Skip to content
Open-Source Registry

cargo / gnostr-grammar / 971907.1844.75902

gnostr-grammar 971907.1844.75902

bitbison: flagged, behavior flagged, dependencies clean, posture not checked, pipeline clean, 1 of 1 jobs captured RiskmediumVulnsnone
processes
323
operations
43K
packages
62
compiler runs
231
connections
2
job time
37s
capture
397 KB
records
67K
bytes / record
5.9

Build behaviourits build script reached github.comits build script ran gitundeclared fetchfetched outside crates.iocompiled C/C++

run 826a952f-1d1c-4c20-ab5b-7928477fe759 · built 2026-10-17 · complete View on crates.io

Graph

egress · medium · in libgnostr_grammar.rlib
2

Checks

13 of 14 clear Network activity
Build behavior▲✓✓✓✓✓✓✓
Supply chain✓✓✓✓✓
Pipeline✓

Detections

1
  • Build script reached github.com
    gnostr-grammar 971907.1844.75902 › github.com:443
    medium

Detection

mediumwitnessed

Build script reached github.com

Unexpected network connection

Subject
gnostr-grammar 971907.1844.75902
Destination
github.com:443
Reaches
Jobs
build-test
Rule
egress

Evidence

  1. Connection outside the process’s allowed destinationscause

    connection to github.com:443, opened by git-remote-http

    subject github.com:443

    by /usr/lib/git-core/git-remote-https origin https://github.com/helix-editor/helix

  2. What a build script's fetch becamesupport

    48 files came down; nothing the build compiled, linked or ran

  3. Connection opened by a build script or child processsupport

    the opener descends from the build script at /home/runner/work/gnostr-grammar/gnostr-grammar/target/release/build/gnostr-grammar-36b06c0cb11a7f0d/build_script_build-36b06c0cb11a7f0d

  4. Tool commandsupport

    Command: /usr/lib/git-core/git-remote-https origin https://github.com/helix-editor/helix

    by /usr/lib/git-core/git-remote-https origin https://github.com/helix-editor/helix

In libgnostr_grammar.rlib

Loading the graph

Processes

build-test

cargo›cargo›build-script-build›git›git›git-remote-https

Ran
/usr/lib/git-core/git-remote-https origin https://github.com/helix-editor/helix
Invoked by
cargo build --release --locked --message-format=json-render-diagnostics
Lineage · 6 processes
  1. cargocargo build --release --locked --message-format=json-render-diagnostics2468
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo build --release --locked --message-format=json-render-diagnostics2468
  3. build-script-build/home/runner/work/gnostr-grammar/gnostr-grammar/target/release/build/gnostr-grammar-36b06c0cb11a7f0d/build-script-build3207
  4. gitgit fetch --depth 1 origin 82dd96369302f60a9c83a2d54d021458f82bcd363225
  5. git/usr/lib/git-core/git remote-https origin https://github.com/helix-editor/helix3213
  6. git-remote-https/usr/lib/git-core/git-remote-https origin https://github.com/helix-editor/helix3215

Remediation

The build script connected to the network while compiling. Nothing it downloaded was compiled, linked or run. Build the crate from what the registry ships, or accept the download after reviewing it.

