Skip to content
Open-Source Registry

cargo / drawnui-skia-safe / 0.153.7

drawnui-skia-safe 0.153.7

bitbison: no public build not built
processes
587
operations
109K
packages
285
compiler runs
127
connections
6
build time
2m 07s
job time
2m 07s
capture
1.6 MB
records
202K
bytes / record
7.9

Build behaviourundeclared fetchfetched outside crates.iocompiled C/C++

run 43d08a4e-977b-4fae-bd21-ab53ef2fd9cd · built 2026-10-21 · complete View on crates.io

This release did not build; nothing below stands for the package.

Graph

egress · high
8

Checks

11 of 14 clear Network activity Build script activity +1 more
Build behavior▲✓✓✓▲✓✓✓
Supply chain✓▲✓✓✓
Pipeline✓

Detections

2
  • Build script ran a program it downloaded
    drawnui-skia-bindings 0.153.7 › storage.googleapis.com:443
    high
  • Build script fetched what the build compiled, linked or ran
    drawnui-skia-bindings 0.153.7 › github.com:443, codeload.github.com:443, skia.googlesource.com:443, chrome-infra-packages.appspot.com:443, storage.googleapis.com:443
    high

Detection

highwitnessed

Build script ran a program it downloaded

Unexpected build script activity

Subject
drawnui-skia-bindings 0.153.7
Destination
storage.googleapis.com:443
Jobs
build-test
Rule
buildscript · rust-skia

Witness chain

  1. storage.googleapis.com:443
    source
  2. /home/runner/.cargo/registry/src/index.crates.io-f7c75c5af8568ae3/drawnui-skia-bindings-0.153.7/skia/bin/gnvia /usr/bin/python3 skia/bin/fetch-gn
    • Build-time code ran a program downloaded during the buildfrom storage.googleapis.com:443by gn

      ran /home/runner/.cargo/registry/src/index.crates.io-f7c75c5af8568ae3/drawnui-skia-bindings-0.153.7/skia/bin/gn, downloaded during the build by python3 from storage.googleapis.com:443

    subject

Evidence

  • ran /home/runner/.cargo/registry/src/index.crates.io-f7c75c5af8568ae3/drawnui-skia-bindings-0.153.7/skia/bin/gn, downloaded during the build by python3 from storage.googleapis.com:443

Processes

build-test

cargo›cargo›build-script-build›gn›gn

Ran
/home/runner/.cargo/registry/src/index.crates.io-f7c75c5af8568ae3/drawnui-skia-bindings-0.153.7/skia/bin/gn gen /home/runner/work/rust-skia/rust-skia/target/rel…
Invoked by
cargo build --release --locked --message-format=json-render-diagnostics
Lineage · 5 processes
  1. cargocargo build --release --locked --message-format=json-render-diagnostics2488
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo build --release --locked --message-format=json-render-diagnostics2488
  3. build-script-build/home/runner/work/rust-skia/rust-skia/target/release/build/drawnui-skia-bindings-0f48a957fe3e13ed/build-script-build3247
  4. gn/home/runner/.cargo/registry/src/index.crates.io-f7c75c5af8568ae3/drawnui-skia-bindings-0.153.7/skia/bin/gn gen /home/runner/work/rust-skia/rust-skia/target/rel…3644
  5. gn/home/runner/.cargo/registry/src/index.crates.io-f7c75c5af8568ae3/drawnui-skia-bindings-0.153.7/skia/bin/gn gen /home/runner/work/rust-skia/rust-skia/target/rel…3649

Remediation

A dependency's build downloaded a program and ran it, outside anything the registry checksums. Review what the program did, rotate any credential the build could read, and pin or replace the dependency.

