Artifact
- libqiongli.rlibfile · retained · product
- qionglibinary · retained · product 5
- qiongli-update-helperbinary · retained · product 5
- qlbinary · retained · product 5
Checks
12 of 14 clear Known vulnerabilities Dependency advisoriesBuild behavior✓✓✓✓✓✓✓✓
Supply chain▲✓▲✓✓
Pipeline✓
Detections
0No detections
No abnormal activity detected across 80K flows.
Network
1 peers- static.crates.io:8080 ecosystem
| Dependencies315 | Build behaviour |
|---|---|
| adobe-cmap-parser0.4.1 | |
| aes0.8.4 | |
| agent-client-protocol2.1.0 | |
| agent-client-protocol-derive2.1.0 | |
| agent-client-protocol-schema1.7.0 | |
| anyhow1.0.104 | |
| async-channel2.5.0 | |
| async-io2.6.0 | |
| async-lock3.4.2 | |
| async-process2.5.0 | |
| async-signal0.2.14 | |
| async-task4.7.1 | |
| atomic-waker1.1.2 | |
| base640.22.1 | |
| bitflags2.13.0 | |
| block-buffer0.10.4 | |
| block-buffer0.12.1 | |
| block-padding0.3.3 | |
| blocking1.6.2 | |
| bytes1.12.1 | |
| cbc0.1.2 | |
| cc1.2.67 | |
| cff-parser0.2.0 | |
| cfg-if1.0.4 | |
| chacha200.10.2 | |
| cipher0.4.4 | |
| concurrent-queue2.5.0 | |
| convert_case0.10.0 | |
| core_detect1.0.0 | |
| cpufeatures0.2.17 | |
| cpufeatures0.3.0 | |
| crc32fast1.5.0 | |
| crossbeam-utils0.8.22 | |
| crypto-common0.1.7 | |
| crypto-common0.2.2 | |
| curve25519-dalek5.0.0 | |
| curve25519-dalek-derive0.1.1 | |
| darling0.23.0 | |
| darling_core0.23.0 | |
| darling_macro0.23.0 | |
| derive_more2.1.1 | |
| derive_more-impl2.1.1 | |
| digest0.10.7 | |
| digest0.11.3 | |
| displaydoc0.2.6 | |
| dunce1.0.5 | |
| dyn-clone1.0.20 | |
| ecb0.1.2 | |
| ed255193.0.0 | |
| ed25519-dalek3.0.0 | |
| encoding_rs0.8.42 | |
| equivalent1.0.2 | |
| errno0.3.14 | |
| euclid0.20.14 | |
| event-listener5.4.1 | |
| event-listener-strategy0.5.4 | |
| fastrand2.4.1 | |
| fdeflate0.3.7 | |
| find-msvc-tools0.1.9 | |
| fixedbitset0.5.7 | |
| flate21.1.9 | |
| form_urlencoded1.2.2 | |
| futures0.3.32 | |
| futures-channel0.3.34 | |
| futures-concurrency7.7.1 | |
| futures-core0.3.34 | |
| futures-executor0.3.32 | |
| futures-io0.3.34 | |
| futures-lite2.6.1 | |
| futures-macro0.3.34 | |
| futures-sink0.3.34 | |
| futures-task0.3.34 | |
| futures-util0.3.34 | |
| generic-array0.14.7 | |
| getrandom0.2.17 | |
| getrandom0.3.4 | |
| getrandom0.4.3 | |
| hashbrown0.17.1 | |
| heck0.5.0 | |
| http1.4.2 | |
| http-body1.1.0 | |
| http-body-util0.1.4 | |
| httparse1.10.1 | |
| hybrid-array0.4.13 | |
| hyper1.10.1 | |
| hyper-rustls0.27.9 | |
| hyper-util0.1.20 | |
| icu_collections2.2.0 | |
| icu_locale_core2.2.0 | |
| icu_normalizer2.2.0 | |
| icu_normalizer_data2.2.0 | |
| icu_properties2.2.0 | |
| icu_properties_data2.2.0 | |
| icu_provider2.2.0 | |
| ident_case1.0.1 | |
| idna1.1.0 | |
| idna_adapter1.2.2 | |
| indexmap2.14.0 | |
| inout0.1.4 | |
| ipnet2.12.0 | |
| is-docker0.2.0 | |
| is-wsl0.4.0 | |
| itoa1.0.18 | |
| ld-linux-x86-64.so.2 | |
| libc0.2.186 | |
| libc.so.6 | |
| libgcc_s.so.1 | |
| libm.so.6 | |
