Skip to content
Open-Source Registry

cargo / lean-tui / 1.1.0

lean-tui 1.1.0

bitbison: flagged, behavior flagged, dependencies flagged, posture not checked, pipeline clean, 1 of 1 jobs captured RiskhighVulnsmedium
processes
518
operations
114K
packages
195
compiler runs
559
connections
3
job time
1m 36s
capture
1.7 MB
records
218K
bytes / record
7.9

Build behaviourits build script reached codeberg.orgundeclared fetchfetch went into the outputfetched outside crates.iocompiled C/C++

run 44de6b0e-39f2-42fc-ad0d-e355929c2bac · built 2026-10-16 · complete View on crates.io

Graph

egress · high · in lean_tui
3

Checks

10 of 14 clear Network activity Known vulnerabilities +2 more
Build behavior▲✓✓✓✓✓✓✓
Supply chain▲▲▲✓✓
Pipeline✓

Detections

1
  • Build script fetched what the build compiled, linked or ran
    lean-tui 1.1.0 › codeberg.org:443
    high

Detection

highwitnessed

Build script fetched what the build compiled, linked or ran

Unexpected network connection

Subject
lean-tui 1.1.0
Destination
codeberg.org:443
Reaches
Jobs
build-test
Rule
egress

Evidence

  1. Connection outside the process’s allowed destinationscause

    connection to codeberg.org:443, opened by build_script_build

    subject codeberg.org:443

    by /home/runner/work/lean-tui/lean-tui/target/release/build/lean-tui/5306a7dad0072a2f/out/build_script_build

  2. What a build script's fetch becamesupport

    1 file came down; the build compiled or linked protocol_types.rs

  3. Connection opened by a build script or child processsupport

    the opener is the build script at /home/runner/work/lean-tui/lean-tui/target/release/build/lean-tui/5306a7dad0072a2f/out/build_script_build

In lean_tui

Loading the graph

Processes

build-test

cargo›cargo›build_script_build

Ran
/home/runner/work/lean-tui/lean-tui/target/release/build/lean-tui/5306a7dad0072a2f/out/build_script_build
Invoked by
cargo build --release --locked --message-format=json-render-diagnostics
Lineage · 3 processes
  1. cargocargo build --release --locked --message-format=json-render-diagnostics2492
  2. cargo/home/runner/.rustup/toolchains/nightly-x86_64-unknown-linux-gnu/bin/cargo build --release --locked --message-format=json-render-diagnostics2492
  3. build_script_build/home/runner/work/lean-tui/lean-tui/target/release/build/lean-tui/5306a7dad0072a2f/out/build_script_build5220

Remediation

A dependency's build downloaded files the build then compiled, linked or ran, outside anything the registry checksums. Review what came down, pin or replace the dependency, or record the download as accepted once it is reviewed.

