Skip to content
Open-Source Registry

cargo / switchy_web_server / 0.5.0

switchy_web_server 0.5.0

bitbison: flagged, behavior flagged, dependencies notes, posture not checked, pipeline clean, 1 of 1 jobs captured RiskmediumVulnsnone
processes
447
operations
53K
packages
223
compiler runs
262
connections
3
build time
1m 58s
job time
1m 58s
capture
608 KB
records
90K
bytes / record
6.7

Build behaviourundeclared fetchfetched outside crates.iocompiled C/C++

run 1039edd5-9220-4837-9e94-a33da72f5470 · built 2026-10-16 · complete View on crates.io

Graph

egress · medium · in libswitchy_web_server.rlib
2

Checks

12 of 14 clear Network activity Build-time dependency advisories
Build behavior▲✓✓✓✓✓✓✓
Supply chain✓▲✓✓✓
Pipeline✓

Detections

1
  • Build script reached codeload.github.com +1
    utoipa-swagger-ui 9.0.2 › github.com:443, codeload.github.com:443
    medium

Detection

mediumwitnessed

Build script reached codeload.github.com +1

Unexpected network connection

Subject
utoipa-swagger-ui 9.0.2
Destination
github.com:443, codeload.github.com:443
Reaches
Jobs
build-test
Rule
egress

Evidence

  1. Connection outside the process’s allowed destinationscause

    connection to github.com:443, opened by curl

    subject github.com:443

    by curl -sSL -o /home/runner/work/MoosicBox/MoosicBox/target/release/build/utoipa-swagger-ui-86f4d197998dd02f/out/v5.17.14.zip https://github.com/swagger-api/swagg…

  2. Connection outside the process’s allowed destinationscause

    connection to codeload.github.com:443, opened by curl

    subject codeload.github.com:443

    by curl -sSL -o /home/runner/work/MoosicBox/MoosicBox/target/release/build/utoipa-swagger-ui-86f4d197998dd02f/out/v5.17.14.zip https://github.com/swagger-api/swagg…

  3. What a build script's fetch becamesupport

    1 file came down; nothing the build compiled, linked or ran

  4. Connection opened by a build script or child processsupport

    the opener descends from the build script at /home/runner/work/MoosicBox/MoosicBox/target/release/build/utoipa-swagger-ui-6057f1626b48ca75/build_script_build-6057f1626b48ca75

  5. Tool commandsupport

    Command: curl -sSL -o /home/runner/work/MoosicBox/MoosicBox/target/release/build/utoipa-swagger-ui-86f4d197998dd02f/out/v5.17.14.zip https://github.com/swagger-api/swagg…

    by curl -sSL -o /home/runner/work/MoosicBox/MoosicBox/target/release/build/utoipa-swagger-ui-86f4d197998dd02f/out/v5.17.14.zip https://github.com/swagger-api/swagg…

In libswitchy_web_server.rlib

Loading the graph

Processes

build-test

cargo›cargo›build-script-build›curl

Ran
curl -sSL -o /home/runner/work/MoosicBox/MoosicBox/target/release/build/utoipa-swagger-ui-86f4d197998dd02f/out/v5.17.14.zip https://github.com/swagger-api/swagg…
Invoked by
cargo build --release --locked --message-format=json-render-diagnostics
Lineage · 4 processes
  1. cargocargo build --release --locked --message-format=json-render-diagnostics2530
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo build --release --locked --message-format=json-render-diagnostics2530
  3. build-script-build/home/runner/work/MoosicBox/MoosicBox/target/release/build/utoipa-swagger-ui-6057f1626b48ca75/build-script-build6212
  4. curlcurl -sSL -o /home/runner/work/MoosicBox/MoosicBox/target/release/build/utoipa-swagger-ui-86f4d197998dd02f/out/v5.17.14.zip https://github.com/swagger-api/swagg…6222

Remediation

The build script connected to the network while compiling. Nothing it downloaded was compiled, linked or run. Build the crate from what the registry ships, or accept the download after reviewing it.