| libmvec.so.1 | |
| linux-raw-sys0.12.1 | |
| litemap0.8.2 | |
| log0.4.33 | |
| lopdf0.42.0 | |
| md-50.10.6 | |
| memchr2.8.3 | |
| miniz_oxide0.8.9 | |
| mio1.2.2 | |
| multiversion_no_op1.0.0 | |
| nom8.0.0 | |
| num-traits0.2.19 | |
| once_cell1.21.4 | |
| open5.4.0 | |
| parking2.2.1 | |
| pdf-extract0.12.1 | |
| percent-encoding2.3.2 | |
| pin-project1.1.13 | |
| pin-project-internal1.1.13 | |
| pin-project-lite0.2.17 | |
| piper0.2.5 | |
| png0.18.1 | |
| polling3.11.0 | |
| pom1.1.0 | |
| potential_utf0.1.5 | |
| proc-macro21.0.106 | |
| qiongli-bounded-alloc2.5.3 | |
| qiongli-config2.5.3 | |
| qiongli-content2.5.3 | |
| qiongli-execution2.5.3 | |
| qiongli-platform2.5.3 | |
| qiongli-project2.5.3 | |
| qiongli-runtime2.5.3 | |
| qiongli-ui2.5.3 | |
| quick-xml0.36.2 | |
| quote1.0.46 | |
| rand0.10.2 | |
| rand_core0.10.1 | |
| rangemap1.8.0 | |
| ref-cast1.0.26 | |
| ref-cast-impl1.0.26 | |
| reqwest0.12.28 | |
| ring0.17.14 | |
| rustc-hash2.1.3 | |
| rustix1.1.4 | |
| rustls0.23.42 | |
| rustls-pki-types1.15.0 | |
| rustls-webpki0.103.13 | |
| ryu1.0.23 | |
| ryu-js1.0.3 | |
| same-file1.0.6 | |
| schemars1.2.1 | |
| schemars_derive1.2.1 | |
| scopeguard1.2.0 | |
| semver1.0.28 | |
| serde1.0.228 | |
| serde_core1.0.228 | |
| serde_derive1.0.228 | |
| serde_derive_internals0.29.1 | |
| serde_json1.0.150 | |
| serde_json_canonicalizer0.3.2 | |
| serde_urlencoded0.7.1 | |
| serde_with3.21.0 | |
| serde_with_macros3.21.0 | |
| sha20.10.9 | |
| sha20.11.0 | |
| shell-words1.1.1 | |
| shlex2.0.1 | |
| signal-hook-registry1.4.8 | |
| signature3.0.0 | |
| simd-adler320.3.9 | |
| simdutf80.1.5 | |
| slab0.4.12 | |
| smallvec1.15.2 | |
| socket20.6.5 | |
| stable_deref_trait1.2.1 | |
| stringprep0.1.5 | |
| strsim0.11.1 | |
| strum0.28.0 | |
| strum_macros0.28.0 | |
| subtle2.6.1 | |
| syn2.0.118 | |
| syn3.0.0 | |
| sync_wrapper1.0.2 | |
| synstructure0.13.2 | |
| thiserror1.0.69 | |
| thiserror2.0.18 | |
| thiserror-impl1.0.69 | |
| thiserror-impl2.0.18 | |
| tinystr0.8.3 | |
| tinyvec1.12.0 | |
| tinyvec_macros0.1.1 | |
| tokio1.52.3 | |
| tokio-rustls0.26.4 | |
| tower0.5.3 | |
| tower-http0.6.11 | |
| tower-layer0.3.3 | |
| tower-service0.3.3 | |
| tracing0.1.44 | |
| tracing-attributes0.1.31 | |
| tracing-core0.1.36 | |
| try-lock0.2.5 | |
| ttf-parser0.25.1 | |
| type1-encoding-parser0.1.1 | |
| typenum1.20.1 | |
| unicode-bidi0.3.18 | |
| unicode-ident1.0.24 | |
| unicode-normalization0.1.25 | |
| unicode-properties0.1.4 | |
| unicode-segmentation1.13.3 | |
| unicode-xid0.2.6 | |
| untrusted0.9.0 | |
| url2.5.8 | |
| utf8_iter1.0.4 | |
| uuid1.23.5 | |
| want0.3.1 | |
| webpki-roots1.0.8 | |
| weezl0.1.12 | |
| writeable0.6.3 | |
| yoke0.8.3 | |
| yoke-derive0.8.2 | |
| zerofrom0.1.8 | |
| zerofrom-derive0.1.7 | |
| zeroize1.9.0 | |
| zerotrie0.2.4 | |
| zerovec0.11.6 | |
| zerovec-derive0.11.3 | |
| zmij1.0.22 | |
| adler22.0.1 | |
| postscript0.14.1 | |
| android_system_properties0.1.5 | |
