Skip to content
Open-Source Registry

cargo / rustvani / 0.4.0-dev.11

rustvani 0.4.0-dev.11

bitbison: flagged, behavior flagged, dependencies notes, posture not checked, pipeline clean, 1 of 1 jobs captured 2 detections
processes
414
operations
73K
packages
309
compiler runs
215
connections
4
job time
3m 51s
capture
954 KB
records
133K
bytes / record
7.2

Build behaviourits build script reached github.com, smartturn-rustvani.s3.ap-south-1.amazonaws.comits build script ran curl, wgetundeclared fetchfetch went into the outputfetched outside crates.iocompiled C/C++

run 093a0bc0-e396-46ae-92fd-3f19dea1fcc3 · built 2026-10-14 · complete

Artifact

file · retained · product · graph v2
1

Checks

12 of 14 clear Network activity Build-time dependency advisories
Build behavior▲✓✓✓✓✓✓✓
Supply chain✓▲✓✓✓
Pipeline✓

Detections

2
  • Build script reached cdn.pyke.io
    ort-sys 2.0.0-rc.10 › cdn.pyke.io:443
    medium
  • Build script reached github.com +1
    rustvani 0.4.0-dev.11 › smartturn-rustvani.s3.ap-south-1.amazonaws.com:443, github.com:443
    medium

Detection

mediumwitnessed

Build script reached cdn.pyke.io

Unexpected network connection

Subject
ort-sys 2.0.0-rc.10
Destination
cdn.pyke.io:443
Reaches
Jobs
build-test
Rule
egress

Evidence

  1. Connection outside the process’s allowed destinationscause

    connection to cdn.pyke.io:443, opened by build-script-build

    subject cdn.pyke.io:443

    by /home/runner/work/rustvani/rustvani/target/release/build/ort-sys-fc3d2f70e439770e/build-script-build

  2. What a build script's fetch becamesupport

    1 file came down; the build compiled or linked libonnxruntime.a

  3. Connection opened by a build script or child processsupport

    the opener is the build script at /home/runner/work/rustvani/rustvani/target/release/build/ort-sys-fc3d2f70e439770e/build-script-build

  4. Build script fetched what its crate documents it fetchessupport

    ort-sys's build script fetches a prebuilt ONNX Runtime from cdn.pyke.io: ort's default `download-binaries` feature fetches pyke's prebuilt from its CDN

Processes

build-test

cargo›cargo›build-script-build

Ran
/home/runner/work/rustvani/rustvani/target/release/build/ort-sys-fc3d2f70e439770e/build-script-build
Invoked by
cargo build --release --locked --message-format=json-render-diagnostics
Lineage · 3 processes
  1. cargocargo build --release --locked --message-format=json-render-diagnostics2473
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo build --release --locked --message-format=json-render-diagnostics2473
  3. build-script-build/home/runner/work/rustvani/rustvani/target/release/build/ort-sys-fc3d2f70e439770e/build-script-build5822

Remediation

The crate's build script reached the network at compile time, outside the registry's checksums. Build it from what the registry ships (the crate's own environment variable or from-source feature), or record the download as accepted once it is reviewed.

Detection

mediumwitnessed

Build script reached github.com +1

Unexpected network connection

Subject
rustvani 0.4.0-dev.11
Destination
smartturn-rustvani.s3.ap-south-1.amazonaws.com:443, github.com:443
Reaches
Jobs
build-test
Rule
egress

Evidence

  1. Connection outside the process’s allowed destinationscause

    connection to smartturn-rustvani.s3.ap-south-1.amazonaws.com:443, opened by curl

    subject smartturn-rustvani.s3.ap-south-1.amazonaws.com:443

    by curl -fsSL --retry 2 -o /home/runner/.rustvani/cache/smart_turn_weights.bin.gz https://smartturn-rustvani.s3.ap-south-1.amazonaws.com/smart_turn_weights+(1).bin…

  2. Connection outside the process’s allowed destinationscause

    connection to github.com:443, opened by curl

    subject github.com:443

    by curl -fsSL --retry 2 -o /home/runner/.rustvani/cache/silero.onnx https://github.com/snakers4/silero-vad/raw/master/files/silero_vad.onnx

  3. Connection outside the process’s allowed destinationscause

    connection to github.com:443, opened by wget

    subject github.com:443

    by wget -q -O /home/runner/.rustvani/cache/silero.onnx https://github.com/snakers4/silero-vad/raw/master/files/silero_vad.onnx

