Skip to content
Open-Source Registry

cargo / wm-gen3-vault / 10.2.0-alpha.3

wm-gen3-vault 10.2.0-alpha.3

bitbison: flagged, behavior flagged, dependencies flagged, posture not checked, pipeline clean, 1 of 1 jobs captured RiskhighVulnslow
processes
421
operations
89K
packages
380
compiler runs
1,559
connections
3
job time
6m 10s

Build behaviournot recorded for this run

run 8ad524e9-c7e9-41ea-9d5c-500afd551fb5 · built 2026-10-05 · complete View on crates.io

Artifact

file · retained · retained · graph v1
3

Checks

9 of 12 clear Network activity Object file origins +1 more
Build behavior▲✓✓✓▲✓✓
Supply chain✓▲✓
Pipeline✓✓

Detections

2
  • Build code opened a network connection
    ort-sys 2.0.0-rc.13 › cdn.pyke.io:443
    high
  • Could not verify how this object file was built
    libonnxruntime.a
    high

Detection

highwitnessed

Build code opened a network connection

Unexpected network connection

Subject
ort-sys 2.0.0-rc.13
Destination
cdn.pyke.io:443
Reaches
wm_cold_index-08791b2f80ea325cmemberwm_vault_index-27b01356fee2ad90member
Jobs
build-test
Rule
egress

Evidence

  1. Connection outside the process’s allowed destinationscause

    connection to cdn.pyke.io:443, opened by build-script-main

    subject cdn.pyke.io:443

    by /home/runner/work/wm-gen3-vault/wm-gen3-vault/target/release/build/ort-sys-1410d0e9b46e8c15/build-script-main

  2. Connection opened by a build script or child processsupport

    the opener is the build script at /home/runner/work/wm-gen3-vault/wm-gen3-vault/target/release/build/ort-sys-1410d0e9b46e8c15/build-script-main

Processes

build-test

cargo›cargo›build-script-main

Ran
/home/runner/work/wm-gen3-vault/wm-gen3-vault/target/release/build/ort-sys-1410d0e9b46e8c15/build-script-main
Invoked by
cargo build --release --locked --message-format=json-render-diagnostics
Lineage · 3 processes
  1. cargocargo build --release --locked --message-format=json-render-diagnostics2218
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo build --release --locked --message-format=json-render-diagnostics2218
  3. build-script-main/home/runner/work/wm-gen3-vault/wm-gen3-vault/target/release/build/ort-sys-1410d0e9b46e8c15/build-script-main6430

Remediation

Review the process and its owning build step. Remove unnecessary requests; move required downloads to a declared dependency-fetch step.

Detection

highwitnessed

Could not verify how this object file was built

Object file origin needs review

Subject
/home/runner/.cache/ort.pyke.io/dfbin/x86_64-unknown-linux-gnu/e454f710f8a49f53aa5b4ff51e3454ae1835777e431c6c35c5255ce6f205fd68/libonnxruntime.awritten by build-script-main
Reaches
wm_cold_index-08791b2f80ea325cmemberwm_vault_index-27b01356fee2ad90member
Jobs
build-test
Rule
object-provenance

Evidence

  1. Written without a recorded source compilationcause

    Written by build-script-main without a recorded source compilation

    subject /home/runner/.cache/ort.pyke.io/dfbin/x86_64-unknown-linux-gnu/e454f710f8a49f53aa5b4ff51e3454ae1835777e431c6c35c5255ce6f205fd68/libonnxruntime.a

    by /home/runner/work/wm-gen3-vault/wm-gen3-vault/target/release/build/ort-sys-1410d0e9b46e8c15/build-script-main

  2. Asked for by the build's own declarationsupport

    ort-sys asked the linker for it: static onnxruntime (target/release/build/ort-sys-74e567531b759f6b/output)

    subject /home/runner/.cache/ort.pyke.io/dfbin/x86_64-unknown-linux-gnu/e454f710f8a49f53aa5b4ff51e3454ae1835777e431c6c35c5255ce6f205fd68/libonnxruntime.a

Processes

build-test

cargo›cargo›build-script-main

Ran
/home/runner/work/wm-gen3-vault/wm-gen3-vault/target/release/build/ort-sys-1410d0e9b46e8c15/build-script-main
Invoked by
cargo build --release --locked --message-format=json-render-diagnostics
Lineage · 3 processes
  1. cargocargo build --release --locked --message-format=json-render-diagnostics2218
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo build --release --locked --message-format=json-render-diagnostics2218
  3. build-script-main/home/runner/work/wm-gen3-vault/wm-gen3-vault/target/release/build/ort-sys-1410d0e9b46e8c15/build-script-main6430

Remediation

Inspect the writer and input chain. Confirm the object comes from a reviewed build step or declared prebuilt dependency. If its origin cannot be verified, replace it and rebuild.

