Skip to content
Open-Source Registry

cargo / ts-pack-cli / 1.22.1

ts-pack-cli 1.22.1

bitbison: flagged, behavior flagged, dependencies clean, posture not checked, pipeline clean, 1 of 1 jobs captured 1 detection
processes
313
operations
67K
packages
243
compiler runs
647
connections
3
job time
3m 12s
capture
789 KB
records
118K
bytes / record
6.7

Build behaviourundeclared fetchfetch went into the outputfetched outside crates.iocompiled C/C++

run 3d29b711-bf1f-41d4-94ec-4a50bad50174 · built 2026-10-12 · complete

Artifact

binary · retained · product · graph v2
1

Checks

13 of 14 clear Network activity
Build behavior▲✓✓✓✓✓✓✓
Supply chain✓✓✓✓✓
Pipeline✓

Detections

1
  • Build code opened a network connection
    tree-sitter-language-pack 1.22.1 › github.com:443, release-assets.githubusercontent.com:443
    high

Detection

highwitnessed

Build code opened a network connection

Unexpected network connection

Subject
tree-sitter-language-pack 1.22.1
Destination
github.com:443, release-assets.githubusercontent.com:443
Reaches
Jobs
build-test
Rule
egress · tree-sitter-language-pack

Evidence

  1. Connection outside the process’s allowed destinationscause

    connection to github.com:443, opened by build-script-build

    subject github.com:443

    by /home/runner/work/tree-sitter-language-pack/tree-sitter-language-pack/target/release/build/tree-sitter-language-pack-5bb882bf48418408/build-script-build

  2. Connection outside the process’s allowed destinationscause

    connection to release-assets.githubusercontent.com:443, opened by build-script-build

    subject release-assets.githubusercontent.com:443

    by /home/runner/work/tree-sitter-language-pack/tree-sitter-language-pack/target/release/build/tree-sitter-language-pack-5bb882bf48418408/build-script-build

  3. Connection opened by a build script or child processsupport

    the opener is the build script at /home/runner/work/tree-sitter-language-pack/tree-sitter-language-pack/target/release/build/tree-sitter-language-pack-5bb882bf48418408/build-script-build

Processes

build-test

cargo›cargo›build-script-build

Ran
/home/runner/work/tree-sitter-language-pack/tree-sitter-language-pack/target/release/build/tree-sitter-language-pack-5bb882bf48418408/build-script-build
Invoked by
cargo build --release --locked --message-format=json-render-diagnostics
Lineage · 3 processes
  1. cargocargo build --release --locked --message-format=json-render-diagnostics2447
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo build --release --locked --message-format=json-render-diagnostics2447
  3. build-script-build/home/runner/work/tree-sitter-language-pack/tree-sitter-language-pack/target/release/build/tree-sitter-language-pack-5bb882bf48418408/build-script-build5986

Remediation

Review the process and its owning build step. Remove unnecessary requests; move required downloads to a declared dependency-fetch step.

