| gix-url0.38.0 | |
| gix-utils0.3.6 | |
| gix-validate0.11.4 | |
| gix-worktree0.56.0 | |
| gix-worktree-state0.34.1 | |
| gix-worktree-stream0.36.1 | |
| gix-zlib0.1.0 | |
| globset0.4.18 | |
| h20.4.16 | |
| hashbrown0.14.5 | |
| hashbrown0.16.1 | |
| hashbrown0.17.1 | |
| heck0.5.0 | |
| hmac0.12.1 | |
| home0.5.11 | |
| http1.4.0 | |
| http-body1.0.1 | |
| http-body-util0.1.3 | |
| httparse1.10.1 | |
| human_format1.1.0 | |
| humantime2.4.0 | |
| humantime-serde1.1.1 | |
| hybrid-array0.4.14 | |
| hyper1.8.1 | |
| hyper-rustls0.27.7 | |
| hyper-util0.1.20 | |
| iana-time-zone0.1.65 | |
| icu_collections2.1.1 | |
| icu_locale_core2.1.1 | |
| icu_normalizer2.1.1 | |
| icu_normalizer_data2.1.1 | |
| icu_properties2.1.2 | |
| icu_properties_data2.1.2 | |
| icu_provider2.1.1 | |
| ident_case1.0.1 | |
| idna1.1.0 | |
| idna_adapter1.2.1 | |
| ignore0.4.26 | |
| indexmap2.13.0 | |
| Inflector0.11.4 | |
| inlinable_string0.1.15 | |
| inout0.1.4 | |
| io-close0.3.7 | |
| ipnet2.12.0 | |
| iri-string0.7.10 | |
| is_terminal_polyfill1.70.2 | |
| itoa1.0.17 | |
| jiff0.2.26 | |
| jobserver0.1.34 | |
| lazy_static1.5.0 | |
| ld-linux-x86-64.so.2 | |
| leon3.0.3 | |
| libbz2-rs-sys0.2.2 | |
| libc0.2.186 | |
| libc.so.6 | |
| libcrypto.so.3 | |
| libgcc_s.so.1 | |
| liblzma.so.5 | |
| libm.so.6 | |
| libmvec.so.1 | |
| libssl.so.3 | |
| libz-sys1.1.25 | |
| linux-raw-sys0.12.1 | |
| litemap0.8.1 | |
| lock_api0.4.14 | |
| log0.4.29 | |
| lzma-rust20.15.7 | |
| lzma-sys0.1.20 | |
| matchers0.2.0 | |
| memchr2.8.0 | |
| memmap20.9.11 | |
| miette7.6.0 | |
| miette-derive7.6.0 | |
| mime0.3.17 | |
| mio1.1.1 | |
| nonempty0.12.0 | |
| nu-ansi-term0.50.3 | |
| num-conv0.1.0 | |
| num-traits0.2.19 | |
| once_cell1.21.4 | |
| openssl-probe0.1.6 | |
| openssl-probe0.2.1 | |
| openssl-sys0.9.117 | |
| option-ext0.2.0 | |
| ordered-float2.10.1 | |
| parking_lot0.12.5 | |
| parking_lot_core0.9.12 | |
| pbkdf20.12.2 | |
| pear0.2.9 | |
| pear_codegen0.2.9 | |
| percent-encoding2.3.2 | |
| pin-project-lite0.2.17 | |
| pin-utils0.1.0 | |
| pkg-config0.3.32 | |
| potential_utf0.1.4 | |
| powerfmt0.2.0 | |
| ppmd-rust1.4.0 | |
| prettyplease0.2.37 | |
| proc-macro21.0.106 | |
| proc-macro2-diagnostics0.10.1 | |
| prodash31.0.0 | |
| quote1.0.45 | |
| rayon1.11.0 | |
| rayon-core1.13.0 | |
| regex1.12.3 | |
| regex-automata0.4.14 | |
| regex-syntax0.8.10 | |
| reqwest0.13.5 | |
| rustc-stable-hash0.1.2 | |
| rustix1.1.4 | |
| rustls0.23.45 | |
| rustls-native-certs0.8.3 | |
| rustls-pki-types1.14.0 | |
| rustls-platform-verifier0.6.2 | |
| rustls-webpki0.103.15 | |
| rustversion1.0.22 | |
| same-file1.0.6 | |
| schemafy_core0.6.0 | |
