Skip to content
Open-Source Registry

cargo / fframes_three_d / 1.3.1-rc.0

fframes_three_d 1.3.1-rc.0

bitbison: no public build not built
processes
359
operations
31K
packages
134
compiler runs
16
connections
3
build time
1m 04s
job time
1m 04s
capture
448 KB
records
58K
bytes / record
7.8

Build behaviourlinked a downloaded binaryfetched outside crates.iocompiled C/C++

run 9f4b73db-1ced-4c35-92a4-a368e5fd16e0 · built 2026-10-21 · complete View on crates.io

This release did not build; nothing below stands for the package.

Graph

egress · medium
4

Checks

11 of 14 clear Network activity Data flow analysis +1 more
Build behavior▲✓✓✓✓▲✓✓
Supply chain✓▲✓✓✓
Pipeline✓

Detections

2
  • Build script reached github.com +1
    ffmpeg-sys-fframes 9.0.0 › github.com:443, release-assets.githubusercontent.com:443
    medium
  • 7 prebuilt libraries downloaded by a build script from its documented source
    ffmpeg-sys-fframes 9.0.0 › github.com, release-assets.githubusercontent.com
    medium

Detection

mediumwitnessed

Build script reached github.com +1

Unexpected network connection

Subject
ffmpeg-sys-fframes 9.0.0
Destination
github.com:443, release-assets.githubusercontent.com:443
Jobs
build-test
Rule
egress

Evidence

  1. Connection outside the process’s allowed destinationscause

    connection to github.com:443, opened by curl

    subject github.com:443

    by curl --fail --location --silent --show-error --retry 3 --output /home/runner/.cache/ffmpeg-sys-fframes/binaries-9.0.0/ffmpeg-x86_64-unknown-linux-gnu-avcodec-av…

  2. Connection outside the process’s allowed destinationscause

    connection to release-assets.githubusercontent.com:443, opened by curl

    subject release-assets.githubusercontent.com:443

    by curl --fail --location --silent --show-error --retry 3 --output /home/runner/.cache/ffmpeg-sys-fframes/binaries-9.0.0/ffmpeg-x86_64-unknown-linux-gnu-avcodec-av…

  3. What a build script's fetch becamesupport

    1 file came down; nothing the build compiled, linked or ran

  4. Connection opened by a build script or child processsupport

    the opener descends from the build script at /home/runner/work/fframes_three_d/fframes_three_d/target/release/build/ffmpeg-sys-fframes-196d283c1d8314ff/build-script-build

  5. Build script fetched what its crate documents it fetchessupport

    ffmpeg-sys-fframes's build script fetches a prebuilt FFmpeg from github.com, release-assets.githubusercontent.com: fframes' ffmpeg-sys fork has its build.rs curl a prebuilt FFmpeg from its GitHub release (observed on the registry, 2026-10-06)

  6. Tool commandsupport

    Command: curl --fail --location --silent --show-error --retry 3 --output /home/runner/.cache/ffmpeg-sys-fframes/binaries-9.0.0/ffmpeg-x86_64-unknown-linux-gnu-avcodec-av…

    by curl --fail --location --silent --show-error --retry 3 --output /home/runner/.cache/ffmpeg-sys-fframes/binaries-9.0.0/ffmpeg-x86_64-unknown-linux-gnu-avcodec-av…

What came before it

Loading the graph

Processes

build-test

cargo›cargo›build-script-build›curl

Ran
curl --fail --location --silent --show-error --retry 3 --output /home/runner/.cache/ffmpeg-sys-fframes/binaries-9.0.0/ffmpeg-x86_64-unknown-linux-gnu-avcodec-av…
Invoked by
cargo build --release --locked --message-format=json-render-diagnostics
Lineage · 4 processes
  1. cargocargo build --release --locked --message-format=json-render-diagnostics2488
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo build --release --locked --message-format=json-render-diagnostics2488
  3. build-script-build/home/runner/work/fframes_three_d/fframes_three_d/target/release/build/ffmpeg-sys-fframes-196d283c1d8314ff/build-script-build3903
  4. curlcurl --fail --location --silent --show-error --retry 3 --output /home/runner/.cache/ffmpeg-sys-fframes/binaries-9.0.0/ffmpeg-x86_64-unknown-linux-gnu-avcodec-av…3912

Remediation

The crate's build script reached the network at compile time, outside the registry's checksums. Build it from what the registry ships (the crate's own environment variable or from-source feature), or record the download as accepted once it is reviewed.