  4. What a build script's fetch becamesupport

    2 files came down; nothing the build compiled, linked or ran

  5. Connection opened by a build script or child processsupport

    the opener descends from the build script at /home/runner/work/rustvani/rustvani/target/release/build/rustvani-265f8967bc31cc4a/build_script_build-265f8967bc31cc4a

  6. Tool commandsupport

    Command: curl -fsSL --retry 2 -o /home/runner/.rustvani/cache/smart_turn_weights.bin.gz https://smartturn-rustvani.s3.ap-south-1.amazonaws.com/smart_turn_weights+(1).bin…

    by curl -fsSL --retry 2 -o /home/runner/.rustvani/cache/smart_turn_weights.bin.gz https://smartturn-rustvani.s3.ap-south-1.amazonaws.com/smart_turn_weights+(1).bin…

  7. Tool commandsupport

    Command: curl -fsSL --retry 2 -o /home/runner/.rustvani/cache/silero.onnx https://github.com/snakers4/silero-vad/raw/master/files/silero_vad.onnx

    by curl -fsSL --retry 2 -o /home/runner/.rustvani/cache/silero.onnx https://github.com/snakers4/silero-vad/raw/master/files/silero_vad.onnx

  8. Tool commandsupport

    Command: wget -q -O /home/runner/.rustvani/cache/silero.onnx https://github.com/snakers4/silero-vad/raw/master/files/silero_vad.onnx

    by wget -q -O /home/runner/.rustvani/cache/silero.onnx https://github.com/snakers4/silero-vad/raw/master/files/silero_vad.onnx

Processes

build-test

cargo›cargo›build-script-build›curl

Ran
curl -fsSL --retry 2 -o /home/runner/.rustvani/cache/smart_turn_weights.bin.gz https://smartturn-rustvani.s3.ap-south-1.amazonaws.com/smart_turn_weights+(1).bin…
Invoked by
cargo build --release --locked --message-format=json-render-diagnostics
Lineage · 4 processes
  1. cargocargo build --release --locked --message-format=json-render-diagnostics2473
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo build --release --locked --message-format=json-render-diagnostics2473
  3. build-script-build/home/runner/work/rustvani/rustvani/target/release/build/rustvani-265f8967bc31cc4a/build-script-build6285
  4. curlcurl -fsSL --retry 2 -o /home/runner/.rustvani/cache/smart_turn_weights.bin.gz https://smartturn-rustvani.s3.ap-south-1.amazonaws.com/smart_turn_weights+(1).bin…6287

Remediation

The build script connected to the network while compiling. Nothing it downloaded was compiled, linked or run. Build the crate from what the registry ships, or accept the download after reviewing it.

