Skip to content
Open-Source Registry

cargo / media-transcriber-mcp / 0.8.0

media-transcriber-mcp 0.8.0

bitbison: flagged, behavior flagged, dependencies flagged, posture notes, pipeline clean, 1 of 1 jobs captured RiskhighVulnshigh
processes
906
operations
111K
packages
256
compiler runs
1,407
connections
1
build time
3m 03s
job time
3m 03s
capture
947 KB
records
171K
bytes / record
5.5

Build behaviourcompiled C/C++

run 8349c086-fd42-4a6b-9cd8-53b082538bde · built 2026-10-18 · complete View on crates.io

Artifact

binary · retained · product · graph v2
1

Checks

10 of 15 clear Build script activity Known vulnerabilities +3 more
Build behavior✓✓✓✓▲✓✓✓
Supply chain▲▲▲✓✓
Build hardening▲
Pipeline✓

Detections

2
  • Build script read files outside its crate
    whisper-rs-sys 0.15.0
    high
  • Build is missing recommended hardening flags
    whisper.cpp · posture
    low

Detection

highwitnessed

Build script read files outside its crate

Unexpected build script activity

Subject
whisper-rs-sys 0.15.0
Reaches
media_transcriber_mcp-ae4610d661a25155member
Jobs
build-test
Rule
buildscript · media-transcriber-mcp

Evidence

  1. Build script read outside its cratecause

    The script read 3 workspace files outside its crate and allowed build directories (3 under .git/).

    by /home/runner/work/media-transcriber-mcp/media-transcriber-mcp/target/release/build/whisper-rs-sys-bc7bbc70ed6384ca/build-script-build

  2. File read by the build scriptsupport

    read: /home/runner/work/media-transcriber-mcp/media-transcriber-mcp/.git/objects/3e/d01a32572ab0feb8ef9f45b712beb35ee030b6

    input /home/runner/work/media-transcriber-mcp/media-transcriber-mcp/.git/objects/3e/d01a32572ab0feb8ef9f45b712beb35ee030b6

  3. File read by the build scriptsupport

    read: /home/runner/work/media-transcriber-mcp/media-transcriber-mcp/.git/objects/79/423464705f4b83b9c27f3ac4c6fa27bdc91864

    input /home/runner/work/media-transcriber-mcp/media-transcriber-mcp/.git/objects/79/423464705f4b83b9c27f3ac4c6fa27bdc91864

  4. File read by the build scriptsupport

    read: /home/runner/work/media-transcriber-mcp/media-transcriber-mcp/.git/objects/cb/f4811d84035a36bf2d658b3b5fffd2b37e8ef0

    input /home/runner/work/media-transcriber-mcp/media-transcriber-mcp/.git/objects/cb/f4811d84035a36bf2d658b3b5fffd2b37e8ef0

  5. Build scriptcontext

    build script: /home/runner/work/media-transcriber-mcp/media-transcriber-mcp/target/release/build/whisper-rs-sys-bc7bbc70ed6384ca/build_script_build-bc7bbc70ed6384ca — readers: git

    subject build-script-build

Remediation

Review the listed files and the crate's build.rs. Remove unnecessary reads, or use a reviewed dependency version.

Detection

lowinferredposture

Build is missing recommended hardening flags

Missing hardening flags

Subject
/home/runner/work/media-transcriber-mcp/media-transcriber-mcp/target/release/build/whisper-rs-sys-325fb0c05111c8bd/out/whisper.cpp
Jobs
build-test
Rule
hardening · target/release/build/whisper-rs-sys-325fb0c05111c8bd/out/whisper.cpp

Evidence

  1. Hardening flag missingcause

    stack-protector: missing from all 24 eligible compile commands; add -fstack-protector-strong

  2. Hardening flag missingcause

    fortify: missing from all 24 eligible compile commands; add -D_FORTIFY_SOURCE=2 (needs -O1+)

  3. Hardening flag missingcause

    stack-clash-protection: missing from all 24 eligible compile commands; add -fstack-clash-protection

