Skip to content
Open-Source Registry

cargo / tscribe

tscribe 0.2.5

bitbison: flagged, behavior flagged, dependencies flagged, posture notes, pipeline clean, 1 of 1 jobs captured RisklowVulnslow
processes
312
operations
63K
packages
268
compiler runs
472
connections
1
job time
2m 46s
capture
804 KB
records
114K
bytes / record
7.0

Transcribe any video/audio URL into agent-friendly markdown using whisper.cpp

Build behaviourcompiled C/C++

137 downloads · MIT · source · home page clispeech-to-texttranscriptionwhisperyt-dlp View on crates.io

Artifact

binary · retained · product · graph v2
2

Checks

11 of 15 clear Build script activity Build-time dependency advisories +2 more
Build behavior✓✓✓✓▲✓✓✓
Supply chain✓▲▲✓✓
Build hardening▲
Pipeline✓

Detections

2
  • Build script looked up repository state
    whisper-rs-sys 0.11.1
    low
  • Build is missing recommended hardening flags
    whisper.cpp · posture
    low

Detection

lowwitnessed

Build script looked up repository state

Unexpected build script activity

Subject
whisper-rs-sys 0.11.1
Reaches
tscribe-0f9e79ff235300c7member
Jobs
build-test
Rule
buildscript · tscribe

Evidence

  1. Build script read outside its cratecause

    The script read 2 workspace files outside its crate and allowed build directories (2 under .git/).

    by /home/runner/work/tscribe/tscribe/target/release/build/whisper-rs-sys-794775ae37c969db/build-script-build

  2. File read by the build scriptsupport

    read: /home/runner/work/tscribe/tscribe/.git/objects/00/7400aec4f07c1b2c7985a504391af96514230b

    input /home/runner/work/tscribe/tscribe/.git/objects/00/7400aec4f07c1b2c7985a504391af96514230b

  3. File read by the build scriptsupport

    read: /home/runner/work/tscribe/tscribe/.git/objects/73/36f72fe39b4488ee62e6c1144d22b3baad9481

    input /home/runner/work/tscribe/tscribe/.git/objects/73/36f72fe39b4488ee62e6c1144d22b3baad9481

  4. Build scriptcontext

    build script: /home/runner/work/tscribe/tscribe/target/release/build/whisper-rs-sys-794775ae37c969db/build_script_build-794775ae37c969db — readers: git

    subject build-script-build

Remediation

Review the listed files and the crate's build.rs. Remove unnecessary reads, or use a reviewed dependency version.

Detection

lowinferredposture

Build is missing recommended hardening flags

Missing hardening flags

Subject
/home/runner/work/tscribe/tscribe/target/release/build/whisper-rs-sys-7969e50f1a9fb4a7/out/whisper.cpp
Jobs
build-test
Rule
hardening · target/release/build/whisper-rs-sys-7969e50f1a9fb4a7/out/whisper.cpp

Evidence

  1. Hardening flag missingcause

    stack-protector: missing from all 6 eligible compile commands; add -fstack-protector-strong

  2. Hardening flag missingcause

    fortify: missing from all 6 eligible compile commands; add -D_FORTIFY_SOURCE=2 (needs -O1+)

  3. Hardening flag missingcause

    stack-clash-protection: missing from all 6 eligible compile commands; add -fstack-clash-protection

  4. Hardening flag missingcause

    pie: missing from all 6 eligible compile commands; add -fPIE (with -pie at link)

  5. Hardening flag missingcause

    cf-protection: missing from all 6 eligible compile commands; add -fcf-protection=full (x86-64) / -mbranch-protection=standard (aarch64)

  6. Hardening flag missingcause

    format-security: missing from all 6 eligible compile commands; add -Wformat -Werror=format-security

Processes

build-test

cargo›cargo›build-script-build

Ran
/home/runner/work/tscribe/tscribe/target/release/build/whisper-rs-sys-794775ae37c969db/build-script-build
Invoked by
cargo build --release --locked --message-format=json-render-diagnostics
Lineage · 3 processes
  1. cargocargo build --release --locked --message-format=json-render-diagnostics2528
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo build --release --locked --message-format=json-render-diagnostics2528
  3. build-script-build/home/runner/work/tscribe/tscribe/target/release/build/whisper-rs-sys-794775ae37c969db/build-script-build3949

Remediation

Enable the listed flags for supported targets, rebuild, and verify the resulting compile commands.

