cargo / tla-checker / 0.24.7
Artifact
- libtla_checker.rlibfile · retained · product
- tlabinary · retained · product
- tla-mcpbinary · retained · product 4
Checks
13 of 14 clear Known vulnerabilitiesBuild behavior✓✓✓✓✓✓✓✓
Supply chain▲✓✓✓✓
Pipeline✓
Detections
0No detections
No abnormal activity detected across 55K flows.
Network
1 peers- static.crates.io:8080 ecosystem
| Dependencies203 | Build behaviour |
|---|---|
| allocator-api20.2.21 | |
| ar_archive_writer0.5.3 | |
| base640.22.1 | |
| bitflags2.13.2 | |
| bytes1.12.1 | |
| castaway0.2.4 | |
| cc1.8.0 | |
| cfg-if1.0.5 | |
| chrono0.4.45 | |
| compact_str0.9.1 | |
| convert_case0.10.0 | |
| crossterm0.29.0 | |
| darling0.23.0 | |
| darling0.24.1 | |
| darling_core0.23.0 | |
| darling_core0.24.1 | |
| darling_macro0.23.0 | |
| darling_macro0.24.1 | |
| derive_more2.1.1 | |
| derive_more-impl2.1.1 | |
| document-features0.2.12 | |
| dyn-clone1.0.20 | |
| either1.19.0 | |
| equivalent1.0.2 | |
| errno0.3.14 | |
| fastrand2.5.0 | |
| find-msvc-tools0.1.14 | |
| foldhash0.2.0 | |
| futures0.3.34 | |
| futures-channel0.3.34 | |
| futures-core0.3.34 | |
| futures-executor0.3.34 | |
| futures-io0.3.34 | |
| futures-macro0.3.34 | |
| futures-sink0.3.34 | |
| futures-task0.3.34 | |
| futures-util0.3.34 | |
| hashbrown0.16.1 | |
| hashbrown0.17.1 | |
| heck0.5.0 | |
| ident_case1.0.1 | |
| indexmap2.14.2 | |
| indoc2.0.8 | |
| instability0.3.14 | |
| itertools0.14.0 | |
| itoa1.0.18 | |
| kasuari0.4.12 | |
| ld-linux-x86-64.so.2 | |
| libc0.2.190 | |
| libc.so.6 | |
| libgcc_s.so.1 | |
| libm.so.6 | |
| libmvec.so.1 | |
| line-clipping0.3.8 | |
| linux-raw-sys0.12.1 | |
| litrs1.0.1 | |
| lock_api0.4.14 | |
| log0.4.34 | |
| memchr2.8.3 | |
| mio1.2.4 | |
| num-traits0.2.19 | |
| object0.39.1 | |
| once_cell1.21.4 | |
| parking_lot0.12.5 | |
| parking_lot_core0.9.12 | |
| pastey0.2.3 | |
| pin-project-lite0.2.17 | |
| proc-macro21.0.107 | |
| psm0.1.32 | |
| quote1.0.47 | |
| ratatui0.30.2 | |
| ratatui-core0.1.2 | |
| ratatui-crossterm0.1.2 | |
| ratatui-widgets0.3.2 | |
| ref-cast1.0.27 | |
| ref-cast-impl1.0.27 | |
| rmcp1.8.0 | |
| rmcp-macros1.8.0 | |
| rustix1.1.5 | |
| rustversion1.0.23 | |
| ryu1.0.23 | |
| schemars1.2.3 | |
| schemars_derive1.2.3 | |
| scopeguard1.2.0 | |
| serde1.0.229 | |
| serde_core1.0.229 | |
| serde_derive1.0.229 | |
| serde_derive_internals0.30.0 | |
| serde_json1.0.154 | |
| serde_spanned1.1.2 | |
| shlex2.0.1 | |
| signal-hook0.3.18 | |
| signal-hook-mio0.2.5 | |
| signal-hook-registry1.4.8 | |
| slab0.4.12 | |
| smallvec1.16.3 | |
| stacker0.1.25 | |
| static_assertions1.1.0 | |
| strsim0.11.1 | |
| strum0.28.0 | |
| strum_macros0.28.0 | |
| syn2.0.119 | |
| syn3.0.9 | |
| thiserror2.0.21 | |
| thiserror-impl2.0.21 | |
| tokio1.53.2 | |
| tokio-macros2.7.2 | |
| tokio-util0.7.20 | |
| toml1.1.8+spec-1.1.0 | |
| toml_datetime1.1.2+spec-1.1.0 | |
| toml_parser1.1.5+spec-1.1.0 | |
| toml_writer1.1.3+spec-1.1.0 | |
| tracing0.1.44 | |
| tracing-attributes0.1.31 | |
