Skip to content
Open-Source Registry

cargo / fframes-components / 0.1.2

fframes-components 0.1.2

bitbison: no public build not built
processes
284
operations
63K
packages
252
compiler runs
49
connections
3
job time
1m 42s
capture
901 KB
records
117K
bytes / record
7.7

Build behaviourlinked a downloaded binaryfetched outside crates.iocompiled C/C++

run 41361e62-e684-42af-94c4-fad2bb10eb2d · built 2026-10-14 · complete

This release did not build; nothing below stands for the package.

Artifact

library · retained · dependency · graph v2
12

Checks

11 of 14 clear Network activity Data flow analysis +1 more
Build behavior▲✓✓✓✓▲✓✓
Supply chain✓▲✓✓✓
Pipeline✓

Detections

2
  • Build script reached github.com +1
    ffmpeg-sys-fframes 9.0.0 › github.com:443, release-assets.githubusercontent.com:443
    medium
  • 7 prebuilt libraries downloaded by a build script from its documented source
    ffmpeg-sys-fframes 9.0.0 › github.com, release-assets.githubusercontent.com
    medium

Detection

mediumwitnessed

Build script reached github.com +1

Unexpected network connection

Subject
ffmpeg-sys-fframes 9.0.0
Destination
github.com:443, release-assets.githubusercontent.com:443
Jobs
build-test
Rule
egress

Evidence

  1. Connection outside the process’s allowed destinationscause

    connection to github.com:443, opened by curl

    subject github.com:443

    by curl --fail --location --silent --show-error --retry 3 --output /home/runner/.cache/ffmpeg-sys-fframes/binaries-9.0.0/ffmpeg-x86_64-unknown-linux-gnu-avcodec-av…

  2. Connection outside the process’s allowed destinationscause

    connection to release-assets.githubusercontent.com:443, opened by curl

    subject release-assets.githubusercontent.com:443

    by curl --fail --location --silent --show-error --retry 3 --output /home/runner/.cache/ffmpeg-sys-fframes/binaries-9.0.0/ffmpeg-x86_64-unknown-linux-gnu-avcodec-av…

  3. What a build script's fetch becamesupport

    1 file came down; nothing the build compiled, linked or ran

  4. Connection opened by a build script or child processsupport

    the opener descends from the build script at /home/runner/work/fframes-components/fframes-components/target/release/build/ffmpeg-sys-fframes-5e573c9bc3bbee45/build-script-build

  5. Build script fetched what its crate documents it fetchessupport

    ffmpeg-sys-fframes's build script fetches a prebuilt FFmpeg from github.com, release-assets.githubusercontent.com: fframes' ffmpeg-sys fork has its build.rs curl a prebuilt FFmpeg from its GitHub release (observed on the registry, 2026-10-06)

  6. Tool commandsupport

    Command: curl --fail --location --silent --show-error --retry 3 --output /home/runner/.cache/ffmpeg-sys-fframes/binaries-9.0.0/ffmpeg-x86_64-unknown-linux-gnu-avcodec-av…

    by curl --fail --location --silent --show-error --retry 3 --output /home/runner/.cache/ffmpeg-sys-fframes/binaries-9.0.0/ffmpeg-x86_64-unknown-linux-gnu-avcodec-av…

Processes

build-test

cargo›cargo›build-script-build›curl

Ran
curl --fail --location --silent --show-error --retry 3 --output /home/runner/.cache/ffmpeg-sys-fframes/binaries-9.0.0/ffmpeg-x86_64-unknown-linux-gnu-avcodec-av…
Invoked by
cargo build --release --locked --message-format=json-render-diagnostics
Lineage · 4 processes
  1. cargocargo build --release --locked --message-format=json-render-diagnostics2456
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo build --release --locked --message-format=json-render-diagnostics2456
  3. build-script-build/home/runner/work/fframes-components/fframes-components/target/release/build/ffmpeg-sys-fframes-5e573c9bc3bbee45/build-script-build5230
  4. curlcurl --fail --location --silent --show-error --retry 3 --output /home/runner/.cache/ffmpeg-sys-fframes/binaries-9.0.0/ffmpeg-x86_64-unknown-linux-gnu-avcodec-av…5254

Remediation

The crate's build script reached the network at compile time, outside the registry's checksums. Build it from what the registry ships (the crate's own environment variable or from-source feature), or record the download as accepted once it is reviewed.

