Skip to content
Open-Source Registry

cargo / text-to-cypher / 0.3.0

text-to-cypher 0.3.0

bitbison: flagged, behavior flagged, dependencies flagged, posture not checked, pipeline clean, 1 of 1 jobs captured 2 detections8 vulnerabilities
processes
557
operations
135K
packages
370
compiler runs
1,947
connections
3
job time
4m 36s
capture
1.2 MB
records
213K
bytes / record
5.7

Build behaviourundeclared fetchfetched outside crates.iocompiled C/C++

run af96e38d-0051-4641-97d7-802fd6e7dc1c · built 2026-10-11 · complete

Artifact

binary · retained · product · graph v2
2
ChecksDetections
Build behavior
▲ Network activity—
✓ Sensitive data access and transfer—
✓ Cross-process access—
✓ Build file changes—
▲ Build script activity—
✓ Data flow analysis—
✓ Filesystem writes—
✓ Context collection—
Supply chain
▲ Known vulnerabilities—
▲ Build-time dependency advisories—
▲ Dependency advisories—
✓ Declared and observed dependencies—
✓ Dependency and toolchain versions—
Pipeline
✓ Pipeline coverage—

Detections

2
  • Build code opened a network connection
    utoipa-swagger-ui 9.0.2 › github.com:443, codeload.github.com:443
    connection to github.com:443, opened by curl
    high
  • Build script ran curl
    utoipa-swagger-ui 9.0.2 › github.com:443
    Tool invocations: 1. Build script: /home/runner/work/text-to-cypher/text-to-cypher/target/release/build/utoipa-swagger-ui-2de747bc3a4563d4/build-script-build
    medium

Detection

high

Build code opened a network connection

subject utoipa-swagger-ui 9.0.2 · destination github.com:443, codeload.github.com:443

connection to github.com:443, opened by curl

connection to codeload.github.com:443, opened by curl

the opener descends from the build script at /home/runner/work/text-to-cypher/text-to-cypher/target/release/build/utoipa-swagger-ui-2de747bc3a4563d4/build-script-build

  1. rustup2444
  2. cargo2444
  3. build-script-build8771
  4. curl8777at 14:36:59

witnessed · rule egress

Detection

medium

Build script ran curl

subject utoipa-swagger-ui 9.0.2 · destination github.com:443

Tool invocations: 1. Build script: /home/runner/work/text-to-cypher/text-to-cypher/target/release/build/utoipa-swagger-ui-2de747bc3a4563d4/build-script-build

Command: curl -sSL -o /home/runner/work/text-to-cypher/text-to-cypher/target/release/build/utoipa-swagger-ui-859f2ed88b764ef2/out/v5.17.14.zip https://github.com/swagger…

Recorded activity: used a network connection to github.com:443

witnessed · text-to-cypher · rule buildscript

Network

2 fetches
  • codeload.github.com
    build code of utoipa-swagger-ui · curl · 1 file
    undeclared
  • github.com
    build code of utoipa-swagger-ui · curl · 1 file
    undeclared
cargo fetched 23,163 files from static.crates.io
Vulnerable dependencies7PackageVersionFixSeverityTitleReach
RUSTSEC-2026-0258h20.3.27, 0.4.13>=0.4.16highh2 unbounded empty DATA framesretained
GHSA-xhj4-vrgc-hr34actix-http3.11.2>=3.12.1mediumactix-http has HTTP/1.1 CL.TE Request Smugglingretained
GHSA-vhj5-x93p-67jwactix-web-lab0.24.3>=0.26.0mediumactix-web-lab has host header poisoning in redirect middleware can generate attacker-controlled absolute redirectsretained
GHSA-2mjx-qc3c-rqvcrustls0.23.43>=0.23.45mediumRustls: TLS 1.3 handshake messages incorrectly accepted across encryption level boundariesretained
GHSA-7gcf-g7xr-8hxjserde_with3.17.0>=3.21.0mediumserde_with: KeyValueMap serialization panics on empty sequence or map entriesretained
CVE-2026-25727time0.3.45>=0.3.47mediumtime vulnerable to stack exhaustion Denial of Service attackretained
RUSTSEC-2026-0221event-listener5.4.1>=5.4.2low`event-listener` allows `!Send` tags to cross thread boundaries via `StackSlot`retained

Raw data

capture
1.2 MB
records
213,171
bytes per record
5.7

Loading a sample of the capture

Want to see more? E-mail us at hello@bitbison.io about your use case.

