Skip to content
Open-Source Registry

cargo / nora-registry / 1.3.6

nora-registry 1.3.6

bitbison: flagged, behavior flagged, dependencies flagged, posture not checked, pipeline clean, 1 of 1 jobs captured RiskhighVulnshigh
processes
740
operations
103K
packages
467
compiler runs
768
connections
3
job time
10m 15s
capture
1.4 MB
records
187K
bytes / record
7.6

Build behaviourundeclared fetchfetch went into the outputlinked a downloaded binaryfetched outside crates.iocompiled C/C++

run 083dadf5-72b9-4716-a02c-36c05412eb45 · built 2026-10-16 · complete View on crates.io

Graph

egress · high · in nora
21

Checks

11 of 14 clear Network activity Data flow analysis +1 more
Build behavior▲✓✓✓✓▲✓✓
Supply chain▲✓✓✓✓
Pipeline✓

Detections

19
  • Build script fetched what the build compiled, linked or ran
    utoipa-swagger-ui 9.0.2 › github.com:443, codeload.github.com:443
    high
  • Downloaded file compiled into the artifact
    favicon-16x16.png › github.com, codeload.github.com
    high
  • Downloaded file compiled into the artifact
    favicon-32x32.png › github.com, codeload.github.com
    high
  • Downloaded file compiled into the artifact
    index.css › github.com, codeload.github.com
    high
  • Downloaded file compiled into the artifact
    index.html › github.com, codeload.github.com
    high
  • Downloaded file compiled into the artifact
    oauth2-redirect.html › github.com, codeload.github.com
    high
  • Downloaded file compiled into the artifact
    swagger-initializer.js › github.com, codeload.github.com
    high
  • Downloaded file compiled into the artifact
    swagger-ui-bundle.js › github.com, codeload.github.com
    high
  • Downloaded file compiled into the artifact
    swagger-ui-bundle.js.map › github.com, codeload.github.com
    high
  • Downloaded file compiled into the artifact
    swagger-ui-es-bundle-core.js › github.com, codeload.github.com
    high
  • Downloaded file compiled into the artifact
    swagger-ui-es-bundle-core.js.map › github.com, codeload.github.com
    high
  • Downloaded file compiled into the artifact
    swagger-ui-es-bundle.js › github.com, codeload.github.com
    high
  • Downloaded file compiled into the artifact
    swagger-ui-es-bundle.js.map › github.com, codeload.github.com
    high
  • Downloaded file compiled into the artifact
    swagger-ui-standalone-preset.js › github.com, codeload.github.com
    high
  • Downloaded file compiled into the artifact
    swagger-ui-standalone-preset.js.map › github.com, codeload.github.com
    high
  • Downloaded file compiled into the artifact
    swagger-ui.css › github.com, codeload.github.com
    high
  • Downloaded file compiled into the artifact
    swagger-ui.css.map › github.com, codeload.github.com
    high
  • Downloaded file compiled into the artifact
    swagger-ui.js › github.com, codeload.github.com
    high
  • Downloaded file compiled into the artifact
    swagger-ui.js.map › github.com, codeload.github.com
    high

Detection

highwitnessed

Build script fetched what the build compiled, linked or ran

Unexpected network connection

Subject
utoipa-swagger-ui 9.0.2
Destination
github.com:443, codeload.github.com:443
Reaches
Jobs
build-test
Rule
egress · nora

Evidence

  1. Connection outside the process’s allowed destinationscause

    connection to github.com:443, opened by build-script-build

    subject github.com:443

    by /home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-9807678436e01ff9/build-script-build

  2. Connection outside the process’s allowed destinationscause

    connection to codeload.github.com:443, opened by build-script-build

    subject codeload.github.com:443

    by /home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-9807678436e01ff9/build-script-build

  3. What a build script's fetch becamesupport

    20 files came down; the build compiled or linked favicon-16x16.png, favicon-32x32.png, index.css +16 more

  4. Connection opened by a build script or child processsupport

    the opener is the build script at /home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-9807678436e01ff9/build-script-build

In nora

Loading the graph

Processes

build-test

cargo›cargo›build-script-build

Ran
/home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-9807678436e01ff9/build-script-build
Invoked by
cargo build --release --locked --message-format=json-render-diagnostics
Lineage · 3 processes
  1. cargocargo build --release --locked --message-format=json-render-diagnostics2447
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo build --release --locked --message-format=json-render-diagnostics2447
  3. build-script-build/home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-9807678436e01ff9/build-script-build8354

Remediation

A dependency's build downloaded files the build then compiled, linked or ran, outside anything the registry checksums. Review what came down, pin or replace the dependency, or record the download as accepted once it is reviewed.

Detection

highwitnessed

Downloaded file compiled into the artifact

Object file origin needs review

Subject
/home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-1840a33ec48c9de3/out/swagger-ui-5.17.14/dist/favicon-16x16.pngwritten by build-script-build
Destination
github.com, codeload.github.com
Jobs
build-test
Rule
object-provenance · nora

Witness chain

  1. /home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-1840a33ec48c9de3/out/swagger-ui-5.17.14/dist/favicon-16x16.pngvia /home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-9807678436e01ff9/build-script-build
    • Object written under a build script that downloadedfrom github.com · codeload.github.com

      written under the build script at /home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-9807678436e01ff9/build-script-build, which downloaded from github.com, codeload.github.com

    • Obfuscated toolchain bypass

      Written by build-script-build from a network connection without a recorded source compilation

    source
  2. member
    artifact

Evidence

  • written under the build script at /home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-9807678436e01ff9/build-script-build, which downloaded from github.com, codeload.github.com
  • Written by build-script-build from a network connection without a recorded source compilation

In nora

Loading the graph

Processes

build-test

cargo›cargo›build-script-build

Ran
/home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-9807678436e01ff9/build-script-build
Invoked by
cargo build --release --locked --message-format=json-render-diagnostics
Lineage · 3 processes
  1. cargocargo build --release --locked --message-format=json-render-diagnostics2447
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo build --release --locked --message-format=json-render-diagnostics2447
  3. build-script-build/home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-9807678436e01ff9/build-script-build8354

Remediation

Inspect the writer and input chain. Confirm the object comes from a reviewed build step or declared prebuilt dependency. If its origin cannot be verified, replace it and rebuild.

