Skip to content
Open-Source Registry

cargo / piper-phonemize-sys

piper-phonemize-sys 1.5.3

bitbison: flagged, behavior flagged, dependencies notes, posture not checked, pipeline clean, 1 of 1 jobs captured 4 detections
processes
175
operations
18K
packages
85
compiler runs
173
connections
3
job time
22s
capture
229 KB
records
32K
bytes / record
7.1

Raw FFI bindings to the piper-phonemize C API

Build behaviourits build script reached github.com, release-assets.githubusercontent.comundeclared fetchfetch went into the outputlinked a downloaded binaryfetched outside crates.iocompiled C/C++

744 downloads · GPL-3.0-or-later · cargo

Artifact

file · retained · product · graph v2
1
ChecksDetections
Build behavior
▲ Network activity—
✓ Sensitive data access and transfer—
✓ Cross-process access—
✓ Build file changes—
✓ Build script activity—
▲ Data flow analysis—
✓ Filesystem writes—
✓ Context collection—
Supply chain
✓ Known vulnerabilities—
▲ Build-time dependency advisories—
✓ Dependency advisories—
✓ Declared and observed dependencies—
✓ Dependency and toolchain versions—
Pipeline
✓ Pipeline coverage—

Detections

4
  • Build code opened a network connection
    piper-phonemize-sys 1.5.3 › github.com:443, release-assets.githubusercontent.com:443
    connection to github.com:443, opened by build_script_build-6e583c0f3b860fb3
    high
  • Uncompiled library linked
    libespeak-ng.a › github.com, release-assets.githubusercontent.com
    written under the build script at /home/runner/work/piper-phonemize-sys/piper-phonemize-sys/target/release/build/piper-phonemize-sys-6e583c0f3b860fb3/build_script_build-6e583c0f3b860fb3, which downloaded from github.com, release-assets.githubusercontent.com
    high
  • Uncompiled library linked
    libpiper_phonemize_core.a › github.com, release-assets.githubusercontent.com
    written under the build script at /home/runner/work/piper-phonemize-sys/piper-phonemize-sys/target/release/build/piper-phonemize-sys-6e583c0f3b860fb3/build_script_build-6e583c0f3b860fb3, which downloaded from github.com, release-assets.githubusercontent.com
    high
  • Uncompiled library linked
    libucd.a › github.com, release-assets.githubusercontent.com
    written under the build script at /home/runner/work/piper-phonemize-sys/piper-phonemize-sys/target/release/build/piper-phonemize-sys-6e583c0f3b860fb3/build_script_build-6e583c0f3b860fb3, which downloaded from github.com, release-assets.githubusercontent.com
    high

Detection

high

Build code opened a network connection

subject piper-phonemize-sys 1.5.3 · destination github.com:443, release-assets.githubusercontent.com:443

connection to github.com:443, opened by build_script_build-6e583c0f3b860fb3

connection to release-assets.githubusercontent.com:443, opened by build_script_build-6e583c0f3b860fb3

the opener is the build script at /home/runner/work/piper-phonemize-sys/piper-phonemize-sys/target/release/build/piper-phonemize-sys-6e583c0f3b860fb3/build_script_build-6e583c0f3b860fb3

  1. rustup2448
  2. cargo2448
  3. build_script_build-6e583c0f3b860fb33417at 05:13:08

witnessed · piper-phonemize-sys · rule egress

Detection

high

Uncompiled library linked

subject /home/runner/work/piper-phonemize-sys/piper-phonemize-sys/target/piper-phonemize-prebuilt/piper-phonemize-v1.5.3-linux-x64-static-lib/lib/libespeak-ng.a · destination github.com, release-assets.githubusercontent.com

written under the build script at /home/runner/work/piper-phonemize-sys/piper-phonemize-sys/target/release/build/piper-phonemize-sys-6e583c0f3b860fb3/build_script_build-6e583c0f3b860fb3, which downloaded from github.com, release-assets.githubusercontent.com

Written by build_script_build-6e583c0f3b860fb3 from a network connection without a recorded source compilation

piper-phonemize-sys asked the linker for it: static espeak-ng (target/release/build/piper-phonemize-sys-9fb7750d3a94ae30/output)

  1. rustup2448
  2. cargo2448
  3. build_script_build-6e583c0f3b860fb33417at 05:13:08

witnessed · piper-phonemize-sys · rule object-provenance

Detection

high

Uncompiled library linked

subject /home/runner/work/piper-phonemize-sys/piper-phonemize-sys/target/piper-phonemize-prebuilt/piper-phonemize-v1.5.3-linux-x64-static-lib/lib/libpiper_phonemize_core.a · destination github.com, release-assets.githubusercontent.com

written under the build script at /home/runner/work/piper-phonemize-sys/piper-phonemize-sys/target/release/build/piper-phonemize-sys-6e583c0f3b860fb3/build_script_build-6e583c0f3b860fb3, which downloaded from github.com, release-assets.githubusercontent.com

Written by build_script_build-6e583c0f3b860fb3 from a network connection without a recorded source compilation

piper-phonemize-sys asked the linker for it: static piper_phonemize_core (target/release/build/piper-phonemize-sys-9fb7750d3a94ae30/output)

