Skip to content
Open-Source Registry

cargo / optionchain_simulator / 0.4.0

optionchain_simulator 0.4.0

bitbison: flagged, behavior flagged, dependencies flagged, posture not checked, pipeline clean, 1 of 1 jobs captured RiskmediumVulnshigh
processes
497
operations
174K
packages
425
compiler runs
1,120
connections
4
job time
7m 30s
capture
2.4 MB
records
324K
bytes / record
7.6

Build behaviourundeclared fetchfetched outside crates.iocompiled C/C++

run 2cc2a2e7-d31c-4ce8-a2e4-c2f75d5de960 · built 2026-10-19 · complete View on crates.io

Graph

egress · medium · in liboptionchain_simulator.rlib
3

Checks

10 of 14 clear Network activity Known vulnerabilities +2 more
Build behavior▲✓✓✓✓✓✓✓
Supply chain▲▲▲✓✓
Pipeline✓

Detections

1
  • Build script reached codeload.github.com +1
    utoipa-swagger-ui 10.0.1 › github.com:443, codeload.github.com:443
    medium

Detection

mediumwitnessed

Build script reached codeload.github.com +1

Unexpected network connection

Subject
utoipa-swagger-ui 10.0.1
Destination
github.com:443, codeload.github.com:443
Reaches
Jobs
build-test
Rule
egress

Evidence

  1. Connection outside the process’s allowed destinationscause

    connection to github.com:443, opened by curl

    subject github.com:443

    by curl -sSL -o /home/runner/work/OptionChain-Simulator/OptionChain-Simulator/target/release/build/utoipa-swagger-ui-dab6b76988894c5c/out/v5.32.6.zip https://githu…

  2. Connection outside the process’s allowed destinationscause

    connection to codeload.github.com:443, opened by curl

    subject codeload.github.com:443

    by curl -sSL -o /home/runner/work/OptionChain-Simulator/OptionChain-Simulator/target/release/build/utoipa-swagger-ui-dab6b76988894c5c/out/v5.32.6.zip https://githu…

  3. What a build script's fetch becamesupport

    1 file came down; nothing the build compiled, linked or ran

  4. Connection opened by a build script or child processsupport

    the opener descends from the build script at /home/runner/work/OptionChain-Simulator/OptionChain-Simulator/target/release/build/utoipa-swagger-ui-cc34d21a06f247f8/build-script-build

  5. Tool commandsupport

    Command: curl -sSL -o /home/runner/work/OptionChain-Simulator/OptionChain-Simulator/target/release/build/utoipa-swagger-ui-dab6b76988894c5c/out/v5.32.6.zip https://githu…

    by curl -sSL -o /home/runner/work/OptionChain-Simulator/OptionChain-Simulator/target/release/build/utoipa-swagger-ui-dab6b76988894c5c/out/v5.32.6.zip https://githu…

In liboptionchain_simulator.rlib

Loading the graph

Processes

build-test

cargo›cargo›build-script-build›curl

Ran
curl -sSL -o /home/runner/work/OptionChain-Simulator/OptionChain-Simulator/target/release/build/utoipa-swagger-ui-dab6b76988894c5c/out/v5.32.6.zip https://githu…
Invoked by
cargo build --release --locked --message-format=json-render-diagnostics
Lineage · 4 processes
  1. cargocargo build --release --locked --message-format=json-render-diagnostics2520
  2. cargo/home/runner/.rustup/toolchains/stable-x86_64-unknown-linux-gnu/bin/cargo build --release --locked --message-format=json-render-diagnostics2520
  3. build-script-build/home/runner/work/OptionChain-Simulator/OptionChain-Simulator/target/release/build/utoipa-swagger-ui-cc34d21a06f247f8/build-script-build8815
  4. curlcurl -sSL -o /home/runner/work/OptionChain-Simulator/OptionChain-Simulator/target/release/build/utoipa-swagger-ui-dab6b76988894c5c/out/v5.32.6.zip https://githu…8820

Remediation

The build script connected to the network while compiling. Nothing it downloaded was compiled, linked or run. Build the crate from what the registry ships, or accept the download after reviewing it.

