Skip to content
Open-Source Registry

cargo / taflzero

taflzero 0.2.0

bitbison: flagged, behavior flagged, dependencies clean, posture not checked, pipeline clean, 1 of 1 jobs captured RiskmediumVulnsnone
processes
344
operations
31K
packages
122
compiler runs
220
connections
2
job time
1m 38s
capture
431 KB
records
58K
bytes / record
7.4

Artificial intelligence that plays Copenhagen Hnefatafl and Historical Hnefatafl

Build behaviourfetch went into the outputfetched outside crates.io

187 downloads · GPL-3.0-or-later · source aihnefatafl View on crates.io

Graph

egress · medium · in libtaflzero.rlib
4

Checks

13 of 14 clear Network activity
Build behavior▲✓✓✓✓✓✓✓
Supply chain✓✓✓✓✓
Pipeline✓

Detections

1
  • Build script reached cdn.pyke.io
    ort-sys 2.0.0-rc.12 › cdn.pyke.io:443
    medium

Detection

mediumwitnessed

Build script reached cdn.pyke.io

Unexpected network connection

Subject
ort-sys 2.0.0-rc.12
Destination
cdn.pyke.io:443
Reaches
Jobs
build-test
Rule
egress

Evidence

  1. Connection outside the process’s allowed destinationscause

    connection to cdn.pyke.io:443, opened by build-script-main

    subject cdn.pyke.io:443

    by /home/runner/work/taflzero/taflzero/target/release/build/ort-sys-82c15f12c2f4b951/build-script-main

  2. What a build script's fetch becamesupport

    5 files came down; the build compiled or linked libonnxruntime.a

  3. Connection opened by a build script or child processsupport

    the opener is the build script at /home/runner/work/taflzero/taflzero/target/release/build/ort-sys-82c15f12c2f4b951/build-script-main

  4. Build script fetched what its crate documents it fetchessupport

    ort-sys's build script fetches a prebuilt ONNX Runtime from cdn.pyke.io: ort's default `download-binaries` feature fetches pyke's prebuilt from its CDN

In libtaflzero.rlib

Loading the graph

Processes

build-test

cargo›cargo›build-script-main

Ran
/home/runner/work/taflzero/taflzero/target/release/build/ort-sys-82c15f12c2f4b951/build-script-main
Invoked by
cargo build --release --locked --message-format=json-render-diagnostics
Lineage · 3 processes
  1. cargocargo build --release --locked --message-format=json-render-diagnostics2471
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo build --release --locked --message-format=json-render-diagnostics2471
  3. build-script-main/home/runner/work/taflzero/taflzero/target/release/build/ort-sys-82c15f12c2f4b951/build-script-main3443

Remediation

The crate's build script reached the network at compile time, outside the registry's checksums. Build it from what the registry ships (the crate's own environment variable or from-source feature), or record the download as accepted once it is reviewed.

Network

2 peers
  • cdn.pyke.io:443 build code of ort-sys · build-script-main · Cloudflare, Inc. · 5 files · went into an output documented
  • static.crates.io:8080 the package manager · cargo (taflzero) via crates.io · 12,034 files · went into an output ecosystem
Dependencies122Build behaviour
base640.22.1
base64ct1.8.3
bitflags2.13.0
bumpalo3.20.3
byteorder1.5.0
bytes1.12.0
cfg-if1.0.4
chacha200.10.0
console_error_panic_hook0.1.7
cpufeatures0.3.0
der0.8.0
foreign-types0.3.2
foreign-types-shared0.1.1
hmac-sha2561.1.14
http1.4.2
httparse1.10.1build script
itoa1.0.18
ld-linux-x86-64.so.2system library
libc0.2.186build script
libc.so.6system library
libcrypto.so.3system library
libgcc_s.so.1system library
libm.so.6system library
libmvec.so.1system library
libssl.so.3system library
log0.4.33
lzma-rust20.15.8
matrixmultiply0.3.10build script
memchr2.8.2
native-tls0.2.18build script
ndarray0.17.2
num-complex0.4.6
num-integer0.1.46
num-traits0.2.19build script
once_cell1.21.4
openssl0.10.81build script
openssl-macros0.1.1proc macro
openssl-probe0.2.1
openssl-sys0.9.117build script
ort2.0.0-rc.12
ort-sys2.0.0-rc.12build scriptnetworkcdn.pyke.io
pem-rfc74681.0.0
percent-encoding2.3.2
pin-project-lite0.2.17
proc-macro21.0.106build script
quote1.0.46build script
rand0.10.1
rand_core0.10.1
rand_distr0.6.0
rawpointer0.2.1
rustls-pki-types1.14.1
serde1.0.228build script
serde_core1.0.228build script
serde_derive1.0.228proc macro
serde_json1.0.150build script
smallvec1.15.2
socks0.3.4
syn2.0.118
sysinfo0.38.4
tracing0.1.44
tracing-core0.1.36
unicode-ident1.0.24
ureq3.3.0
ureq-proto0.6.0
utf8-zero0.8.1
wasm-bindgen0.2.125build script
wasm-bindgen-macro0.2.125proc macro
wasm-bindgen-macro-support0.2.125
wasm-bindgen-shared0.2.125build scriptruns toolsgit
webpki-root-certs1.0.8
zeroize1.9.0
zmij1.0.21build script
csv1.4.0
csv-core0.1.13
futures-core0.3.32
futures-task0.3.32
futures-util0.3.32
indoc2.0.7proc macro
js-sys0.3.102
libm0.2.16build script
ryu1.0.23
slab0.4.12
web-sys0.3.102
autocfg1.5.1
cc1.2.65
core-foundation0.10.1
core-foundation-sys0.8.7
errno0.3.14
fastrand2.4.1
find-msvc-tools0.1.9
getrandom0.4.3build script, not run
linux-raw-sys0.12.1
ntapi0.4.3build script, not run
objc2-core-foundation0.3.2
objc2-io-kit0.3.2
pkg-config0.3.33
portable-atomic1.13.1build script, not run
portable-atomic-util0.2.7build script, not run
r-efi6.0.0
rustix1.1.4build script, not run
rustversion1.0.22build scriptproc macro
schannel0.1.29
security-framework3.7.0
security-framework-sys2.17.0
shlex2.0.1
tempfile3.27.0
vcpkg0.2.15prebuilt objects
winapi0.3.9build script, not run
winapi-i686-pc-windows-gnu0.4.0build script, not runprebuilt objects
winapi-x86_64-pc-windows-gnu0.4.0build script, not runprebuilt objects
windows0.62.2
windows-collections0.3.2
windows-core0.62.2
windows-future0.3.2
windows-implement0.60.2proc macro
windows-interface0.59.3proc macro
windows-link0.2.1
windows-numerics0.3.1
windows-result0.4.1
windows-strings0.5.1
windows-sys0.61.2
windows-threading0.2.1
Versions2RiskVulnsPublished
0.1.0not analyzed2026-08-27
0.2.0mediumnone

Raw data

capture
431 KB
records
58,045
bytes per record
7.4

Loading a sample of the capture

Want to see more? E-mail us at hello@bitbison.io about your use case.

1 of 1 jobs captured: build-test success · Generated 2026-10-16 · run 510ea760-711b-4062-a6b7-2f9997b78c8b

analysis 0.1.0 · 2026-10-16 · e987d53 · graph v2