Skip to content
Open-Source Registry

cargo / oximg

oximg 0.15.0

bitbison: clean, with notes, behavior clean, dependencies notes, posture notes, pipeline clean, 1 of 1 jobs captured RisklowVulnsnone
processes
308
operations
103K
packages
317
compiler runs
2,185
connections
1
job time
9m 25s
capture
963 KB
records
167K
bytes / record
5.8

High-performance image compression: library, CLI, and self-hostable server (PoC).

Build behaviourhas a build scriptcompiled C/C++

662 downloads · Apache-2.0 · source compressionimagejpegresizeserver View on crates.io

Artifact

binary · retained · product · graph v2
3

Checks

13 of 15 clear Build-time dependency advisories Binary hardening
Build behavior✓✓✓✓✓✓✓✓
Supply chain✓▲✓✓✓
Build hardening▲
Pipeline✓

Detections

1
  • Build is missing recommended hardening flags
    libjxl · posture
    low

Detection

lowinferredposture

Build is missing recommended hardening flags

Missing hardening flags

Subject
/home/runner/.cargo/registry/src/index.crates.io-f7c75c5af8568ae3/jpegli-sys-0.1.0+0.10.2/libjxl
Jobs
build-test
Rule
hardening · libjxl

Evidence

  1. Hardening flag missingcause

    stack-protector: missing from all 211 eligible compile commands; add -fstack-protector-strong

  2. Hardening flag missingcause

    fortify: missing from all 211 eligible compile commands; add -D_FORTIFY_SOURCE=2 (needs -O1+)

  3. Hardening flag missingcause

    stack-clash-protection: missing from all 211 eligible compile commands; add -fstack-clash-protection

  4. Hardening flag missingcause

    cf-protection: missing from all 211 eligible compile commands; add -fcf-protection=full (x86-64) / -mbranch-protection=standard (aarch64)

  5. Hardening flag missingcause

    format-security: missing from all 211 eligible compile commands; add -Wformat -Werror=format-security

Processes

build-test

cargo›cargo

Ran
/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo fetch --locked
Invoked by
cargo fetch --locked
Lineage · 2 processes
  1. cargocargo fetch --locked2451
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo fetch --locked2451

Remediation

Enable the listed flags for supported targets, rebuild, and verify the resulting compile commands.

