Skip to content
Open-Source Registry

cargo / gnosis / 0.7.0

gnosis 0.7.0

bitbison: flagged, behavior flagged, dependencies flagged, posture not checked, pipeline clean, 1 of 1 jobs captured RiskhighVulnshigh
processes
946
operations
183K
packages
514
compiler runs
2,561
connections
2
job time
6m 54s
capture
1.7 MB
records
293K
bytes / record
5.9

Build behaviourundeclared fetchfetch went into the outputfetched outside crates.iocompiled C/C++

run 23cbf5da-776d-46bc-a198-82afd4d72978 · built 2026-10-17 · complete View on crates.io

Graph

egress · high · in gnosis
3

Checks

12 of 14 clear Network activity Known vulnerabilities
Build behavior▲✓✓✓✓✓✓✓
Supply chain▲✓✓✓✓
Pipeline✓

Detections

1
  • Build script fetched what the build compiled, linked or ran
    spider_fingerprint 2.39.0 › googlechromelabs.github.io:443
    high

Detection

highwitnessed

Build script fetched what the build compiled, linked or ran

Unexpected network connection

Subject
spider_fingerprint 2.39.0
Destination
googlechromelabs.github.io:443
Reaches
gnosis-f15e5c7f5c232bddmember
Jobs
build-test
Rule
egress · gnosis

Evidence

  1. Connection outside the process’s allowed destinationscause

    connection to googlechromelabs.github.io:443, opened by build_script_build-db1643f8c313c9f3

    subject googlechromelabs.github.io:443

    by /home/runner/work/gnosis/gnosis/target/release/build/spider_fingerprint-db1643f8c313c9f3/build-script-build

  2. What a build script's fetch becamesupport

    2 files came down; the build compiled or linked chrome_versions.rs

  3. Connection opened by a build script or child processsupport

    the opener is the build script at /home/runner/work/gnosis/gnosis/target/release/build/spider_fingerprint-db1643f8c313c9f3/build_script_build-db1643f8c313c9f3

In gnosis

Loading the graph

Processes

build-test

cargo›cargo›build-script-build

Ran
/home/runner/work/gnosis/gnosis/target/release/build/spider_fingerprint-db1643f8c313c9f3/build-script-build
Invoked by
cargo build --release --locked --message-format=json-render-diagnostics
Lineage · 3 processes
  1. cargocargo build --release --locked --message-format=json-render-diagnostics2476
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo build --release --locked --message-format=json-render-diagnostics2476
  3. build-script-build/home/runner/work/gnosis/gnosis/target/release/build/spider_fingerprint-db1643f8c313c9f3/build-script-build9207

Remediation

A dependency's build downloaded files the build then compiled, linked or ran, outside anything the registry checksums. Review what came down, pin or replace the dependency, or record the download as accepted once it is reviewed.