Network

4 peers
  • cdn.pyke.io:443 build code of ort-sys · build-script-build · Cloudflare, Inc. · 1 file · went into an output documented
  • github.com:443 rustvani's own build code · curl; wget · GitHub, Inc. · 1 file undeclared
  • smartturn-rustvani.s3.ap-south-1.amazonaws.com:443 rustvani's own build code · curl · Amazon.com, Inc. · 1 file undeclared
  • static.crates.io:8080 the package manager · cargo (rustvani) via crates.io · 24,023 files · went into an output ecosystem
Dependencies336Build behaviour
adler22.0.1
aho-corasick1.1.4
android_system_properties0.1.5
anstream1.0.0
anstyle1.0.14
anstyle-parse1.0.0
anstyle-query1.1.5
anstyle-wincon3.0.11
anyhow1.0.102build script, not run
arc-swap1.9.1
async-recursion1.1.1proc macro
async-trait0.1.89proc macro
atomic-waker1.1.2
autocfg1.5.0
axum0.7.9
axum-core0.4.5
base640.22.1
base64ct1.8.3
bitflags2.11.0
block-buffer0.10.4
block-buffer0.12.0
bumpalo3.20.2
byteorder1.5.0
bytes1.11.1
cc1.2.58
cfg-if1.0.4
cfg_aliases0.2.1
chacha200.10.0
chrono0.4.44
cmov0.5.3
colorchoice1.0.5
const-oid0.10.2
core-foundation0.10.1
core-foundation-sys0.8.7
cpufeatures0.2.17
cpufeatures0.3.0
crc32fast1.5.0build script
crypto-common0.1.7
crypto-common0.2.1
ctutils0.4.2
data-encoding2.10.0
der0.8.0
digest0.10.7
digest0.11.3
displaydoc0.2.5proc macro
dotenvy0.15.7
env_filter1.0.1
env_logger0.11.10
equivalent1.0.2
errno0.3.14
fallible-iterator0.2.0
fastrand2.4.1
filetime0.2.27
find-msvc-tools0.1.9
flate21.1.9
fnv1.0.7
foldhash0.1.5
foreign-types0.3.2
foreign-types-shared0.1.1
form_urlencoded1.2.2
futures0.3.32
futures-channel0.3.32
futures-core0.3.32
futures-executor0.3.32
futures-io0.3.32
futures-macro0.3.32proc macro
futures-sink0.3.32
futures-task0.3.32
futures-util0.3.32
generic-array0.14.7build script
getrandom0.2.17
getrandom0.3.4build script
getrandom0.4.2build script
h20.4.13
hashbrown0.15.5
hashbrown0.16.1
heck0.5.0
hmac0.13.0
hound3.5.1
http1.4.0
http-body1.0.1
http-body-util0.1.3
httparse1.10.1build script
httpdate1.0.3
hush-vani0.1.1
hybrid-array0.4.11
hyper1.9.0
hyper-rustls0.27.9
hyper-util0.1.20
iana-time-zone0.1.65
iana-time-zone-haiku0.1.2build script, not run
icu_collections2.2.0
icu_locale_core2.2.0
icu_normalizer2.2.0
icu_normalizer_data2.2.0build script
icu_properties2.2.0
icu_properties_data2.2.0build script
icu_provider2.2.0
id-arena2.3.0
idna1.1.0
idna_adapter1.2.1
indexmap2.13.1
ipnet2.12.0
iri-string0.7.12
is_terminal_polyfill1.70.2
itoa1.0.18
jiff0.2.23
jiff-static0.2.23proc macro
js-sys0.3.95
ld-linux-x86-64.so.2system library
leb128fmt0.1.0
libc0.2.186build script
libc.so.6system library
libcrypto.so.3system library
libgcc_s.so.1system library
libm.so.6system library
libmvec.so.1system library
libredox0.1.16
libssl.so.3system library
linux-raw-sys0.12.1
litemap0.8.2
lock_api0.4.14
log0.4.29
lru-slab0.1.2
matchit0.7.3
matrixmultiply0.3.10build script
md-50.11.0
memchr2.8.0
mime0.3.17
miniz_oxide0.8.9
mio1.2.0
native-tls0.2.18build script
ndarray0.16.1
nnnoiseless0.1.1
num-complex0.2.4build script
num-complex0.4.6
num-integer0.1.46
num-traits0.2.19build script
objc2-core-foundation0.3.2
objc2-system-configuration0.3.2
once_cell1.21.4
once_cell_polyfill1.70.2
openssl0.10.76build script
openssl-macros0.1.1proc macro
openssl-probe0.2.1
openssl-sys0.9.112build script
ort2.0.0-rc.10
ort-sys2.0.0-rc.10build scriptnetworkcdn.pyke.io
parking_lot0.12.5
parking_lot_core0.9.12build script
pem-rfc74681.0.0
percent-encoding2.3.2
phf0.13.1
phf_shared0.13.1
pin-project-lite0.2.17
pkg-config0.3.32
plain0.2.3
portable-atomic1.13.1build script, not run
portable-atomic-util0.2.6build script, not run
postgres-native-tls0.5.3
postgres-protocol0.6.11
postgres-types0.2.13
potential_utf0.1.5
ppv-lite860.2.21
prettyplease0.2.37build script, not run
primal-check0.3.4
proc-macro21.0.106build script
quinn0.11.9build script, not run
quinn-proto0.11.14
quinn-udp0.5.14build script, not run
quote1.0.45build script
r-efi5.3.0
r-efi6.0.0
rand0.10.1
rand0.8.5
rand0.9.2
rand_chacha0.3.1
rand_chacha0.9.0
