Skip to content
Open-Source Registry

cargo / liteparse-pdfium / 1.12.0

liteparse-pdfium 1.12.0

bitbison: flagged, behavior flagged, dependencies notes, posture not checked, pipeline clean, 1 of 1 jobs captured RiskhighVulnsnone
processes
618
operations
14K
packages
61
compiler runs
126
connections
3
job time
20s
capture
184 KB
records
25K
bytes / record
7.4

Build behaviourundeclared fetchfetch went into the outputfetched outside crates.iocompiled C/C++

run aa6594fc-64b3-4b6c-ba94-650e5122cbc1 · built 2026-10-12 · complete View on crates.io

Artifact

file · retained · product · graph v2
1

Checks

12 of 14 clear Network activity Build-time dependency advisories
Build behavior▲✓✓✓✓✓✓✓
Supply chain✓▲✓✓✓
Pipeline✓

Detections

1
  • Build code opened a network connection
    liteparse-pdfium-sys 1.12.0 › github.com:443, release-assets.githubusercontent.com:443
    high

Detection

highwitnessed

Build code opened a network connection

Unexpected network connection

Subject
liteparse-pdfium-sys 1.12.0
Destination
github.com:443, release-assets.githubusercontent.com:443
Reaches
Jobs
build-test
Rule
egress

Evidence

  1. Connection outside the process’s allowed destinationscause

    connection to github.com:443, opened by build_script_build-348e01e2836d3504

    subject github.com:443

    by /home/runner/work/liteparse/liteparse/target/release/build/liteparse-pdfium-sys-348e01e2836d3504/build-script-build

  2. Connection outside the process’s allowed destinationscause

    connection to release-assets.githubusercontent.com:443, opened by build_script_build-348e01e2836d3504

    subject release-assets.githubusercontent.com:443

    by /home/runner/work/liteparse/liteparse/target/release/build/liteparse-pdfium-sys-348e01e2836d3504/build-script-build

  3. Connection opened by a build script or child processsupport

    the opener is the build script at /home/runner/work/liteparse/liteparse/target/release/build/liteparse-pdfium-sys-348e01e2836d3504/build_script_build-348e01e2836d3504

Processes

build-test

cargo›cargo›build-script-build

Ran
/home/runner/work/liteparse/liteparse/target/release/build/liteparse-pdfium-sys-348e01e2836d3504/build-script-build
Invoked by
cargo build --release --locked --message-format=json-render-diagnostics
Lineage · 3 processes
  1. cargocargo build --release --locked --message-format=json-render-diagnostics2457
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo build --release --locked --message-format=json-render-diagnostics2457
  3. build-script-build/home/runner/work/liteparse/liteparse/target/release/build/liteparse-pdfium-sys-348e01e2836d3504/build-script-build3062

Remediation

Review the process and its owning build step. Remove unnecessary requests; move required downloads to a declared dependency-fetch step.

Network

3 peers
  • github.com:443 build code of liteparse-pdfium-sys · build_script_build-348e01e2836d3504 · GitHub, Inc. · 47 files · went into an output undeclared
  • release-assets.githubusercontent.com:443 build code of liteparse-pdfium-sys · build_script_build-348e01e2836d3504 · Fastly, Inc. · 47 files · went into an output undeclared
  • static.crates.io:8080 the package manager · cargo (liteparse) via crates.io · 3,498 files · went into an output ecosystem
Dependencies62Build behaviour
adler22.0.1
arrayref0.3.9
arrayvec0.7.8
base640.22.1
bitflags2.13.1
blake31.8.5build script
bytes1.12.1
cc1.3.0
cfg-if1.0.4
constant_time_eq0.4.2
cpufeatures0.3.0
crc32fast1.5.0build script
errno0.3.14
filetime0.2.29
find-msvc-tools0.1.9
flate21.1.9
getrandom0.2.17
http1.4.2
httparse1.10.1build script
itoa1.0.18
ld-linux-x86-64.so.2system library
libc0.2.186build script
libc.so.6system library
libgcc_s.so.1system library
libloading0.8.9
libm.so.6system library
libmvec.so.1system library
linux-raw-sys0.12.1
liteparse-pdfium-sys1.12.0build scriptnetworkgithub.com, release-assets.githubusercontent.com
log0.4.33
miniz_oxide0.8.9
once_cell1.21.4
percent-encoding2.3.2
ring0.17.14build scriptprebuilt objects
rustix1.1.4build script
rustls0.23.42build script
rustls-pki-types1.15.0
rustls-webpki0.103.13
shlex2.0.1
simd-adler320.3.10
subtle2.6.1
tar0.4.46
untrusted0.9.0
ureq3.3.0
ureq-proto0.6.0
utf8-zero0.8.1
wasi0.11.1+wasi-snapshot-preview1
webpki-roots1.0.9
windows-link0.2.1
windows-sys0.52.0
windows-sys0.61.2
windows-targets0.52.6
windows_aarch64_gnullvm0.52.6build script, not runprebuilt objects
windows_aarch64_msvc0.52.6build script, not runprebuilt objects
windows_i686_gnu0.52.6build script, not runprebuilt objects
windows_i686_gnullvm0.52.6build script, not runprebuilt objects
windows_i686_msvc0.52.6build script, not runprebuilt objects
windows_x86_64_gnu0.52.6build script, not runprebuilt objects
windows_x86_64_gnullvm0.52.6build script, not runprebuilt objects
windows_x86_64_msvc0.52.6build script, not runprebuilt objects
xattr1.6.1
zeroize1.9.0
Versions14RiskVulnsPublished
1.12.06d ago
1.11.0not analyzed2026-09-15
1.10.0not analyzed2026-09-14
1.9.0not analyzed2026-08-27
1.8.0not analyzed2026-08-27
1.7.0not analyzed2026-08-13
1.6.0not analyzed2026-08-05
1.5.0not analyzed2026-08-03
1.4.0not analyzed2026-07-25
1.3.0not analyzed2026-06-25
1.2.0not analyzed2026-06-17
1.1.0not analyzed2026-06-11
1.0.1not analyzed2026-05-27
1.0.0not analyzed2026-05-21

Raw data

capture
184 KB
records
24,896
bytes per record
7.4

Loading a sample of the capture

Want to see more? E-mail us at hello@bitbison.io about your use case.

1 of 1 jobs captured: build-test success · Generated 2026-10-12 · run aa6594fc-64b3-4b6c-ba94-650e5122cbc1

analysis 0.1.0 · 2026-10-11 · d6246d3 · graph v2