Detection

highwitnessed

Build script fetched what the build compiled, linked or ran

Unexpected network connection

Subject
drawnui-skia-bindings 0.153.7
Destination
github.com:443, codeload.github.com:443, skia.googlesource.com:443, chrome-infra-packages.appspot.com:443, storage.googleapis.com:443
Jobs
build-test
Rule
egress

Evidence

  1. Connection outside the process’s allowed destinationscause

    connection to github.com:443, opened by curl

    subject github.com:443

    by curl -L -f -sS -C - --create-dirs --output /home/runner/work/rust-skia/rust-skia/target/release/build/drawnui-skia-bindings-620c024d693cfa0f/out/.cache/skia-bin…

  2. Connection outside the process’s allowed destinationscause

    connection to codeload.github.com:443, opened by curl

    subject codeload.github.com:443

    by curl -L -f -sS https://codeload.github.com/rust-skia/skia/tar.gz/m153-0.101.2

  3. Connection outside the process’s allowed destinationscause

    connection to skia.googlesource.com:443, opened by git

    subject skia.googlesource.com:443

    by /usr/lib/git-core/git remote-https origin https://skia.googlesource.com/external/github.com/GPUOpen-LibrariesAndSDKs/D3D12MemoryAllocator.git

  4. Connection outside the process’s allowed destinationscause

    connection to skia.googlesource.com:443, opened by git-remote-http

    subject skia.googlesource.com:443

    by /usr/lib/git-core/git-remote-https https://chromium.googlesource.com/chromium/src/third_party/freetype2.git https://chromium.googlesource.com/chromium/src/third…

  5. Connection outside the process’s allowed destinationscause

    connection to chrome-infra-packages.appspot.com:443, opened by python3.14

    subject chrome-infra-packages.appspot.com:443

    by /usr/bin/python3 skia/bin/fetch-gn

  6. Connection outside the process’s allowed destinationscause

    connection to storage.googleapis.com:443, opened by python3.14

    subject storage.googleapis.com:443

    by /usr/bin/python3 skia/bin/fetch-gn

  7. What a build script's fetch becamesupport

    11894 files came down; the build compiled or linked and ran gn

  8. Connection opened by a build script or child processsupport

    the opener descends from the build script at /home/runner/work/rust-skia/rust-skia/target/release/build/drawnui-skia-bindings-0f48a957fe3e13ed/build_script_build-0f48a957fe3e13ed

  9. Tool commandsupport

    Command: curl -L -f -sS -C - --create-dirs --output /home/runner/work/rust-skia/rust-skia/target/release/build/drawnui-skia-bindings-620c024d693cfa0f/out/.cache/skia-bin…

    by curl -L -f -sS -C - --create-dirs --output /home/runner/work/rust-skia/rust-skia/target/release/build/drawnui-skia-bindings-620c024d693cfa0f/out/.cache/skia-bin…

  10. Tool commandsupport

    Command: curl -L -f -sS https://codeload.github.com/rust-skia/skia/tar.gz/m153-0.101.2

    by curl -L -f -sS https://codeload.github.com/rust-skia/skia/tar.gz/m153-0.101.2

  11. Tool commandsupport

    Command: /usr/lib/git-core/git remote-https origin https://skia.googlesource.com/external/github.com/GPUOpen-LibrariesAndSDKs/D3D12MemoryAllocator.git

    by /usr/lib/git-core/git remote-https origin https://skia.googlesource.com/external/github.com/GPUOpen-LibrariesAndSDKs/D3D12MemoryAllocator.git

  12. Tool commandsupport

    Command: /usr/lib/git-core/git-remote-https https://chromium.googlesource.com/chromium/src/third_party/freetype2.git https://chromium.googlesource.com/chromium/src/third…

    by /usr/lib/git-core/git-remote-https https://chromium.googlesource.com/chromium/src/third_party/freetype2.git https://chromium.googlesource.com/chromium/src/third…

