Skip to content
Open-Source Registry

cargo / empyrean-cli / 0.11.0-rc.0

empyrean-cli 0.11.0-rc.0

bitbison: flagged, behavior flagged, dependencies flagged, posture not checked, pipeline clean, 1 of 1 jobs captured RiskhighVulnsmedium
processes
255
operations
50K
packages
230
compiler runs
352
connections
3
build time
6m 05s
job time
6m 05s
capture
686 KB
records
92K
bytes / record
7.4

Build behaviourundeclared fetchfetch went into the outputfetched outside crates.iocompiled C/C++

run 16ddc49f-807b-4289-8a95-240e6ab3aa53 · built 2026-10-19 · complete View on crates.io

Graph

egress · high · in empyrean
2

Checks

11 of 14 clear Network activity Known vulnerabilities +1 more
Build behavior▲✓✓✓✓✓✓✓
Supply chain▲▲✓✓✓
Pipeline✓

Detections

1
  • Build script fetched what the build compiled, linked or ran
    empyrean-sys 0.11.0-rc.0 › github.com:443, release-assets.githubusercontent.com:443
    high

Detection

highwitnessed

Build script fetched what the build compiled, linked or ran

Unexpected network connection

Subject
empyrean-sys 0.11.0-rc.0
Destination
github.com:443, release-assets.githubusercontent.com:443
Reaches
Jobs
build-test
Rule
egress

Evidence

  1. Connection outside the process’s allowed destinationscause

    connection to github.com:443, opened by build-script-build

    subject github.com:443

    by /home/runner/work/empyrean/empyrean/target/release/build/empyrean-sys-85a3af126d8a7425/build-script-build

  2. Connection outside the process’s allowed destinationscause

    connection to release-assets.githubusercontent.com:443, opened by build-script-build

    subject release-assets.githubusercontent.com:443

    by /home/runner/work/empyrean/empyrean/target/release/build/empyrean-sys-85a3af126d8a7425/build-script-build

  3. What a build script's fetch becamesupport

    4 files came down; the build compiled or linked lib_path.rs

  4. Connection opened by a build script or child processsupport

    the opener is the build script at /home/runner/work/empyrean/empyrean/target/release/build/empyrean-sys-85a3af126d8a7425/build-script-build

In empyrean

Loading the graph

Processes

build-test

cargo›cargo›build-script-build

Ran
/home/runner/work/empyrean/empyrean/target/release/build/empyrean-sys-85a3af126d8a7425/build-script-build
Invoked by
cargo build --release --locked --message-format=json-render-diagnostics
Lineage · 3 processes
  1. cargocargo build --release --locked --message-format=json-render-diagnostics2476
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo build --release --locked --message-format=json-render-diagnostics2476
  3. build-script-build/home/runner/work/empyrean/empyrean/target/release/build/empyrean-sys-85a3af126d8a7425/build-script-build4837

Remediation

A dependency's build downloaded files the build then compiled, linked or ran, outside anything the registry checksums. Review what came down, pin or replace the dependency, or record the download as accepted once it is reviewed.

