Skip to content
Open-Source Registry

cargo / rightkit-qts-ggml / 0.1.1

rightkit-qts-ggml 0.1.1

bitbison: clean, with notes, behavior clean, dependencies clean, posture notes, pipeline clean, 1 of 1 jobs captured 1 note
processes
241
operations
21K
packages
36
compiler runs
37
connections
1
job time
1m 05s
capture
173 KB
records
33K
bytes / record
5.2

Build behaviourcompiled C/C++

run 9aa21c47-3851-4409-91ca-0641da7024b1 · built 2026-10-09 · complete

Artifact

file · retained · product · graph v1
1

Checks

14 of 15 clear Binary hardening
Build behavior✓✓✓✓✓✓✓✓
Supply chain✓✓✓✓✓
Build hardening▲
Pipeline✓

Detections

1
  • Build is missing recommended hardening flags
    src · posture
    low

Detection

lowinferredposture

Build is missing recommended hardening flags

Missing hardening flags

Subject
/home/runner/.cargo/registry/src/index.crates.io-f7c75c5af8568ae3/rightkit-qts-ggml-sys-0.1.0/vendor/ggml/src
Jobs
build-test
Rule
hardening · ggml

Evidence

  1. Hardening flag missingcause

    stack-protector: missing from all 24 eligible compile commands; add -fstack-protector-strong

  2. Hardening flag missingcause

    fortify: missing from all 24 eligible compile commands; add -D_FORTIFY_SOURCE=2 (needs -O1+)

  3. Hardening flag missingcause

    stack-clash-protection: missing from all 24 eligible compile commands; add -fstack-clash-protection

  4. Hardening flag missingcause

    pie: missing from all 24 eligible compile commands; add -fPIE (with -pie at link)

  5. Hardening flag missingcause

    cf-protection: missing from all 24 eligible compile commands; add -fcf-protection=full (x86-64) / -mbranch-protection=standard (aarch64)

  6. Hardening flag missingcause

    format-security: missing from all 24 eligible compile commands; add -Wformat -Werror=format-security

Processes

build-test

cargo›cargo

Ran
/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo fetch --locked
Invoked by
cargo fetch --locked
Lineage · 2 processes
  1. cargocargo fetch --locked2427
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo fetch --locked2434

Remediation

Enable the listed flags for supported targets, rebuild, and verify the resulting compile commands.

Network

1 peers
  • static.crates.io:8080 the package manager · cargo (claude) via crates.io · 1,897 files · went into an output ecosystem
Dependencies37Build behaviour
aho-corasick1.1.4
bindgen0.72.1build script
bitflags2.13.0
cc1.2.67
cexpr0.6.0
cfg-if1.0.4
clang-sys1.9.1build script
cmake0.1.58
either1.16.0
find-msvc-tools0.1.9
glob0.3.3
itertools0.13.0
ld-linux-x86-64.so.2system library
libc0.2.186build script
libc.so.6system library
libgcc_s.so.1system library
libgomp.so.1system library
libloading0.8.9
libm.so.6system library
libmvec.so.1system library
log0.4.33
memchr2.8.3
minimal-lexical0.2.1
nom7.1.3
prettyplease0.2.37build script
proc-macro21.0.106build script
quote1.0.46build script
regex1.13.0
regex-automata0.4.18
regex-syntax0.8.11
rightkit-qts-ggml-sys0.1.0build scriptruns toolsgit
rustc-hash2.1.3
shlex1.3.0
shlex2.0.1
syn2.0.118
unicode-ident1.0.24
windows-link0.2.1

Raw data

capture
173 KB
records
33,369
bytes per record
5.2

Loading a sample of the capture

Want to see more? E-mail us at hello@bitbison.io about your use case.

1 of 1 jobs captured: build-test success · Generated 2026-10-09 · run 9aa21c47-3851-4409-91ca-0641da7024b1

analysis 0.1.0 · 2026-10-08 · c0b8b6b · graph v1