  4. Hardening flag missingcause

    pie: missing from all 24 eligible compile commands; add -fPIE (with -pie at link)

  5. Hardening flag missingcause

    cf-protection: missing from all 24 eligible compile commands; add -fcf-protection=full (x86-64) / -mbranch-protection=standard (aarch64)

  6. Hardening flag missingcause

    format-security: missing from all 24 eligible compile commands; add -Wformat -Werror=format-security

Processes

build-test

cargo›cargo›build-script-build

Ran
/home/runner/work/media-transcriber-mcp/media-transcriber-mcp/target/release/build/whisper-rs-sys-bc7bbc70ed6384ca/build-script-build
Invoked by
cargo build --release --locked --message-format=json-render-diagnostics
Lineage · 3 processes
  1. cargocargo build --release --locked --message-format=json-render-diagnostics2481
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo build --release --locked --message-format=json-render-diagnostics2481
  3. build-script-build/home/runner/work/media-transcriber-mcp/media-transcriber-mcp/target/release/build/whisper-rs-sys-bc7bbc70ed6384ca/build-script-build5472

Remediation

Enable the listed flags for supported targets, rebuild, and verify the resulting compile commands.

Network

1 peers
  • static.crates.io:8080 the package manager · cargo (media-transcriber-mcp) via crates.io · 17,516 files · went into an output ecosystem
Vulnerabilities10PackageFixSeverity
RUSTSEC-2026-0258h2 0.4.13>=0.4.16high
RUSTSEC-2026-0346rustls 0.23.37>=0.23.46high
RUSTSEC-2026-0348rustls 0.23.37>=0.23.46high
RUSTSEC-2026-0349rustls 0.23.37>=0.23.46high
CVE-2026-93599rustls-webpki 0.103.10>=0.103.13high
GHSA-2mjx-qc3c-rqvcrustls 0.23.37>=0.23.45medium
RUSTSEC-2026-0190anyhow 1.0.102>=1.0.103low
RUSTSEC-2025-0134rustls-pemfile 2.2.0none publishedlow
CVE-2026-93600rustls-webpki 0.103.10>=0.103.12low
CVE-2026-93601rustls-webpki 0.103.10>=0.103.12low
Dependencies273Build behaviour
anstream1.0.0
anstyle1.0.14
anstyle-parse1.0.0
anstyle-query1.1.5
anyhow1.0.102build script
arc-swap1.9.0
atomic-waker1.1.2
aws-lc-rs1.16.2build script
aws-lc-sys0.39.0build scriptprebuilt objects
axum0.8.8
axum-core0.5.6
axum-server0.7.3
base640.22.1
bitflags2.11.0
bytes1.11.1
cfg-if1.0.4
clap4.6.0
clap_builder4.6.0
clap_lex1.1.0
colorchoice1.0.5
cookie0.18.1build script
cookie_store0.22.1
deranged0.5.8
equivalent1.0.2
errno0.3.14
fastrand2.3.0
fnv1.0.7
form_urlencoded1.2.2
fs-err3.3.0build script
futures0.3.32
futures-channel0.3.32
futures-core0.3.32
futures-executor0.3.32
futures-io0.3.32
futures-sink0.3.32
futures-task0.3.32
futures-util0.3.32
getrandom0.2.17
getrandom0.4.2build script
h20.4.13
hashbrown0.16.1
hound3.5.1
http1.4.0
http-body1.0.1
http-body-util0.1.3
httparse1.10.1build script
httpdate1.0.3
hyper1.8.1
hyper-rustls0.27.7
hyper-util0.1.20
icu_collections2.1.1
icu_locale_core2.1.1
icu_normalizer2.1.1
icu_normalizer_data2.1.1build script
