cargo / commonmeta
commonmeta 0.9.86
15 vulnerabilities- processes
- 589
- operations
- 105K
- packages
- 484
- compiler runs
- 1,125
- connections
- 4
- job time
- 7m 56s
- capture
- 1.3 MB
- records
- 186K
- bytes / record
- 7.1
Library for conversions to/from the Commonmeta scholarly metadata format
Artifact
- commonmetabinary · retained · product 15
- libcommonmeta.rlibfile · retained · product
Checks
11 of 14 clear Known vulnerabilities Build-time dependency advisories +1 moreBuild behavior✓✓✓✓✓✓✓✓
Supply chain▲▲▲✓✓
Pipeline✓
Detections
0No detections
No abnormal activity detected across 105K flows.
Network
4 peers- api.ror.org:443 unjudged
- doi.org:443 unjudged
- pub.orcid.org:443 unjudged
- static.crates.io:8080 ecosystem
| Dependencies529 | Build behaviour |
|---|---|
| aes0.9.1 | |
| ahash0.8.12 | |
| aho-corasick1.1.4 | |
| allocator-api20.2.21 | |
| ammonia4.1.2 | |
| anstream1.0.0 | |
| anstyle1.0.14 | |
| anstyle-parse1.0.0 | |
| anstyle-query1.1.5 | |
| arc-swap1.9.2 | |
| arrow59.0.0 | |
| arrow-arith59.0.0 | |
| arrow-array59.0.0 | |
| arrow-buffer59.0.0 | |
| arrow-cast59.0.0 | |
| arrow-csv59.0.0 | |
| arrow-data59.0.0 | |
| arrow-ipc59.0.0 | |
| arrow-json59.0.0 | |
| arrow-ord59.0.0 | |
| arrow-row59.0.0 | |
| arrow-schema59.0.0 | |
| arrow-select59.0.0 | |
| arrow-string59.0.0 | |
| atoi2.0.0 | |
| atomic-waker1.1.2 | |
| base640.22.1 | |
| biblatex0.12.0 | |
| bit-set0.8.0 | |
| bit-vec0.8.0 | |
| bitflags2.13.0 | |
| bitpacking0.9.3 | |
| block-buffer0.12.1 | |
| bon3.9.3 | |
| borrow-or-share0.2.4 | |
| bumpalo3.20.3 | |
| bytecount0.6.9 | |
| byteorder1.5.0 | |
| bytes1.11.1 | |
| bzip20.6.1 | |
| castaway0.2.4 | |
| census0.4.2 | |
| cfg-if1.0.4 | |
| chacha200.10.0 | |
| chrono0.4.45 | |
| ciborium0.2.2 | |
| ciborium-io0.2.2 | |
| ciborium-ll0.2.2 | |
| cipher0.5.2 | |
| citationberg0.7.0 | |
| clap4.6.1 | |
| clap_builder4.6.0 | |
| clap_lex1.1.0 | |
| cmov0.5.4 | |
| colorchoice1.0.5 | |
| commonmeta-schema1.0.1 | |
| compact_str0.8.2 | |
| console0.16.3 | |
| const-oid0.10.2 | |
| constant_time_eq0.4.2 | |
| cpubits0.1.1 | |
| cpufeatures0.3.0 | |
| crc32fast1.5.0 | |
| crossbeam-channel0.5.16 | |
| crossbeam-deque0.8.6 | |
| crossbeam-epoch0.9.18 | |
| crossbeam-utils0.8.21 | |
| crunchy0.2.4 | |
| crypto-common0.2.2 | |
| cssparser0.35.0 | |
| cssparser0.37.0 | |
| csv1.4.0 | |
| csv-core0.1.13 | |
| ctutils0.4.2 | |
| dashmap6.2.1 | |
| data-encoding2.11.0 | |
| datasketches0.2.0 | |
| deflate640.1.12 | |
| deranged0.5.8 | |
| derive_more2.1.1 | |
| digest0.11.3 | |
| dirs6.0.0 | |
| dirs-sys0.5.0 | |