Detection

mediumwitnessed

7 prebuilt libraries downloaded by a build script from its documented source

Object file origin needs review

Subject
ffmpeg-sys-fframes 9.0.0
Destination
github.com, release-assets.githubusercontent.com
Jobs
build-test
Rule
object-provenance · fframes_three_d

Witness chain

  1. github.com:443
    source
  2. /home/runner/.cache/ffmpeg-sys-fframes/binaries-9.0.0/ffmpeg-x86_64-unknown-linux-gnu-avcodec-avdevice-avfilter-avformat-swresample-swscale.tar.gzvia curl --fail --location --silent --show-error --retry 3 --output /home/runner/.cache/ffmpeg-sys-fframes/binaries-9.0.0/ffmpeg-x86_64-unknown-linux-gnu-avcodec-av
  3. pipevia gzip -d
  4. /home/runner/work/fframes_three_d/fframes_three_d/target/release/build/ffmpeg-sys-fframes-81b5086a07add08c/out/dist/lib/libavcodec.avia tar -xzf /home/runner/.cache/ffmpeg-sys-fframes/binaries-9.0.0/ffmpeg-x86_64-unknown-linux-gnu-avcodec-avdevice-avfilter-avformat-swresample-swscale.tar.gz -C /
    • Object written under a build script that downloadedfrom github.com · release-assets.githubusercontent.comby build-script-build

      /home/runner/work/fframes_three_d/fframes_three_d/target/release/build/ffmpeg-sys-fframes-81b5086a07add08c/out/dist/lib/libavcodec.a: written under the build script at /home/runner/work/fframes_three_d/fframes_three_d/target/release/build/ffmpeg-sys-fframes-196d283c1d8314ff/build-script-build, which downloaded from github.com, release-assets.githubusercontent.com

    subject

Evidence

  1. Object written under a build script that downloadedcause

    /home/runner/work/fframes_three_d/fframes_three_d/target/release/build/ffmpeg-sys-fframes-81b5086a07add08c/out/dist/lib/libavdevice.a: written under the build script at /home/runner/work/fframes_three_d/fframes_three_d/target/release/build/ffmpeg-sys-fframes-196d283c1d8314ff/build-script-build, which downloaded from github.com, release-assets.githubusercontent.com

    subject /home/runner/work/fframes_three_d/fframes_three_d/target/release/build/ffmpeg-sys-fframes-81b5086a07add08c/out/dist/lib/libavdevice.asource github.comsource release-assets.githubusercontent.com

    by /home/runner/work/fframes_three_d/fframes_three_d/target/release/build/ffmpeg-sys-fframes-196d283c1d8314ff/build-script-build

  2. Object written under a build script that downloadedcause

    /home/runner/work/fframes_three_d/fframes_three_d/target/release/build/ffmpeg-sys-fframes-81b5086a07add08c/out/dist/lib/libavfilter.a: written under the build script at /home/runner/work/fframes_three_d/fframes_three_d/target/release/build/ffmpeg-sys-fframes-196d283c1d8314ff/build-script-build, which downloaded from github.com, release-assets.githubusercontent.com

    subject /home/runner/work/fframes_three_d/fframes_three_d/target/release/build/ffmpeg-sys-fframes-81b5086a07add08c/out/dist/lib/libavfilter.asource github.comsource release-assets.githubusercontent.com

    by /home/runner/work/fframes_three_d/fframes_three_d/target/release/build/ffmpeg-sys-fframes-196d283c1d8314ff/build-script-build

  3. Object written under a build script that downloadedcause

    /home/runner/work/fframes_three_d/fframes_three_d/target/release/build/ffmpeg-sys-fframes-81b5086a07add08c/out/dist/lib/libavformat.a: written under the build script at /home/runner/work/fframes_three_d/fframes_three_d/target/release/build/ffmpeg-sys-fframes-196d283c1d8314ff/build-script-build, which downloaded from github.com, release-assets.githubusercontent.com

    subject /home/runner/work/fframes_three_d/fframes_three_d/target/release/build/ffmpeg-sys-fframes-81b5086a07add08c/out/dist/lib/libavformat.asource github.comsource release-assets.githubusercontent.com

    by /home/runner/work/fframes_three_d/fframes_three_d/target/release/build/ffmpeg-sys-fframes-196d283c1d8314ff/build-script-build