Detection

highwitnessed

Downloaded file compiled into the artifact

Object file origin needs review

Subject
/home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-1840a33ec48c9de3/out/swagger-ui-5.17.14/dist/favicon-32x32.pngwritten by build-script-build
Destination
github.com, codeload.github.com
Jobs
build-test
Rule
object-provenance · nora

Witness chain

  1. /home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-1840a33ec48c9de3/out/swagger-ui-5.17.14/dist/favicon-32x32.pngvia /home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-9807678436e01ff9/build-script-build
    • Object written under a build script that downloadedfrom github.com · codeload.github.com

      written under the build script at /home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-9807678436e01ff9/build-script-build, which downloaded from github.com, codeload.github.com

    • Obfuscated toolchain bypass

      Written by build-script-build from a network connection without a recorded source compilation

    source
  2. member
    artifact

Evidence

  • written under the build script at /home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-9807678436e01ff9/build-script-build, which downloaded from github.com, codeload.github.com
  • Written by build-script-build from a network connection without a recorded source compilation

In nora

Loading the graph

Processes

build-test

cargo›cargo›build-script-build

Ran
/home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-9807678436e01ff9/build-script-build
Invoked by
cargo build --release --locked --message-format=json-render-diagnostics
Lineage · 3 processes
  1. cargocargo build --release --locked --message-format=json-render-diagnostics2447
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo build --release --locked --message-format=json-render-diagnostics2447
  3. build-script-build/home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-9807678436e01ff9/build-script-build8354

Remediation

Inspect the writer and input chain. Confirm the object comes from a reviewed build step or declared prebuilt dependency. If its origin cannot be verified, replace it and rebuild.

Detection

highwitnessed

Downloaded file compiled into the artifact

Object file origin needs review

Subject
/home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-1840a33ec48c9de3/out/swagger-ui-5.17.14/dist/index.csswritten by build-script-build
Destination
github.com, codeload.github.com
Jobs
build-test
Rule
object-provenance · nora

Witness chain

  1. /home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-1840a33ec48c9de3/out/swagger-ui-5.17.14/dist/index.cssvia /home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-9807678436e01ff9/build-script-build
    • Object written under a build script that downloadedfrom github.com · codeload.github.com

      written under the build script at /home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-9807678436e01ff9/build-script-build, which downloaded from github.com, codeload.github.com

    • Obfuscated toolchain bypass

      Written by build-script-build from a network connection without a recorded source compilation

    source
  2. member
    artifact

Evidence

  • written under the build script at /home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-9807678436e01ff9/build-script-build, which downloaded from github.com, codeload.github.com
  • Written by build-script-build from a network connection without a recorded source compilation

In nora

Loading the graph

Processes

build-test

cargo›cargo›build-script-build

Ran
/home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-9807678436e01ff9/build-script-build
Invoked by
cargo build --release --locked --message-format=json-render-diagnostics
Lineage · 3 processes
  1. cargocargo build --release --locked --message-format=json-render-diagnostics2447
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo build --release --locked --message-format=json-render-diagnostics2447
  3. build-script-build/home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-9807678436e01ff9/build-script-build8354

Remediation

Inspect the writer and input chain. Confirm the object comes from a reviewed build step or declared prebuilt dependency. If its origin cannot be verified, replace it and rebuild.

Detection

highwitnessed

Downloaded file compiled into the artifact

Object file origin needs review

Subject
/home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-1840a33ec48c9de3/out/swagger-ui-5.17.14/dist/index.htmlwritten by build-script-build
Destination
github.com, codeload.github.com
Jobs
build-test
Rule
object-provenance · nora

Witness chain

  1. /home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-1840a33ec48c9de3/out/swagger-ui-5.17.14/dist/index.htmlvia /home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-9807678436e01ff9/build-script-build
    • Object written under a build script that downloadedfrom github.com · codeload.github.com

      written under the build script at /home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-9807678436e01ff9/build-script-build, which downloaded from github.com, codeload.github.com

    • Obfuscated toolchain bypass

      Written by build-script-build from a network connection without a recorded source compilation

    source
  2. member
    artifact

Evidence

  • written under the build script at /home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-9807678436e01ff9/build-script-build, which downloaded from github.com, codeload.github.com
  • Written by build-script-build from a network connection without a recorded source compilation

In nora

Loading the graph

Processes

build-test

cargo›cargo›build-script-build

Ran
/home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-9807678436e01ff9/build-script-build
Invoked by
cargo build --release --locked --message-format=json-render-diagnostics
Lineage · 3 processes
  1. cargocargo build --release --locked --message-format=json-render-diagnostics2447
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo build --release --locked --message-format=json-render-diagnostics2447
  3. build-script-build/home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-9807678436e01ff9/build-script-build8354

Remediation

Inspect the writer and input chain. Confirm the object comes from a reviewed build step or declared prebuilt dependency. If its origin cannot be verified, replace it and rebuild.

Detection

highwitnessed

Downloaded file compiled into the artifact

Object file origin needs review

Subject
/home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-1840a33ec48c9de3/out/swagger-ui-5.17.14/dist/oauth2-redirect.htmlwritten by build-script-build
Destination
github.com, codeload.github.com
Jobs
build-test
Rule
object-provenance · nora

Witness chain

  1. /home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-1840a33ec48c9de3/out/swagger-ui-5.17.14/dist/oauth2-redirect.htmlvia /home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-9807678436e01ff9/build-script-build
    • Object written under a build script that downloadedfrom github.com · codeload.github.com

      written under the build script at /home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-9807678436e01ff9/build-script-build, which downloaded from github.com, codeload.github.com

    • Obfuscated toolchain bypass

      Written by build-script-build from a network connection without a recorded source compilation

    source
  2. member
    artifact

Evidence

  • written under the build script at /home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-9807678436e01ff9/build-script-build, which downloaded from github.com, codeload.github.com
  • Written by build-script-build from a network connection without a recorded source compilation

In nora

Loading the graph

Processes

build-test

cargo›cargo›build-script-build

Ran
/home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-9807678436e01ff9/build-script-build
Invoked by
cargo build --release --locked --message-format=json-render-diagnostics
Lineage · 3 processes
  1. cargocargo build --release --locked --message-format=json-render-diagnostics2447
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo build --release --locked --message-format=json-render-diagnostics2447
  3. build-script-build/home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-9807678436e01ff9/build-script-build8354

Remediation

Inspect the writer and input chain. Confirm the object comes from a reviewed build step or declared prebuilt dependency. If its origin cannot be verified, replace it and rebuild.