  13. Tool commandsupport

    Command: /usr/bin/python3 skia/bin/fetch-gn

    by /usr/bin/python3 skia/bin/fetch-gn

What came before it

Loading the graph

Processes

build-test

cargo›cargo›build-script-build›curl

Ran
curl -L -f -sS -C - --create-dirs --output /home/runner/work/rust-skia/rust-skia/target/release/build/drawnui-skia-bindings-620c024d693cfa0f/out/.cache/skia-bin…
Invoked by
cargo build --release --locked --message-format=json-render-diagnostics
Lineage · 4 processes
  1. cargocargo build --release --locked --message-format=json-render-diagnostics2488
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo build --release --locked --message-format=json-render-diagnostics2488
  3. build-script-build/home/runner/work/rust-skia/rust-skia/target/release/build/drawnui-skia-bindings-0f48a957fe3e13ed/build-script-build3247
  4. curlcurl -L -f -sS -C - --create-dirs --output /home/runner/work/rust-skia/rust-skia/target/release/build/drawnui-skia-bindings-620c024d693cfa0f/out/.cache/skia-bin…3251

Remediation

A dependency's build downloaded files the build then compiled, linked or ran, outside anything the registry checksums. Review what came down, pin or replace the dependency, or record the download as accepted once it is reviewed.