| schemafy_lib0.6.0 | |
| scopeguard1.2.0 | |
| semver1.0.28 | |
| serde1.0.229 | |
| serde-cyclonedx0.10.0 | |
| serde-untagged0.1.9 | |
| serde-value0.7.0 | |
| serde_core1.0.229 | |
| serde_derive1.0.229 | |
| serde_json1.0.151 | |
| serde_spanned0.6.9 | |
| serde_spanned1.1.1 | |
| sha10.10.6 | |
| sha1-checked0.10.0 | |
| sha20.10.9 | |
| sha20.11.0 | |
| sharded-slab0.1.7 | |
| shell-words1.1.1 | |
| shellexpand3.1.2 | |
| shlex1.3.0 | |
| signal-hook0.4.3 | |
| signal-hook-registry1.4.8 | |
| simd-adler320.3.8 | |
| slab0.4.12 | |
| smallvec1.15.1 | |
| smol_str0.3.2 | |
| snafu0.9.2 | |
| snafu-derive0.9.2 | |
| socket20.6.3 | |
| stable_deref_trait1.2.1 | |
| strsim0.11.1 | |
| strum0.28.0 | |
| strum_macros0.28.0 | |
| subtle2.6.1 | |
| syn1.0.109 | |
| syn2.0.117 | |
| syn3.0.3 | |
| sync_wrapper1.0.2 | |
| synstructure0.13.2 | |
| tame-index0.26.2 | |
| tar0.4.46 | |
| target-lexicon0.13.5 | |
| tempfile3.27.0 | |
| thiserror1.0.69 | |
| thiserror2.0.18 | |
| thiserror-impl1.0.69 | |
| thiserror-impl2.0.18 | |
| thread_local1.1.9 | |
| time0.3.45 | |
| time-core0.1.7 | |
| tinystr0.8.2 | |
| tinyvec1.10.0 | |
| tinyvec_macros0.1.1 | |
| tokio1.50.0 | |
| tokio-rustls0.26.4 | |
| tokio-util0.7.18 | |
| toml0.8.23 | |
| toml1.1.6+spec-1.1.0 | |
| toml-span0.7.1 | |
| toml_datetime0.6.11 | |
| toml_datetime1.1.1+spec-1.1.0 | |
| toml_edit0.22.27 | |
| toml_parser1.1.3+spec-1.1.0 | |
| toml_write0.1.2 | |
| toml_writer1.1.2+spec-1.1.0 | |
| tower0.5.3 | |
| tower-http0.6.8 | |
| tower-layer0.3.3 | |
| tower-service0.3.3 | |
| tracing0.1.44 | |
| tracing-attributes0.1.31 | |
| tracing-core0.1.36 | |
| tracing-log0.2.0 | |
| tracing-subscriber0.3.23 | |
| try-lock0.2.5 | |
| twox-hash2.1.2 | |
| typed-path0.12.3 | |
| typeid1.0.3 | |
| typenum1.20.0 | |
| uluru3.1.0 | |
| uncased0.9.10 | |
| unicase2.9.0 | |
| unicode-bom2.0.3 | |
| unicode-ident1.0.24 | |
| unicode-normalization0.1.25 | |
| unicode-width0.1.14 | |
| unicode-width0.2.2 | |
| unicode-xid0.2.6 | |
| untrusted0.9.0 | |
| uriparse0.6.4 | |
| url2.5.8 | |
| utf8_iter1.0.4 | |
| utf8parse0.2.2 | |
| uuid1.26.1 | |
| walkdir2.5.0 | |
| want0.3.1 | |
| which8.0.6 | |
| winnow0.7.15 | |
| winnow1.0.2 | |
| writeable0.6.2 | |
| xattr1.6.1 | |
| xz20.1.7 | |
| yansi1.0.1 | |
| yoke0.8.1 | |
| yoke-derive0.8.1 | |
| zerofrom0.1.6 | |
| zerofrom-derive0.1.6 | |
| zeroize1.8.2 | |
| zeroize_derive1.4.3 | |
| zerotrie0.2.3 | |
| zerovec0.11.5 | |
| zerovec-derive0.11.2 | |
| zip7.2.0 | |
| zlib-rs0.6.3 | |
| zmij1.0.21 | |
| zopfli0.8.3 | |
| zstd0.13.3 | |
| zstd-safe7.2.4 | |
| zstd-sys2.0.16+zstd.1.5.7 | |
| adler22.0.1 | |
| ahash0.8.12 | |
