Skip to content
Open-Source Registry

cargo / saddle-framework / 0.3.38

saddle-framework 0.3.38

bitbison: flagged, behavior flagged, dependencies notes, posture not checked, pipeline clean, 1 of 1 jobs captured RiskhighVulnsnone
processes
485
operations
54K
packages
258
compiler runs
247
connections
1
job time
2m 27s
capture
677 KB
records
97K
bytes / record
7.0

Build behaviourcompiled C/C++

run 7a7ff6cd-fec5-4d32-9d10-870621f289b5 · built 2026-10-17 · complete View on crates.io

Artifact

file · retained · product · graph v2
1

Checks

12 of 14 clear Build file changes Build-time dependency advisories
Build behavior✓✓✓▲✓✓✓✓
Supply chain✓▲✓✓✓
Pipeline✓

Detections

1
  • Source rewritten from outside input
    saddle-boundary 0.3.38
    high

Detection

highwitnessed

Source rewritten from outside input

Dependency source rewritten before compilation

Subject
saddle-boundary 0.3.38
Reaches
Jobs
build-test
Rule
dependency-source · saddle-framework

Evidence

  1. Dependency source rewritten by build codecause

    Replaced proto/saddle-boundary-descriptor.bin in saddle-boundary 0.3.38, then read by rustc

    subject /home/runner/.cargo/registry/src/index.crates.io-f7c75c5af8568ae3/saddle-boundary-0.3.38/proto/saddle-boundary-descriptor.bin

    by /home/runner/.cargo/registry/src/index.crates.io-f7c75c5af8568ae3/protoc-bin-vendored-linux-x86_64-3.2.0/bin/protoc --include_imports --include_source_info -o p…

  2. Rewrite input from outside the packagecause

    The writing build read a file protoc-bin-vendored-linux-x86_64 3.2.0 published

    source /home/runner/.cargo/registry/src/index.crates.io-f7c75c5af8568ae3/protoc-bin-vendored-linux-x86_64-3.2.0/include/google/protobuf/descriptor.proto

    by /home/runner/.cargo/registry/src/index.crates.io-f7c75c5af8568ae3/protoc-bin-vendored-linux-x86_64-3.2.0/bin/protoc --include_imports --include_source_info -o p…

Processes

build-test

cargo›cargo›build-script-build›protoc

Ran
/home/runner/.cargo/registry/src/index.crates.io-f7c75c5af8568ae3/protoc-bin-vendored-linux-x86_64-3.2.0/bin/protoc --include_imports --include_source_info -o p…
Invoked by
cargo build --release --locked --message-format=json-render-diagnostics
Lineage · 4 processes
  1. cargocargo build --release --locked --message-format=json-render-diagnostics2469
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo build --release --locked --message-format=json-render-diagnostics2469
  3. build-script-build/home/runner/work/saddle-framework/saddle-framework/target/release/build/saddle-boundary-f7f25b68a0f0bce3/build-script-build6162
  4. protoc/home/runner/.cargo/registry/src/index.crates.io-f7c75c5af8568ae3/protoc-bin-vendored-linux-x86_64-3.2.0/bin/protoc --include_imports --include_source_info -o p…6163

Remediation

Compare the rewritten files with the published package, and find where the written bytes came from. Pin or replace the dependency until its build compiles what it published.

