Artifact
- libquarb_lsp.rlibfile · retained · product
- quarb_lspbinary · retained · product 2
| Checks | Detections |
|---|---|
| Build behavior | |
| ✓ Network activity | — |
| ✓ Sensitive data access and transfer | — |
| ✓ Cross-process access | — |
| ✓ Build file changes | — |
| ✓ Build script activity | — |
| ✓ Data flow analysis | — |
| ✓ Filesystem writes | — |
| ✓ Context collection | — |
| Supply chain | |
| ▲ Known vulnerabilities | — |
| ✓ Build-time dependency advisories | — |
| ✓ Dependency advisories | — |
| ✓ Declared and observed dependencies | — |
| ✓ Dependency and toolchain versions | — |
| Pipeline | |
| ✓ Pipeline coverage | — |
Detections
0No detections
No abnormal activity detected across 17K flows.
Network
0 peerscargo fetched 3,588 files from static.crates.io
| Vulnerable dependencies2 | Package | Version | Fix | Severity | Title | Reach |
|---|---|---|---|---|---|---|
| RUSTSEC-2026-0194 | quick-xml | 0.39.4 | >=0.41.0 | high | Quadratic run time when checking a start tag for duplicate attribute names | retained |
| RUSTSEC-2026-0195 | quick-xml | 0.39.4 | >=0.41.0 | high | Unbounded namespace-declaration allocation in `NsReader` enables memory-exhaustion denial of service | retained |
Dependencies
85 packages, 11 with a build script that ran, 0 doing more than compiling| Package | Version | Usage | Build behaviour | |
|---|---|---|---|---|
| anyhow direct | 1.0.104 | linked | build script | |
| displaydoc | 0.2.6 | observed | proc macro | |
| icu_normalizer_data | 2.2.0 | linked | build script | |
| icu_properties_data | 2.2.0 | linked | build script | |
| ld-linux-x86-64.so.2 | linked | system library | ||
| libc | 0.2.186 | linked | build script | |
| libc.so.6 | linked | system library | ||
| libgcc_s.so.1 | linked | system library | ||
| libm.so.6 | linked | system library | ||
| libmvec.so.1 | linked | system library | ||
| proc-macro2 | 1.0.107 | observed | build script | |
| quote | 1.0.47 | observed | build script | |
| serde direct | 1.0.229 | linked | build script | |
| serde_core | 1.0.229 | linked | build script | |
| serde_derive | 1.0.229 | observed | proc macro | |
| serde_json direct | 1.0.150 | linked | build script | |
| thiserror | 2.0.21 | linked | build script | |
| thiserror-impl | 2.0.21 | observed | proc macro | |
| yoke-derive | 0.8.2 | observed | proc macro | |
| zerofrom-derive | 0.1.7 | observed | proc macro | |
| zerovec-derive | 0.11.3 | observed | proc macro | |
| zmij | 1.0.23 | linked | build script | |
| aho-corasick | 1.1.4 | linked | ||
| bstr | 1.13.0 | linked | ||
| cfg-if | 1.0.4 | linked | ||
| colligo | 0.1.1 | linked | ||
| encoding_rs | 0.8.35 | linked | ||
| equivalent | 1.0.2 | linked | ||
| form_urlencoded | 1.2.2 | linked | ||
| globset | 0.4.19 | linked | ||
| hashbrown | 0.17.1 | linked | ||
| icu_collections | 2.2.0 | linked | ||
| icu_locale_core | 2.2.0 | linked | ||
| icu_normalizer | 2.2.0 | linked | ||
| icu_properties | 2.2.0 | linked | ||
| icu_provider | 2.2.0 | linked | ||
| idna | 1.1.0 | linked | ||
| idna_adapter | 1.2.2 | linked | ||
| indexmap | 2.14.0 | linked | ||
| itoa | 1.0.18 | linked | ||
| kaiv | 0.15.0 | linked | ||
| kaiv | 0.8.0 | linked | ||
| kaivrpc direct | 0.1.0 | linked | ||
| litemap | 0.8.2 | linked | ||
| log | 0.4.33 | linked | ||
| memchr | 2.8.3 | linked | ||
| percent-encoding | 2.3.2 | linked | ||
| potential_utf | 0.1.5 | linked | ||
| quarb direct | 0.36.0 | linked | ||
| quarb-time | 0.36.0 | linked | ||
| quarb-trace | 0.36.0 | linked | ||
| quick-xml | 0.39.4 | linked | ||
| regex | 1.13.1 | linked | ||
| regex-automata | 0.4.16 | linked | ||
| regex-syntax | 0.8.11 | linked | ||
| rust-stemmers | 1.2.0 | linked | ||
| ryu | 1.0.23 | linked | ||
| serde_spanned | 1.1.1 | linked | ||
| serde_yaml_ng | 0.10.0 | linked | ||
| smallvec | 1.15.2 | linked | ||
| stable_deref_trait | 1.2.1 | linked | ||
| strsim | 0.11.1 | linked | ||
| syn | 2.0.119 | observed | ||
| syn | 3.0.0 | observed | ||
| syndesmos | 0.3.1 | linked | ||
| synstructure | 0.13.2 | observed | ||
| tinystr | 0.8.3 | linked | ||
| tinyvec | 1.12.0 | linked | ||
| tinyvec_macros | 0.1.1 | linked | ||
| toml | 1.1.3+spec-1.1.0 | linked | ||
| toml_datetime | 1.1.1+spec-1.1.0 | linked | ||
| toml_parser | 1.1.2+spec-1.1.0 | linked | ||
| toml_writer | 1.1.2+spec-1.1.0 | linked | ||
| unicode-ident | 1.0.24 | observed | ||
| unicode-normalization | 0.1.25 | linked | ||
| unicode-segmentation | 1.13.3 | linked | ||
| unsafe-libyaml | 0.2.11 | linked | ||
| url | 2.5.8 | linked | ||
| utf8_iter | 1.0.4 | linked | ||
| winnow | 1.0.4 | linked | ||
| writeable | 0.6.3 | linked | ||
| yoke | 0.8.3 | linked | ||
| zerofrom | 0.1.8 | linked | ||
| zerotrie | 0.2.4 | linked | ||
| zerovec | 0.11.6 | linked |
1 of 1 jobs captured: build-test success · Generated 2026-10-11 · run bdfefb23-9d1f-4a55-a9bd-e8fb28904666
analysis 0.1.0 · 2026-10-10 · ce2b8d5 · graph v2