Network

1 peers
  • static.crates.io:8080 the package manager · cargo (oximg) via crates.io · 17,759 files · went into an output ecosystem
Dependencies357Build behaviour
jpegli-sys0.1.0+0.10.2build scriptruns toolsgit
ld-linux-x86-64.so.2system library
libc.so.6system library
libgcc_s.so.1system library
libm.so.6system library
libmvec.so.1system library
adler22.0.1
anyhow1.0.103build script
arrayvec0.7.8
atomic-waker1.1.2
axum0.8.9
axum-core0.5.6
base640.22.1
bitflags2.13.0
bitvec1.1.1
block-buffer0.12.1
bytemuck1.25.0
bytes1.12.0
cfg-if1.0.4
cmov0.5.4
const-oid0.10.2
core_affinity0.8.3
cpufeatures0.3.0
crc32fast1.5.0build script
crypto-common0.2.2
ctutils0.4.2
digest0.11.3
equivalent1.0.2
errno0.3.14
fast_image_resize5.5.0
fdeflate0.3.7
flate21.1.9
fnv1.0.7
form_urlencoded1.2.2
funty2.0.0
futures-channel0.3.32
futures-core0.3.32
futures-sink0.3.33
futures-task0.3.32
futures-util0.3.32
getrandom0.2.17
gif0.14.2
h20.4.16
hashbrown0.17.1
hmac0.13.0
http1.4.2
http-body1.0.1
http-body-util0.1.3
httparse1.10.1build script
httpdate1.0.3
hybrid-array0.4.13
hyper1.10.1
hyper-rustls0.27.9
hyper-util0.1.20
icu_collections2.2.0
icu_locale_core2.2.0
icu_normalizer2.2.0
icu_normalizer_data2.2.0build script
icu_properties2.2.0
icu_properties_data2.2.0build script
icu_provider2.2.0
idna1.1.0
idna_adapter1.2.2
indexmap2.14.0
ipnet2.12.1
itoa1.0.18
libc0.2.186build script
libm0.2.16build script
libwebp-sys0.14.4build script
litemap0.8.2
log0.4.33
matchit0.8.4
memchr2.8.2
mime0.3.17
miniz_oxide0.8.9
mio1.2.1
moxcms0.8.1
mozjpeg0.10.13
mozjpeg-sys2.2.3build script
novtb0.1.13
num-traits0.2.19build script
num_cpus1.17.0
once_cell1.21.4
ordered-float5.3.0
palette0.7.7
palette_math0.7.7
percent-encoding2.3.2
pic-scale0.7.9
pin-project-lite0.2.17
png0.18.1
potential_utf0.1.5
pxfm0.1.29
quantette0.6.0
radium0.7.0build script
ref-cast1.0.26build script
reqwest0.12.28
rgb0.8.53
ring0.17.14build scriptprebuilt objects
rustls0.23.46build script
rustls-pki-types1.15.0
rustls-webpki0.103.15
ryu1.0.23
safe_arch1.1.0
serde1.0.228build script
serde_core1.0.228build script
serde_json1.0.150build script
serde_path_to_error0.1.20
serde_urlencoded0.7.1
sha20.11.0
signal-hook-registry1.4.8
simd-adler320.3.9
slab0.4.12
smallvec1.15.2
socket20.6.4
stable_deref_trait1.2.1
subtle2.6.1
sync_wrapper1.0.2
tap1.0.1
thiserror2.0.18build script
tinystr0.8.3
tokio1.52.3
tokio-rustls0.26.4
tokio-util0.7.19
tower0.5.3
tower-http0.6.11
tower-layer0.3.3
tower-service0.3.3
tracing0.1.44
tracing-core0.1.36
try-lock0.2.5
typenum1.20.1
unicode-ident1.0.24
untrusted0.9.0
url2.5.8
utf8_iter1.0.4
want0.3.1
webpki-roots1.0.8
weezl0.1.12
wide1.6.1
writeable0.6.3
wyz0.5.1
yoke0.8.3
zerofrom0.1.8
zeroize1.9.0
zerotrie0.2.4
zerovec0.11.6
zmij1.0.21build script
@cloudflare/build-output-utils0.9.0
@cloudflare/codemods0.4.2
@cloudflare/config0.24.1
@cloudflare/kv-asset-handler0.5.0
@cloudflare/runtime-types0.1.9
@cloudflare/unenv-preset2.16.2
@cloudflare/workerd-darwin-641.20260930.2
@cloudflare/workerd-darwin-641.20261006.1
@cloudflare/workerd-darwin-arm641.20260930.2
@cloudflare/workerd-darwin-arm641.20261006.1
@cloudflare/workerd-linux-641.20260930.2
@cloudflare/workerd-linux-641.20261006.1
@cloudflare/workerd-linux-arm641.20260930.2
@cloudflare/workerd-linux-arm641.20261006.1
@cloudflare/workerd-windows-641.20260930.2