Dependencies

422 packages, 37 with a build script that ran, 28 doing more than compiling
PackageVersionUsageBuild behaviour
aws-lc-sys0.45.0linkedbuild scriptprebuilt objects
ring0.17.14linkedbuild scriptprebuilt objects
utoipa-swagger-ui direct9.0.2linkedbuild scriptnetworkruns tools codeload.github.com, github.com, curl
windows_aarch64_gnullvm0.53.1feature_gatedbuild script, not runprebuilt objects
windows_aarch64_msvc0.53.1feature_gatedbuild script, not runprebuilt objects
windows_i686_gnu0.53.1feature_gatedbuild script, not runprebuilt objects
windows_i686_gnullvm0.53.1feature_gatedbuild script, not runprebuilt objects
windows_i686_msvc0.53.1feature_gatedbuild script, not runprebuilt objects
windows_x86_64_gnu0.53.1feature_gatedbuild script, not runprebuilt objects
windows_x86_64_gnullvm0.53.1feature_gatedbuild script, not runprebuilt objects
windows_x86_64_msvc0.53.1feature_gatedbuild script, not runprebuilt objects
actix-macros0.2.4linkedproc macro
actix-multipart-derive0.7.0linkedproc macro
actix-web-codegen4.3.0linkedproc macro
actix-web-lab-derive0.24.0linkedproc macro
ahash0.8.12linkedbuild script
anyhow1.0.102buildtime_onlybuild script, not run
async-trait direct0.1.92linkedproc macro
aws-lc-rs direct1.18.1linkedbuild script
cookie0.16.2linkedbuild script
cookie0.18.1linkedbuild script
crc32fast1.5.0linkedbuild script
crossbeam-epoch0.9.20linkedbuild script
crossbeam-utils0.8.21linkedbuild script
darling_macro0.20.11linkedproc macro
darling_macro0.21.3linkedproc macro
derive_arbitrary1.4.2buildtime_onlyproc macro
derive_more0.99.20linkedproc macro
derive_more-impl2.1.1linkedproc macro
displaydoc0.2.5linkedproc macro
document-features0.2.12linkedproc macro
falkordb direct0.10.4linkedbuild script
futures-macro0.3.34linkedproc macro
generic-array0.14.7linkedbuild script
getrandom0.3.4linkedbuild script
getrandom0.4.2linkedbuild script
httparse1.10.1linkedbuild script
iana-time-zone-haiku0.1.2feature_gatedbuild script, not run
icu_normalizer_data2.1.1linkedbuild script
icu_properties_data2.1.2linkedbuild script
indexmap1.9.3feature_gatedbuild script, not run
jni-sys-macros0.4.1buildtime_onlyproc macro
ld-linux-x86-64.so.2linkedsystem library
libc0.2.185linkedbuild script
libc.so.6linkedsystem library
libgcc_s.so.1linkedsystem library
libm.so.6linkedsystem library
libmvec.so.1linkedsystem library
mime_guess2.0.5linkedbuild script
num-traits0.2.19feature_gatedbuild script, not run
parking_lot_core0.9.12linkedbuild script
paste1.0.15linkedbuild scriptproc macro
portable-atomic1.13.1linkedbuild script
prettyplease0.2.37buildtime_onlybuild script, not run
proc-macro21.0.106linkedbuild script
quinn0.11.9feature_gatedbuild script, not run
quinn-udp0.5.14feature_gatedbuild script, not run
quote1.0.45linkedbuild script
ref-cast1.0.25feature_gatedbuild script, not run
ref-cast-impl1.0.25buildtime_onlyproc macro
rust-embed-impl8.11.0linkedproc macro
rust-mcp-macros0.5.3linkedproc macro
rustix1.1.4linkedbuild script
rustls0.23.43linkedbuild script
rustversion1.0.22linkedbuild scriptproc macro
serde direct1.0.229linkedbuild script
serde_core1.0.229linkedbuild script
serde_derive1.0.229linkedproc macro
serde_json direct1.0.151linkedbuild script
serde_with_macros3.17.0linkedproc macro
strum_macros0.28.0linkedproc macro
system-configuration-sys0.6.0platform_gatedbuild script, not run
thiserror2.0.18linkedbuild script