Network

4 peers
  • codeload.github.com:443 build code of utoipa-swagger-ui · curl · GitHub, Inc. · 1 file undeclared
  • github.com:443 build code of utoipa-swagger-ui · curl · GitHub, Inc. · 1 file undeclared
  • static.crates.io:8080 the package manager · cargo (OptionChain-Simulator) via crates.io · 26,249 files · went into an output ecosystem
  • static.rust-lang.org:443 the toolchain installer · rustup (OptionChain-Simulator) via Package registries profile (rustup → asn:54113) · Fastly, Inc. · 13 files ecosystem
Vulnerabilities5PackageFixSeverity
RUSTSEC-2026-0258h2 0.3.27>=0.4.16high
CVE-2024-32650rustls 0.20.9>=0.21.11high
RUSTSEC-2026-0349rustls 0.20.9>=0.23.46high
CVE-2025-4432ring 0.16.20>=0.17.12medium
RUSTSEC-2025-0010ring 0.16.20>=0.17low
Dependencies449Build behaviour
actix-codec0.5.4
actix-http3.19.0
actix-router0.5.4
actix-rt2.15.0
actix-server2.10.0
actix-service2.0.3
actix-tls3.6.1
actix-utils3.0.2
actix-web4.17.0
aes0.9.3
ahash0.8.12build script
aho-corasick1.1.5
alloc-no-stdlib3.0.0
alloc-stdlib0.3.0
allocator-api20.2.21
approx0.5.1
arc-swap1.9.3
arcstr1.2.0
arrayvec0.7.8
async-lock3.4.2
atomic-waker1.1.2
backon1.6.0
base640.22.1
base640.23.1
bitflags2.13.2
bitvec1.1.1
block-buffer0.12.1
bnum0.13.0
brotli9.0.0
brotli-decompressor6.0.1
bson2.15.0
bstr1.13.1
bumpalo3.20.3
bytemuck1.25.2
bytes1.12.1
bytestring1.5.1
bzip20.6.1
cfg-if1.0.5
chacha200.10.2
chrono0.4.45
chrono-tz0.10.4build script
cipher0.5.2
cityhash-rs1.0.1
clickhouse0.15.3
clickhouse-types0.1.4
cmov0.5.4
combine4.6.9
const-oid0.10.2
constant_time_eq0.6.1build script
cookie0.16.2build script
core_detect1.0.0
cpubits0.1.1
cpufeatures0.3.1
crc32fast1.5.2build script
crossbeam-channel0.5.17
crossbeam-deque0.8.8build script
crossbeam-epoch0.9.21build script
crossbeam-utils0.8.23build script
crypto-common0.2.2
csv1.4.0
csv-core0.1.13
ctutils0.4.3
data-encoding2.11.1
deflate640.1.12
deranged0.5.9
derive_more2.1.1
digest0.11.3
dirs-next2.0.0
dirs-sys-next0.1.2
either1.19.0
encode_unicode1.0.0
encoding_rs0.8.42build script
equivalent1.0.3
errno0.3.14
event-listener5.4.2
event-listener-strategy0.5.4
expiration_date0.5.0
fastrand2.5.0
financial_types0.3.0
flate21.1.10
fnv1.0.7
foldhash0.2.0
form_urlencoded1.2.2
funty2.0.0
futures0.3.34
futures-channel0.3.34
futures-core0.3.34
futures-executor0.3.34
futures-io0.3.34
futures-sink0.3.34
futures-task0.3.34
futures-util0.3.34
getrandom0.2.17
getrandom0.3.4build script
getrandom0.4.3build script
h20.3.27
half2.7.1
hashbrown0.17.1
hex0.4.3
hickory-net0.26.3
hickory-proto0.26.3
hickory-resolver0.26.3
hmac0.13.0
http0.2.12
http1.5.0
http-body1.1.0
http-body-util0.1.5
httparse1.10.1build script
httpdate1.0.3
hybrid-array0.4.15
hyper1.12.0
hyper-util0.1.21
iana-time-zone0.1.65
icu_collections2.3.0
icu_locale_core2.3.0
icu_normalizer2.3.0
icu_normalizer_data2.3.0build script
icu_properties2.3.0