Network

3 peers
  • github.com:443 build code of empyrean-sys · build-script-build · GitHub, Inc. · 4 files · went into an output undeclared
  • release-assets.githubusercontent.com:443 build code of empyrean-sys · build-script-build · Fastly, Inc. · 4 files · went into an output undeclared
  • static.crates.io:8080 the package manager · cargo (empyrean) via crates.io · 13,710 files · went into an output ecosystem
Vulnerabilities1PackageFixSeverity
CVE-2026-43868thrift 0.17.0>=0.23.0medium
Dependencies236Build behaviour
ahash0.8.12build script
aho-corasick1.1.5
alloc-no-stdlib2.0.4
alloc-stdlib0.2.4
anstream1.0.0
anstyle1.0.14
anstyle-parse1.0.0
anstyle-query1.1.5
anyhow1.0.104build script
arrow58.4.0
arrow-arith58.4.0
arrow-array58.4.0
arrow-buffer58.4.0
arrow-cast58.4.0
arrow-csv58.4.0
arrow-data58.4.0
arrow-ipc58.4.0
arrow-json58.4.0
arrow-ord58.4.0
arrow-row58.4.0
arrow-schema58.4.0
arrow-select58.4.0
arrow-string58.4.0
atoi2.0.0
base640.22.1
bitflags2.13.2
brotli8.0.4
brotli-decompressor5.0.3
byteorder1.5.0
bytes1.12.1
cfg-if1.0.5
chrono0.4.45
clap4.6.7
clap_builder4.6.7
clap_lex1.1.1
colorchoice1.0.5
crossterm0.29.0
csv1.4.0
csv-core0.1.13
derive_more2.1.1
empyrean0.11.0-rc.0
empyrean-sys0.11.0-rc.0build scriptnetworkgithub.com, release-assets.githubusercontent.com
equivalent1.0.3
errno0.3.14
flatbuffers25.12.19build script
flate21.1.10
getrandom0.3.4build script
half2.7.1
hashbrown0.17.1
iana-time-zone0.1.65
indexmap2.14.2
integer-encoding3.0.4
is_terminal_polyfill1.70.2
itoa1.0.18
ld-linux-x86-64.so.2system library
lexical-core1.0.6
lexical-parse-float1.0.6
lexical-parse-integer1.0.6
lexical-util1.0.7
lexical-write-float1.0.6
lexical-write-integer1.0.6
libc0.2.191build script
libc.so.6system library
libgcc_s.so.1system library
libloading0.8.9
libm.so.6system library
libmvec.so.1system library
linux-raw-sys0.12.1
lock_api0.4.14
log0.4.34
lz4_flex0.13.1
memchr2.8.3
mio1.2.4
num-bigint0.4.8
num-complex0.4.6
num-integer0.1.47
num-traits0.2.19build script
once_cell1.21.4
ordered-float2.10.1
parking_lot0.12.5
parking_lot_core0.9.12build script
parquet58.4.0
regex1.13.1
regex-automata0.4.18
regex-syntax0.8.11
rustix1.1.5build script
ryu1.0.23
scopeguard1.2.0
serde1.0.229build script
serde_core1.0.229build script
serde_json1.0.154build script
signal-hook0.3.18build script
signal-hook-mio0.2.5
signal-hook-registry1.4.8
simdutf80.1.5
smallvec1.16.3
snap1.1.2build script
strsim0.11.1
thrift0.17.0
twox-hash2.1.5
utf8parse0.2.2
zerocopy0.8.63build script
zlib-rs0.6.8
zmij1.0.23build script
zstd0.13.3
zstd-safe7.3.0build script
zstd-sys2.1.2+zstd.1.5.7build script
adler22.0.1
crc32fast1.5.2build script
libm0.2.16build script
miniz_oxide0.9.1
simd-adler320.3.10
unicode-ident1.0.27
android_system_properties0.1.6
anstyle-wincon3.0.11
autocfg1.5.1
block-buffer0.10.4
bumpalo3.20.3
cc1.8.0
clap_derive4.6.7proc macro
const-random0.1.18
const-random-macro0.1.16proc macro
convert_case0.10.0
core-foundation-sys0.8.7
cpufeatures0.2.17
crossterm_winapi0.9.1
crunchy0.2.4build script, not run
crypto-common0.1.7
derive_more-impl2.1.1proc macro
digest0.10.7
displaydoc0.2.7proc macro
document-features0.2.12proc macro
fastrand2.5.0
filetime0.2.29
find-msvc-tools0.1.14
form_urlencoded1.2.2
futures-core0.3.34
futures-task0.3.34
futures-util0.3.34
generic-array0.14.7build script
getrandom0.2.17
getrandom0.4.3build script
heck0.5.0
