Skip to content
Open-Source Registry

cargo / jigor / 0.1.13

jigor 0.1.13

bitbison: flagged, behavior flagged, dependencies notes, posture not checked, pipeline clean, 1 of 1 jobs captured RiskmediumVulnsnone
processes
342
operations
47K
packages
162
compiler runs
118
connections
2
job time
2m 03s
capture
543 KB
records
82K
bytes / record
6.6

Build behaviourhas a build scriptfetch went into the outputfetched outside crates.iocompiled C/C++

run ed9a36bc-9c02-4cb8-8ce3-a5cef0c6eb29 · built 2026-10-16 · complete View on crates.io

Graph

egress · medium · in libjigor.rlib
2

Checks

12 of 14 clear Network activity Build-time dependency advisories
Build behavior▲✓✓✓✓✓✓✓
Supply chain✓▲✓✓✓
Pipeline✓

Detections

1
  • Build script reached cdn.pyke.io
    ort-sys 2.0.0-rc.13 › cdn.pyke.io:443
    medium

Detection

mediumwitnessed

Build script reached cdn.pyke.io

Unexpected network connection

Subject
ort-sys 2.0.0-rc.13
Destination
cdn.pyke.io:443
Reaches
Jobs
build-test
Rule
egress

Evidence

  1. Connection outside the process’s allowed destinationscause

    connection to cdn.pyke.io:443, opened by build-script-main

    subject cdn.pyke.io:443

    by /home/runner/work/jigor/jigor/target/release/build/ort-sys-ef916d4f9a0c2171/build-script-main

  2. What a build script's fetch becamesupport

    5 files came down; the build compiled or linked libonnxruntime.a

  3. Connection opened by a build script or child processsupport

    the opener is the build script at /home/runner/work/jigor/jigor/target/release/build/ort-sys-ef916d4f9a0c2171/build-script-main

  4. Build script fetched what its crate documents it fetchessupport

    ort-sys's build script fetches a prebuilt ONNX Runtime from cdn.pyke.io: ort's default `download-binaries` feature fetches pyke's prebuilt from its CDN

In libjigor.rlib

Loading the graph

Processes

build-test

cargo›cargo›build-script-main

Ran
/home/runner/work/jigor/jigor/target/release/build/ort-sys-ef916d4f9a0c2171/build-script-main
Invoked by
cargo build --release --locked --message-format=json-render-diagnostics
Lineage · 3 processes
  1. cargocargo build --release --locked --message-format=json-render-diagnostics2458
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo build --release --locked --message-format=json-render-diagnostics2458
  3. build-script-main/home/runner/work/jigor/jigor/target/release/build/ort-sys-ef916d4f9a0c2171/build-script-main4365

Remediation

The crate's build script reached the network at compile time, outside the registry's checksums. Build it from what the registry ships (the crate's own environment variable or from-source feature), or record the download as accepted once it is reviewed.