icu_properties2.1.2
icu_properties_data2.1.2build script
icu_provider2.1.1
idna1.1.0
idna_adapter1.2.1
indexmap2.13.0
ipnet2.12.0
iri-string0.7.10
is_terminal_polyfill1.70.2
itoa1.0.18
jsonwebtoken10.3.0
ld-linux-x86-64.so.2system library
libc0.2.183build script
libc.so.6system library
libgcc_s.so.1system library
libm.so.6system library
libmvec.so.1system library
linux-raw-sys0.12.1
litemap0.8.1
lock_api0.4.14
log0.4.29
matchit0.8.4
memchr2.8.0
mime0.3.17
mime_guess2.0.5build script
mio1.1.1
num-bigint0.4.6
num-conv0.2.0
num-integer0.1.46
num-traits0.2.19build script
num_threads0.1.7
once_cell1.21.4
parking_lot0.12.5
parking_lot_core0.9.12build script
pem3.0.6
percent-encoding2.3.2
pin-project-lite0.2.17
pin-utils0.1.0
potential_utf0.1.4
powerfmt0.2.0
psl-types2.0.11
publicsuffix2.3.0
reqwest0.12.28
ring0.17.14build scriptprebuilt objects
rust-mcp-schema0.9.6
rust-mcp-sdk0.8.3
rust-mcp-transport0.8.0
rustix1.1.4build script
rustls0.23.37build script
rustls-pemfile2.2.0
rustls-pki-types1.14.0
rustls-webpki0.103.10
ryu1.0.23
scopeguard1.2.0
serde1.0.228build script
serde_core1.0.228build script
serde_json1.0.149build script
serde_path_to_error0.1.20
serde_urlencoded0.7.1
signal-hook-registry1.4.8
signature2.2.0
simple_asn10.6.4
slab0.4.12
smallvec1.15.1
socket20.6.3
stable_deref_trait1.2.1
strsim0.11.1
subtle2.6.1
sync_wrapper1.0.2
tempfile3.27.0
thiserror2.0.18build script
time0.3.47
time-core0.1.8
tinystr0.8.2
tokio1.50.0
tokio-rustls0.26.4
tokio-stream0.1.18
tokio-util0.7.18
tower0.5.3
tower-http0.6.8
tower-layer0.3.3
tower-service0.3.3
tracing0.1.44
tracing-core0.1.36
try-lock0.2.5
unicase2.9.0
untrusted0.7.1
untrusted0.9.0
url2.5.8
utf8_iter1.0.4
utf8parse0.2.2
uuid1.22.0
want0.3.1
webpki-roots1.0.6
whisper-rs0.16.0build script
whisper-rs-sys0.15.0build scriptruns toolsgit
writeable0.6.2
yoke0.8.1
zerofrom0.1.6
zeroize1.8.2
zerotrie0.2.3
zerovec0.11.5
zmij1.0.21build script
rustc-hash2.1.1
unicode-ident1.0.24
aho-corasick1.1.4
anstyle-wincon3.0.11
async-trait0.1.89proc macro
autocfg1.5.0
bindgen0.72.1build script
bumpalo3.20.2
cc1.2.57
cexpr0.6.0
cfg_aliases0.2.1
clang-sys1.8.1build script
clap_derive4.6.0proc macro
cmake0.1.57
displaydoc0.2.5proc macro
document-features0.2.12proc macro
dunce1.0.5
either1.15.0
find-msvc-tools0.1.9
foldhash0.1.5
fs_extra1.3.0
futures-macro0.3.32proc macro
getrandom0.3.4build script
glob0.3.3
hashbrown0.15.5
heck0.5.0
id-arena2.3.0
itertools0.12.1
jobserver0.1.34
js-sys0.3.91
leb128fmt0.1.0
libloading0.8.9
litrs1.0.0
lru-slab0.1.2
minimal-lexical0.2.1
nom7.1.3
once_cell_polyfill1.70.2
ppv-lite860.2.21
prettyplease0.2.37build script
proc-macro21.0.106build script
quinn0.11.9build script, not run
quinn-proto0.11.14
quinn-udp0.5.14build script, not run
quote1.0.45build script
r-efi5.3.0
r-efi6.0.0
rand0.9.2
rand_chacha0.9.0
rand_core0.6.4
rand_core0.9.5
redox_syscall0.5.18
regex1.12.3
