Skip to content
Open-Source Registry

cargo / cp2k-pexsi-sys / 0.3.2

cp2k-pexsi-sys 0.3.2

bitbison: no public build not built
processes
1,060
operations
1M
packages
78
compiler runs
26,817
connections
3
build time
11m 04s
job time
11m 04s
capture
3.2 MB
records
2M
bytes / record
1.9

Build behaviourhas a build scriptundeclared fetchfetch went into the outputfetched outside crates.iocompiled C/C++

run aaebb407-5d07-4ea3-a46c-bbe0102720c3 · built 2026-10-22 · complete View on crates.io

This release did not build; nothing below stands for the package.

Graph

egress · high
9

Checks

11 of 14 clear Network activity Build script activity +1 more
Build behavior▲✓✓✓▲✓✓✓
Supply chain✓▲✓✓✓
Pipeline✓

Detections

3
  • Build script ran a program it downloaded
    openblas-src 0.10.16 › release-assets.githubusercontent.com:443
    high
  • Build script fetched what the build compiled, linked or ran
    openblas-src 0.10.16 › github.com:443, release-assets.githubusercontent.com:443
    high
  • Build script reached github.com
    cp2k-parmetis-sys 0.3.2 › github.com:443
    medium

Detection

highwitnessed

Build script ran a program it downloaded

Unexpected build script activity

Subject
openblas-src 0.10.16
Destination
release-assets.githubusercontent.com:443
Jobs
build-test, build-test
Rule
buildscript · cp2k-pexsi-sys

Witness chain

  1. release-assets.githubusercontent.com:443
    source
  2. /home/runner/work/cp2k-pexsi-sys/cp2k-pexsi-sys/target/release/build/openblas-src-5fda8ec3219bc5f5/out/OpenBLAS-0.3.32/c_checkvia /home/runner/work/cp2k-pexsi-sys/cp2k-pexsi-sys/target/release/build/openblas-src-d232bc67b42109b2/build-script-build
    • Build-time code ran a program downloaded during the buildfrom release-assets.githubusercontent.com:443by c_check

      ran /home/runner/work/cp2k-pexsi-sys/cp2k-pexsi-sys/target/release/build/openblas-src-5fda8ec3219bc5f5/out/OpenBLAS-0.3.32/c_check, downloaded during the build by build-script-build from release-assets.githubusercontent.com:443

    subject
  3. member
    artifact
  4. member
    artifact

Evidence

  • ran /home/runner/work/cp2k-pexsi-sys/cp2k-pexsi-sys/target/release/build/openblas-src-5fda8ec3219bc5f5/out/OpenBLAS-0.3.32/c_check, downloaded during the build by build-script-build from release-assets.githubusercontent.com:443

Processes

build-test

cargo›cargo›build-script-build›…›sh›c_check

Ran
/home/runner/work/cp2k-pexsi-sys/cp2k-pexsi-sys/target/release/build/openblas-src-5fda8ec3219bc5f5/out/OpenBLAS-0.3.32/c_check
Invoked by
cargo build --release --locked --message-format=json-render-diagnostics
Lineage · 9 processes
  1. cargocargo build --release --locked --message-format=json-render-diagnostics2487
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo build --release --locked --message-format=json-render-diagnostics2487
  3. build-script-build/home/runner/work/cp2k-pexsi-sys/cp2k-pexsi-sys/target/release/build/openblas-src-d232bc67b42109b2/build-script-build3355
  4. makemake NO_SHARED=1 all3356
  5. sh/bin/sh -c make -C . -f Makefile.prebuild CC="cc" FC="f77" HOSTCC="cc" HOST_CFLAGS="-march=native -DGEMM_MULTITHREAD_THRESHOLD=4 -DNO_PARALLEL_MAKE=0" CFLAGS=""…3359
  6. makemake -C . -f Makefile.prebuild CC=cc FC=f77 HOSTCC=cc HOST_CFLAGS=-march=native -DGEMM_MULTITHREAD_THRESHOLD=4 -DNO_PARALLEL_MAKE=0 CFLAGS= BINARY= USE_OPENMP= …3360
  7. sh/bin/sh -c ./c_check Makefile.conf config.h "cc" 4435
  8. sh/bin/sh ./c_check Makefile.conf config.h cc4436
  9. c_check4881