Network

3 peers
  • codeberg.org:443 lean-tui's own build code · build_script_build · Individual Network Berlin (IN-Berlin) e.V. · 1 file · went into an output undeclared
  • static.crates.io:8080 the package manager · cargo (lean-tui) via crates.io · 13,781 files · went into an output ecosystem
  • static.rust-lang.org:443 the toolchain installer · rustup (lean-tui) via Package registries profile (rustup → asn:54113) · Fastly, Inc. · 13 files ecosystem
Vulnerabilities3PackageFixSeverity
CVE-2026-25541bytes 1.11.0>=1.11.1medium
GHSA-rhfx-m35p-ff5jlru 0.12.5>=0.16.3low
RUSTSEC-2026-0253lru 0.12.5>=0.18.2low
Dependencies214Build behaviour
allocator-api20.2.21
anstream0.6.21
anstyle1.0.13
anstyle-parse0.2.7
anstyle-query1.1.5
base640.22.1
bitflags2.10.0
bytes1.11.0
cassowary0.3.0
castaway0.2.4
cfg-if1.0.4
clap4.5.56
clap_builder4.5.56
clap_lex0.7.7
colorchoice1.0.4
compact_str0.8.1
crossterm0.28.1
crossterm0.29.0
derive_more2.1.1
dirs6.0.0
dirs-sys0.5.0
either1.15.0
equivalent1.0.2
errno0.3.14
fixedbitset0.5.7
foldhash0.1.5
futures0.3.31
futures-channel0.3.31
futures-core0.3.31
futures-executor0.3.31
futures-io0.3.31
futures-sink0.3.31
futures-task0.3.31
futures-util0.3.31
hashbrown0.15.5
hashbrown0.16.1
indexmap2.13.0
is_terminal_polyfill1.70.2
itertools0.13.0
itoa1.0.17
lazy_static1.5.0
ld-linux-x86-64.so.2system library
libc0.2.180build script
libc.so.6system library
libgcc_s.so.1system library
libm.so.6system library
libmvec.so.1system library
linux-raw-sys0.11.0
linux-raw-sys0.4.15
lock_api0.4.14
log0.4.29
lru0.12.5
matchers0.2.0
memchr2.7.6
mio1.1.1
nu-ansi-term0.50.3
once_cell1.21.3
option-ext0.2.0
parking_lot0.12.5
parking_lot_core0.9.12build script
petgraph0.7.1
pin-project-lite0.2.16
pin-utils0.1.0
ratatui0.29.0
regex-automata0.4.13
regex-syntax0.8.8
rustix0.38.44build script
rustix1.1.3build script
ryu1.0.22
scopeguard1.2.0
serde1.0.228build script
serde_core1.0.228build script
serde_json1.0.149build script
sharded-slab0.1.7
signal-hook0.3.18build script
signal-hook-mio0.2.5
signal-hook-registry1.4.8
slab0.4.11
smallvec1.15.1
socket20.6.2
static_assertions1.1.0
strsim0.11.1
strum0.26.3
thread_local1.1.9
tokio1.49.0
tracing0.1.44
tracing-core0.1.36
tracing-log0.2.0
tracing-subscriber0.3.22
unicode-segmentation1.12.0
unicode-truncate1.1.0
unicode-width0.1.14
unicode-width0.2.0
utf8parse0.2.2
zmij1.0.17build script
foldhash0.2.0
getrandom0.2.17
thiserror2.0.18build script
adler22.0.1
aho-corasick1.1.4
anstyle-wincon3.0.11
cc1.2.55
clap_derive4.5.55proc macro
convert_case0.10.0
crc32fast1.5.0build script
crossterm_winapi0.9.1
darling0.23.0
darling_core0.23.0
darling_macro0.23.0proc macro
derive_more-impl2.1.1proc macro
displaydoc0.2.5proc macro
document-features0.2.12proc macro
dyn-clone1.0.20
find-msvc-tools0.1.9
flate21.1.8
form_urlencoded1.2.2
futures-macro0.3.31proc macro
heck0.5.0
icu_collections2.1.1
icu_locale_core2.1.1
icu_normalizer2.1.1
icu_normalizer_data2.1.1build script
icu_properties2.1.2
icu_properties_data2.1.2build script
icu_provider2.1.1
ident_case1.0.1
idna1.1.0
idna_adapter1.2.1
indoc2.0.7proc macro
instability0.3.11build scriptproc macro
libredox0.1.12
litemap0.8.1
litrs1.0.0
miniz_oxide0.8.9
once_cell_polyfill1.70.2
paste1.0.15build scriptproc macro
percent-encoding2.3.2
potential_utf0.1.4
prettyplease0.2.37build script
proc-macro21.0.106build script
quote1.0.44build script
redox_syscall0.5.18
redox_users0.5.2
regress0.10.5
ring0.17.14build scriptprebuilt objects
rustc_version0.4.1
rustls0.23.36build script
rustls-pki-types1.14.0
rustls-webpki0.103.9
rustversion1.0.22build scriptproc macro
schemars0.8.22build script
schemars_derive0.8.22proc macro
