Artifact
- libndm.rlibfile · retained · product
- ndmbinary · retained · product 1
| Checks | Detections |
|---|---|
| Build behavior | |
| ✓ Network activity | — |
| ✓ Sensitive data access and transfer | — |
| ✓ Cross-process access | — |
| ✓ Build file changes | — |
| ✓ Build script activity | — |
| ✓ Data flow analysis | — |
| ✓ Filesystem writes | — |
| ✓ Context collection | — |
| Supply chain | |
| ▲ Known vulnerabilities | — |
| ✓ Build-time dependency advisories | — |
| ✓ Dependency advisories | — |
| ✓ Declared and observed dependencies | — |
| ✓ Dependency and toolchain versions | — |
| Pipeline | |
| ✓ Pipeline coverage | — |
Detections
0No detections
No abnormal activity detected across 10K flows.
Network
0 peerscargo fetched 1,520 files from static.crates.io
| Vulnerable dependencies1 | Package | Version | Fix | Severity | Title | Reach |
|---|---|---|---|---|---|---|
| GHSA-cq8v-f236-94qc | rand | 0.9.2 | >=0.9.3 | low | Rand is unsound with a custom logger using rand::rng() | retained |
Dependencies
30 packages, 5 with a build script that ran, 1 doing more than compiling| Package | Version | Usage | Build behaviour | |
|---|---|---|---|---|
| wit-bindgen | 0.51.0 | platform_gated | build script, not runprebuilt objects | |
| getrandom | 0.3.4 | linked | build script | |
| ld-linux-x86-64.so.2 | linked | system library | ||
| libc | 0.2.180 | linked | build script | |
| libc.so.6 | linked | system library | ||
| libgcc_s.so.1 | linked | system library | ||
| libm.so.6 | linked | system library | ||
| libmvec.so.1 | linked | system library | ||
| proc-macro2 | 1.0.78 | linked | build script | |
| serde direct | 1.0.197 | linked | build script | |
| serde_derive | 1.0.197 | linked | proc macro | |
| aho-corasick | 1.1.2 | linked | ||
| cfg-if | 1.0.0 | linked | ||
| lazy_static direct | 1.4.0 | linked | ||
| memchr | 2.7.1 | linked | ||
| ppv-lite86 | 0.2.17 | linked | ||
| quote | 1.0.35 | linked | ||
| r-efi | 5.3.0 | platform_gated | ||
| rand direct | 0.9.2 | linked | ||
| rand_chacha | 0.9.0 | linked | ||
| rand_core | 0.9.5 | linked | ||
| regex direct | 1.10.3 | linked | ||
| regex-automata | 0.4.6 | linked | ||
| regex-syntax | 0.8.2 | linked | ||
| syn | 2.0.52 | linked | ||
| unicode-ident | 1.0.12 | linked | ||
| wasip2 | 1.0.2+wasi-0.2.9 | platform_gated | ||
| serde_json direct | 1.0.114 | dead | build script | |
| itoa | 1.0.10 | dead | ||
| ryu | 1.0.17 | dead |
1 of 1 jobs captured: build-test success · Generated 2026-10-12 · run e73f0822-d552-4d70-939c-89edfc7310f7
analysis 0.1.0 · 2026-10-11 · d6246d3 · graph v2