Network

3 peers
  • github.com:443 build code of tree-sitter-language-pack · build-script-build (tree-sitter-language-pack) · GitHub, Inc. · 2,570 files · went into an output undeclared
  • release-assets.githubusercontent.com:443 build code of tree-sitter-language-pack · build-script-build (tree-sitter-language-pack) · Fastly, Inc. · 2,570 files · went into an output undeclared
  • static.crates.io:8080 the package manager · cargo (tree-sitter-language-pack) via crates.io · 15,011 files · went into an output ecosystem
Dependencies247Build behaviour
ahash0.8.12build script
aho-corasick1.1.5
anstream1.0.0
anstyle1.0.14
anstyle-parse1.0.0
anstyle-query1.1.5
async-trait0.1.92proc macro
atomic-waker1.1.2
axum0.8.9
axum-core0.5.6
axum-macros0.5.1proc macro
base640.23.1
bitflags2.13.2
block-buffer0.12.1
byteorder1.5.0
bytes1.12.1
cc1.8.0
cfg-if1.0.5
chrono0.4.45
clap4.6.7
clap_builder4.6.7
clap_complete4.6.11
clap_derive4.6.7proc macro
clap_lex1.1.1
colorchoice1.0.5
const-oid0.10.2
const-random0.1.18
const-random-macro0.1.16proc macro
cpufeatures0.3.1
crc32fast1.5.2build script
crunchy0.2.4build script
crypto-common0.2.2
darling0.24.1
darling_core0.24.1
darling_macro0.24.1proc macro
digest0.11.3
dirs7.0.0
dirs-sys0.5.0
dyn-clone1.0.20
equivalent1.0.2
errno0.3.14
fd-lock4.0.4
filetime0.2.29
find-msvc-tools0.1.14
flate21.1.10
foldhash0.2.0
form_urlencoded1.2.2
futures0.3.34
futures-channel0.3.34
futures-core0.3.34
futures-executor0.3.34
futures-io0.3.34
futures-macro0.3.34proc macro
futures-sink0.3.34
futures-task0.3.34
futures-util0.3.34
getrandom0.2.17
getrandom0.4.3build script
hashbrown0.17.1
heck0.5.0
http1.5.0
http-body1.1.0
http-body-util0.1.5
httparse1.10.1build script
httpdate1.0.3
hybrid-array0.4.15
hyper1.12.0
hyper-util0.1.21
ident_case1.0.1
indexmap2.14.2
is_terminal_polyfill1.70.2
itoa1.0.18
jobserver0.1.35
lazy_static1.5.1
ld-linux-x86-64.so.2system library
libc0.2.190build script
libc.so.6system library
libgcc_s.so.1system library
libloading0.9.0
libm.so.6system library
libmvec.so.1system library
linux-raw-sys0.12.1
log0.4.34
matchers0.2.0
matchit0.8.4
memchr2.8.3
mime0.3.17
miniz_oxide0.9.1
mio1.2.4
nu-ansi-term0.50.3
num-traits0.2.19build script
once_cell1.21.4
openssl-probe0.2.1
option-ext0.2.0
pastey0.2.3proc macro
percent-encoding2.3.2
pin-project-lite0.2.17
pkg-config0.3.34
proc-macro21.0.107build script
quote1.0.47build script
rand_core0.10.1
ref-cast1.0.27build script
ref-cast-impl1.0.27proc macro
regex1.13.1
regex-automata0.4.18
regex-syntax0.8.11
ring0.17.14build scriptprebuilt objects
rmcp3.5.1build script
rmcp-macros3.5.1proc macro
rustix1.1.5build script
rustls0.23.45build script
rustls-native-certs0.8.4
rustls-pki-types1.15.1
rustls-platform-verifier0.7.1
rustls-webpki0.103.15
ryu1.0.23
schemars1.2.2
schemars_derive1.2.2proc macro
serde1.0.229build script
serde_core1.0.229build script
serde_derive1.0.229proc macro
serde_derive_internals0.30.0
serde_json1.0.154build script
serde_path_to_error0.1.20
serde_spanned1.1.2
serde_urlencoded0.7.1
sha20.11.0
sharded-slab0.1.7
shlex2.0.1
signal-hook-registry1.4.8
simd-adler320.3.10
slab0.4.12
smallvec1.16.3
socket20.6.5
socks0.3.4
sse-stream0.2.6
streaming-iterator0.1.9
strsim0.11.1
subtle2.6.1
