Skip to content
Open-Source Registry

cargo / moadim / 3.3.1

moadim 3.3.1

bitbison: flagged, behavior flagged, dependencies notes, posture not checked, pipeline clean, 1 of 1 jobs captured RiskmediumVulnsnone
processes
366
operations
50K
packages
229
compiler runs
227
connections
3
build time
4m 05s
job time
4m 05s
capture
709 KB
records
93K
bytes / record
7.6

Build behaviourits build script ran gitundeclared fetchfetched outside crates.io

run 11518e6a-a6c6-47e0-86a6-b0efda1d2122 · built 2026-10-20 · complete View on crates.io

Graph

egress · medium · in moadim
2

Checks

12 of 14 clear Network activity Build-time dependency advisories
Build behavior▲✓✓✓✓✓✓✓
Supply chain✓▲✓✓✓
Pipeline✓

Detections

1
  • Build script reached codeload.github.com +1
    utoipa-swagger-ui 10.0.1 › github.com:443, codeload.github.com:443
    medium

Detection

mediumwitnessed

Build script reached codeload.github.com +1

Unexpected network connection

Subject
utoipa-swagger-ui 10.0.1
Destination
github.com:443, codeload.github.com:443
Reaches
Jobs
build-test
Rule
egress

Evidence

  1. Connection outside the process’s allowed destinationscause

    connection to github.com:443, opened by curl

    subject github.com:443

    by curl -sSL -o /home/runner/work/daemon/daemon/target/release/build/utoipa-swagger-ui-098dd339f31819cf/out/v5.32.6.zip https://github.com/swagger-api/swagger-ui/a…

  2. Connection outside the process’s allowed destinationscause

    connection to codeload.github.com:443, opened by curl

    subject codeload.github.com:443

    by curl -sSL -o /home/runner/work/daemon/daemon/target/release/build/utoipa-swagger-ui-098dd339f31819cf/out/v5.32.6.zip https://github.com/swagger-api/swagger-ui/a…

  3. What a build script's fetch becamesupport

    1 file came down; nothing the build compiled, linked or ran

  4. Connection opened by a build script or child processsupport

    the opener descends from the build script at /home/runner/work/daemon/daemon/target/release/build/utoipa-swagger-ui-332f5785aa2a6220/build-script-build

  5. Tool commandsupport

    Command: curl -sSL -o /home/runner/work/daemon/daemon/target/release/build/utoipa-swagger-ui-098dd339f31819cf/out/v5.32.6.zip https://github.com/swagger-api/swagger-ui/a…

    by curl -sSL -o /home/runner/work/daemon/daemon/target/release/build/utoipa-swagger-ui-098dd339f31819cf/out/v5.32.6.zip https://github.com/swagger-api/swagger-ui/a…

In moadim

Loading the graph

Processes

build-test

cargo›cargo›build-script-build›curl

Ran
curl -sSL -o /home/runner/work/daemon/daemon/target/release/build/utoipa-swagger-ui-098dd339f31819cf/out/v5.32.6.zip https://github.com/swagger-api/swagger-ui/a…
Invoked by
cargo build --release --locked --message-format=json-render-diagnostics
Lineage · 4 processes
  1. cargocargo build --release --locked --message-format=json-render-diagnostics2482
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo build --release --locked --message-format=json-render-diagnostics2482
  3. build-script-build/home/runner/work/daemon/daemon/target/release/build/utoipa-swagger-ui-332f5785aa2a6220/build-script-build5374
  4. curlcurl -sSL -o /home/runner/work/daemon/daemon/target/release/build/utoipa-swagger-ui-098dd339f31819cf/out/v5.32.6.zip https://github.com/swagger-api/swagger-ui/a…5378

Remediation

The build script connected to the network while compiling. Nothing it downloaded was compiled, linked or run. Build the crate from what the registry ships, or accept the download after reviewing it.