@cloudflare/workerd-windows-641.20261006.1
@cspotcode/source-map-support0.8.1
@emnapi/runtime1.11.3
@esbuild/aix-ppc640.28.1
@esbuild/android-arm0.28.1
@esbuild/android-arm640.28.1
@esbuild/android-x640.28.1
@esbuild/darwin-arm640.28.1
@esbuild/darwin-x640.28.1
@esbuild/freebsd-arm640.28.1
@esbuild/freebsd-x640.28.1
@esbuild/linux-arm0.28.1
@esbuild/linux-arm640.28.1
@esbuild/linux-ia320.28.1
@esbuild/linux-loong640.28.1
@esbuild/linux-mips64el0.28.1
@esbuild/linux-ppc640.28.1
@esbuild/linux-riscv640.28.1
@esbuild/linux-s390x0.28.1
@esbuild/linux-x640.28.1
@esbuild/netbsd-arm640.28.1
@esbuild/netbsd-x640.28.1
@esbuild/openbsd-arm640.28.1
@esbuild/openbsd-x640.28.1
@esbuild/openharmony-arm640.28.1
@esbuild/sunos-x640.28.1
@esbuild/win32-arm640.28.1
@esbuild/win32-ia320.28.1
@esbuild/win32-x640.28.1
@img/colour1.1.0
@img/sharp-darwin-arm640.35.4
@img/sharp-darwin-arm640.35.5
@img/sharp-darwin-x640.35.4
@img/sharp-darwin-x640.35.5
@img/sharp-freebsd-wasm320.35.4
@img/sharp-freebsd-wasm320.35.5
@img/sharp-libvips-darwin-arm641.3.3
@img/sharp-libvips-darwin-arm641.3.4
@img/sharp-libvips-darwin-x641.3.3
@img/sharp-libvips-darwin-x641.3.4
@img/sharp-libvips-linux-arm1.3.3
@img/sharp-libvips-linux-arm1.3.4
@img/sharp-libvips-linux-arm641.3.3
@img/sharp-libvips-linux-arm641.3.4
@img/sharp-libvips-linux-ppc641.3.3
@img/sharp-libvips-linux-ppc641.3.4
@img/sharp-libvips-linux-riscv641.3.3
@img/sharp-libvips-linux-riscv641.3.4
@img/sharp-libvips-linux-s390x1.3.3
@img/sharp-libvips-linux-s390x1.3.4
@img/sharp-libvips-linux-x641.3.3
@img/sharp-libvips-linux-x641.3.4
@img/sharp-libvips-linuxmusl-arm641.3.3
@img/sharp-libvips-linuxmusl-arm641.3.4
@img/sharp-libvips-linuxmusl-x641.3.3
@img/sharp-libvips-linuxmusl-x641.3.4
@img/sharp-linux-arm0.35.4
@img/sharp-linux-arm0.35.5
@img/sharp-linux-arm640.35.4
@img/sharp-linux-arm640.35.5
@img/sharp-linux-ppc640.35.4
@img/sharp-linux-ppc640.35.5
@img/sharp-linux-riscv640.35.4
@img/sharp-linux-riscv640.35.5
@img/sharp-linux-s390x0.35.4
@img/sharp-linux-s390x0.35.5
@img/sharp-linux-x640.35.4
@img/sharp-linux-x640.35.5
@img/sharp-linuxmusl-arm640.35.4
@img/sharp-linuxmusl-arm640.35.5
@img/sharp-linuxmusl-x640.35.4
@img/sharp-linuxmusl-x640.35.5
@img/sharp-wasm320.35.4
@img/sharp-wasm320.35.5
@img/sharp-webcontainers-wasm320.35.4
@img/sharp-webcontainers-wasm320.35.5
@img/sharp-win32-arm640.35.4
@img/sharp-win32-arm640.35.5
@img/sharp-win32-ia320.35.4
@img/sharp-win32-ia320.35.5
@img/sharp-win32-x640.35.4
@img/sharp-win32-x640.35.5
@jridgewell/resolve-uri3.1.2
@jridgewell/sourcemap-codec1.6.0
@jridgewell/trace-mapping0.3.9
@poppinss/colors4.1.6
@poppinss/dumper0.6.5
@poppinss/exception1.2.3
@sindresorhus/is7.2.0
@speed-highlight/core1.2.24
autocfg1.5.1
blake3-wasm2.1.5
bumpalo3.20.3
by_address1.2.1
bytemuck_derive1.11.0proc macro
cc1.2.65
cf1.0.0-beta.14
cfg_aliases0.2.2
chacha200.10.1
cmake0.1.58
cookie1.1.1
detect-libc2.1.2
displaydoc0.2.7proc macro
document-features0.2.12proc macro
dunce1.0.5
error-stack-parser-es1.0.5
esbuild0.28.1
find-msvc-tools0.1.9
fsevents2.3.3
getrandom0.3.4build script, not run
getrandom0.4.3build script, not run
glob0.3.3
hermit-abi0.5.2
jobserver0.1.34
jpegli0.1.0
js-sys0.3.103
kleur4.1.5
litrs1.0.0
lru-slab0.1.2
miniflare5.20260930.0-alpha
miniflare5.20261006.1-alpha