Network

2 peers
  • googlechromelabs.github.io:443 build code of spider_fingerprint · build_script_build-db1643f8c313c9f3 (gnosis) · Fastly, Inc. · 2 files · went into an output undeclared
  • static.crates.io:8080 the package manager · cargo (gnosis) via crates.io · 31,639 files · went into an output ecosystem
Vulnerabilities3PackageFixSeverity
RUSTSEC-2026-0367zip 6.0.0>=9.0.0high
RUSTSEC-2026-0368zip 6.0.0>=9.0.0high
RUSTSEC-2026-0369zip 6.0.0>=9.0.0high
Dependencies562Build behaviour
ahash0.8.12build script
aho-corasick1.1.4
alloc-no-stdlib3.0.0
alloc-stdlib0.3.0
allocator-api20.2.21
anstream1.0.0
anstyle1.0.14
anstyle-parse1.0.0
anstyle-query1.1.5
anyhow1.0.104build script
arc-swap1.9.2
arraydeque0.5.1
arrayref0.3.9
arrayvec0.7.8
async-compression0.4.50
atomic-waker1.1.2
auto_encoder0.2.4
avif-parse2.1.0
aws-config1.12.0
aws-credential-types1.3.0
aws-lc-rs1.18.1build script
aws-lc-sys0.45.0build scriptprebuilt objects
aws-runtime1.9.2
aws-sdk-s31.146.1
aws-sdk-sso1.109.0
aws-sdk-ssooidc1.111.0
aws-sdk-sts1.114.0
aws-sigv41.5.1
aws-smithy-async1.3.0
aws-smithy-checksums0.65.0
aws-smithy-eventstream0.61.4
aws-smithy-http0.64.0
aws-smithy-http-client1.5.0
aws-smithy-json0.63.0
aws-smithy-observability0.3.0
aws-smithy-query0.62.0
aws-smithy-runtime1.14.0
aws-smithy-runtime-api1.19.0
aws-smithy-schema0.2.0
aws-smithy-types1.8.1
aws-smithy-xml0.62.0
aws-types1.6.0build script
base16ct0.2.0
base640.22.1
base64-simd0.8.0
base64ct1.8.3
bitflags1.3.2
bitflags2.13.1
bitreader0.3.11
blake31.8.5build script
block-buffer0.10.4
block-buffer0.12.1
brotli9.0.0
brotli-decompressor6.0.1
bstr1.13.0
bumpalo3.20.3
byteorder1.5.0
byteorder-lite0.1.0
bytes1.12.1
bytes-utils0.1.4
case_insensitive_string0.2.11
castaway0.2.4
cfg-if1.0.4
chardetng0.1.17
chrono0.4.45
clap4.6.6
clap_builder4.6.6
clap_lex1.1.0
cmov0.5.4
colorchoice1.0.5
compact_str0.8.2
compact_str0.9.1
compression-codecs0.4.45
compression-core0.4.33
const-oid0.10.2
const-oid0.9.6
constant_time_eq0.4.2
cpufeatures0.2.17
cpufeatures0.3.0
crc-fast1.10.0
crc32fast1.5.2build script
crossbeam-channel0.5.16
crossbeam-deque0.8.7build script
crossbeam-epoch0.9.20build script
crossbeam-utils0.8.22build script
crossterm0.29.0
crypto-bigint0.5.5
crypto-common0.1.7
crypto-common0.2.2
cssparser0.36.0
cssparser0.37.0
csv1.4.0
csv-core0.1.13
ctutils0.4.2
dashmap6.2.1
der0.7.10
deranged0.5.8
derive_more2.1.1
digest0.10.7
digest0.11.3
dtoa1.0.11
dtoa-short0.3.5
ecdsa0.16.9
ego-tree0.11.0
either1.16.0
elliptic-curve0.13.8
encoding_rs0.8.35
equivalent1.0.2
errno0.3.14
fallible_collections0.5.2
fastrand2.5.0
fdeflate0.3.7
ff0.13.1
filetime0.2.29
flate21.1.10
fnv1.0.7
foldhash0.2.0
form_urlencoded1.2.2
futures-channel0.3.33
futures-core0.3.33
futures-io0.3.33
futures-sink0.3.33
futures-task0.3.33
futures-util0.3.33
generic-array0.14.7build script
geo-types0.7.20
getrandom0.2.17
getrandom0.3.4build script
getrandom0.4.3build script
globset0.4.19
group0.13.0
h20.4.20
hashbrown0.14.5
hashbrown0.16.1
hashbrown0.17.1
hashlink0.12.2
hex0.4.3
hmac0.12.1
hmac0.13.0
html5ever0.39.0
http0.2.12
http1.5.0
http-body0.4.6
http-body1.1.0
http-body-util0.1.4
httparse1.10.1build script
httpdate1.0.3
hybrid-array0.4.13
hyper1.11.0
hyper-rustls0.27.9
