Skip to content
Open-Source Registry

cargo / mozjs

mozjs 0.26.8

processes
581
operations
66K
packages
210
compiler runs
113
connections
3
job time
1m 31s
capture
812 KB
records
116K
bytes / record
7.0

Rust bindings to the Mozilla SpiderMonkey JavaScript engine.

bitbison: flagged, behavior flagged, dependencies clean, posture not checked, pipeline clean, 1 of 1 jobs captured
5 detections

Build behaviournot recorded for this run

469,233 downloads · MPL-2.0 · source · cargo

Release 0.26.8 run 7a6ee547-a89b-488a-b372-1251fb43dc83 · built 2026-10-07

Artifact

file · retained · product
1
ChecksDetections
Build behavior
▲ Network activity—
✓ Sensitive data access and transfer—
✓ Cross-process access—
✓ Build file changes—
▲ Build script activity—
▲ Data flow analysis—
✓ Filesystem writes—
✓ Context collection—
Supply chain
✓ Known vulnerabilities—
✓ Build-time dependency advisories—
✓ Dependency advisories—
✓ Declared and observed dependencies—
✓ Dependency and toolchain versions—
Pipeline
✓ Pipeline coverage—

Detections

5
  • Build code opened a network connection
    mozjs_sys 153.4.0-0 › github.com:443, release-assets.githubusercontent.com:443
    connection to github.com:443, opened by curl
    high
  • Object file downloaded by a build script
    libjs_static.a › github.com, release-assets.githubusercontent.com
    written under the build script at /home/runner/work/mozjs/mozjs/target/release/build/mozjs_sys-8ff4a36ee3fd5db2/build_script_build-8ff4a36ee3fd5db2, which downloaded from github.com, release-assets.githubusercontent.com
    high
  • Object file downloaded by a build script
    libjsapi.a › github.com, release-assets.githubusercontent.com
    written under the build script at /home/runner/work/mozjs/mozjs/target/release/build/mozjs_sys-8ff4a36ee3fd5db2/build_script_build-8ff4a36ee3fd5db2, which downloaded from github.com, release-assets.githubusercontent.com
    high
  • Object file downloaded by a build script
    libjsglue.a › github.com, release-assets.githubusercontent.com
    written under the build script at /home/runner/work/mozjs/mozjs/target/release/build/mozjs_sys-8ff4a36ee3fd5db2/build_script_build-8ff4a36ee3fd5db2, which downloaded from github.com, release-assets.githubusercontent.com
    high
  • Build script ran curl
    mozjs_sys 153.4.0-0 › github.com:443
    Tool invocations: 1. Build script: /home/runner/work/mozjs/mozjs/target/release/build/mozjs_sys-8ff4a36ee3fd5db2/build_script_build-8ff4a36ee3fd5db2
    medium

Detection

high

Build code opened a network connection

subject mozjs_sys 153.4.0-0 · destination github.com:443, release-assets.githubusercontent.com:443

connection to github.com:443, opened by curl

connection to release-assets.githubusercontent.com:443, opened by curl

the opener descends from the build script at /home/runner/work/mozjs/mozjs/target/release/build/mozjs_sys-8ff4a36ee3fd5db2/build_script_build-8ff4a36ee3fd5db2

  1. rustup2451
  2. cargo2451
  3. build_script_build-8ff4a36ee3fd5db24735
  4. curl4749at 07:15:14

witnessed · rule egress

Detection

high

Object file downloaded by a build script

subject /home/runner/work/mozjs/mozjs/target/release/build/mozjs_sys-8a5d3b1a9087e3c2/out/build/js/src/build/libjs_static.a · destination github.com, release-assets.githubusercontent.com

written under the build script at /home/runner/work/mozjs/mozjs/target/release/build/mozjs_sys-8ff4a36ee3fd5db2/build_script_build-8ff4a36ee3fd5db2, which downloaded from github.com, release-assets.githubusercontent.com

Written by build_script_build-8ff4a36ee3fd5db2 without a recorded source compilation

mozjs_sys asked the linker for it: static js_static (target/release/build/mozjs_sys-8a5d3b1a9087e3c2/output)

  1. rustup2451
  2. cargo2451
  3. build_script_build-8ff4a36ee3fd5db24735at 07:15:15

witnessed · mozjs · rule object-provenance

Detection

high

Object file downloaded by a build script

subject /home/runner/work/mozjs/mozjs/target/release/build/mozjs_sys-8a5d3b1a9087e3c2/out/build/libjsapi.a · destination github.com, release-assets.githubusercontent.com

written under the build script at /home/runner/work/mozjs/mozjs/target/release/build/mozjs_sys-8ff4a36ee3fd5db2/build_script_build-8ff4a36ee3fd5db2, which downloaded from github.com, release-assets.githubusercontent.com

Written by build_script_build-8ff4a36ee3fd5db2 without a recorded source compilation

mozjs_sys asked the linker for it: static jsapi (target/release/build/mozjs_sys-8a5d3b1a9087e3c2/output)

