cargo / rust-hf-downloader / 2.17.0

rust-hf-downloader 2.17.0

12 vulnerabilities

processes: 441
operations: 55K
packages: 225
compiler runs: 269
connections: 1
job time: 3m 41s
capture: 754 KB
records: 105K
bytes / record: 7.2

Build behaviourcompiled C/C++

run 0032e0b9-9451-42af-af63-bd064d89fd17 · built 2026-10-15 · complete Release

Artifact

binary · retained · product · graph v2

Checks

11 of 14 clear Known vulnerabilities Build-time dependency advisories +1 more

Build behavior✓✓✓✓✓✓✓✓

Supply chain▲▲▲✓✓

Pipeline✓

Detections

No detections

No abnormal activity detected across 55K flows.

Network

1 peers

static.crates.io:8080 the package manager · cargo (rust-hf-downloader) via crates.io · 17,425 files · went into an output ecosystem

Dependencies257	Build behaviour
addr2line0.21.0
adler1.0.2
aho-corasick1.1.4
allocator-api20.2.21
anstyle1.0.14
backtrace0.3.71	build script
base640.21.7
bitflags2.10.0
block-buffer0.10.4
bytes1.11.0
cassowary0.3.0
castaway0.2.4
cfg-if1.0.4
clap4.5.60
clap_builder4.5.60
clap_lex1.1.1
color-eyre0.6.5
color-spantrace0.3.0	build script
compact_str0.8.1
cpufeatures0.2.17
crc32fast1.5.2	build script
crossterm0.28.1
crypto-common0.1.7
digest0.10.7
dirs6.0.0
dirs-sys0.5.0
either1.15.0
encoding_rs0.8.35
equivalent1.0.2
eyre0.6.12	build script
fastrand2.5.0
filetime0.2.29
flate21.1.10
fnv1.0.7
foldhash0.1.5
form_urlencoded1.2.2
futures0.3.31
futures-channel0.3.31
futures-core0.3.31
futures-executor0.3.31
futures-io0.3.31
futures-sink0.3.31
futures-task0.3.31
futures-util0.3.31
generic-array0.14.7	build script
getrandom0.2.16
getrandom0.4.3	build script
gimli0.28.1
h20.3.27
hashbrown0.14.5
hashbrown0.15.5
hex0.4.3
http0.2.12
http-body0.4.6
httparse1.10.1	build script
httpdate1.0.3
hyper0.14.32
hyper-rustls0.24.2
idna0.4.0
indenter0.3.4
indexmap2.2.6
ipnet2.11.0
itertools0.13.0
itoa1.0.15
lazy_static1.5.0
ld-linux-x86-64.so.2	system library
libc0.2.177	build script
libc.so.6	system library
libgcc_s.so.1	system library
libm.so.6	system library
libmvec.so.1	system library
linux-raw-sys0.11.0
linux-raw-sys0.4.15
lock_api0.4.14
log0.4.28
lru0.12.5
memchr2.7.6
mime0.3.17
miniz_oxide0.7.4
miniz_oxide0.9.1
mio1.1.0
object0.32.2
once_cell1.21.3
option-ext0.2.0
owo-colors4.2.3	build script
parking_lot0.12.5
parking_lot_core0.9.12	build script
percent-encoding2.3.2
pin-project-lite0.2.16
pin-utils0.1.0
ratatui0.28.1
ratatui0.29.0
regex1.12.2
regex-automata0.4.13
regex-syntax0.8.8
reqwest0.11.27
ring0.17.14	build scriptprebuilt objects
rustc-demangle0.1.26
rustix0.38.44	build script
rustix1.1.3	build script
rustls0.21.12	build script
rustls-pemfile1.0.4
rustls-webpki0.101.7
ryu1.0.20
scopeguard1.2.0
sct0.7.1
self-replace1.5.0
serde1.0.228	build script
serde_core1.0.228	build script
serde_json1.0.145	build script
serde_spanned0.6.9
serde_urlencoded0.7.1
sha10.10.7
sha20.10.9
sharded-slab0.1.7
signal-hook0.3.18	build script
signal-hook-mio0.2.5
signal-hook-registry1.4.6
simd-adler320.3.10
slab0.4.11
smallvec1.15.1
socket20.5.10
socket20.6.1
static_assertions1.1.0
strsim0.11.1
strum0.26.3
sync_wrapper0.1.2
tar0.4.46
tempfile3.25.0
thread_local1.1.9
tinyvec1.10.0
tinyvec_macros0.1.1
tokio1.48.0
tokio-rustls0.24.1
tokio-util0.7.17
toml0.8.19
toml_datetime0.6.11
toml_edit0.22.20
tower-service0.3.3
tracing0.1.41
tracing-core0.1.34
tracing-error0.2.1
tracing-subscriber0.3.20
try-lock0.2.5
tui-input0.10.1
typenum1.19.0	build script
unicode-bidi0.3.18
unicode-normalization0.1.25
