cargo / lancor

lancor 0.2.0

processes: 535
operations: 45K
packages: 179
compiler runs: 237
connections: 2
job time: 43s
capture: 422 KB
records: 71K
bytes / record: 5.9

End-to-end llama.cpp toolkit: API client, HuggingFace Hub, server orchestration, benchmarks

11 vulnerabilities Release

Build behaviournot recorded for this run

2,229 downloads · GPL-3.0-only · published 2026-03-23 · source · home page · cargo

ai api llama llm openai

Release 0.2.0 run 2d07a372-e73f-4477-bba7-394e10c11045 · built 2026-10-08

Artifact

binary · retained · product

Checks	Detections
Build behavior
✓ Network activity	—
✓ Sensitive data access and transfer	—
✓ Cross-process access	—
✓ Build file changes	—
✓ Build script activity	—
✓ Data flow analysis	—
✓ Filesystem writes	—
✓ Context collection	—
Supply chain
▲ Known vulnerabilities	—
▲ Build-time dependency advisories	—
▲ Dependency advisories	—
✓ Declared and observed dependencies	—
✓ Dependency and toolchain versions	—
Pipeline
✓ Pipeline coverage	—

Detections

No detections

No abnormal activity detected across 45K flows.

Network

2 peers

huggingface.co:443 Amazon.com, Inc.

lancor-cc6bb5f4a293936d · build-test

unexpected
static.crates.io:8080

cargo (lancor) via crates.io · build-test

allowed

Vulnerable dependencies11	Package	Version	Fix	Severity	Title	Reach
RUSTSEC-2026-0258	h2	0.4.12	>=0.4.16	high	h2 unbounded empty DATA frames	retained
CVE-2026-41676	openssl	0.10.75	>=0.10.78	high	rust-openssl: Deriver::derive and PkeyCtxRef::derive can overflow short buffers on OpenSSL 1.1.1	retained
CVE-2026-41678	openssl	0.10.75	>=0.10.78	high	rust-openssl has incorrect bounds assertion in aes key wrap	retained
CVE-2026-41681	openssl	0.10.75	>=0.10.78	high	rust-openssl: rustMdCtxRef::digest_final() writes past caller buffer with no length check	retained
CVE-2026-41898	openssl	0.10.75	>=0.10.78	high	rust-openssl: Unchecked callback length in PSK/cookie trampolines leaks adjacent memory to peer	retained
CVE-2026-42327	openssl	0.10.75	>=0.10.79	high	rust-openssl has undefined behavior in X509Ref::ocsp_responders for certificates with non-UTF-8 OCSP URLs	retained
CVE-2026-25541	bytes	1.11.0	>=1.11.1	medium	bytes has integer overflow in BytesMut::reserve	retained
CVE-2026-44662	openssl	0.10.75	>=0.10.79	medium	rust-openssl vulnerable to heap buffer overflow when encrypting with AES key-wrap-with-padding	retained
CVE-2026-45784	openssl	0.10.75	>=0.10.80	medium	rust-openssl: Potential out-of-bounds write in `CipherCtxRef::cipher_update_inplace` for AES-KW-PAD ciphers	retained
RUSTSEC-2026-0190	anyhow	1.0.100	>=1.0.103	low	Unsoundness in `Error::downcast_mut()`	retained
CVE-2026-41677	openssl	0.10.75	>=0.10.78	low	rust-opennssl has an Out-of-bounds read in PEM password callback when returning an oversized length	retained