syn2.0.119
syn3.0.8
sync_wrapper1.0.2
tar0.4.46
thiserror2.0.21build script
thiserror-impl2.0.21proc macro
thread_local1.1.10
tiny-keccak2.0.2build script
tokio1.53.2
tokio-macros2.7.2proc macro
tokio-stream0.1.19
tokio-util0.7.20
toml1.1.8+spec-1.1.0
toml_datetime1.1.2+spec-1.1.0
toml_parser1.1.5+spec-1.1.0
toml_writer1.1.3+spec-1.1.0
tower0.5.3
tower-layer0.3.3
tower-service0.3.3
tracing0.1.44
tracing-attributes0.1.31proc macro
tracing-core0.1.36
tracing-log0.2.0
tracing-subscriber0.3.23
tree-sitter0.27.1build script
tree-sitter-language0.1.9build script
tree-sitter-language-pack1.22.1build scriptnetworkgithub.com, release-assets.githubusercontent.com
typenum1.20.1
unicode-ident1.0.27
untrusted0.9.0
ureq3.4.2
ureq-proto0.6.4
utf8-zero0.8.1
utf8parse0.2.2
uuid1.28.0
webpki-roots1.0.9
winnow1.0.4
xattr1.6.1
zerocopy0.8.62build script
zeroize1.9.1
zmij1.0.23build script
zstd0.14.2
zstd-safe8.1.0build script
zstd-sys2.1.1+zstd.1.5.7build script
adler22.0.1
chacha200.10.2
rand0.10.3
android_system_properties0.1.6
anstyle-wincon3.0.11
autocfg1.5.1
bumpalo3.20.3
combine4.6.8
core-foundation0.10.1
core-foundation-sys0.8.7
iana-time-zone0.1.65
iana-time-zone-haiku0.1.2build script, not run
jni0.22.4build script, not run
jni-macros0.22.4build script, not runproc macro
jni-sys0.4.1
jni-sys-macros0.4.1proc macro
js-sys0.3.106
libredox0.1.25
once_cell_polyfill1.70.2
r-efi6.0.0
redox_users0.5.3
rustc_version0.4.1
rustls-platform-verifier-android0.2.0
rustversion1.0.23build script, not runproc macro
same-file1.0.6
schannel0.1.29
security-framework3.7.0
security-framework-sys2.17.0
semver1.0.28
simd_cesu81.2.0
simdutf80.1.5
valuable0.1.1build script, not run
version_check0.9.5
walkdir2.5.0
wasi0.11.1+wasi-snapshot-preview1
wasm-bindgen0.2.129build script, not run
wasm-bindgen-macro0.2.129proc macro
wasm-bindgen-macro-support0.2.129
wasm-bindgen-shared0.2.129build script, not run
webpki-root-certs1.0.9
winapi0.3.9build script, not run
winapi-i686-pc-windows-gnu0.4.0build script, not runprebuilt objects
winapi-util0.1.11
winapi-x86_64-pc-windows-gnu0.4.0build script, not runprebuilt objects
windows-core0.62.2
windows-implement0.60.2proc macro
windows-interface0.59.3proc macro
windows-link0.2.1
windows-result0.4.1
windows-strings0.5.1
windows-sys0.52.0
windows-sys0.59.0
windows-sys0.61.2
windows-targets0.52.6
windows_aarch64_gnullvm0.52.6build script, not runprebuilt objects
windows_aarch64_msvc0.52.6build script, not runprebuilt objects
windows_i686_gnu0.52.6build script, not runprebuilt objects
windows_i686_gnullvm0.52.6build script, not runprebuilt objects
windows_i686_msvc0.52.6build script, not runprebuilt objects
windows_x86_64_gnu0.52.6build script, not runprebuilt objects
windows_x86_64_gnullvm0.52.6build script, not runprebuilt objects
windows_x86_64_msvc0.52.6build script, not runprebuilt objects
zerocopy-derive0.8.62proc macro
zlib-rs0.6.8

Raw data

capture
789 KB
records
118,106
bytes per record
6.7

Loading a sample of the capture

Want to see more? E-mail us at hello@bitbison.io about your use case.

1 of 1 jobs captured: build-test success · Generated 2026-10-12 · run 3d29b711-bf1f-41d4-94ec-4a50bad50174

analysis 0.1.0 · 2026-10-11 · d6246d3 · graph v2