| downcast-rs2.0.2 | |
| dtoa1.0.11 | |
| dtoa-short0.3.5 | |
| edtf0.2.0 | |
| ego-tree0.11.0 | |
| either1.16.0 | |
| email_address0.2.9 | |
| encoding_rs0.8.35 | |
| equivalent1.0.2 | |
| erased-serde0.4.10 | |
| errno0.3.14 | |
| fallible-iterator0.3.0 | |
| fallible-streaming-iterator0.1.9 | |
| fancy-regex0.18.0 | |
| fastdivide0.4.2 | |
| fastrand2.4.1 | |
| fastxml0.11.0 | |
| filetime0.2.29 | |
| flatbuffers25.12.19 | |
| flate21.1.9 | |
| fluent-uri0.4.1 | |
| fnv1.0.7 | |
| foldhash0.2.0 | |
| form_urlencoded1.2.2 | |
| fraction0.15.4 | |
| fs40.13.1 | |
| futf0.1.5 | |
| futures-channel0.3.32 | |
| futures-core0.3.32 | |
| futures-io0.3.32 | |
| futures-sink0.3.32 | |
| futures-task0.3.32 | |
| futures-util0.3.32 | |
| getrandom0.2.17 | |
| getrandom0.3.4 | |
| getrandom0.4.3 | |
| h20.4.15 | |
| half2.7.1 | |
| hashbrown0.14.5 | |
| hashbrown0.16.1 | |
| hashbrown0.17.1 | |
| hashlink0.12.0 | |
| hayagriva0.10.1 | |
| hmac0.13.0 | |
| html5ever0.35.0 | |
| html5ever0.39.0 | |
| htmlescape0.3.1 | |
| http1.4.2 | |
| http-body1.0.1 | |
| http-body-util0.1.3 | |
| httparse1.10.1 | |
| hybrid-array0.4.12 | |
| hyper1.10.1 | |
| hyper-rustls0.27.9 | |
| hyper-util0.1.20 | |
| iana-time-zone0.1.65 | |
| icu_collator2.2.0 | |
| icu_collator_data2.2.0 | |
| icu_collections2.2.0 | |
| icu_locale2.2.0 | |
| icu_locale_core2.2.0 | |
| icu_locale_data2.2.0 | |
| icu_normalizer2.2.0 | |
| icu_normalizer_data2.2.0 | |
| icu_properties2.2.0 | |
| icu_properties_data2.2.0 | |
| icu_provider2.2.0 | |
| idna1.1.0 | |
| idna_adapter1.2.2 | |
| include_dir0.7.4 | |
| indexmap2.14.0 | |
| indicatif0.18.4 | |
| inout0.2.2 | |
| inventory0.3.24 | |
| ipnet2.12.0 | |
| is_terminal_polyfill1.70.2 | |
| isolang2.4.0 | |
| itertools0.14.0 | |
| itoa1.0.18 | |
| jiff0.2.31 | |
| jsonschema0.49.1 | |
| jsonschema-regex0.49.1 | |
| jsonschema-value0.49.1 | |
| lazy_static1.5.0 | |
| ld-linux-x86-64.so.2 | |
| levenshtein_automata0.2.1 | |
| lexical-core1.0.6 | |
| lexical-parse-float1.0.6 | |
| lexical-parse-integer1.0.6 | |
| lexical-util1.0.7 | |
| lexical-write-float1.0.6 | |
| lexical-write-integer1.0.6 | |
| libbz2-rs-sys0.2.5 | |
| libc0.2.186 | |
| libc.so.6 | |
| libgcc_s.so.1 | |
| libm.so.6 | |
| libmvec.so.1 | |
| libsqlite3-sys0.38.1 | |
| linux-raw-sys0.12.1 | |
| litemap0.8.2 | |
| lock_api0.4.14 | |
| log0.4.32 | |
| lru0.16.4 | |
| lz4_flex0.13.1 | |
| lzma-rust20.16.4 | |
| mac0.1.1 | |
| maplit1.0.2 | |
| markup5ever0.35.0 | |
| markup5ever0.39.0 | |
| measure_time0.9.0 | |
| memchr2.8.2 | |
| memmap20.9.11 | |
| micromap0.3.0 | |
| mime0.3.17 | |
