Skip to content
Open-Source Registry

cargo / fastatomstruct-analysis

fastatomstruct-analysis 2.0.0

bitbison: flagged, behavior flagged, dependencies notes, posture not checked, pipeline clean, 1 of 1 jobs captured RiskhighVulnsnone
processes
1,350
operations
1M
packages
294
compiler runs
152
connections
3
build time
16m 18s
job time
16m 18s
capture
4.4 MB
records
2M
bytes / record
2.4

Trajectory analyses for fastatomstruct: RDF, MSD, phonons, bond order, four-point correlation, etc.

Build behaviourundeclared fetchfetch went into the outputfetched outside crates.iocompiled C/C++

9 downloads · GPL-3.0-or-later · published 2026-10-20 · source · home page analysismolecular-dynamicsmsdphononsrdf View on crates.io

Graph

egress · high · in libfastatomstruct_analysis.rlib
2

Checks

11 of 14 clear Network activity Build script activity +1 more
Build behavior▲✓✓✓▲✓✓✓
Supply chain✓▲✓✓✓
Pipeline✓

Detections

2
  • Build script ran a program it downloaded
    openblas-src 0.10.16 › release-assets.githubusercontent.com:443
    high
  • Build script fetched what the build compiled, linked or ran
    openblas-src 0.10.16 › github.com:443, release-assets.githubusercontent.com:443
    high

Detection

highwitnessed

Build script ran a program it downloaded

Unexpected build script activity

Subject
openblas-src 0.10.16
Destination
release-assets.githubusercontent.com:443
Jobs
build-test, build-test
Rule
buildscript · fastatomstruct-analysis

Witness chain

  1. release-assets.githubusercontent.com:443
    source
  2. /home/runner/work/fastatomstruct-analysis/fastatomstruct-analysis/target/release/build/openblas-src-f347848d6625eb78/out/OpenBLAS-0.3.32/c_checkvia /home/runner/work/fastatomstruct-analysis/fastatomstruct-analysis/target/release/build/openblas-src-78838f5bc532416f/build-script-build
    • Build-time code ran a program downloaded during the buildfrom release-assets.githubusercontent.com:443by c_check

      ran /home/runner/work/fastatomstruct-analysis/fastatomstruct-analysis/target/release/build/openblas-src-f347848d6625eb78/out/OpenBLAS-0.3.32/c_check, downloaded during the build by build-script-build from release-assets.githubusercontent.com:443

    subject
  3. build
    artifact

Evidence

  • ran /home/runner/work/fastatomstruct-analysis/fastatomstruct-analysis/target/release/build/openblas-src-f347848d6625eb78/out/OpenBLAS-0.3.32/c_check, downloaded during the build by build-script-build from release-assets.githubusercontent.com:443

Processes

build-test

cargo›cargo›build-script-build›…›sh›c_check

Ran
/home/runner/work/fastatomstruct-analysis/fastatomstruct-analysis/target/release/build/openblas-src-f347848d6625eb78/out/OpenBLAS-0.3.32/c_check
Invoked by
cargo build --release --locked --message-format=json-render-diagnostics
Lineage · 9 processes
  1. cargocargo build --release --locked --message-format=json-render-diagnostics2488
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo build --release --locked --message-format=json-render-diagnostics2488
  3. build-script-build/home/runner/work/fastatomstruct-analysis/fastatomstruct-analysis/target/release/build/openblas-src-78838f5bc532416f/build-script-build4330
  4. makemake NO_SHARED=1 all4415
  5. sh/bin/sh -c make -C . -f Makefile.prebuild CC="cc" FC="f77" HOSTCC="cc" HOST_CFLAGS="-march=native -DGEMM_MULTITHREAD_THRESHOLD=4 -DNO_PARALLEL_MAKE=0" CFLAGS=""…4418
  6. makemake -C . -f Makefile.prebuild CC=cc FC=f77 HOSTCC=cc HOST_CFLAGS=-march=native -DGEMM_MULTITHREAD_THRESHOLD=4 -DNO_PARALLEL_MAKE=0 CFLAGS= BINARY= USE_OPENMP= …4419
  7. sh/bin/sh -c avx512=$(./c_check - - "cc" | grep NO_AVX512); \ rv64gv=$(./c_check - - "cc" | grep NO_RV64GV); \ cc -march=native -DGEMM_MULTITHREAD_THRESHOLD=4…4420
  8. sh/bin/sh ./c_check - - cc4422
  9. c_check4733

