Skip to content
Open-Source Registry

cargo / chrondb

chrondb 0.2.3-dev.cb6a111

bitbison: flagged, behavior flagged, dependencies clean, posture not checked, pipeline clean, 1 of 1 jobs captured RiskmediumVulnsnone
processes
245
operations
29K
packages
111
compiler runs
69
connections
3
build time
36h 16m
job time
5m 53s
capture
374 KB
records
52K
bytes / record
7.2

Rust bindings for ChronDB - a time-traveling key/value database

Build behaviourits build script reached github.com, release-assets.githubusercontent.comundeclared fetchfetched outside crates.iocompiled C/C++

1,604 downloads · AGPL-3.0-only · source View on crates.io

Artifact

file · retained · product · graph v2
1

Checks

13 of 14 clear Network activity
Build behavior▲✓✓✓✓✓✓✓
Supply chain✓✓✓✓✓
Pipeline✓

Detections

1
  • Build script reached github.com +1
    chrondb 0.2.3-dev.cb6a111 › github.com:443, release-assets.githubusercontent.com:443
    medium

Detection

mediumwitnessed

Build script reached github.com +1

Unexpected network connection

Subject
chrondb 0.2.3-dev.cb6a111
Destination
github.com:443, release-assets.githubusercontent.com:443
Reaches
Jobs
build-test
Rule
egress

Evidence

  1. Connection outside the process’s allowed destinationscause

    connection to github.com:443, opened by build-script-build

    subject github.com:443

    by /home/runner/work/chrondb/chrondb/target/release/build/chrondb-99668d507b11a1f3/build-script-build

  2. Connection outside the process’s allowed destinationscause

    connection to release-assets.githubusercontent.com:443, opened by build-script-build

    subject release-assets.githubusercontent.com:443

    by /home/runner/work/chrondb/chrondb/target/release/build/chrondb-99668d507b11a1f3/build-script-build

  3. What a build script's fetch becamesupport

    5 files came down; nothing the build compiled, linked or ran

  4. Connection opened by a build script or child processsupport

    the opener is the build script at /home/runner/work/chrondb/chrondb/target/release/build/chrondb-99668d507b11a1f3/build-script-build

Processes

build-test

cargo›cargo›build-script-build

Ran
/home/runner/work/chrondb/chrondb/target/release/build/chrondb-99668d507b11a1f3/build-script-build
Invoked by
cargo build --release --locked --message-format=json-render-diagnostics
Lineage · 3 processes
  1. cargocargo build --release --locked --message-format=json-render-diagnostics2451
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo build --release --locked --message-format=json-render-diagnostics2451
  3. build-script-build/home/runner/work/chrondb/chrondb/target/release/build/chrondb-99668d507b11a1f3/build-script-build4205

Remediation

The build script connected to the network while compiling. Nothing it downloaded was compiled, linked or run. Build the crate from what the registry ships, or accept the download after reviewing it.

