Skip to content
Open-Source Registry

cargo / eckit-sys

eckit-sys 2.5.0

bitbison: flagged, behavior flagged, dependencies clean, posture not checked, pipeline clean, 1 of 1 jobs captured 1 detection
processes
495
operations
216K
packages
48
compiler runs
868
connections
2
job time
3m 12s
capture
635 KB
records
266K
bytes / record
2.4

FFI bindings to ECMWF eckit C++ library

Build behaviourits build script reached github.comits build script ran gitundeclared fetchfetch went into the outputfetched outside crates.iocompiled C/C++

56 downloads · Apache-2.0 · published 2026-10-13 · source · crates.io geoweathermeteorologyecmwf

Artifact

file · retained · product · graph v2
1

Checks

13 of 14 clear Network activity
Build behavior▲✓✓✓✓✓✓✓
Supply chain✓✓✓✓✓
Pipeline✓

Detections

1
  • Build script fetched what the build compiled, linked or ran
    eckit-sys 2.5.0 › github.com:443
    high

Detection

highwitnessed

Build script fetched what the build compiled, linked or ran

Unexpected network connection

Subject
eckit-sys 2.5.0
Destination
github.com:443
Reaches
Jobs
build-test
Rule
egress

Evidence

  1. Connection outside the process’s allowed destinationscause

    connection to github.com:443, opened by git-remote-http

    subject github.com:443

    by /usr/lib/git-core/git-remote-https origin https://github.com/ecmwf/ecbuild.git

  2. What a build script's fetch becamesupport

    578 files came down; the build compiled or linked dso1.c, dso2.c, main.c and ran ecbuild

  3. Connection opened by a build script or child processsupport

    the opener descends from the build script at /home/runner/work/eckit/eckit/target/release/build/eckit-sys-2da673b9f2bd3783/build_script_build-2da673b9f2bd3783

  4. Tool commandsupport

    Command: /usr/lib/git-core/git-remote-https origin https://github.com/ecmwf/ecbuild.git

    by /usr/lib/git-core/git-remote-https origin https://github.com/ecmwf/ecbuild.git

Processes

build-test

cargo›cargo›build-script-build›git›git›git-remote-https

Ran
/usr/lib/git-core/git-remote-https origin https://github.com/ecmwf/ecbuild.git
Invoked by
cargo build --release --locked --message-format=json-render-diagnostics
Lineage · 6 processes
  1. cargocargo build --release --locked --message-format=json-render-diagnostics2440
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo build --release --locked --message-format=json-render-diagnostics2440
  3. build-script-build/home/runner/work/eckit/eckit/target/release/build/eckit-sys-2da673b9f2bd3783/build-script-build3185
  4. gitgit clone --depth 1 --branch 3.13.1 https://github.com/ecmwf/ecbuild.git /home/runner/work/eckit/eckit/target/release/build/eckit-sys-9583ac52d1655c8c/out/src/e…3208
  5. git/usr/lib/git-core/git remote-https origin https://github.com/ecmwf/ecbuild.git3187
  6. git-remote-https/usr/lib/git-core/git-remote-https origin https://github.com/ecmwf/ecbuild.git3192

Remediation

A dependency's build downloaded files the build then compiled, linked or ran, outside anything the registry checksums. Review what came down, pin or replace the dependency, or record the download as accepted once it is reviewed.

Network

2 peers
  • github.com:443 eckit-sys's own build code · git-remote-http · GitHub, Inc. · 578 files · went into an output undeclared
  • static.crates.io:8080 the package manager · cargo (eckit) via crates.io · 2,585 files · went into an output ecosystem
Dependencies49Build behaviour
aho-corasick1.1.5
bindman0.2.0proc macro
bindman-build0.2.0
bindman-utils0.2.0
cc1.8.0
codespan-reporting0.13.1
cxx1.0.205build script
cxx-build1.0.205
cxxbridge-flags1.0.205
cxxbridge-macro1.0.205proc macro
equivalent1.0.2
find-msvc-tools0.1.14
foldhash0.2.0
hashbrown0.17.1
heck0.5.0
indexmap2.14.2
itoa1.0.18
ld-linux-x86-64.so.2system library
libc.so.6system library
libgcc_s.so.1system library
libm.so.6system library
libmvec.so.1system library
link-cplusplus1.0.12build script
log0.4.34
memchr2.8.3
proc-macro21.0.107build script
quote1.0.47build script
regex1.13.1
regex-automata0.4.18
regex-syntax0.8.11
scratch1.0.9build script
serde1.0.229build script
serde_core1.0.229build script
serde_derive1.0.229proc macro
serde_json1.0.154build script
shlex2.0.1
syn2.0.119
syn3.0.9
termcolor1.4.1
tree-sitter0.23.2build script
tree-sitter-cpp0.23.4build script
tree-sitter-language0.1.9build script
tree-sitter-rust0.23.3build script
unicode-ident1.0.27
unicode-width0.2.2
winapi-util0.1.11
windows-link0.2.1
windows-sys0.61.2
zmij1.0.23build script

Raw data

capture
635 KB
records
266,467
bytes per record
2.4

Loading a sample of the capture

Want to see more? E-mail us at hello@bitbison.io about your use case.

1 of 1 jobs captured: build-test success · Generated 2026-10-14 · run d129a0c2-2bdd-4675-839e-6b5bb0f1b07c

analysis 0.1.0 · 2026-10-14 · afb437c · graph v2