Skip to content
Open-Source Registry

cargo / htl-cli / 0.13.0

htl-cli 0.13.0

processes
590
operations
163K
packages
176
compiler runs
2,163
connections
3
job time
3m 52s
capture
1.1 MB
records
235K
bytes / record
4.5
run d3e3051e-feb6-4080-ae1b-dda56284b15a · built 2026-10-07 · complete
2 detections3 vulnerabilities

Build behaviournot recorded for this run

Artifact

file · retained · product
3
ChecksDetections
Build behavior
▲ Network activity—
✓ Sensitive data access and transfer—
✓ Cross-process access—
✓ Build file changes—
✓ Build script activity—
✓ Data flow analysis—
✓ Filesystem writes—
✓ Context collection—
Supply chain
▲ Known vulnerabilities—
✓ Build-time dependency advisories—
▲ Dependency advisories—
✓ Declared and observed dependencies—
✓ Dependency and toolchain versions—
Pipeline
✓ Pipeline coverage—

Detections

2
  • Dependency fetcher connected to an undeclared host
    api.github.com:443 › api.github.com:443, crates.io
    opened by cargo
    high
  • Dependency fetcher connected to an undeclared host
    github.com:443 › github.com:443, crates.io
    opened by cargo
    high

Detection

high

Dependency fetcher connected to an undeclared host

subject api.github.com:443 · destination api.github.com:443, crates.io

opened by cargo

Allowed dependency hosts: crates.io

  1. rustup5512
  2. cargo5512
  3. scaffold_cli-ce6990638d5947679564
  4. htl-19eef8541d1fa8cb9597
  5. cargo9611at 06:41:55

witnessed · rule egress

Detection

high

Dependency fetcher connected to an undeclared host

subject github.com:443 · destination github.com:443, crates.io

opened by cargo

Allowed dependency hosts: crates.io

  1. rustup5512
  2. cargo5512
  3. scaffold_cli-ce6990638d5947679564
  4. htl-19eef8541d1fa8cb9597
  5. cargo9611at 06:41:55

witnessed · rule egress

Network

3 peers
  • api.github.com:443 GitHub, Inc.
    cargo · build-test
    flagged
  • github.com:443 GitHub, Inc.
    cargo · build-test
    flagged
  • static.crates.io:8080
    cargo (htl) via crates.io · build-test
    allowed
Vulnerable dependencies3PackageVersionFixSeverityTitleReach
GHSA-j39j-6gw9-jw6hgit20.18.3>=0.20.4lowgit2 has potential undefined behavior when dereferencing Buf structretained
RUSTSEC-2026-0183git20.18.3>=0.21.0lowPotential undefined behavior when calling Remote::list()retained
RUSTSEC-2026-0184git20.18.3>=0.21.0lowPotential undefined behavior with Signature from a buffer-created BlameHunkretained

Raw data

capture
1.1 MB
records
235,030
bytes per record
4.5

Loading a sample of the capture

Want to see more? E-mail us at hello@bitbison.io about your use case.

