Skip to content
Open-Source Registry

cargo / montagent-core

montagent-core 0.2.0

bitbison: flagged, behavior flagged, dependencies notes, posture not checked, pipeline clean, 1 of 1 jobs captured 4 detections
processes
490
operations
44K
packages
215
compiler runs
131
connections
3
job time
4m 30s
capture
534 KB
records
81K
bytes / record
6.6

The Montagent core library: parsing, the finding type, the check registry and the report surface.

Build behaviourundeclared fetchlinked a downloaded binaryfetched outside crates.io

13 downloads · MIT · source · home page · cargo validationvideovideo-editing

Artifact

file · retained · product · graph v1
1
ChecksDetections
Build behavior
▲ Network activity—
✓ Sensitive data access and transfer—
✓ Cross-process access—
✓ Build file changes—
▲ Build script activity—
▲ Data flow analysis—
✓ Filesystem writes—
✓ Context collection—
Supply chain
✓ Known vulnerabilities—
▲ Build-time dependency advisories—
✓ Dependency advisories—
✓ Declared and observed dependencies—
✓ Dependency and toolchain versions—
Pipeline
✓ Pipeline coverage—

Detections

4
  • Build code opened a network connection
    skia-bindings 0.153.2 › github.com:443, release-assets.githubusercontent.com:443
    connection to github.com:443, opened by curl
    high
  • Uncompiled library linked
    libskia-bindings.a › github.com, release-assets.githubusercontent.com
    written under the build script at /home/runner/work/Montagent/Montagent/target/release/build/skia-bindings-980d8f6ef937e364/build_script_build-980d8f6ef937e364, which downloaded from github.com, release-assets.githubusercontent.com
    high
  • Uncompiled library linked
    libskia.a › github.com, release-assets.githubusercontent.com
    written under the build script at /home/runner/work/Montagent/Montagent/target/release/build/skia-bindings-980d8f6ef937e364/build_script_build-980d8f6ef937e364, which downloaded from github.com, release-assets.githubusercontent.com
    high
  • Build script ran curl
    skia-bindings 0.153.2 › github.com:443
    Tool invocations: 1. Build script: /home/runner/work/Montagent/Montagent/target/release/build/skia-bindings-980d8f6ef937e364/build_script_build-980d8f6ef937e364
    medium

Detection

high

Build code opened a network connection

subject skia-bindings 0.153.2 · destination github.com:443, release-assets.githubusercontent.com:443

connection to github.com:443, opened by curl

connection to release-assets.githubusercontent.com:443, opened by curl

the opener descends from the build script at /home/runner/work/Montagent/Montagent/target/release/build/skia-bindings-980d8f6ef937e364/build_script_build-980d8f6ef937e364

  1. rustup2447
  2. cargo2447
  3. build_script_build-980d8f6ef937e3643878
  4. curl3893at 14:31:31

witnessed · rule egress

Detection

high

Uncompiled library linked

subject /home/runner/work/Montagent/Montagent/target/release/build/skia-bindings-f101f4f5dceb5a2b/out/skia/libskia-bindings.a · destination github.com, release-assets.githubusercontent.com

written under the build script at /home/runner/work/Montagent/Montagent/target/release/build/skia-bindings-980d8f6ef937e364/build_script_build-980d8f6ef937e364, which downloaded from github.com, release-assets.githubusercontent.com

Written by build_script_build-980d8f6ef937e364 from a pipe without a recorded source compilation

skia-bindings asked the linker for it: static skia-bindings (target/release/build/skia-bindings-f101f4f5dceb5a2b/output)

  1. rustup2447
  2. cargo2447
  3. build_script_build-980d8f6ef937e3643878at 14:31:31

witnessed · Montagent · rule object-provenance

Detection

high

Uncompiled library linked

subject /home/runner/work/Montagent/Montagent/target/release/build/skia-bindings-f101f4f5dceb5a2b/out/skia/libskia.a · destination github.com, release-assets.githubusercontent.com

written under the build script at /home/runner/work/Montagent/Montagent/target/release/build/skia-bindings-980d8f6ef937e364/build_script_build-980d8f6ef937e364, which downloaded from github.com, release-assets.githubusercontent.com

Written by build_script_build-980d8f6ef937e364 from a pipe without a recorded source compilation

skia-bindings asked the linker for it: static skia (target/release/build/skia-bindings-f101f4f5dceb5a2b/output)

  1. rustup2447
  2. cargo2447
  3. build_script_build-980d8f6ef937e3643878at 14:31:31

witnessed · Montagent · rule object-provenance

Detection

medium

Build script ran curl

subject skia-bindings 0.153.2 · destination github.com:443

Tool invocations: 1. Build script: /home/runner/work/Montagent/Montagent/target/release/build/skia-bindings-980d8f6ef937e364/build_script_build-980d8f6ef937e364