Detection

highwitnessed

Downloaded file compiled into the artifact

Object file origin needs review

Subject
/home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-1840a33ec48c9de3/out/swagger-ui-5.17.14/dist/swagger-initializer.jswritten by build-script-build
Destination
github.com, codeload.github.com
Jobs
build-test
Rule
object-provenance · nora

Witness chain

  1. /home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-1840a33ec48c9de3/out/swagger-ui-5.17.14/dist/swagger-initializer.jsvia /home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-9807678436e01ff9/build-script-build
    • Object written under a build script that downloadedfrom github.com · codeload.github.com

      written under the build script at /home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-9807678436e01ff9/build-script-build, which downloaded from github.com, codeload.github.com

    • Obfuscated toolchain bypass

      Written by build-script-build from a network connection without a recorded source compilation

    source
  2. member
    artifact

Evidence

  • written under the build script at /home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-9807678436e01ff9/build-script-build, which downloaded from github.com, codeload.github.com
  • Written by build-script-build from a network connection without a recorded source compilation

In nora

Loading the graph

Processes

build-test

cargo›cargo›build-script-build

Ran
/home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-9807678436e01ff9/build-script-build
Invoked by
cargo build --release --locked --message-format=json-render-diagnostics
Lineage · 3 processes
  1. cargocargo build --release --locked --message-format=json-render-diagnostics2447
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo build --release --locked --message-format=json-render-diagnostics2447
  3. build-script-build/home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-9807678436e01ff9/build-script-build8354

Remediation

Inspect the writer and input chain. Confirm the object comes from a reviewed build step or declared prebuilt dependency. If its origin cannot be verified, replace it and rebuild.

Detection

highwitnessed

Downloaded file compiled into the artifact

Object file origin needs review

Subject
/home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-1840a33ec48c9de3/out/swagger-ui-5.17.14/dist/swagger-ui-bundle.jswritten by build-script-build
Destination
github.com, codeload.github.com
Jobs
build-test
Rule
object-provenance · nora

Witness chain

  1. /home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-1840a33ec48c9de3/out/swagger-ui-5.17.14/dist/swagger-ui-bundle.jsvia /home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-9807678436e01ff9/build-script-build
    • Object written under a build script that downloadedfrom github.com · codeload.github.com

      written under the build script at /home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-9807678436e01ff9/build-script-build, which downloaded from github.com, codeload.github.com

    • Obfuscated toolchain bypass

      Written by build-script-build from a network connection without a recorded source compilation

    source
  2. member
    artifact

Evidence

  • written under the build script at /home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-9807678436e01ff9/build-script-build, which downloaded from github.com, codeload.github.com
  • Written by build-script-build from a network connection without a recorded source compilation

In nora

Loading the graph

Processes

build-test

cargo›cargo›build-script-build

Ran
/home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-9807678436e01ff9/build-script-build
Invoked by
cargo build --release --locked --message-format=json-render-diagnostics
Lineage · 3 processes
  1. cargocargo build --release --locked --message-format=json-render-diagnostics2447
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo build --release --locked --message-format=json-render-diagnostics2447
  3. build-script-build/home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-9807678436e01ff9/build-script-build8354

Remediation

Inspect the writer and input chain. Confirm the object comes from a reviewed build step or declared prebuilt dependency. If its origin cannot be verified, replace it and rebuild.

Detection

highwitnessed

Downloaded file compiled into the artifact

Object file origin needs review

Subject
/home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-1840a33ec48c9de3/out/swagger-ui-5.17.14/dist/swagger-ui-bundle.js.mapwritten by build-script-build
Destination
github.com, codeload.github.com
Jobs
build-test
Rule
object-provenance · nora

Witness chain

  1. /home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-1840a33ec48c9de3/out/swagger-ui-5.17.14/dist/swagger-ui-bundle.js.mapvia /home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-9807678436e01ff9/build-script-build
    • Object written under a build script that downloadedfrom github.com · codeload.github.com

      written under the build script at /home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-9807678436e01ff9/build-script-build, which downloaded from github.com, codeload.github.com

    • Obfuscated toolchain bypass

      Written by build-script-build from a network connection without a recorded source compilation

    source
  2. member
    artifact

Evidence

  • written under the build script at /home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-9807678436e01ff9/build-script-build, which downloaded from github.com, codeload.github.com
  • Written by build-script-build from a network connection without a recorded source compilation

In nora

Loading the graph

Processes

build-test

cargo›cargo›build-script-build

Ran
/home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-9807678436e01ff9/build-script-build
Invoked by
cargo build --release --locked --message-format=json-render-diagnostics
Lineage · 3 processes
  1. cargocargo build --release --locked --message-format=json-render-diagnostics2447
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo build --release --locked --message-format=json-render-diagnostics2447
  3. build-script-build/home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-9807678436e01ff9/build-script-build8354

Remediation

Inspect the writer and input chain. Confirm the object comes from a reviewed build step or declared prebuilt dependency. If its origin cannot be verified, replace it and rebuild.

Detection

highwitnessed

Downloaded file compiled into the artifact

Object file origin needs review

Subject
/home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-1840a33ec48c9de3/out/swagger-ui-5.17.14/dist/swagger-ui-es-bundle-core.jswritten by build-script-build
Destination
github.com, codeload.github.com
Jobs
build-test
Rule
object-provenance · nora

Witness chain

  1. /home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-1840a33ec48c9de3/out/swagger-ui-5.17.14/dist/swagger-ui-es-bundle-core.jsvia /home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-9807678436e01ff9/build-script-build
    • Object written under a build script that downloadedfrom github.com · codeload.github.com

      written under the build script at /home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-9807678436e01ff9/build-script-build, which downloaded from github.com, codeload.github.com

    • Obfuscated toolchain bypass

      Written by build-script-build from a network connection without a recorded source compilation

    source
  2. member
    artifact

Evidence

  • written under the build script at /home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-9807678436e01ff9/build-script-build, which downloaded from github.com, codeload.github.com
  • Written by build-script-build from a network connection without a recorded source compilation

In nora

Loading the graph

Processes

build-test

cargo›cargo›build-script-build

Ran
/home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-9807678436e01ff9/build-script-build
Invoked by
cargo build --release --locked --message-format=json-render-diagnostics
Lineage · 3 processes
  1. cargocargo build --release --locked --message-format=json-render-diagnostics2447
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo build --release --locked --message-format=json-render-diagnostics2447
  3. build-script-build/home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-9807678436e01ff9/build-script-build8354

Remediation

Inspect the writer and input chain. Confirm the object comes from a reviewed build step or declared prebuilt dependency. If its origin cannot be verified, replace it and rebuild.