build-test

cargo›cargo›build-script-build›…›sh›f_check

Ran
/home/runner/work/cp2k-pexsi-sys/cp2k-pexsi-sys/target/release/build/openblas-src-5fda8ec3219bc5f5/out/OpenBLAS-0.3.32/f_check
Invoked by
cargo build --release --locked --message-format=json-render-diagnostics
Lineage · 9 processes
  1. cargocargo build --release --locked --message-format=json-render-diagnostics2487
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo build --release --locked --message-format=json-render-diagnostics2487
  3. build-script-build/home/runner/work/cp2k-pexsi-sys/cp2k-pexsi-sys/target/release/build/openblas-src-d232bc67b42109b2/build-script-build3355
  4. makemake NO_SHARED=1 all3356
  5. sh/bin/sh -c make -C . -f Makefile.prebuild CC="cc" FC="f77" HOSTCC="cc" HOST_CFLAGS="-march=native -DGEMM_MULTITHREAD_THRESHOLD=4 -DNO_PARALLEL_MAKE=0" CFLAGS=""…3359
  6. makemake -C . -f Makefile.prebuild CC=cc FC=f77 HOSTCC=cc HOST_CFLAGS=-march=native -DGEMM_MULTITHREAD_THRESHOLD=4 -DNO_PARALLEL_MAKE=0 CFLAGS= BINARY= USE_OPENMP= …3360
  7. sh/bin/sh -c ./f_check Makefile.conf config.h "f77" 4975
  8. sh/bin/sh ./f_check Makefile.conf config.h f774976
  9. f_check4979

Remediation

A dependency's build downloaded a program and ran it, outside anything the registry checksums. Review what the program did, rotate any credential the build could read, and pin or replace the dependency.

Detection

highwitnessed

Build script fetched what the build compiled, linked or ran

Unexpected network connection

Subject
openblas-src 0.10.16
Destination
github.com:443, release-assets.githubusercontent.com:443
Reaches
Jobs
build-test
Rule
egress · cp2k-pexsi-sys

Evidence

  1. Connection outside the process’s allowed destinationscause

    connection to github.com:443, opened by build_script_build-d232bc67b42109b2

    subject github.com:443

    by /home/runner/work/cp2k-pexsi-sys/cp2k-pexsi-sys/target/release/build/openblas-src-d232bc67b42109b2/build-script-build

  2. Connection outside the process’s allowed destinationscause

    connection to release-assets.githubusercontent.com:443, opened by build_script_build-d232bc67b42109b2

    subject release-assets.githubusercontent.com:443

    by /home/runner/work/cp2k-pexsi-sys/cp2k-pexsi-sys/target/release/build/openblas-src-d232bc67b42109b2/build-script-build

  3. What a build script's fetch becamesupport

    12563 files came down; the build compiled or linked cblas.h, common.h, common_b.h +5326 more and ran c_check, f_check

  4. Connection opened by a build script or child processsupport

    the opener is the build script at /home/runner/work/cp2k-pexsi-sys/cp2k-pexsi-sys/target/release/build/openblas-src-d232bc67b42109b2/build_script_build-d232bc67b42109b2

What came before it

Loading the graph

Processes

build-test

cargo›cargo›build-script-build

Ran
/home/runner/work/cp2k-pexsi-sys/cp2k-pexsi-sys/target/release/build/openblas-src-d232bc67b42109b2/build-script-build
Invoked by
cargo build --release --locked --message-format=json-render-diagnostics
Lineage · 3 processes
  1. cargocargo build --release --locked --message-format=json-render-diagnostics2487
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo build --release --locked --message-format=json-render-diagnostics2487
  3. build-script-build/home/runner/work/cp2k-pexsi-sys/cp2k-pexsi-sys/target/release/build/openblas-src-d232bc67b42109b2/build-script-build3355

Remediation

A dependency's build downloaded files the build then compiled, linked or ran, outside anything the registry checksums. Review what came down, pin or replace the dependency, or record the download as accepted once it is reviewed.

Detection

mediumwitnessed

Build script reached github.com

Unexpected network connection

Subject
cp2k-parmetis-sys 0.3.2
Destination
github.com:443
Jobs
build-test
Rule
egress

Evidence

  1. Connection outside the process’s allowed destinationscause

    connection to github.com:443, opened by curl

    subject github.com:443

    by curl -fL --retry 3 -o /home/runner/work/cp2k-pexsi-sys/cp2k-pexsi-sys/target/release/parmetis-stable/parmetis-4.0.3.tar.gz https://github.com/jvanhare/parmetis/…

  2. What a build script's fetch becamesupport

    nothing came down that the build kept

  3. Connection opened by a build script or child processsupport

    the opener descends from the build script at /home/runner/work/cp2k-pexsi-sys/cp2k-pexsi-sys/target/release/build/cp2k-parmetis-sys-2f15d5b43422d7d4/build-script-build

  4. Tool commandsupport

    Command: curl -fL --retry 3 -o /home/runner/work/cp2k-pexsi-sys/cp2k-pexsi-sys/target/release/parmetis-stable/parmetis-4.0.3.tar.gz https://github.com/jvanhare/parmetis/…

    by curl -fL --retry 3 -o /home/runner/work/cp2k-pexsi-sys/cp2k-pexsi-sys/target/release/parmetis-stable/parmetis-4.0.3.tar.gz https://github.com/jvanhare/parmetis/…

