Skip to content
Open-Source Registry

cargo / wolf-CLI

wolf-CLI 1.3.0

bitbison: flagged, behavior flagged, dependencies clean, posture notes, pipeline clean, 1 of 1 jobs captured RiskhighVulnsnone
processes
231
operations
103K
packages
167
compiler runs
582
connections
1
job time
4m 05s
capture
693 KB
records
152K
bytes / record
4.6

Local LLM chat and model inspection CLI powered by llama.cpp

Build behaviourcompiled C/C++

9 downloads · Apache-2.0 · published 2026-10-17 · source chatcliggufllama-cppllm View on crates.io

Artifact

file · retained · product · graph v2
2

Checks

13 of 15 clear Build script activity Binary hardening
Build behavior✓✓✓✓▲✓✓✓
Supply chain✓✓✓✓✓
Build hardening▲
Pipeline✓

Detections

2
  • Build script read files outside its crate
    llama-cpp-sys-4 0.8.0
    high
  • Build is missing recommended hardening flags
    target · posture
    low

Detection

highwitnessed

Build script read files outside its crate

Unexpected build script activity

Subject
llama-cpp-sys-4 0.8.0
Reaches
wolf-36c754013f5d8506member
Jobs
build-test, build-test
Rule
buildscript · wolf

Evidence

  1. Build script read outside its cratecause

    The script read 1 workspace file outside its crate and allowed build directories.

    by /home/runner/work/wolf/wolf/target/release/build/llama-cpp-sys-4-ad9849a19346a65f/build-script-build

  2. File read by the build scriptsupport

    read: /home/runner/work/wolf/wolf/Cargo.toml

    input /home/runner/work/wolf/wolf/Cargo.toml

  3. Build scriptcontext

    build script: /home/runner/work/wolf/wolf/target/release/build/llama-cpp-sys-4-ad9849a19346a65f/build-script-build — readers: build-script-build

    subject build-script-build

Remediation

Review the listed files and the crate's build.rs. Remove unnecessary reads, or use a reviewed dependency version.

Detection

lowinferredposture

Build is missing recommended hardening flags

Missing hardening flags

Subject
/home/runner/work/wolf/wolf/target
Jobs
build-test
Rule
hardening · target/release/build/llama-cpp-sys-4-08ab47977be327a8/out/llama.cpp

Evidence

  1. Hardening flag missingcause

    stack-protector: missing from all 131 eligible compile commands; add -fstack-protector-strong

  2. Hardening flag missingcause

    fortify: missing from all 131 eligible compile commands; add -D_FORTIFY_SOURCE=2 (needs -O1+)

  3. Hardening flag missingcause

    stack-clash-protection: missing from all 131 eligible compile commands; add -fstack-clash-protection

  4. Hardening flag missingcause

    pie: missing from all 131 eligible compile commands; add -fPIE (with -pie at link)

  5. Hardening flag missingcause

    cf-protection: missing from all 131 eligible compile commands; add -fcf-protection=full (x86-64) / -mbranch-protection=standard (aarch64)

  6. Hardening flag missingcause

    format-security: missing from all 131 eligible compile commands; add -Wformat -Werror=format-security

Processes

build-test

cargo›cargo

Ran
/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo build --release --locked --message-format=json-render-diagnostics
Invoked by
cargo build --release --locked --message-format=json-render-diagnostics
Lineage · 2 processes
  1. cargocargo build --release --locked --message-format=json-render-diagnostics2479
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo build --release --locked --message-format=json-render-diagnostics2479

Remediation

Enable the listed flags for supported targets, rebuild, and verify the resulting compile commands.