Network

1 peers
  • static.crates.io:8080 the package manager · cargo (tscribe) via crates.io · 16,385 files · went into an output ecosystem
Vulnerabilities1PackageFixSeverity
RUSTSEC-2025-0119number_prefix 0.4.0none publishedlow
Dependencies299Build behaviour
aho-corasick1.1.4
anstream1.0.0
anstyle1.0.14
anstyle-parse1.0.0
anstyle-query1.1.5
atomic-waker1.1.2
base640.22.1
bindgen0.69.5build script
bitflags2.11.1
block-buffer0.10.4
bytes1.11.1
cc1.2.60
cexpr0.6.0
cfg-if1.0.4
chrono0.4.44
clang-sys1.8.1build script
clap4.6.1
clap_builder4.6.0
clap_complete4.6.2
clap_derive4.6.1proc macro
clap_lex1.1.0
cmake0.1.58
colorchoice1.0.5
console0.15.11
cpufeatures0.2.17
crypto-common0.1.7
digest0.10.7
directories5.0.1
dirs-sys0.4.1
displaydoc0.2.5proc macro
either1.15.0
env_home0.1.0
equivalent1.0.2
errno0.3.14
fastrand2.4.1
find-msvc-tools0.1.9
fnv1.0.7
form_urlencoded1.2.2
fs_extra1.3.0
futures-channel0.3.32
futures-core0.3.32
futures-io0.3.32
futures-macro0.3.32proc macro
futures-sink0.3.32
futures-task0.3.32
futures-util0.3.32
generic-array0.14.7build script
getrandom0.2.17
getrandom0.4.2build script
glob0.3.3
h20.4.19
hashbrown0.17.0
heck0.5.0
hex0.4.3
home0.5.12
hound3.5.1
http1.4.0
http-body1.0.1
http-body-util0.1.3
httparse1.10.1build script
httpdate1.0.3
hyper1.9.0
hyper-rustls0.27.9
hyper-util0.1.20
iana-time-zone0.1.65
icu_collections2.2.0
icu_locale_core2.2.0
icu_normalizer2.2.0
icu_normalizer_data2.2.0build script
icu_properties2.2.0
icu_properties_data2.2.0build script
icu_provider2.2.0
idna1.1.0
idna_adapter1.2.1
indexmap2.14.0
indicatif0.17.11
ipnet2.12.0
iri-string0.7.12
is_terminal_polyfill1.70.2
itertools0.12.1
itoa1.0.18
lazy_static1.5.0
lazycell1.3.0
ld-linux-x86-64.so.2system library
libc0.2.185build script
libc.so.6system library
libgcc_s.so.1system library
libloading0.8.9
libm.so.6system library
libmvec.so.1system library
linux-raw-sys0.12.1
linux-raw-sys0.4.15
litemap0.8.2
log0.4.29
memchr2.8.0
mio1.2.0
nom7.1.3
num-traits0.2.19build script
number_prefix0.4.0
once_cell1.21.4
option-ext0.2.0
percent-encoding2.3.2
pin-project-lite0.2.17
portable-atomic1.13.1build script
potential_utf0.1.5
prettyplease0.2.37build script
proc-macro21.0.106build script
quote1.0.45build script
regex1.12.3
regex-automata0.4.14
regex-syntax0.8.10
reqwest0.12.28
ring0.17.14build scriptprebuilt objects
rustc-hash1.1.0
rustix0.38.44build script
rustix1.1.4build script
rustls0.23.46build script
rustls-pki-types1.14.0
rustls-webpki0.103.15
ryu1.0.23
serde1.0.228build script
serde_core1.0.228build script
serde_derive1.0.228proc macro
serde_json1.0.149build script
serde_urlencoded0.7.1
sha20.10.9
shlex1.3.0
signal-hook-registry1.4.8
slab0.4.12
smallvec1.15.1
socket20.6.3
stable_deref_trait1.2.1
strsim0.11.1
subtle2.6.1
syn2.0.117
sync_wrapper1.0.2
synstructure0.13.2
tempfile3.27.0
thiserror2.0.18build script
thiserror-impl2.0.18proc macro
tinystr0.8.3
tokio1.52.1
tokio-macros2.7.0proc macro
tokio-rustls0.26.4
tokio-util0.7.18
tower0.5.3
tower-http0.6.8
tower-layer0.3.3
tower-service0.3.3
tracing0.1.44
tracing-core0.1.36
try-lock0.2.5
typenum1.20.0
unicode-ident1.0.24
unicode-width0.2.2
untrusted0.9.0
url2.5.8
utf8_iter1.0.4
utf8parse0.2.2
want0.3.1
webpki-roots1.0.7
which4.4.2
which7.0.3
whisper-rs0.13.2build script
whisper-rs-sys0.11.1build scriptruns toolsgit
writeable0.6.3
yoke0.8.2
yoke-derive0.8.2proc macro
zerofrom0.1.7
zerofrom-derive0.1.7proc macro
zeroize1.8.2
zerotrie0.2.4
zerovec0.11.6
zerovec-derive0.11.3proc macro
zmij1.0.21build script
anyhow1.0.104build script
assert-json-diff2.0.2
deadpool0.12.3
deadpool-runtime0.1.4
futures0.3.32
futures-executor0.3.32
num_cpus1.17.0
uuid1.23.1
wiremock0.6.5
android_system_properties0.1.5
anstyle-wincon3.0.11
assert_cmd2.2.1build script
autocfg1.5.0
bstr1.12.1
bumpalo3.20.2
cfg_aliases0.2.1
chacha200.10.2
core-foundation-sys0.8.7
cpufeatures0.3.1
difflib0.4.0
encode_unicode1.0.0