What came before it

Loading the graph

Processes

build-test

cargo›cargo›build-script-build›curl

Ran
curl -fL --retry 3 -o /home/runner/work/cp2k-pexsi-sys/cp2k-pexsi-sys/target/release/parmetis-stable/parmetis-4.0.3.tar.gz https://github.com/jvanhare/parmetis/…
Invoked by
cargo build --release --locked --message-format=json-render-diagnostics
Lineage · 4 processes
  1. cargocargo build --release --locked --message-format=json-render-diagnostics2487
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo build --release --locked --message-format=json-render-diagnostics2487
  3. build-script-build/home/runner/work/cp2k-pexsi-sys/cp2k-pexsi-sys/target/release/build/cp2k-parmetis-sys-2f15d5b43422d7d4/build-script-build3207
  4. curlcurl -fL --retry 3 -o /home/runner/work/cp2k-pexsi-sys/cp2k-pexsi-sys/target/release/parmetis-stable/parmetis-4.0.3.tar.gz https://github.com/jvanhare/parmetis/…3212

Remediation

The build script connected to the network while compiling. Nothing it downloaded was compiled, linked or run. Build the crate from what the registry ships, or accept the download after reviewing it.

Network

3 peers
  • github.com:443 build code of openblas-src · build_script_build-d232bc67b42109b2 (cp2k-pexsi-sys); curl · GitHub, Inc. · 12,563 files · went into an output undeclared
  • release-assets.githubusercontent.com:443 build code of openblas-src · build_script_build-d232bc67b42109b2 (cp2k-pexsi-sys) · Fastly, Inc. · 12,563 files · went into an output undeclared
  • static.crates.io:8080 the package manager · cargo (cp2k-pexsi-sys) via crates.io · 4,902 files · went into an output ecosystem
Dependencies79Build behaviour
adler22.0.1
anyhow1.0.104build script
base640.22.1
bitflags2.13.2
bytes1.12.1
cc1.8.0
cfg-if1.0.5
cp2k-build-utils0.3.2
cp2k-parmetis-sys0.3.2build scriptnetworkruns toolsgithub.com, curl
cp2k-superlu-dist-sys0.3.2build script, not run
crc32fast1.5.2build script
dirs6.0.0
dirs-sys0.5.0
errno0.3.14
filetime0.2.27
find-msvc-tools0.1.14
flate21.1.10
getrandom0.2.17
hermit-abi0.5.3
http1.5.0
httparse1.10.1build script
itoa1.0.18
ld-linux-x86-64.so.2system library
libc0.2.190build script
libc.so.6system library
libgcc_s.so.1system library
libm.so.6system library
libmvec.so.1system library
libredox0.1.25
linux-raw-sys0.12.1
log0.4.34
miniz_oxide0.9.1
num_cpus1.17.0
once_cell1.21.4
openblas-build0.10.16
openblas-src0.10.16build scriptnetworkgithub.com, release-assets.githubusercontent.com
option-ext0.2.0
percent-encoding2.3.2
pkg-config0.3.34
plain0.2.3
proc-macro21.0.107build script
quote1.0.47build script
redox_syscall0.9.4
redox_users0.5.3
ring0.17.14build scriptprebuilt objects
rustix1.1.5build script
rustls0.23.45build script
rustls-pki-types1.15.1
rustls-webpki0.103.15
shlex2.0.1
simd-adler320.3.10
subtle2.6.1
syn3.0.9
tar0.4.46
thiserror2.0.20build script
thiserror-impl2.0.20proc macro
unicode-ident1.0.27
untrusted0.9.0
ureq3.2.1
ureq-proto0.5.3
utf8-zero0.8.1
vcpkg0.2.15prebuilt objects
wasi0.11.1+wasi-snapshot-preview1
webpki-roots1.0.9
windows-link0.2.1
windows-sys0.52.0
windows-sys0.61.2
windows-targets0.52.6
windows_aarch64_gnullvm0.52.6build script, not runprebuilt objects
windows_aarch64_msvc0.52.6build script, not runprebuilt objects
windows_i686_gnu0.52.6build script, not runprebuilt objects
windows_i686_gnullvm0.52.6build script, not runprebuilt objects
windows_i686_msvc0.52.6build script, not runprebuilt objects
windows_x86_64_gnu0.52.6build script, not runprebuilt objects
windows_x86_64_gnullvm0.52.6build script, not runprebuilt objects
windows_x86_64_msvc0.52.6build script, not runprebuilt objects
xattr1.6.1
zeroize1.8.2
zlib-rs0.6.8
Versions2RiskVulnsPublished
0.3.2did not build18h ago
0.3.1not analyzed2026-09-23

Raw data

capture
3.2 MB
records
1,651,359
bytes per record
1.9

Loading a sample of the capture

Want to see more? E-mail us at hello@bitbison.io about your use case.

1 of 1 jobs captured: build-test failure · Generated 2026-10-22 · run aaebb407-5d07-4ea3-a46c-bbe0102720c3

analysis 0.1.0 · 2026-10-21 · bee3716 · graph v2