Skip to content
Open-Source Registry

cargo / liteparse / 2.16.0

liteparse 2.16.0

bitbison: flagged, behavior flagged, dependencies flagged, posture not checked, pipeline clean, 1 of 1 jobs captured 3 detections6 vulnerabilities
processes
729
operations
299K
packages
400
compiler runs
3,319
connections
4
job time
7m 50s
capture
1.8 MB
records
423K
bytes / record
4.3

Build behaviourundeclared fetchfetch went into the outputfetched outside crates.iocompiled C/C++

run 76ae21de-e596-4051-8a9b-4a7f713d8360 · built 2026-10-12 · complete

Artifact

file · retained · product · graph v2
2
ChecksDetections
Build behavior
▲ Network activity—
✓ Sensitive data access and transfer—
✓ Cross-process access—
✓ Build file changes—
▲ Build script activity—
✓ Data flow analysis—
✓ Filesystem writes—
✓ Context collection—
Supply chain
▲ Known vulnerabilities—
▲ Build-time dependency advisories—
▲ Dependency advisories—
✓ Declared and observed dependencies—
✓ Dependency and toolchain versions—
Pipeline
✓ Pipeline coverage—

Detections

3
  • Build script read files outside its crate
    tesseract-rs 0.2.0
    The script read 470 workspace files outside its crate and allowed build directories.
    high
  • Build code opened a network connection
    liteparse-pdfium-sys 1.12.0 › github.com:443, raw.githubusercontent.com:443
    connection to github.com:443, opened by build-script-build
    high
  • Build code opened a network connection
    tesseract-rs 0.2.0 › codeload.github.com:443
    connection to codeload.github.com:443, opened by build-script-build
    high

Detection

high

Build script read files outside its crate

subject tesseract-rs 0.2.0

The script read 470 workspace files outside its crate and allowed build directories.

read: /home/runner/.tesseract-rs/third_party/tesseract/CMakeLists.txt

read: /home/runner/.tesseract-rs/third_party/tesseract/VERSION

witnessed · liteparse · rule buildscript

Detection

high

Build code opened a network connection

subject liteparse-pdfium-sys 1.12.0 · destination github.com:443, raw.githubusercontent.com:443

connection to github.com:443, opened by build-script-build

connection to raw.githubusercontent.com:443, opened by build-script-build

the opener is the build script at /home/runner/work/liteparse/liteparse/target/release/build/liteparse-pdfium-sys-a1f1bf87450d63cc/build-script-build

  1. rustup2458
  2. cargo2458
  3. build-script-build7877at 19:42:24

witnessed · rule egress

Detection

high

Build code opened a network connection

subject tesseract-rs 0.2.0 · destination codeload.github.com:443

connection to codeload.github.com:443, opened by build-script-build

the opener is the build script at /home/runner/work/liteparse/liteparse/target/release/build/tesseract-rs-0345dba0198205b9/build-script-build

  1. rustup2458
  2. cargo2458
  3. build-script-build9074at 19:43:03

witnessed · tesseract · rule egress

Network

3 fetches
  • codeload.github.com
    build code of tesseract-rs · build-script-build · 1,714 files · went into an output
    undeclared
  • github.com
    build code of liteparse-pdfium-sys · build-script-build · 48 files · went into an output
    undeclared
  • raw.githubusercontent.com
    build code of liteparse-pdfium-sys · build-script-build · 48 files · went into an output
    undeclared
cargo fetched 30,537 files from static.crates.io
Vulnerable dependencies4PackageVersionFixSeverityTitleReach
RUSTSEC-2026-0187lopdf0.38.0>=0.42.0highStack overflow in lopdf via deeply nested PDF objectsretained
GHSA-2mjx-qc3c-rqvcrustls0.23.42>=0.23.45mediumRustls: TLS 1.3 handshake messages incorrectly accepted across encryption level boundariesretained
RUSTSEC-2026-0206rustybuzz0.18.0none publishedlow`rustybuzz` is unmaintainedretained
RUSTSEC-2026-0192ttf-parser0.24.1, 0.25.1none publishedlow`ttf-parser` is unmaintainedretained

Raw data

capture
1.8 MB
records
423,164
bytes per record
4.3

Loading a sample of the capture

Want to see more? E-mail us at hello@bitbison.io about your use case.