Detection

mediumwitnessed

7 prebuilt libraries downloaded by a build script from its documented source

Object file origin needs review

Subject
ffmpeg-sys-fframes 9.0.0
Destination
github.com, release-assets.githubusercontent.com
Jobs
build-test
Rule
object-provenance · fframes-components

Witness chain

  1. github.com:443
    source
  2. /home/runner/.cache/ffmpeg-sys-fframes/binaries-9.0.0/ffmpeg-x86_64-unknown-linux-gnu-avcodec-avdevice-avfilter-avformat-swresample-swscale.tar.gzvia curl --fail --location --silent --show-error --retry 3 --output /home/runner/.cache/ffmpeg-sys-fframes/binaries-9.0.0/ffmpeg-x86_64-unknown-linux-gnu-avcodec-av
  3. pipevia gzip -d
  4. /home/runner/work/fframes-components/fframes-components/target/release/build/ffmpeg-sys-fframes-9e2601186eb6d853/out/dist/lib/libavcodec.avia tar -xzf /home/runner/.cache/ffmpeg-sys-fframes/binaries-9.0.0/ffmpeg-x86_64-unknown-linux-gnu-avcodec-avdevice-avfilter-avformat-swresample-swscale.tar.gz -C /
    • Object written under a build script that downloadedfrom github.com · release-assets.githubusercontent.comby build-script-build

      /home/runner/work/fframes-components/fframes-components/target/release/build/ffmpeg-sys-fframes-9e2601186eb6d853/out/dist/lib/libavcodec.a: written under the build script at /home/runner/work/fframes-components/fframes-components/target/release/build/ffmpeg-sys-fframes-5e573c9bc3bbee45/build-script-build, which downloaded from github.com, release-assets.githubusercontent.com

    subject

Evidence

  1. Object written under a build script that downloadedcause

    /home/runner/work/fframes-components/fframes-components/target/release/build/ffmpeg-sys-fframes-9e2601186eb6d853/out/dist/lib/libavdevice.a: written under the build script at /home/runner/work/fframes-components/fframes-components/target/release/build/ffmpeg-sys-fframes-5e573c9bc3bbee45/build-script-build, which downloaded from github.com, release-assets.githubusercontent.com

    subject /home/runner/work/fframes-components/fframes-components/target/release/build/ffmpeg-sys-fframes-9e2601186eb6d853/out/dist/lib/libavdevice.asource github.comsource release-assets.githubusercontent.com

    by /home/runner/work/fframes-components/fframes-components/target/release/build/ffmpeg-sys-fframes-5e573c9bc3bbee45/build-script-build

  2. Object written under a build script that downloadedcause

    /home/runner/work/fframes-components/fframes-components/target/release/build/ffmpeg-sys-fframes-9e2601186eb6d853/out/dist/lib/libavfilter.a: written under the build script at /home/runner/work/fframes-components/fframes-components/target/release/build/ffmpeg-sys-fframes-5e573c9bc3bbee45/build-script-build, which downloaded from github.com, release-assets.githubusercontent.com

    subject /home/runner/work/fframes-components/fframes-components/target/release/build/ffmpeg-sys-fframes-9e2601186eb6d853/out/dist/lib/libavfilter.asource github.comsource release-assets.githubusercontent.com

    by /home/runner/work/fframes-components/fframes-components/target/release/build/ffmpeg-sys-fframes-5e573c9bc3bbee45/build-script-build

  3. Object written under a build script that downloadedcause

    /home/runner/work/fframes-components/fframes-components/target/release/build/ffmpeg-sys-fframes-9e2601186eb6d853/out/dist/lib/libavformat.a: written under the build script at /home/runner/work/fframes-components/fframes-components/target/release/build/ffmpeg-sys-fframes-5e573c9bc3bbee45/build-script-build, which downloaded from github.com, release-assets.githubusercontent.com

    subject /home/runner/work/fframes-components/fframes-components/target/release/build/ffmpeg-sys-fframes-9e2601186eb6d853/out/dist/lib/libavformat.asource github.comsource release-assets.githubusercontent.com

    by /home/runner/work/fframes-components/fframes-components/target/release/build/ffmpeg-sys-fframes-5e573c9bc3bbee45/build-script-build

