Artifact
- bench-autoloadbinary · retained · product 7
- libzsh.rlibfile · retained · product
- zshrsbinary · retained · product 7
Checks
12 of 14 clear Known vulnerabilities Dependency advisoriesBuild behavior✓✓✓✓✓✓✓✓
Supply chain▲✓▲✓✓
Pipeline✓
Detections
0No detections
No abnormal activity detected across 117K flows.
Network
1 peers- static.crates.io:8080 ecosystem
| Dependencies380 | Build behaviour |
|---|---|
| cranelift-codegen0.130.2 | |
| psm0.1.32 | |
| ring0.17.14 | |
| vcpkg0.2.15 | |
| winapi-i686-pc-windows-gnu0.4.0 | |
| winapi-x86_64-pc-windows-gnu0.4.0 | |
| windows_i686_gnullvm0.52.6 | |
| ahash0.7.8 | |
| ahash0.8.12 | |
| anyhow1.0.102 | |
| async-trait0.1.89 | |
| bytecheck0.6.12 | |
| bytecheck_derive0.6.12 | |
| cranelift-assembler-x640.130.2 | |
| cranelift-isle0.130.2 | |
| crc32fast1.5.0 | |
| crossbeam-utils0.8.21 | |
| curve25519-dalek4.1.3 | |
| curve25519-dalek-derive0.1.1 | |
| displaydoc0.2.6 | |
| generic-array0.14.7 | |
| getrandom0.3.4 | |
| getrandom0.4.2 | |
| httparse1.10.1 | |
| iana-time-zone-haiku0.1.2 | |
| icu_normalizer_data2.2.0 | |
| icu_properties_data2.2.0 | |
| ld-linux-x86-64.so.2 | |
| libc0.2.186 | |
| libc.so.6 | |
| libgcc_s.so.1 | |
| libm0.2.16 | |
| libm.so.6 | |
| libmvec.so.1 | |
| libsqlite3-sys0.30.1 | |
| nix0.29.0 | |
| num-traits0.2.19 | |
| objc20.6.4 | |
| object0.38.1 | |
| object0.39.1 | |
| parking_lot_core0.9.12 | |
| prettyplease0.2.37 | |
| proc-macro21.0.106 | |
| ptr_meta_derive0.1.4 | |
| quote1.0.45 | |
| radium0.7.0 | |
| rayon-core1.13.0 | |
| rend0.4.2 | |
| rkyv0.7.46 | |
| rkyv_derive0.7.46 | |
| rustix1.1.4 | |
| rustls0.23.45 | |
| rustversion1.0.22 | |
| serde1.0.228 | |
| serde_core1.0.228 | |
| serde_derive1.0.228 | |
| serde_json1.0.150 | |
| stacker0.1.25 | |
| syn1.0.109 | |
| target-lexicon0.13.5 | |
| thiserror2.0.18 | |
| thiserror-impl1.0.69 | |
| thiserror-impl2.0.18 | |
| time-macros0.2.27 | |
| tokio-macros2.7.0 | |
| tracing-attributes0.1.31 | |
| valuable0.1.1 | |
| wasm-bindgen0.2.122 | |
| wasm-bindgen-macro0.2.122 | |
| wasm-bindgen-shared0.2.122 | |
| wasmtime-internal-core43.0.2 | |
| winapi0.3.9 | |
| windows-implement0.60.2 | |
| windows-interface0.59.3 | |
| wit-bindgen-rust0.51.0 | |
| wit-bindgen-rust-macro0.51.0 | |
| yoke-derive0.8.2 | |
| zerocopy0.8.50 | |
| zerocopy-derive0.8.50 | |
| zerofrom-derive0.1.7 | |
| zerovec-derive0.11.3 | |
| zmij1.0.21 | |
| zstd-safe7.2.4 | |
| zstd-sys2.0.16+zstd.1.5.7 | |
| aho-corasick1.1.4 | |
| allocator-api20.2.21 | |
| android_system_properties0.1.6 | |
| ar_archive_writer0.5.3 | |
| arbitrary1.4.2 | |
| atomic-waker1.1.2 | |
| autocfg1.5.1 | |
| axum0.7.9 | |
| axum-core0.4.5 | |
| base640.22.1 | |
| base64ct1.8.3 | |
| bincode1.3.3 | |
| bit-set0.8.0 | |
| bit-vec0.8.0 | |
| bitflags1.3.2 | |
| bitflags2.13.0 | |
| bitvec1.0.1 | |
| block-buffer0.10.4 | |
| block20.6.2 | |
| bstr1.12.1 | |
| bumpalo3.20.3 | |
| byteorder1.5.0 | |
| bytes1.11.1 | |
| cc1.2.63 | |
| cfg-if1.0.4 | |
| cfg_aliases0.2.1 | |
| chrono0.4.45 | |
| const-oid0.9.6 | |
| core-foundation-sys0.8.7 | |
| cpufeatures0.2.17 | |