Command: curl -L -f -sS -C - --create-dirs --output /home/runner/work/Montagent/Montagent/target/release/build/skia-bindings-f101f4f5dceb5a2b/out/.cache/skia-binaries-b0…

Recorded activity: used a network connection to github.com:443

witnessed · Montagent · rule buildscript

Network

2 fetches
  • github.com
    build code of skia-bindings · curl · 1 file
    undeclared
  • release-assets.githubusercontent.com
    build code of skia-bindings · curl · 1 file
    undeclared
cargo fetched 10,669 files from static.crates.io

Raw data

capture
534 KB
records
81,052
bytes per record
6.6

Loading a sample of the capture

Want to see more? E-mail us at hello@bitbison.io about your use case.

Dependencies

224 packages, 32 with a build script that ran, 2 doing more than compiling
PackageVersionUsageBuild behaviour
skia-bindings0.153.2observedbuild scriptnetworkruns tools github.com, release-assets.githubusercontent.com, curl, git
wit-bindgen0.57.1observedbuild script, not runprebuilt objects
anyhow1.0.104observedbuild script
arg_enum_proc_macro0.3.4observedproc macro
av-scenechange0.14.1observedbuild script
bindgen0.72.1observedbuild script
bytemuck_derive1.12.1observedproc macro
clang-sys1.9.1observedbuild script
crc32fast1.5.2observedbuild script
crossbeam-deque0.8.8observedbuild script
crossbeam-epoch0.9.21observedbuild script
crossbeam-utils0.8.23observedbuild script
crunchy0.2.4observedbuild script, not run
displaydoc0.2.7observedproc macro
equator-macro0.4.2observedproc macro
generic-array0.14.7observedbuild script
getrandom0.3.4observedbuild script, not run
getrandom0.4.3observedbuild script, not run
icu_locale_fallback_data2.3.0observedbuild script
icu_normalizer_data2.3.0observedbuild script
icu_properties_data2.3.0observedbuild script
icu_segmenter_data2.3.0observedbuild script
interpolate_name0.2.4observedproc macro
ld-linux-x86-64.so.2linkedsystem library
libc0.2.189observedbuild script
libc.so.6linkedsystem library
libfuzzer-sys0.4.13observedbuild script, not run
libgcc_s.so.1linkedsystem library
libm0.2.16observedbuild script
libm.so.6linkedsystem library
libmvec.so.1linkedsystem library
noop_proc_macro0.3.0observedproc macro
num-derive0.4.2observedproc macro
num-traits0.2.19observedbuild script
paste1.0.15observedbuild scriptproc macro
pastey0.1.1observedproc macro
prettyplease0.2.37observedbuild script
proc-macro21.0.107observedbuild script
profiling-procmacros1.0.18observedproc macro
pulp0.22.3observedbuild script
quote1.0.47observedbuild script
rav1e0.8.1observedbuild script
rayon-core1.13.0observedbuild script
ref-cast1.0.27observedbuild script
ref-cast-impl1.0.27observedproc macro
rustix1.1.5observedbuild script
rustversion1.0.23observedbuild script, not runproc macro
schemars_derive1.2.2observedproc macro
serde direct1.0.229observedbuild script
serde_core1.0.229observedbuild script
serde_derive1.0.229observedproc macro
serde_json direct1.0.151observedbuild script
simd_helpers0.1.0observedproc macro
thiserror2.0.20observedbuild script
thiserror-impl2.0.20observedproc macro
wasm-bindgen0.2.128observedbuild script, not run
wasm-bindgen-macro0.2.128observedproc macro
wasm-bindgen-shared0.2.128observedbuild script, not run
yoke-derive0.8.4observedproc macro
zerocopy0.8.57observedbuild script
zerocopy-derive0.8.57observedproc macro
zerofrom-derive0.1.8observedproc macro
zerovec-derive0.11.6observedproc macro
zmij1.0.23observedbuild script
adler22.0.1observed
aho-corasick1.1.5observed
aligned0.4.3observed
aligned-vec0.6.4observed
arbitrary1.4.2observed
arrayvec0.7.8observed
as-slice0.2.1observed
autocfg1.5.1observed
av1-grain0.2.5observed
avif-serialize0.8.9observed
bit_field0.10.3observed
bitflags2.13.2observed
bitstream-io4.10.0observed