Detection

highwitnessed

Downloaded file compiled into the artifact

Object file origin needs review

Subject
/home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-1840a33ec48c9de3/out/swagger-ui-5.17.14/dist/swagger-ui-es-bundle-core.js.mapwritten by build-script-build
Destination
github.com, codeload.github.com
Jobs
build-test
Rule
object-provenance · nora

Witness chain

  1. /home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-1840a33ec48c9de3/out/swagger-ui-5.17.14/dist/swagger-ui-es-bundle-core.js.mapvia /home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-9807678436e01ff9/build-script-build
    • Object written under a build script that downloadedfrom github.com · codeload.github.com

      written under the build script at /home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-9807678436e01ff9/build-script-build, which downloaded from github.com, codeload.github.com

    • Obfuscated toolchain bypass

      Written by build-script-build from a network connection without a recorded source compilation

    source
  2. member
    artifact

Evidence

  • written under the build script at /home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-9807678436e01ff9/build-script-build, which downloaded from github.com, codeload.github.com
  • Written by build-script-build from a network connection without a recorded source compilation

In nora

Loading the graph

Processes

build-test

cargo›cargo›build-script-build

Ran
/home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-9807678436e01ff9/build-script-build
Invoked by
cargo build --release --locked --message-format=json-render-diagnostics
Lineage · 3 processes
  1. cargocargo build --release --locked --message-format=json-render-diagnostics2447
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo build --release --locked --message-format=json-render-diagnostics2447
  3. build-script-build/home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-9807678436e01ff9/build-script-build8354

Remediation

Inspect the writer and input chain. Confirm the object comes from a reviewed build step or declared prebuilt dependency. If its origin cannot be verified, replace it and rebuild.

Detection

highwitnessed

Downloaded file compiled into the artifact

Object file origin needs review

Subject
/home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-1840a33ec48c9de3/out/swagger-ui-5.17.14/dist/swagger-ui-es-bundle.jswritten by build-script-build
Destination
github.com, codeload.github.com
Jobs
build-test
Rule
object-provenance · nora

Witness chain

  1. /home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-1840a33ec48c9de3/out/swagger-ui-5.17.14/dist/swagger-ui-es-bundle.jsvia /home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-9807678436e01ff9/build-script-build
    • Object written under a build script that downloadedfrom github.com · codeload.github.com

      written under the build script at /home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-9807678436e01ff9/build-script-build, which downloaded from github.com, codeload.github.com

    • Obfuscated toolchain bypass

      Written by build-script-build from a network connection without a recorded source compilation

    source
  2. member
    artifact

Evidence

  • written under the build script at /home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-9807678436e01ff9/build-script-build, which downloaded from github.com, codeload.github.com
  • Written by build-script-build from a network connection without a recorded source compilation

In nora

Loading the graph

Processes

build-test

cargo›cargo›build-script-build

Ran
/home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-9807678436e01ff9/build-script-build
Invoked by
cargo build --release --locked --message-format=json-render-diagnostics
Lineage · 3 processes
  1. cargocargo build --release --locked --message-format=json-render-diagnostics2447
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo build --release --locked --message-format=json-render-diagnostics2447
  3. build-script-build/home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-9807678436e01ff9/build-script-build8354

Remediation

Inspect the writer and input chain. Confirm the object comes from a reviewed build step or declared prebuilt dependency. If its origin cannot be verified, replace it and rebuild.

Detection

highwitnessed

Downloaded file compiled into the artifact

Object file origin needs review

Subject
/home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-1840a33ec48c9de3/out/swagger-ui-5.17.14/dist/swagger-ui-es-bundle.js.mapwritten by build-script-build
Destination
github.com, codeload.github.com
Jobs
build-test
Rule
object-provenance · nora

Witness chain

  1. /home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-1840a33ec48c9de3/out/swagger-ui-5.17.14/dist/swagger-ui-es-bundle.js.mapvia /home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-9807678436e01ff9/build-script-build
    • Object written under a build script that downloadedfrom github.com · codeload.github.com

      written under the build script at /home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-9807678436e01ff9/build-script-build, which downloaded from github.com, codeload.github.com

    • Obfuscated toolchain bypass

      Written by build-script-build from a network connection without a recorded source compilation

    source
  2. member
    artifact

Evidence

  • written under the build script at /home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-9807678436e01ff9/build-script-build, which downloaded from github.com, codeload.github.com
  • Written by build-script-build from a network connection without a recorded source compilation

In nora

Loading the graph

Processes

build-test

cargo›cargo›build-script-build

Ran
/home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-9807678436e01ff9/build-script-build
Invoked by
cargo build --release --locked --message-format=json-render-diagnostics
Lineage · 3 processes
  1. cargocargo build --release --locked --message-format=json-render-diagnostics2447
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo build --release --locked --message-format=json-render-diagnostics2447
  3. build-script-build/home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-9807678436e01ff9/build-script-build8354

Remediation

Inspect the writer and input chain. Confirm the object comes from a reviewed build step or declared prebuilt dependency. If its origin cannot be verified, replace it and rebuild.