  4. Object written under a build script that downloadedcause

    /home/runner/work/fframes_three_d/fframes_three_d/target/release/build/ffmpeg-sys-fframes-81b5086a07add08c/out/dist/lib/libavutil.a: written under the build script at /home/runner/work/fframes_three_d/fframes_three_d/target/release/build/ffmpeg-sys-fframes-196d283c1d8314ff/build-script-build, which downloaded from github.com, release-assets.githubusercontent.com

    subject /home/runner/work/fframes_three_d/fframes_three_d/target/release/build/ffmpeg-sys-fframes-81b5086a07add08c/out/dist/lib/libavutil.asource github.comsource release-assets.githubusercontent.com

    by /home/runner/work/fframes_three_d/fframes_three_d/target/release/build/ffmpeg-sys-fframes-196d283c1d8314ff/build-script-build

  5. Object written under a build script that downloadedcause

    /home/runner/work/fframes_three_d/fframes_three_d/target/release/build/ffmpeg-sys-fframes-81b5086a07add08c/out/dist/lib/libswresample.a: written under the build script at /home/runner/work/fframes_three_d/fframes_three_d/target/release/build/ffmpeg-sys-fframes-196d283c1d8314ff/build-script-build, which downloaded from github.com, release-assets.githubusercontent.com

    subject /home/runner/work/fframes_three_d/fframes_three_d/target/release/build/ffmpeg-sys-fframes-81b5086a07add08c/out/dist/lib/libswresample.asource github.comsource release-assets.githubusercontent.com

    by /home/runner/work/fframes_three_d/fframes_three_d/target/release/build/ffmpeg-sys-fframes-196d283c1d8314ff/build-script-build

  6. Object written under a build script that downloadedcause

    /home/runner/work/fframes_three_d/fframes_three_d/target/release/build/ffmpeg-sys-fframes-81b5086a07add08c/out/dist/lib/libswscale.a: written under the build script at /home/runner/work/fframes_three_d/fframes_three_d/target/release/build/ffmpeg-sys-fframes-196d283c1d8314ff/build-script-build, which downloaded from github.com, release-assets.githubusercontent.com

    subject /home/runner/work/fframes_three_d/fframes_three_d/target/release/build/ffmpeg-sys-fframes-81b5086a07add08c/out/dist/lib/libswscale.asource github.comsource release-assets.githubusercontent.com

    by /home/runner/work/fframes_three_d/fframes_three_d/target/release/build/ffmpeg-sys-fframes-196d283c1d8314ff/build-script-build

  7. Build script fetched what its crate documents it fetchessupport

    ffmpeg-sys-fframes's build script fetches a prebuilt FFmpeg from github.com, release-assets.githubusercontent.com: fframes' ffmpeg-sys fork has its build.rs curl a prebuilt FFmpeg from its GitHub release (observed on the registry, 2026-10-06)

Processes

build-test

cargo›cargo›build-script-build›tar

Ran
tar -xzf /home/runner/.cache/ffmpeg-sys-fframes/binaries-9.0.0/ffmpeg-x86_64-unknown-linux-gnu-avcodec-avdevice-avfilter-avformat-swresample-swscale.tar.gz -C /…
Invoked by
cargo build --release --locked --message-format=json-render-diagnostics
Lineage · 4 processes
  1. cargocargo build --release --locked --message-format=json-render-diagnostics2488
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo build --release --locked --message-format=json-render-diagnostics2488
  3. build-script-build/home/runner/work/fframes_three_d/fframes_three_d/target/release/build/ffmpeg-sys-fframes-196d283c1d8314ff/build-script-build3903
  4. tartar -xzf /home/runner/.cache/ffmpeg-sys-fframes/binaries-9.0.0/ffmpeg-x86_64-unknown-linux-gnu-avcodec-avdevice-avfilter-avformat-swresample-swscale.tar.gz -C /…3946

Remediation

Inspect the writer and input chain. Confirm the object comes from a reviewed build step or declared prebuilt dependency. If its origin cannot be verified, replace it and rebuild.