float-cmp0.10.0
foldhash0.1.5
hashbrown0.15.5
hermit-abi0.5.2
iana-time-zone-haiku0.1.2build script, not run
id-arena2.3.0
js-sys0.3.95
leb128fmt0.1.0
libredox0.1.16
lock_api0.4.14
lru-slab0.1.2
minimal-lexical0.2.1
normalize-line-endings0.3.0
once_cell_polyfill1.70.2
parking_lot0.12.5
parking_lot_core0.9.12build script
predicates3.1.4
predicates-core1.0.10
predicates-tree1.0.13
quinn0.11.9build script, not run
quinn-proto0.11.18
quinn-udp0.5.14build script, not run
r-efi6.0.0
rand0.10.3
rand_core0.10.1
rand_pcg0.10.2
redox_syscall0.5.18
redox_users0.4.6
rustc-hash2.1.2
rustversion1.0.22build script, not runproc macro
scc2.4.0
scopeguard1.2.0
sdd3.0.10
semver1.0.28
serial_test3.4.0
serial_test_derive3.4.0proc macro
termtree0.5.1
thiserror1.0.69build script
thiserror-impl1.0.69proc macro
tinyvec1.11.0
tinyvec_macros0.1.1
unicode-xid0.2.6
version_check0.9.5
wait-timeout0.2.1
wasi0.11.1+wasi-snapshot-preview1
wasip21.0.3+wasi-0.2.9
wasip30.4.0+wasi-0.3.0-rc-2026-01-06
wasm-bindgen0.2.118build script, not run
wasm-bindgen-futures0.4.68
wasm-bindgen-macro0.2.118proc macro
wasm-bindgen-macro-support0.2.118
wasm-bindgen-shared0.2.118build script, not run
wasm-encoder0.244.0
wasm-metadata0.244.0
wasm-streams0.4.2
wasmparser0.244.0
web-sys0.3.95
web-time1.1.0
windows-core0.62.2
windows-implement0.60.2proc macro
windows-interface0.59.3proc macro
windows-link0.2.1
windows-result0.4.1
windows-strings0.5.1
windows-sys0.48.0
windows-sys0.52.0
windows-sys0.59.0
windows-sys0.60.2
windows-sys0.61.2
windows-targets0.48.5
windows-targets0.52.6
windows-targets0.53.5
windows_aarch64_gnullvm0.48.5build script, not runprebuilt objects
windows_aarch64_gnullvm0.52.6build script, not runprebuilt objects
windows_aarch64_gnullvm0.53.1build script, not runprebuilt objects
windows_aarch64_msvc0.48.5build script, not runprebuilt objects
windows_aarch64_msvc0.52.6build script, not runprebuilt objects
windows_aarch64_msvc0.53.1build script, not runprebuilt objects
windows_i686_gnu0.48.5build script, not runprebuilt objects
windows_i686_gnu0.52.6build script, not runprebuilt objects
windows_i686_gnu0.53.1build script, not runprebuilt objects
windows_i686_gnullvm0.52.6build script, not runprebuilt objects
windows_i686_gnullvm0.53.1build script, not runprebuilt objects
windows_i686_msvc0.48.5build script, not runprebuilt objects
windows_i686_msvc0.52.6build script, not runprebuilt objects
windows_i686_msvc0.53.1build script, not runprebuilt objects
windows_x86_64_gnu0.48.5build script, not runprebuilt objects
windows_x86_64_gnu0.52.6build script, not runprebuilt objects
windows_x86_64_gnu0.53.1build script, not runprebuilt objects
windows_x86_64_gnullvm0.48.5build script, not runprebuilt objects
windows_x86_64_gnullvm0.52.6build script, not runprebuilt objects
windows_x86_64_gnullvm0.53.1build script, not runprebuilt objects
windows_x86_64_msvc0.48.5build script, not runprebuilt objects
windows_x86_64_msvc0.52.6build script, not runprebuilt objects
windows_x86_64_msvc0.53.1build script, not runprebuilt objects
winsafe0.0.19
wit-bindgen0.51.0build script, not runprebuilt objects
wit-bindgen0.57.1build script, not runprebuilt objects
wit-bindgen-core0.51.0
wit-bindgen-rust0.51.0build script, not run
wit-bindgen-rust-macro0.51.0build script, not runproc macro
wit-component0.244.0
wit-parser0.244.0
Versions8RiskVulnsPublished
0.2.4not analyzed2026-09-27
0.2.3not analyzed2026-06-27
0.2.2not analyzed2026-06-27
0.2.1not analyzed2026-06-11
0.2.0not analyzed2026-04-21
0.1.2not analyzed2026-04-21
0.1.1not analyzed2026-04-21
0.2.5lowlow

Raw data

capture
804 KB
records
114,145
bytes per record
7.0

Loading a sample of the capture

Want to see more? E-mail us at hello@bitbison.io about your use case.

1 of 1 jobs captured: build-test success · Generated 2026-10-17 · run 15eae4a1-f485-4685-8dba-8a7638e4d8e5

analysis 0.1.0 · 2026-10-16 · e987d53 · graph v2