iana-time-zone-haiku0.1.2build script, not run
icu_collections2.3.0
icu_locale_core2.3.0
icu_normalizer2.3.0
icu_normalizer_data2.3.0build script
icu_properties2.3.0
icu_properties_data2.3.0build script
icu_provider2.3.1
idna1.1.0
idna_adapter1.2.2
jobserver0.1.35
js-sys0.3.106
litemap0.8.3
litrs1.0.1
once_cell_polyfill1.70.2
paste1.0.15build scriptproc macro
percent-encoding2.3.2
pin-project-lite0.2.17
pkg-config0.3.34
potential_utf0.1.6
proc-macro21.0.107build script
quote1.0.47build script
r-efi5.3.0
r-efi6.0.0
redox_syscall0.5.18
ring0.17.14build scriptprebuilt objects
rustc_version0.4.1
rustls0.23.46build script
rustls-pki-types1.15.1
rustls-webpki0.103.15
rustversion1.0.23build script, not runproc macro
semver1.0.28
seq-macro0.3.6proc macro
serde_derive1.0.229proc macro
sha20.10.9
shlex2.0.1
slab0.4.12
stable_deref_trait1.2.1
subtle2.6.1
syn2.0.119
syn3.0.9
synstructure0.14.0
tar0.4.46
tempfile3.27.0
tiny-keccak2.0.2build script, not run
tinystr0.8.4
typenum1.20.1
unicode-segmentation1.13.3
untrusted0.9.0
ureq2.12.1
url2.5.8
utf8_iter1.0.4
version_check0.9.5
wasi0.11.1+wasi-snapshot-preview1
wasip21.0.4+wasi-0.2.12
wasm-bindgen0.2.129build script, not run
wasm-bindgen-macro0.2.129proc macro
wasm-bindgen-macro-support0.2.129
wasm-bindgen-shared0.2.129build script, not run
webpki-roots0.26.11
webpki-roots1.0.9
winapi0.3.9build script, not run
winapi-i686-pc-windows-gnu0.4.0build script, not runprebuilt objects
winapi-x86_64-pc-windows-gnu0.4.0build script, not runprebuilt objects
windows-core0.62.2
windows-implement0.60.2proc macro
windows-interface0.59.3proc macro
windows-link0.2.1
windows-result0.4.1
windows-strings0.5.1
windows-sys0.52.0
windows-sys0.61.2
windows-targets0.52.6
windows_aarch64_gnullvm0.52.6build script, not runprebuilt objects
windows_aarch64_msvc0.52.6build script, not runprebuilt objects
windows_i686_gnu0.52.6build script, not runprebuilt objects
windows_i686_gnullvm0.52.6build script, not runprebuilt objects
windows_i686_msvc0.52.6build script, not runprebuilt objects
windows_x86_64_gnu0.52.6build script, not runprebuilt objects
windows_x86_64_gnullvm0.52.6build script, not runprebuilt objects
windows_x86_64_msvc0.52.6build script, not runprebuilt objects
wit-bindgen0.57.1build script, not runprebuilt objects
writeable0.6.4
xattr1.6.1
yoke0.8.3
yoke-derive0.8.4proc macro
zerocopy-derive0.8.63proc macro
zerofrom0.1.8
zerofrom-derive0.1.8proc macro
zeroize1.9.1
zerotrie0.2.5
zerovec0.11.8
zerovec-derive0.11.6proc macro
Versions17RiskVulnsPublished
0.10.0not analyzed2026-08-21
0.10.0-rc.2not analyzed2026-08-20
0.10.0-rc.1not analyzed2026-08-15
0.10.0-rc.0not analyzed2026-08-15
0.9.0not analyzed2026-07-22
0.9.0-rc.0not analyzed2026-07-21
0.8.2not analyzed2026-07-12
0.8.1not analyzed2026-07-10
0.8.0not analyzed2026-07-09
0.8.0-rc.1not analyzed2026-07-05
0.7.0not analyzed2026-07-04
0.7.0-rc.4not analyzed2026-06-25
0.7.0-rc.3not analyzed2026-06-24
0.7.0-rc.2not analyzed2026-06-23
0.7.0-rc.1not analyzed2026-06-23
0.7.0-rc.0not analyzed2026-06-23
0.11.0-rc.0highmedium

Raw data

capture
686 KB
records
92,330
bytes per record
7.4

Loading a sample of the capture

Want to see more? E-mail us at hello@bitbison.io about your use case.

1 of 1 jobs captured: build-test success · Generated 2026-10-19 · run 16ddc49f-807b-4289-8a95-240e6ab3aa53

analysis 0.1.0 · 2026-10-17 · 0abbde9 · graph v2