hyper-util0.1.20
iana-time-zone0.1.65
icu_collections2.2.0
icu_locale_core2.2.0
icu_normalizer2.2.0
icu_normalizer_data2.2.0build script
icu_properties2.2.0
icu_properties_data2.2.0build script
icu_provider2.2.0
idna1.1.0
idna_adapter1.2.2
ignore0.4.33
image-webp0.2.4
indexmap2.14.0
inotify0.9.6
inotify-sys0.1.8build script
ipnet2.12.0
is_terminal_polyfill1.70.2
iso6709parse0.1.2
itertools0.14.0
itoa1.0.18
kamadak-exif0.6.1
kasuari0.4.12
lazy_static1.5.0
ld-linux-x86-64.so.2system library
leb1280.2.7
libc0.2.189build script
libc.so.6system library
libgcc_s.so.1system library
libm.so.6system library
libmvec.so.1system library
line-clipping0.3.7
linux-raw-sys0.12.1
litemap0.8.2
llm_models_spider0.1.95
lock_api0.4.14
log0.4.34
lol_html2.9.0
lru0.18.5
markup5ever0.39.0
md-50.11.0
memchr2.8.3
mime0.3.17
mime_guess2.0.5build script
mio0.8.11
mio1.2.2
mutate_once0.1.2
new_debug_unreachable1.0.6
nom7.1.3
nom8.0.0
nom-exif3.8.0
notify6.1.1
num-conv0.2.2
num-integer0.1.46
num-traits0.2.19build script
num_cpus1.17.0
num_threads0.1.7
once_cell1.21.4
openssl-probe0.2.1
outref0.5.2
p2560.13.2
parking_lot0.12.5
parking_lot_core0.9.12build script
pem-rfc74680.7.0
percent-encoding2.3.2
phf0.11.3
phf0.13.1
phf_shared0.11.3
phf_shared0.13.1
pin-project-lite0.2.17
pin-utils0.1.0
pkcs80.10.2
png0.18.1
potential_utf0.1.5
powerfmt0.2.0
ppv-lite860.2.21
precomputed-hash0.1.1
primeorder0.13.6
psd0.3.5
pulldown-cmark0.13.4build script
quick-error2.0.1
quick-xml0.41.0
rand0.9.5
rand_chacha0.9.0
rand_core0.6.4
rand_core0.9.5
ratatui0.30.2
ratatui-core0.1.2
ratatui-crossterm0.1.2
ratatui-macros0.7.2
ratatui-widgets0.3.2
redb2.6.3build script
regex1.13.1
regex-automata0.4.18
regex-lite0.1.9
regex-syntax0.8.11
reqwest0.12.28
reqwest0.13.4
rfc69790.4.0
ring0.17.14build scriptprebuilt objects
rustc-hash2.1.3
rustix1.1.4build script
rustls0.23.46build script
rustls-native-certs0.8.4
rustls-pki-types1.15.1
rustls-platform-verifier0.7.0
rustls-webpki0.103.15
ryu1.0.23
same-file1.0.6
scopeguard1.2.0
scraper0.27.0
sec10.7.3
selectors0.37.0build script
selectors0.38.0build script
serde1.0.229build script
serde_core1.0.229build script
serde_json1.0.151build script
serde_spanned1.1.1
serde_urlencoded0.7.1
servo_arc0.4.3
sha10.10.7
sha10.11.0
sha20.10.9
sha20.11.0
signal-hook0.3.18build script
signal-hook-mio0.2.5
signal-hook-registry1.4.8
signature2.2.0
simd-adler320.3.10
simdutf80.1.5
siphasher1.0.3
slab0.4.12
smallvec1.15.2
socket20.6.5
spider2.53.9
spider_agent_types2.53.9
spider_fingerprint2.39.0build scriptnetworkgooglechromelabs.github.io
spki0.7.3
stable_deref_trait1.2.1
static_assertions1.1.0
streaming-iterator0.1.9
string_cache0.9.0
string_concat0.0.1
strsim0.11.1
strum0.28.0
subtle2.6.1
sync_wrapper1.0.2
tendril0.5.1
thiserror1.0.69build script
thiserror2.0.20build script
time0.3.54
time-core0.1.9
tinystr0.8.3
tokio1.53.1
tokio-rustls0.26.4
tokio-stream0.1.19
tokio-util0.7.19
toml1.1.4+spec-1.1.0
toml_datetime1.1.1+spec-1.1.0
toml_parser1.1.3+spec-1.1.0
toml_writer1.1.2+spec-1.1.0
tower0.5.3
tower-http0.6.11
tower-layer0.3.3
tower-service0.3.3
tracing0.1.44
tracing-core0.1.36
tree-sitter0.26.11build script
tree-sitter-c-sharp0.23.5build script
tree-sitter-cpp0.23.4build script
