Skip to content
Open-Source Registry

cargo / topstitch / 0.101.0

topstitch 0.101.0

bitbison: flagged, behavior flagged, dependencies notes, posture not checked, pipeline clean, 1 of 1 jobs captured RiskmediumVulnsnone
processes
394
operations
212K
packages
161
compiler runs
68
connections
2
job time
10m 01s
capture
916 KB
records
275K
bytes / record
3.3

Build behaviourundeclared fetchfetched outside crates.iocompiled C/C++

run 949c4d12-b7d1-4572-a2d4-ae4615179c24 · built 2026-10-16 · complete View on crates.io

Graph

egress · medium · in libtopstitch.rlib
2

Checks

12 of 14 clear Network activity Build-time dependency advisories
Build behavior▲✓✓✓✓✓✓✓
Supply chain✓▲✓✓✓
Pipeline✓

Detections

1
  • Build script reached codeload.github.com
    slang-rs 0.24.0 › codeload.github.com:443
    medium

Detection

mediumwitnessed

Build script reached codeload.github.com

Unexpected network connection

Subject
slang-rs 0.24.0
Destination
codeload.github.com:443
Reaches
Jobs
build-test
Rule
egress · target/release/build/slang-rs-25921cb227191990/out/native/build/_deps/slang-subbuild

Evidence

  1. Connection outside the process’s allowed destinationscause

    connection to codeload.github.com:443, opened by cmake

    subject codeload.github.com:443

    by /usr/bin/cmake -DCMAKE_MESSAGE_LOG_LEVEL=VERBOSE -P /home/runner/work/topstitch/topstitch/target/release/build/slang-rs-25921cb227191990/out/native/build/_deps/…

  2. What a build script's fetch becamesupport

    4 files came down; nothing the build compiled, linked or ran

  3. Connection opened by a build script or child processsupport

    the opener descends from the build script at /home/runner/work/topstitch/topstitch/target/release/build/slang-rs-0df120cb182bc9c1/build-script-build

  4. Tool commandsupport

    Command: /usr/bin/cmake -DCMAKE_MESSAGE_LOG_LEVEL=VERBOSE -P /home/runner/work/topstitch/topstitch/target/release/build/slang-rs-25921cb227191990/out/native/build/_deps/…

    by /usr/bin/cmake -DCMAKE_MESSAGE_LOG_LEVEL=VERBOSE -P /home/runner/work/topstitch/topstitch/target/release/build/slang-rs-25921cb227191990/out/native/build/_deps/…

In libtopstitch.rlib

Loading the graph

Processes

build-test

cargo›cargo›build-script-build›…›sh›cmake

Ran
/usr/bin/cmake -DCMAKE_MESSAGE_LOG_LEVEL=VERBOSE -P /home/runner/work/topstitch/topstitch/target/release/build/slang-rs-25921cb227191990/out/native/build/_deps/…
Invoked by
cargo build --release --locked --message-format=json-render-diagnostics
Lineage · 10 processes
  1. cargocargo build --release --locked --message-format=json-render-diagnostics2476
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo build --release --locked --message-format=json-render-diagnostics2476
  3. build-script-build/home/runner/work/topstitch/topstitch/target/release/build/slang-rs-0df120cb182bc9c1/build-script-build3634
  4. cmakecmake /home/runner/.cargo/registry/src/index.crates.io-f7c75c5af8568ae3/slang-rs-0.24.0/cmake -B /home/runner/work/topstitch/topstitch/target/release/build/slan…3643
  5. cmake/usr/bin/cmake --build . --config Debug3683
  6. gmake/usr/bin/gmake -f Makefile3684
  7. gmake/usr/bin/gmake -s -f CMakeFiles/Makefile2 all3688
  8. gmake/usr/bin/gmake -s -f CMakeFiles/slang-populate.dir/build.make CMakeFiles/slang-populate.dir/build3696
  9. sh/bin/sh -c cd /home/runner/work/topstitch/topstitch/target/release/build/slang-rs-25921cb227191990/out/native/build/_deps && /usr/bin/cmake -DCMAKE_MESSAGE_LOG_…3703
  10. cmake/usr/bin/cmake -DCMAKE_MESSAGE_LOG_LEVEL=VERBOSE -P /home/runner/work/topstitch/topstitch/target/release/build/slang-rs-25921cb227191990/out/native/build/_deps/…3705

Remediation

The build script connected to the network while compiling. Nothing it downloaded was compiled, linked or run. Build the crate from what the registry ships, or accept the download after reviewing it.