Network

2 peers
  • cdn.pyke.io:443 build-script-main · Cloudflare, Inc. flagged
  • static.crates.io:8080 cargo (wm-gen3-vault) via crates.io allowed
Vulnerabilities2PackageFixSeverity
RUSTSEC-2022-0001lmdb 0.8.0none publishedlow
RUSTSEC-2025-0119number_prefix 0.4.0none publishedlow
Dependencies405Build behaviour
ahash0.8.12
aho-corasick1.1.5
aligned0.4.3
aligned-vec0.6.4
anyhow1.0.104
arg_enum_proc_macro0.3.4
arrayvec0.7.8
as-slice0.2.1
av-scenechange0.14.1
av1-grain0.2.5
avif-serialize0.8.9
base640.13.1
base640.23.1
base64ct1.8.3
bit-set0.8.0
bit-vec0.8.0
bit_field0.10.3
bitflags1.3.2
bitflags2.13.2
bitstream-io4.10.0
block-buffer0.10.4
block-buffer0.12.1
built0.8.1
bytemuck1.25.2
bytemuck_derive1.12.1
byteorder1.5.0
byteorder-lite0.1.0
bytes1.12.1
castaway0.2.4
cc1.4.2
cfg-if1.0.4
chrono0.4.45
color_quant1.1.0
compact_str0.9.1
console0.15.11
console0.16.4
cpufeatures0.2.17
cpufeatures0.3.1
crc32fast1.5.0
crossbeam-deque0.8.7
crossbeam-epoch0.9.20
crossbeam-utils0.8.22
crypto-common0.1.7
crypto-common0.2.2
curve25519-dalek5.0.0
curve25519-dalek-derive0.1.1
darling0.20.11
darling_core0.20.11
darling_macro0.20.11
dary_heap0.3.9
der0.8.1
derive_builder0.20.2
derive_builder_core0.20.2
derive_builder_macro0.20.2
digest0.10.7
digest0.11.3
dirs6.0.0
dirs-sys0.5.0
ed255193.0.0
ed25519-dalek3.0.0
either1.18.0
enumflags20.7.12
enumflags2_derive0.7.12
equator0.4.2
equator-macro0.4.2
esaxx-rs0.1.10
exr1.74.2
fallible-iterator0.3.0
fallible-streaming-iterator0.1.9
fancy-regex0.14.0
fastembed5.17.4
fastrand2.5.0
fax0.2.7
fdeflate0.3.7
filetime0.2.29
find-msvc-tools0.1.10
flate21.1.9
fnv1.0.7
foldhash0.1.5
foreign-types0.3.2
foreign-types-shared0.1.1
generic-array0.14.7
getrandom0.2.17
getrandom0.3.4
getrandom0.4.3
gif0.14.2
half2.7.1
hashbrown0.15.5
hashlink0.10.0
hf-hub0.5.0
hmac-sha2561.1.14
http1.5.0
httparse1.10.1
hybrid-array0.4.15
iana-time-zone0.1.65
ident_case1.0.1
image0.25.10
image-webp0.2.4
imgref1.12.2
indicatif0.17.11
indicatif0.18.6
itertools0.14.0
itoa1.0.18
jobserver0.1.35
landlock0.4.7
ld-linux-x86-64.so.2
lebe0.5.3
libc0.2.189
libc.so.6
libcrypto.so.3
libgcc_s.so.1
libm.so.6
libmvec.so.1
libsqlite3-sys0.31.0
libssl.so.3
linux-raw-sys0.12.1
lmdb0.8.0
lmdb-sys0.8.0
log0.4.34
loop90.1.5
lzma-rust20.15.8
macro_rules_attribute0.2.3
macro_rules_attribute-proc_macro0.2.3
matrixmultiply0.3.11
maybe-rayon0.1.1
memchr2.8.3
memmap20.9.11
miniz_oxide0.8.9
model2vec-rs0.3.0
monostate0.1.18
monostate-impl0.1.18
moxcms0.8.1
native-tls0.2.18
ndarray0.15.6
ndarray0.17.2
nom7.1.3
nom8.0.0
noop_proc_macro0.3.0
num-bigint0.4.8