tree-sitter-elixir0.3.5build script
tree-sitter-java0.23.5build script
tree-sitter-javascript0.25.0build script
tree-sitter-language0.1.7build script
tree-sitter-python0.25.0build script
tree-sitter-rust0.24.2build script
tree-sitter-typescript0.23.2build script
try-lock0.2.5
typenum1.20.1
unicase2.9.0
unicode-segmentation1.13.3
unicode-truncate2.0.1
unicode-width0.2.0
untrusted0.9.0
url2.5.8
urlencoding2.1.3
utf8_iter1.0.4
utf8parse0.2.2
uuid1.24.0
vsimd0.8.0
walkdir2.5.0
want0.3.1
web_atoms0.2.6build script
webpki-roots1.0.9
winnow1.0.4
writeable0.6.3
xmlparser0.13.6
yaml-rust20.13.0
yoke0.8.3
zerocopy0.8.62build script
zerofrom0.1.8
zeroize1.9.0
zerotrie0.2.4
zerovec0.11.6
zip6.0.0
zlib-rs0.6.8
zmij1.0.23build script
zopfli0.8.4
zstd0.14.2
zstd-safe8.1.0build script
zstd-sys2.1.1+zstd.1.5.7build script
adler22.0.1
critical-section1.2.0
getopts0.2.24
libm0.2.16build script
minimal-lexical0.2.1
miniz_oxide0.8.9
miniz_oxide0.9.1
spin0.10.1
tempfile3.27.0
unicode-ident1.0.24
android_system_properties0.1.5
anstyle-wincon3.0.11
approx0.5.1
arbitrary1.5.0
assert_cmd2.2.2build script
async-trait0.1.92proc macro
atomic0.6.1
autocfg1.5.1
aws-smithy-runtime-api-macros1.1.0proc macro
bit-set0.5.3
bit-vec0.6.3
by_address1.2.1
bytemuck1.25.2
cc1.4.0
cfg_aliases0.2.2
chacha200.10.2
clap_derive4.6.4proc macro
cmake0.1.58
combine4.6.7
convert_case0.10.0
core-foundation0.10.1
core-foundation0.9.4
core-foundation-sys0.8.7
crossterm_winapi0.9.1
csscolorparser0.6.2
cssparser-macros0.6.1proc macro
cssparser-macros0.7.1proc macro
darling0.23.0
darling_core0.23.0
darling_macro0.23.0proc macro
deltae0.3.2
derive_arbitrary1.5.0proc macro
derive_more-impl2.1.1proc macro
difflib0.4.0
displaydoc0.2.7proc macro
document-features0.2.12proc macro
dunce1.0.5
euclid0.22.14
fancy-regex0.11.0
fast-srgb81.0.0
filedescriptor0.8.3
find-msvc-tools0.1.9
finl_unicode1.4.0
fixedbitset0.4.2
float-cmp0.10.0
fs_extra1.3.0
fsevent-sys4.1.0
futures-macro0.3.33proc macro
heck0.5.0
hermit-abi0.5.3
iana-time-zone-haiku0.1.2build script, not run
ident_case1.0.1
indoc2.0.7proc macro
instability0.3.12build scriptproc macro
jni0.22.4build script, not run
jni-macros0.22.4build script, not runproc macro
jni-sys0.4.1
jni-sys-macros0.4.1proc macro
jobserver0.1.35
js-sys0.3.103
kqueue1.2.0
kqueue-sys1.1.2
lab0.11.0
litrs1.0.0
lru-slab0.1.2
mac_address1.1.8
memmem0.1.1
memoffset0.9.1build script, not run
nix0.29.0build script, not run
normalize-line-endings0.3.0
num-derive0.4.2proc macro
once_cell_polyfill1.70.2
ordered-float4.6.0
palette0.7.6build script, not run
palette_derive0.7.6proc macro
pest2.8.8
pest_derive2.8.8proc macro
pest_generator2.8.8
pest_meta2.8.8
phf_codegen0.11.3
phf_codegen0.13.1
phf_generator0.11.3
phf_generator0.13.1
phf_macros0.11.3proc macro
phf_macros0.13.1proc macro
pkg-config0.3.33
portable-atomic1.14.0build script, not run
predicates3.1.4
predicates-core1.0.10
predicates-tree1.0.13
proc-macro21.0.107build script
quinn0.11.11build script, not run
quinn-proto0.11.19
quinn-udp0.5.15build script, not run
quote1.0.47build script
r-efi5.3.0
r-efi6.0.0
rand0.10.2
rand0.8.7
rand_core0.10.1
rand_pcg0.10.2
ratatui-termina0.1.0
ratatui-termwiz0.1.2
redox_syscall0.5.18
rustc_version0.4.1