| tracing-core0.1.36 | |
| unicode-ident1.0.27 | |
| unicode-segmentation1.13.3 | |
| unicode-truncate2.0.1 | |
| unicode-width0.2.2 | |
| winnow1.0.4 | |
| zmij1.0.23 | |
| lru0.18.5 | |
| @playwright/test1.61.1 | |
| aho-corasick1.1.5 | |
| android_system_properties0.1.6 | |
| anes0.1.6 | |
| anstyle1.0.14 | |
| approx0.5.1 | |
| async-trait0.1.92 | |
| autocfg1.5.1 | |
| bumpalo3.20.3 | |
| by_address1.2.1 | |
| cast0.3.0 | |
| ciborium0.2.2 | |
| ciborium-io0.2.2 | |
| ciborium-ll0.2.2 | |
| clap4.6.7 | |
| clap_builder4.6.7 | |
| clap_lex1.1.1 | |
| core-foundation-sys0.8.7 | |
| criterion0.5.1 | |
| criterion-plot0.5.0 | |
| crossbeam-deque0.8.8 | |
| crossbeam-epoch0.9.21 | |
| crossbeam-utils0.8.23 | |
| crossterm_winapi0.9.1 | |
| crunchy0.2.4 | |
| deranged0.5.8 | |
| fsevents2.3.2 | |
| half2.7.1 | |
| hermit-abi0.5.3 | |
| iana-time-zone0.1.65 | |
| iana-time-zone-haiku0.1.2 | |
| is-terminal0.4.17 | |
| itertools0.10.5 | |
| js-sys0.3.106 | |
| libm0.2.16 | |
| num-conv0.2.2 | |
| num_threads0.1.7 | |
| oorandom11.1.5 | |
| palette0.7.7 | |
| palette_derive0.7.7 | |
| palette_math0.7.7 | |
| playwright1.61.1 | |
| playwright-core1.61.1 | |
| plotters0.3.7 | |
| plotters-backend0.3.7 | |
| plotters-svg0.3.7 | |
| portable-atomic1.15.0 | |
| powerfmt0.2.1 | |
| rayon1.12.0 | |
| rayon-core1.13.0 | |
| redox_syscall0.5.18 | |
| regex1.13.1 | |
| regex-automata0.4.18 | |
| regex-syntax0.8.11 | |
| rustc_version0.4.1 | |
| same-file1.0.6 | |
| semver1.0.28 | |
| time0.3.55 | |
| time-core0.1.9 | |
| tinytemplate1.2.1 | |
| tla-explorer-e2e0.0.0 | |
| walkdir2.5.0 | |
| wasi0.11.1+wasi-snapshot-preview1 | |
| wasm-bindgen0.2.129 | |
| wasm-bindgen-macro0.2.129 | |
| wasm-bindgen-macro-support0.2.129 | |
| wasm-bindgen-shared0.2.129 | |
| web-sys0.3.106 | |
| winapi0.3.9 | |
| winapi-i686-pc-windows-gnu0.4.0 | |
| winapi-util0.1.11 | |
| winapi-x86_64-pc-windows-gnu0.4.0 | |
| windows-core0.62.2 | |
| windows-implement0.60.2 | |
| windows-interface0.59.3 | |
| windows-link0.2.1 | |
| windows-result0.4.1 | |
| windows-strings0.5.1 | |
| windows-sys0.61.2 | |
| zerocopy0.8.62 | |
| zerocopy-derive0.8.62 |
| Vulnerabilities4 | Package | Version | Fix | Severity | Title | Reach |
|---|---|---|---|---|---|---|
| CVE-2026-63127 | rmcp | 1.8.0 | >=2.0.0 | high | RMCP: Missing Resource Field Validation in OAuth Protected Resource Metadata Discovery | retained |
| CVE-2026-63128 | rmcp | 1.8.0 | >=2.0.0 | high | RMCP: Unauthenticated permanent session-table leak in rmcp Streamable HTTP server transport leads to remote denial-of-service | retained |
| CVE-2026-64684 | rmcp | 1.8.0 | >=2.1.0 | medium | RMCP: Custom HTTP headers leak to cross-origin redirect targets | retained |
| GHSA-c9xm-49cp-xcr9 | rmcp | 1.8.0 | >=2.0.0 | medium | rmcp OAuth client fetches server-controlled resource_metadata URLs | retained |
1 of 1 jobs captured: build-test success · Generated 2026-10-13 · run e21b28c7-9fc5-4591-93bb-20ba08aef6d7
analysis 0.1.0 · 2026-10-11 · d6246d3 · graph v2