| mio1.2.1 | |
| murmurhash320.3.1 | |
| new_debug_unreachable1.0.6 | |
| nom7.1.3 | |
| num0.4.3 | |
| num-bigint0.4.6 | |
| num-cmp0.1.0 | |
| num-complex0.4.6 | |
| num-conv0.2.2 | |
| num-integer0.1.46 | |
| num-iter0.1.45 | |
| num-rational0.4.2 | |
| num-traits0.2.19 | |
| once_cell1.21.4 | |
| oneshot0.1.13 | |
| openssl-probe0.2.1 | |
| option-ext0.2.0 | |
| ordered-float5.3.0 | |
| outref0.5.2 | |
| ownedbytes0.9.0 | |
| parking_lot0.12.5 | |
| parking_lot_core0.9.12 | |
| parquet59.0.0 | |
| pbkdf20.13.0 | |
| percent-encoding2.3.2 | |
| phf0.11.3 | |
| phf0.13.1 | |
| phf_shared0.11.3 | |
| phf_shared0.13.1 | |
| pin-project-lite0.2.17 | |
| portable-atomic1.13.1 | |
| potential_utf0.1.5 | |
| powerfmt0.2.0 | |
| ppmd-rust1.4.0 | |
| precomputed-hash0.1.1 | |
| quick-xml0.37.5 | |
| quick-xml0.38.4 | |
| quick-xml0.41.0 | |
| rand0.10.1 | |
| rand_core0.10.1 | |
| rayon1.12.0 | |
| rayon-core1.13.0 | |
| ref-cast1.0.25 | |
| referencing0.49.1 | |
| regex1.12.4 | |
| regex-automata0.4.14 | |
| regex-syntax0.8.11 | |
| reqwest0.13.4 | |
| ring0.17.14 | |
| roman-numerals-rs3.1.0 | |
| rusqlite0.40.1 | |
| rust-stemmers1.2.0 | |
| rustc-hash2.1.2 | |
| rustix1.1.4 | |
| rustls0.23.40 | |
| rustls-native-certs0.8.4 | |
| rustls-pki-types1.14.1 | |
| rustls-platform-verifier0.7.0 | |
| rustls-webpki0.103.13 | |
| ryu1.0.23 | |
| scopeguard1.2.0 | |
| scraper0.27.0 | |
| selectors0.38.0 | |
| serde1.0.228 | |
| serde_core1.0.228 | |
| serde_json1.0.150 | |
| serde_path_to_error0.1.20 | |
| serde_yaml0.9.34+deprecated | |
| servo_arc0.4.3 | |
| sha10.11.0 | |
| sha20.11.0 | |
| signal-hook-registry1.4.8 | |
| simd-adler320.3.9 | |
| simdutf80.1.5 | |
| siphasher1.0.3 | |
| sketches-ddsketch0.4.1 | |
| slab0.4.12 | |
| smallvec1.15.2 | |
| snap1.1.2 | |
| socket20.6.4 | |
| stable_deref_trait1.2.1 | |
| static_assertions1.1.0 | |
| string_cache0.8.9 | |
| string_cache0.9.0 | |
| strsim0.11.1 | |
| strum0.27.2 | |
| strum0.28.0 | |
| subtle2.6.1 | |
| sync_wrapper1.0.2 | |
| tantivy0.26.1 | |
| tantivy-bitpacker0.10.0 | |
| tantivy-columnar0.7.0 | |
| tantivy-common0.11.0 | |
| tantivy-fst0.5.0 | |
| tantivy-query-grammar0.26.0 | |
| tantivy-sstable0.7.0 | |
| tantivy-stacker0.7.0 | |
| tantivy-tokenizer-api0.7.0 | |
| tar0.4.46 | |
| tempfile3.27.0 | |
| tendril0.4.3 | |
| tendril0.5.0 | |
| thiserror2.0.18 | |
| time0.3.49 | |
| time-core0.1.9 | |
| tinystr0.8.3 | |
| tinyvec1.11.0 | |
| tinyvec_macros0.1.1 | |
| tokio1.52.3 | |
| tokio-rustls0.26.4 | |
| tokio-util0.7.18 | |
| tower0.5.3 | |
| tower-http0.6.11 | |
| tower-layer0.3.3 | |
