Skip to content
Open-Source Registry

cargo / otelite-receiver / 0.1.155

otelite-receiver 0.1.155

bitbison: flagged, behavior flagged, dependencies notes, posture not checked, pipeline clean, 1 of 1 jobs captured 1 detection
processes
508
operations
71K
packages
300
compiler runs
107
connections
3
job time
4m 30s
capture
850 KB
records
124K
bytes / record
6.8

Build behaviourundeclared fetchfetched outside crates.iocompiled C/C++

run 35669176-fba5-4a94-bc96-47f9e16087b5 · built 2026-10-15 · complete

Graph

egress · medium
2

Checks

12 of 14 clear Network activity Build-time dependency advisories
Build behavior▲✓✓✓✓✓✓✓
Supply chain✓▲✓✓✓
Pipeline✓

Detections

1
  • Build script reached codeload.github.com +1
    utoipa-swagger-ui 7.1.0 › github.com:443, codeload.github.com:443
    medium

Detection

mediumwitnessed

Build script reached codeload.github.com +1

Unexpected network connection

Subject
utoipa-swagger-ui 7.1.0
Destination
github.com:443, codeload.github.com:443
Jobs
build-test
Rule
egress

Evidence

  1. Connection outside the process’s allowed destinationscause

    connection to github.com:443, opened by curl

    subject github.com:443

    by curl -sSL -o /home/runner/work/otelite/otelite/target/release/build/utoipa-swagger-ui-018e7db025781e3f/out/v5.17.12.zip https://github.com/swagger-api/swagger-u…

  2. Connection outside the process’s allowed destinationscause

    connection to codeload.github.com:443, opened by curl

    subject codeload.github.com:443

    by curl -sSL -o /home/runner/work/otelite/otelite/target/release/build/utoipa-swagger-ui-018e7db025781e3f/out/v5.17.12.zip https://github.com/swagger-api/swagger-u…

  3. What a build script's fetch becamesupport

    1 file came down; nothing the build compiled, linked or ran

  4. Connection opened by a build script or child processsupport

    the opener descends from the build script at /home/runner/work/otelite/otelite/target/release/build/utoipa-swagger-ui-734387e4002ca4aa/build-script-build

  5. Tool commandsupport

    Command: curl -sSL -o /home/runner/work/otelite/otelite/target/release/build/utoipa-swagger-ui-018e7db025781e3f/out/v5.17.12.zip https://github.com/swagger-api/swagger-u…

    by curl -sSL -o /home/runner/work/otelite/otelite/target/release/build/utoipa-swagger-ui-018e7db025781e3f/out/v5.17.12.zip https://github.com/swagger-api/swagger-u…

What came before it

Loading the graph

Processes

build-test

cargo›cargo›build-script-build›curl

Ran
curl -sSL -o /home/runner/work/otelite/otelite/target/release/build/utoipa-swagger-ui-018e7db025781e3f/out/v5.17.12.zip https://github.com/swagger-api/swagger-u…
Invoked by
cargo test --release --locked --no-fail-fast
Lineage · 4 processes
  1. cargocargo test --release --locked --no-fail-fast4302
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast4302
  3. build-script-build/home/runner/work/otelite/otelite/target/release/build/utoipa-swagger-ui-734387e4002ca4aa/build-script-build6870
  4. curlcurl -sSL -o /home/runner/work/otelite/otelite/target/release/build/utoipa-swagger-ui-018e7db025781e3f/out/v5.17.12.zip https://github.com/swagger-api/swagger-u…6875

Remediation

The build script connected to the network while compiling. Nothing it downloaded was compiled, linked or run. Build the crate from what the registry ships, or accept the download after reviewing it.

