Skip to content
Open-Source Registry

cargo / truffle

truffle 0.7.15

bitbison: flagged, behavior flagged, dependencies notes, posture not checked, pipeline clean, 1 of 1 jobs captured 1 detection
processes
496
operations
39K
packages
201
compiler runs
112
connections
3
job time
1m 13s
capture
488 KB
records
69K
bytes / record
7.1

P2P mesh networking for your devices, built on Tailscale

Build behaviourundeclared fetchfetched outside crates.iocompiled C/C++

658 downloads · MIT · source · crates.io meshnetworkingp2ptailscale

0.7.16 did not build; the badge stands for 0.7.15.

Artifact

file · retained · product · graph v2
1

Checks

12 of 14 clear Network activity Build-time dependency advisories
Build behavior▲✓✓✓✓✓✓✓
Supply chain✓▲✓✓✓
Pipeline✓

Detections

1
  • Build code opened a network connection
    truffle-sidecar 0.7.15 › github.com:443, release-assets.githubusercontent.com:443
    high

Detection

highwitnessed

Build code opened a network connection

Unexpected network connection

Subject
truffle-sidecar 0.7.15
Destination
github.com:443, release-assets.githubusercontent.com:443
Reaches
Jobs
build-test
Rule
egress

Evidence

  1. Connection outside the process’s allowed destinationscause

    connection to github.com:443, opened by build_script_build-c4533a57bfac2d25

    subject github.com:443

    by /home/runner/work/truffle/truffle/target/release/build/truffle-sidecar-c4533a57bfac2d25/build-script-build

  2. Connection outside the process’s allowed destinationscause

    connection to release-assets.githubusercontent.com:443, opened by build_script_build-c4533a57bfac2d25

    subject release-assets.githubusercontent.com:443

    by /home/runner/work/truffle/truffle/target/release/build/truffle-sidecar-c4533a57bfac2d25/build-script-build

  3. Connection opened by a build script or child processsupport

    the opener is the build script at /home/runner/work/truffle/truffle/target/release/build/truffle-sidecar-c4533a57bfac2d25/build_script_build-c4533a57bfac2d25

Processes

build-test

cargo›cargo›build-script-build

Ran
/home/runner/work/truffle/truffle/target/release/build/truffle-sidecar-c4533a57bfac2d25/build-script-build
Invoked by
cargo build --release --locked --message-format=json-render-diagnostics
Lineage · 3 processes
  1. cargocargo build --release --locked --message-format=json-render-diagnostics2443
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo build --release --locked --message-format=json-render-diagnostics2443
  3. build-script-build/home/runner/work/truffle/truffle/target/release/build/truffle-sidecar-c4533a57bfac2d25/build-script-build4722

Remediation

Review the process and its owning build step. Remove unnecessary requests; move required downloads to a declared dependency-fetch step.