| autocfg1.5.1 | |
| bs580.5.1 | |
| bumpalo3.20.3 | |
| cfg_aliases0.2.1 | |
| chrono0.4.45 | |
| core-foundation0.10.1 | |
| core-foundation-sys0.8.7 | |
| deranged0.5.8 | |
| fiat-crypto0.3.0 | |
| foreign-types0.3.2 | |
| foreign-types-shared0.1.1 | |
| hashbrown0.12.3 | |
| hermit-abi0.5.2 | |
| hex0.4.3 | |
| hyper-tls0.6.0 | |
| iana-time-zone0.1.65 | |
| iana-time-zone-haiku0.1.2 | |
| indexmap1.9.3 | |
| js-sys0.3.103 | |
| lru-slab0.1.2 | |
| native-tls0.2.18 | |
| num-conv0.2.2 | |
| openssl0.10.81 | |
| openssl-macros0.1.1 | |
| openssl-probe0.2.1 | |
| openssl-sys0.9.117 | |
| pkg-config0.3.33 | |
| powerfmt0.2.0 | |
| qiongli-windows-security2.5.3 | |
| quinn0.11.11 | |
| quinn-proto0.11.16 | |
| quinn-udp0.5.15 | |
| r-efi5.3.0 | |
| r-efi6.0.0 | |
| rand_pcg0.10.2 | |
| rustc_version0.4.1 | |
| rustversion1.0.23 | |
| schannel0.1.29 | |
| schemars0.9.0 | |
| security-framework3.7.0 | |
| security-framework-sys2.17.0 | |
| tempfile3.27.0 | |
| time0.3.53 | |
| time-core0.1.9 | |
| time-macros0.2.31 | |
| tokio-native-tls0.3.1 | |
| vcpkg0.2.15 | |
| version_check0.9.5 | |
| wasi0.11.1+wasi-snapshot-preview1 | |
| wasip21.0.4+wasi-0.2.12 | |
| wasm-bindgen0.2.126 | |
| wasm-bindgen-futures0.4.76 | |
| wasm-bindgen-macro0.2.126 | |
| wasm-bindgen-macro-support0.2.126 | |
| wasm-bindgen-shared0.2.126 | |
| web-sys0.3.103 | |
| web-time1.1.0 | |
| winapi-util0.1.11 | |
| windows-core0.62.2 | |
| windows-implement0.60.2 | |
| windows-interface0.59.3 | |
| windows-link0.2.1 | |
| windows-result0.4.1 | |
| windows-strings0.5.1 | |
| windows-sys0.52.0 | |
| windows-sys0.61.2 | |
| windows-targets0.52.6 | |
| windows_aarch64_gnullvm0.52.6 | |
| windows_aarch64_msvc0.52.6 | |
| windows_i686_gnu0.52.6 | |
| windows_i686_gnullvm0.52.6 | |
| windows_i686_msvc0.52.6 | |
| windows_x86_64_gnu0.52.6 | |
| windows_x86_64_gnullvm0.52.6 | |
| windows_x86_64_msvc0.52.6 | |
| wit-bindgen0.57.1 |
| Vulnerabilities5 | Package | Version | Fix | Severity | Title | Reach |
|---|---|---|---|---|---|---|
| RUSTSEC-2026-0194 | quick-xml | 0.36.2 | >=0.41.0 | high | Quadratic run time when checking a start tag for duplicate attribute names | retained |
| RUSTSEC-2026-0195 | quick-xml | 0.36.2 | >=0.41.0 | high | Unbounded namespace-declaration allocation in `NsReader` enables memory-exhaustion denial of service | retained |
| GHSA-2mjx-qc3c-rqvc | rustls | 0.23.42 | >=0.23.45 | medium | Rustls: TLS 1.3 handshake messages incorrectly accepted across encryption level boundaries | retained |
| RUSTSEC-2026-0221 | event-listener | 5.4.1 | >=5.4.2 | low | `event-listener` allows `!Send` tags to cross thread boundaries via `StackSlot` | retained |
| RUSTSEC-2026-0192 | ttf-parser | 0.25.1 | none published | low | `ttf-parser` is unmaintained | retained |
1 of 1 jobs captured: build-test success · Generated 2026-10-09 · run 2b1fcf0e-a39a-483a-afaa-680bdb55a6ed
analysis 0.1.0 · 2026-10-08 · c0b8b6b · graph v1