Dependencies

420 packages, 47 with a build script that ran, 14 doing more than compiling
PackageVersionUsageBuild behaviour
aws-lc-sys0.43.0linkedbuild scriptprebuilt objects
liteparse-pdfium-sys direct1.12.0linkedbuild scriptnetwork github.com, raw.githubusercontent.com
ring0.17.14linkedbuild scriptprebuilt objects
tesseract-rs direct0.2.0linkedbuild scriptnetwork codeload.github.com, github.com, raw.githubusercontent.com
vcpkg0.2.15buildtime_onlyprebuilt objects
windows_aarch64_gnullvm0.52.6platform_gatedbuild script, not runprebuilt objects
windows_aarch64_msvc0.52.6platform_gatedbuild script, not runprebuilt objects
windows_i686_gnu0.52.6platform_gatedbuild script, not runprebuilt objects
windows_i686_gnullvm0.52.6platform_gatedbuild script, not runprebuilt objects
windows_i686_msvc0.52.6platform_gatedbuild script, not runprebuilt objects
windows_x86_64_gnu0.52.6platform_gatedbuild script, not runprebuilt objects
windows_x86_64_gnullvm0.52.6platform_gatedbuild script, not runprebuilt objects
windows_x86_64_msvc0.52.6platform_gatedbuild script, not runprebuilt objects
wit-bindgen0.57.1platform_gatedbuild script, not runprebuilt objects
anyhow1.0.104linkedbuild script
arg_enum_proc_macro0.3.4linkedproc macro
av-scenechange0.14.1linkedbuild script
aws-lc-rs1.17.3linkedbuild script
blake3 direct1.8.5linkedbuild script
bzip2-sys0.1.13+1.0.8linkedbuild script
clap_derive4.6.1linkedproc macro
crc32fast1.5.0linkedbuild script
crossbeam-deque0.8.7linkedbuild script
crossbeam-epoch0.9.20linkedbuild script
crossbeam-utils0.8.22linkedbuild script
crunchy0.2.4platform_gatedbuild script, not run
derive_arbitrary1.4.2buildtime_onlyproc macro
displaydoc0.2.6linkedproc macro
equator-macro0.4.2linkedproc macro
generic-array0.14.7linkedbuild script
getrandom0.3.4linkedbuild script
getrandom0.4.3linkedbuild script
httparse1.10.1linkedbuild script
icu_normalizer_data2.2.0linkedbuild script
icu_properties_data2.2.0linkedbuild script
interpolate_name0.2.4buildtime_onlyproc macro
jni0.22.4platform_gatedbuild script, not run
jni-macros0.22.4buildtime_onlybuild script, not runproc macro
jni-sys-macros0.4.1buildtime_onlyproc macro
ld-linux-x86-64.so.2linkedsystem library
libc0.2.186linkedbuild script
libc.so.6linkedsystem library
libcrypto.so.3linkedsystem library
libfuzzer-sys0.4.13platform_gatedbuild script, not run
libgcc_s.so.1linkedsystem library
liblzma.so.5linkedsystem library
libm.so.6linkedsystem library
libmvec.so.1linkedsystem library
libssl.so.3linkedsystem library
lzma-sys0.1.20linkedbuild script
mime_guess2.0.5linkedbuild script
native-tls0.2.18linkedbuild script
noop_proc_macro0.3.0linkedproc macro
num-derive0.4.2linkedproc macro
num-traits0.2.19linkedbuild script
openssl0.10.81linkedbuild script
openssl-macros0.1.1linkedproc macro
openssl-sys0.9.117linkedbuild script
parking_lot_core0.9.12unrelatedbuild script
paste1.0.15linkedbuild scriptproc macro
pastey0.1.1linkedproc macro
proc-macro21.0.107linkedbuild script
profiling-procmacros1.0.18linkedproc macro
