Skip to content
Open-Source Registry

cargo / kamino

kamino 1.1.1

processes
919
operations
83K
packages
70
compiler runs
732
connections
2
job time
35s
capture
377 KB
records
106K
bytes / record
3.5

Help manage a bunch of git repo clones by ensuring they are in sync with the remote.

12 vulnerabilities

Build behaviourcompiled C/C++

3,962 downloads · Apache-2.0 OR MIT · published 2022-10-14 · source · cargo

git repo sync

Release 1.1.1 run 66c71b56-dd2a-4237-a1c4-73e8b3c98340 · built 2026-10-08

Artifact

binary · retained · product
2
ChecksDetections
Build behavior
✓ Network activity—
✓ Sensitive data access and transfer—
✓ Cross-process access—
✓ Build file changes—
✓ Build script activity—
✓ Data flow analysis—
✓ Filesystem writes—
✓ Context collection—
Supply chain
▲ Known vulnerabilities—
▲ Build-time dependency advisories—
▲ Dependency advisories—
✓ Declared and observed dependencies—
✓ Dependency and toolchain versions—
Pipeline
✓ Pipeline coverage—

Detections

0

No detections

No abnormal activity detected across 83K flows.

Network

0 peers
    cargo fetched 9,763 files from static.crates.iorustup fetched 179 files from static.rust-lang.org
    Vulnerable dependencies11PackageVersionFixSeverityTitleReach
    GHSA-22q8-ghmq-63vflibgit2-sys0.14.0+1.5.0>=0.16.2highlibgit2-sys affected by memory corruption, denial of service, and arbitrary code execution in libgit2retained
    CVE-2023-22742git20.15.0>=0.16.1mediumgit2-rs fails to verify SSH keys by defaultretained
    CVE-2024-12224idna0.2.3>=1.0.0medium`idna` accepts Punycode labels that do not produce any non-ASCII when decodedretained
    CVE-2023-22742libgit2-sys0.14.0+1.5.0>=0.14.2mediumgit2-rs fails to verify SSH keys by defaultretained
    RUSTSEC-2026-0190anyhow1.0.64>=1.0.103lowUnsoundness in `Error::downcast_mut()`retained
    GHSA-g98v-hv3f-hcfratty0.2.14none publishedlowatty potential unaligned readretained
    RUSTSEC-2024-0375atty0.2.14none publishedlow`atty` is unmaintainedretained
    GHSA-j39j-6gw9-jw6hgit20.15.0>=0.20.4lowgit2 has potential undefined behavior when dereferencing Buf structretained
    RUSTSEC-2026-0183git20.15.0>=0.21.0lowPotential undefined behavior when calling Remote::list()retained
    RUSTSEC-2026-0184git20.15.0>=0.21.0lowPotential undefined behavior with Signature from a buffer-created BlameHunkretained
    GHSA-mc8h-8q98-g5hrremove_dir_all0.5.3>=0.8.0lowRace Condition Enabling Link Following and Time-of-check Time-of-use (TOCTOU) Race Condition in remove_dir_allretained

    Raw data

    capture
    377 KB
    records
    106,192
    bytes per record
    3.5

    Loading a sample of the capture

    Want to see more? E-mail us at hello@bitbison.io about your use case.

    Dependencies

    70 packages, 15 with a build script that ran, 4 doing more than compiling
    PackageVersionUsageBuild behaviour
    libssh2-sys0.2.23linkedbuild scriptruns tools git
    vcpkg0.2.15buildtime_onlyprebuilt objects
    winapi-i686-pc-windows-gnu0.4.0platform_gatedbuild script, not runprebuilt objects
    winapi-x86_64-pc-windows-gnu0.4.0platform_gatedbuild script, not runprebuilt objects
    anyhow direct1.0.64linkedbuild script
    clap_derive3.2.17linkedproc macro
    generic-array0.14.6linkedbuild script
    indexmap1.9.1linkedbuild script
    ld-linux-x86-64.so.2linkedsystem library
    libc0.2.131linkedbuild script
    libc.so.6linkedsystem library
    libcrypto.so.3linkedsystem library
    libgcc_s.so.1linkedsystem library
    libgit2-sys0.14.0+1.5.0linkedbuild script
    libm.so.6linkedsystem library
    libmvec.so.1linkedsystem library
    libssl.so.3linkedsystem library
    libz-sys1.1.8linkedbuild script
    log0.4.17linkedbuild script
    openssl-sys0.9.75linkedbuild script
    proc-macro-error1.0.4linkedbuild script
    proc-macro-error-attr1.0.4linkedbuild scriptproc macro
    proc-macro21.0.43linkedbuild script
    quote1.0.21linkedbuild script
    syn1.0.99linkedbuild script
    thiserror-impl1.0.34linkedproc macro
    typenum1.15.0linkedbuild script
    winapi0.3.9platform_gatedbuild script, not run
    atty0.2.14linked
    autocfg1.1.0buildtime_only
    bitflags1.3.2linked
    block-buffer0.10.2linked
    cc1.0.73linked
    cfg-if1.0.0linked
    clap direct3.2.17linked
    clap_lex0.2.4linked
    cpufeatures0.2.2linked
    crypto-common0.1.6linked
    digest0.10.3linked
    fastrand1.8.0linked_undeclared
    form_urlencoded1.0.1linked
    git2 direct0.15.0linked
    hashbrown0.12.3linked
    heck0.4.0linked
    hermit-abi0.1.19platform_gated
    idna0.2.3linked
    instant0.1.12unrelated
    jobserver0.1.24linked
    matches0.1.9linked
    once_cell1.13.0linked
    openssl-probe0.1.5linked
    os_str_bytes6.2.0linked
    percent-encoding2.1.0linked
    pkg-config0.3.25linked
    redox_syscall0.2.16unrelated
    remove_dir_all0.5.3linked_undeclared
    sha2 direct0.10.2linked
    strsim0.10.0linked
    tempfile3.3.0linked_undeclared
    termcolor1.1.3linked
    textwrap0.15.0linked
    thiserror direct1.0.34linked
    tinyvec1.6.0linked
    tinyvec_macros0.1.0linked
    unicode-bidi0.3.8linked
    unicode-ident1.0.3linked
    unicode-normalization0.1.21linked
    url2.2.2linked
    version_check0.9.4buildtime_only
    winapi-util0.1.5platform_gated

    1 of 1 jobs captured: build-test success · Generated 2026-10-08 · tarp 0.1.0+20261008010522-g7d82935f3902 · run 66c71b56-dd2a-4237-a1c4-73e8b3c98340