| bytemuck1.25.0 | |
| byteorder1.5.0 | |
| hash320.3.1 | |
| heapless0.8.0 | |
| miniz_oxide0.9.1 | |
| num_threads0.1.7 | |
| portable-atomic1.13.1 | |
| ppv-lite860.2.21 | |
| rand0.9.2 | |
| rand_chacha0.9.0 | |
| rand_core0.9.5 | |
| ring0.17.14 | |
| zerocopy0.8.42 | |
| android_system_properties0.1.5 | |
| anstyle-wincon3.0.11 | |
| assert_cmd2.2.2 | |
| assert_fs1.1.4 | |
| atomic0.6.1 | |
| autocfg1.5.0 | |
| block20.6.2 | |
| borsh1.6.0 | |
| cesu81.1.0 | |
| cfg_aliases0.2.1 | |
| combine4.6.7 | |
| core-foundation0.10.1 | |
| core-foundation0.9.4 | |
| core-foundation-sys0.8.7 | |
| ctrlc3.5.2 | |
| difflib0.4.0 | |
| dispatch20.3.1 | |
| faster-hex0.9.0 | |
| float-cmp0.10.0 | |
| foldhash0.1.5 | |
| getrandom0.2.17 | |
| gix0.71.0 | |
| gix-actor0.34.0 | |
| gix-attributes0.25.0 | |
| gix-bitmap0.2.16 | |
| gix-chunk0.4.12 | |
| gix-command0.5.0 | |
| gix-commitgraph0.27.0 | |
| gix-config0.44.0 | |
| gix-config-value0.14.12 | |
| gix-date0.9.4 | |
| gix-diff0.51.0 | |
| gix-dir0.13.0 | |
| gix-discover0.39.0 | |
| gix-features0.41.1 | |
| gix-features0.42.1 | |
| gix-filter0.18.0 | |
| gix-fs0.14.0 | |
| gix-fs0.15.0 | |
| gix-glob0.19.0 | |
| gix-hash0.17.0 | |
| gix-hash0.18.0 | |
| gix-hashtable0.8.1 | |
| gix-ignore0.14.0 | |
| gix-index0.39.0 | |
| gix-lock17.1.0 | |
| gix-object0.48.0 | |
| gix-odb0.68.0 | |
| gix-pack0.58.0 | |
| gix-packetline0.18.4 | |
| gix-packetline-blocking0.18.3 | |
| gix-path0.10.22 | |
| gix-pathspec0.10.0 | |
| gix-protocol0.49.0 | |
| gix-quote0.5.0 | |
| gix-ref0.51.0 | |
| gix-refspec0.29.0 | |
| gix-revision0.33.0 | |
| gix-revwalk0.19.0 | |
| gix-sec0.10.12 | |
| gix-shallow0.3.0 | |
| gix-status0.18.0 | |
| gix-submodule0.18.0 | |
| gix-tempfile17.1.0 | |
| gix-transport0.46.0 | |
| gix-traverse0.45.0 | |
| gix-url0.30.0 | |
| gix-utils0.2.0 | |
| gix-validate0.10.1 | |
| gix-validate0.9.4 | |
| gix-worktree0.40.0 | |
| globwalk0.9.1 | |
| hashbrown0.15.5 | |
| iana-time-zone-haiku0.1.2 | |
| id-arena2.3.0 | |
| imara-diff0.1.8 | |
| jiff-static0.2.26 | |
| jiff-tzdb0.1.6 | |
| jiff-tzdb-platform0.1.3 | |
| jni0.21.1 | |
| jni-sys0.3.0 | |
| js-sys0.3.91 | |
| kstring2.0.2 | |
| leb128fmt0.1.0 | |
| libredox0.1.14 | |
| linux-raw-sys0.4.15 | |
| lru-slab0.1.2 | |
| maybe-async0.2.10 | |
| nix0.31.2 | |
| normalize-line-endings0.3.0 | |
| objc20.6.4 | |
| objc2-encode4.1.0 | |
| once_cell_polyfill1.70.2 | |
| openssl-src300.6.0+3.6.2 | |
| portable-atomic-util0.2.6 | |
| predicates3.1.4 | |
| predicates-core1.0.10 | |
| predicates-tree1.0.13 | |
| prodash29.0.2 | |
| quinn0.11.9 | |
| quinn-proto0.11.14 | |
| quinn-udp0.5.14 | |
| r-efi5.3.0 | |