pulp0.22.3linkedbuild script
quinn0.11.11feature_gatedbuild script, not run
quinn-udp0.5.15feature_gatedbuild script, not run
quote1.0.47linkedbuild script
rav1e0.8.1linkedbuild script
rayon-core1.13.0linkedbuild script
rustix1.1.4linkedbuild script
rustls0.23.42linkedbuild script
rustversion1.0.23buildtime_onlybuild script, not runproc macro
serde direct1.0.229linkedbuild script
serde_core1.0.229linkedbuild script
serde_derive1.0.229linkedproc macro
serde_json direct1.0.151linkedbuild script
serial_test_derive3.5.0unrelatedproc macro
simd_helpers0.1.0linkedproc macro
slotmap1.1.1linkedbuild script
system-configuration-sys0.6.0platform_gatedbuild script, not run
thiserror1.0.69linkedbuild script
thiserror direct2.0.19linkedbuild script
thiserror-impl1.0.69linkedproc macro
thiserror-impl2.0.19linkedproc macro
tokio-macros2.7.1linkedproc macro
wasm-bindgen0.2.126platform_gatedbuild script, not run
wasm-bindgen-macro0.2.126buildtime_onlyproc macro
wasm-bindgen-shared0.2.126platform_gatedbuild script, not run
yoke-derive0.8.2linkedproc macro
zerocopy0.8.54linkedbuild script
zerocopy-derive0.8.54linkedproc macro
zerofrom-derive0.1.7linkedproc macro
zeroize_derive1.5.0linkedproc macro
zerovec-derive0.11.3linkedproc macro
zip2.4.2linkedbuild script
zmij1.0.23linkedbuild script
zstd-safe7.2.4linkedbuild script
zstd-sys2.0.16+zstd.1.5.7linkedbuild script
aes0.8.4linked
aho-corasick1.1.4unrelated
aligned0.4.3linked
aligned-vec0.6.4linked
anstream1.0.0linked
anstyle1.0.14linked
anstyle-parse1.0.0linked
anstyle-query1.1.5linked
anstyle-wincon3.0.11platform_gated
arbitrary1.4.2platform_gated
arrayref0.3.9linked
arrayvec0.7.8linked
as-slice0.2.1linked
atomic-waker1.1.2linked
autocfg1.5.1buildtime_only
av1-grain0.2.5linked
avif-serialize0.8.9linked
base64 direct0.22.1linked
bit_field0.10.3linked
bitflags1.3.2linked
bitflags2.13.1linked
bitstream-io4.10.0linked
block-buffer0.10.4linked
block-padding0.3.3linked
built0.8.1linked
bumpalo3.20.3linked
bytecount0.6.9linked
bytemuck1.25.2linked
byteorder1.5.0linked
byteorder-lite0.1.0linked
bytes1.12.1linked
bzip20.5.2linked
cbc0.1.2linked
cc1.3.0linked
cfg-if1.0.4linked
cfg_aliases0.2.2buildtime_only
chacha200.10.1feature_gated
cipher0.4.4linked
clap direct4.6.2linked
clap_builder4.6.2linked
clap_lex1.1.0linked
cmake0.1.58linked
color_quant1.1.0linked
colorchoice1.0.5linked
combine4.6.7platform_gated
constant_time_eq0.3.1linked
constant_time_eq0.4.2linked
core-foundation-sys0.8.7platform_gated
cpufeatures0.2.17linked
cpufeatures0.3.0linked
crc3.4.0linked
crc-catalog2.5.0linked
crypto-common0.1.7linked
data-url0.3.2linked
deflate640.1.12linked
deranged0.5.8linked
digest0.10.7linked
dunce1.0.5linked
ecb0.1.2linked
either1.16.0linked
encoding_rs0.8.35linked
equator0.4.2linked
equivalent1.0.2linked
errno0.3.14linked
euclid0.22.14feature_gated
exr1.74.2linked
fastrand2.5.0linked
fax0.2.7linked
fdeflate0.3.7linked
file-format direct0.29.0linked
filetime0.2.29linked
find-msvc-tools0.1.9linked
flate2 direct1.1.9linked
float-cmp0.9.0linked
fnv1.0.7linked
