cargo / sephera

sephera 0.6.0

processes: 776
operations: 57K
packages: 236
compiler runs: 401
connections: 2
job time: 1m 47s

Local-first Rust CLI for repository metrics and deterministic LLM context packs with AST compression and MCP.

9 vulnerabilities Release

Build behaviournot recorded for this run

78 downloads · GPL-3.0-only · source · home page · cargo

context llm loc mcp tree-sitter

Release 0.6.0 run 95530835-c028-4082-9cc9-38c7e9b17c2f · built 2026-10-06

Artifact

binary · retained · product

Checks	Detections
Build behavior
✓ Network activity	—
✓ Cross-process access	—
✓ Build file changes	—
✓ Build script activity	—
✓ Object file origins	—
✓ Filesystem writes	—
✓ Context collection	—
Supply chain
▲ Known vulnerabilities	—
▲ Dependency advisories	—
✓ Declared and observed dependencies	—
Pipeline
✓ Dependency versions across jobs	—
✓ Pipeline coverage	—

Detections

No detections

No abnormal activity detected across 57K flows.

Network

1 peers

static.crates.io:8080

cargo (Sephera) via crates.io · build-test

allowed

Vulnerable dependencies8	Package	Version	Fix	Severity	Title	Reach
RUSTSEC-2026-0204	crossbeam-epoch	0.9.18	>=0.9.20	high	Invalid pointer dereference in `fmt::Pointer` impl for `Atomic` and `Shared` when the underlying pointer is invalid	retained
CVE-2026-42559	rmcp	1.3.0	>=1.4.0	high	rmcp Streamable HTTP server transport has a DNS rebinding vulnerability	retained
CVE-2026-63127	rmcp	1.3.0	>=2.0.0	high	RMCP: Missing Resource Field Validation in OAuth Protected Resource Metadata Discovery	retained
CVE-2026-63128	rmcp	1.3.0	>=2.0.0	high	RMCP: Unauthenticated permanent session-table leak in rmcp Streamable HTTP server transport leads to remote denial-of-service	retained
CVE-2026-64684	rmcp	1.3.0	>=2.1.0	medium	RMCP: Custom HTTP headers leak to cross-origin redirect targets	retained
GHSA-c9xm-49cp-xcr9	rmcp	1.3.0	>=2.0.0	medium	rmcp OAuth client fetches server-controlled resource_metadata URLs	retained
RUSTSEC-2026-0190	anyhow	1.0.102	>=1.0.103	low	Unsoundness in `Error::downcast_mut()`	retained
RUSTSEC-2026-0186	memmap2	0.9.10	>=0.9.11	low	Unchecked pointer offset in crate `memmap2`	retained