| tower-service0.3.3 | |
| tracing0.1.44 | |
| tracing-core0.1.36 | |
| try-lock0.2.5 | |
| twox-hash2.1.2 | |
| typed-path0.12.3 | |
| typeid1.0.3 | |
| typenum1.20.1 | |
| typetag0.2.23 | |
| unic-langid0.9.6 | |
| unic-langid-impl0.9.6 | |
| unic-langid-macros0.9.6 | |
| unicode-general-category1.1.0 | |
| unicode-normalization0.1.25 | |
| unicode-segmentation1.13.3 | |
| unicode-width0.2.2 | |
| unit-prefix0.5.2 | |
| unsafe-libyaml0.2.11 | |
| unscanny0.1.0 | |
| untrusted0.9.0 | |
| url2.5.8 | |
| utf-80.7.6 | |
| utf16_iter1.0.5 | |
| utf8-ranges1.0.5 | |
| utf8_iter1.0.4 | |
| utf8parse0.2.2 | |
| uuid1.23.4 | |
| uuid-simd0.8.0 | |
| vsimd0.8.0 | |
| want0.3.1 | |
| web_atoms0.1.3 | |
| web_atoms0.2.4 | |
| write161.0.0 | |
| writeable0.6.3 | |
| xattr1.6.1 | |
| xxhash-rust0.8.15 | |
| yoke0.8.3 | |
| zerocopy0.8.52 | |
| zerofrom0.1.8 | |
| zeroize1.9.0 | |
| zerotrie0.2.4 | |
| zerovec0.11.6 | |
| zip8.6.0 | |
| zlib-rs0.6.3 | |
| zmij1.0.21 | |
| zopfli0.8.3 | |
| zstd0.13.3 | |
| zstd-safe7.2.4 | |
| zstd-sys2.0.16+zstd.1.5.7 | |
| adler22.0.1 | |
| adler321.2.0 | |
| avro-rs0.13.0 | |
| base320.5.1 | |
| digest0.9.0 | |
| generic-array0.14.7 | |
| getopts0.2.24 | |
| getrandom0.1.16 | |
| libflate1.4.0 | |
| libflate_lz771.2.0 | |
| libm0.2.16 | |
| minimal-lexical0.2.1 | |
| miniz_oxide0.8.9 | |
| num-bigint0.2.6 | |
| ppv-lite860.2.21 | |
| rand0.7.3 | |
| rand_chacha0.2.2 | |
| rand_core0.5.1 | |
| rle-decode-fast1.0.3 | |
| strum0.18.0 | |
| thiserror1.0.69 | |
| unicode-ident1.0.24 | |
| uuid0.8.2 | |
| zerocopy0.3.2 | |
| android_system_properties0.1.5 | |
| anstyle-wincon3.0.11 | |
| async-trait0.1.91 | |
| autocfg1.5.1 | |
| bitflags1.3.2 | |
| bon-macros3.9.3 | |
| cc1.2.64 | |
| combine4.6.7 | |
| const-random0.1.18 | |
| const-random-macro0.1.16 | |
| core-foundation0.10.1 | |
| core-foundation0.9.4 | |
| core-foundation-sys0.8.7 | |
| cssparser-macros0.6.1 | |
| cssparser-macros0.7.0 | |
| darling0.23.0 | |
| darling_core0.23.0 | |
| darling_macro0.23.0 | |
| defmt1.1.0 | |
| defmt-macros1.1.0 | |
| defmt-parser1.0.0 | |
| derive_more-impl2.1.1 | |
| displaydoc0.2.6 | |
| encode_unicode1.0.0 | |
| find-msvc-tools0.1.9 | |
| futures-macro0.3.32 | |
| heck0.3.3 | |
| heck0.5.0 | |
| iana-time-zone-haiku0.1.2 | |
| ident_case1.0.1 | |
| include_dir_macros0.7.4 | |
| jiff-static0.2.31 | |
| jni0.22.4 | |
| jni-macros0.22.4 | |
| jni-sys0.4.1 | |
| jni-sys-macros0.4.1 | |
| jobserver0.1.34 | |
| js-sys0.3.102 | |
| libredox0.1.17 | |
| match_token0.35.0 | |
| once_cell_polyfill1.70.2 | |
| parquet_derive59.0.0 | |