unicode-segmentation1.12.0
unicode-truncate1.1.0
unicode-width0.1.14
unicode-width0.2.0
untrusted0.9.0
url2.4.1
urlencoding2.1.3
want0.3.1
webpki-roots0.25.4
winnow0.6.26
xattr1.6.1
adler22.0.1
console0.16.6
insta1.48.0
similar2.7.0
strip-ansi-escapes0.2.1
unicode-ident1.0.22
vte0.14.1
arbitrary1.4.2
bitflags1.3.2
bumpalo3.19.0
cc1.2.47
clap_derive4.5.55	proc macro
core-foundation0.9.4
core-foundation-sys0.8.7
crossbeam-utils0.8.23	build script, not run
crossterm_winapi0.9.1
darling0.20.11
darling_core0.20.11
darling_macro0.20.11	proc macro
derive_arbitrary1.4.2	proc macro
displaydoc0.2.7	proc macro
encode_unicode1.0.0
errno0.3.14
find-msvc-tools0.1.5
futures-macro0.3.31	proc macro
heck0.5.0
ident_case1.0.1
idna0.5.0
indoc2.0.7	proc macro
instability0.3.9	build scriptproc macro
js-sys0.3.82
libredox0.1.25
paste1.0.15	build scriptproc macro
proc-macro21.0.103	build script
quote1.0.42	build script
r-efi6.0.0
redox_syscall0.5.18
redox_users0.5.3
rustversion1.0.22	build scriptproc macro
serde_derive1.0.228	proc macro
shlex1.3.0
strum_macros0.26.4	proc macro
syn2.0.110
syn3.0.6
system-configuration0.5.1
system-configuration-sys0.5.0	build script, not run
thiserror2.0.21	build script, not run
thiserror-impl2.0.21	proc macro
tokio-macros2.6.0	proc macro
valuable0.1.1	build script, not run
version_check0.9.5
wasi0.11.1+wasi-snapshot-preview1
wasm-bindgen0.2.105	build script, not run
wasm-bindgen-futures0.4.55
wasm-bindgen-macro0.2.105	proc macro
wasm-bindgen-macro-support0.2.105
wasm-bindgen-shared0.2.105	build script, not run
wasm-streams0.4.2
web-sys0.3.82
winapi0.3.9	build script, not run
winapi-i686-pc-windows-gnu0.4.0	build script, not runprebuilt objects
winapi-x86_64-pc-windows-gnu0.4.0	build script, not runprebuilt objects
windows-link0.2.1
windows-sys0.48.0
windows-sys0.52.0
windows-sys0.59.0
windows-sys0.60.2
windows-sys0.61.2
windows-targets0.48.5
windows-targets0.52.6
windows-targets0.53.5
windows_aarch64_gnullvm0.48.5	build script, not runprebuilt objects
windows_aarch64_gnullvm0.52.6	build script, not runprebuilt objects
windows_aarch64_gnullvm0.53.1	build script, not runprebuilt objects
windows_aarch64_msvc0.48.5	build script, not runprebuilt objects
windows_aarch64_msvc0.52.6	build script, not runprebuilt objects
windows_aarch64_msvc0.53.1	build script, not runprebuilt objects
windows_i686_gnu0.48.5	build script, not runprebuilt objects
windows_i686_gnu0.52.6	build script, not runprebuilt objects
windows_i686_gnu0.53.1	build script, not runprebuilt objects
windows_i686_gnullvm0.52.6	build script, not runprebuilt objects
windows_i686_gnullvm0.53.1	build script, not runprebuilt objects
windows_i686_msvc0.48.5	build script, not runprebuilt objects
windows_i686_msvc0.52.6	build script, not runprebuilt objects
windows_i686_msvc0.53.1	build script, not runprebuilt objects
windows_x86_64_gnu0.48.5	build script, not runprebuilt objects
windows_x86_64_gnu0.52.6	build script, not runprebuilt objects
windows_x86_64_gnu0.53.1	build script, not runprebuilt objects
windows_x86_64_gnullvm0.48.5	build script, not runprebuilt objects
windows_x86_64_gnullvm0.52.6	build script, not runprebuilt objects
windows_x86_64_gnullvm0.53.1	build script, not runprebuilt objects
windows_x86_64_msvc0.48.5	build script, not runprebuilt objects
windows_x86_64_msvc0.52.6	build script, not runprebuilt objects
windows_x86_64_msvc0.53.1	build script, not runprebuilt objects
winreg0.50.0
zip2.4.2	build script, not run
zlib-rs0.6.8
zopfli0.8.3