Network

2 peers
  • codeload.github.com:443 build code of slang-rs · cmake (target/release/build/slang-rs-25921cb227191990/out/native/build/_deps/slang-subbuild) · GitHub, Inc. · 4 files undeclared
  • static.crates.io:8080 the package manager · cargo (topstitch) via crates.io · 9,728 files · went into an output ecosystem
Dependencies165Build behaviour
aho-corasick1.1.3
allocator-api20.2.21
anstream0.6.18
anstyle1.0.10
anstyle-parse0.2.6
anstyle-query1.1.2
anstyle-wincon3.0.7
approx0.5.1
autocfg1.3.0
bitflags2.6.0
block-buffer0.10.4
byteorder1.5.0
camino1.1.9build script
cargo-platform0.1.9
cargo_metadata0.18.1
cc1.4.7
cfg-if1.0.0
cmake0.1.58
codespan-reporting0.13.1
colorchoice1.0.3
cpufeatures0.2.14
crossbeam-deque0.8.6
crossbeam-epoch0.9.18
crossbeam-utils0.8.21build script
crypto-common0.1.6
curl0.4.47build script
curl-sys0.4.80+curl-8.12.1build scriptruns toolsgit
cxx1.0.197build script
cxx-build1.0.197
cxxbridge-flags1.0.197
cxxbridge-macro1.0.197proc macro
digest0.10.7
earcutr0.4.3
either1.13.0
env_filter0.1.3
env_logger0.11.6
equivalent1.0.1
errno0.3.10
fastrand2.1.1
find-msvc-tools0.1.13
fixedbitset0.5.7
float_next_after1.0.0
foldhash0.1.5
foldhash0.2.0
futures-core0.3.31
futures-macro0.3.31proc macro
futures-task0.3.31
futures-timer3.0.3
futures-util0.3.31
generic-array0.14.7build script
geo0.31.0
geo-types0.7.18
geographiclib-rs0.2.5
getrandom0.3.1build script
glob0.3.3
hash320.3.1
hashbrown0.15.5
hashbrown0.17.1
heapless0.8.0build script
humantime2.1.0
i_float1.15.0
i_key_sort0.6.0
i_overlay4.0.6
i_shape1.14.0
i_tree0.16.0
indexmap2.14.2
is_terminal_polyfill1.70.1
itertools0.10.5
itertools0.11.0
itoa1.0.11
ld-linux-x86-64.so.2system library
libc0.2.169build script
libc.so.6system library
libgcc_s.so.1system library
libm0.2.15build script
libm.so.6system library
libmvec.so.1system library
libz-sys1.1.21build script
link-cplusplus1.0.12build script
linux-raw-sys0.4.14
lock_api0.4.14
log0.4.22
memchr2.7.4
nalgebra0.32.6
nalgebra-macros0.2.2proc macro
num-bigint0.4.6
num-complex0.4.6
num-integer0.1.46
num-rational0.4.2
num-traits0.2.19build script
once_cell1.20.3
openssl-probe0.1.5
openssl-sys0.9.106build script
parking_lot0.12.5
parking_lot_core0.9.12build script
paste1.0.15build scriptproc macro
pin-project-lite0.2.16
pin-utils0.1.0
pkg-config0.3.30
proc-macro-crate3.4.0
proc-macro21.0.86build script
quote1.0.37
rayon1.11.0
rayon-core1.13.0build script
redox_syscall0.5.4
regex1.12.2
regex-automata0.4.13
regex-syntax0.8.5
relative-path1.9.3
robust1.2.0
rstar0.12.2
rstest0.26.1
rstest_macros0.26.1build scriptproc macro
rustc_version0.4.1
rustix0.38.44build script
ryu1.0.18
schannel0.1.24
scopeguard1.2.0
scratch1.0.9build script
semver1.0.24build script
serde1.0.228build script
serde_core1.0.228build script
serde_derive1.0.228proc macro
serde_json1.0.128build script
sha20.10.8
shlex2.0.1
simba0.8.1
slab0.4.12
slang-rs0.24.0build scriptnetworkruns toolscodeload.github.com, git
smallvec1.15.1
socket20.5.7
spade2.15.0
stable_deref_trait1.2.1
syn2.0.87
tempfile3.17.1
termcolor1.4.1
thiserror1.0.64build script
thiserror-impl1.0.64proc macro
toml0.5.11
toml_datetime0.7.5+spec-1.1.0
toml_edit0.23.10+spec-1.0.0
toml_parser1.0.8+spec-1.1.0
typenum1.17.0build script
unicode-ident1.0.13
unicode-width0.2.2
utf8parse0.2.2
vcpkg0.2.15prebuilt objects
version_check0.9.5
wasi0.13.3+wasi-0.2.2
winapi-util0.1.11
windows-link0.2.1
windows-sys0.52.0
windows-sys0.59.0
windows-targets0.52.6
windows_aarch64_gnullvm0.52.6build script, not runprebuilt objects
windows_aarch64_msvc0.52.6build script, not runprebuilt objects
windows_i686_gnu0.52.6build script, not runprebuilt objects
windows_i686_gnullvm0.52.6build script, not runprebuilt objects