| cranelift-assembler-x64-meta0.130.2 | |
| cranelift-bforest0.130.2 | |
| cranelift-bitset0.130.2 | |
| cranelift-codegen-meta0.130.2 | |
| cranelift-codegen-shared0.130.2 | |
| cranelift-control0.130.2 | |
| cranelift-entity0.130.2 | |
| cranelift-frontend0.130.2 | |
| cranelift-jit0.130.2 | |
| cranelift-module0.130.2 | |
| cranelift-native0.130.2 | |
| cranelift-object0.130.2 | |
| cranelift-srcgen0.130.2 | |
| cron0.12.1 | |
| crossbeam-channel0.5.15 | |
| crossbeam-deque0.8.6 | |
| crossbeam-epoch0.9.18 | |
| crossterm_winapi0.9.1 | |
| crypto-common0.1.7 | |
| der0.7.10 | |
| deranged0.5.8 | |
| digest0.10.7 | |
| dirs5.0.1 | |
| dirs-sys0.4.1 | |
| dispatch20.3.1 | |
| ed255192.2.3 | |
| ed25519-dalek2.2.0 | |
| either1.16.0 | |
| encoding_rs0.8.35 | |
| equivalent1.0.2 | |
| errno0.3.14 | |
| fallible-iterator0.3.0 | |
| fallible-streaming-iterator0.1.9 | |
| fancy-regex0.18.0 | |
| fastrand2.4.1 | |
| fiat-crypto0.2.9 | |
| filetime0.2.29 | |
| find-msvc-tools0.1.9 | |
| flate21.1.9 | |
| fnv1.0.7 | |
| foldhash0.1.5 | |
| foldhash0.2.0 | |
| form_urlencoded1.2.2 | |
| fsevent-sys4.1.0 | |
| funty2.0.0 | |
| fusevm0.26.7 | |
| futures-channel0.3.32 | |
| futures-core0.3.32 | |
| futures-sink0.3.32 | |
| futures-task0.3.32 | |
| futures-util0.3.32 | |
| getrandom0.2.17 | |
| gimli0.33.0 | |
| glob0.3.3 | |
| hashbrown0.12.3 | |
| hashbrown0.14.5 | |
| hashbrown0.15.5 | |
| hashbrown0.16.1 | |
| hashbrown0.17.1 | |
| hashlink0.9.1 | |
| heck0.5.0 | |
| hostname0.4.2 | |
| http1.4.1 | |
| http-body1.0.1 | |
| http-body-util0.1.3 | |
| httpdate1.0.3 | |
| hyper1.10.1 | |
| hyper-util0.1.20 | |
| iana-time-zone0.1.65 | |
| icu_collections2.2.0 | |
| icu_locale_core2.2.0 | |
| icu_normalizer2.2.0 | |
| icu_properties2.2.0 | |
| icu_provider2.2.0 | |
| id-arena2.3.0 | |
| idna1.1.0 | |
| idna_adapter1.2.2 | |
| indexmap2.14.0 | |
| inotify0.9.6 | |
| inotify-sys0.1.5 | |
| itoa1.0.18 | |
| jobserver0.1.34 | |
| js-sys0.3.99 | |
| kqueue1.2.0 | |
| kqueue-sys1.1.2 | |
| lazy_static1.5.0 | |
| leb128fmt0.1.0 | |
| libloading0.8.9 | |
| libredox0.1.17 | |
| linked-hash-map0.5.6 | |
| linux-raw-sys0.12.1 | |
| litemap0.8.2 | |
| lock_api0.4.14 | |
| log0.4.32 | |
| lopdf0.31.0 | |
| mach20.4.3 | |
| matchers0.2.0 | |
| matchit0.7.3 | |
| md50.7.0 | |
| memchr2.8.1 | |
| memmap20.9.10 | |
| mime0.3.17 | |
| miniz_oxide0.8.9 | |
| mio0.8.11 | |
| mio1.2.1 | |
| nom7.1.3 | |
| notify6.1.1 | |
| notify-debouncer-mini0.4.1 | |
| nu-ansi-term0.50.3 | |
| num-conv0.2.2 | |
| objc2-encode4.1.0 | |
| once_cell1.21.4 | |
| option-ext0.2.0 | |
| os_pipe1.2.3 | |
| owned_ttf_parser0.19.0 | |
| parking_lot0.12.5 | |
| percent-encoding2.3.2 | |
| pin-project-lite0.2.17 | |
| pkcs80.10.2 | |
| pkg-config0.3.33 | |
| pom3.4.0 | |
| potential_utf0.1.5 | |
| powerfmt0.2.0 | |
| ppv-lite860.2.21 | |
| printpdf0.7.0 | |
| ptr_meta0.1.4 | |
| r-efi5.3.0 | |
| rand0.8.6 | |
| rand_chacha0.3.1 | |
| rand_core0.6.4 | |
| rayon1.12.0 | |
| redox_syscall0.5.18 | |
| redox_users0.4.6 | |
| regalloc20.15.1 | |
| regex1.12.3 | |
| regex-automata0.4.14 | |
| regex-syntax0.8.10 | |
| region3.0.2 | |
| rusqlite0.32.1 | |