| r-efi6.0.0 | |
| redox_syscall0.5.18 | |
| redox_users0.5.2 | |
| rustc-hash2.1.1 | |
| rustix0.38.44 | |
| rustls-platform-verifier-android0.1.1 | |
| schannel0.1.29 | |
| security-framework3.7.0 | |
| security-framework-sys2.17.0 | |
| signal-hook0.3.18 | |
| static_assertions1.1.0 | |
| system-configuration0.7.0 | |
| system-configuration-sys0.6.0 | |
| termtree0.5.1 | |
| time-macros0.2.25 | |
| valuable0.1.1 | |
| vcpkg0.2.15 | |
| vergen9.0.6 | |
| vergen-gix1.0.9 | |
| vergen-lib0.1.6 | |
| version_check0.9.5 | |
| wait-timeout0.2.1 | |
| wasi0.11.1+wasi-snapshot-preview1 | |
| wasip21.0.1+wasi-0.2.4 | |
| wasip30.4.0+wasi-0.3.0-rc-2026-01-06 | |
| wasm-bindgen0.2.114 | |
| wasm-bindgen-futures0.4.64 | |
| wasm-bindgen-macro0.2.114 | |
| wasm-bindgen-macro-support0.2.114 | |
| wasm-bindgen-shared0.2.114 | |
| wasm-encoder0.244.0 | |
| wasm-metadata0.244.0 | |
| wasmparser0.244.0 | |
| web-sys0.3.91 | |
| web-time1.1.0 | |
| webpki-root-certs1.0.6 | |
| winapi0.3.9 | |
| winapi-i686-pc-windows-gnu0.4.0 | |
| winapi-util0.1.11 | |
| winapi-x86_64-pc-windows-gnu0.4.0 | |
| windows-core0.62.2 | |
| windows-implement0.60.2 | |
| windows-interface0.59.3 | |
| windows-link0.2.1 | |
| windows-registry0.6.1 | |
| windows-result0.4.1 | |
| windows-strings0.5.1 | |
| windows-sys0.45.0 | |
| windows-sys0.52.0 | |
| windows-sys0.59.0 | |
| windows-sys0.61.2 | |
| windows-targets0.42.2 | |
| windows-targets0.52.6 | |
| windows_aarch64_gnullvm0.42.2 | |
| windows_aarch64_gnullvm0.52.6 | |
| windows_aarch64_msvc0.42.2 | |
| windows_aarch64_msvc0.52.6 | |
| windows_i686_gnu0.42.2 | |
| windows_i686_gnu0.52.6 | |
| windows_i686_gnullvm0.52.6 | |
| windows_i686_msvc0.42.2 | |
| windows_i686_msvc0.52.6 | |
| windows_x86_64_gnu0.42.2 | |
| windows_x86_64_gnu0.52.6 | |
| windows_x86_64_gnullvm0.42.2 | |
| windows_x86_64_gnullvm0.52.6 | |
| windows_x86_64_msvc0.42.2 | |
| windows_x86_64_msvc0.52.6 | |
| wit-bindgen0.46.0 | |
| wit-bindgen0.51.0 | |
| wit-bindgen-core0.51.0 | |
| wit-bindgen-rust0.51.0 | |
| wit-bindgen-rust-macro0.51.0 | |
| wit-component0.244.0 | |
| wit-parser0.244.0 | |
| zerocopy-derive0.8.42 |
| Vulnerabilities2 | Package | Version | Fix | Severity | Title | Reach |
|---|---|---|---|---|---|---|
| CVE-2026-25727 | time | 0.3.45 | >=0.3.47 | medium | time vulnerable to stack exhaustion Denial of Service attack | retained |
| RUSTSEC-2026-0306 | faster-hex | 0.10.0, 0.9.0 | >=0.10.1 | low | `hex_decode_unchecked` AVX2 path reads past `src` | retained |
1 of 1 jobs captured: build-test success · Generated 2026-10-11 · run b134c4ca-c956-43c4-8619-025e743eb73d
analysis 0.1.0 · 2026-10-10 · ce2b8d5 · graph v2