Network

1 peers
  • static.crates.io:8080 the package manager · cargo (saddle-framework) via crates.io · 13,419 files · went into an output ecosystem
Dependencies275Build behaviour
aho-corasick1.1.4
allocator-api20.2.21
anyhow1.0.102build script
async-stream0.3.6
async-stream-impl0.3.6proc macro
async-trait0.1.91proc macro
atoi2.0.0
atomic-waker1.1.2
autocfg1.5.1
axum0.7.9
axum-core0.4.5
base640.22.1
base64ct1.8.3
bitflags2.13.1
block-buffer0.10.4
byteorder1.5.0
bytes1.12.1
cc1.4.2
cfg-if1.0.4
const-oid0.9.6
core-foundation0.10.1
core-foundation-sys0.8.7
cpufeatures0.2.17
crc3.4.0
crc-catalog2.5.0
crossbeam-queue0.3.13
crossbeam-utils0.8.22build script
crypto-common0.1.7
der0.7.10
deranged0.5.8
digest0.10.7
displaydoc0.2.7proc macro
dotenvy0.15.7
either1.17.0
equivalent1.0.2
errno0.3.14
event-listener5.4.2
fastrand2.5.0
find-msvc-tools0.1.10
fixedbitset0.4.2
fnv1.0.7
foldhash0.1.5
form_urlencoded1.2.2
futures-channel0.3.34
futures-core0.3.34
futures-intrusive0.5.0
futures-io0.3.34
futures-sink0.3.34
futures-task0.3.34
futures-util0.3.34
generic-array0.14.7build script
getrandom0.2.17
getrandom0.3.4build script
getrandom0.4.3build script
h20.4.13
hashbrown0.12.3
hashbrown0.15.5
hashbrown0.17.1
hashlink0.10.0
heck0.5.0
hex0.4.3
hkdf0.12.4
hmac0.12.1
http1.5.0
http-body1.1.0
http-body-util0.1.4
httparse1.10.1build script
httpdate1.0.3
hyper1.9.0
hyper-timeout0.5.2
hyper-util0.1.20
icu_collections2.1.1
icu_locale_core2.1.1
icu_normalizer2.1.1
icu_normalizer_data2.1.1build script
icu_properties2.1.2
icu_properties_data2.1.2build script
icu_provider2.1.1
idna1.1.0
idna_adapter1.2.1
indexmap1.9.3build script
indexmap2.14.0
itertools0.14.0
itoa1.0.18
lazy_static1.5.0
ld-linux-x86-64.so.2system library
libc0.2.189build script
libc.so.6system library
libgcc_s.so.1system library
libm0.2.16build script
libm.so.6system library
libmvec.so.1system library
libredox0.1.19
linux-raw-sys0.12.1
linux-raw-sys0.4.15
litemap0.8.2
lock_api0.4.14
log0.4.33
matchit0.7.3
md-50.10.6
memchr2.8.3
mime0.3.17
mio1.2.2
multimap0.10.1
num-bigint-dig0.8.6build script
num-conv0.2.2
num-integer0.1.47
num-iter0.1.46
num-traits0.2.19build script
num_threads0.1.7
once_cell1.21.4
openssl-probe0.2.1
parking2.2.1
parking_lot0.12.5
parking_lot_core0.9.12build script
pem-rfc74680.7.0
percent-encoding2.3.2
petgraph0.6.5
pin-project1.1.13
pin-project-internal1.1.13proc macro
pin-project-lite0.2.17
pkcs10.7.5
pkcs80.10.2
plain0.2.3
potential_utf0.1.5
powerfmt0.2.0
ppv-lite860.2.21
prettyplease0.2.37build script
proc-macro-crate3.5.0
proc-macro21.0.107build script
prost0.13.5
prost-build0.13.5
prost-derive0.13.5proc macro
prost-derive0.14.4proc macro
prost-types0.13.5
protoc-bin-vendored3.2.0
protoc-bin-vendored-linux-aarch_643.2.0
protoc-bin-vendored-linux-ppcle_643.2.0
protoc-bin-vendored-linux-s390_643.2.0
protoc-bin-vendored-linux-x86_323.2.0
protoc-bin-vendored-linux-x86_643.2.0
protoc-bin-vendored-macos-aarch_643.2.0
protoc-bin-vendored-macos-x86_643.2.0
protoc-bin-vendored-win323.2.0
quote1.0.47build script
r-efi5.3.0
r-efi6.0.0
rand0.8.7
rand_chacha0.3.1
rand_core0.6.4
redox_syscall0.5.18
redox_syscall0.9.1
regex1.13.1
regex-automata0.4.16
regex-syntax0.8.11
ring0.17.14build scriptprebuilt objects
rsa0.9.10
rustix0.38.44build script
rustix1.1.4build script
rustls0.23.43build script
rustls-native-certs0.8.4
rustls-pki-types1.15.1
rustls-webpki0.103.14
rustversion1.0.23build scriptproc macro
saddle-admission0.3.38
saddle-boundary0.3.38build scriptrewrites its source
saddle-core0.3.38
saddle-db0.3.38
saddle-macros0.3.38proc macro
saddle-observability0.3.38
saddle-runtime0.3.38
saddle-service0.3.38
schannel0.1.29
scopeguard1.2.0
security-framework3.7.0
security-framework-sys2.17.0
serde1.0.229build script
serde_core1.0.229build script
serde_derive1.0.229proc macro
serde_json1.0.151build script
serde_spanned1.1.1
sha10.10.7
sha20.10.9
shlex2.0.1
signal-hook-registry1.4.8
signature2.2.0
slab0.4.12
smallvec1.15.2
socket20.5.10
socket20.6.5
spin0.9.9
spki0.7.3
sqlx0.8.6
sqlx-core0.8.6