Network

6 peers
  • chrome-infra-packages.appspot.com:443 build code of drawnui-skia-bindings · python3.14 · Google LLC · 4 files undeclared
  • codeload.github.com:443 build code of drawnui-skia-bindings · curl · GitHub, Inc. · 11,708 files undeclared
  • github.com:443 build code of drawnui-skia-bindings · curl · GitHub, Inc. · 11,708 files undeclared
  • skia.googlesource.com:443 build code of drawnui-skia-bindings · git; git-remote-http · Google LLC · 182 files undeclared
  • storage.googleapis.com:443 build code of drawnui-skia-bindings · python3.14 · Google LLC · 4 files undeclared
  • static.crates.io:8080 the package manager · cargo (rust-skia) via crates.io · 19,526 files · went into an output ecosystem
Dependencies306Build behaviour
ab_glyph0.2.32
ab_glyph_rasterizer0.1.10
adler22.0.1
aes0.9.2
ahash0.8.12build script
aho-corasick1.1.5
android-activity0.6.1build script, not run
android-properties0.2.2
anyhow1.0.104build script, not run
arrayref0.3.9
arrayvec0.7.8
as-raw-xcb-connection1.0.1
ash0.38.0+1.3.281build script
atomic-waker1.1.2
bindgen0.72.1build script
bitflags1.3.2
bitflags2.13.2
block-buffer0.12.1
block20.5.1
bumpalo3.20.3
bytemuck1.25.2
bytemuck_derive1.12.1proc macro
bytes1.12.1
bzip20.6.1
calloop0.13.0
calloop-wayland-source0.3.0
cc1.9.0
cexpr0.6.0
cfg-if1.0.5
cfg_aliases0.2.2
cgl0.3.2
cipher0.5.2
clang-sys1.9.1build script
cmov0.5.4
combine4.6.9
concurrent-queue2.5.0
const-oid0.10.2
constant_time_eq0.4.2
core-foundation0.9.4
core-foundation-sys0.8.7
core-graphics0.23.2
core-graphics-types0.1.3
cpubits0.1.1
cpufeatures0.3.1
crc32fast1.5.3build script
crossbeam-queue0.3.14
crossbeam-utils0.8.23build script
crunchy0.2.4build script, not run
crypto-common0.2.2
ctutils0.4.2
cursor-icon1.2.0
deflate640.1.12
deranged0.5.9
digest0.11.3
dispatch0.2.0
dispatch20.3.1
dlib0.5.3
downcast-rs1.2.1
dpi0.1.2
drawnui-skia-bindings0.153.7build scriptnetworkruns toolschrome-infra-packages.appspot.com, codeload.github.com, github.com, skia.googlesource.com, storage.googleapis.com, curl, git
either1.19.0
equivalent1.0.3
errno0.3.14
filetime0.2.29
find-msvc-tools0.1.15
flate21.1.10
foldhash0.1.5
foreign-types0.5.0
foreign-types-macros0.2.4proc macro
foreign-types-shared0.3.1
futures-core0.3.34
futures-executor0.3.34
futures-task0.3.34
futures-util0.3.34
gethostname1.1.0
getrandom0.3.4build script
getrandom0.4.3build script
gl0.14.0build script, not run
gl_generator0.14.0
glob0.3.4
glutin0.32.3build script
glutin-winit0.5.0build script, not run
glutin_egl_sys0.7.1build script
glutin_glx_sys0.6.1build script
glutin_wgl_sys0.6.1build script, not run
half2.7.1
hashbrown0.17.1
heck0.4.1
heck0.5.0
hermit-abi0.5.3
hmac0.13.0
hybrid-array0.4.15
indexmap2.14.2
inout0.2.5
itertools0.13.0
itoa1.0.18
jni0.22.4build script, not run
jni-macros0.22.4build script, not runproc macro
jni-sys0.3.1build script, not run
jni-sys0.4.1
jni-sys-macros0.4.1proc macro
jobserver0.1.35
js-sys0.3.106
khronos_api3.1.0build script
ld-linux-x86-64.so.2system library
libbz2-rs-sys0.2.5
libc0.2.191build script
libc.so.6system library
libgcc_s.so.1system library
libloading0.8.9
libm.so.6system library
libmvec.so.1system library
libredox0.1.25
linux-raw-sys0.12.1
linux-raw-sys0.4.15
lock_api0.4.14
log0.4.34
lzma-rust20.16.5
memchr2.8.3
memmap20.9.11
minimal-lexical0.2.1
miniz_oxide0.9.1
ndk0.9.0
ndk-context0.1.1
ndk-sys0.6.0+11769913
nom7.1.3
num-conv0.2.2
num_enum0.7.6
num_enum_derive0.7.6proc macro
objc-sys0.3.5build script, not run
objc20.5.3
objc20.6.5build script, not run
objc2-app-kit0.2.2
objc2-app-kit0.3.2
objc2-cloud-kit0.2.2
objc2-contacts0.2.2
objc2-core-data0.2.2
objc2-core-foundation0.3.2
objc2-core-image0.2.2
objc2-core-location0.2.2
objc2-encode4.1.0
objc2-foundation0.2.2
objc2-foundation0.3.2
objc2-link-presentation0.2.2
objc2-metal0.2.2
objc2-metal0.3.2
objc2-quartz-core0.2.2
objc2-quartz-core0.3.2
objc2-symbols0.2.2
objc2-ui-kit0.2.2
objc2-ui-kit0.3.2
objc2-uniform-type-identifiers0.2.2
objc2-user-notifications0.2.2
once_cell1.21.4
orbclient0.3.55build script, not run
owned_ttf_parser0.25.1