Network

3 peers
  • codeload.github.com:443 build code of utoipa-swagger-ui · curl · GitHub, Inc. · 1 file undeclared
  • github.com:443 build code of utoipa-swagger-ui · curl · GitHub, Inc. · 1 file undeclared
  • static.crates.io:8080 the package manager · cargo (otelite) via crates.io · 16,651 files · went into an output ecosystem
Dependencies327Build behaviour
adler22.0.1
ahash0.8.12build script
aho-corasick1.1.5
android_system_properties0.1.6
anyhow1.0.104build script
arbitrary1.4.2
async-compression0.4.48
async-trait0.1.92proc macro
atomic-waker1.1.2
autocfg1.5.1
axum0.7.9
axum0.8.9
axum-core0.4.5
axum-core0.5.6
base640.22.1
bitflags2.13.2
block-buffer0.12.1
bumpalo3.20.3
bytes1.12.1
cc1.4.6
cfg-if1.0.5
cfg_aliases0.2.2
chacha200.10.2
chrono0.4.45
chrono-tz0.10.4build script
compression-codecs0.4.43
compression-core0.4.33
const-hex1.19.3
const-oid0.10.2
core-foundation0.10.1
core-foundation0.9.4
core-foundation-sys0.8.7
core_detect1.0.0
cpufeatures0.2.17
cpufeatures0.3.1
crc32fast1.5.2build script
crossbeam-utils0.8.23build script, not run
crypto-common0.2.2
derive_arbitrary1.4.2proc macro
diff0.1.13
digest0.11.3
dirs5.0.1
dirs-sys0.4.1
displaydoc0.2.7proc macro
either1.18.0
encoding_rs0.8.41build script
equivalent1.0.2
errno0.3.14
fallible-iterator0.3.0
fallible-streaming-iterator0.1.9
fastrand2.5.0
find-msvc-tools0.1.12
flate21.1.10
fnv1.0.7
foreign-types0.3.2
foreign-types-shared0.1.1
form_urlencoded1.2.2
futures-channel0.3.34
futures-core0.3.34
futures-executor0.3.34
futures-io0.3.34
futures-macro0.3.34proc macro
futures-sink0.3.34
futures-task0.3.34
futures-util0.3.34
getrandom0.2.17
getrandom0.3.4build script
getrandom0.4.3build script
h20.4.19
hashbrown0.14.5
hashbrown0.17.1
hashlink0.9.1
http1.5.0
http-body1.1.0
http-body-util0.1.5
http-range-header0.4.2
httparse1.10.1build script
httpdate1.0.3
hybrid-array0.4.15
hyper1.11.1
hyper-rustls0.27.9
hyper-timeout0.5.2
hyper-tls0.6.0
hyper-util0.1.20
iana-time-zone0.1.65
iana-time-zone-haiku0.1.2build script, not run
icu_collections2.3.0
icu_locale_core2.3.0
icu_normalizer2.3.0
icu_normalizer_data2.3.0build script
icu_properties2.3.0
icu_properties_data2.3.0build script
icu_provider2.3.1
idna1.1.0
idna_adapter1.2.2
indexmap2.14.2
ipnet2.12.2
itertools0.14.0
itoa1.0.18
js-sys0.3.105
lazy_static1.5.0
ld-linux-x86-64.so.2system library
libc0.2.189build script
libc.so.6system library
libcrypto.so.3system library
libgcc_s.so.1system library
libm.so.6system library
libmvec.so.1system library
libredox0.1.24
libsqlite3-sys0.28.0build script
libssl.so.3system library
linux-raw-sys0.12.1
litemap0.8.3
lock_api0.4.14
log0.4.34
lru-slab0.1.3
matchit0.7.3
matchit0.8.4
memchr2.8.3
mime0.3.17
mime_guess2.0.5build script
miniz_oxide0.9.1
mio1.2.3
multiversion0.9.0
multiversion-macros0.9.0proc macro
multiversion_no_op1.0.0proc macro
native-tls0.2.18build script
nu-ansi-term0.50.3
num-traits0.2.19build script
num_enum0.7.6
num_enum_derive0.7.6proc macro
once_cell1.21.4
openssl0.10.81build script
openssl-macros0.1.1proc macro
openssl-probe0.2.1
openssl-sys0.9.117build script
opentelemetry0.32.0
opentelemetry-proto0.32.0
opentelemetry_sdk0.32.1
option-ext0.2.0
otelite-api0.1.155
otelite-client0.1.155
otelite-core0.1.155
otelite-storage0.1.155
parking_lot0.12.5
parking_lot_core0.9.12build script
percent-encoding2.3.2
phf0.12.1
phf_shared0.12.1
pin-project1.1.13
pin-project-internal1.1.13proc macro
pin-project-lite0.2.17
pkg-config0.3.34
portable-atomic1.15.0build script, not run
potential_utf0.1.6
ppv-lite860.2.21
pretty_assertions1.4.1
proc-macro-crate3.5.0
proc-macro-error1.0.4build script
proc-macro-error-attr1.0.4build scriptproc macro
proc-macro21.0.107build script
proptest1.11.0
prost0.14.4
prost-derive0.14.4proc macro
quinn0.11.12build script, not run
quinn-proto0.11.18
quinn-udp0.5.15build script, not run
quote1.0.47build script
r-efi5.3.0
r-efi6.0.0
rand0.10.2
rand0.9.5
rand_chacha0.9.0
rand_core0.10.1
rand_core0.9.5
rand_pcg0.10.2
rand_xorshift0.4.0
redox_syscall0.5.18
redox_users0.4.6
regex1.13.1
regex-automata0.4.18
regex-syntax0.8.11
reqwest0.12.28