Network

3 peers
  • codeload.github.com:443 build code of utoipa-swagger-ui · curl · GitHub, Inc. · 1 file undeclared
  • github.com:443 build code of utoipa-swagger-ui · curl · GitHub, Inc. · 1 file undeclared
  • static.crates.io:8080 the package manager · cargo (MoosicBox) via crates.io · 10,930 files · went into an output ecosystem
Dependencies225Build behaviour
actix-codec0.5.4
actix-cors0.7.2
actix-htmx0.4.1
actix-http3.19.0
actix-http-test3.3.0
actix-macros0.2.5proc macro
actix-router0.5.4
actix-rt2.15.0
actix-server2.10.0
actix-service2.0.3
actix-test0.1.5
actix-tls3.6.1
actix-utils3.0.2
actix-web4.17.0
actix-web-codegen4.4.0proc macro
adler22.0.1
aho-corasick1.1.5
alloc-no-stdlib3.0.0
alloc-stdlib0.3.0
arbitrary1.5.0
awc3.10.0
base640.22.1
bitflags2.13.2
block-buffer0.12.1
brotli9.0.0
brotli-decompressor6.0.1
bumpalo3.20.3
bytes1.12.1
bytestring1.5.1
cc1.8.0
cfg-if1.0.5
chacha200.10.2
colored3.1.1
const-oid0.10.2
const_format0.2.36
const_format_proc_macros0.2.34proc macro
convert_case0.10.0
cookie0.16.2build script
core_detect1.0.0
cpufeatures0.3.1
crc32fast1.5.2build script
crypto-common0.2.2
deranged0.5.9
derive_arbitrary1.5.0proc macro
derive_more2.1.1
derive_more-impl2.1.1proc macro
digest0.11.3
displaydoc0.2.7proc macro
encoding_rs0.8.42build script
equivalent1.0.3
errno0.3.14
find-msvc-tools0.1.14
flate21.1.10
fnv1.0.7
foldhash0.2.0
foreign-types0.3.2
foreign-types-shared0.1.1
form_urlencoded1.2.2
futures0.3.34
futures-channel0.3.34
futures-core0.3.34
futures-executor0.3.34
futures-io0.3.34
futures-macro0.3.34proc macro
futures-sink0.3.34
futures-task0.3.34
futures-util0.3.34
getrandom0.4.3build script
h20.3.27
hashbrown0.17.1
heck0.5.0
http0.2.12
http1.5.0
httparse1.10.1build script
httpdate1.0.3
hybrid-array0.4.15
icu_collections2.3.0
icu_locale_core2.3.0
icu_normalizer2.3.0
icu_normalizer_data2.3.0build script
icu_properties2.3.0
icu_properties_data2.3.0build script
icu_provider2.3.1
idna1.1.0
idna_adapter1.2.2
impl-more0.3.10
indexmap2.14.2
itoa1.0.18
jobserver0.1.35
konst0.2.20
konst_macro_rules0.2.19
language-tags0.3.2
ld-linux-x86-64.so.2system library
lexical7.0.5
lexical-core1.0.6
lexical-parse-float1.0.6
lexical-parse-integer1.0.6
lexical-util1.0.7
lexical-write-float1.0.6
lexical-write-integer1.0.6
libc0.2.190build script
libc.so.6system library
libcrypto.so.3system library
libgcc_s.so.1system library
libm.so.6system library
libmvec.so.1system library
libssl.so.3system library
litemap0.8.3
local-channel0.1.5
local-waker0.1.4
lock_api0.4.14
log0.4.34
memchr2.8.3
mime0.3.17
mime_guess2.0.5build script
miniz_oxide0.9.1
mio1.2.4
moosicbox_assert0.5.0
moosicbox_env_utils0.5.0
multiversion_no_op1.0.0proc macro
num-conv0.2.2
once_cell1.21.4
openssl0.10.81build script
openssl-macros0.1.1proc macro
openssl-sys0.9.117build script
parking_lot0.12.5
parking_lot_core0.9.12build script
paste1.0.15build scriptproc macro
percent-encoding2.3.2
pin-project-lite0.2.17
pkg-config0.3.34
potential_utf0.1.6
powerfmt0.2.1
proc-macro21.0.107build script
quote1.0.47build script
r-efi6.0.0
rand0.10.3
rand_core0.10.1
redox_syscall0.5.18
regex1.13.1
regex-automata0.4.18
regex-lite0.1.9
regex-syntax0.8.11
rust-embed8.13.0
rust-embed-impl8.13.0proc macro
rust-embed-utils8.13.0
rustc_version0.4.1
rustversion1.0.23build scriptproc macro
ryu1.0.23
same-file1.0.6
scopeguard1.2.0
semver1.0.28
serde1.0.229build script
serde-querystring0.3.0
serde_core1.0.229build script
serde_derive1.0.229proc macro
serde_json1.0.154build script
serde_urlencoded0.7.1
sha10.11.0
sha20.11.1
shlex2.0.1
signal-hook-registry1.4.8
simd-adler320.3.10
simdutf80.1.5
slab0.4.12
smallvec1.16.3
socket20.6.5
stable_deref_trait1.2.1
strum0.28.0
strum_macros0.28.0proc macro
switchy_http_models0.5.0
switchy_web_server_core0.5.0
switchy_web_server_cors0.5.0
syn2.0.119
syn3.0.9
synstructure0.14.0
thiserror2.0.21build script
thiserror-impl2.0.21proc macro
time0.3.55
time-core0.1.9
time-macros0.2.32proc macro
tinystr0.8.4
tokio1.53.3
tokio-macros2.7.2proc macro
tokio-openssl0.6.5build script
tokio-util0.7.20
tracing0.1.44
tracing-attributes0.1.31proc macro
tracing-core0.1.36
typenum1.20.1
unicase2.10.0
unicode-ident1.0.27
unicode-segmentation1.13.3
unicode-xid0.2.6
url2.5.8
urlencoding2.1.3
utf8_iter1.0.4
utoipa5.5.0
utoipa-gen5.5.0proc macro
utoipa-rapidoc6.0.0
utoipa-redoc6.0.0
utoipa-scalar0.3.0
utoipa-swagger-ui9.0.2build scriptnetworkruns toolscodeload.github.com, github.com, curl
vcpkg0.2.15prebuilt objects
version_check0.9.5
walkdir2.5.0
wasi0.11.1+wasi-snapshot-preview1
winapi-util0.1.11
windows-link0.2.1
windows-sys0.61.2
writeable0.6.4
yoke0.8.3
yoke-derive0.8.4proc macro
zerofrom0.1.8
zerofrom-derive0.1.8proc macro
zerotrie0.2.5
zerovec0.11.8
zerovec-derive0.11.6proc macro
zip3.0.0
zlib-rs0.6.8
zmij1.0.23build script
zopfli0.8.4
zstd0.14.3
zstd-safe8.2.0build script
zstd-sys2.1.2+zstd.1.5.7build script
Versions4RiskVulnsPublished
0.4.0not analyzed2026-07-04
0.3.0not analyzed2026-05-21
0.2.0not analyzed2026-05-20
0.5.0mediumnone

Raw data

capture
608 KB
records
90,481
bytes per record
6.7

Loading a sample of the capture

Want to see more? E-mail us at hello@bitbison.io about your use case.

1 of 1 jobs captured: build-test success · Generated 2026-10-16 · run 1039edd5-9220-4837-9e94-a33da72f5470

analysis 0.1.0 · 2026-10-16 · 0f8abb0 · graph v2