num-complex0.4.6
num-derive0.4.2
num-integer0.1.46
num-rational0.4.2
num-traits0.2.19
number_prefix0.4.0
once_cell1.21.4
onig6.5.3
onig_sys69.9.3
openssl0.10.81
openssl-macros0.1.1
openssl-probe0.2.1
openssl-sys0.9.117
option-ext0.2.0
ort2.0.0-rc.13
ort-sys2.0.0-rc.13cdn.pyke.io
paste1.0.15
pastey0.1.1
pastey0.2.3
pem-rfc74681.0.0
percent-encoding2.3.2
pkg-config0.3.33
png0.18.1
portable-atomic1.14.0
ppv-lite860.2.21
proc-macro21.0.107
profiling1.0.18
profiling-procmacros1.0.18
pulp0.22.3
pxfm0.1.30
qoi0.4.1
quick-error2.0.1
quote1.0.47
rand0.9.5
rand_chacha0.9.0
rand_core0.9.5
rav1e0.8.1
ravif0.13.0
rawpointer0.2.1
rayon1.12.0
rayon-cond0.4.0
rayon-core1.13.0
regex1.13.1
regex-automata0.4.18
regex-syntax0.8.11
rgb0.8.53
ring0.17.14
rlimit0.11.0
rmp0.8.15
rmp-serde1.3.1
rusqlite0.33.0
rustix1.1.4
rustls0.23.45
rustls-pki-types1.15.1
rustls-webpki0.103.15
rustversion1.0.23
ryu1.0.23
safetensors0.5.3
safetensors0.8.0
serde1.0.229
serde_core1.0.229
serde_derive1.0.229
serde_json1.0.151
sha1_smol1.0.1
sha20.10.9
sha20.11.0
shlex2.0.1
signature3.0.0
simd-adler320.3.10
simd_helpers0.1.0
smallvec1.16.0
socks0.3.4
spm_precompiled0.1.4
stable_deref_trait1.2.1
static_assertions1.1.0
strsim0.11.1
subtle2.6.1
syn2.0.119
syn3.0.5
tar0.4.46
tempfile3.27.0
thiserror2.0.20
thiserror-impl2.0.20
tiff0.11.3
tokenizers0.21.4
tokenizers0.22.2
typenum1.20.1
unicode-ident1.0.24
unicode-normalization-alignments0.1.12
unicode-segmentation1.13.3
unicode-width0.2.2
unicode_categories0.1.1
unit-prefix0.5.2
untrusted0.9.0
ureq3.4.0
ureq-proto0.6.1
utf8-zero0.8.1
uuid1.26.1
v_frame0.3.9
vcpkg0.2.15
version_check0.9.5
webpki-root-certs1.0.9
webpki-roots1.0.9
weezl0.1.12
wm-gen3-core10.2.0-alpha.3
wm-gen3-shm10.2.0-alpha.3
wm-gen3-zeropointfive10.2.0-alpha.3
xattr1.6.1
y4m0.8.0
zerocopy0.8.56
zerocopy-derive0.8.56
zeroize1.9.0
zmij1.0.23
zstd0.13.3
zstd-safe7.3.0
zstd-sys2.1.0+zstd.1.5.7
zune-core0.5.3
zune-inflate0.2.54
zune-jpeg0.5.15
adler22.0.1
allocator-api20.2.21
atomic-waker1.1.2
base640.22.1
encoding_rs0.8.35
equivalent1.0.2
foldhash0.2.0
form_urlencoded1.2.2
futures-channel0.3.33
futures-core0.3.33
futures-sink0.3.33
futures-task0.3.33
futures-util0.3.33
h20.4.18
hashbrown0.16.1
hashbrown0.17.1
http-body1.1.0
http-body-util0.1.4
hyper1.11.0
hyper-tls0.6.0
hyper-util0.1.20
icu_collections2.2.0
icu_locale_core2.2.0
icu_normalizer2.2.0
icu_normalizer_data2.2.0
icu_properties2.2.0
icu_properties_data2.2.0
icu_provider2.2.0
idna1.1.0
idna_adapter1.2.2
indexmap2.14.0
ipnet2.12.1
libm0.2.16
litemap0.8.2
mime0.3.17
minimal-lexical0.2.1
mio1.2.3