Network

2 peers
  • github.com:443 gnostr-grammar's own build code · git-remote-http · GitHub, Inc. · 48 files undeclared
  • static.crates.io:8080 the package manager · cargo (gnostr-grammar) via crates.io · 2,485 files · went into an output ecosystem
Dependencies63Build behaviour
aho-corasick1.1.5
android_system_properties0.1.6
anyhow1.0.104build script
autocfg1.5.1
bstr1.13.1
bumpalo3.20.3
cc1.6.0
cfg-if1.0.5
chrono0.4.45
core-foundation-sys0.8.7
equivalent1.0.2
find-msvc-tools0.1.14
globset0.4.20
hashbrown0.17.1
heck0.5.0
hermit-abi0.5.3
iana-time-zone0.1.65
iana-time-zone-haiku0.1.2build script, not run
indexmap2.14.2
js-sys0.3.85
ld-linux-x86-64.so.2system library
libc0.2.190build script
libc.so.6system library
libgcc_s.so.1system library
libm.so.6system library
libmvec.so.1system library
log0.4.34
memchr2.8.3
num-traits0.2.19build script
num_cpus1.17.0
once_cell1.21.4
prettyplease0.2.37build script
proc-macro21.0.107build script
quote1.0.47build script
regex1.13.1
regex-automata0.4.18
regex-syntax0.8.11
rustversion1.0.23build script, not runproc macro
serde1.0.229build script
serde_core1.0.229build script
serde_derive1.0.229proc macro
serde_spanned0.6.9
shlex2.0.1
syn2.0.119
syn3.0.6
threadpool1.8.1
toml0.8.23
toml_datetime0.6.11
toml_edit0.22.27
toml_write0.1.2
tree-sitter-language0.1.8build script
unicode-ident1.0.26
wasm-bindgen0.2.108build script, not run
wasm-bindgen-macro0.2.108proc macro
wasm-bindgen-macro-support0.2.108
wasm-bindgen-shared0.2.108build script, not run
windows-core0.62.2
windows-implement0.60.2proc macro
windows-interface0.59.3proc macro
windows-link0.2.1
windows-result0.4.1
windows-strings0.5.1
winnow0.7.15
Versions65RiskVulnsPublished
971106.1845.1260686d ago
970861.1845.4484957d ago
970860.1845.4501277d ago
970857.1845.4525607d ago
970410.1846.4165110d ago
970403.1846.49785not analyzed10d ago
970402.1846.51281not analyzed10d ago
970398.1846.57265not analyzed10d ago
970396.1846.59223not analyzed10d ago
970395.1846.60635not analyzed10d ago
970395.1846.59875not analyzed10d ago
970378.1846.8133810d ago
970377.1846.8244810d ago
970376.1846.8352710d ago
970374.1846.8660610d ago
953263.1868.499801not analyzed2026-06-11
953261.1868.503007not analyzed2026-06-11
953258.1868.506994not analyzed2026-06-11
949455.1873.486970not analyzed2026-05-15
949111.1873.924142not analyzed2026-05-12
948559.1874.702358not analyzed2026-05-09
948552.1874.711822not analyzed2026-05-09
948552.1874.711231not analyzed2026-05-09
948550.1874.714011not analyzed2026-05-09
948549.1874.715533not analyzed2026-05-09
948545.1874.720598not analyzed2026-05-09
948542.1874.725271not analyzed2026-05-09
948542.1874.724905not analyzed2026-05-09
948536.1874.733283not analyzed2026-05-09
948363.1875.7190not analyzed2026-05-07
948362.1875.8093not analyzed2026-05-07
948360.1875.10265not analyzed2026-05-07
948230.1875.177928not analyzed2026-05-06
948227.1875.182618not analyzed2026-05-06
948222.1875.190767not analyzed2026-05-06
948221.1875.191294not analyzed2026-05-06
1875.947930.564886not analyzed2026-05-04
1875.947922.575642not analyzed2026-05-04
1875.947921.577145not analyzed2026-05-04
1875.947921.576806not analyzed2026-05-04
1875.947917.583327not analyzed2026-05-04
1875.947798.733008not analyzed2026-05-04
1875.947794.739257not analyzed2026-05-04
1875.947772.770295not analyzed2026-05-03
1875.947760.785336not analyzed2026-05-03
1876.947527.130335not analyzed2026-05-02
1876.947519.141056not analyzed2026-05-02
1876.947517.144602not analyzed2026-05-02
1876.947516.146043not analyzed2026-05-02
1876.947514.148827not analyzed2026-05-02
1878.945873.303604not analyzed2026-04-20
1878.945705.530939not analyzed2026-04-19
1878.945705.530574not analyzed2026-04-19
1878.945704.532148not analyzed2026-04-19
1878.945703.533663not analyzed2026-04-19
1878.945702.535048not analyzed2026-04-19
1878.945702.534710not analyzed2026-04-19
1878.945702.534429not analyzed2026-04-19
1878.945701.535746not analyzed2026-04-19
1878.945695.545073not analyzed2026-04-19
1878.945691.549040not analyzed2026-04-19
1878.945649.607219not analyzed2026-04-18
1893.935010.246953not analyzed2026-04-17
1894.934224.276199not analyzed2026-01-29
971907.1844.75902mediumnone

Raw data

capture
397 KB
records
66,988
bytes per record
5.9

Loading a sample of the capture

Want to see more? E-mail us at hello@bitbison.io about your use case.

1 of 1 jobs captured: build-test success · Generated 2026-10-17 · run 826a952f-1d1c-4c20-ab5b-7928477fe759

analysis 0.1.0 · 2026-10-16 · e987d53 · graph v2