Network

3 peers
  • codeload.github.com:443 build code of utoipa-swagger-ui · curl · GitHub, Inc. · 1 file undeclared
  • github.com:443 build code of utoipa-swagger-ui · curl · GitHub, Inc. · 1 file undeclared
  • static.crates.io:8080 the package manager · cargo (daemon) via crates.io · 10,715 files · went into an output ecosystem
Dependencies241Build behaviour
aho-corasick1.1.4
anstream1.0.0
anstyle1.0.14
anstyle-parse1.0.0
anstyle-query1.1.5
anyhow1.0.104build script
async-compression0.4.42
atomic-waker1.1.2
axum0.8.9
axum-core0.5.6
base640.23.1
bitflags2.13.1
bytes1.12.1
cfg-if1.0.4
chrono0.4.45
clap4.6.7
clap_builder4.6.7
clap_complete4.6.11
clap_lex1.1.0
colorchoice1.0.5
compression-codecs0.4.38
compression-core0.4.32
crc32fast1.5.0build script
cron0.17.0
cron-union1.0.3
croner3.0.1
croner4.0.1
derive_builder0.20.2
dirs7.0.0
dirs-sys0.5.0
dyn-clone1.0.20
env_filter2.0.0
env_logger0.11.11
equivalent1.0.2
errno0.3.14
flate21.1.9
form_urlencoded1.2.2
futures0.3.33
futures-channel0.3.33
futures-core0.3.33
futures-executor0.3.33
futures-io0.3.33
futures-sink0.3.33
futures-task0.3.33
futures-util0.3.33
gethostname1.1.0
getrandom0.4.3build script
hashbrown0.17.1
http1.4.2
http-body1.1.0
http-body-util0.1.4
httparse1.10.1build script
httpdate1.0.3
hyper1.11.0
hyper-util0.1.20
iana-time-zone0.1.65
indexmap2.14.0
is_terminal_polyfill1.70.2
itoa1.0.18
jiff0.2.34
jiff-core0.1.0
ld-linux-x86-64.so.2system library
libc0.2.190build script
libc.so.6system library
libgcc_s.so.1system library
libm.so.6system library
libmvec.so.1system library
linux-raw-sys0.12.1
lock_api0.4.14
log0.4.34
matchit0.8.4
memchr2.8.3
mime0.3.17
mime_guess2.0.5build script
miniz_oxide0.8.9
mio1.2.2
num-traits0.2.19build script
once_cell1.21.4
option-ext0.2.0
parking_lot0.12.5
parking_lot_core0.9.12build script
percent-encoding2.3.2
phf0.11.3
phf_shared0.11.3
pin-project-lite0.2.17
rand_core0.10.1
ref-cast1.0.26build script
regex1.13.1
regex-automata0.4.16
regex-syntax0.8.11
rmcp3.5.1build script
rustix1.1.4build script
ryu1.0.23
schemars1.2.2
scopeguard1.2.0
serde1.0.229build script
serde_core1.0.229build script
serde_json1.0.154build script
serde_path_to_error0.1.20
serde_spanned1.1.2
serde_urlencoded0.7.1
signal-hook-registry1.4.8
simd-adler320.3.10
siphasher1.0.3
slab0.4.12
smallvec1.15.2
socket20.6.5
sse-stream0.2.4
strsim0.11.1
strum0.27.2
sync_wrapper1.0.2
thiserror2.0.19build script
tokio1.53.2
tokio-cron-scheduler0.15.1build script
tokio-stream0.1.18
tokio-util0.7.18
toml1.1.8+spec-1.1.0
toml_datetime1.1.2+spec-1.1.0
toml_parser1.1.5+spec-1.1.0
toml_writer1.1.3+spec-1.1.0
tower0.5.3
tower-http0.7.1
tower-layer0.3.3
tower-service0.3.3
tracing0.1.44
tracing-core0.1.36
unicase2.9.0
utf8parse0.2.2
utoipa6.0.0
utoipa-swagger-ui10.0.1build scriptnetworkruns toolscodeload.github.com, github.com, curl
uuid1.28.0
winnow0.7.15
winnow1.0.4
zmij1.0.23build script
adler22.0.1
chacha200.10.1
chrono-tz0.10.4build script
cpufeatures0.3.0
phf0.12.1
phf_shared0.12.1
rand0.10.2
unicode-ident1.0.24
zlib-rs0.6.6
android_system_properties0.1.5
anstyle-wincon3.0.11
async-trait0.1.91proc macro
autocfg1.5.1
bitflags1.3.2
bumpalo3.20.3
cc1.3.0
clap_derive4.6.7proc macro
core-foundation-sys0.8.7
darling0.20.11
darling0.24.0
darling_core0.20.11
darling_core0.24.0
darling_macro0.20.11proc macro
darling_macro0.24.0proc macro
defmt1.1.1build script, not run
defmt-macros1.1.1build script, not runproc macro
defmt-parser1.0.0
derive_builder_core0.20.2
derive_builder_macro0.20.2proc macro
displaydoc0.2.6proc macro
find-msvc-tools0.1.9
fnv1.0.7
futures-macro0.3.33proc macro
getrandom0.2.17
heck0.5.0
iana-time-zone-haiku0.1.2build script, not run
icu_collections2.2.0