icu_properties_data2.3.0build script
icu_provider2.3.1
idna1.1.0
idna_adapter1.2.2
impl-more0.3.10
indexmap2.14.2
inout0.2.5
ipnet2.12.2
is-terminal0.4.17
itertools0.15.0
itoa1.0.18
language-tags0.3.2
lazy_static1.5.1
ld-linux-x86-64.so.2system library
libbz2-rs-sys0.2.5
libc0.2.191build script
libc.so.6system library
libgcc_s.so.1system library
libm.so.6system library
libmvec.so.1system library
litemap0.8.3
local-channel0.1.5
local-waker0.1.4
lock_api0.4.14
log0.4.34
lz4_flex0.14.0
lzma-rust20.22.0
macro_magic0.5.1
matrixmultiply0.3.11build script
md-50.11.0
memchr2.8.3
mime0.3.17
mime_guess2.0.5build script
mio1.2.4
moka0.12.16
mongodb3.9.1
nalgebra0.35.0
nu-ansi-term0.50.3
num-bigint0.5.1
num-complex0.4.6
num-conv0.2.2
num-integer0.1.47
num-rational0.4.2
num-traits0.2.19build script
once_cell1.21.4
option_type0.5.0
optionstratlib0.23.0
optionstratlib-analytics0.23.0
optionstratlib-backtest0.23.0
optionstratlib-core0.23.0
optionstratlib-market0.23.0
optionstratlib-math0.23.0
optionstratlib-pricing0.23.0
optionstratlib-simulation0.23.0
optionstratlib-strategies0.23.0
optionstratlib-visualization0.23.0
parking2.2.1
parking_lot0.12.5
parking_lot_core0.9.12build script
pbkdf20.13.0
percent-encoding2.3.2
phf0.12.1
phf_shared0.12.1
pin-project-lite0.2.17
portable-atomic1.15.0build script
positive0.8.0
potential_utf0.1.6
powerfmt0.2.1
ppmd-rust1.5.1
ppv-lite860.2.21
prefix-trie0.8.4
prettytable-rs0.10.0
prometheus0.14.0build script
protobuf3.7.2build script
protobuf-support3.7.2
radium0.7.0build script
rand0.10.3
rand0.9.5
rand_chacha0.9.0
rand_core0.10.1
rand_core0.9.5
rand_distr0.6.0
rawpointer0.2.1
rayon1.12.0
rayon-core1.13.0build script
redis1.7.1
regex1.13.1
regex-automata0.4.18
regex-syntax0.8.11
resolv-conf0.7.6
ring0.16.20build scriptprebuilt objects
ring0.17.14build scriptprebuilt objects
rust_decimal1.43.0build script
rustc_version0.4.1
rustc_version_runtime0.3.0build script
rustls0.20.9build script
rustls0.23.46build script
rustls-pki-types1.15.1
rustls-webpki0.103.15
ryu1.0.23
safe_arch1.2.0
scopeguard1.2.0
sct0.7.1
semver1.0.28
serde1.0.229build script
serde_bytes0.11.19
serde_core1.0.229build script
serde_json1.0.154build script
serde_urlencoded0.7.1
serde_with3.24.0
sha10.11.0
sha1_smol1.0.1
sha20.11.1
sharded-slab0.1.7
signal-hook-registry1.4.8
simba0.10.2
simd-adler320.3.10
simdutf80.1.5
siphasher1.0.4
slab0.4.12
smallvec1.16.3
socket20.6.5
spin0.5.2
stable_deref_trait1.2.1
statrs0.19.1
stringprep0.1.5
strsim0.11.1
subtle2.6.1
tagptr0.2.0
take_mut0.2.2
tap1.0.1
term0.7.0
thiserror1.0.69build script
thiserror2.0.21build script
thread_local1.1.10
time0.3.55
time-core0.1.9
tinystr0.8.4
tinyvec1.13.3
tokio1.53.3
tokio-rustls0.23.4
tokio-rustls0.26.6
tokio-util0.7.20
tower-service0.3.3
tracing0.1.44
tracing-core0.1.36
tracing-log0.2.0
tracing-subscriber0.3.23
try-lock0.2.5
twox-hash2.1.5
typed-builder0.22.0