Detection

highwitnessed

Downloaded file compiled into the artifact

Object file origin needs review

Subject
/home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-1840a33ec48c9de3/out/swagger-ui-5.17.14/dist/swagger-ui-standalone-preset.jswritten by build-script-build
Destination
github.com, codeload.github.com
Jobs
build-test
Rule
object-provenance · nora

Witness chain

  1. /home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-1840a33ec48c9de3/out/swagger-ui-5.17.14/dist/swagger-ui-standalone-preset.jsvia /home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-9807678436e01ff9/build-script-build
    • Object written under a build script that downloadedfrom github.com · codeload.github.com

      written under the build script at /home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-9807678436e01ff9/build-script-build, which downloaded from github.com, codeload.github.com

    • Obfuscated toolchain bypass

      Written by build-script-build from a network connection without a recorded source compilation

    source
  2. member
    artifact

Evidence

  • written under the build script at /home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-9807678436e01ff9/build-script-build, which downloaded from github.com, codeload.github.com
  • Written by build-script-build from a network connection without a recorded source compilation

In nora

Loading the graph

Processes

build-test

cargo›cargo›build-script-build

Ran
/home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-9807678436e01ff9/build-script-build
Invoked by
cargo build --release --locked --message-format=json-render-diagnostics
Lineage · 3 processes
  1. cargocargo build --release --locked --message-format=json-render-diagnostics2447
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo build --release --locked --message-format=json-render-diagnostics2447
  3. build-script-build/home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-9807678436e01ff9/build-script-build8354

Remediation

Inspect the writer and input chain. Confirm the object comes from a reviewed build step or declared prebuilt dependency. If its origin cannot be verified, replace it and rebuild.

Detection

highwitnessed

Downloaded file compiled into the artifact

Object file origin needs review

Subject
/home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-1840a33ec48c9de3/out/swagger-ui-5.17.14/dist/swagger-ui-standalone-preset.js.mapwritten by build-script-build
Destination
github.com, codeload.github.com
Jobs
build-test
Rule
object-provenance · nora

Witness chain

  1. /home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-1840a33ec48c9de3/out/swagger-ui-5.17.14/dist/swagger-ui-standalone-preset.js.mapvia /home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-9807678436e01ff9/build-script-build
    • Object written under a build script that downloadedfrom github.com · codeload.github.com

      written under the build script at /home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-9807678436e01ff9/build-script-build, which downloaded from github.com, codeload.github.com

    • Obfuscated toolchain bypass

      Written by build-script-build from a network connection without a recorded source compilation

    source
  2. member
    artifact

Evidence

  • written under the build script at /home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-9807678436e01ff9/build-script-build, which downloaded from github.com, codeload.github.com
  • Written by build-script-build from a network connection without a recorded source compilation

In nora

Loading the graph

Processes

build-test

cargo›cargo›build-script-build

Ran
/home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-9807678436e01ff9/build-script-build
Invoked by
cargo build --release --locked --message-format=json-render-diagnostics
Lineage · 3 processes
  1. cargocargo build --release --locked --message-format=json-render-diagnostics2447
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo build --release --locked --message-format=json-render-diagnostics2447
  3. build-script-build/home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-9807678436e01ff9/build-script-build8354

Remediation

Inspect the writer and input chain. Confirm the object comes from a reviewed build step or declared prebuilt dependency. If its origin cannot be verified, replace it and rebuild.

Detection

highwitnessed

Downloaded file compiled into the artifact

Object file origin needs review

Subject
/home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-1840a33ec48c9de3/out/swagger-ui-5.17.14/dist/swagger-ui.csswritten by build-script-build
Destination
github.com, codeload.github.com
Jobs
build-test
Rule
object-provenance · nora

Witness chain

  1. /home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-1840a33ec48c9de3/out/swagger-ui-5.17.14/dist/swagger-ui.cssvia /home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-9807678436e01ff9/build-script-build
    • Object written under a build script that downloadedfrom github.com · codeload.github.com

      written under the build script at /home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-9807678436e01ff9/build-script-build, which downloaded from github.com, codeload.github.com

    • Obfuscated toolchain bypass

      Written by build-script-build from a network connection without a recorded source compilation

    source
  2. member
    artifact

Evidence

  • written under the build script at /home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-9807678436e01ff9/build-script-build, which downloaded from github.com, codeload.github.com
  • Written by build-script-build from a network connection without a recorded source compilation

In nora

Loading the graph

Processes

build-test

cargo›cargo›build-script-build

Ran
/home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-9807678436e01ff9/build-script-build
Invoked by
cargo build --release --locked --message-format=json-render-diagnostics
Lineage · 3 processes
  1. cargocargo build --release --locked --message-format=json-render-diagnostics2447
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo build --release --locked --message-format=json-render-diagnostics2447
  3. build-script-build/home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-9807678436e01ff9/build-script-build8354

Remediation

Inspect the writer and input chain. Confirm the object comes from a reviewed build step or declared prebuilt dependency. If its origin cannot be verified, replace it and rebuild.

Detection

highwitnessed

Downloaded file compiled into the artifact

Object file origin needs review

Subject
/home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-1840a33ec48c9de3/out/swagger-ui-5.17.14/dist/swagger-ui.css.mapwritten by build-script-build
Destination
github.com, codeload.github.com
Jobs
build-test
Rule
object-provenance · nora

Witness chain

  1. /home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-1840a33ec48c9de3/out/swagger-ui-5.17.14/dist/swagger-ui.css.mapvia /home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-9807678436e01ff9/build-script-build
    • Object written under a build script that downloadedfrom github.com · codeload.github.com

      written under the build script at /home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-9807678436e01ff9/build-script-build, which downloaded from github.com, codeload.github.com

    • Obfuscated toolchain bypass

      Written by build-script-build from a network connection without a recorded source compilation

    source
  2. member
    artifact

Evidence

  • written under the build script at /home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-9807678436e01ff9/build-script-build, which downloaded from github.com, codeload.github.com
  • Written by build-script-build from a network connection without a recorded source compilation

In nora

Loading the graph

Processes

build-test

cargo›cargo›build-script-build

Ran
/home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-9807678436e01ff9/build-script-build
Invoked by
cargo build --release --locked --message-format=json-render-diagnostics
Lineage · 3 processes
  1. cargocargo build --release --locked --message-format=json-render-diagnostics2447
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo build --release --locked --message-format=json-render-diagnostics2447
  3. build-script-build/home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-9807678436e01ff9/build-script-build8354

Remediation

Inspect the writer and input chain. Confirm the object comes from a reviewed build step or declared prebuilt dependency. If its origin cannot be verified, replace it and rebuild.