icu_locale_core2.2.0
icu_normalizer2.2.0
icu_normalizer_data2.2.0build script
icu_properties2.2.0
icu_properties_data2.2.0build script
icu_provider2.2.0
ident_case1.0.1
idna1.1.0
idna_adapter1.2.2
jiff-static0.2.34proc macro
js-sys0.3.103
libredox0.1.18
litemap0.8.2
num-derive0.4.2proc macro
once_cell_polyfill1.70.2
pastey0.2.3proc macro
phf_generator0.11.3
phf_macros0.11.3proc macro
portable-atomic1.14.0build script, not run
portable-atomic-util0.2.7build script, not run
potential_utf0.1.5
proc-macro21.0.107build script
quote1.0.47build script
r-efi6.0.0
rand0.8.7
rand_core0.6.4
redox_syscall0.5.18
redox_users0.5.2
ref-cast-impl1.0.26proc macro
rmcp-macros3.5.1proc macro
rustversion1.0.23build script, not runproc macro
schemars_derive1.2.2proc macro
serde_derive1.0.229proc macro
serde_derive_internals0.30.0
shlex2.0.1
stable_deref_trait1.2.1
strum_macros0.27.2proc macro
syn2.0.119
syn3.0.2
synstructure0.13.2
thiserror-impl2.0.19proc macro
tinystr0.8.3
tokio-macros2.7.1proc macro
tracing-attributes0.1.31proc macro
typed-path0.12.3
url2.5.8
utf8_iter1.0.4
utoipa-gen6.0.1proc macro
wasi0.11.1+wasi-snapshot-preview1
wasm-bindgen0.2.126build script, not run
wasm-bindgen-macro0.2.126proc macro
wasm-bindgen-macro-support0.2.126
wasm-bindgen-shared0.2.126build script, not run
windows-core0.62.2
windows-implement0.60.2proc macro
windows-interface0.59.3proc macro
windows-link0.2.1
windows-result0.4.1
windows-strings0.5.1
windows-sys0.61.2
writeable0.6.3
yoke0.8.3
yoke-derive0.8.2proc macro
zerofrom0.1.8
zerofrom-derive0.1.7proc macro
zerotrie0.2.4
zerovec0.11.6
zerovec-derive0.11.3proc macro
zip8.6.0
zopfli0.8.3
Versions60RiskVulnsPublished
3.3.011d ago
3.2.10not analyzed2026-09-15
3.2.9not analyzed2026-09-14
3.2.8not analyzed2026-09-03
3.2.7not analyzed2026-09-02
3.2.6not analyzed2026-08-29
3.2.5not analyzed2026-08-27
3.2.4not analyzed2026-08-27
3.2.3not analyzed2026-08-01
3.2.2not analyzed2026-07-31
3.2.1not analyzed2026-07-31
3.2.0not analyzed2026-07-31
3.1.0not analyzed2026-07-30
3.0.0not analyzed2026-07-30
1.7.6not analyzed2026-07-29
1.7.5not analyzed2026-07-28
1.7.4not analyzed2026-07-27
1.7.3not analyzed2026-07-26
1.7.2not analyzed2026-07-25
1.7.1not analyzed2026-07-24
1.7.0not analyzed2026-07-23
1.6.1not analyzed2026-07-22
1.6.0not analyzed2026-07-21
1.4.1not analyzed2026-07-18
1.3.1not analyzed2026-07-17
1.3.0not analyzed2026-07-15
1.2.0not analyzed2026-07-13
1.1.0not analyzed2026-07-12
1.0.1not analyzed2026-07-09
0.27.0not analyzed2026-07-07
0.22.0not analyzed2026-07-03
0.20.0not analyzed2026-07-02
0.19.1not analyzed2026-07-01
0.19.0not analyzed2026-07-01
0.18.0not analyzed2026-06-29
0.17.1not analyzed2026-06-29
0.17.0not analyzed2026-06-29
0.16.0not analyzed2026-06-26
0.15.0not analyzed2026-06-21
0.14.0not analyzed2026-06-21
0.13.0not analyzed2026-06-21
0.12.0not analyzed2026-06-18
0.11.2not analyzed2026-06-17
0.11.1not analyzed2026-06-17
0.11.0not analyzed2026-06-17
0.10.0not analyzed2026-06-16
0.9.0not analyzed2026-06-16
0.8.0not analyzed2026-06-16
0.7.0not analyzed2026-06-15
0.6.1not analyzed2026-06-15
0.6.0not analyzed2026-06-15
0.5.0not analyzed2026-06-15
0.4.0not analyzed2026-06-14
0.2.0not analyzed2026-06-14
0.1.0not analyzed2026-06-11
0.0.4not analyzed2026-06-11
0.0.3not analyzed2026-06-10
0.0.2not analyzed2026-06-10
0.0.1not analyzed2026-06-10
3.3.1mediumnone

Raw data

capture
709 KB
records
92,754
bytes per record
7.6

Loading a sample of the capture

Want to see more? E-mail us at hello@bitbison.io about your use case.

1 of 1 jobs captured: build-test success · Generated 2026-10-20 · run 11518e6a-a6c6-47e0-86a6-b0efda1d2122

analysis 0.1.0 · 2026-10-19 · 10ce9f4 · graph v2