semver1.0.27
serde_derive1.0.228proc macro
serde_derive_internals0.29.1
serde_tokenstream0.2.2
shlex1.3.0
simd-adler320.3.8
stable_deref_trait1.2.1
strum_macros0.26.4proc macro
subtle2.6.1
syn2.0.114
synstructure0.13.2
thiserror-impl2.0.18proc macro
tinystr0.8.2
tokio-macros2.6.0proc macro
tracing-attributes0.1.31proc macro
typify0.4.3
typify-impl0.4.3
typify-macro0.4.3proc macro
unicode-ident1.0.22
untrusted0.9.0
ureq2.12.1
url2.5.8
utf8_iter1.0.4
valuable0.1.1build script, not run
wasi0.11.1+wasi-snapshot-preview1
webpki-roots0.26.11
webpki-roots1.0.5
winapi0.3.9build script, not run
winapi-i686-pc-windows-gnu0.4.0build script, not runprebuilt objects
winapi-x86_64-pc-windows-gnu0.4.0build script, not runprebuilt objects
windows-link0.2.1
windows-sys0.52.0
windows-sys0.59.0
windows-sys0.60.2
windows-sys0.61.2
windows-targets0.52.6
windows-targets0.53.5
windows_aarch64_gnullvm0.52.6build script, not runprebuilt objects
windows_aarch64_gnullvm0.53.1build script, not runprebuilt objects
windows_aarch64_msvc0.52.6build script, not runprebuilt objects
windows_aarch64_msvc0.53.1build script, not runprebuilt objects
windows_i686_gnu0.52.6build script, not runprebuilt objects
windows_i686_gnu0.53.1build script, not runprebuilt objects
windows_i686_gnullvm0.52.6build script, not runprebuilt objects
windows_i686_gnullvm0.53.1build script, not runprebuilt objects
windows_i686_msvc0.52.6build script, not runprebuilt objects
windows_i686_msvc0.53.1build script, not runprebuilt objects
windows_x86_64_gnu0.52.6build script, not runprebuilt objects
windows_x86_64_gnu0.53.1build script, not runprebuilt objects
windows_x86_64_gnullvm0.52.6build script, not runprebuilt objects
windows_x86_64_gnullvm0.53.1build script, not runprebuilt objects
windows_x86_64_msvc0.52.6build script, not runprebuilt objects
windows_x86_64_msvc0.53.1build script, not runprebuilt objects
writeable0.6.2
yoke0.8.1
yoke-derive0.8.1proc macro
zerofrom0.1.6
zerofrom-derive0.1.6proc macro
zeroize1.8.2
zerotrie0.2.3
zerovec0.11.5
zerovec-derive0.11.2proc macro
Versions44RiskVulnsPublished
1.0.1not analyzed2026-02-21
1.0.0not analyzed2026-02-21
0.6.14not analyzed2026-02-14
0.6.13not analyzed2026-02-14
0.6.12not analyzed2026-02-14
0.6.11not analyzed2026-02-14
0.6.10not analyzed2026-02-13
0.6.9not analyzed2026-02-12
0.6.8not analyzed2026-02-10
0.6.7not analyzed2026-02-08
0.6.6not analyzed2026-02-08
0.6.5not analyzed2026-02-08
0.6.4not analyzed2026-02-08
0.6.3not analyzed2026-02-08
0.6.2not analyzed2026-02-07
0.6.1not analyzed2026-02-07
0.6.0not analyzed2026-02-06
0.5.3not analyzed2026-02-06
0.5.2not analyzed2026-02-06
0.5.1not analyzed2026-02-06
0.5.0not analyzed2026-02-06
0.4.4not analyzed2026-02-06
0.4.3not analyzed2026-02-05
0.4.2not analyzed2026-02-04
0.4.1not analyzed2026-02-04
0.4.0not analyzed2026-02-03
0.3.2not analyzed2026-02-03
0.3.1not analyzed2026-02-02
0.3.0not analyzed2026-02-02
0.2.2not analyzed2026-02-01
0.2.1not analyzed2026-02-01
0.2.0not analyzed2026-02-01
0.1.0not analyzed2026-01-31
0.0.10not analyzed2026-01-30
0.0.9not analyzed2026-01-28
0.0.8not analyzed2026-01-27
0.0.7not analyzed2026-01-27
0.0.6not analyzed2026-01-27
0.0.5not analyzed2026-01-26
0.0.4not analyzed2026-01-26
0.0.3not analyzed2026-01-26
0.0.2not analyzed2026-01-26
0.0.1not analyzed2026-01-26
1.1.0highmedium

Raw data

capture
1.7 MB
records
218,487
bytes per record
7.9

Loading a sample of the capture

Want to see more? E-mail us at hello@bitbison.io about your use case.

1 of 1 jobs captured: build-test success · Generated 2026-10-16 · run 44de6b0e-39f2-42fc-ad0d-e355929c2bac

analysis 0.1.0 · 2026-10-15 · 244c7b2 · graph v2