Dependencies

191 packages, 15 with a build script that ran, 19 doing more than compiling

Package	Version	Usage	Build behaviour
ring	0.17.14	feature_gated	build script, not runprebuilt objects
vcpkg	0.2.15	buildtime_only	prebuilt objects
windows_aarch64_gnullvm	0.52.6	feature_gated	build script, not runprebuilt objects
windows_aarch64_msvc	0.52.6	feature_gated	build script, not runprebuilt objects
windows_i686_gnu	0.52.6	feature_gated	build script, not runprebuilt objects
windows_i686_gnullvm	0.52.6	feature_gated	build script, not runprebuilt objects
windows_i686_msvc	0.52.6	feature_gated	build script, not runprebuilt objects
windows_x86_64_gnu	0.52.6	feature_gated	build script, not runprebuilt objects
windows_x86_64_gnullvm	0.52.6	feature_gated	build script, not runprebuilt objects
windows_x86_64_msvc	0.52.6	feature_gated	build script, not runprebuilt objects
wit-bindgen	0.46.0	platform_gated	build script, not runprebuilt objects
anyhow direct	1.0.100	linked	build script
displaydoc	0.2.5	linked	proc macro
futures-macro	0.3.31	linked	proc macro
httparse	1.10.1	linked	build script
icu_normalizer_data	2.1.1	linked	build script
icu_properties_data	2.1.1	linked	build script
ld-linux-x86-64.so.2		linked	system library
libc	0.2.177	linked	build script
libc.so.6		linked	system library
libcrypto.so.3		linked	system library
libgcc_s.so.1		linked	system library
libm.so.6		linked	system library
libmvec.so.1		linked	system library
libssl.so.3		linked	system library
native-tls	0.2.14	linked	build script
openssl	0.10.75	linked	build script
openssl-macros	0.1.1	linked	proc macro
openssl-sys	0.9.111	linked	build script
parking_lot_core	0.9.12	linked	build script
proc-macro2	1.0.103	linked	build script
quote	1.0.42	linked	build script
rustix	1.1.2	linked	build script
rustls	0.23.35	feature_gated	build script, not run
rustversion	1.0.22	buildtime_only	build script, not runproc macro
serde direct	1.0.228	linked	build script
serde_core	1.0.228	linked	build script
serde_derive	1.0.228	linked	proc macro
serde_json direct	1.0.145	linked	build script
system-configuration-sys	0.6.0	platform_gated	build script, not run
thiserror	2.0.18	platform_gated	build script, not run
thiserror-impl	2.0.18	buildtime_only	proc macro
tokio-macros	2.6.0	linked	proc macro
wasm-bindgen	0.2.105	platform_gated	build script, not run
wasm-bindgen-macro	0.2.105	buildtime_only	proc macro
wasm-bindgen-shared	0.2.105	platform_gated	build script, not run
yoke-derive	0.8.1	linked	proc macro
zerofrom-derive	0.1.6	linked	proc macro
zerovec-derive	0.11.2	linked	proc macro
atomic-waker	1.1.2	linked
base64	0.22.1	linked
bitflags	2.10.0	linked
bumpalo	3.19.0	buildtime_only
bytes	1.11.0	linked
cc	1.2.46	buildtime_only
cfg-if	1.0.4	linked
core-foundation	0.9.4	platform_gated
core-foundation-sys	0.8.7	platform_gated
dirs direct	6.0.0	linked
dirs-sys	0.5.0	linked
either	1.15.0	linked
encoding_rs	0.8.35	linked
env_home	0.1.0	linked
equivalent	1.0.2	linked
errno	0.3.14	platform_gated
fastrand	2.3.0	platform_gated
find-msvc-tools	0.1.5	buildtime_only
fnv	1.0.7	linked
foreign-types	0.3.2	linked
foreign-types-shared	0.1.1	linked
form_urlencoded	1.2.2	linked
futures direct	0.3.31	linked
futures-channel	0.3.31	linked
futures-core	0.3.31	linked
futures-executor	0.3.31	linked
futures-io	0.3.31	linked
futures-sink	0.3.31	linked
futures-task	0.3.31	linked
futures-util	0.3.31	linked
h2	0.4.12	linked
hashbrown	0.16.0	linked
http	1.3.1	linked
http-body	1.0.1	linked
http-body-util	0.1.3	linked
hyper	1.8.1	linked
