Skip to content
Open-Source Registry

cargo / fitscube-rs / 2.1.1

fitscube-rs 2.1.1

bitbison: flagged, behavior flagged, dependencies flagged, posture not checked, pipeline clean, 1 of 1 jobs captured RiskinfoVulnshigh
processes
349
operations
48K
packages
223
compiler runs
232
connections
1
job time
1m 12s
capture
483 KB
records
80K
bytes / record
6.0

Build behaviourcompiled C/C++

run 2d19f1f4-64c1-46e9-b396-9f6fc38d3957 · built 2026-10-18 · complete View on crates.io

Graph

file · retained · product · graph v2
4

Checks

10 of 14 clear Data flow analysis Known vulnerabilities +2 more
Build behavior✓✓✓✓✓▲✓✓
Supply chain▲▲▲✓✓
Pipeline✓

Detections

1
  • Prebuilt object file from a dependency package
    libcfitsio.a
    info

Detection

infoinferred

Prebuilt object file from a dependency package

Object file origin needs review

Subject
/home/runner/.cargo/registry/src/index.crates.io-f7c75c5af8568ae3/fitsio-sys-0.5.7/ext/cfitsio/lib/libcfitsio.awritten by gnucp
Reaches
fitscubers-4d7dafe34246238emember
Jobs
build-test
Rule
object-provenance

Evidence

  1. Prebuilt object file from a dependency packagecause

    shipped inside a dependency package and read by rustc; not compiled in this build

    subject /home/runner/.cargo/registry/src/index.crates.io-f7c75c5af8568ae3/fitsio-sys-0.5.7/ext/cfitsio/lib/libcfitsio.a

    by /home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/rustc --crate-name fitsio_sys --edition=2018 /home/runner/.cargo/registry/src/index.crates.i…

  2. Asked for by the build's own declarationsupport

    fitsio-sys asked the linker for it: static cfitsio (target/release/build/fitsio-sys-857cf8f849cc0a8c/output)

    subject /home/runner/.cargo/registry/src/index.crates.io-f7c75c5af8568ae3/fitsio-sys-0.5.7/ext/cfitsio/lib/libcfitsio.a

In fitscubers

Loading the graph

Processes

build-test

cargo›cargo›rustc

Ran
/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/rustc --crate-name fitsio_sys --edition=2018 /home/runner/.cargo/registry/src/index.crates.i…
Invoked by
cargo build --release --locked --message-format=json-render-diagnostics
Lineage · 3 processes
  1. cargocargo build --release --locked --message-format=json-render-diagnostics2481
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo build --release --locked --message-format=json-render-diagnostics2481
  3. rustc/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/rustc --crate-name fitsio_sys --edition=2018 /home/runner/.cargo/registry/src/index.crates.i…4866

Remediation

Inspect the writer and input chain. Confirm the object comes from a reviewed build step or declared prebuilt dependency. If its origin cannot be verified, replace it and rebuild.