  1. rustup2448
  2. cargo2448
  3. build_script_build-6e583c0f3b860fb33417at 05:13:08

witnessed · piper-phonemize-sys · rule object-provenance

Detection

high

Uncompiled library linked

subject /home/runner/work/piper-phonemize-sys/piper-phonemize-sys/target/piper-phonemize-prebuilt/piper-phonemize-v1.5.3-linux-x64-static-lib/lib/libucd.a · destination github.com, release-assets.githubusercontent.com

written under the build script at /home/runner/work/piper-phonemize-sys/piper-phonemize-sys/target/release/build/piper-phonemize-sys-6e583c0f3b860fb3/build_script_build-6e583c0f3b860fb3, which downloaded from github.com, release-assets.githubusercontent.com

Written by build_script_build-6e583c0f3b860fb3 from a network connection without a recorded source compilation

piper-phonemize-sys asked the linker for it: static ucd (target/release/build/piper-phonemize-sys-9fb7750d3a94ae30/output)

  1. rustup2448
  2. cargo2448
  3. build_script_build-6e583c0f3b860fb33417at 05:13:08

witnessed · piper-phonemize-sys · rule object-provenance

Network

2 fetches
  • github.com
    piper-phonemize-sys's own build code · build_script_build-6e583c0f3b860fb3 · 9 files · went into an output
    undeclared
  • release-assets.githubusercontent.com
    piper-phonemize-sys's own build code · build_script_build-6e583c0f3b860fb3 · 9 files · went into an output
    undeclared
cargo fetched 4,522 files from static.crates.io

Raw data

capture
229 KB
records
32,062
bytes per record
7.1

Loading a sample of the capture

Want to see more? E-mail us at hello@bitbison.io about your use case.

Dependencies

88 packages, 10 with a build script that ran, 9 doing more than compiling
PackageVersionUsageBuild behaviour
ring0.17.14observedbuild scriptprebuilt objects
windows_aarch64_gnullvm0.52.6observedbuild script, not runprebuilt objects
windows_aarch64_msvc0.52.6observedbuild script, not runprebuilt objects
windows_i686_gnu0.52.6observedbuild script, not runprebuilt objects
windows_i686_gnullvm0.52.6observedbuild script, not runprebuilt objects
windows_i686_msvc0.52.6observedbuild script, not runprebuilt objects
windows_x86_64_gnu0.52.6observedbuild script, not runprebuilt objects
windows_x86_64_gnullvm0.52.6observedbuild script, not runprebuilt objects
windows_x86_64_msvc0.52.6observedbuild script, not runprebuilt objects
bzip2-sys0.1.13+1.0.8observedbuild script
crc32fast1.5.0observedbuild script
displaydoc0.2.6observedproc macro
icu_normalizer_data2.2.0observedbuild script
icu_properties_data2.2.0observedbuild script
ld-linux-x86-64.so.2linkedsystem library
libc0.2.187observedbuild script
libc.so.6linkedsystem library
libgcc_s.so.1linkedsystem library
libm.so.6linkedsystem library
libmvec.so.1linkedsystem library
proc-macro21.0.107observedbuild script
quote1.0.47observedbuild script
rustix1.1.4observedbuild script
rustls0.23.42observedbuild script
serde1.0.229observedbuild script, not run
serde_core1.0.229observedbuild script, not run
serde_derive1.0.229observedproc macro
yoke-derive0.8.2observedproc macro
zerofrom-derive0.1.7observedproc macro
zerovec-derive0.11.3observedproc macro
adler22.0.1observed
base640.22.1observed
bitflags2.13.1observed
bzip2 direct0.4.4observed
cc1.3.0observed
cfg-if1.0.4observed
errno0.3.14observed
filetime0.2.29observed
find-msvc-tools0.1.9observed
flate21.1.9observed
form_urlencoded1.2.2observed
getrandom0.2.17observed
icu_collections2.2.0observed
icu_locale_core2.2.0observed
icu_normalizer2.2.0observed
icu_properties2.2.0observed
icu_provider2.2.0observed
idna1.1.0observed
idna_adapter1.2.2observed
linux-raw-sys0.12.1observed
litemap0.8.2observed
log0.4.33observed
miniz_oxide0.8.9observed
once_cell1.21.4observed
percent-encoding2.3.2observed
pkg-config0.3.33observed
potential_utf0.1.5observed
rustls-pki-types1.15.0observed
rustls-webpki0.103.13observed
shlex2.0.1observed
simd-adler320.3.10observed
smallvec1.15.2observed
stable_deref_trait1.2.1observed
subtle2.6.1observed
syn2.0.119observed
syn3.0.2observed
synstructure0.13.2observed
tar direct0.4.46observed
tinystr0.8.3observed
unicode-ident1.0.24observed
untrusted0.9.0observed
ureq direct2.12.1observed
url2.5.8observed
utf8_iter1.0.4observed
wasi0.11.1+wasi-snapshot-preview1observed
webpki-roots0.26.11observed
webpki-roots1.0.9observed
windows-link0.2.1observed
windows-sys0.52.0observed
windows-sys0.61.2observed
windows-targets0.52.6observed
writeable0.6.3observed
xattr1.6.1observed
yoke0.8.3observed
zerofrom0.1.8observed
zeroize1.9.0observed
zerotrie0.2.4observed
zerovec0.11.6observed

1 of 1 jobs captured: build-test success · Generated 2026-10-12 · run f2f5b531-4446-4161-a3ec-232e08fa6f2a

analysis 0.1.0 · 2026-10-11 · d6246d3 · graph v2