build-test

cargo›cargo›build-script-build›…›sh›f_check

Ran
/home/runner/work/fastatomstruct-analysis/fastatomstruct-analysis/target/release/build/openblas-src-f347848d6625eb78/out/OpenBLAS-0.3.32/f_check
Invoked by
cargo build --release --locked --message-format=json-render-diagnostics
Lineage · 9 processes
  1. cargocargo build --release --locked --message-format=json-render-diagnostics2488
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo build --release --locked --message-format=json-render-diagnostics2488
  3. build-script-build/home/runner/work/fastatomstruct-analysis/fastatomstruct-analysis/target/release/build/openblas-src-78838f5bc532416f/build-script-build4330
  4. makemake NO_SHARED=1 all4415
  5. sh/bin/sh -c make -C . -f Makefile.prebuild CC="cc" FC="f77" HOSTCC="cc" HOST_CFLAGS="-march=native -DGEMM_MULTITHREAD_THRESHOLD=4 -DNO_PARALLEL_MAKE=0" CFLAGS=""…4418
  6. makemake -C . -f Makefile.prebuild CC=cc FC=f77 HOSTCC=cc HOST_CFLAGS=-march=native -DGEMM_MULTITHREAD_THRESHOLD=4 -DNO_PARALLEL_MAKE=0 CFLAGS= BINARY= USE_OPENMP= …4419
  7. sh/bin/sh -c ./f_check Makefile.conf config.h "f77" 6078
  8. sh/bin/sh ./f_check Makefile.conf config.h f776079
  9. f_check6081

Remediation

A dependency's build downloaded a program and ran it, outside anything the registry checksums. Review what the program did, rotate any credential the build could read, and pin or replace the dependency.

Detection

highwitnessed

Build script fetched what the build compiled, linked or ran

Unexpected network connection

Subject
openblas-src 0.10.16
Destination
github.com:443, release-assets.githubusercontent.com:443
Reaches
Jobs
build-test
Rule
egress · fastatomstruct-analysis

Evidence

  1. Connection outside the process’s allowed destinationscause

    connection to github.com:443, opened by build-script-build

    subject github.com:443

    by /home/runner/work/fastatomstruct-analysis/fastatomstruct-analysis/target/release/build/openblas-src-78838f5bc532416f/build-script-build

  2. Connection outside the process’s allowed destinationscause

    connection to release-assets.githubusercontent.com:443, opened by build-script-build

    subject release-assets.githubusercontent.com:443

    by /home/runner/work/fastatomstruct-analysis/fastatomstruct-analysis/target/release/build/openblas-src-78838f5bc532416f/build-script-build

  3. What a build script's fetch becamesupport

    12563 files came down; the build compiled or linked cblas.h, common.h, common_b.h +5326 more and ran c_check, f_check

  4. Connection opened by a build script or child processsupport

    the opener is the build script at /home/runner/work/fastatomstruct-analysis/fastatomstruct-analysis/target/release/build/openblas-src-78838f5bc532416f/build-script-build

In libfastatomstruct_analysis.rlib

Loading the graph

Processes

build-test

cargo›cargo›build-script-build

Ran
/home/runner/work/fastatomstruct-analysis/fastatomstruct-analysis/target/release/build/openblas-src-78838f5bc532416f/build-script-build
Invoked by
cargo build --release --locked --message-format=json-render-diagnostics
Lineage · 3 processes
  1. cargocargo build --release --locked --message-format=json-render-diagnostics2488
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo build --release --locked --message-format=json-render-diagnostics2488
  3. build-script-build/home/runner/work/fastatomstruct-analysis/fastatomstruct-analysis/target/release/build/openblas-src-78838f5bc532416f/build-script-build4330

Remediation

A dependency's build downloaded files the build then compiled, linked or ran, outside anything the registry checksums. Review what came down, pin or replace the dependency, or record the download as accepted once it is reviewed.