block-buffer0.10.4observed
built0.8.1observed
bumpalo3.20.3observed
bytemuck1.25.2observed
byteorder-lite0.1.0observed
cc1.4.6observed
cexpr0.6.0observed
cfg-if1.0.5observed
color_quant1.1.0observed
cpufeatures0.2.17observed
crypto-common0.1.7observed
digest0.10.7observed
dyn-clone1.0.20observed
either1.18.0observed
equator0.4.2observed
equivalent1.0.2observed
errno0.3.14observed
exr1.74.2observed
fax0.2.7observed
fdeflate0.3.7observed
filetime0.2.29observed
find-msvc-tools0.1.12observed
flate21.1.10observed
foldhash0.2.0observed
font-types0.12.5observed
fontique0.11.1observed
gif0.14.2observed
glob0.3.4observed
half2.7.1observed
harfrust0.12.0observed
hashbrown0.17.1observed
heck0.5.0observed
icu_collections2.3.0observed
icu_locale_core2.3.0observed
icu_locale_fallback2.3.0observed
icu_normalizer2.3.0observed
icu_properties2.3.0observed
icu_provider2.3.1observed
icu_segmenter2.3.0observed
image0.25.10observed
image-webp0.2.4observed
imgref1.12.3observed
indexmap2.14.2observed
itertools0.13.0observed
itertools0.14.0observed
itoa1.0.18observed
jobserver0.1.35observed
lebe0.5.3observed
libloading0.8.9observed
linebender_resource_handle0.1.1observed
linux-raw-sys0.12.1observed
litemap0.8.3observed
log0.4.34observed
loop90.1.5observed
maybe-rayon0.1.1observed
memchr2.8.3observed
memmap20.9.11observed
minimal-lexical0.2.1observed
miniz_oxide0.8.9observed
miniz_oxide0.9.1observed
montagent-render direct0.2.0observed
montagent-text direct0.2.0observed
moxcms0.8.1observed
new_debug_unreachable1.0.6observed
no_std_io20.9.4observed
nom7.1.3observed
nom8.0.0observed
num-bigint0.4.8observed
num-complex0.4.6observed
num-integer0.1.47observed
num-rational0.4.2observed
once_cell1.21.4observed
parlance0.1.0observed
parley0.11.1observed
parley_data0.11.1observed
pkg-config0.3.34observed
png0.18.1observed
potential_utf0.1.6observed
ppv-lite860.2.21observed
profiling1.0.18observed
pulp-wasm-simd-flag0.1.1observed
pxfm0.1.30observed
qoi0.4.1observed
quick-error2.0.1observed
r-efi5.3.0observed
r-efi6.0.0observed
rand0.9.5observed
rand_chacha0.9.0observed
rand_core0.9.5observed
ravif0.13.0observed
raw-cpuid11.6.0observed
rayon1.12.0observed
read-fonts0.41.0observed
read-fonts0.43.3observed
reborrow0.5.5observed
regex1.13.1observed
regex-automata0.4.18observed
regex-syntax0.8.11observed
rgb0.8.53observed
rustc-hash2.1.3observed
schemars direct1.2.2observed
serde_derive_internals0.30.0observed
serde_spanned1.1.1observed
sha2 direct0.10.9observed
shlex1.3.0observed
shlex2.0.1observed
simd-adler320.3.10observed
skia-safe0.153.2observed
skrifa0.44.0observed
skrifa0.46.2observed
smallvec1.16.1observed
stable_deref_trait1.2.1observed
syn2.0.119observed
syn3.0.6observed
synstructure0.14.0observed
tar0.4.46observed
tiff0.11.3observed
tinystr0.8.4observed
tinyvec1.13.3observed
toml1.1.6+spec-1.1.0observed
toml_datetime1.1.1+spec-1.1.0observed
toml_parser1.1.3+spec-1.1.0observed
toml_writer1.1.2+spec-1.1.0observed
typenum1.20.1observed
unicode-ident1.0.26observed
unicode-normalization direct0.1.23observed
unicode-segmentation direct1.13.3observed
utf8_iter1.0.4observed
v_frame0.3.9observed
version_check0.9.5observed
wasip21.0.4+wasi-0.2.12observed
wasm-bindgen-macro-support0.2.128observed
weezl0.1.12observed
windows-link0.2.1observed
windows-sys0.61.2observed
winnow1.0.4observed
writeable0.6.4observed
xattr1.6.1observed
y4m0.8.0observed
yoke0.8.3observed
zerofrom0.1.8observed
zerotrie0.2.5observed
zerovec0.11.8observed
zlib-rs0.6.8observed
zune-core0.5.3observed
zune-inflate0.2.54observed
zune-jpeg0.5.15observed

1 of 1 jobs captured: build-test success · Generated 2026-10-10 · run 014853af-4a4b-44b7-a4b8-ec46cf9b64f3

analysis 0.1.0 · 2026-10-09 · 814b5de · graph v1