parking_lot0.12.5
parking_lot_core0.9.12build script
pbkdf20.13.0
percent-encoding2.3.2
pin-project1.1.13
pin-project-internal1.1.13proc macro
pin-project-lite0.2.17
pkg-config0.3.34
plain0.2.3
polling3.11.0
powerfmt0.2.1
ppmd-rust1.5.1
prettyplease0.2.37build script
proc-macro-crate3.5.0
proc-macro21.0.107build script
quick-xml0.41.0
quote1.0.47build script
r-efi5.3.0
r-efi6.0.0
raw-window-handle0.6.2
raw-window-metal1.1.0
redox_syscall0.4.1
redox_syscall0.5.18
redox_syscall0.9.5
regex1.13.1
regex-automata0.4.18
regex-syntax0.8.11
rustc-hash2.1.3
rustc_version0.4.1
rustix0.38.44build script
rustix1.1.5build script
rustversion1.0.23build script, not runproc macro
same-file1.0.6
scoped-tls1.0.1
scopeguard1.2.0
sctk-adwaita0.10.1
semver1.0.28
serde1.0.229build script
serde_core1.0.229build script
serde_derive1.0.229proc macro
serde_json1.0.154build script
serde_spanned1.1.2
serial_test4.0.1
serial_test_derive4.0.1proc macro
sha10.11.0
sha20.11.0
shlex1.3.0
shlex2.0.1
simd-adler320.3.10
simd_cesu81.2.0
simdutf80.1.5
slab0.4.12
slabbin1.2.0
smallvec1.16.3
smithay-client-toolkit0.19.2build script
smol_str0.2.2
static_assertions1.1.0
strict-num0.1.1
syn2.0.119
syn3.0.9
tar0.4.46
thiserror1.0.69build script
thiserror2.0.21build script
thiserror-impl1.0.69proc macro
thiserror-impl2.0.21proc macro
thread_local1.1.10
time0.3.55
time-core0.1.9
tiny-skia0.11.4
tiny-skia-path0.11.4
tokio1.54.0
toml1.1.8+spec-1.1.0
toml_datetime1.1.2+spec-1.1.0
toml_edit0.25.17+spec-1.1.0
toml_parser1.1.5+spec-1.1.0
toml_writer1.1.3+spec-1.1.0
tracing0.1.44
tracing-core0.1.36
ttf-parser0.25.1
typed-path0.12.4
typenum1.20.1
unicode-ident1.0.27
unicode-segmentation1.13.3
version_check0.9.5
vk-parse0.15.0
vulkano0.35.2build script, not run
vulkano-macros0.35.0proc macro
walkdir2.5.0
wasip21.0.1+wasi-0.2.4
wasm-bindgen0.2.129build script, not run
wasm-bindgen-futures0.4.79
wasm-bindgen-macro0.2.129proc macro
wasm-bindgen-macro-support0.2.129
wasm-bindgen-shared0.2.129build script, not run
wayland-backend0.3.17build script
wayland-client0.31.15build script
wayland-csd-frame0.3.0
wayland-cursor0.31.14
wayland-protocols0.32.12
wayland-protocols-plasma0.3.12
wayland-protocols-wlr0.3.12
wayland-scanner0.31.11proc macro
wayland-sys0.31.11build script
web-sys0.3.106
web-time1.1.0
winapi-util0.1.11
windows0.62.2
windows-collections0.3.2
windows-core0.62.2
windows-future0.3.2
windows-implement0.60.2proc macro
windows-interface0.59.3proc macro
windows-link0.2.1
windows-numerics0.3.1
windows-result0.4.1
windows-strings0.5.1
windows-sys0.52.0
windows-sys0.59.0
windows-sys0.61.2
windows-targets0.52.6
windows-threading0.2.1
windows_aarch64_gnullvm0.52.6build script, not runprebuilt objects
windows_aarch64_msvc0.52.6build script, not runprebuilt objects
windows_i686_gnu0.52.6build script, not runprebuilt objects
windows_i686_gnullvm0.52.6build script, not runprebuilt objects
windows_i686_msvc0.52.6build script, not runprebuilt objects
windows_x86_64_gnu0.52.6build script, not runprebuilt objects
windows_x86_64_gnullvm0.52.6build script, not runprebuilt objects
windows_x86_64_msvc0.52.6build script, not runprebuilt objects
winit0.30.13build script
winnow1.0.4
wit-bindgen0.46.0build script, not runprebuilt objects
x11-dl2.21.0build script
x11rb0.13.2
x11rb-protocol0.13.2
xattr1.6.1
xcursor0.3.11
xkbcommon-dl0.4.2
xkeysym0.2.1
xml-rs0.8.29
zerocopy0.8.63build script
zerocopy-derive0.8.63proc macro
zeroize1.9.1
zip8.6.0
zlib-rs0.6.8
zmij1.0.23build script
zopfli0.8.3
zstd0.13.3
zstd-safe7.3.0build script
zstd-sys2.1.2+zstd.1.5.7build script
Versions5RiskVulnsPublished
0.153.7did not build1d ago
0.153.6not analyzed2026-10-06
0.153.5not analyzed2026-10-06
0.153.4not analyzed2026-10-06
0.153.3not analyzed2026-10-06

Raw data

capture
1.6 MB
records
202,220
bytes per record
7.9

Loading a sample of the capture

Want to see more? E-mail us at hello@bitbison.io about your use case.

1 of 1 jobs captured: build-test failure · Generated 2026-10-21 · run 43d08a4e-977b-4fae-bd21-ab53ef2fd9cd

analysis 0.1.0 · 2026-10-21 · bee3716 · graph v2