  1. rustup2451
  2. cargo2451
  3. build_script_build-8ff4a36ee3fd5db24735at 07:15:16

witnessed · mozjs · rule object-provenance

Detection

high

Object file downloaded by a build script

subject /home/runner/work/mozjs/mozjs/target/release/build/mozjs_sys-8a5d3b1a9087e3c2/out/build/libjsglue.a · destination github.com, release-assets.githubusercontent.com

written under the build script at /home/runner/work/mozjs/mozjs/target/release/build/mozjs_sys-8ff4a36ee3fd5db2/build_script_build-8ff4a36ee3fd5db2, which downloaded from github.com, release-assets.githubusercontent.com

Written by build_script_build-8ff4a36ee3fd5db2 without a recorded source compilation

mozjs_sys asked the linker for it: static jsglue (target/release/build/mozjs_sys-8a5d3b1a9087e3c2/output)

  1. rustup2451
  2. cargo2451
  3. build_script_build-8ff4a36ee3fd5db24735at 07:15:16

witnessed · mozjs · rule object-provenance

Detection

medium

Build script ran curl

subject mozjs_sys 153.4.0-0 · destination github.com:443

Tool invocations: 1. Build script: /home/runner/work/mozjs/mozjs/target/release/build/mozjs_sys-8ff4a36ee3fd5db2/build_script_build-8ff4a36ee3fd5db2

Command: curl -L -f -s -o /home/runner/work/mozjs/mozjs/target/release/build/mozjs_sys-8a5d3b1a9087e3c2/out/libmozjs-x86_64-unknown-linux-gnu.tar.gz https://github.com/s…

Recorded activity: used a network connection to github.com:443

witnessed · mozjs · rule buildscript

Network

3 peers
  • github.com:443 GitHub, Inc.
    curl · build-test
    flagged
  • release-assets.githubusercontent.com:443 Fastly, Inc.
    curl · build-test
    flagged
  • static.crates.io:8080
    cargo (mozjs) via crates.io · build-test
    allowed

Raw data

capture
812 KB
records
115,581
bytes per record
7.0

Loading a sample of the capture

Want to see more? E-mail us at hello@bitbison.io about your use case.

