cargo / vex2pdf
vex2pdf 4.1.1
5 vulnerabilities- processes
- 548
- operations
- 44K
- packages
- 177
- compiler runs
- 210
- connections
- 1
- job time
- 1m 41s
- capture
- 487 KB
- records
- 75K
- bytes / record
- 6.5
A tool to convert CycloneDX(VEX) JSON or XML documents to PDF reports
Artifact
- libvex2pdf.rlibfile · retained · product
- vex2pdfbinary · retained · product 5
Checks
11 of 14 clear Known vulnerabilities Build-time dependency advisories +1 moreBuild behavior✓✓✓✓✓✓✓✓
Supply chain▲▲▲✓✓
Pipeline✓
Detections
0No detections
No abnormal activity detected across 44K flows.
Network
1 peers- static.crates.io:8080 ecosystem
| Dependencies185 | Build behaviour |
|---|---|
| aho-corasick1.1.4 | |
| anstream1.0.0 | |
| anstyle1.0.14 | |
| anstyle-parse1.0.0 | |
| anstyle-query1.1.5 | |
| approx0.3.2 | |
| base640.22.1 | |
| bitflags2.13.0 | |
| borrow-or-share0.2.4 | |
| bstr1.12.1 | |
| byteorder1.5.0 | |
| cfg-if1.0.4 | |
| chrono0.4.45 | |
| clap4.6.1 | |
| clap_builder4.6.0 | |
| clap_lex1.1.0 | |
| colorchoice1.0.5 | |
| crc32fast1.5.0 | |
| cyclonedx-bom0.8.1 | |
| deranged0.5.8 | |
| encoding0.2.33 | |
| encoding-index-japanese1.20141219.5 | |
| encoding-index-korean1.20141219.5 | |
| encoding-index-simpchinese1.20141219.5 | |
| encoding-index-singlebyte1.20141219.5 | |
| encoding-index-tradchinese1.20141219.5 | |
| env_filter1.0.1 | |
| env_logger0.11.10 | |
| equivalent1.0.2 | |
| flate21.1.9 | |
| fluent-uri0.4.1 | |
| genpdf0.2.0 | |
| getrandom0.4.2 | |
| hashbrown0.17.1 | |
| hex0.4.3 | |
| iana-time-zone0.1.65 | |
| indexmap2.14.0 | |
| is_terminal_polyfill1.70.2 | |
| itoa0.4.8 | |
| itoa1.0.18 | |
| jiff0.2.28 | |
| jlizard-simple-threadpool0.3.0 | |
| ld-linux-x86-64.so.2 | |
| libc0.2.186 | |
| libc.so.6 | |
| libgcc_s.so.1 | |
| libm.so.6 | |
| libmvec.so.1 | |
| linked-hash-map0.5.6 | |
| log0.4.32 | |
| lopdf0.26.0 | |
| lzw0.10.0 | |
| memchr2.8.2 | |
| miniz_oxide0.8.9 | |
| num-conv0.2.2 | |
| num-traits0.2.19 | |
| once_cell1.21.4 | |
| ordered-float1.1.1 | |
| ordered-float5.3.0 | |
| percent-encoding2.3.2 | |
| pom3.4.0 | |
| powerfmt0.2.0 | |
| printpdf0.3.4 | |
| purl0.1.6 | |
| ref-cast1.0.25 | |
| regex1.12.4 | |
| regex-automata0.4.14 | |
| regex-syntax0.8.11 | |
| rusttype0.8.3 | |
| serde1.0.228 | |
| serde_core1.0.228 | |
| serde_json1.0.150 | |
| simd-adler320.3.9 | |
| smallvec1.15.2 | |
| spdx0.13.4 | |
| standback0.2.17 | |
| stb_truetype0.3.1 | |
| strsim0.11.1 | |
| strum0.28.0 | |
| thiserror2.0.18 | |
| time0.2.27 | |
| time0.3.49 | |
| time-core0.1.9 | |
| time-macros0.1.1 | |
| utf8parse0.2.2 | |
| uuid1.23.3 | |
| xml-rs0.8.28 | |
| zmij1.0.21 | |
| adler22.0.1 | |
| dtoa0.4.8 | |
| encoding_index_tests0.1.4 | |
| fastrand2.4.1 | |
| linux-raw-sys0.12.1 | |
| rustix1.1.4 | |
| tempfile3.27.0 | |
| unicode-ident1.0.24 | |
| android_system_properties0.1.5 | |
| anstyle-wincon3.0.11 | |
| anyhow1.0.102 | |
| arrayref0.3.9 | |
| arrayvec0.7.6 | |