rustls-platform-verifier-android0.1.1
rustversion1.0.23build scriptproc macro
schannel0.1.29
security-framework3.7.0
security-framework-sys2.17.0
semver1.0.28
serde_derive1.0.229proc macro
shlex2.0.1
simd_cesu81.2.0
string_cache_codegen0.6.1
strum_macros0.28.0proc macro
syn1.0.109build script, not run
syn2.0.119
syn3.0.3
synstructure0.13.2
system-configuration0.7.0
system-configuration-sys0.6.0build script, not run
termina0.3.3
terminfo0.9.0build script, not run
termios0.3.3
termtree0.5.1
termwiz0.23.3
thiserror-impl1.0.69proc macro
thiserror-impl2.0.20proc macro
time-macros0.2.32proc macro
tinyvec1.12.0
tinyvec_macros0.1.1
tokio-macros2.7.2proc macro
tracing-attributes0.1.31proc macro
ucd-trie0.1.7
version_check0.9.5
vtparse0.6.2
wait-timeout0.2.1
wasi0.11.1+wasi-snapshot-preview1
wasip21.0.4+wasi-0.2.12
wasm-bindgen0.2.126build script, not run
wasm-bindgen-futures0.4.76
wasm-bindgen-macro0.2.126proc macro
wasm-bindgen-macro-support0.2.126
wasm-bindgen-shared0.2.126build script, not run
wasm-streams0.5.0
web-sys0.3.103
web-time1.1.0
webpki-root-certs1.0.9
wezterm-bidi0.2.3
wezterm-blob-leases0.1.1
wezterm-color-types0.3.0
wezterm-dynamic0.2.1
wezterm-dynamic-derive0.1.1proc macro
wezterm-input-types0.1.0
winapi0.3.9build script, not run
winapi-i686-pc-windows-gnu0.4.0build script, not runprebuilt objects
winapi-util0.1.11
winapi-x86_64-pc-windows-gnu0.4.0build script, not runprebuilt objects
windows-core0.62.2
windows-implement0.60.2proc macro
windows-interface0.59.3proc macro
windows-link0.2.1
windows-registry0.6.1
windows-result0.4.1
windows-strings0.5.1
windows-sys0.48.0
windows-sys0.52.0
windows-sys0.61.2
windows-targets0.48.5
windows-targets0.52.6
windows_aarch64_gnullvm0.48.5build script, not runprebuilt objects
windows_aarch64_gnullvm0.52.6build script, not runprebuilt objects
windows_aarch64_msvc0.48.5build script, not runprebuilt objects
windows_aarch64_msvc0.52.6build script, not runprebuilt objects
windows_i686_gnu0.48.5build script, not runprebuilt objects
windows_i686_gnu0.52.6build script, not runprebuilt objects
windows_i686_gnullvm0.52.6build script, not runprebuilt objects
windows_i686_msvc0.48.5build script, not runprebuilt objects
windows_i686_msvc0.52.6build script, not runprebuilt objects
windows_x86_64_gnu0.48.5build script, not runprebuilt objects
windows_x86_64_gnu0.52.6build script, not runprebuilt objects
windows_x86_64_gnullvm0.48.5build script, not runprebuilt objects
windows_x86_64_gnullvm0.52.6build script, not runprebuilt objects
windows_x86_64_msvc0.48.5build script, not runprebuilt objects
windows_x86_64_msvc0.52.6build script, not runprebuilt objects
wit-bindgen0.57.1build script, not runprebuilt objects
yoke-derive0.8.2proc macro
zerocopy-derive0.8.62proc macro
zerofrom-derive0.1.7proc macro
zerovec-derive0.11.3proc macro
Versions4RiskVulnsPublished
0.7.01d ago
0.2.08d ago
0.1.0not analyzed2026-07-24
0.7.1highhigh

Raw data

capture
1.7 MB
records
292,831
bytes per record
5.9

Loading a sample of the capture

Want to see more? E-mail us at hello@bitbison.io about your use case.

1 of 1 jobs captured: build-test success · Generated 2026-10-17 · run 23cbf5da-776d-46bc-a198-82afd4d72978

analysis 0.1.0 · 2026-10-16 · e987d53 · graph v2