Dependencies

214 packages, 0 with a build script that ran, 0 doing more than compiling
PackageVersionUsageBuild behaviour
adler22.0.1observed
aho-corasick1.1.5observed
anes0.1.6observed
anstream1.0.0observed
anstyle1.0.14observed
anstyle-parse1.0.0observed
anstyle-query1.1.5observed
anstyle-wincon3.0.11observed
arraystring0.3.0observed
arrayvec0.7.8observed
autocfg1.5.1observed
bindgen direct0.72.1observed
bitflags2.13.2observed
bumpalo3.20.3observed
calendrical_calculations0.2.4observed
cast0.3.0observed
cbindgen0.29.4observed
cc direct1.6.0observed
cexpr0.6.0observed
cfg-if1.0.5observed
ciborium0.2.2observed
ciborium-io0.2.2observed
ciborium-ll0.2.2observed
clang-sys1.9.1observed
clap4.6.7observed
clap_builder4.6.7observed
clap_lex1.1.1observed
colorchoice1.0.5observed
core_detect1.0.0observed
core_maths0.1.1observed
crc32fast1.5.2observed
criterion0.6.0observed
criterion-plot0.5.0observed
crossbeam-deque0.8.8observed
crossbeam-epoch0.9.21observed
crossbeam-utils0.8.23observed
crunchy0.2.4observed
diplomat0.14.0observed
diplomat-runtime0.14.0observed
diplomat_core0.14.0observed
displaydoc0.2.7observed
either1.19.0observed
encoding_c0.9.8observed
encoding_c_mem0.2.6observed
encoding_rs direct0.8.42observed
equivalent1.0.2observed
errno0.3.14observed
fastrand2.5.0observed
filetime0.2.29observed
find-msvc-tools0.1.14observed
fixed_decimal0.7.2observed
flate21.1.10observed
futures-core0.3.34observed
futures-task0.3.34observed
futures-util0.3.34observed
getrandom0.4.3observed
glob0.3.4observed
half2.7.1observed
hashbrown0.17.1observed
heck0.5.0observed
icu_calendar2.1.1observed
icu_calendar_data2.1.1observed
icu_capi2.1.2observed
icu_casemap2.1.1observed
icu_casemap_data2.1.1observed
icu_collator2.1.2observed
icu_collator_data2.1.1observed
icu_collections2.1.1observed
icu_datetime2.1.1observed
icu_datetime_data2.1.2observed
icu_decimal2.1.1observed
icu_decimal_data2.1.1observed
icu_experimental0.4.0observed
icu_experimental_data0.4.1observed
icu_list2.1.1observed
icu_list_data2.1.1observed
icu_locale2.1.1observed
icu_locale_core2.3.0observed
icu_locale_data2.1.2observed
icu_normalizer2.1.1observed
icu_normalizer_data2.1.1observed
icu_pattern0.4.2observed
icu_plurals2.1.1observed
icu_plurals_data2.1.1observed
icu_properties2.1.2observed
icu_properties_data2.1.2observed
icu_provider2.3.1observed
icu_provider_adapters2.1.1observed
icu_segmenter2.1.2observed
icu_segmenter_data2.1.1observed
icu_time2.1.1observed
icu_time_data2.1.1observed
indexmap2.14.2observed
is_terminal_polyfill1.70.2observed
itertools0.10.5observed
itertools0.13.0observed
itoa1.0.18observed
ixdtf0.6.6observed
js-sys0.3.106observed
ld-linux-x86-64.so.2linked
libc direct0.2.190observed
libc.so.6linked
libgcc_s.so.1linked
libloading0.8.9observed
libm0.2.16observed
libm.so.6linked
libmvec.so.1linked
libz-sys1.1.29observed
linux-raw-sys0.12.1observed
litemap0.8.3observed
log direct0.4.34observed
memchr2.8.3observed
minimal-lexical0.2.1observed
miniz_oxide0.9.1observed
mozjs_collator_glue153.4.0observed
mozjs_icu_collator153.4.0observed
mozjs_icu_collator_data153.4.0observed
mozjs_icu_collections153.4.0observed
mozjs_icu_normalizer153.4.0observed
mozjs_icu_normalizer_data153.4.0observed
mozjs_locale_glue153.4.0observed static.crates.io
mozjs_normalizer_glue153.4.0observed
mozjs_properties_glue153.4.0observed static.crates.io
mozjs_sys direct153.4.0-0observed github.com, release-assets.githubusercontent.com, curl
mozjs_unicode_bidi_ffi153.4.0observed static.crates.io
mozjs_utf16_iter153.4.0observed
mozjs_utf8_iter153.4.0observed
multiversion0.9.0observed
multiversion-macros0.9.0observed
multiversion_no_op1.0.0observed
nom7.1.3observed
num-bigint0.4.8observed
num-integer0.1.47observed
num-rational0.4.2observed
num-traits direct0.2.19observed
once_cell1.21.4observed
once_cell_polyfill1.70.2observed
oorandom11.1.5observed
pin-project-lite0.2.17observed
pkg-config0.3.34observed
plotters0.3.7observed
plotters-backend0.3.7observed
plotters-svg0.3.7observed
potential_utf0.1.6observed
proc-macro21.0.107observed
quote1.0.47observed
r-efi6.0.0observed
rayon1.12.0observed
rayon-core1.13.0observed
regex1.13.1observed
regex-automata0.4.18observed
regex-syntax0.8.11observed
rustc-hash2.1.3observed
rustix1.1.5observed
rustversion1.0.23observed
same-file1.0.6observed
scopeguard1.2.0observed
serde1.0.229observed
serde_core1.0.229observed
serde_derive1.0.229observed
serde_json1.0.151observed
serde_spanned1.1.1observed
shlex1.3.0observed
shlex2.0.1observed
simd-adler320.3.10observed
simdutf80.1.5observed
slab0.4.12observed
smallvec1.16.2observed
stable_deref_trait1.2.1observed
strck1.0.0observed
strsim0.11.1observed
syn2.0.119observed
syn3.0.6observed
synstructure0.14.0observed
tar0.4.46observed
tempfile3.27.0observed
tinystr0.8.4observed
tinytemplate1.2.1observed
toml0.9.12+spec-1.1.0observed
toml_datetime0.7.5+spec-1.1.0observed
toml_parser1.1.3+spec-1.1.0observed
toml_writer1.1.2+spec-1.1.0observed
typenum1.20.1observed
unicode-bidi0.3.18observed
unicode-ident1.0.26observed
utf16_iter1.0.5observed
utf8_iter1.0.4observed
utf8parse0.2.2observed
vcpkg0.2.15observed
walkdir2.5.0observed
wasm-bindgen0.2.129observed
wasm-bindgen-macro0.2.129observed
wasm-bindgen-macro-support0.2.129observed
wasm-bindgen-shared0.2.129observed
web-sys0.3.106observed
winapi-util0.1.11observed
windows-link0.2.1observed
windows-sys0.61.2observed
winnow0.7.15observed
winnow1.0.4observed
write161.0.0observed
writeable0.6.4observed
xattr1.6.1observed
yoke0.8.3observed
yoke-derive0.8.4observed
zerocopy0.8.61observed
zerocopy-derive0.8.61observed
zerofrom0.1.8observed
zerofrom-derive0.1.8observed
zerotrie0.2.5observed
zerovec0.11.8observed
zerovec-derive0.11.6observed
zlib-rs0.6.8observed
zmij1.0.23observed

1 of 1 jobs captured: build-test success · Generated 2026-10-07 · tarp 0.1.0+20261007022833-g16cc1581f632 · run 7a6ee547-a89b-488a-b372-1251fb43dc83