Dependencies

250 packages, 0 with a build script that ran, 0 doing more than compiling

Package	Version	Usage
aho-corasick	1.1.4	linked
android_system_properties	0.1.5	platform_gated
anstream	1.0.0	linked
anstyle	1.0.14	linked
anstyle-parse	1.0.0	linked
anstyle-query	1.1.5	linked
anstyle-wincon	3.0.11	platform_gated
anyhow direct	1.0.102	linked
async-trait	0.1.89	buildtime_only
autocfg	1.5.0	buildtime_only
base64	0.22.1	linked
bitflags	2.11.0	linked
bstr	1.12.1	linked
bumpalo	3.20.2	buildtime_only
bytes	1.11.1	linked
cc	1.2.59	linked
cfg-if	1.0.4	linked
chrono	0.4.44	linked
clap direct	4.6.0	linked
clap_builder	4.6.0	linked
clap_derive	4.6.0	linked
clap_lex	1.1.0	linked
colorchoice	1.0.5	linked
comfy-table direct	7.2.2	linked
console	0.15.11	unrelated
console	0.16.3	linked
core-foundation-sys	0.8.7	platform_gated
crossbeam-deque	0.8.6	linked
crossbeam-epoch	0.9.18	linked
crossbeam-utils	0.8.21	linked
crossterm	0.29.0	linked
crossterm_winapi	0.9.1	platform_gated
darling	0.23.0	linked
darling_core	0.23.0	linked
darling_macro	0.23.0	linked
displaydoc	0.2.5	linked
document-features	0.2.12	linked
dyn-clone	1.0.20	linked
either	1.15.0	linked
encode_unicode	1.0.0	platform_gated
errno	0.3.14	linked
fastrand	2.3.0	linked
find-msvc-tools	0.1.9	linked
foldhash	0.1.5	buildtime_only
form_urlencoded	1.2.2	linked
fsevent-sys	4.1.0	platform_gated
futures	0.3.32	linked
futures-channel	0.3.32	linked
futures-core	0.3.32	linked
futures-executor	0.3.32	linked
futures-io	0.3.32	linked
futures-macro	0.3.32	linked
futures-sink	0.3.32	linked
futures-task	0.3.32	linked
futures-util	0.3.32	linked
getrandom	0.4.2	linked
globset	0.4.18	linked
hashbrown	0.15.5	buildtime_only
heck	0.5.0	linked
iana-time-zone	0.1.65	linked
iana-time-zone-haiku	0.1.2	platform_gated
icu_collections	2.1.1	linked
icu_locale_core	2.1.1	linked
icu_normalizer	2.1.1	linked
icu_normalizer_data	2.1.1	linked
icu_properties	2.1.2	linked
icu_properties_data	2.1.2	linked
icu_provider	2.1.1	linked
id-arena	2.3.0	buildtime_only
ident_case	1.0.1	linked
idna	1.1.0	linked
idna_adapter	1.2.1	linked
indicatif direct	0.18.4	linked
inotify	0.11.5	linked
inotify-sys	0.1.8	linked
insta	1.46.3	unrelated
is_terminal_polyfill	1.70.2	linked
itoa	1.0.18	linked
js-sys	0.3.91	platform_gated
kqueue	1.2.1	platform_gated
kqueue-sys	1.1.2	platform_gated
ld-linux-x86-64.so.2		linked
leb128fmt	0.1.0	buildtime_only
libc	0.2.183	linked
libc.so.6		linked
libgcc_s.so.1		linked
libm.so.6		linked
libmvec.so.1		linked
linux-raw-sys	0.12.1	linked
litemap	0.8.2	linked
litrs	1.0.0	linked
lock_api	0.4.14	linked
log	0.4.29	linked
memchr	2.8.0	linked
memmap2	0.9.10	linked
mio	1.2.0	linked
notify direct	8.2.0	linked
notify-types	2.1.0	linked
num-traits	0.2.19	linked
once_cell	1.21.4	linked
once_cell_polyfill	1.70.2	platform_gated
parking_lot	0.12.5	linked
parking_lot_core	0.9.12	linked
pastey	0.2.1	linked
percent-encoding	2.3.2	linked
phf	0.11.3	linked
phf_generator	0.11.3	linked
phf_macros	0.11.3	linked
phf_shared	0.11.3	linked
pin-project-lite	0.2.17	linked
portable-atomic	1.13.1	linked
potential_utf	0.1.5	linked
prettyplease	0.2.37	buildtime_only
proc-macro2	1.0.106	linked
quote	1.0.45	linked
r-efi	6.0.0	platform_gated
rand	0.8.5	linked
rand_core	0.6.4	linked
rayon	1.11.0	linked
rayon-core	1.13.0	linked
redox_syscall	0.5.18	platform_gated
ref-cast	1.0.25	linked
ref-cast-impl	1.0.25	linked
regex	1.12.3	linked
regex-automata	0.4.14	linked
regex-syntax	0.8.10	linked
rmcp	1.3.0	linked
rmcp-macros	1.3.0	linked
rustix	1.1.4	linked
rustversion	1.0.22	buildtime_only
same-file	1.0.6	linked
schemars	1.2.1	linked
schemars_derive	1.2.1	linked
scopeguard	1.2.0	linked
semver	1.0.27	buildtime_only
sephera_core direct	0.6.0	linked
sephera_mcp direct	0.6.0	linked