sqlx-macros0.8.6proc macro
sqlx-macros-core0.8.6
sqlx-mysql0.8.6
stable_deref_trait1.2.1
stringprep0.1.5
subtle2.6.1
syn2.0.119
syn3.0.3
sync_wrapper1.0.2
synstructure0.13.2
tempfile3.27.0
thiserror2.0.20build script
thiserror-impl2.0.20proc macro
time0.3.55
time-core0.1.9
time-macros0.2.32proc macro
tinystr0.8.3
tinyvec1.12.0
tinyvec_macros0.1.1
tokio1.53.1
tokio-macros2.7.2proc macro
tokio-stream0.1.19
tokio-util0.7.18
toml0.9.12+spec-1.1.0
toml_datetime0.7.5+spec-1.1.0
toml_datetime1.1.1+spec-1.1.0
toml_edit0.25.15+spec-1.1.0
toml_parser1.1.3+spec-1.1.0
toml_writer1.1.2+spec-1.1.0
tonic0.12.3
tonic-build0.12.3
tower0.4.13
tower0.5.3
tower-layer0.3.3
tower-service0.3.3
tracing0.1.44
tracing-attributes0.1.31proc macro
tracing-core0.1.36
try-lock0.2.5
typenum1.20.1
unicode-bidi0.3.18
unicode-ident1.0.24
unicode-normalization0.1.25
unicode-properties0.1.4
untrusted0.9.0
url2.5.8
utf8_iter1.0.4
version_check0.9.5
want0.3.1
wasi0.11.1+wasi-snapshot-preview1
wasip21.0.1+wasi-0.2.4
wasite0.1.0
whoami1.6.1
windows-link0.2.1
windows-sys0.52.0
windows-sys0.59.0
windows-sys0.61.2
windows-targets0.52.6
windows_aarch64_gnullvm0.52.6build script, not runprebuilt objects
windows_aarch64_msvc0.52.6build script, not runprebuilt objects
windows_i686_gnu0.52.6build script, not runprebuilt objects
windows_i686_gnullvm0.52.6build script, not runprebuilt objects
windows_i686_msvc0.52.6build script, not runprebuilt objects
windows_x86_64_gnu0.52.6build script, not runprebuilt objects
windows_x86_64_gnullvm0.52.6build script, not runprebuilt objects
windows_x86_64_msvc0.52.6build script, not runprebuilt objects
winnow0.7.15
winnow1.0.4
wit-bindgen0.46.0build script, not runprebuilt objects
writeable0.6.3
yoke0.8.3
yoke-derive0.8.2proc macro
zerocopy0.8.56build script
zerocopy-derive0.8.56proc macro
zerofrom0.1.8
zerofrom-derive0.1.7proc macro
zeroize1.9.0
zerotrie0.2.4
zerovec0.11.6
zerovec-derive0.11.3proc macro
zmij1.0.23build script
Versions57RiskVulnsPublished
0.3.37did not build7d ago
0.3.36not analyzed9d ago
0.3.35not analyzed10d ago
0.3.34not analyzed2026-10-03
0.3.33not analyzed2026-10-02
0.3.32not analyzed2026-10-02
0.3.31not analyzed2026-10-01
0.3.30not analyzed2026-09-30
0.3.29not analyzed2026-09-29
0.3.28not analyzed2026-09-28
0.3.27not analyzed2026-09-27
0.3.26not analyzed2026-09-23
0.3.25not analyzed2026-09-22
0.3.24not analyzed2026-09-20
0.3.23not analyzed2026-09-16
0.3.22not analyzed2026-09-15
0.3.21not analyzed2026-09-15
0.3.20not analyzed2026-09-15
0.3.19not analyzed2026-09-14
0.3.18not analyzed2026-09-14
0.3.17not analyzed2026-09-11
0.3.16not analyzed2026-09-11
0.3.15not analyzed2026-09-09
0.3.14not analyzed2026-09-09
0.3.13not analyzed2026-09-08
0.3.12not analyzed2026-09-07
0.3.11not analyzed2026-09-07
0.3.10not analyzed2026-09-03
0.3.9not analyzed2026-09-03
0.3.8not analyzed2026-09-02
0.3.7not analyzed2026-09-02
0.3.6not analyzed2026-09-02
0.3.5not analyzed2026-09-01
0.3.4not analyzed2026-09-01
0.3.3not analyzed2026-09-01
0.3.2not analyzed2026-09-01
0.3.1not analyzed2026-09-01
0.3.0not analyzed2026-09-01
0.3.0-alpha.9not analyzed2026-09-01
0.3.0-alpha.8not analyzed2026-08-31
0.3.0-alpha.7not analyzed2026-08-31
0.3.0-alpha.6not analyzed2026-08-31
0.3.0-alpha.5not analyzed2026-08-31
0.3.0-alpha.4not analyzed2026-08-30
0.3.0-alpha.3not analyzed2026-08-28
0.3.0-alpha.2not analyzed2026-08-28
0.3.0-alpha.1not analyzed2026-08-28
0.2.0not analyzed2026-08-22
0.2.0-rc.20not analyzed2026-08-22
0.2.0-rc.19not analyzed2026-08-17
0.2.0-rc.6not analyzed2026-08-11
0.2.0-rc.5not analyzed2026-08-11
0.2.0-rc.3not analyzed2026-08-10
0.2.0-rc.1not analyzed2026-08-10
0.1.1not analyzed2026-07-23
0.1.0not analyzed2026-07-23
0.3.38highnone

Raw data

capture
677 KB
records
96,829
bytes per record
7.0

Loading a sample of the capture

Want to see more? E-mail us at hello@bitbison.io about your use case.

1 of 1 jobs captured: build-test success · Generated 2026-10-17 · run 7a7ff6cd-fec5-4d32-9d10-870621f289b5

analysis 0.1.0 · 2026-10-16 · e987d53 · graph v2