ring0.17.14build script, not runprebuilt objects
rusqlite0.31.0
rust-embed8.12.0
rust-embed-impl8.12.0proc macro
rust-embed-utils8.12.0
rustc-hash2.1.3
rustix1.1.5build script
rustls0.23.46build script, not run
rustls-pki-types1.15.1
rustls-webpki0.103.15
rustversion1.0.23build scriptproc macro
ryu1.0.23
same-file1.0.6
schannel0.1.29
scopeguard1.2.0
security-framework3.7.0
security-framework-sys2.17.0
serde1.0.229build script
serde_core1.0.229build script
serde_derive1.0.229proc macro
serde_json1.0.151build script
serde_path_to_error0.1.20
serde_urlencoded0.7.1
sha20.11.0
sharded-slab0.1.7
shlex2.0.1
signal-hook-registry1.4.8
simd-adler320.3.10
simdutf80.1.5
siphasher1.0.3
slab0.4.12
smallvec1.16.1
socket20.6.5
stable_deref_trait1.2.1
subtle2.6.1
syn1.0.109build script
syn2.0.119
syn3.0.6
sync_wrapper1.0.2
synstructure0.14.0
system-configuration0.7.0
system-configuration-sys0.6.0build script, not run
tempfile3.27.0
thiserror1.0.69build script
thiserror2.0.20build script
thiserror-impl1.0.69proc macro
thiserror-impl2.0.20proc macro
thread_local1.1.10
tinystr0.8.4
tinyvec1.13.3
tokio1.53.1
tokio-macros2.7.2proc macro
tokio-native-tls0.3.1
tokio-rustls0.26.5
tokio-stream0.1.19
tokio-test0.4.5
tokio-util0.7.19
toml_datetime1.1.1+spec-1.1.0
toml_edit0.25.15+spec-1.1.0
toml_parser1.1.3+spec-1.1.0
tonic0.14.6
tonic-prost0.14.6
tower0.4.13
tower0.5.3
tower-http0.5.2
tower-http0.6.11
tower-layer0.3.3
tower-service0.3.3
tracing0.1.44
tracing-attributes0.1.31proc macro
tracing-core0.1.36
tracing-log0.2.0
tracing-subscriber0.3.23
try-lock0.2.5
typenum1.20.1
unarray0.1.4
unicase2.9.0
unicode-ident1.0.26
untrusted0.9.0
url2.5.8
utf8_iter1.0.4
utoipa4.2.3
utoipa-gen4.3.1proc macro
utoipa-swagger-ui7.1.0build scriptnetworkruns toolscodeload.github.com, github.com, curl
valuable0.1.1build script, not run
vcpkg0.2.15prebuilt objects
version_check0.9.5
walkdir2.5.0
want0.3.1
wasi0.11.1+wasi-snapshot-preview1
wasip21.0.4+wasi-0.2.12
wasm-bindgen0.2.128build script, not run
wasm-bindgen-futures0.4.78
wasm-bindgen-macro0.2.128proc macro
wasm-bindgen-macro-support0.2.128
wasm-bindgen-shared0.2.128build script, not run
web-sys0.3.105
web-time1.1.0
webpki-roots1.0.9
winapi-util0.1.11
windows-core0.62.2
windows-implement0.60.2proc macro
windows-interface0.59.3proc macro
windows-link0.2.1
windows-registry0.6.1
windows-result0.4.1
windows-strings0.5.1
windows-sys0.48.0
windows-sys0.52.0
windows-sys0.61.2
windows-targets0.48.5
windows-targets0.52.6
windows_aarch64_gnullvm0.48.5build script, not runprebuilt objects
windows_aarch64_gnullvm0.52.6build script, not runprebuilt objects
windows_aarch64_msvc0.48.5build script, not runprebuilt objects
windows_aarch64_msvc0.52.6build script, not runprebuilt objects
windows_i686_gnu0.48.5build script, not runprebuilt objects
windows_i686_gnu0.52.6build script, not runprebuilt objects
windows_i686_gnullvm0.52.6build script, not runprebuilt objects
windows_i686_msvc0.48.5build script, not runprebuilt objects
windows_i686_msvc0.52.6build script, not runprebuilt objects
windows_x86_64_gnu0.48.5build script, not runprebuilt objects
windows_x86_64_gnu0.52.6build script, not runprebuilt objects
windows_x86_64_gnullvm0.48.5build script, not runprebuilt objects
windows_x86_64_gnullvm0.52.6build script, not runprebuilt objects
windows_x86_64_msvc0.48.5build script, not runprebuilt objects
windows_x86_64_msvc0.52.6build script, not runprebuilt objects
winnow1.0.4
wit-bindgen0.57.1build script, not runprebuilt objects
writeable0.6.4
yansi1.0.1
yoke0.8.3
yoke-derive0.8.4proc macro
zerocopy0.8.57build script
zerocopy-derive0.8.57proc macro
zerofrom0.1.8
zerofrom-derive0.1.8proc macro
zeroize1.9.0
zerotrie0.2.5
zerovec0.11.8
zerovec-derive0.11.6proc macro
zip1.1.4build script
zlib-rs0.6.8
zmij1.0.23build script

Raw data

capture
850 KB
records
124,456
bytes per record
6.8

Loading a sample of the capture

Want to see more? E-mail us at hello@bitbison.io about your use case.

1 of 1 jobs captured: build-test success · Generated 2026-10-15 · run 35669176-fba5-4a94-bc96-47f9e16087b5

analysis 0.1.0 · 2026-10-15 · 244c7b2 · graph v2