Network

3 peers
  • github.com:443 build code of openblas-src · build-script-build (fastatomstruct-analysis) · GitHub, Inc. · 12,563 files · went into an output undeclared
  • release-assets.githubusercontent.com:443 build code of openblas-src · build-script-build (fastatomstruct-analysis) · Fastly, Inc. · 12,563 files · went into an output undeclared
  • static.crates.io:8080 the package manager · cargo (fastatomstruct-analysis) via crates.io · 37,941 files · went into an output ecosystem
Dependencies314Build behaviour
addr2line0.25.1
adler22.0.1
ahash0.8.12build script
aho-corasick1.1.5
aligned-vec0.6.4
anes0.1.6
anstyle1.0.14
anyhow1.0.104build script
approx0.5.1
arrayref0.3.9
arrayvec0.7.8
autocfg1.5.1
backtrace0.3.76
base640.22.1
base640.23.1
bincode1.3.3
bitflags1.3.2
bitflags2.13.2
blas-src0.14.0build script
bumpalo3.20.3
by_address1.2.1
bytemuck1.25.2
bytemuck_derive1.12.1proc macro
byteorder1.5.0
byteorder-lite0.1.0
bytes1.12.1
cast0.3.0
cauchy0.4.0
cblas-sys0.1.4
cc1.9.0
cfg-if1.0.5
chacha200.10.2
ciborium0.2.2
ciborium-io0.2.2
ciborium-ll0.2.2
clap4.6.7
clap_builder4.6.7
clap_lex1.1.1
color_quant1.1.0
core_maths0.1.1
cosmic-text0.16.0
cpp_demangle0.4.5build script
cpufeatures0.3.1
crc32fast1.5.2build script
criterion0.5.1
criterion-plot0.5.0
crossbeam-deque0.8.8build script
crossbeam-epoch0.9.21build script
crossbeam-utils0.8.23build script
crunchy0.2.4build script, not run
ctor0.8.0
ctor-proc-macro0.0.7proc macro
debugid0.8.0
dirs6.0.0
dirs-sys0.5.0
document-features0.2.12proc macro
dtor0.3.0
dtor-proc-macro0.0.6proc macro
either1.19.0
equator0.4.2
equator-macro0.4.2proc macro
equivalent1.0.3
errno0.3.14
fastatomstruct-core2.0.0
fastatomstruct-distance2.0.0
fastatomstruct-plot2.0.0
fastrand2.5.0
fdeflate0.3.7
filetime0.2.29
find-msvc-tools0.1.15
findshlibs0.10.2build script
flate21.1.10
font-types0.10.1
font-types0.12.7
fontconfig-parser0.5.8
fontdb0.23.0
futures-core0.3.34
futures-task0.3.34
futures-util0.3.34
getrandom0.2.17
getrandom0.3.4build script
getrandom0.4.3build script
gif0.14.2
gimli0.32.3
glam0.27.0
glam0.30.10
glam0.31.1
glam0.32.1
glam0.33.12
half2.7.1
harfrust0.4.1
hash320.3.1
hashbrown0.17.1
heapless0.8.0build script
hermit-abi0.5.3
http1.5.0
httparse1.10.1build script
ibig0.3.6
image0.25.10
imageproc0.27.0
indexmap2.14.2
inferno0.11.21
is-terminal0.4.17
iter-log0.2.7
itertools0.10.5
itertools0.14.0
itoa1.0.18
jobserver0.1.35
js-sys0.3.106
katexit0.1.5proc macro
lapack-sys0.15.0
lax0.18.1
lazy_static1.5.1
ld-linux-x86-64.so.2system library
libc0.2.191build script
libc.so.6system library
libgcc_s.so.1system library
libm0.2.16build script
libm.so.6system library
libmvec.so.1system library
libredox0.1.25
linebender_resource_handle0.1.1
linux-raw-sys0.12.1
litrs1.0.1
lock_api0.4.14
log0.4.34
matrixmultiply0.3.11build script
memchr2.8.3
memmap20.9.11
meshless_voronoi0.7.2
miniz_oxide0.8.9
miniz_oxide0.9.1
moxcms0.8.1
nalgebra0.35.0
nalgebra-macros0.3.0proc macro
ndarray0.17.2
ndarray-linalg0.18.1
ndhistogram0.13.0
nix0.26.4
num0.4.3
num-bigint0.4.8
num-complex0.4.6
num-format0.4.4
num-integer0.1.47
num-iter0.1.46
num-rational0.4.2
num-traits0.2.19build script
num_enum0.7.6
num_enum_derive0.7.6proc macro
object0.37.3build script
once_cell1.21.4
oorandom11.1.5
openblas-build0.10.16
openblas-src0.10.16build scriptnetworkgithub.com, release-assets.githubusercontent.com
option-ext0.2.0
oxiblas0.2.2
oxiblas-blas0.2.2
oxiblas-core0.2.2
oxiblas-lapack0.2.2
oxiblas-matrix0.2.2
oxiblas-ndarray0.2.2
oxiblas-sparse0.2.2
palette0.7.7
palette_derive0.7.7proc macro
palette_math0.7.7
percent-encoding2.3.2
phf0.13.1
phf_shared0.13.1
pin-project-lite0.2.17
pkg-config0.3.34
