Skip to content
Open-Source Registry

cargo / foundation-firmware

foundation-firmware 0.3.0

processes
332
operations
9.2K
packages
52
compiler runs
48
connections
1
job time
9s
capture
131 KB
records
16K
bytes / record
8.1

Foundation Devices, Inc. Passport Firmware image parser.This provides a command-line tool to verify the signatures of a Passportfirmware and also a `#[no_std]` library to parse the firmware images.

2 vulnerabilities

Build behaviourcompiled C/C++

12,773 downloads · GPL-3.0-only AND GPL-3.0-or-later · home page · cargo

Release 0.3.0 run c0c35702-9ca3-47f7-b91e-019dc82f0625 · built 2026-10-08

Artifact

binary · retained · product
2
ChecksDetections
Build behavior
✓ Network activity—
✓ Sensitive data access and transfer—
✓ Cross-process access—
✓ Build file changes—
✓ Build script activity—
✓ Data flow analysis—
✓ Filesystem writes—
✓ Context collection—
Supply chain
✓ Known vulnerabilities—
▲ Build-time dependency advisories—
▲ Dependency advisories—
✓ Declared and observed dependencies—
✓ Dependency and toolchain versions—
Pipeline
✓ Pipeline coverage—

Detections

0

No detections

No abnormal activity detected across 9.2K flows.

Network

0 peers
    cargo fetched 2,660 files from static.crates.io
    Vulnerable dependencies2PackageVersionFixSeverityTitleReach
    RUSTSEC-2026-0190anyhow1.0.102>=1.0.103lowUnsoundness in `Error::downcast_mut()`retained
    RUSTSEC-2026-0306faster-hex0.9.0>=0.10.1low`hex_decode_unchecked` AVX2 path reads past `src`retained

    Raw data

    capture
    131 KB
    records
    16,139
    bytes per record
    8.1

    Loading a sample of the capture

    Want to see more? E-mail us at hello@bitbison.io about your use case.

    Dependencies

    54 packages, 3 with a build script that ran, 0 doing more than compiling
    PackageVersionUsageBuild behaviour
    anyhow direct1.0.102linkedbuild script
    bitcoin-io0.1.4feature_gatedbuild script, not run
    heapless direct0.8.0linkedbuild script
    ld-linux-x86-64.so.2linkedsystem library
    libc0.2.182feature_gatedbuild script, not run
    libc.so.6linkedsystem library
    libgcc_s.so.1linkedsystem library
    libm.so.6linkedsystem library
    libmvec.so.1linkedsystem library
    proc-macro21.0.106buildtime_onlybuild script, not run
    quote1.0.44buildtime_onlybuild script, not run
    secp256k1-sys0.10.1linkedbuild script
    zerocopy0.8.39feature_gatedbuild script, not run
    zerocopy-derive0.8.39buildtime_onlyproc macro
    anstream0.6.21linked
    anstyle1.0.13linked
    anstyle-parse0.2.7linked
    anstyle-query1.1.5linked
    anstyle-wincon3.0.11platform_gated
    arrayvec0.7.6linked
    bitcoin_hashes0.14.1feature_gated
    bitcoin_hashes direct0.15.0linked
    byteorder1.5.0linked
    cc1.2.56linked
    cfg-if1.0.4feature_gated
    clap direct4.5.60linked
    clap_builder4.5.60linked
    clap_lex1.0.0linked
    colorchoice1.0.4linked
    faster-hex direct0.9.0linked
    find-msvc-tools0.1.9linked
    getrandom0.2.17feature_gated
    hash320.3.1linked
    hex-conservative0.2.2feature_gated
    hex-conservative0.3.2linked
    is_terminal_polyfill1.70.2linked
    memchr2.8.0linked
    nom direct7.1.3linked
    once_cell_polyfill1.70.2platform_gated
    ppv-lite860.2.21feature_gated
    rand0.8.5feature_gated
    rand_chacha0.3.1feature_gated
    rand_core0.6.4feature_gated
    secp256k1 direct0.30.0linked
    shlex1.3.0linked
    strsim0.11.1linked
    syn2.0.117buildtime_only
    unicode-ident1.0.24buildtime_only
    utf8parse0.2.2linked
    wasi0.11.1+wasi-snapshot-preview1feature_gated
    windows-link0.2.1platform_gated
    windows-sys0.61.2platform_gated
    minimal-lexical0.2.1dead
    stable_deref_trait1.2.1dead

    1 of 1 jobs captured: build-test success · Generated 2026-10-08 · tarp 0.1.0+20261008010522-g7d82935f3902 · run c0c35702-9ca3-47f7-b91e-019dc82f0625