Skip to content
Open-Source Registry

cargo / surrealml-core / 0.3.4

surrealml-core 0.3.4

bitbison: flagged, behavior flagged, dependencies clean, posture not checked, pipeline clean, 1 of 1 jobs captured 1 detection
processes
252
operations
29K
packages
136
compiler runs
48
connections
2
job time
57s
capture
406 KB
records
53K
bytes / record
7.6

Build behaviourfetch went into the outputfetched outside crates.io

run 13815a94-0823-442f-960a-281ffa7e53d3 · built 2026-10-13 · complete

Artifact

file · retained · product · graph v2
1

Checks

13 of 14 clear Network activity
Build behavior▲✓✓✓✓✓✓✓
Supply chain✓✓✓✓✓
Pipeline✓

Detections

1
  • Build script reached cdn.pyke.io
    ort-sys 2.0.0-rc.12 › cdn.pyke.io:443
    medium

Detection

mediumwitnessed

Build script reached cdn.pyke.io

Unexpected network connection

Subject
ort-sys 2.0.0-rc.12
Destination
cdn.pyke.io:443
Reaches
Jobs
build-test
Rule
egress

Evidence

  1. Connection outside the process’s allowed destinationscause

    connection to cdn.pyke.io:443, opened by build-script-main

    subject cdn.pyke.io:443

    by /home/runner/work/surrealdb/surrealdb/target/release/build/ort-sys-569f6df6d2850fb1/build-script-main

  2. Connection opened by a build script or child processsupport

    the opener is the build script at /home/runner/work/surrealdb/surrealdb/target/release/build/ort-sys-569f6df6d2850fb1/build-script-main

  3. Build script fetched what its crate documents it fetchessupport

    ort-sys's build script fetches a prebuilt ONNX Runtime from cdn.pyke.io: ort's default `download-binaries` feature fetches pyke's prebuilt from its CDN

Processes

build-test

cargo›cargo›build-script-main

Ran
/home/runner/work/surrealdb/surrealdb/target/release/build/ort-sys-569f6df6d2850fb1/build-script-main
Invoked by
cargo build --release --locked --message-format=json-render-diagnostics
Lineage · 3 processes
  1. cargocargo build --release --locked --message-format=json-render-diagnostics2452
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo build --release --locked --message-format=json-render-diagnostics2452
  3. build-script-main/home/runner/work/surrealdb/surrealdb/target/release/build/ort-sys-569f6df6d2850fb1/build-script-main3333

Remediation

The crate's build script reached the network at compile time, outside the registry's checksums. Build it from what the registry ships (the crate's own environment variable or from-source feature), or record the download as accepted once it is reviewed.

Network

2 peers
  • cdn.pyke.io:443 build code of ort-sys · build-script-main · Cloudflare, Inc. · 5 files · went into an output documented
  • static.crates.io:8080 the package manager · cargo (surrealdb) via crates.io · 11,991 files · went into an output ecosystem
Dependencies139Build behaviour
aho-corasick1.1.4
anyhow1.0.104build script, not run
autocfg1.5.0
base640.22.1
base64ct1.8.3
bitflags2.11.1
byteorder1.5.0
bytes1.12.1
cc1.2.62
cfg-if1.0.4
core-foundation0.10.1
core-foundation-sys0.8.7
der0.8.0
equivalent1.0.2
errno0.3.14
fastrand2.4.1
find-msvc-tools0.1.9
foldhash0.1.5
foreign-types0.3.2
foreign-types-shared0.1.1
futures0.3.32
futures-channel0.3.32
futures-core0.3.32
futures-executor0.3.32
futures-io0.3.32
futures-macro0.3.32proc macro
futures-sink0.3.32
futures-task0.3.32
futures-util0.3.32
getrandom0.4.2build script, not run
hashbrown0.15.5
hashbrown0.17.1
heck0.5.0
hmac-sha2561.1.14
http1.4.0
http-body1.0.1
httparse1.10.1build script
hyper1.9.0
id-arena2.3.0
indexmap2.14.0
itoa1.0.18
ld-linux-x86-64.so.2system library
leb128fmt0.1.0
libc0.2.186build script
libc.so.6system library
libcrypto.so.3system library
libgcc_s.so.1system library
libm.so.6system library
libmvec.so.1system library
libssl.so.3system library
linux-raw-sys0.12.1
lock_api0.4.14
log0.4.34
lzma-rust20.15.7
matrixmultiply0.3.10build script
memchr2.8.3
mio1.2.0
native-tls0.2.18build script
ndarray0.17.2
num-complex0.4.6
num-integer0.1.46
num-traits0.2.19build script
once_cell1.21.4
openssl0.10.80build script
openssl-macros0.1.1proc macro
openssl-probe0.2.1
openssl-sys0.9.116build script
ort2.0.0-rc.12
ort-sys2.0.0-rc.12build scriptnetworkcdn.pyke.io
parking_lot0.12.5
parking_lot_core0.9.12build script
pem-rfc74681.0.0
percent-encoding2.3.2
pin-project-lite0.2.17
pkg-config0.3.33
portable-atomic1.13.1build script, not run
portable-atomic-util0.2.7build script, not run
prettyplease0.2.37build script, not run
proc-macro21.0.106build script
quote1.0.45build script
r-efi6.0.0
rawpointer0.2.1
redox_syscall0.5.18
regex1.12.3
regex-automata0.4.14
regex-syntax0.8.10
rustix1.1.4build script, not run
rustls-pki-types1.14.1
schannel0.1.29
scopeguard1.2.0
security-framework3.7.0
security-framework-sys2.17.0
semver1.0.28
serde1.0.229build script
serde_core1.0.229build script
serde_derive1.0.229proc macro
serde_json1.0.151build script, not run
shlex1.3.0
signal-hook-registry1.4.8
slab0.4.12
smallvec1.15.2
socket20.6.3
socks0.3.4
syn2.0.117
syn3.0.3
tempfile3.27.0
thiserror2.0.20build script
thiserror-impl2.0.20proc macro
tokio1.52.3
tokio-macros2.7.0proc macro
tracing0.1.44
tracing-core0.1.36
unicode-ident1.0.24
unicode-xid0.2.6
ureq3.3.0
ureq-proto0.6.0
utf8-zero0.8.1
vcpkg0.2.15prebuilt objects
wasi0.11.1+wasi-snapshot-preview1
wasip21.0.3+wasi-0.2.9
wasip30.4.0+wasi-0.3.0-rc-2026-01-06
wasm-encoder0.244.0
wasm-metadata0.244.0
wasmparser0.244.0
webpki-root-certs1.0.7
winapi0.3.9build script, not run
winapi-i686-pc-windows-gnu0.4.0build script, not runprebuilt objects
winapi-x86_64-pc-windows-gnu0.4.0build script, not runprebuilt objects
windows-link0.2.1
windows-sys0.61.2
wit-bindgen0.51.0build script, not runprebuilt objects
wit-bindgen0.57.1build script, not runprebuilt objects
wit-bindgen-core0.51.0
wit-bindgen-rust0.51.0build script, not run
wit-bindgen-rust-macro0.51.0build script, not runproc macro
wit-component0.244.0
wit-parser0.244.0
zeroize1.8.2
zmij1.0.21build script, not run

Raw data

capture
406 KB
records
53,286
bytes per record
7.6

Loading a sample of the capture

Want to see more? E-mail us at hello@bitbison.io about your use case.

1 of 1 jobs captured: build-test success · Generated 2026-10-13 · run 13815a94-0823-442f-960a-281ffa7e53d3

analysis 0.1.0 · 2026-10-11 · d6246d3 · graph v2