  4. Object written under a build script that downloadedcause

    /home/runner/work/fframes-components/fframes-components/target/release/build/ffmpeg-sys-fframes-9e2601186eb6d853/out/dist/lib/libavutil.a: written under the build script at /home/runner/work/fframes-components/fframes-components/target/release/build/ffmpeg-sys-fframes-5e573c9bc3bbee45/build-script-build, which downloaded from github.com, release-assets.githubusercontent.com

    subject /home/runner/work/fframes-components/fframes-components/target/release/build/ffmpeg-sys-fframes-9e2601186eb6d853/out/dist/lib/libavutil.asource github.comsource release-assets.githubusercontent.com

    by /home/runner/work/fframes-components/fframes-components/target/release/build/ffmpeg-sys-fframes-5e573c9bc3bbee45/build-script-build

  5. Object written under a build script that downloadedcause

    /home/runner/work/fframes-components/fframes-components/target/release/build/ffmpeg-sys-fframes-9e2601186eb6d853/out/dist/lib/libswresample.a: written under the build script at /home/runner/work/fframes-components/fframes-components/target/release/build/ffmpeg-sys-fframes-5e573c9bc3bbee45/build-script-build, which downloaded from github.com, release-assets.githubusercontent.com

    subject /home/runner/work/fframes-components/fframes-components/target/release/build/ffmpeg-sys-fframes-9e2601186eb6d853/out/dist/lib/libswresample.asource github.comsource release-assets.githubusercontent.com

    by /home/runner/work/fframes-components/fframes-components/target/release/build/ffmpeg-sys-fframes-5e573c9bc3bbee45/build-script-build

  6. Object written under a build script that downloadedcause

    /home/runner/work/fframes-components/fframes-components/target/release/build/ffmpeg-sys-fframes-9e2601186eb6d853/out/dist/lib/libswscale.a: written under the build script at /home/runner/work/fframes-components/fframes-components/target/release/build/ffmpeg-sys-fframes-5e573c9bc3bbee45/build-script-build, which downloaded from github.com, release-assets.githubusercontent.com

    subject /home/runner/work/fframes-components/fframes-components/target/release/build/ffmpeg-sys-fframes-9e2601186eb6d853/out/dist/lib/libswscale.asource github.comsource release-assets.githubusercontent.com

    by /home/runner/work/fframes-components/fframes-components/target/release/build/ffmpeg-sys-fframes-5e573c9bc3bbee45/build-script-build

  7. Build script fetched what its crate documents it fetchessupport

    ffmpeg-sys-fframes's build script fetches a prebuilt FFmpeg from github.com, release-assets.githubusercontent.com: fframes' ffmpeg-sys fork has its build.rs curl a prebuilt FFmpeg from its GitHub release (observed on the registry, 2026-10-06)

Processes

build-test

cargo›cargo›build-script-build›tar

Ran
tar -xzf /home/runner/.cache/ffmpeg-sys-fframes/binaries-9.0.0/ffmpeg-x86_64-unknown-linux-gnu-avcodec-avdevice-avfilter-avformat-swresample-swscale.tar.gz -C /…
Invoked by
cargo build --release --locked --message-format=json-render-diagnostics
Lineage · 4 processes
  1. cargocargo build --release --locked --message-format=json-render-diagnostics2456
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo build --release --locked --message-format=json-render-diagnostics2456
  3. build-script-build/home/runner/work/fframes-components/fframes-components/target/release/build/ffmpeg-sys-fframes-5e573c9bc3bbee45/build-script-build5230
  4. tartar -xzf /home/runner/.cache/ffmpeg-sys-fframes/binaries-9.0.0/ffmpeg-x86_64-unknown-linux-gnu-avcodec-avdevice-avfilter-avformat-swresample-swscale.tar.gz -C /…5270

Remediation

Inspect the writer and input chain. Confirm the object comes from a reviewed build step or declared prebuilt dependency. If its origin cannot be verified, replace it and rebuild.