regex-automata0.4.14
regex-syntax0.8.10
rust-mcp-macros0.8.1proc macro
rustversion1.0.22build scriptproc macro
semver1.0.27
serde_derive1.0.228proc macro
shlex1.3.0
syn2.0.117
synstructure0.13.2
thiserror-impl2.0.18proc macro
time-macros0.2.27proc macro
tinyvec1.11.0
tinyvec_macros0.1.1
tokio-macros2.6.1proc macro
tracing-attributes0.1.31proc macro
unicode-xid0.2.6
version_check0.9.5
wasi0.11.1+wasi-snapshot-preview1
wasip21.0.2+wasi-0.2.9
wasip30.4.0+wasi-0.3.0-rc-2026-01-06
wasm-bindgen0.2.114build script, not run
wasm-bindgen-futures0.4.64
wasm-bindgen-macro0.2.114proc macro
wasm-bindgen-macro-support0.2.114
wasm-bindgen-shared0.2.114build script, not run
wasm-encoder0.244.0
wasm-metadata0.244.0
wasm-streams0.4.2
wasmparser0.244.0
web-sys0.3.91
web-time1.1.0
windows-link0.2.1
windows-sys0.52.0
windows-sys0.60.2
windows-sys0.61.2
windows-targets0.52.6
windows-targets0.53.5
windows_aarch64_gnullvm0.52.6build script, not runprebuilt objects
windows_aarch64_gnullvm0.53.1build script, not runprebuilt objects
windows_aarch64_msvc0.52.6build script, not runprebuilt objects
windows_aarch64_msvc0.53.1build script, not runprebuilt objects
windows_i686_gnu0.52.6build script, not runprebuilt objects
windows_i686_gnu0.53.1build script, not runprebuilt objects
windows_i686_gnullvm0.52.6build script, not runprebuilt objects
windows_i686_gnullvm0.53.1build script, not runprebuilt objects
windows_i686_msvc0.52.6build script, not runprebuilt objects
windows_i686_msvc0.53.1build script, not runprebuilt objects
windows_x86_64_gnu0.52.6build script, not runprebuilt objects
windows_x86_64_gnu0.53.1build script, not runprebuilt objects
windows_x86_64_gnullvm0.52.6build script, not runprebuilt objects
windows_x86_64_gnullvm0.53.1build script, not runprebuilt objects
windows_x86_64_msvc0.52.6build script, not runprebuilt objects
windows_x86_64_msvc0.53.1build script, not runprebuilt objects
wit-bindgen0.51.0build script, not runprebuilt objects
wit-bindgen-core0.51.0
wit-bindgen-rust0.51.0build script, not run
wit-bindgen-rust-macro0.51.0build script, not runproc macro
wit-component0.244.0
wit-parser0.244.0
yoke-derive0.8.1proc macro
zerocopy0.8.47build script, not run
zerocopy-derive0.8.47proc macro
zerofrom-derive0.1.6proc macro
zerovec-derive0.11.2proc macro
Versions11RiskVulnsPublished
0.8.23d ago
0.8.13d ago
0.8.03d ago
0.7.4not analyzed2026-04-03
0.7.3not analyzed2026-04-02
0.4.2not analyzed2026-03-29
0.3.1not analyzed2026-03-22
0.3.0not analyzed2026-03-22
0.2.0not analyzed2026-03-22
0.1.0not analyzed2026-03-21
0.8.3highhigh

Raw data

capture
947 KB
records
171,175
bytes per record
5.5

Loading a sample of the capture

Want to see more? E-mail us at hello@bitbison.io about your use case.

1 of 1 jobs captured: build-test success · Generated 2026-10-18 · run 8349c086-fd42-4a6b-9cd8-53b082538bde

analysis 0.1.0 · 2026-10-17 · 0abbde9 · graph v2