typed-path0.12.3
typenum1.20.1
unicase2.10.0
unicode-bidi0.3.18
unicode-normalization0.1.26
unicode-properties0.1.4
unicode-width0.1.14
untrusted0.7.1
untrusted0.9.0
url2.5.8
utf8_iter1.0.4
utoipa6.0.0
utoipa-swagger-ui10.0.1build scriptnetworkruns toolscodeload.github.com, github.com, curl
uuid1.28.0
want0.3.2
webpki0.22.4
webpki-roots1.0.9
wide1.7.1
writeable0.6.4
wyz0.5.1
xxhash-rust0.8.19
yoke0.8.3
zerocopy0.8.63build script
zerofrom0.1.8
zeroize1.9.1
zerotrie0.2.5
zerovec0.11.8
zip9.0.5
zlib-rs0.6.8
zmij1.0.23build script
zopfli0.8.4
zstd0.14.3
zstd-safe8.2.0build script
zstd-sys2.1.2+zstd.1.5.7build script
adler22.0.1
anstyle1.0.14
const-random0.1.18
critical-section1.2.0
crunchy0.2.4build script
downcast0.11.0
fragile2.1.0
libm0.2.16build script
linux-raw-sys0.12.1
macro_magic_core0.5.1
miniz_oxide0.9.1
mockall0.15.0build script
predicates3.1.4
predicates-core1.0.10
predicates-tree1.0.13
proc-macro21.0.107build script
quote1.0.47build script
regex-lite0.1.9
rustix1.1.5build script
syn2.0.119
tempfile3.27.0
termtree0.5.1
unicode-ident1.0.27
webpki-roots0.22.6
actix-macros0.2.5proc macro
actix-web-codegen4.4.0proc macro
android_system_properties0.1.6
async-trait0.1.92proc macro
autocfg1.5.1
borsh1.8.1build script, not run
borsh-derive1.8.1proc macro
cc1.9.0
cfg_aliases0.2.2
clickhouse-macros0.3.0proc macro
const-random-macro0.1.16proc macro
convert_case0.10.0
core-foundation0.9.4
core-foundation-sys0.8.7
darling0.24.1
darling_core0.24.1
darling_macro0.24.1proc macro
derive-syn-parse0.2.0proc macro
derive-where1.7.0proc macro
derive_more-impl2.1.1proc macro
displaydoc0.2.7proc macro
find-msvc-tools0.1.15
futures-macro0.3.34proc macro
glam0.30.10
glam0.31.1
glam0.32.1
glam0.33.12
hermit-abi0.5.3
iana-time-zone-haiku0.1.2build script, not run
ident_case1.0.1
ipconfig0.3.4build script, not run
jni0.22.4build script, not run
jni-macros0.22.4build script, not runproc macro
jni-sys0.4.1
jni-sys-macros0.4.1proc macro
jobserver0.1.35
js-sys0.3.106
libredox0.1.25
macro_magic_core_macros0.5.1proc macro
macro_magic_macros0.5.1proc macro
mockall_derive0.15.0build scriptproc macro
mongocrypt0.4.0
mongocrypt-sys0.1.6+1.18.2build script, not run
mongodb-internal-macros3.9.1proc macro
multiversion_no_op1.0.0proc macro
ndk-context0.1.1
nix0.31.3build script, not run
num-bigint0.4.8
pkg-config0.3.34
proc-macro-crate3.5.0
r-efi5.3.0
r-efi6.0.0
rand0.8.8
rand_chacha0.3.1
rand_core0.6.4
redox_syscall0.5.18
redox_users0.4.6
rust_decimal_macros1.40.0proc macro
rustversion1.0.23build scriptproc macro
same-file1.0.6
serde_derive1.0.229proc macro
serde_derive_internals0.29.1
serde_with_macros3.24.0proc macro
shlex2.0.1
simd_cesu81.2.0
syn3.0.9
synstructure0.14.0
system-configuration0.7.0
system-configuration-sys0.6.0build script, not run
thiserror-impl1.0.69proc macro
thiserror-impl2.0.21proc macro
time-macros0.2.32proc macro