thiserror-impl1.0.69buildtime_onlyproc macro
thiserror-impl2.0.18linkedproc macro
time-macros0.2.25linkedproc macro
tokio-macros2.7.0linkedproc macro
tracing-attributes0.1.31linkedproc macro
typenum1.19.0linkedbuild script
utoipa-gen5.5.0linkedproc macro
valuable0.1.1feature_gatedbuild script, not run
wasm-bindgen0.2.118platform_gatedbuild script, not run
wasm-bindgen-macro0.2.118buildtime_onlyproc macro
wasm-bindgen-shared0.2.118platform_gatedbuild script, not run
windows-implement0.60.2buildtime_onlyproc macro
windows-interface0.59.3buildtime_onlyproc macro
wit-bindgen-rust0.51.0buildtime_onlybuild script, not run
wit-bindgen-rust-macro0.51.0buildtime_onlybuild script, not runproc macro
yoke-derive0.8.2linkedproc macro
zerocopy0.8.48linkedbuild script
zerocopy-derive0.8.48buildtime_onlyproc macro
zerofrom-derive0.1.7linkedproc macro
zerovec-derive0.11.3linkedproc macro
zmij1.0.21linkedbuild script
zstd-safe7.2.4linkedbuild script
zstd-sys2.0.16+zstd.1.5.7linkedbuild script
actix-codec0.5.2linked
actix-http3.11.2linked
actix-multipart direct0.7.2linked
actix-router0.5.4linked
actix-rt2.11.0linked
actix-server2.6.0linked
actix-service2.0.3linked
actix-utils3.0.1linked
actix-web direct4.12.1linked
actix-web-lab direct0.24.3linked
aho-corasick1.1.4linked
alloc-no-stdlib2.0.4linked
alloc-stdlib0.2.2linked
android_system_properties0.1.5feature_gated
arbitrary1.4.2buildtime_only
arc-swap1.9.1linked
arcstr1.2.0linked
async-compression0.4.42linked
async-lock3.4.2linked
atomic-waker1.1.2linked
autocfg1.5.0buildtime_only
axum0.8.9linked
axum-core0.5.6linked
axum-server0.7.3linked
backon1.6.0linked
base640.22.1linked
bitflags2.11.1linked
block-buffer0.10.4linked
brotli8.0.2linked
brotli-decompressor5.0.0linked
bumpalo3.20.2linked
bytes1.11.1linked
bytestring1.5.0linked
cc1.2.60linked
cesu81.1.0platform_gated
cfg-if1.0.4linked
cfg_aliases0.2.1buildtime_only
chacha200.10.1feature_gated
chrono0.4.44feature_gated
cmake0.1.58linked
combine4.6.7linked
compression-codecs0.4.38linked
compression-core0.4.32linked
convert_case0.10.0linked
convert_case0.4.0linked
cookie_store0.22.0linked
core-foundation-sys0.8.7platform_gated
cpufeatures0.2.17linked
cpufeatures0.3.0feature_gated
crossbeam-channel0.5.15linked
crypto-common0.1.7linked
csv1.4.0linked
csv-core0.1.13linked
darling0.20.11linked
darling0.21.3linked
darling_core0.20.11linked
darling_core0.21.3linked
deranged0.5.8linked
derive_more2.1.1linked
digest0.10.7linked
dotenvy direct0.15.7linked
dunce1.0.5linked
dyn-clone1.0.20feature_gated
either1.15.0linked
encoding_rs0.8.35linked
equivalent1.0.2linked
errno0.3.14linked
event-listener5.4.1linked
event-listener-strategy0.5.4linked
fastrand2.4.1linked
find-msvc-tools0.1.9linked
flate21.1.9linked
fnv1.0.7linked
foldhash0.1.5linked
form_urlencoded1.2.2linked
fs_extra1.3.0linked
futures direct0.3.34linked
futures-channel0.3.34linked
futures-core0.3.34linked
futures-executor0.3.34linked
futures-io0.3.34linked
futures-sink0.3.34linked
futures-task0.3.34linked
futures-util direct0.3.34linked
genai direct0.6.5linked
getrandom0.2.17linked
h20.3.27linked
h20.4.13linked
hashbrown0.12.3feature_gated
hashbrown0.15.5buildtime_only
hashbrown0.17.0linked
heck0.5.0linked
hex0.4.3feature_gated
http0.2.12linked
http1.4.0linked
http-body1.0.1linked
http-body-util0.1.3linked
httpdate1.0.3linked
hyper1.9.0linked
hyper-rustls0.27.8linked