hyper-rustls	0.27.7	feature_gated
hyper-tls	0.6.0	linked
hyper-util	0.1.18	linked
icu_collections	2.1.1	linked
icu_locale_core	2.1.1	linked
icu_normalizer	2.1.1	linked
icu_properties	2.1.1	linked
icu_provider	2.1.1	linked
idna	1.1.0	linked
idna_adapter	1.2.1	linked
indexmap	2.12.0	linked
ipnet	2.11.0	linked
iri-string	0.7.9	linked
itoa	1.0.15	linked
js-sys	0.3.82	platform_gated
libredox	0.1.14	platform_gated
linux-raw-sys	0.11.0	linked
litemap	0.8.1	linked
lock_api	0.4.14	linked
log	0.4.28	linked
memchr	2.7.6	linked
mime	0.3.17	linked
mio	1.1.0	linked
once_cell	1.21.3	linked
openssl-probe	0.1.6	linked
option-ext	0.2.0	linked
parking_lot	0.12.5	linked
percent-encoding	2.3.2	linked
pin-project-lite	0.2.16	linked
pin-utils	0.1.0	linked
pkg-config	0.3.32	buildtime_only
potential_utf	0.1.4	linked
r-efi	5.3.0	platform_gated
redox_syscall	0.5.18	platform_gated
redox_users	0.5.2	platform_gated
reqwest direct	0.12.24	linked
rustls-pki-types	1.13.0	linked
rustls-webpki	0.103.8	feature_gated
ryu	1.0.20	linked
schannel	0.1.28	platform_gated
scopeguard	1.2.0	linked
security-framework	2.11.1	platform_gated
security-framework-sys	2.15.0	platform_gated
serde_urlencoded	0.7.1	linked
shlex	1.3.0	buildtime_only
signal-hook-registry	1.4.6	linked
slab	0.4.11	linked
smallvec	1.15.1	linked
socket2	0.6.1	linked
stable_deref_trait	1.2.1	linked
subtle	2.6.1	feature_gated
syn	2.0.110	linked
sync_wrapper	1.0.2	linked
synstructure	0.13.2	linked
system-configuration	0.6.1	platform_gated
tempfile	3.23.0	platform_gated
tinystr	0.8.2	linked
tokio direct	1.48.0	linked
tokio-native-tls	0.3.1	linked
tokio-rustls	0.26.4	feature_gated
tokio-util	0.7.17	linked
tower	0.5.2	linked
tower-http	0.6.6	linked
tower-layer	0.3.3	linked
tower-service	0.3.3	linked
tracing	0.1.41	linked
tracing-core	0.1.34	linked
try-lock	0.2.5	linked
unicode-ident	1.0.22	linked
untrusted	0.9.0	feature_gated
url	2.5.7	linked
utf8_iter	1.0.4	linked
want	0.3.1	linked
wasi	0.11.1+wasi-snapshot-preview1	platform_gated
wasip2	1.0.1+wasi-0.2.4	platform_gated
wasm-bindgen-futures	0.4.55	platform_gated
wasm-bindgen-macro-support	0.2.105	buildtime_only
wasm-streams	0.4.2	platform_gated
web-sys	0.3.82	platform_gated
which direct	7.0.3	linked
windows-link	0.2.1	platform_gated
windows-registry	0.6.1	platform_gated
windows-result	0.4.1	platform_gated
windows-strings	0.5.1	platform_gated
windows-sys	0.52.0	feature_gated
windows-targets	0.52.6	feature_gated
winsafe	0.0.19	platform_gated
writeable	0.6.2	linked
yoke	0.8.1	linked
zerofrom	0.1.6	linked
zeroize	1.8.2	linked
zerotrie	0.2.3	linked
zerovec	0.11.5	linked
windows_aarch64_gnullvm	0.53.1	unverified	build script, not runprebuilt objects
windows_aarch64_msvc	0.53.1	unverified	build script, not runprebuilt objects
windows_i686_gnu	0.53.1	unverified	build script, not runprebuilt objects
windows_i686_gnullvm	0.53.1	unverified	build script, not runprebuilt objects
windows_i686_msvc	0.53.1	unverified	build script, not runprebuilt objects
windows_x86_64_gnu	0.53.1	unverified	build script, not runprebuilt objects
windows_x86_64_gnullvm	0.53.1	unverified	build script, not runprebuilt objects
windows_x86_64_msvc	0.53.1	unverified	build script, not runprebuilt objects
getrandom	0.3.4	unverified	build script, not run
getrandom	0.2.16	unverified
windows-sys	0.60.2	unverified
windows-sys	0.61.2	unverified
windows-targets	0.53.5	unverified

1 of 1 jobs captured: build-test success · Generated 2026-10-08 · tarp 0.1.0+20261008010522-g7d82935f3902 · run 2d07a372-e73f-4477-bba7-394e10c11045