rand_core0.10.1
rand_core0.6.4
rand_core0.9.5
rawpointer0.2.1
realfft3.5.0
redox_syscall0.5.18
redox_syscall0.7.4
regex1.12.3
regex-automata0.4.14
regex-syntax0.8.10
reqwest0.12.28
ring0.17.14build scriptprebuilt objects
rubato0.14.1
rustc-hash2.1.2
rustfft3.0.1
rustfft6.4.1
rustix1.1.4build script
rustls0.23.38build script
rustls-pki-types1.14.0
rustls-webpki0.103.12
rustversion1.0.22build scriptproc macro
ryu1.0.23
schannel0.1.29
scopeguard1.2.0
security-framework3.7.0
security-framework-sys2.17.0
semver1.0.28
serde1.0.228build script
serde_core1.0.228build script
serde_derive1.0.228proc macro
serde_json1.0.149build script
serde_path_to_error0.1.20
serde_urlencoded0.7.1
sha10.10.6
sha20.10.9
sha20.11.0
shlex1.3.0
signal-hook-registry1.4.8
simd-adler320.3.9
siphasher1.0.3
slab0.4.12
smallvec1.15.1
smallvec2.0.0-alpha.10
socket20.6.3
socks0.3.4
stable_deref_trait1.2.1
strength_reduce0.2.4
stringprep0.1.5
subtle2.6.1
syn2.0.117
sync_wrapper1.0.2
synstructure0.13.2
tar0.4.45
tempfile3.27.0
thiserror1.0.69build script
thiserror2.0.18build script
thiserror-impl1.0.69proc macro
thiserror-impl2.0.18proc macro
tinystr0.8.3
tinyvec1.11.0
tinyvec_macros0.1.1
tokio1.50.0
tokio-macros2.6.1proc macro
tokio-native-tls0.3.1
tokio-postgres0.7.17
tokio-rustls0.26.4
tokio-tungstenite0.24.0
tokio-tungstenite0.29.0
tokio-util0.7.18
tower0.5.3
tower-http0.5.2
tower-http0.6.8
tower-layer0.3.3
tower-service0.3.3
tracing0.1.44
tracing-core0.1.36
transpose0.1.0
transpose0.2.3
try-lock0.2.5
tungstenite0.24.0
tungstenite0.29.0
typenum1.20.0
unicode-bidi0.3.18
unicode-ident1.0.24
unicode-normalization0.1.25
unicode-properties0.1.4
unicode-xid0.2.6
untrusted0.9.0
ureq3.3.0
ureq-proto0.6.0
url2.5.8
utf-80.7.6
utf8-zero0.8.1
utf8_iter1.0.4
utf8parse0.2.2
uuid1.23.1
vcpkg0.2.15prebuilt objects
version_check0.9.5
want0.3.1
wasi0.11.1+wasi-snapshot-preview1
wasi0.14.7+wasi-0.2.4
wasip21.0.2+wasi-0.2.9
wasip30.4.0+wasi-0.3.0-rc-2026-01-06
wasite1.0.2
wasm-bindgen0.2.118build script, not run
wasm-bindgen-futures0.4.68
wasm-bindgen-macro0.2.118proc macro
wasm-bindgen-macro-support0.2.118
wasm-bindgen-shared0.2.118build script, not run
wasm-encoder0.244.0
wasm-metadata0.244.0
wasm-streams0.4.2
wasmparser0.244.0
web-sys0.3.95
web-time1.1.0
webpki-root-certs1.0.6
webpki-roots0.26.11
webpki-roots1.0.7
whoami2.1.2
winapi0.3.9build script, not run
winapi-i686-pc-windows-gnu0.4.0build script, not runprebuilt objects
winapi-x86_64-pc-windows-gnu0.4.0build script, not runprebuilt objects
windows-core0.62.2
windows-implement0.60.2proc macro
windows-interface0.59.3proc macro
windows-link0.2.1
windows-result0.4.1
windows-strings0.5.1
windows-sys0.52.0
windows-sys0.61.2
windows-targets0.52.6
windows_aarch64_gnullvm0.52.6build script, not runprebuilt objects
windows_aarch64_msvc0.52.6build script, not runprebuilt objects
windows_i686_gnu0.52.6build script, not runprebuilt objects
windows_i686_gnullvm0.52.6build script, not runprebuilt objects
windows_i686_msvc0.52.6build script, not runprebuilt objects
windows_x86_64_gnu0.52.6build script, not runprebuilt objects
windows_x86_64_gnullvm0.52.6build script, not runprebuilt objects
windows_x86_64_msvc0.52.6build script, not runprebuilt objects
wit-bindgen0.51.0build script, not runprebuilt objects
wit-bindgen-core0.51.0
wit-bindgen-rust0.51.0build script, not run
wit-bindgen-rust-macro0.51.0build script, not runproc macro
wit-component0.244.0
wit-parser0.244.0
writeable0.6.3
xattr1.6.1
yoke0.8.2
yoke-derive0.8.2proc macro
zerocopy0.8.48build script
zerocopy-derive0.8.48proc macro
zerofrom0.1.7
zerofrom-derive0.1.7proc macro
zeroize1.8.2
zerotrie0.2.4
zerovec0.11.6
zerovec-derive0.11.3proc macro
zmij1.0.21build script

Raw data

capture
954 KB
records
132,687
bytes per record
7.2

Loading a sample of the capture

Want to see more? E-mail us at hello@bitbison.io about your use case.

1 of 1 jobs captured: build-test success · Generated 2026-10-14 · run 093a0bc0-e396-46ae-92fd-3f19dea1fcc3

analysis 0.1.0 · 2026-10-14 · afb437c · graph v2