Vulnerabilities12	Package	Version	Fix	Severity	Title	Reach
RUSTSEC-2026-0258	h2	0.3.27	>=0.4.16	high	h2 unbounded empty DATA frames	retained
RUSTSEC-2026-0346	rustls	0.21.12	>=0.23.46	high	`Debug` impls for client session values expose TLS secrets	retained
RUSTSEC-2026-0349	rustls	0.21.12	>=0.23.46	high	Unauthenticated ServerHello can downgrade later connections to classical key exchange	retained
CVE-2026-93599	rustls-webpki	0.101.7	>=0.103.13	high	rustls-webpki: Denial of service via panic on malformed CRL BIT STRING	retained
CVE-2026-25541	bytes	1.11.0	>=1.11.1	medium	bytes has integer overflow in BytesMut::reserve	retained
CVE-2024-12224	idna	0.4.0, 0.5.0	>=1.0.0	medium	`idna` accepts Punycode labels that do not produce any non-ASCII when decoded	retained
RUSTSEC-2025-0056	adler	1.0.2	none published	low	adler crate is unmaintained, use adler2 instead	retained
GHSA-rhfx-m35p-ff5j	lru	0.12.5	>=0.16.3	low	`IterMut` violates Stacked Borrows by invalidating internal pointer	retained
RUSTSEC-2026-0253	lru	0.12.5	>=0.18.2	low	Potential use-after-free due to lack of panic safety in `LruCache::pop()`	retained
RUSTSEC-2025-0134	rustls-pemfile	1.0.4	none published	low	rustls-pemfile is unmaintained	retained
CVE-2026-93600	rustls-webpki	0.101.7	>=0.103.12	low	webpki: Name constraints for URI names were incorrectly accepted	retained
CVE-2026-93601	rustls-webpki	0.101.7	>=0.103.12	low	webpki: Name constraints were accepted for certificates asserting a wildcard name	retained

1 of 1 jobs captured: build-test success · Generated 2026-10-15 · run 0032e0b9-9451-42af-af63-bd064d89fd17

analysis 0.1.0 · 2026-10-15 · 20a5b2e · graph v2