Detection

highwitnessed

Downloaded file compiled into the artifact

Object file origin needs review

Subject
/home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-1840a33ec48c9de3/out/swagger-ui-5.17.14/dist/swagger-ui.jswritten by build-script-build
Destination
github.com, codeload.github.com
Jobs
build-test
Rule
object-provenance · nora

Witness chain

  1. /home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-1840a33ec48c9de3/out/swagger-ui-5.17.14/dist/swagger-ui.jsvia /home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-9807678436e01ff9/build-script-build
    • Object written under a build script that downloadedfrom github.com · codeload.github.com

      written under the build script at /home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-9807678436e01ff9/build-script-build, which downloaded from github.com, codeload.github.com

    • Obfuscated toolchain bypass

      Written by build-script-build from a network connection without a recorded source compilation

    source
  2. member
    artifact

Evidence

  • written under the build script at /home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-9807678436e01ff9/build-script-build, which downloaded from github.com, codeload.github.com
  • Written by build-script-build from a network connection without a recorded source compilation

In nora

Loading the graph

Processes

build-test

cargo›cargo›build-script-build

Ran
/home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-9807678436e01ff9/build-script-build
Invoked by
cargo build --release --locked --message-format=json-render-diagnostics
Lineage · 3 processes
  1. cargocargo build --release --locked --message-format=json-render-diagnostics2447
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo build --release --locked --message-format=json-render-diagnostics2447
  3. build-script-build/home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-9807678436e01ff9/build-script-build8354

Remediation

Inspect the writer and input chain. Confirm the object comes from a reviewed build step or declared prebuilt dependency. If its origin cannot be verified, replace it and rebuild.

Detection

highwitnessed

Downloaded file compiled into the artifact

Object file origin needs review

Subject
/home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-1840a33ec48c9de3/out/swagger-ui-5.17.14/dist/swagger-ui.js.mapwritten by build-script-build
Destination
github.com, codeload.github.com
Jobs
build-test
Rule
object-provenance · nora

Witness chain

  1. /home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-1840a33ec48c9de3/out/swagger-ui-5.17.14/dist/swagger-ui.js.mapvia /home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-9807678436e01ff9/build-script-build
    • Object written under a build script that downloadedfrom github.com · codeload.github.com

      written under the build script at /home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-9807678436e01ff9/build-script-build, which downloaded from github.com, codeload.github.com

    • Obfuscated toolchain bypass

      Written by build-script-build from a network connection without a recorded source compilation

    source
  2. member
    artifact

Evidence

  • written under the build script at /home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-9807678436e01ff9/build-script-build, which downloaded from github.com, codeload.github.com
  • Written by build-script-build from a network connection without a recorded source compilation

In nora

Loading the graph

Processes

build-test

cargo›cargo›build-script-build

Ran
/home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-9807678436e01ff9/build-script-build
Invoked by
cargo build --release --locked --message-format=json-render-diagnostics
Lineage · 3 processes
  1. cargocargo build --release --locked --message-format=json-render-diagnostics2447
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo build --release --locked --message-format=json-render-diagnostics2447
  3. build-script-build/home/runner/work/nora/nora/target/release/build/utoipa-swagger-ui-9807678436e01ff9/build-script-build8354

Remediation

Inspect the writer and input chain. Confirm the object comes from a reviewed build step or declared prebuilt dependency. If its origin cannot be verified, replace it and rebuild.