Network

3 peers
  • github.com:443 build code of ffmpeg-sys-fframes · curl · GitHub, Inc. · 1 file documented
  • release-assets.githubusercontent.com:443 build code of ffmpeg-sys-fframes · curl · Fastly, Inc. · 1 file documented
  • static.crates.io:8080 the package manager · cargo (fframes_three_d) via crates.io · 12,243 files · went into an output ecosystem
Dependencies137Build behaviour
adler22.0.0
ahash0.8.11build script
aho-corasick1.1.3
arrayref0.3.9
arrayvec0.7.6
autocfg1.4.0
base640.22.1
bindgen0.72.1build script
bitflags1.3.2
bitflags2.13.2
bumpalo3.17.0
bytecount0.6.8
bytemuck1.25.2
bytemuck_derive1.12.1proc macro
byteorder1.5.0
byteorder-lite0.1.0
cc1.5.1
cexpr0.6.0
cfg-if1.0.0
clang-sys1.8.1build script
core_maths0.1.1
crc32fast1.4.2
crossbeam-deque0.8.6
crossbeam-epoch0.9.18
crossbeam-utils0.8.21build script
data-url0.3.1
either1.15.0
euclid0.22.14
fdeflate0.3.7
ffmpeg-sys-fframes9.0.0build scriptnetworkruns toolsgithub.com, release-assets.githubusercontent.com, curl
fframes-media1.3.1-rc.0
find-msvc-tools0.1.14
flate21.1.1
float-cmp0.9.0
foldhash0.2.0
fontconfig-parser0.5.7
fontdb0.23.0
getrandom0.2.15
glam0.30.10
glob0.3.2
gltf1.4.1
gltf-derive1.4.1proc macro
gltf-json1.4.1
hashbrown0.17.1
hermit-abi0.5.0
image0.25.6
image-webp0.2.1
inflections1.1.1
itertools0.13.0
itoa1.0.15
kurbo0.13.1
lazy_static1.5.0
ld-linux-x86-64.so.2system library
libc0.2.189build script
libc.so.6system library
libgcc_s.so.1system library
libloading0.8.6
libm0.2.11build script
libm.so.6system library
libmvec.so.1system library
log0.4.34
lru0.18.5
memchr2.7.4
memmap20.9.5
minimal-lexical0.2.1
miniz_oxide0.8.8
nom7.1.3
nom_locate4.2.0
num-traits0.2.19build script
num_cpus1.17.0
once_cell1.21.3
pico-args0.5.0
pkg-config0.3.32
png0.17.16
polycool0.4.0
proc-macro21.0.95build script
quick-error2.0.1
quote1.0.40
rayon1.10.0
rayon-core1.12.1build script
regex1.13.1
regex-automata0.4.18
regex-syntax0.8.11
roxmltree0.20.0
rustc-hash2.1.1
rustversion1.0.20build script, not runproc macro
rustybuzz0.20.1
serde1.0.228build script
serde_core1.0.228build script
serde_derive1.0.228proc macro
serde_json1.0.154build script
shlex1.3.0
shlex2.0.1
simd-adler320.3.7
simplecss0.2.2
siphasher1.0.1
slotmap1.0.7build script
smallvec1.15.1
strict-num0.1.1
svgrtypes0.50.2
syn2.0.100
syn3.0.6
tiny-skia-path0.12.0
tinyvec1.9.0
tinyvec_macros0.1.1
ttf-parser0.25.1
unicode-bidi0.3.18
unicode-bidi-mirroring0.4.0
unicode-ccc0.4.0
unicode-ident1.0.18
unicode-properties0.1.3
unicode-script0.5.7
unicode-vo0.1.0
usvgr0.50.2
vcpkg0.2.15prebuilt objects
version_check0.9.5
wasi0.11.0+wasi-snapshot-preview1
wasm-bindgen0.2.129build script, not run
wasm-bindgen-macro0.2.129proc macro
wasm-bindgen-macro-support0.2.129
wasm-bindgen-shared0.2.129build script, not run
webvtt-parser1.3.1-rc.0
windows-targets0.52.6
windows_aarch64_gnullvm0.52.6build script, not runprebuilt objects
windows_aarch64_msvc0.52.6build script, not runprebuilt objects
windows_i686_gnu0.52.6build script, not runprebuilt objects
windows_i686_gnullvm0.52.6build script, not runprebuilt objects
windows_i686_msvc0.52.6build script, not runprebuilt objects
windows_x86_64_gnu0.52.6build script, not runprebuilt objects
windows_x86_64_gnullvm0.52.6build script, not runprebuilt objects
windows_x86_64_msvc0.52.6build script, not runprebuilt objects
xmlwriter0.1.0
zerocopy0.7.35
zerocopy-derive0.7.35proc macro
zmij1.0.23build script
zune-core0.4.12
zune-jpeg0.4.14
Versions5RiskVulnsPublished
1.3.1-rc.0did not build1d ago
1.3.0not analyzed1d ago
1.2.1-rc.52not analyzed1d ago
1.2.1-rc.47not analyzed1d ago
0.0.0not analyzed1d ago

Raw data

capture
448 KB
records
57,553
bytes per record
7.8

Loading a sample of the capture

Want to see more? E-mail us at hello@bitbison.io about your use case.

1 of 1 jobs captured: build-test failure · Generated 2026-10-21 · run 9f4b73db-1ced-4c35-92a4-a368e5fd16e0

analysis 0.1.0 · 2026-10-21 · bee3716 · graph v2