Skip to content
Open-Source Registry

cargo / walletkit-sqlite / 0.27.2

walletkit-sqlite 0.27.2

bitbison: flagged, behavior flagged, dependencies clean, posture not checked, pipeline clean, 1 of 1 jobs captured 1 detection
processes
401
operations
17K
packages
118
compiler runs
40
connections
3
job time
1m 57s
capture
260 KB
records
32K
bytes / record
8.1

Build behaviourits build script reached github.com, release-assets.githubusercontent.comits build script ran curlundeclared fetchfetched outside crates.iocompiled C/C++

run 09669537-555a-4d9d-aa7c-e1b95c06e206 · built 2026-10-14 · complete

Graph

egress · medium · in libwalletkit_sqlite.rlib
2

Checks

13 of 14 clear Network activity
Build behavior▲✓✓✓✓✓✓✓
Supply chain✓✓✓✓✓
Pipeline✓

Detections

1
  • Build script reached github.com +1
    walletkit-sqlite 0.27.2 › github.com:443, release-assets.githubusercontent.com:443
    medium

Detection

mediumwitnessed

Build script reached github.com +1

Unexpected network connection

Subject
walletkit-sqlite 0.27.2
Destination
github.com:443, release-assets.githubusercontent.com:443
Reaches
Jobs
build-test
Rule
egress

Evidence

  1. Connection outside the process’s allowed destinationscause

    connection to github.com:443, opened by curl

    subject github.com:443

    by curl -fsSL --retry 5 --retry-connrefused --retry-max-time 120 --max-time 120 -o /home/runner/work/walletkit/walletkit/target/release/build/walletkit-sqlite-27a4…

  2. Connection outside the process’s allowed destinationscause

    connection to release-assets.githubusercontent.com:443, opened by curl

    subject release-assets.githubusercontent.com:443

    by curl -fsSL --retry 5 --retry-connrefused --retry-max-time 120 --max-time 120 -o /home/runner/work/walletkit/walletkit/target/release/build/walletkit-sqlite-27a4…

  3. What a build script's fetch becamesupport

    1 file came down; nothing the build compiled, linked or ran

  4. Connection opened by a build script or child processsupport

    the opener descends from the build script at /home/runner/work/walletkit/walletkit/target/release/build/walletkit-sqlite-e1b93a5c79c3ad8c/build_script_build-e1b93a5c79c3ad8c

  5. Tool commandsupport

    Command: curl -fsSL --retry 5 --retry-connrefused --retry-max-time 120 --max-time 120 -o /home/runner/work/walletkit/walletkit/target/release/build/walletkit-sqlite-27a4…

    by curl -fsSL --retry 5 --retry-connrefused --retry-max-time 120 --max-time 120 -o /home/runner/work/walletkit/walletkit/target/release/build/walletkit-sqlite-27a4…

In libwalletkit_sqlite.rlib

Loading the graph

Processes

build-test

cargo›cargo›build-script-build›curl

Ran
curl -fsSL --retry 5 --retry-connrefused --retry-max-time 120 --max-time 120 -o /home/runner/work/walletkit/walletkit/target/release/build/walletkit-sqlite-27a4…
Invoked by
cargo build --release --locked --message-format=json-render-diagnostics
Lineage · 4 processes
  1. cargocargo build --release --locked --message-format=json-render-diagnostics2448
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo build --release --locked --message-format=json-render-diagnostics2448
  3. build-script-build/home/runner/work/walletkit/walletkit/target/release/build/walletkit-sqlite-e1b93a5c79c3ad8c/build-script-build2955
  4. curlcurl -fsSL --retry 5 --retry-connrefused --retry-max-time 120 --max-time 120 -o /home/runner/work/walletkit/walletkit/target/release/build/walletkit-sqlite-27a4…2956

Remediation

The build script connected to the network while compiling. Nothing it downloaded was compiled, linked or run. Build the crate from what the registry ships, or accept the download after reviewing it.