Network

3 peers
  • github.com:443 chrondb's own build code · build-script-build · GitHub, Inc. · 5 files undeclared
  • release-assets.githubusercontent.com:443 chrondb's own build code · build-script-build · Fastly, Inc. · 5 files undeclared
  • static.crates.io:8080 the package manager · cargo (chrondb) via crates.io · 5,966 files · went into an output ecosystem
Dependencies124Build behaviour
adler22.0.1
base640.22.1
bitflags2.13.2
cc1.8.0
cfg-if1.0.5
crc32fast1.5.2build script
dirs5.0.1
dirs-sys0.4.1
displaydoc0.2.7proc macro
errno0.3.14
fastrand2.5.0
filetime0.2.29
find-msvc-tools0.1.14
flate21.1.10
form_urlencoded1.2.2
futures-core0.3.34
futures-executor0.3.34
futures-task0.3.34
futures-util0.3.34
getrandom0.2.17
getrandom0.4.3build script
icu_collections2.3.0
icu_locale_core2.3.0
icu_normalizer2.3.0
icu_normalizer_data2.3.0build script
icu_properties2.3.0
icu_properties_data2.3.0build script
icu_provider2.3.1
idna1.1.0
idna_adapter1.2.2
itoa1.0.18
ld-linux-x86-64.so.2system library
libc0.2.190build script
libc.so.6system library
libgcc_s.so.1system library
libloading0.8.9
libm.so.6system library
libmvec.so.1system library
libredox0.1.25
linux-raw-sys0.12.1
litemap0.8.3
lock_api0.4.14
log0.4.34
memchr2.8.3
miniz_oxide0.9.1
once_cell1.21.4
option-ext0.2.0
parking_lot0.12.5
parking_lot_core0.9.12build script
percent-encoding2.3.2
pin-project-lite0.2.17
potential_utf0.1.6
proc-macro21.0.107build script
quote1.0.47build script
r-efi6.0.0
redox_syscall0.5.18
redox_users0.4.6
ring0.17.14build scriptprebuilt objects
rustix1.1.5build script
rustls0.23.46build script
rustls-pki-types1.15.1
rustls-webpki0.103.15
scopeguard1.2.0
serde1.0.229build script, not run
serde_core1.0.229build script
serde_derive1.0.229proc macro
serde_json1.0.154build script
serial_test3.5.0
serial_test_derive3.5.0proc macro
shlex2.0.1
simd-adler320.3.10
slab0.4.12
smallvec1.16.3
stable_deref_trait1.2.1
subtle2.6.1
syn2.0.119
syn3.0.9
synstructure0.14.0
tar0.4.46
tempfile3.27.0
thiserror1.0.69build script, not run
thiserror-impl1.0.69proc macro
tinystr0.8.4
unicode-ident1.0.27
untrusted0.9.0
ureq2.12.1
url2.5.8
utf8_iter1.0.4
wasi0.11.1+wasi-snapshot-preview1
webpki-roots0.26.11
webpki-roots1.0.9
windows-link0.2.1
windows-sys0.48.0
windows-sys0.52.0
windows-sys0.61.2
windows-targets0.48.5
windows-targets0.52.6
windows_aarch64_gnullvm0.48.5build script, not runprebuilt objects
windows_aarch64_gnullvm0.52.6build script, not runprebuilt objects
windows_aarch64_msvc0.48.5build script, not runprebuilt objects
windows_aarch64_msvc0.52.6build script, not runprebuilt objects
windows_i686_gnu0.48.5build script, not runprebuilt objects
windows_i686_gnu0.52.6build script, not runprebuilt objects
windows_i686_gnullvm0.52.6build script, not runprebuilt objects
windows_i686_msvc0.48.5build script, not runprebuilt objects
windows_i686_msvc0.52.6build script, not runprebuilt objects
windows_x86_64_gnu0.48.5build script, not runprebuilt objects
windows_x86_64_gnu0.52.6build script, not runprebuilt objects
windows_x86_64_gnullvm0.48.5build script, not runprebuilt objects
windows_x86_64_gnullvm0.52.6build script, not runprebuilt objects
windows_x86_64_msvc0.48.5build script, not runprebuilt objects
windows_x86_64_msvc0.52.6build script, not runprebuilt objects
writeable0.6.4
xattr1.6.1
yoke0.8.3
yoke-derive0.8.4proc macro
zerofrom0.1.8
zerofrom-derive0.1.8proc macro
zeroize1.9.1
zerotrie0.2.5
zerovec0.11.8
zerovec-derive0.11.6proc macro
zlib-rs0.6.8
zmij1.0.23build script
Versions26RiskVulnsPublished
0.2.3-dev.ed9ada3not analyzed2026-07-17
0.2.3-dev.12298e3not analyzed2026-04-05
0.2.3-dev.0f13f66not analyzed2026-04-03
0.2.3-dev.9not analyzed2026-04-03
0.2.3-dev.25not analyzed2026-04-03
0.2.3-dev.24not analyzed2026-04-02
0.2.3-dev.8not analyzed2026-04-02
0.2.3-dev.23not analyzed2026-04-02
0.0.0-dev.20not analyzed2026-04-01
0.2.1not analyzed2026-03-31
0.1.1not analyzed2026-03-19
0.0.0-dev.1not analyzed2026-03-19
0.0.0-dev.15not analyzed2026-01-30
0.0.0-dev.14not analyzed2026-01-29
0.0.0-dev.13not analyzed2026-01-28
0.0.0-dev.12not analyzed2026-01-28
0.0.0-dev.11not analyzed2026-01-28
0.0.0-dev.10not analyzed2026-01-28
0.0.0-dev.9not analyzed2026-01-28
0.0.0-dev.8not analyzed2026-01-27
0.0.0-dev.7not analyzed2026-01-26
0.0.0-dev.5not analyzed2026-01-25
0.0.0-dev.4not analyzed2026-01-25
0.0.0-dev.3not analyzed2026-01-24
0.0.0-dev.2not analyzed2026-01-24
0.2.3-dev.cb6a111mediumnone

Raw data

capture
374 KB
records
52,081
bytes per record
7.2

Loading a sample of the capture

Want to see more? E-mail us at hello@bitbison.io about your use case.

2 of 2 jobs captured: build-test unknown, build-test success · Generated 2026-10-14 · run 200dcff3-6c65-4c49-aebf-f0f7533d3a79

analysis 0.1.0 · 2026-10-14 · afb437c · graph v2