Network

3 peers
  • github.com:443 build code of truffle-sidecar · build_script_build-c4533a57bfac2d25 · GitHub, Inc. · 1 file undeclared
  • release-assets.githubusercontent.com:443 build code of truffle-sidecar · build_script_build-c4533a57bfac2d25 · Fastly, Inc. · 1 file undeclared
  • static.crates.io:8080 the package manager · cargo (truffle) via crates.io · 10,536 files · went into an output ecosystem
Dependencies231Build behaviour
adler22.0.1
anyhow1.0.102build script, not run
arrayref0.3.9
arrayvec0.7.6
asn1-rs0.7.1
asn1-rs-derive0.6.0proc macro
asn1-rs-impl0.2.0proc macro
autocfg1.5.0
base640.22.1
bitflags2.11.0
blake31.8.4build script
block-buffer0.10.4
block-buffer0.12.0
bumpalo3.20.2
bytes1.11.1
cc1.2.56
cesu81.1.0
cfg-if1.0.4
cfg_aliases0.2.1
cmov0.5.3
combine4.6.7
const-oid0.10.2
constant_time_eq0.4.2
core-foundation0.10.1
core-foundation-sys0.8.7
cpufeatures0.2.17
cpufeatures0.3.0
crc32fast1.5.0build script
crypto-common0.1.7
crypto-common0.2.1
ctutils0.4.2
data-encoding2.10.0
der-parser10.0.0
deranged0.5.8
deunicode1.6.2
digest0.10.7
digest0.11.2
dirs6.0.0
dirs-sys0.5.0
displaydoc0.2.5proc macro
equivalent1.0.2
errno0.3.14
fastbloom0.14.1
find-msvc-tools0.1.9
flate21.1.9
foldhash0.1.5
futures-core0.3.32
futures-macro0.3.32proc macro
futures-sink0.3.32
futures-task0.3.32
futures-util0.3.32
generic-array0.14.7build script
getrandom0.2.17
getrandom0.3.4build script
getrandom0.4.2build script
hashbrown0.15.5
hashbrown0.16.1
heck0.5.0
hex0.4.3
hmac0.13.0
hostname0.4.2
http1.4.0
httparse1.10.1build script
hybrid-array0.4.10
id-arena2.3.0
indexmap2.13.0
itoa1.0.17
jni0.21.1
jni-sys0.3.0
js-sys0.3.91
lazy_static1.5.0
ld-linux-x86-64.so.2system library
leb128fmt0.1.0
libc0.2.186build script
libc.so.6system library
libgcc_s.so.1system library
libm0.2.16build script
libm.so.6system library
libmvec.so.1system library
libredox0.1.14
log0.4.29
lru-slab0.1.2
memchr2.8.0
minimal-lexical0.2.1
miniz_oxide0.8.9
mio1.1.1
nom7.1.3
num-bigint0.4.6
num-conv0.2.0
num-integer0.1.46
num-traits0.2.19build script, not run
oid-registry0.8.1build script, not run
once_cell1.21.3
openssl-probe0.2.1
option-ext0.2.0
pem3.0.6
percent-encoding2.3.2
pin-project-lite0.2.17
powerfmt0.2.0
ppv-lite860.2.21
prettyplease0.2.37build script, not run
proc-macro21.0.106build script
quinn0.11.9build script
quinn-proto0.11.15
quinn-udp0.5.14build script
quote1.0.45build script
r-efi5.3.0
r-efi6.0.0
rand0.9.2
rand_chacha0.9.0
rand_core0.9.5
rcgen0.14.7
redox_users0.5.2
ring0.17.14build scriptprebuilt objects
rustc-hash2.1.1
rusticata-macros4.1.0
rustls0.23.45build script
rustls-native-certs0.8.3
rustls-pki-types1.14.0
rustls-platform-verifier0.6.2
rustls-platform-verifier-android0.1.1
rustls-webpki0.103.15
rustversion1.0.22build script, not runproc macro
same-file1.0.6
schannel0.1.29
security-framework3.7.0
security-framework-sys2.17.0
semver1.0.27
serde1.0.228build script
serde_core1.0.228build script
serde_derive1.0.228proc macro
serde_json1.0.149build script
sha10.10.6
sha20.11.0
shlex1.3.0
signal-hook-registry1.4.8
simd-adler320.3.8
siphasher1.0.2
slab0.4.12
socket20.6.3
subtle2.6.1
syn2.0.117
synstructure0.13.2
thiserror1.0.69build script
thiserror2.0.18build script
thiserror-impl1.0.69proc macro
thiserror-impl2.0.18proc macro
time0.3.47
time-core0.1.8
time-macros0.2.27proc macro
tinyvec1.11.0
tinyvec_macros0.1.1
tokio1.50.0
tokio-macros2.6.1proc macro
tokio-tungstenite0.29.0
tokio-util0.7.18
tracing0.1.44
tracing-attributes0.1.31proc macro
tracing-core0.1.36
truffle-core0.7.15build script
truffle-sidecar0.7.15build scriptnetworkgithub.com, release-assets.githubusercontent.com
tungstenite0.29.0
typenum1.19.0build script
ulid1.2.1
unicode-ident1.0.24
unicode-normalization0.1.25
unicode-xid0.2.6
untrusted0.9.0
ureq3.3.0
ureq-proto0.6.0
utf8-zero0.8.1
uuid1.22.0
version_check0.9.5
walkdir2.5.0
wasi0.11.1+wasi-snapshot-preview1
wasip21.0.2+wasi-0.2.9
wasip30.4.0+wasi-0.3.0-rc-2026-01-06
wasm-bindgen0.2.114build script, not run
wasm-bindgen-macro0.2.114proc macro
wasm-bindgen-macro-support0.2.114
wasm-bindgen-shared0.2.114build script, not run
wasm-encoder0.244.0
wasm-metadata0.244.0
wasmparser0.244.0
web-time1.1.0
webpki-root-certs1.0.6
webpki-roots1.0.6
winapi-util0.1.11
windows-link0.2.1
windows-sys0.45.0
windows-sys0.52.0
windows-sys0.60.2
windows-sys0.61.2
windows-targets0.42.2
windows-targets0.52.6
windows-targets0.53.5
windows_aarch64_gnullvm0.42.2build script, not runprebuilt objects
windows_aarch64_gnullvm0.52.6build script, not runprebuilt objects
windows_aarch64_gnullvm0.53.1build script, not runprebuilt objects
windows_aarch64_msvc0.42.2build script, not runprebuilt objects
windows_aarch64_msvc0.52.6build script, not runprebuilt objects
windows_aarch64_msvc0.53.1build script, not runprebuilt objects
windows_i686_gnu0.42.2build script, not runprebuilt objects
windows_i686_gnu0.52.6build script, not runprebuilt objects
windows_i686_gnu0.53.1build script, not runprebuilt objects
windows_i686_gnullvm0.52.6build script, not runprebuilt objects
windows_i686_gnullvm0.53.1build script, not runprebuilt objects
windows_i686_msvc0.42.2build script, not runprebuilt objects
windows_i686_msvc0.52.6build script, not runprebuilt objects
windows_i686_msvc0.53.1build script, not runprebuilt objects
windows_x86_64_gnu0.42.2build script, not runprebuilt objects
windows_x86_64_gnu0.52.6build script, not runprebuilt objects
windows_x86_64_gnu0.53.1build script, not runprebuilt objects
windows_x86_64_gnullvm0.42.2build script, not runprebuilt objects
windows_x86_64_gnullvm0.52.6build script, not runprebuilt objects
windows_x86_64_gnullvm0.53.1build script, not runprebuilt objects
windows_x86_64_msvc0.42.2build script, not runprebuilt objects
windows_x86_64_msvc0.52.6build script, not runprebuilt objects
windows_x86_64_msvc0.53.1build script, not runprebuilt objects
wit-bindgen0.51.0build script, not runprebuilt objects
wit-bindgen-core0.51.0
wit-bindgen-rust0.51.0build script, not run
wit-bindgen-rust-macro0.51.0build script, not runproc macro
wit-component0.244.0
wit-parser0.244.0
x509-parser0.18.1
yasna0.5.2
zerocopy0.8.40build script
zerocopy-derive0.8.40proc macro
zeroize1.8.2
zmij1.0.21build script

Raw data

capture
488 KB
records
68,761
bytes per record
7.1

Loading a sample of the capture

Want to see more? E-mail us at hello@bitbison.io about your use case.

1 of 1 jobs captured: build-test success · Generated 2026-10-12 · run 8a2a6534-eead-47b4-ac0a-13f936c1582c

analysis 0.1.0 · 2026-10-11 · d6246d3 · graph v2