| paste1.0.15 | |
| phf_codegen0.11.3 | |
| phf_codegen0.13.1 | |
| phf_generator0.11.3 | |
| phf_generator0.13.1 | |
| phf_macros0.11.3 | |
| phf_macros0.13.1 | |
| pkg-config0.3.33 | |
| portable-atomic-util0.2.7 | |
| prettyplease0.2.37 | |
| proc-macro-error-attr22.0.0 | |
| proc-macro-error22.0.1 | |
| proc-macro-hack0.5.20+deprecated | |
| proc-macro21.0.106 | |
| quote1.0.45 | |
| r-efi5.3.0 | |
| r-efi6.0.0 | |
| rand0.8.6 | |
| rand_core0.6.4 | |
| rand_hc0.2.0 | |
| redox_syscall0.5.18 | |
| redox_users0.5.2 | |
| ref-cast-impl1.0.25 | |
| rsqlite-vfs0.1.1 | |
| rustc_version0.4.1 | |
| rustls-platform-verifier-android0.1.1 | |
| rustversion1.0.22 | |
| same-file1.0.6 | |
| schannel0.1.29 | |
| security-framework3.7.0 | |
| security-framework-sys2.17.0 | |
| semver1.0.28 | |
| seq-macro0.3.6 | |
| serde_derive1.0.228 | |
| shlex2.0.1 | |
| simd_cesu81.1.1 | |
| sqlite-wasm-rs0.5.5 | |
| string_cache_codegen0.5.4 | |
| string_cache_codegen0.6.1 | |
| strum_macros0.18.0 | |
| strum_macros0.27.2 | |
| strum_macros0.28.0 | |
| syn1.0.109 | |
| syn2.0.118 | |
| syn3.0.3 | |
| synstructure0.12.6 | |
| synstructure0.13.2 | |
| system-configuration0.7.0 | |
| system-configuration-sys0.6.0 | |
| thiserror-impl1.0.69 | |
| thiserror-impl2.0.18 | |
| time-macros0.2.29 | |
| tiny-keccak2.0.2 | |
| tokio-macros2.7.0 | |
| tracing-attributes0.1.31 | |
| typed-builder0.5.1 | |
| typetag-impl0.2.23 | |
| unic-langid-macros-impl0.9.6 | |
| unicode-xid0.2.6 | |
| vcpkg0.2.15 | |
| version_check0.9.5 | |
| walkdir2.5.0 | |
| wasi0.11.1+wasi-snapshot-preview1 | |
| wasi0.9.0+wasi-snapshot-preview1 | |
| wasip21.0.4+wasi-0.2.12 | |
| wasm-bindgen0.2.125 | |
| wasm-bindgen-futures0.4.75 | |
| wasm-bindgen-macro0.2.125 | |
| wasm-bindgen-macro-support0.2.125 | |
| wasm-bindgen-shared0.2.125 | |
| web-sys0.3.102 | |
| web-time1.1.0 | |
| webpki-root-certs1.0.8 | |
| winapi0.3.9 | |
| winapi-i686-pc-windows-gnu0.4.0 | |
| winapi-util0.1.11 | |
| winapi-x86_64-pc-windows-gnu0.4.0 | |
| windows-core0.62.2 | |
| windows-implement0.60.2 | |
| windows-interface0.59.3 | |
| windows-link0.2.1 | |
| windows-registry0.6.1 | |
| windows-result0.4.1 | |
| windows-strings0.5.1 | |
| windows-sys0.52.0 | |
| windows-sys0.59.0 | |
| windows-sys0.61.2 | |
| windows-targets0.52.6 | |
| windows_aarch64_gnullvm0.52.6 | |
| windows_aarch64_msvc0.52.6 | |
| windows_i686_gnu0.52.6 | |
| windows_i686_gnullvm0.52.6 | |
| windows_i686_msvc0.52.6 | |
| windows_x86_64_gnu0.52.6 | |
| windows_x86_64_gnullvm0.52.6 | |
| windows_x86_64_msvc0.52.6 | |
| wit-bindgen0.57.1 | |