Network

2 peers
  • cdn.pyke.io:443 build code of ort-sys · build-script-main · Cloudflare, Inc. · 5 files · went into an output documented
  • static.crates.io:8080 the package manager · cargo (jigor) via crates.io · 11,566 files · went into an output ecosystem
Dependencies169Build behaviour
adler22.0.1
ahash0.8.12build script
aho-corasick1.1.5
anyhow1.0.104build script
approx0.5.1
autocfg1.5.1
base640.13.1
base640.23.1
bitflags2.13.2
bumpalo3.20.3
byteorder1.5.0
bytes1.12.1
castaway0.2.4
cc1.4.7
cfg-if1.0.5
compact_str0.9.1
console0.15.11
console0.16.6
crc32fast1.5.2build script
crossbeam-deque0.8.8build script
crossbeam-epoch0.9.21build script
crossbeam-utils0.8.23build script
daachorse3.0.3
darling0.20.11
darling_core0.20.11
darling_macro0.20.11proc macro
dary_heap0.3.9
derive_builder0.20.2
derive_builder_core0.20.2
derive_builder_macro0.20.2proc macro
either1.18.0
encode_unicode1.0.0
esaxx-rs0.1.10build script
find-msvc-tools0.1.13
flate21.1.10
fnv1.0.7
futures-core0.3.34
futures-task0.3.34
futures-util0.3.34
getrandom0.2.17
getrandom0.3.4build script
hmac-sha2561.1.14
http1.5.0
httparse1.10.1build script
ident_case1.0.1
indicatif0.17.11
indicatif0.18.6
itertools0.14.0
itoa1.0.18
js-sys0.3.105
ld-linux-x86-64.so.2system library
libc0.2.189build script
libc.so.6system library
libgcc_s.so.1system library
libm.so.6system library
libmvec.so.1system library
log0.4.34
lzma-rust20.15.8
macro_rules_attribute0.2.3
macro_rules_attribute-proc_macro0.2.3proc macro
matrixmultiply0.3.11build script
memchr2.8.3
minimal-lexical0.2.1
miniz_oxide0.9.1
mio1.2.3
monostate0.1.18
monostate-impl0.1.18proc macro
ndarray0.17.2
nom7.1.3
num-complex0.4.6
num-integer0.1.47
num-traits0.2.19build script
number_prefix0.4.0
once_cell1.21.4
onig6.5.3
onig_sys69.9.3build script
ort2.0.0-rc.13
ort-sys2.0.0-rc.13build scriptnetworkcdn.pyke.io
paste1.0.15build scriptproc macro
pastey0.2.3proc macro
percent-encoding2.3.2
pin-project-lite0.2.17
pkg-config0.3.34
portable-atomic1.15.0build script
portable-atomic-util0.2.8build script, not run
ppv-lite860.2.21
proc-macro21.0.107build script
quote1.0.47build script
r-efi5.3.0
rand0.9.5
rand_chacha0.9.0
rand_core0.9.5
rawpointer0.2.1
rayon1.12.0
rayon-cond0.4.0
rayon-core1.13.0build script
regex1.13.1
regex-automata0.4.18
regex-syntax0.8.11
ring0.17.14build scriptprebuilt objects
rustls0.23.45build script
rustls-pki-types1.15.1
rustls-webpki0.103.15
rustversion1.0.23build scriptproc macro
ryu1.0.23
serde1.0.229build script
serde_core1.0.229build script
serde_derive1.0.229proc macro
serde_json1.0.151build script
shlex2.0.1
simd-adler320.3.10
slab0.4.12
smallvec1.16.1
socket20.6.5
socks0.3.4
spm_precompiled0.1.4
static_assertions1.1.0
strsim0.11.1
subtle2.6.1
syn2.0.119
syn3.0.6
thiserror2.0.21build script
thiserror-impl2.0.21proc macro
tokenizers0.23.2
tokio1.53.1
tokio-macros2.7.2proc macro
tracing0.1.44
tracing-core0.1.36
unicode-ident1.0.26
unicode-normalization-alignments0.1.12
unicode-segmentation1.13.3
unicode-width0.2.2
unicode_categories0.1.1
unit-prefix0.5.2
untrusted0.9.0
ureq3.4.2
ureq-proto0.6.4
utf8-zero0.8.1
version_check0.9.5
wasi0.11.1+wasi-snapshot-preview1
wasip21.0.4+wasi-0.2.12
wasm-bindgen0.2.128build script, not run
wasm-bindgen-macro0.2.128proc macro
wasm-bindgen-macro-support0.2.128
wasm-bindgen-shared0.2.128build script, not run
web-time1.1.0
webpki-roots1.0.9
winapi0.3.9build script, not run
winapi-i686-pc-windows-gnu0.4.0build script, not runprebuilt objects
winapi-x86_64-pc-windows-gnu0.4.0build script, not runprebuilt objects
windows-link0.2.1
windows-sys0.52.0
windows-sys0.59.0
windows-sys0.61.2
windows-targets0.52.6
windows_aarch64_gnullvm0.52.6build script, not runprebuilt objects
windows_aarch64_msvc0.52.6build script, not runprebuilt objects
windows_i686_gnu0.52.6build script, not runprebuilt objects
windows_i686_gnullvm0.52.6build script, not runprebuilt objects
windows_i686_msvc0.52.6build script, not runprebuilt objects
windows_x86_64_gnu0.52.6build script, not runprebuilt objects
windows_x86_64_gnullvm0.52.6build script, not runprebuilt objects
windows_x86_64_msvc0.52.6build script, not runprebuilt objects
wit-bindgen0.57.1build script, not runprebuilt objects
zerocopy0.8.58build script
zerocopy-derive0.8.58proc macro
zeroize1.9.0
zlib-rs0.6.8
zmij1.0.23build script
Versions12RiskVulnsPublished
0.1.132d ago
0.1.1210d ago
0.1.10not analyzed13d ago
0.1.9not analyzed2026-09-30
0.1.8not analyzed2026-09-30
0.1.7not analyzed2026-09-29
0.1.5not analyzed2026-09-25
0.1.4not analyzed2026-09-25
0.1.2not analyzed2026-09-24
0.1.1not analyzed2026-09-24
0.1.0not analyzed2026-09-24
0.1.14mediumnone

Raw data

capture
543 KB
records
82,366
bytes per record
6.6

Loading a sample of the capture

Want to see more? E-mail us at hello@bitbison.io about your use case.

1 of 1 jobs captured: build-test success · Generated 2026-10-16 · run ed9a36bc-9c02-4cb8-8ce3-a5cef0c6eb29

analysis 0.1.0 · 2026-10-15 · 244c7b2 · graph v2