Network

1 peers
  • static.crates.io:8080 the package manager · cargo (wolf) via crates.io · 9,830 files · went into an output ecosystem
Dependencies171Build behaviour
bindgen0.73.2build script
bitflags2.13.1
bytecount0.6.9
cc1.4.4
cexpr0.6.0
cfg-if1.0.4
chrono0.4.45
clang-sys1.9.1build script
cmake0.1.58
core_detect1.0.0
crossbeam-deque0.8.7build script
crossbeam-epoch0.9.20build script
crossbeam-utils0.8.22build script
ctrlc3.5.2
either1.18.0
encoding_rs0.8.42build script
enumflags20.7.12
enumflags2_derive0.7.12proc macro
equivalent1.0.2
find-msvc-tools0.1.11
glob0.3.4
hashbrown0.17.1
iana-time-zone0.1.65
indexmap2.14.0
itoa1.0.18
jobserver0.1.35
ld-linux-x86-64.so.2system library
libc0.2.189build script
libc.so.6system library
libgcc_s.so.1system library
libgomp.so.1system library
libloading0.8.9
libm.so.6system library
libmvec.so.1system library
llama-cpp-40.8.0
llama-cpp-sys-40.8.0build scriptruns toolsgit
log0.4.34
memchr2.8.3
memmap20.9.11
multiversion_no_op1.0.0proc macro
nix0.31.3build script
nom7.1.3
nom_locate4.2.0
num-traits0.2.19build script
once_cell1.21.4
patch-apply0.8.3
pin-project-lite0.2.17
prettyplease0.3.0build script
proc-macro21.0.107build script
quote1.0.47build script
rayon1.12.0
rayon-core1.13.0build script
regex1.13.1
regex-automata0.4.18
regex-syntax0.8.11
rustc-hash2.1.3
scopeguard1.2.0
serde1.0.229build script
serde_core1.0.229build script
serde_derive1.0.229proc macro
serde_json1.0.151build script
shlex2.0.1
simdutf80.1.5
syn2.0.119
syn3.0.4
thiserror2.0.20build script
thiserror-impl2.0.20proc macro
toml_datetime1.1.2+spec-1.1.0
toml_edit0.25.17+spec-1.1.0
toml_parser1.1.5+spec-1.1.0
tracing0.1.44
tracing-attributes0.1.31proc macro
tracing-core0.1.36
unicode-ident1.0.24
winnow1.0.4
zmij1.0.23build script
adler22.0.1
aho-corasick1.1.5
android_system_properties0.1.6
autocfg1.5.1
base640.22.1
block20.6.2
bumpalo3.20.3
cfg_aliases0.2.2
core-foundation-sys0.8.7
crc32fast1.5.1build script
dispatch20.3.1
displaydoc0.2.7proc macro
errno0.3.14
filetime0.2.29
flate21.1.10
form_urlencoded1.2.2
futures-core0.3.34
futures-task0.3.34
futures-util0.3.34
getrandom0.2.17
getrandom0.4.3build script, not run
iana-time-zone-haiku0.1.2build script, not run
icu_collections2.3.0
icu_locale_core2.3.0
icu_normalizer2.3.0
icu_normalizer_data2.3.0build script
icu_properties2.3.0
icu_properties_data2.3.0build script
icu_provider2.3.1
idna1.1.0
idna_adapter1.2.2
js-sys0.3.104
linux-raw-sys0.12.1
litemap0.8.3
minimal-lexical0.2.1
miniz_oxide0.9.1
objc20.6.5build script, not run
objc2-encode4.1.0
percent-encoding2.3.2
potential_utf0.1.6
r-efi6.0.0
ring0.17.14build scriptprebuilt objects
rustix1.1.5build script
rustls0.23.46build script
rustls-pki-types1.15.1
rustls-webpki0.103.15
rustversion1.0.23build scriptproc macro
simd-adler320.3.10
slab0.4.12
smallvec1.15.2
stable_deref_trait1.2.1
subtle2.6.1
synstructure0.13.2
tar0.4.46
tinystr0.8.4
untrusted0.9.0
ureq2.12.1
url2.5.8
utf8_iter1.0.4
wasi0.11.1+wasi-snapshot-preview1
wasm-bindgen0.2.127build script, not run
wasm-bindgen-macro0.2.127proc macro
wasm-bindgen-macro-support0.2.127
wasm-bindgen-shared0.2.127build script, not run
webpki-roots0.26.11
webpki-roots1.0.9
windows-core0.62.2
windows-implement0.60.2proc macro
windows-interface0.59.3proc macro
windows-link0.2.1
windows-result0.4.1
windows-strings0.5.1
windows-sys0.52.0
windows-sys0.61.2
windows-targets0.52.6
windows_aarch64_gnullvm0.52.6build script, not runprebuilt objects
windows_aarch64_msvc0.52.6build script, not runprebuilt objects
windows_i686_gnu0.52.6build script, not runprebuilt objects
windows_i686_gnullvm0.52.6build script, not runprebuilt objects
windows_i686_msvc0.52.6build script, not runprebuilt objects
windows_x86_64_gnu0.52.6build script, not runprebuilt objects
windows_x86_64_gnullvm0.52.6build script, not runprebuilt objects
windows_x86_64_msvc0.52.6build script, not runprebuilt objects
winreg0.56.0
writeable0.6.4
xattr1.6.1
yoke0.8.3
yoke-derive0.8.2proc macro
zerofrom0.1.8
zerofrom-derive0.1.7proc macro
zeroize1.9.1
zerotrie0.2.5
zerovec0.11.8
zerovec-derive0.11.6proc macro
zlib-rs0.6.8
Versions1RiskVulnsPublished
1.3.0highnone1d ago

Raw data

capture
693 KB
records
152,043
bytes per record
4.6

Loading a sample of the capture

Want to see more? E-mail us at hello@bitbison.io about your use case.

1 of 1 jobs captured: build-test success · Generated 2026-10-18 · run a8594404-841f-4b65-97c8-0ee42c37d4ba

analysis 0.1.0 · 2026-10-17 · 0abbde9 · graph v2