windows_i686_msvc0.52.6build script, not runprebuilt objects
windows_x86_64_gnu0.52.6build script, not runprebuilt objects
windows_x86_64_gnullvm0.52.6build script, not runprebuilt objects
windows_x86_64_msvc0.52.6build script, not runprebuilt objects
winnow0.7.14
wit-bindgen-rt0.33.0build script, not runprebuilt objects
xlsynth-vast0.65.0
Versions103RiskVulnsPublished
0.100.0not analyzed12d ago
0.99.0not analyzed2026-08-26
0.98.0not analyzed2026-08-08
0.97.0not analyzed2026-07-13
0.96.0not analyzed2026-05-01
0.95.1not analyzed2026-04-07
0.95.0not analyzed2026-02-25
0.94.0not analyzed2026-02-25
0.93.0not analyzed2026-02-18
0.92.0not analyzed2026-02-16
0.91.0not analyzed2026-02-16
0.90.0not analyzed2026-02-13
0.89.0not analyzed2026-02-12
0.88.0not analyzed2026-02-11
0.87.0not analyzed2026-02-10
0.86.0not analyzed2026-02-09
0.85.0not analyzed2026-02-06
0.84.0not analyzed2026-02-03
0.83.0not analyzed2026-02-02
0.82.0not analyzed2026-01-27
0.81.0not analyzed2026-01-26
0.80.0not analyzed2026-01-26
0.79.0not analyzed2026-01-23
0.78.0not analyzed2026-01-22
0.77.0not analyzed2026-01-21
0.76.0not analyzed2025-12-04
0.75.0not analyzed2025-12-01
0.74.0not analyzed2025-11-18
0.73.0not analyzed2025-11-12
0.72.0not analyzed2025-11-07
0.71.0not analyzed2025-11-03
0.70.0not analyzed2025-10-31
0.69.0not analyzed2025-10-29
0.68.0not analyzed2025-09-26
0.67.0not analyzed2025-09-17
0.66.0not analyzed2025-09-15
0.65.0not analyzed2025-09-02
0.64.0not analyzed2025-08-25
0.63.0not analyzed2025-08-22
0.62.1not analyzed2025-05-12
0.62.0not analyzed2025-05-09
0.61.0not analyzed2025-05-09
0.60.0not analyzed2025-05-08
0.59.0not analyzed2025-05-08
0.58.0not analyzed2025-04-23
0.57.0not analyzed2025-04-16
0.56.0not analyzed2025-04-15
0.55.0not analyzed2025-04-14
0.54.0not analyzed2025-04-11
0.53.0not analyzed2025-02-28
0.52.0not analyzed2025-02-27
0.51.0not analyzed2025-02-21
0.50.0not analyzed2025-02-20
0.49.0not analyzed2025-02-18
0.48.0not analyzed2025-02-18
0.47.0not analyzed2025-02-18
0.46.0not analyzed2025-02-14
0.45.0not analyzed2025-01-27
0.44.0not analyzed2025-01-22
0.43.0not analyzed2025-01-20
0.42.0not analyzed2025-01-20
0.41.0not analyzed2025-01-17
0.40.0not analyzed2025-01-15
0.39.0not analyzed2025-01-15
0.38.0not analyzed2025-01-14
0.37.0not analyzed2025-01-14
0.36.0not analyzed2024-12-19
0.35.0not analyzed2024-12-17
0.34.0not analyzed2024-12-16
0.33.0not analyzed2024-12-13
0.32.0not analyzed2024-12-13
0.31.0not analyzed2024-12-09
0.30.0not analyzed2024-12-08
0.29.0not analyzed2024-12-08
0.28.0not analyzed2024-12-08
0.27.0not analyzed2024-11-19
0.26.0not analyzed2024-11-19
0.25.0not analyzed2024-11-17
0.24.0not analyzed2024-11-16
0.23.0not analyzed2024-11-14
0.22.0not analyzed2024-11-11
0.21.0not analyzed2024-11-05
0.20.0not analyzed2024-10-30
0.19.0not analyzed2024-10-25
0.18.0not analyzed2024-10-23
0.17.0not analyzed2024-10-16
0.16.0not analyzed2024-10-15
0.15.0not analyzed2024-10-11
0.14.0not analyzed2024-10-10
0.13.0not analyzed2024-10-08
0.12.0not analyzed2024-10-08
0.11.0not analyzed2024-10-05
0.10.0not analyzed2024-10-01
0.9.0not analyzed2024-09-30
0.8.0not analyzed2024-09-28
0.7.0not analyzed2024-09-28
0.6.0not analyzed2024-09-25
0.5.0not analyzed2024-09-24
0.4.0not analyzed2024-09-24
0.3.0not analyzed2024-09-19
0.2.0not analyzed2024-09-18
0.1.0not analyzed2024-09-06
0.101.0mediumnone

Raw data

capture
916 KB
records
275,361
bytes per record
3.3

Loading a sample of the capture

Want to see more? E-mail us at hello@bitbison.io about your use case.

1 of 1 jobs captured: build-test success · Generated 2026-10-16 · run 949c4d12-b7d1-4572-a2d4-ae4615179c24

analysis 0.1.0 · 2026-10-16 · 0f8abb0 · graph v2