Network

3 peers
  • github.com:443 walletkit-sqlite's own build code · curl · GitHub, Inc. · 1 file undeclared
  • release-assets.githubusercontent.com:443 walletkit-sqlite's own build code · curl · Fastly, Inc. · 1 file undeclared
  • static.crates.io:8080 the package manager · cargo (walletkit) via crates.io · 7,527 files · went into an output ecosystem
Dependencies125Build behaviour
accessory2.1.1proc macro
adler22.0.1
arbitrary1.4.2
async-trait0.1.89proc macro
autocfg1.5.1
bitflags2.13.0
block-buffer0.10.4
bumpalo3.20.3
cast0.3.0
cc1.6.0
cfg-if1.0.4
cpufeatures0.2.17
crc32fast1.5.0build script
crossbeam-utils0.8.22build script, not run
crypto-common0.1.7
delegate-display3.0.1proc macro
derive_arbitrary1.4.2proc macro
derive_more2.1.1
derive_more-impl2.1.1proc macro
digest0.10.7
displaydoc0.2.6proc macro
equivalent1.0.2
errno0.3.14
fancy_constructor2.1.1proc macro
fastrand2.4.1
find-msvc-tools0.1.14
flate21.1.9
foldhash0.2.0
futures-core0.3.32
futures-task0.3.32
futures-util0.3.32
generic-array0.14.7build script
getrandom0.4.3build script
hashbrown0.16.1
hashbrown0.17.1
hex0.4.3
impartial-ord2.0.0proc macro
indexed_db_futures0.6.4
indexed_db_futures_macros_internal1.0.0proc macro
indexmap2.14.0
itoa1.0.18
js-sys0.3.103
ld-linux-x86-64.so.2system library
libc0.2.186build script
libc.so.6system library
libgcc_s.so.1system library
libm0.2.16build script, not run
libm.so.6system library
libmvec.so.1system library
linux-raw-sys0.12.1
log0.4.33
macroific2.0.0
macroific3.0.1
macroific_attr_parse2.0.0
macroific_attr_parse3.0.1
macroific_core2.0.0
macroific_core3.0.1
macroific_macro2.0.0proc macro
macroific_macro3.0.1proc macro
memchr2.8.3
minicov0.3.9build script, not run
miniz_oxide0.8.9
nu-ansi-term0.50.3
num-traits0.2.19build script, not run
once_cell1.21.4
oorandom11.1.5
pin-project-lite0.2.17
proc-macro21.0.106build script
quote1.0.46build script
r-efi6.0.0
rsqlite-vfs0.1.1
rustc_version0.4.1
rustix1.1.4build script
rustversion1.0.23build script, not runproc macro
same-file1.0.6
sealed0.6.0proc macro
sealed0.7.0proc macro
secrecy0.10.3
semver1.0.28
serde1.0.229build script, not run
serde_core1.0.229build script, not run
serde_derive1.0.229proc macro
serde_json1.0.151build script, not run
sha20.10.9
shlex2.0.1
simd-adler320.3.9
slab0.4.12
smallvec1.15.2
sqlite-wasm-rs0.5.5build script, not run
sqlite-wasm-vfs0.2.0
syn2.0.118
syn3.0.4
tempfile3.27.0
thiserror2.0.21build script
thiserror-impl2.0.21proc macro
tokio1.53.2
typenum1.20.1
unicode-ident1.0.24
unicode-xid0.2.6
version_check0.9.5
walkdir2.5.0
wasm-bindgen0.2.126build script, not run
wasm-bindgen-futures0.4.76
wasm-bindgen-macro0.2.126proc macro
wasm-bindgen-macro-support0.2.126
wasm-bindgen-shared0.2.126build script, not run
wasm-bindgen-test0.3.76
wasm-bindgen-test-macro0.3.76proc macro
wasm-bindgen-test-shared0.2.126
web-sys0.3.103
winapi-util0.1.11
windows-sys0.59.0
windows-targets0.52.6
windows_aarch64_gnullvm0.52.6build script, not runprebuilt objects
windows_aarch64_msvc0.52.6build script, not runprebuilt objects
windows_i686_gnu0.52.6build script, not runprebuilt objects
windows_i686_gnullvm0.52.6build script, not runprebuilt objects
windows_i686_msvc0.52.6build script, not runprebuilt objects
windows_x86_64_gnu0.52.6build script, not runprebuilt objects
windows_x86_64_gnullvm0.52.6build script, not runprebuilt objects
windows_x86_64_msvc0.52.6build script, not runprebuilt objects
zeroize1.9.0
zip2.4.2build script
zmij1.0.21build script, not run
zopfli0.8.3

Raw data

capture
260 KB
records
31,981
bytes per record
8.1

Loading a sample of the capture

Want to see more? E-mail us at hello@bitbison.io about your use case.

1 of 1 jobs captured: build-test success · Generated 2026-10-14 · run 09669537-555a-4d9d-aa7c-e1b95c06e206

analysis 0.1.0 · 2026-10-14 · efb1d7d · graph v2