tiny-keccak2.0.2build script
tokio-macros2.7.2proc macro
toml_datetime1.1.2+spec-1.1.0
toml_edit0.25.17+spec-1.1.0
toml_parser1.1.5+spec-1.1.0
tracing-attributes0.1.31proc macro
typed-builder-macro0.22.0proc macro
unicode-segmentation1.13.3
unicode-xid0.2.6
utoipa-gen6.0.1proc macro
valuable0.1.1build script, not run
version_check0.9.5
walkdir2.5.0
wasi0.11.1+wasi-snapshot-preview1
wasip21.0.4+wasi-0.2.12
wasm-bindgen0.2.129build script, not run
wasm-bindgen-macro0.2.129proc macro
wasm-bindgen-macro-support0.2.129
wasm-bindgen-shared0.2.129build script, not run
web-sys0.3.106
widestring1.2.1
winapi0.3.9build script, not run
winapi-i686-pc-windows-gnu0.4.0build script, not runprebuilt objects
winapi-util0.1.11
winapi-x86_64-pc-windows-gnu0.4.0build script, not runprebuilt objects
windows-core0.62.2
windows-implement0.60.2proc macro
windows-interface0.59.3proc macro
windows-link0.2.1
windows-registry0.6.1
windows-result0.4.1
windows-strings0.5.1
windows-sys0.52.0
windows-sys0.61.2
windows-targets0.52.6
windows_aarch64_gnullvm0.52.6build script, not runprebuilt objects
windows_aarch64_msvc0.52.6build script, not runprebuilt objects
windows_i686_gnu0.52.6build script, not runprebuilt objects
windows_i686_gnullvm0.52.6build script, not runprebuilt objects
windows_i686_msvc0.52.6build script, not runprebuilt objects
windows_x86_64_gnu0.52.6build script, not runprebuilt objects
windows_x86_64_gnullvm0.52.6build script, not runprebuilt objects
windows_x86_64_msvc0.52.6build script, not runprebuilt objects
winnow1.0.4
wit-bindgen0.57.1build script, not runprebuilt objects
yoke-derive0.8.4proc macro
zerocopy-derive0.8.63proc macro
zerofrom-derive0.1.8proc macro
zerovec-derive0.11.6proc macro
zip8.6.0
Versions29RiskVulnsPublished
0.3.010d ago
0.2.29not analyzed2026-09-18
0.2.21not analyzed2026-08-31
0.2.20not analyzed2026-08-31
0.2.19not analyzed2026-08-31
0.2.17not analyzed2026-08-31
0.2.16not analyzed2026-08-31
0.2.15not analyzed2026-08-31
0.2.14not analyzed2026-08-31
0.2.13not analyzed2026-08-31
0.2.12not analyzed2026-08-31
0.2.11not analyzed2026-08-31
0.2.10not analyzed2026-08-31
0.2.9not analyzed2026-08-31
0.2.8not analyzed2026-08-31
0.2.7not analyzed2026-08-31
0.2.6not analyzed2026-08-31
0.2.5not analyzed2026-08-31
0.2.4not analyzed2026-08-31
0.2.3not analyzed2026-08-31
0.2.2not analyzed2026-08-31
0.2.1not analyzed2026-08-30
0.2.0not analyzed2026-08-15
0.1.0not analyzed2026-07-14
0.0.3not analyzed2026-07-13
0.0.2not analyzed2025-05-02
0.0.1not analyzed2025-04-25
0.0.0not analyzed2025-04-12
0.4.0mediumhigh

Raw data

capture
2.4 MB
records
324,068
bytes per record
7.6

Loading a sample of the capture

Want to see more? E-mail us at hello@bitbison.io about your use case.

1 of 1 jobs captured: build-test success · Generated 2026-10-19 · run 2cc2a2e7-d31c-4ce8-a2e4-c2f75d5de960

analysis 0.1.0 · 2026-10-19 · 10ce9f4 · graph v2