| yoke-derive0.8.2 | |
| zerocopy-derive0.2.0 | |
| zerocopy-derive0.8.52 | |
| zerofrom-derive0.1.7 | |
| zerovec-derive0.11.3 |
| Vulnerabilities15 | Package | Version | Fix | Severity | Title | Reach |
|---|---|---|---|---|---|---|
| CVE-2026-63430 | ammonia | 4.1.2 | >=4.1.3 | high | mXSS in ammonia via MathML `annotation-xml` encoding strip | retained |
| RUSTSEC-2021-0157 | ammonia | 4.1.2 | >=4.1.7 | high | Incorrect escaping for `url("")` functions in CSS style attributes | retained |
| RUSTSEC-2021-0158 | ammonia | 4.1.2 | >=4.1.7 | high | XSS in ammonia via SVG `animateMotion`, `animateTransform`, and/or `animateColor` tags | retained |
| RUSTSEC-2026-0204 | crossbeam-epoch | 0.9.18 | >=0.9.20 | high | Invalid pointer dereference in `fmt::Pointer` impl for `Atomic` and `Shared` when the underlying pointer is invalid | retained |
| RUSTSEC-2026-0258 | h2 | 0.4.15 | >=0.4.16 | high | h2 unbounded empty DATA frames | retained |
| RUSTSEC-2026-0194 | quick-xml | 0.37.5, 0.38.4 | >=0.41.0 | high | Quadratic run time when checking a start tag for duplicate attribute names | retained |
| RUSTSEC-2026-0195 | quick-xml | 0.37.5, 0.38.4 | >=0.41.0 | high | Unbounded namespace-declaration allocation in `NsReader` enables memory-exhaustion denial of service | retained |
| RUSTSEC-2026-0346 | rustls | 0.23.40 | >=0.23.46 | high | `Debug` impls for client session values expose TLS secrets | retained |
| RUSTSEC-2026-0348 | rustls | 0.23.40 | >=0.23.46 | high | Brotli certificate decompression can allocate up to 1 GiB before authentication | retained |
| RUSTSEC-2026-0349 | rustls | 0.23.40 | >=0.23.46 | high | Unauthenticated ServerHello can downgrade later connections to classical key exchange | retained |
| CVE-2026-102342 | ammonia | 4.1.2 | >=4.1.4 | medium | Ammonia: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | retained |
| GHSA-2mjx-qc3c-rqvc | rustls | 0.23.40 | >=0.23.45 | medium | Rustls: TLS 1.3 handshake messages incorrectly accepted across encryption level boundaries | retained |
| RUSTSEC-2026-0253 | lru | 0.16.4 | >=0.18.2 | low | Potential use-after-free due to lack of panic safety in `LruCache::pop()` | retained |
| RUSTSEC-2024-0449 | unsafe-libyaml | 0.2.11 | none published | low | unsafe-libyaml is unmaintained | retained |
| GHSA-6g2r-675j-hx59 | xxhash-rust | 0.8.15 | >=0.8.16 | low | xxhash-rust: Safe xxh3 custom-secret API accepts too-short secret in release | retained |
1 of 1 jobs captured: build-test success · Generated 2026-10-15 · run cba7d18c-e2ca-408a-963a-2e9b94eee3b2
analysis 0.1.0 · 2026-10-15 · 20a5b2e · graph v2