Network

3 peers
  • github.com:443 build code of ffmpeg-sys-fframes · curl · GitHub, Inc. · 1 file documented
  • release-assets.githubusercontent.com:443 build code of ffmpeg-sys-fframes · curl · Fastly, Inc. · 1 file documented
  • static.crates.io:8080 the package manager · cargo (fframes-components) via crates.io · 26,771 files · went into an output ecosystem
Dependencies268Build behaviour
adler22.0.1
ahash0.8.12build script
aho-corasick1.1.5
aligned0.4.3
aligned-vec0.6.4
allocator-api20.2.21
anyhow1.0.104build script
arbitrary1.5.0
arg_enum_proc_macro0.3.4proc macro
arrayref0.3.9
arrayvec0.7.8
as-slice0.2.1
autocfg1.5.1
av-scenechange0.14.1build script
av1-grain0.2.5
avif-serialize0.8.9
base640.21.7
base640.22.1
bindgen0.72.1build script
bit_field0.10.3
bitflags1.3.2
bitflags2.13.2
bitstream-io4.10.0
built0.8.1
bumpalo3.20.3
bytecount0.6.9
bytemuck1.25.2
bytemuck_derive1.12.1proc macro
byteorder-lite0.1.0
cc1.8.0
cexpr0.6.0
cfg-if1.0.5
clang-sys1.9.1build script
color_quant1.1.0
colored2.2.0
console0.16.6
const_panic0.2.17
crc32fast1.5.2build script
crossbeam-deque0.8.8build script
crossbeam-epoch0.9.21build script
crossbeam-utils0.8.23build script
crunchy0.2.4build script, not run
data-url0.3.2
either1.19.0
either_n0.2.0
encode_unicode1.0.0
equator0.4.2
equator-macro0.4.2proc macro
equivalent1.0.2
euclid0.22.14
exr1.74.2
fax0.2.7
fdeflate0.3.7
ffmpeg-sys-fframes9.0.0build scriptnetworkruns toolsgithub.com, release-assets.githubusercontent.com, curl
fframes1.2.0build script, not run
fframes-media1.2.0
fframes-media-dir-macro1.2.0proc macro
find-msvc-tools0.1.14
flate21.1.10
float-cmp0.9.0
foldhash0.1.5
fontconfig-parser0.5.8
fontdb0.16.2
futures0.3.34
futures-channel0.3.34
futures-core0.3.34
futures-executor0.3.34
futures-io0.3.34
futures-macro0.3.34proc macro
futures-sink0.3.34
futures-task0.3.34
futures-util0.3.34
getrandom0.3.4build script
getrandom0.4.3build script
gif0.12.0
gif0.14.2
glob0.3.4
half2.7.1
hashbrown0.15.5
hashbrown0.17.1
hermit-abi0.5.3
image0.25.10
image-webp0.2.4
imgref1.12.3
indexmap2.14.2
indicatif0.18.6
interpolate_name0.2.4proc macro
itertools0.13.0
itertools0.14.0
itoa1.0.18
jobserver0.1.35
jpeg-decoder0.3.2
js-sys0.3.106
kamadak-exif0.6.1
konst0.3.17
konst_kernel0.3.15
konst_proc_macros0.3.10proc macro
kurbo0.11.3
kurbo0.8.3
lazy_static1.5.1
ld-linux-x86-64.so.2system library
lebe0.5.3
libc0.2.190build script
libc.so.6system library
libfuzzer-sys0.4.13build script, not run
libgcc_s.so.1system library
libloading0.8.9
libm0.2.16build script
libm.so.6system library
libmvec.so.1system library
lock_api0.4.14
log0.4.34
loop90.1.5
lru0.14.0
maybe-rayon0.1.1
memchr2.8.3
memmap0.7.0
memmap20.9.11
microfft0.6.0
minimal-lexical0.2.1
miniz_oxide0.8.9
miniz_oxide0.9.1
moxcms0.8.1
mutate_once0.1.2
new_debug_unreachable1.0.6
no_std_io20.9.4
nom7.1.3
nom8.0.0
nom_locate4.2.0
noop_proc_macro0.3.0proc macro
num0.4.3
num-bigint0.4.8
num-complex0.4.6
num-derive0.4.2proc macro
num-integer0.1.47
num-iter0.1.46
num-rational0.4.2
num-traits0.2.19build script
num_cpus1.17.0
once_cell1.21.4
parking_lot0.12.5
parking_lot_core0.9.12build script
paste1.0.15build scriptproc macro
pastey0.1.1proc macro
pico-args0.5.0
pin-project-lite0.2.17
pkg-config0.3.34
png0.17.16