hyper-util0.1.20linked
iana-time-zone0.1.65feature_gated
icu_collections2.1.1linked
icu_locale_core2.1.1linked
icu_normalizer2.1.1linked
icu_properties2.1.2linked
icu_provider2.1.1linked
id-arena2.3.0buildtime_only
ident_case1.0.1linked
idna1.1.0linked
idna_adapter1.2.1linked
impl-more0.1.9linked
indexmap2.14.0linked
ipnet2.12.0linked
iri-string0.7.12linked
itertools0.14.0linked
itoa1.0.18linked
jni0.21.1platform_gated
jobserver0.1.34linked
js-sys0.3.95platform_gated
language-tags0.3.2linked
lazy_static1.5.0linked
leb128fmt0.1.0buildtime_only
linux-raw-sys0.12.1linked
litemap0.8.2linked
litrs1.0.0linked
local-channel0.1.5linked
local-waker0.1.4linked
lock_api0.4.14linked
log0.4.29linked
lru-slab0.1.2feature_gated
matchers0.2.0linked
matchit0.8.4linked
memchr2.8.0linked
mime0.3.17linked
miniz_oxide0.8.9linked
mio1.2.0linked
moka direct0.12.16linked
nu-ansi-term0.50.3linked
num-conv0.1.0linked
once_cell1.21.4linked
openssl-probe0.2.1linked
parking2.2.1linked
parking_lot0.12.5linked
parse-size1.1.0linked
percent-encoding2.3.2linked
pin-project-lite0.2.17linked
pkg-config0.3.33linked
potential_utf0.1.5linked
powerfmt0.2.0linked
ppv-lite860.2.21linked
psl-types2.0.11linked
publicsuffix2.3.0linked
quinn-proto0.11.16feature_gated
rand0.10.2feature_gated
rand0.8.6linked
rand0.9.4linked
rand_chacha0.3.1linked
rand_chacha0.9.0linked
rand_core0.6.4linked
rand_core0.9.5linked
rand_pcg0.10.2feature_gated
redis direct1.2.2linked
redox_syscall0.5.18platform_gated
regex direct1.13.1linked
regex-automata0.4.16linked
regex-lite0.1.9linked
regex-syntax0.8.11linked
reqwest direct0.12.28linked
reqwest0.13.2linked
rust-embed8.11.0linked
rust-embed-utils8.11.0linked
rust-mcp-schema0.7.5linked
rust-mcp-sdk direct0.7.4linked
rust-mcp-transport0.6.3linked
rustc-hash2.1.2feature_gated
rustc_version0.4.1buildtime_only
rustls-native-certs0.8.3linked
rustls-pki-types1.14.0linked
rustls-platform-verifier0.6.2linked
rustls-platform-verifier-android0.1.1platform_gated
rustls-webpki0.103.13linked
ryu1.0.23linked
same-file1.0.6linked
schannel0.1.29platform_gated
schemars0.9.0feature_gated
schemars1.2.1feature_gated
scopeguard1.2.0linked
security-framework3.7.0platform_gated
security-framework-sys2.17.0platform_gated
semver1.0.28buildtime_only
serde_html_form0.2.8linked
serde_path_to_error0.1.20linked
serde_plain1.0.2linked
serde_urlencoded0.7.1linked
serde_with3.17.0linked
serde_yaml_ng direct0.10.0linked
sha10.10.6linked
sha20.10.9linked
sharded-slab0.1.7linked
shlex1.3.0linked
signal-hook-registry1.4.8linked
simd-adler320.3.9linked
slab0.4.12linked
smallvec1.15.1linked
socket20.5.10linked
socket20.6.3linked
stable_deref_trait1.2.1linked
strsim0.11.1linked
strum direct0.28.0linked
subtle2.6.1linked
syn2.0.117linked
syn3.0.1linked
sync_wrapper1.0.2linked
synstructure0.13.2linked
system-configuration0.7.0platform_gated
tagptr0.2.0linked
tempfile3.27.0linked
thread_local1.1.9linked
time0.3.45linked
time-core0.1.7linked
tinystr0.8.3linked
tinyvec1.11.0feature_gated
tinyvec_macros0.1.1feature_gated
tokio direct1.53.2linked
tokio-rustls0.26.4linked
tokio-stream direct0.1.19linked
tokio-util0.7.18linked
tower0.5.3linked
tower-http0.6.8linked
tower-layer0.3.3linked
tower-service0.3.3linked
tracing direct0.1.44linked
tracing-core0.1.36linked
tracing-log0.2.0linked
tracing-subscriber direct0.3.23linked
try-lock0.2.5linked
unicase2.9.0linked