Network

1 peers
  • static.crates.io:8080 the package manager · cargo (fitscube-rs) via crates.io · 10,843 files · went into an output ecosystem
Vulnerabilities3PackageFixSeverity
RUSTSEC-2026-0204crossbeam-epoch 0.9.18>=0.9.20high
RUSTSEC-2026-0190anyhow 1.0.102>=1.0.103low
RUSTSEC-2025-0119number_prefix 0.4.0none publishedlow
Dependencies236Build behaviour
anstream1.0.0
anstyle1.0.14
anstyle-parse1.0.0
anstyle-query1.1.5
anyhow1.0.102build script
atfits-rs1.2.0
bitflags2.13.0
cfg-if1.0.4
clap4.6.1
clap_builder4.6.0
clap_lex1.1.0
colorchoice1.0.5
console0.15.11
crossbeam-deque0.8.6
crossbeam-epoch0.9.18
crossbeam-utils0.8.21build script
either1.16.0
fastrand2.4.1
fitsio0.21.10
fitsio-sys0.5.7build scriptprebuilt objects
flate21.1.10
getrandom0.4.3build script
hifitime4.3.0
indicatif0.17.11
is_terminal_polyfill1.70.2
lazy_static1.5.0
ld-linux-x86-64.so.2system library
lexical-core1.0.6
lexical-parse-float1.0.6
lexical-parse-integer1.0.6
lexical-util1.0.7
libc0.2.186build script
libc.so.6system library
libgcc_s.so.1system library
libm.so.6system library
libmvec.so.1system library
linux-raw-sys0.12.1
log0.4.32
matchers0.2.0
matrixmultiply0.3.10build script
ndarray0.16.1
nu-ansi-term0.50.3
num-complex0.4.6
num-integer0.1.46
num-traits0.2.19build script
number_prefix0.4.0
once_cell1.21.4
pin-project-lite0.2.17
portable-atomic1.13.1build script
rawpointer0.2.1
rayon1.12.0
rayon-core1.13.0build script
regex-automata0.4.14
regex-syntax0.8.11
rustix1.1.4build script
serde1.0.228build script
serde_core1.0.228build script
sharded-slab0.1.7
smallvec1.15.2
snafu0.9.1
strsim0.11.1
tempfile3.27.0
thiserror1.0.69build script
thread_local1.1.9
tracing0.1.44
tracing-core0.1.36
tracing-log0.2.0
tracing-subscriber0.3.23
unicode-width0.2.2
utf8parse0.2.2
web-time1.1.0
zlib-rs0.6.8
libm0.2.16build script
unicode-ident1.0.24
accessible-pygments0.0.5
aho-corasick1.1.4
alabaster1.0.0
anstyle-wincon3.0.11
appnope0.1.4
approx0.5.1
astroid4.1.2
astropy6.1.7
astropy8.0.0
astropy-iers-data0.2026.6.15.15.33.16
asttokens3.0.1
attrs26.1.0
autocfg1.5.1
autotools0.2.7
babel2.18.0
beautifulsoup44.15.0
bumpalo3.20.3
cc1.2.65
certifi2026.6.17
cffi2.0.0
charset-normalizer3.4.7
clap_derive4.6.1proc macro
click8.4.1
colorama0.4.6
comm0.2.3
debugpy1.8.21
decorator5.3.1
docutils0.21.2
encode_unicode1.0.0
errno0.3.14
exceptiongroup1.3.1
executing2.2.1
fastjsonschema2.21.2
find-msvc-tools0.1.9
fitscube2.10.0
fitscube2.11.0
fitscube-rs
furo2025.12.19
futures-core0.3.32
futures-task0.3.32
futures-util0.3.32
greenlet3.5.2
heck0.5.0
idna3.18
imagesize2.0.0
importlib-metadata9.0.0
iniconfig2.3.0
ipykernel7.3.0
ipython8.39.0
ipython9.14.1
ipython-pygments-lexers1.1.1
jedi0.20.0
jinja23.1.6
js-sys0.3.102
jsonschema4.26.0
jsonschema-specifications2025.9.1
jupyter-cache1.0.1
jupyter-client8.9.1
jupyter-core5.9.1
markdown-it-py3.0.0
markdown-it-py4.2.0
markupsafe3.0.3
matplotlib-inline0.2.2
mdit-py-plugins0.6.1
mdurl0.1.2
memchr2.8.2
myst-nb1.4.0
myst-parser4.0.1
myst-parser5.1.0
nbclient0.11.0
nbformat5.10.4
nest-asyncio21.7.2
numpy2.2.6
numpy2.4.6
once_cell_polyfill1.70.2
packaging26.2
parso0.8.7
pexpect4.9.0
pkg-config0.3.33
platformdirs4.10.0
pluggy1.6.0
portable-atomic-util0.2.7build script, not run
prek0.4.5
proc-macro21.0.106build script
prompt-toolkit3.0.52
psutil7.2.2
ptyprocess0.7.0
pure-eval0.2.3
pycparser3.0
pyerfa2.0.1.5
pygments2.20.0
pytest9.1.1
python-dateutil2.9.0.post0
pyyaml6.0.3
pyzmq27.1.0
quote1.0.45build script
r-efi6.0.0
radio-beam0.3.9
referencing0.37.0
requests2.34.2
roman-numerals4.1.0
roman-numerals-py4.1.0
rpds-py0.30.0
rpds-py2026.5.1
rustversion1.0.22build script, not runproc macro
scipy1.15.3
scipy1.17.1
scipy1.18.0
serde_derive1.0.228proc macro
shlex2.0.1
six1.17.0
slab0.4.12
snafu-derive0.9.1proc macro
snowballstemmer3.1.1
soupsieve2.8.4
sphinx8.1.3
sphinx8.2.3
sphinx-autoapi3.8.0
sphinx-autodoc-typehints3.0.1
sphinx-autodoc-typehints3.5.2
sphinx-basic-ng1.0.0b2
sphinx-copybutton0.5.2
sphinxcontrib-applehelp2.0.0
sphinxcontrib-devhelp2.0.0
sphinxcontrib-htmlhelp2.1.0
sphinxcontrib-jsmath1.0.1
sphinxcontrib-programoutput0.20
sphinxcontrib-qthelp2.0.0
sphinxcontrib-serializinghtml2.0.0
sqlalchemy2.0.51
stack-data0.6.3
syn2.0.118
tabulate0.10.0
thiserror-impl1.0.69proc macro
tomli2.4.1
tornado6.5.7
tqdm4.68.3
tracing-attributes0.1.31proc macro
traitlets5.15.1
ty0.0.51
typing-extensions4.15.0
urllib32.7.0
valuable0.1.1build script, not run
wasm-bindgen0.2.125build script, not run
wasm-bindgen-macro0.2.125proc macro
wasm-bindgen-macro-support0.2.125
wasm-bindgen-shared0.2.125build script, not run
wcwidth0.8.1
web-sys0.3.102
windows-link0.2.1
windows-sys0.59.0
windows-sys0.61.2
windows-targets0.52.6
windows_aarch64_gnullvm0.52.6build script, not runprebuilt objects
windows_aarch64_msvc0.52.6build script, not runprebuilt objects
windows_i686_gnu0.52.6build script, not runprebuilt objects
windows_i686_gnullvm0.52.6build script, not runprebuilt objects
windows_i686_msvc0.52.6build script, not runprebuilt objects
windows_x86_64_gnu0.52.6build script, not runprebuilt objects
windows_x86_64_gnullvm0.52.6build script, not runprebuilt objects
windows_x86_64_msvc0.52.6build script, not runprebuilt objects
zipp4.1.0
Versions9RiskVulnsPublished
2.1.04h ago
2.0.216h ago
1.2.3not analyzed2026-09-30
1.2.2not analyzed2026-06-28
1.2.1yankednot analyzed2026-06-21
1.2.0yankednot analyzed2026-06-21
1.1.0yankednot analyzed2026-06-20
1.0.1yankednot analyzed2026-06-20
2.1.1infohigh

Raw data

capture
483 KB
records
80,202
bytes per record
6.0

Loading a sample of the capture

Want to see more? E-mail us at hello@bitbison.io about your use case.

1 of 1 jobs captured: build-test success · Generated 2026-10-18 · run 2d19f1f4-64c1-46e9-b396-9f6fc38d3957

analysis 0.1.0 · 2026-10-17 · 0abbde9 · graph v2