plotters0.3.7
plotters-backend0.3.7
plotters-svg0.3.7
png0.18.1
portable-atomic1.15.0build script, not run
portable-atomic-util0.2.8build script, not run
pprof0.15.0build script
ppv-lite860.2.21
primal-check0.3.4
proc-macro21.0.107build script
pxfm0.1.30
quick-xml0.26.0
quote1.0.47build script
r-efi5.3.0
r-efi6.0.0
rand0.10.3
rand0.8.8
rand_chacha0.10.0
rand_chacha0.3.1
rand_core0.10.1
rand_core0.6.4
rand_distr0.6.0
rangemap1.8.0
rawpointer0.2.1
rayon1.12.0
rayon-core1.13.0build script
read-fonts0.36.0
read-fonts0.41.0
redox_users0.5.3
regex1.13.1
regex-automata0.4.18
regex-syntax0.8.11
rgb0.8.53
ring0.17.14build scriptprebuilt objects
roxmltree0.20.0
rstar0.12.2
rustc-demangle0.1.28
rustc-hash1.1.0
rustc-hash2.1.3
rustfft6.4.1
rustix1.1.5build script
rustls0.23.46build script
rustls-pki-types1.15.1
rustls-webpki0.103.15
rustversion1.0.23build scriptproc macro
ruviz0.15.0
safe_arch1.2.0
same-file1.0.6
scopeguard1.2.0
self_cell1.3.0
serde1.0.229build script
serde_core1.0.229build script
serde_derive1.0.229proc macro
serde_json1.0.154build script
shlex2.0.1
simba0.10.2
simd-adler320.3.10
siphasher1.0.4
skrifa0.39.0
skrifa0.44.0
slab0.4.12
slotmap1.1.1build script
smallvec1.16.3
smol_str0.2.2
spin0.10.1
stable_deref_trait1.2.1
static_assertions1.1.0
str_stack0.1.1
strength_reduce0.2.4
strict-num0.1.1
subtle2.6.1
swash0.2.10
symbolic-common12.18.3
symbolic-demangle12.18.3build script
syn2.0.119
syn3.0.9
sys-locale0.3.2
tar0.4.46
tempfile3.27.0
thiserror2.0.21build script
thiserror-impl2.0.21proc macro
tiny-skia0.12.0
tiny-skia-path0.12.0
tinytemplate1.2.1
tinyvec1.13.3
tracing0.1.44
tracing-attributes0.1.31proc macro
tracing-core0.1.36
transpose0.2.3
ttf-parser0.25.1
typenum1.20.1
unicode-bidi0.3.18
unicode-ident1.0.27
unicode-linebreak0.1.5
unicode-script0.5.8
unicode-segmentation1.13.3
unicode-width0.2.2
untrusted0.9.0
uom0.38.0
ureq3.4.2
ureq-proto0.6.5
utf8-zero0.8.1
uuid1.28.0
vcpkg0.2.15prebuilt objects
version_check0.9.5
walkdir2.5.0
wasi0.11.1+wasi-snapshot-preview1
wasip21.0.4+wasi-0.2.12
wasm-bindgen0.2.129build script, not run
wasm-bindgen-macro0.2.129proc macro
wasm-bindgen-macro-support0.2.129
wasm-bindgen-shared0.2.129build script, not run
web-sys0.3.106
webpki-roots1.0.10
weezl0.1.12
wide1.7.1
winapi0.3.9build script, not run
winapi-i686-pc-windows-gnu0.4.0build script, not runprebuilt objects
winapi-util0.1.11
winapi-x86_64-pc-windows-gnu0.4.0build script, not runprebuilt objects
windows-link0.2.1
windows-sys0.52.0
windows-sys0.61.2
windows-targets0.52.6
windows_aarch64_gnullvm0.52.6build script, not runprebuilt objects
windows_aarch64_msvc0.52.6build script, not runprebuilt objects
windows_i686_gnu0.52.6build script, not runprebuilt objects
windows_i686_gnullvm0.52.6build script, not runprebuilt objects
windows_i686_msvc0.52.6build script, not runprebuilt objects
windows_x86_64_gnu0.52.6build script, not runprebuilt objects
windows_x86_64_gnullvm0.52.6build script, not runprebuilt objects
windows_x86_64_msvc0.52.6build script, not runprebuilt objects
wit-bindgen0.57.1build script, not runprebuilt objects
xattr1.6.1
yazi0.2.1
zeno0.3.3
zerocopy0.8.63build script
zerocopy-derive0.8.63proc macro
zeroize1.9.1
zlib-rs0.6.8
zmij1.0.23build script
zstd0.14.3
zstd-safe8.2.0build script
zstd-sys2.1.2+zstd.1.5.7build script
Versions1RiskVulnsPublished
2.0.0highnone1d ago

Raw data

capture
4.4 MB
records
1,807,700
bytes per record
2.4

Loading a sample of the capture

Want to see more? E-mail us at hello@bitbison.io about your use case.

1 of 1 jobs captured: build-test success · Generated 2026-10-21 · run ef07568c-143f-41dd-a214-dea7c3d30a23

analysis 0.1.0 · 2026-10-21 · bee3716 · graph v2