serde direct	1.0.228	linked
serde_core	1.0.228	linked
serde_derive	1.0.228	linked
serde_derive_internals	0.29.1	linked
serde_json direct	1.0.149	linked
serde_spanned	1.1.0	linked
shlex	1.3.0	linked
signal-hook-registry	1.4.8	linked
similar	2.7.0	unrelated
siphasher	1.0.2	linked
slab	0.4.12	linked
smallvec	1.15.1	linked
socket2	0.6.3	linked
stable_deref_trait	1.2.1	linked
streaming-iterator	0.1.9	linked
strsim	0.11.1	linked
syn	2.0.117	linked
synstructure	0.13.2	linked
tempfile	3.27.0	linked
thiserror	2.0.18	linked
thiserror-impl	2.0.18	linked
tinystr	0.8.3	linked
tokio direct	1.51.0	linked
tokio-macros	2.7.0	linked
tokio-util	0.7.18	linked
toml direct	0.9.12+spec-1.1.0	linked
toml_datetime	0.7.5+spec-1.1.0	linked
toml_parser	1.1.0+spec-1.1.0	linked
toml_writer	1.1.0+spec-1.1.0	linked
tracing	0.1.44	linked
tracing-attributes	0.1.31	linked
tracing-core	0.1.36	linked
tree-sitter	0.26.8	linked
tree-sitter-c	0.23.4	linked
tree-sitter-cpp	0.23.4	linked
tree-sitter-go	0.25.0	linked
tree-sitter-java	0.23.5	linked
tree-sitter-javascript	0.25.0	linked
tree-sitter-language	0.1.7	linked
tree-sitter-python	0.25.0	linked
tree-sitter-rust	0.24.2	linked
tree-sitter-typescript	0.23.2	linked
unicode-ident	1.0.24	linked
unicode-segmentation	1.12.0	linked
unicode-width	0.2.2	linked
unicode-xid	0.2.6	buildtime_only
unit-prefix	0.5.2	linked
url	2.5.8	linked
utf8_iter	1.0.4	linked
utf8parse	0.2.2	linked
walkdir	2.5.0	linked
wasi	0.11.1+wasi-snapshot-preview1	platform_gated
wasip2	1.0.2+wasi-0.2.9	platform_gated
wasip3	0.4.0+wasi-0.3.0-rc-2026-01-06	platform_gated
wasm-bindgen	0.2.114	platform_gated
wasm-bindgen-macro	0.2.114	buildtime_only
wasm-bindgen-macro-support	0.2.114	buildtime_only
wasm-bindgen-shared	0.2.114	platform_gated
wasm-encoder	0.244.0	buildtime_only
wasm-metadata	0.244.0	buildtime_only
wasmparser	0.244.0	buildtime_only
web-time	1.1.0	platform_gated
winapi	0.3.9	platform_gated
winapi-i686-pc-windows-gnu	0.4.0	platform_gated
winapi-util	0.1.11	platform_gated
winapi-x86_64-pc-windows-gnu	0.4.0	platform_gated
windows-core	0.62.2	platform_gated
windows-implement	0.60.2	buildtime_only
windows-interface	0.59.3	buildtime_only
windows-link	0.2.1	platform_gated
windows-result	0.4.1	platform_gated
windows-strings	0.5.1	platform_gated
windows-sys	0.59.0	unrelated
windows-targets	0.52.6	unrelated
windows_aarch64_gnullvm	0.52.6	unrelated
windows_aarch64_msvc	0.52.6	unrelated
windows_i686_gnu	0.52.6	unrelated
windows_i686_gnullvm	0.52.6	unrelated
windows_i686_msvc	0.52.6	unrelated
windows_x86_64_gnu	0.52.6	unrelated
windows_x86_64_gnullvm	0.52.6	unrelated
windows_x86_64_msvc	0.52.6	unrelated
winnow	0.7.15	linked
winnow	1.0.0	linked
wit-bindgen	0.51.0	platform_gated
wit-bindgen-core	0.51.0	buildtime_only
wit-bindgen-rust	0.51.0	buildtime_only
wit-bindgen-rust-macro	0.51.0	buildtime_only
wit-component	0.244.0	buildtime_only
wit-parser	0.244.0	buildtime_only
writeable	0.6.3	linked
yoke	0.8.2	linked
yoke-derive	0.8.2	linked
zerofrom	0.1.7	linked
zerofrom-derive	0.1.7	linked
zerotrie	0.2.4	linked
zerovec	0.11.6	linked
zerovec-derive	0.11.3	linked
zmij	1.0.21	linked
equivalent	1.0.2	dead
hashbrown	0.16.1	dead
indexmap	2.13.0	dead
windows-sys	0.60.2	unverified
windows-sys	0.61.2	unverified
windows-targets	0.53.5	unverified
windows_aarch64_gnullvm	0.53.1	unverified
windows_aarch64_msvc	0.53.1	unverified
windows_i686_gnu	0.53.1	unverified
windows_i686_gnullvm	0.53.1	unverified
windows_i686_msvc	0.53.1	unverified
windows_x86_64_gnu	0.53.1	unverified
windows_x86_64_gnullvm	0.53.1	unverified
windows_x86_64_msvc	0.53.1	unverified

1 of 1 jobs captured: build-test success · Generated 2026-10-06 · tarp 0.1.0+20261005230310-g8db20f3c46ff · run 95530835-c028-4082-9cc9-38c7e9b17c2f