fontconfig-parser0.5.8linked
fontdb0.22.0linked
foreign-types0.3.2linked
foreign-types-shared0.1.1linked
form_urlencoded1.2.2linked
fs_extra1.3.0linked
futures-channel0.3.33linked
futures-core0.3.33linked
futures-executor0.3.33unrelated
futures-io0.3.33linked
futures-sink0.3.33linked
futures-task0.3.33linked
futures-util direct0.3.33linked
getrandom0.2.17linked
gif0.13.3linked
gif0.14.2linked
glob0.3.3buildtime_only
h20.4.15linked
half2.7.1linked
hashbrown0.17.1linked
heck0.5.0linked
hmac0.12.1linked
http1.4.2linked
http-body1.1.0linked
http-body-util0.1.4linked
hyper1.10.1linked
hyper-rustls0.27.9linked
hyper-tls0.6.0linked
hyper-util0.1.20linked
icu_collections2.2.0linked
icu_locale_core2.2.0linked
icu_normalizer2.2.0linked
icu_properties2.2.0linked
icu_provider2.2.0linked
idna1.1.0linked
idna_adapter1.2.2linked
image direct0.25.10linked
image-webp0.1.3linked
image-webp0.2.4linked
imagesize0.13.0linked
imgref1.12.2linked
indexmap2.14.0linked
inout0.1.4linked
ipnet2.12.0linked
is_terminal_polyfill1.70.2linked
itertools0.14.0linked
itoa1.0.18linked
jni-sys0.4.1platform_gated
jobserver0.1.35linked
js-sys0.3.103platform_gated
kurbo0.11.3linked
lebe0.5.3linked
libloading0.8.9linked
linux-raw-sys0.12.1linked
litemap0.8.2linked
liteparse-pdfium direct1.12.0linked
lock_api0.4.14unrelated
log0.4.33linked
loop90.1.5linked
lopdf direct0.38.0linked
lru-slab0.1.2feature_gated
lzma-rs0.3.0linked
maybe-rayon0.1.1linked
md-50.10.6linked
memchr direct2.8.3linked
memmap20.9.11linked
mime0.3.17linked
miniz_oxide0.8.9linked
mio1.2.2linked
moxcms0.8.1linked
nom8.0.0linked
nom_locate5.0.0linked
num-bigint0.4.8linked
num-complex0.4.6linked
num-conv0.2.2linked
num-integer0.1.46linked
num-rational0.4.2linked
once_cell1.21.4linked
once_cell_polyfill1.70.2platform_gated
openssl-probe0.2.1linked
parking_lot0.12.5unrelated
pbkdf20.12.2linked
percent-encoding2.3.2linked
pin-project-lite0.2.17linked
pkg-config0.3.33linked
png0.17.16linked
png0.18.1linked
potential_utf0.1.5linked
powerfmt0.2.0linked
ppv-lite860.2.21linked
profiling1.0.18linked
pxfm0.1.30linked
qoi0.4.1linked
quick-error2.0.1linked
quinn-proto0.11.16feature_gated
rand0.10.2feature_gated
rand0.9.5linked
rand_chacha0.9.0linked
rand_core0.9.5linked
rand_pcg0.10.2feature_gated
rangemap1.7.1linked
ravif0.13.0linked
rayon1.12.0linked
redox_syscall0.5.18unrelated
regex1.13.1unrelated
regex-automata0.4.16unrelated
regex-syntax0.8.11unrelated
reqwest0.12.28linked
reqwest direct0.13.4linked
resvg direct0.44.0linked
rgb0.8.53linked
rmp direct0.8.15linked
roxmltree0.20.0linked
rustc-hash2.1.3feature_gated
rustc_version0.4.1buildtime_only
rustls-native-certs0.8.4linked
rustls-pki-types1.15.0linked
rustls-platform-verifier0.7.0linked
rustls-platform-verifier-android0.1.1platform_gated
rustls-webpki0.103.13linked
rustybuzz0.18.0linked
ryu1.0.23linked
same-file1.0.6buildtime_only
schannel0.1.29platform_gated
scopeguard1.2.0unrelated
security-framework3.7.0platform_gated
security-framework-sys2.17.0platform_gated
semver1.0.28buildtime_only