Dependencies

178 packages, 0 with a build script that ran, 0 doing more than compiling
PackageVersionUsageBuild behaviour
aho-corasick1.1.5unrelated
alloca0.4.0unrelated
anes0.1.6unrelated
anstream1.0.0linked
anstyle1.0.14linked
anstyle-parse1.0.0linked
anstyle-query1.1.5linked
anstyle-wincon3.0.11platform_gated
anyhow direct1.0.104linked
arrayvec0.7.8linked
autocfg1.5.1buildtime_only
bitflags2.13.1linked
blake31.8.7linked
bstr1.13.1linked
bumpalo3.20.3unrelated
cast0.3.0unrelated
cc1.4.5linked
cfg-if1.0.4linked
ciborium0.2.2unrelated
ciborium-io0.2.2unrelated
ciborium-ll0.2.2unrelated
clap direct4.6.6linked
clap_builder4.6.6linked
clap_derive4.6.4linked
clap_lex1.1.0linked
colorchoice1.0.5linked
constant_time_eq0.4.2linked
cpufeatures0.3.1linked
criterion0.8.2unrelated
criterion-plot0.8.2unrelated
crossbeam-deque0.8.8unrelated
crossbeam-epoch0.9.21unrelated
crossbeam-utils0.8.23unrelated
crunchy0.2.4unrelated
displaydoc0.2.7linked
either1.18.0linked
equivalent1.0.2linked
erased-serde0.4.10linked
errno0.3.14linked
find-msvc-tools0.1.12linked
form_urlencoded1.2.2linked
futures-core0.3.34linked
futures-task0.3.34linked
futures-util0.3.34linked
getrandom0.4.3buildtime_only
git20.18.3linked
half2.7.1unrelated
hashbrown0.17.1linked
heck0.5.0linked
htl direct0.13.0linked
htlorphan
htl-core0.13.0linked
icu_collections2.3.0linked
icu_locale_core2.3.0linked
icu_normalizer2.3.0linked
icu_normalizer_data2.3.0linked
icu_properties2.3.0linked
icu_properties_data2.3.0linked
icu_provider2.3.1linked
idna1.1.0linked
idna_adapter1.2.2linked
indexmap2.14.2linked
is_terminal_polyfill1.70.2linked
itertools0.13.0unrelated
itoa1.0.18linked
jobserver0.1.35linked
js-sys0.3.105unrelated
ld-linux-x86-64.so.2linked
libc0.2.189linked
libc.so.6linked
libcrypto.so.3linked
libgcc_s.so.1linked
libgit2-sys0.16.2+1.7.2linked
libm.so.6linked
libmvec.so.1linked
libssh2-sys0.3.3linked git
libssl.so.3linked
libz-sys1.1.29linked
litemap0.8.3linked
lock_api0.4.14linked
log0.4.34linked
lua-src551.0.2linked
luajit-src210.7.3+1ee778abuildtime_only
memchr2.8.3linked
mio1.2.3linked
mlua0.12.2linked
mlua-batteries0.7.3linked
mlua-isle0.9.0linked
mlua-pkg0.11.0linked
mlua-sys0.13.0linked
num-traits0.2.19linked
once_cell1.21.4unrelated
once_cell_polyfill1.70.2platform_gated
oorandom11.1.5unrelated
openssl-probe0.1.6linked
openssl-sys0.9.117linked
ordered-float2.10.1linked
page_size0.6.0unrelated
parking_lot0.12.5linked
parking_lot_core0.9.12linked
percent-encoding2.3.2linked
pin-project-lite0.2.17linked
pkg-config0.3.34linked
plotters0.3.7unrelated
plotters-backend0.3.7unrelated
plotters-svg0.3.7unrelated
potential_utf0.1.6linked
proc-macro21.0.107linked
quote1.0.47linked
r-efi6.0.0buildtime_only
rayon1.12.0unrelated
rayon-core1.13.0unrelated
redox_syscall0.5.18platform_gated
regex1.13.1unrelated
regex-automata0.4.18unrelated
regex-syntax0.8.11unrelated
rustc-hash2.1.3linked
rustversion1.0.23unrelated
same-file1.0.6linked
scopeguard1.2.0linked
semver direct1.0.28linked
serde direct1.0.229linked
serde-value0.7.0linked
serde_core1.0.229linked
serde_derive1.0.229linked
serde_json direct1.0.151linked
serde_spanned0.6.9linked
shlex2.0.1linked
signal-hook-registry1.4.8linked
slab0.4.12linked
smallvec1.16.0linked
stable_deref_trait1.2.1linked
strsim0.11.1linked
syn2.0.119linked
syn3.0.5linked
synstructure0.13.2linked
thiserror2.0.20linked
thiserror-impl2.0.20linked
tinystr0.8.4linked
tinytemplate1.2.1unrelated
tokio direct1.53.1linked
tokio-macros2.7.2linked
toml direct0.8.23linked
toml_datetime0.6.11linked
toml_edit0.22.27linked
toml_write0.1.2linked
typeid1.0.3linked
unicode-ident1.0.24linked
url2.5.8linked
utf8_iter1.0.4linked
utf8parse0.2.2linked
vcpkg0.2.15buildtime_only
walkdir2.5.0linked
wasi0.11.1+wasi-snapshot-preview1platform_gated
wasm-bindgen0.2.128unrelated
wasm-bindgen-macro0.2.128unrelated
wasm-bindgen-macro-support0.2.128unrelated
wasm-bindgen-shared0.2.128unrelated
web-sys0.3.105unrelated
which8.0.6buildtime_only
winapi0.3.9unrelated
winapi-i686-pc-windows-gnu0.4.0unrelated
winapi-util0.1.11platform_gated
winapi-x86_64-pc-windows-gnu0.4.0unrelated
windows-link0.2.1platform_gated
windows-sys0.61.2platform_gated
winnow0.7.15linked
writeable0.6.4linked
yoke0.8.3linked
yoke-derive0.8.2linked
zerocopy0.8.56unrelated
zerocopy-derive0.8.56unrelated
zerofrom0.1.8linked
zerofrom-derive0.1.7linked
zerotrie0.2.5linked
zerovec0.11.8linked
zerovec-derive0.11.6linked
zmij1.0.23linked

1 of 1 jobs captured: build-test success · Generated 2026-10-07 · tarp 0.1.0+20261007022833-g16cc1581f632 · run d3e3051e-feb6-4080-ae1b-dda56284b15a