Network

3 peers
  • codeload.github.com:443 build code of utoipa-swagger-ui · build-script-build (nora) · GitHub, Inc. · 20 files · went into an output undeclared
  • github.com:443 build code of utoipa-swagger-ui · build-script-build (nora) · GitHub, Inc. · 20 files · went into an output undeclared
  • static.crates.io:8080 the package manager · cargo (nora) via crates.io · 25,299 files · went into an output ecosystem
Vulnerabilities3PackageFixSeverity
RUSTSEC-2026-0194quick-xml 0.39.4>=0.41.0high
RUSTSEC-2026-0195quick-xml 0.39.4>=0.41.0high
CVE-2023-49092rsa 0.9.10none publishedmedium
Dependencies497Build behaviour
aead0.5.2
aes0.8.4
aes-gcm0.10.3
aes-kw0.2.1
anstream1.0.0
anstyle1.0.14
anstyle-parse1.0.0
anstyle-query1.1.5
ar0.9.0
arc-swap1.9.2
argon20.5.3
async-compression0.4.43
atomic-waker1.1.2
axum0.8.9
axum-core0.5.6
base16ct0.2.0
base640.22.1
base640.23.1
base64ct1.8.3
bcrypt0.19.3
bitfields1.0.3
bitflags2.13.1
bitvec1.1.1
blake20.10.6
block-buffer0.10.4
block-buffer0.12.1
block-padding0.3.3
blowfish0.10.0
blowfish0.9.1
buffer-redux1.1.0
byteorder1.5.0
bytes1.12.1
camellia0.1.0
cast50.11.1
cfb-mode0.8.2
cfg-if1.0.4
chacha200.10.2
chrono0.4.45
cipher0.4.4
cipher0.5.2
clap4.6.6
clap_builder4.6.6
clap_lex1.1.0
cmac0.7.2
colorchoice1.0.5
compression-codecs0.4.38
compression-core0.4.32
console0.16.4
const-oid0.10.2
const-oid0.9.6
cpufeatures0.2.17
cpufeatures0.3.1
crc3.4.0
crc-catalog2.5.0
crc240.1.6build script
crossbeam-channel0.5.16
crossbeam-utils0.8.22build script
crypto-bigint0.5.5
crypto-common0.1.7
crypto-common0.2.2
ctr0.9.2
curve25519-dalek4.1.3build script
cx4480.1.1
dashmap6.2.1
dbl0.3.2
der0.7.10
deranged0.5.8
derive_builder0.20.2
derive_more2.1.1
des0.8.1
digest0.10.7
digest0.11.3
dsa0.6.3
eax0.5.0
ecdsa0.16.9
ed255192.2.3
ed25519-dalek2.2.0
either1.18.0
elliptic-curve0.13.8
encoding_rs0.8.35
equivalent1.0.2
errno0.3.14
ff0.13.1
filetime0.2.29
flate21.1.10
fnv1.0.7
form_urlencoded1.2.2
forwarded-header-value0.1.1
funty2.0.0
futures0.3.34
futures-channel0.3.34
futures-core0.3.34
futures-executor0.3.34
futures-io0.3.34
futures-sink0.3.34
futures-task0.3.34
futures-timer3.0.4
futures-util0.3.34
generic-array0.14.7build script
getrandom0.2.17
getrandom0.3.4build script
getrandom0.4.3build script
ghash0.5.1
governor0.10.4
group0.13.0
h20.4.19
hashbrown0.14.5
hashbrown0.17.1
hex0.4.3
hkdf0.12.4
hmac0.12.1
http1.5.0
http-body1.1.0
http-body-util0.1.5
httparse1.10.1build script
httpdate1.0.3
humantime2.4.0
hybrid-array0.4.14
hyper1.11.1
hyper-rustls0.27.9
hyper-timeout0.5.2
hyper-util0.1.20
iana-time-zone0.1.65
icu_collections2.3.0
icu_locale_core2.3.0
icu_normalizer2.3.0
icu_normalizer_data2.3.0build script
icu_properties2.3.0
icu_properties_data2.3.0build script
icu_provider2.3.1
idea0.5.1
idna1.1.0
idna_adapter1.2.2
indexmap2.14.1
indicatif0.18.6
inout0.1.4
inout0.2.2
ipnet2.12.1
is_terminal_polyfill1.70.2
itertools0.14.0
itoa1.0.18
jsonwebtoken10.4.0
k2560.13.4
keccak0.1.6
lazy_static1.5.0
ld-linux-x86-64.so.2system library
libc0.2.189build script
libc.so.6system library
libgcc_s.so.1system library
libm.so.6system library
libmimalloc-sys0.1.49build script
libmvec.so.1system library
linux-raw-sys0.12.1
litemap0.8.3
lock_api0.4.14
log0.4.34
lzma-rs0.3.0
matchers0.2.0
matchit0.8.4
md-50.10.6
md-50.11.0
memchr2.8.3
mimalloc0.1.52
mime0.3.17
mime_guess2.0.5build script
mio1.2.2
multer3.1.0build script
nom8.0.0
nonempty0.7.0
nonzero_ext0.3.0
nu-ansi-term0.50.3
num0.4.3
num-bigint0.4.8
num-bigint-dig0.8.6build script
num-complex0.4.6
num-conv0.2.2
num-integer0.1.47
num-iter0.1.46
num-rational0.4.2
num-traits0.2.19build script
num_enum0.7.6
object_store0.13.2
ocb30.1.0
once_cell1.21.4
opaque-debug0.3.1
openssl-probe0.2.1
p2560.13.2
p3840.13.1
p5210.13.3
parking_lot0.12.5
parking_lot_core0.9.12build script
password-hash0.5.0
pem3.0.6
pem-rfc74680.7.0
percent-encoding2.3.2
pgp0.20.0
pin-project1.1.13
pin-project-lite0.2.17
pkcs10.7.5
pkcs80.10.2
polyval0.6.2
portable-atomic1.15.0build script
potential_utf0.1.6
powerfmt0.2.0
ppv-lite860.2.21
primeorder0.13.6
prometheus0.14.0build script
protobuf3.7.2build script
protobuf-support3.7.2
quanta0.12.6
quick-xml0.39.4
quick-xml0.41.0
radium0.7.0build script
rand0.10.2
rand0.8.8
rand0.9.5
rand_chacha0.3.1
rand_chacha0.9.0
rand_core0.10.1
rand_core0.6.4
rand_core0.9.5
raw-cpuid11.6.0
regex-automata0.4.18
regex-syntax0.8.11
replace_with0.1.8
reqwest0.12.28
rfc69790.4.0
ring0.17.14build scriptprebuilt objects
ripemd0.1.3
rpm0.25.1
rpm-version0.5.1
rsa0.9.10
rust-embed8.12.0
rust-embed-utils8.12.0
rustix1.1.4build script
rustls0.23.46build script
rustls-native-certs0.8.4
rustls-pki-types1.15.1
rustls-webpki0.103.15
ruzstd0.9.1
ryu1.0.23
same-file1.0.6
scopeguard1.2.0
sec10.7.3
serde1.0.229build script
serde_core1.0.229build script
serde_ignored0.1.14
serde_json1.0.151build script
serde_path_to_error0.1.20
serde_spanned1.1.1
serde_urlencoded0.7.1
serdect0.2.0
sha10.10.7
sha10.11.0
sha1-checked0.10.0
sha20.10.9
sha20.11.0
sha30.10.9
sharded-slab0.1.7
signal-hook-registry1.4.8
signature2.2.0
simple_asn10.6.4
slab0.4.12
smallvec1.15.2
snafu0.9.2
socket20.6.5
spin0.9.9
spki0.7.3
stable_deref_trait1.2.1
strsim0.11.1
subtle2.6.1
symlink0.1.0
sync_wrapper1.0.2
tap1.0.1
tar0.4.46
thiserror1.0.69build script
thiserror2.0.20build script
thread_local1.1.10
time0.3.55
time-core0.1.9
tinystr0.8.4
tokio1.53.1
tokio-rustls0.26.4
tokio-stream0.1.19
tokio-util0.7.19
toml1.1.4+spec-1.1.0
toml_datetime1.1.1+spec-1.1.0
toml_parser1.1.3+spec-1.1.0