minisearch7.2.0
nasm-rs0.3.2
oximg-bench-origin
palette_derive0.7.7proc macro
path-to-regexp6.3.0
pathe2.0.3
pkg-config0.3.33
proc-macro21.0.106build script
quinn0.11.11build script, not run
quinn-proto0.11.16
quinn-udp0.5.15build script, not run
quote1.0.46build script
r-efi5.3.0
r-efi6.0.0
rand0.10.2
rand_core0.10.1
rand_pcg0.10.2
ref-cast-impl1.0.26proc macro
rustc-hash2.1.3
rustversion1.0.23build script, not runproc macro
semver7.8.5
serde_derive1.0.228proc macro
sharp0.35.4
sharp0.35.5
shlex2.0.1
supports-color10.2.2
syn2.0.118
syn3.0.3
synstructure0.13.2
thiserror-impl2.0.18proc macro
tinyvec1.12.0
tinyvec_macros0.1.1
tokio-macros2.7.0proc macro
tslib2.8.1
undici7.29.1
unenv2.0.0-rc.24
ureq3.3.0
ureq-proto0.6.0
utf8-zero0.8.1
wasi0.11.1+wasi-snapshot-preview1
wasip21.0.4+wasi-0.2.12
wasm-bindgen0.2.126build script, not run
wasm-bindgen-futures0.4.76
wasm-bindgen-macro0.2.126proc macro
wasm-bindgen-macro-support0.2.126
wasm-bindgen-shared0.2.126build script, not run
web-sys0.3.103
web-time1.1.0
winapi0.3.9build script, not run
winapi-i686-pc-windows-gnu0.4.0build script, not runprebuilt objects
winapi-x86_64-pc-windows-gnu0.4.0build script, not runprebuilt objects
windows-link0.2.1
windows-sys0.52.0
windows-sys0.61.2
windows-targets0.52.6
windows_aarch64_gnullvm0.52.6build script, not runprebuilt objects
windows_aarch64_msvc0.52.6build script, not runprebuilt objects
windows_i686_gnu0.52.6build script, not runprebuilt objects
windows_i686_gnullvm0.52.6build script, not runprebuilt objects
windows_i686_msvc0.52.6build script, not runprebuilt objects
windows_x86_64_gnu0.52.6build script, not runprebuilt objects
windows_x86_64_gnullvm0.52.6build script, not runprebuilt objects
windows_x86_64_msvc0.52.6build script, not runprebuilt objects
wit-bindgen0.57.1build script, not runprebuilt objects
workerd1.20260930.2
workerd1.20261006.1
wrangler4.145.0
ws8.21.0
yoke-derive0.8.2proc macro
youch4.1.0-beta.10
youch-core0.3.3
zerofrom-derive0.1.7proc macro
zerovec-derive0.11.3proc macro
zod4.6.5
Versions33RiskVulnsPublished
0.14.0not analyzed2026-10-03
0.13.0not analyzed2026-10-01
0.12.0not analyzed2026-09-29
0.11.0not analyzed2026-08-07
0.10.1not analyzed2026-08-05
0.10.0not analyzed2026-08-05
0.9.0not analyzed2026-08-05
0.8.2not analyzed2026-08-05
0.8.1not analyzed2026-08-04
0.8.0not analyzed2026-08-04
0.7.8not analyzed2026-08-04
0.7.7not analyzed2026-08-04
0.7.6not analyzed2026-08-04
0.7.5not analyzed2026-08-03
0.7.4not analyzed2026-08-03
0.7.3not analyzed2026-08-03
0.7.2not analyzed2026-08-03
0.7.1not analyzed2026-08-03
0.7.0not analyzed2026-08-02
0.6.0not analyzed2026-08-02
0.5.1not analyzed2026-07-07
0.5.0not analyzed2026-07-06
0.4.5not analyzed2026-07-06
0.4.4not analyzed2026-07-06
0.4.3not analyzed2026-07-06
0.4.2not analyzed2026-07-06
0.4.1not analyzed2026-07-06
0.4.0not analyzed2026-07-06
0.3.0not analyzed2026-07-05
0.2.0not analyzed2026-07-04
0.1.0not analyzed2026-07-02
0.0.0not analyzed2026-07-02
0.15.0lownone

Raw data

capture
963 KB
records
166,613
bytes per record
5.8

Loading a sample of the capture

Want to see more? E-mail us at hello@bitbison.io about your use case.

1 of 1 jobs captured: build-test success · Generated 2026-10-20 · run 381284be-b841-4b73-b456-5adbfb81acca

analysis 0.1.0 · 2026-10-19 · 10ce9f4 · graph v2