png0.18.1
portable-atomic1.15.0build script
ppv-lite860.2.21
proc-macro-crate3.5.0
proc-macro21.0.107build script
profiling1.0.18
profiling-procmacros1.0.18proc macro
pulp0.22.3build script
pulp-wasm-simd-flag0.1.1
pxfm0.1.30
qoi0.4.1
quick-error2.0.1
quote1.0.47build script
r-efi5.3.0
r-efi6.0.0
rand0.9.5
rand_chacha0.9.0
rand_core0.9.5
rangemap1.8.0
rav1e0.8.1build script
ravif0.13.0
raw-cpuid11.6.0
rayon1.12.0
rayon-core1.13.0build script
reborrow0.5.5
redox_syscall0.5.18
regex1.13.1
regex-automata0.4.18
regex-syntax0.8.11
rgb0.8.53
roxmltree0.20.0
rust-fuzzy-search0.1.1
rustc-hash2.1.3
rustversion1.0.23build script, not runproc macro
rustybuzz0.12.1
scopeguard1.2.0
self-rust-tokenize0.3.4
self-rust-tokenize-derive0.3.4proc macro
serde1.0.229build script, not run
serde_core1.0.229build script
serde_derive1.0.229proc macro
shlex1.3.0
shlex2.0.1
simd-adler320.3.10
simd_helpers0.1.0proc macro
simplecss0.2.2
siphasher0.3.11
siphasher1.0.4
slab0.4.12
slotmap1.1.1build script
smallvec1.16.3
stable_deref_trait1.2.1
static_assertions1.1.0
strict-num0.1.1
svgr0.46.1
svgr-macro1.2.0proc macro
svgrtypes0.46.1
syn2.0.119
syn3.0.9
syn-helpers0.5.0
thiserror2.0.21build script
thiserror-impl2.0.21proc macro
tiff0.11.3
tiny-skia0.11.4
tiny-skia-path0.11.4
tinyvec1.13.3
toml_datetime1.1.2+spec-1.1.0
toml_edit0.25.17+spec-1.1.0
toml_parser1.1.5+spec-1.1.0
ttf-parser0.20.0
ttf-parser0.25.1
typewit1.15.2
typewit_proc_macros1.8.1proc macro
unicode-bidi0.3.18
unicode-bidi-mirroring0.1.0
unicode-ccc0.1.2
unicode-ident1.0.27
unicode-properties0.1.4
unicode-script0.5.8
unicode-vo0.1.0
unicode-width0.2.2
unit-prefix0.5.2
usvgr0.46.1
uuid1.28.0
v_frame0.3.9
vcpkg0.2.15prebuilt objects
version_check0.9.5
wasip21.0.4+wasi-0.2.12
wasm-bindgen0.2.129build script, not run
wasm-bindgen-macro0.2.129proc macro
wasm-bindgen-macro-support0.2.129
wasm-bindgen-shared0.2.129build script, not run
web-time1.1.0
webvtt-parser1.2.0
weezl0.1.12
winapi0.3.9build script, not run
winapi-i686-pc-windows-gnu0.4.0build script, not runprebuilt objects
winapi-x86_64-pc-windows-gnu0.4.0build script, not runprebuilt objects
windows-link0.2.1
windows-sys0.59.0
windows-sys0.61.2
windows-targets0.52.6
windows_aarch64_gnullvm0.52.6build script, not runprebuilt objects
windows_aarch64_msvc0.52.6build script, not runprebuilt objects
windows_i686_gnu0.52.6build script, not runprebuilt objects
windows_i686_gnullvm0.52.6build script, not runprebuilt objects
windows_i686_msvc0.52.6build script, not runprebuilt objects
windows_x86_64_gnu0.52.6build script, not runprebuilt objects
windows_x86_64_gnullvm0.52.6build script, not runprebuilt objects
windows_x86_64_msvc0.52.6build script, not runprebuilt objects
winnow1.0.4
wit-bindgen0.57.1build script, not runprebuilt objects
xmlwriter0.1.0
y4m0.8.0
zerocopy0.8.62build script
zerocopy-derive0.8.62proc macro
zlib-rs0.6.8
zune-core0.5.3
zune-inflate0.2.54
zune-jpeg0.5.15

Raw data

capture
901 KB
records
117,301
bytes per record
7.7

Loading a sample of the capture

Want to see more? E-mail us at hello@bitbison.io about your use case.

1 of 1 jobs captured: build-test failure · Generated 2026-10-14 · run 41361e62-e684-42af-94c4-fad2bb10eb2d

analysis 0.1.0 · 2026-10-14 · afb437c · graph v2