toml_writer1.1.2+spec-1.1.0
tonic0.14.6
tower0.5.3
tower-http0.6.11
tower-layer0.3.3
tower-service0.3.3
tower_governor0.8.0
tracing0.1.44
tracing-appender0.2.5
tracing-core0.1.36
tracing-log0.2.0
tracing-serde0.2.0
tracing-subscriber0.3.23
try-lock0.2.5
twofish0.7.1
twox-hash2.1.4
typenum1.20.1
unicase2.9.0
unicode-width0.2.2
unit-prefix0.5.2
universal-hash0.5.1
untrusted0.9.0
url2.5.8
utf8_iter1.0.4
utf8parse0.2.2
utoipa5.5.0
utoipa-swagger-ui9.0.2build scriptnetworkcodeload.github.com, github.com
uuid1.26.0
walkdir2.5.0
want0.3.1
web-time1.1.0
webpki-roots1.0.9
winnow1.0.4
writeable0.6.4
wyz0.5.1
x25519-dalek2.0.1
xattr1.6.1
yoke0.8.3
zerocopy0.8.56build script
zerofrom0.1.8
zeroize1.9.0
zerotrie0.2.5
zerovec0.11.8
zlib-rs0.6.7
zmij1.0.23build script
adler22.0.1
aho-corasick1.1.5
allocator-api20.2.21
crc32fast1.5.1build script
foldhash0.2.0
hashbrown0.16.1
libm0.2.16build script
miniz_oxide0.9.1
serdect0.3.0
simd-adler320.3.10
spinning_top0.3.0
unicode-ident1.0.24
alloca0.4.0build script
android_system_properties0.1.6
anes0.1.6
anstyle-wincon3.0.11
arbitrary1.4.2
assert-json-diff2.0.2
async-trait0.1.92proc macro
autocfg1.5.1
bit-set0.8.0
bit-vec0.8.0
bitfields-impl1.0.3proc macro
bumpalo3.20.3
cast0.3.0
cc1.4.4
cfg_aliases0.2.2
ciborium0.2.2
ciborium-io0.2.2
ciborium-ll0.2.2
clap_derive4.6.4proc macro
convert_case0.10.0
core-foundation0.10.1
core-foundation-sys0.8.7
criterion0.8.2
criterion-plot0.8.2
crossbeam-deque0.8.7build script
crossbeam-epoch0.9.20build script
crunchy0.2.4build script, not run
curve25519-dalek-derive0.1.1proc macro
darling0.20.11
darling_core0.20.11
darling_macro0.20.11proc macro
deadpool0.12.3
deadpool-runtime0.1.4
derive_arbitrary1.4.2proc macro
derive_builder_core0.20.2
derive_builder_macro0.20.2proc macro
derive_more-impl2.1.1proc macro
displaydoc0.2.7proc macro
encode_unicode1.0.0
enum-display-derive0.1.1proc macro
enum-primitive-derive0.3.0proc macro
fastrand2.5.0
fiat-crypto0.2.9
find-msvc-tools0.1.11
futures-macro0.3.34proc macro
half2.7.1
heck0.5.0
hermit-abi0.5.2
iana-time-zone-haiku0.1.2build script, not run
ident_case1.0.1
insta1.48.0
itertools0.13.0
js-sys0.3.104
lru-slab0.1.2
NuGet.Versioning6.14.0
num-derive0.4.2proc macro
num_cpus1.17.0
num_enum_derive0.7.6proc macro
once_cell_polyfill1.70.2
oorandom11.1.5
page_size0.6.0
pin-project-internal1.1.13proc macro
plotters0.3.7
plotters-backend0.3.7
plotters-svg0.3.7
proc-macro21.0.107build script
proptest1.11.0
quick-error1.2.3
quinn0.11.11build script, not run
quinn-proto0.11.19
quinn-udp0.5.15build script, not run
quote1.0.47build script
r-efi5.3.0
r-efi6.0.0
rand_pcg0.10.2
rand_xorshift0.4.0
rayon1.12.0
rayon-core1.13.0build script
redox_syscall0.5.18
regex1.13.1
rust-embed-impl8.12.0proc macro
rustc-hash2.1.3
rustc_version0.4.1
rustversion1.0.23build scriptproc macro
rusty-fork0.3.1
schannel0.1.29
security-framework3.7.0
security-framework-sys2.17.0
semver1.0.28
serde_derive1.0.229proc macro
shlex2.0.1
similar2.7.0
snafu-derive0.9.2proc macro
syn1.0.109build script
syn2.0.119
syn3.0.4
synstructure0.13.2
tempfile3.27.0
thiserror-impl1.0.69proc macro
thiserror-impl2.0.20proc macro
time-macros0.2.32proc macro
tinytemplate1.2.1
tinyvec1.12.0
tinyvec_macros0.1.1
tokio-macros2.7.2proc macro
tracing-attributes0.1.31proc macro
unarray0.1.4
unicode-segmentation1.13.3
unicode-xid0.2.6
utoipa-gen5.5.0proc macro
valuable0.1.1build script, not run
version_check0.9.5
wait-timeout0.2.1
wasi0.11.1+wasi-snapshot-preview1
wasip21.0.4+wasi-0.2.12
wasm-bindgen0.2.127build script, not run
wasm-bindgen-futures0.4.77
wasm-bindgen-macro0.2.127proc macro
wasm-bindgen-macro-support0.2.127
wasm-bindgen-shared0.2.127build script, not run
wasm-streams0.4.2
web-sys0.3.104
winapi0.3.9build script, not run
winapi-i686-pc-windows-gnu0.4.0build script, not runprebuilt objects
winapi-util0.1.11
winapi-x86_64-pc-windows-gnu0.4.0build script, not runprebuilt objects
windows-core0.62.2
windows-implement0.60.2proc macro
windows-interface0.59.3proc macro
windows-link0.2.1
windows-result0.4.1
windows-strings0.5.1
windows-sys0.52.0
windows-sys0.61.2
windows-targets0.52.6
windows_aarch64_gnullvm0.52.6build script, not runprebuilt objects
windows_aarch64_msvc0.52.6build script, not runprebuilt objects
windows_i686_gnu0.52.6build script, not runprebuilt objects
windows_i686_gnullvm0.52.6build script, not runprebuilt objects
windows_i686_msvc0.52.6build script, not runprebuilt objects
windows_x86_64_gnu0.52.6build script, not runprebuilt objects
windows_x86_64_gnullvm0.52.6build script, not runprebuilt objects
windows_x86_64_msvc0.52.6build script, not runprebuilt objects
wiremock0.6.5
wit-bindgen0.57.1build script, not runprebuilt objects
yoke-derive0.8.2proc macro
zerocopy-derive0.8.56proc macro
zerofrom-derive0.1.7proc macro
zeroize_derive1.5.0proc macro
zerovec-derive0.11.6proc macro
zip3.0.0
zopfli0.8.3
Versions11RiskVulnsPublished
1.3.53d ago
1.3.44d ago
1.3.3not analyzed12d ago
1.3.2not analyzed2026-09-19
1.3.1not analyzed2026-09-09
1.3.0not analyzed2026-09-06
1.2.2not analyzed2026-08-30
1.2.1not analyzed2026-08-29
1.2.0not analyzed2026-08-29
0.2.35not analyzed2026-03-24
1.3.6highhigh

Raw data

capture
1.4 MB
records
187,009
bytes per record
7.6

Loading a sample of the capture

Want to see more? E-mail us at hello@bitbison.io about your use case.

1 of 1 jobs captured: build-test success · Generated 2026-10-16 · run 083dadf5-72b9-4716-a02c-36c05412eb45

analysis 0.1.0 · 2026-10-15 · 244c7b2 · graph v2