| autocfg1.5.1 | |
| base-x0.2.11 | |
| blake31.8.5 | |
| bumpalo3.20.3 | |
| cc1.2.64 | |
| clap_derive4.6.1 | |
| const_fn0.4.12 | |
| constant_time_eq0.4.2 | |
| core-foundation-sys0.8.7 | |
| cpufeatures0.3.0 | |
| cyclonedx-bom-macros0.1.0 | |
| derive_more0.99.20 | |
| discard1.0.4 | |
| errno0.3.14 | |
| find-msvc-tools0.1.9 | |
| foldhash0.1.5 | |
| futures-core0.3.32 | |
| futures-task0.3.32 | |
| futures-util0.3.32 | |
| hashbrown0.15.5 | |
| heck0.5.0 | |
| iana-time-zone-haiku0.1.2 | |
| id-arena2.3.0 | |
| jiff-static0.2.28 | |
| js-sys0.3.102 | |
| leb128fmt0.1.0 | |
| once_cell_polyfill1.70.2 | |
| pin-project-lite0.2.17 | |
| portable-atomic1.13.1 | |
| portable-atomic-util0.2.7 | |
| prettyplease0.2.37 | |
| proc-macro-hack0.5.20+deprecated | |
| proc-macro21.0.106 | |
| quote1.0.45 | |
| r-efi6.0.0 | |
| ref-cast-impl1.0.25 | |
| rustc_version0.2.3 | |
| rustversion1.0.22 | |
| semver0.9.0 | |
| semver1.0.28 | |
| semver-parser0.7.0 | |
| serde_derive1.0.228 | |
| sha10.6.1 | |
| sha1_smol1.0.1 | |
| shlex2.0.1 | |
| slab0.4.12 | |
| stdweb0.4.20 | |
| stdweb-derive0.5.3 | |
| stdweb-internal-macros0.2.9 | |
| stdweb-internal-runtime0.1.5 | |
| strum_macros0.28.0 | |
| syn1.0.109 | |
| syn2.0.117 | |
| thiserror-impl2.0.18 | |
| time-macros0.2.29 | |
| time-macros-impl0.1.2 | |
| unicode-xid0.2.6 | |
| version_check0.9.5 | |
| wasip21.0.4+wasi-0.2.12 | |
| wasip30.4.0+wasi-0.3.0-rc-2026-01-06 | |
| wasm-bindgen0.2.125 | |
| wasm-bindgen-macro0.2.125 | |
| wasm-bindgen-macro-support0.2.125 | |
| wasm-bindgen-shared0.2.125 | |
| wasm-encoder0.244.0 | |
| wasm-metadata0.244.0 | |
| wasmparser0.244.0 | |
| winapi0.3.9 | |
| winapi-i686-pc-windows-gnu0.4.0 | |
| winapi-x86_64-pc-windows-gnu0.4.0 | |
| windows-core0.62.2 | |
| windows-implement0.60.2 | |
| windows-interface0.59.3 | |
| windows-link0.2.1 | |
| windows-result0.4.1 | |
| windows-strings0.5.1 | |
| windows-sys0.61.2 | |
| wit-bindgen0.51.0 | |
| wit-bindgen0.57.1 | |
| wit-bindgen-core0.51.0 | |
| wit-bindgen-rust0.51.0 | |
| wit-bindgen-rust-macro0.51.0 | |
| wit-component0.244.0 | |
| wit-parser0.244.0 |
| Vulnerabilities5 | Package | Version | Fix | Severity | Title | Reach |
|---|---|---|---|---|---|---|
| RUSTSEC-2026-0187 | lopdf | 0.26.0 | >=0.42.0 | high | Stack overflow in lopdf via deeply nested PDF objects | retained |
| RUSTSEC-2021-0153 | encoding | 0.2.33 | none published | low | `encoding` is unmaintained | retained |
| RUSTSEC-2020-0144 | lzw | 0.10.0 | none published | low | lzw is unmaintained | retained |
| RUSTSEC-2021-0140 | rusttype | 0.8.3 | none published | low | rusttype is Unmaintained | retained |
| RUSTSEC-2020-0020 | stb_truetype | 0.3.1 | none published | low | `stb_truetype` crate has been deprecated; use `ttf-parser` instead | retained |
1 of 1 jobs captured: build-test success · Generated 2026-10-14 · run 716c48a4-9681-4118-841e-46854aa5bec5
analysis 0.1.0 · 2026-10-14 · afb437c · graph v2