serde_urlencoded0.7.1linked
serial_test3.5.0unrelated
sha10.10.7linked
sha20.10.9linked
shlex2.0.1linked
signal-hook-registry1.4.8linked
simd-adler320.3.10linked
simd_cesu81.2.0platform_gated
simdutf80.1.5platform_gated
simplecss0.2.2linked
siphasher1.0.3linked
slab0.4.12linked
smallvec1.15.2linked
socket20.6.5linked
stable_deref_trait1.2.1linked
strict-num0.1.1linked
stringprep0.1.5linked
strsim0.11.1linked
subtle2.6.1linked
svgtypes0.15.3linked
syn2.0.119linked
syn3.0.2linked
sync_wrapper1.0.2linked
synstructure0.13.2linked
system-configuration0.7.0platform_gated
tar0.4.46linked
tempfile direct3.27.0linked
tiff0.11.3linked
time0.3.54linked
time-core0.1.9linked
tiny-skia0.11.4linked
tiny-skia-path0.11.4linked
tinystr0.8.3linked
tinyvec1.12.0linked
tinyvec_macros0.1.1linked
tokio direct1.53.0linked
tokio-native-tls0.3.1linked
tokio-rustls0.26.4linked
tokio-util0.7.18linked
tower0.5.3linked
tower-http0.6.11linked
tower-layer0.3.3linked
tower-service0.3.3linked
tracing0.1.44linked
tracing-core0.1.36linked
try-lock0.2.5linked
ttf-parser0.24.1linked
ttf-parser0.25.1linked
typenum1.20.1linked
unicase2.9.0linked
unicode-bidi0.3.18linked
unicode-bidi-mirroring0.3.0linked
unicode-ccc0.3.0linked
unicode-ident1.0.24linked
unicode-normalization0.1.25linked
unicode-properties0.1.4linked
unicode-script0.5.8linked
unicode-vo0.1.0linked
untrusted0.9.0linked
ureq3.3.0linked
ureq-proto0.6.0linked
url direct2.5.8linked
usvg direct0.44.0linked
utf8-zero0.8.1linked
utf8_iter1.0.4linked
utf8parse0.2.2linked
v_frame0.3.9linked
version_check0.9.5linked
walkdir2.5.0buildtime_only
want0.3.1linked
wasi0.11.1+wasi-snapshot-preview1platform_gated
wasip21.0.4+wasi-0.2.12platform_gated
wasm-bindgen-futures0.4.76platform_gated
wasm-bindgen-macro-support0.2.126buildtime_only
web-sys0.3.103platform_gated
web-time direct1.1.0linked
webpki-root-certs1.0.9platform_gated
webpki-roots1.0.9linked
weezl0.1.12linked
winapi-util0.1.11buildtime_only
windows-link0.2.1platform_gated
windows-registry0.6.1platform_gated
windows-result0.4.1platform_gated
windows-strings0.5.1platform_gated
windows-targets0.52.6platform_gated
writeable0.6.3linked
xattr1.6.1linked
xmlwriter0.1.0linked
xz20.1.7linked
y4m0.8.0linked
yoke0.8.3linked
zerofrom0.1.8linked
zeroize1.9.0linked
zerotrie0.2.4linked
zerovec0.11.6linked
zopfli0.8.3linked
zstd0.13.3linked
zune-core0.4.12linked
zune-core0.5.1linked
zune-inflate0.2.54linked
zune-jpeg0.4.21linked
zune-jpeg0.5.15linked
libm0.2.16deadbuild script
adler22.0.1dead
core-foundation0.10.1unverified
core-foundation0.9.4unverified
core_maths0.1.1dead
new_debug_unreachable1.0.6dead
no_std_io20.9.4dead
ordered-float direct5.3.0dead
pico-args0.5.0dead
pulp-wasm-simd-flag0.1.1dead
r-efi5.3.0unverified
r-efi6.0.0unverified
rand_core0.10.1unverified
raw-cpuid11.6.0dead
reborrow0.5.5dead
windows-sys0.52.0unverified
windows-sys0.61.2unverified

1 of 1 jobs captured: build-test success · Generated 2026-10-12 · run 76ae21de-e596-4051-8a9b-4a7f713d8360

analysis 0.1.0 · 2026-10-11 · d6246d3 · graph v2