unicode-ident1.0.24linked
unicode-segmentation1.13.2linked
unicode-xid0.2.6linked
unsafe-libyaml0.2.11linked
untrusted0.7.1linked
untrusted0.9.0linked
url2.5.8linked
utf8_iter1.0.4linked
utoipa direct5.5.0linked
uuid direct1.26.1linked
value-ext0.1.3linked
version_check0.9.5buildtime_only
walkdir2.5.0linked
want0.3.1linked
wasi0.11.1+wasi-snapshot-preview1platform_gated
wasip21.0.1+wasi-0.2.4platform_gated
wasip30.4.0+wasi-0.3.0-rc-2026-01-06platform_gated
wasm-bindgen-futures0.4.68platform_gated
wasm-bindgen-macro-support0.2.118buildtime_only
wasm-encoder0.244.0buildtime_only
wasm-metadata0.244.0buildtime_only
wasmparser0.244.0buildtime_only
web-sys0.3.95platform_gated
web-time1.1.0platform_gated
webpki-root-certs1.0.6platform_gated
webpki-roots1.0.6linked
winapi-util0.1.11platform_gated
windows-core0.62.2feature_gated
windows-link0.2.1platform_gated
windows-registry0.6.1platform_gated
windows-result0.4.1platform_gated
windows-strings0.5.1platform_gated
windows-sys0.60.2feature_gated
windows-targets0.53.5feature_gated
wit-bindgen-core0.51.0buildtime_only
wit-component0.244.0buildtime_only
wit-parser0.244.0buildtime_only
writeable0.6.3linked
xxhash-rust0.8.19linked
yoke0.8.2linked
zerofrom0.1.7linked
zeroize1.8.2linked
zerotrie0.2.4linked
zerovec0.11.6linked
zip3.0.0linked
zlib-rs0.6.3linked
zopfli0.8.3linked
zstd0.13.3linked
windows_aarch64_gnullvm0.42.2unverifiedbuild script, not runprebuilt objects
windows_aarch64_gnullvm0.52.6unverifiedbuild script, not runprebuilt objects
windows_aarch64_msvc0.42.2unverifiedbuild script, not runprebuilt objects
windows_aarch64_msvc0.52.6unverifiedbuild script, not runprebuilt objects
windows_i686_gnu0.42.2unverifiedbuild script, not runprebuilt objects
windows_i686_gnu0.52.6unverifiedbuild script, not runprebuilt objects
windows_i686_gnullvm0.52.6unverifiedbuild script, not runprebuilt objects
windows_i686_msvc0.42.2unverifiedbuild script, not runprebuilt objects
windows_i686_msvc0.52.6unverifiedbuild script, not runprebuilt objects
windows_x86_64_gnu0.42.2unverifiedbuild script, not runprebuilt objects
windows_x86_64_gnu0.52.6unverifiedbuild script, not runprebuilt objects
windows_x86_64_gnullvm0.42.2unverifiedbuild script, not runprebuilt objects
windows_x86_64_gnullvm0.52.6unverifiedbuild script, not runprebuilt objects
windows_x86_64_msvc0.42.2unverifiedbuild script, not runprebuilt objects
windows_x86_64_msvc0.52.6unverifiedbuild script, not runprebuilt objects
wit-bindgen0.46.0unverifiedbuild script, not runprebuilt objects
wit-bindgen0.51.0unverifiedbuild script, not runprebuilt objects
fs-err3.3.0deadbuild script
jni-sys0.3.1unverifiedbuild script, not run
thiserror1.0.69unverifiedbuild script, not run
adler22.0.1dead
concurrent-queue2.5.0dead
core-foundation0.10.1unverified
core-foundation0.9.4unverified
dashmap direct6.2.1dead
eventsource-stream0.2.3dead
hashbrown0.14.5dead
jni-sys0.4.1unverified
minimal-lexical0.2.1dead
nom7.1.3dead
r-efi5.3.0unverified
r-efi6.0.0unverified
rand_core0.10.1unverified
wasm-streams0.4.2unverified
wasm-streams0.5.0unverified
windows-sys0.45.0unverified
windows-sys0.52.0unverified
windows-sys0.61.2unverified
windows-targets0.42.2unverified
windows-targets0.52.6unverified

1 of 1 jobs captured: build-test success · Generated 2026-10-11 · run af96e38d-0051-4641-97d7-802fd6e7dc1c

analysis 0.1.0 · 2026-10-10 · ce2b8d5 · graph v2