new_debug_unreachable1.0.6
no_std_io20.9.4
pin-project-lite0.2.17
potential_utf0.1.5
pulp-wasm-simd-flag0.1.1
raw-cpuid11.6.0
reborrow0.5.5
reqwest0.12.28
serde_urlencoded0.7.1
slab0.4.12
socket20.6.5
sync_wrapper1.0.2
tinystr0.8.3
tokio1.53.1
tokio-native-tls0.3.1
tokio-util0.7.19
tower0.5.3
tower-http0.6.11
tower-layer0.3.3
tower-service0.3.3
tracing0.1.44
tracing-core0.1.36
try-lock0.2.5
url2.5.8
utf8_iter1.0.4
want0.3.1
writeable0.6.3
yoke0.8.3
zerofrom0.1.8
zerotrie0.2.4
zerovec0.11.6
android_system_properties0.1.6
arbitrary1.4.2
autocfg1.5.1
bumpalo3.20.3
cookie0.18.2
cookie_store0.22.1
core-foundation0.10.1
core-foundation0.9.4
core-foundation-sys0.8.7
crunchy0.2.4
deranged0.5.8
displaydoc0.2.7
document-features0.2.12
encode_unicode1.0.0
errno0.3.14
fiat-crypto0.3.0
futures-io0.3.33
futures-macro0.3.33
hyper-rustls0.27.9
iana-time-zone-haiku0.1.2
interpolate_name0.2.4
js-sys0.3.104
libfuzzer-sys0.4.13
libredox0.1.19
litrs1.0.0
num-conv0.2.2
portable-atomic-util0.2.7
powerfmt0.2.0
r-efi5.3.0
r-efi6.0.0
redox_users0.5.2
rustc_version0.4.1
schannel0.1.29
security-framework3.7.0
security-framework-sys2.17.0
semver1.0.28
synstructure0.13.2
system-configuration0.7.0
system-configuration-sys0.6.0
time0.3.55
time-core0.1.9
time-macros0.2.32
tokio-rustls0.26.4
wasi0.11.1+wasi-snapshot-preview1
wasip21.0.4+wasi-0.2.12
wasm-bindgen0.2.127
wasm-bindgen-futures0.4.77
wasm-bindgen-macro0.2.127
wasm-bindgen-macro-support0.2.127
wasm-bindgen-shared0.2.127
wasm-streams0.4.2
web-sys0.3.104
web-time1.1.0
winapi0.3.9
winapi-i686-pc-windows-gnu0.4.0
winapi-x86_64-pc-windows-gnu0.4.0
windows-core0.62.2
windows-implement0.60.2
windows-interface0.59.3
windows-link0.2.1
windows-registry0.6.1
windows-result0.4.1
windows-strings0.5.1
windows-sys0.52.0
windows-sys0.59.0
windows-sys0.61.2
windows-targets0.52.6
windows_aarch64_gnullvm0.52.6
windows_aarch64_msvc0.52.6
windows_i686_gnu0.52.6
windows_i686_gnullvm0.52.6
windows_i686_msvc0.52.6
windows_x86_64_gnu0.52.6
windows_x86_64_gnullvm0.52.6
windows_x86_64_msvc0.52.6
wit-bindgen0.57.1
yoke-derive0.8.2
zerofrom-derive0.1.7
zerovec-derive0.11.3
Versions8RiskVulnsPublished
10.4.01d ago
10.3.07d ago
10.2.0-alpha.612d ago
10.2.0-alpha.512d ago
10.2.0-alpha.412d ago
10.2.0-alpha.313d ago
10.2.0-alpha.2not analyzed2026-10-05
10.5.0nonelow

Raw data

Loading a sample of the capture

Want to see more? E-mail us at hello@bitbison.io about your use case.

1 of 1 jobs captured: build-test unknown · Generated 2026-10-05 · run 8ad524e9-c7e9-41ea-9d5c-500afd551fb5

analysis 0.1.0 · 2026-10-05 · 836124e · graph v1