| rustc-hash2.1.2 | |
| rustc_version0.4.1 | |
| rustls-pki-types1.15.1 | |
| rustls-webpki0.103.15 | |
| ryu1.0.23 | |
| same-file1.0.6 | |
| scopeguard1.2.0 | |
| seahash4.1.0 | |
| semver1.0.28 | |
| serde_path_to_error0.1.20 | |
| serde_spanned1.1.1 | |
| serde_urlencoded0.7.1 | |
| sha20.10.9 | |
| sharded-slab0.1.7 | |
| shlex2.0.1 | |
| signal-hook-registry1.4.8 | |
| signature2.2.0 | |
| simd-adler320.3.9 | |
| simdutf80.1.5 | |
| smallvec1.15.1 | |
| socket20.6.4 | |
| spki0.7.3 | |
| stable_deref_trait1.2.1 | |
| subtle2.6.1 | |
| symlink0.1.0 | |
| syn2.0.117 | |
| sync_wrapper1.0.2 | |
| synstructure0.13.2 | |
| tap1.0.1 | |
| tempfile3.27.0 | |
| thread_local1.1.9 | |
| time0.3.47 | |
| time-core0.1.8 | |
| tinystr0.8.3 | |
| tinyvec1.11.0 | |
| tinyvec_macros0.1.1 | |
| tokio1.52.3 | |
| tokio-stream0.1.18 | |
| tokio-util0.7.18 | |
| toml1.1.2+spec-1.1.0 | |
| toml_datetime1.1.1+spec-1.1.0 | |
| toml_parser1.1.2+spec-1.1.0 | |
| toml_writer1.1.1+spec-1.1.0 | |
| tower0.5.3 | |
| tower-layer0.3.3 | |
| tower-service0.3.3 | |
| tracing0.1.44 | |
| tracing-appender0.2.5 | |
| tracing-core0.1.36 | |
| tracing-log0.2.0 | |
| tracing-subscriber0.3.23 | |
| ttf-parser0.19.2 | |
| typenum1.20.1 | |
| unicode-ident1.0.24 | |
| unicode-width0.2.2 | |
| unicode-xid0.2.6 | |
| untrusted0.9.0 | |
| ureq2.12.1 | |
| url2.5.8 | |
| utf8_iter1.0.4 | |
| uuid1.23.2 | |
| version_check0.9.5 | |
| walkdir2.5.0 | |
| wasi0.11.1+wasi-snapshot-preview1 | |
| wasip21.0.3+wasi-0.2.9 | |
| wasip30.4.0+wasi-0.3.0-rc-2026-01-06 | |
| wasm-bindgen-macro-support0.2.122 | |
| wasm-encoder0.244.0 | |
| wasm-metadata0.244.0 | |
| wasmparser0.244.0 | |
| wasmtime-internal-jit-icache-coherence43.0.2 | |
| webpki-roots0.26.11 | |
| webpki-roots1.0.9 | |
| weezl0.1.12 | |
| winapi-util0.1.11 | |
| windows-core0.62.2 | |
| windows-link0.2.1 | |
| windows-result0.4.1 | |
| windows-strings0.5.1 | |
| winnow1.0.3 | |
| wit-bindgen-core0.51.0 | |
| wit-component0.244.0 | |
| wit-parser0.244.0 | |
| writeable0.6.3 | |
| wyz0.5.1 | |
| yoke0.8.3 | |
| zerofrom0.1.8 | |
| zeroize1.9.0 | |
| zerotrie0.2.4 | |
| zerovec0.11.6 | |
| znative0.13.40 | |
| zshrs-daemon0.13.40 | |
| zstd0.13.3 | |
| windows_aarch64_gnullvm0.48.5 | |
| windows_aarch64_gnullvm0.52.6 | |
| windows_aarch64_msvc0.48.5 | |
| windows_aarch64_msvc0.52.6 | |
| windows_i686_gnu0.48.5 | |
| windows_i686_gnu0.52.6 | |
| windows_i686_msvc0.48.5 | |
| windows_i686_msvc0.52.6 | |
| windows_x86_64_gnu0.48.5 | |
| windows_x86_64_gnu0.52.6 | |
| windows_x86_64_gnullvm0.48.5 | |
| windows_x86_64_gnullvm0.52.6 | |
| windows_x86_64_msvc0.48.5 | |
| windows_x86_64_msvc0.52.6 | |
| wit-bindgen0.51.0 | |
| wit-bindgen0.57.1 | |
| nix0.31.3 | |
| signal-hook0.3.18 | |
| thiserror1.0.69 | |
| adler22.0.1 | |
| crossterm0.27.0 | |
| ctrlc3.5.2 | |
| minimal-lexical0.2.1 | |
| r-efi6.0.0 | |
| regex-lite0.1.9 | |
| signal-hook-mio0.2.5 | |
| slab0.4.12 | |
| tower0.4.13 | |
| tracing-chrome0.7.2 | |
| windows-sys0.48.0 | |
| windows-sys0.52.0 | |
| windows-sys0.61.2 | |
| windows-targets0.48.5 | |
| windows-targets0.52.6 |
| Vulnerabilities7 | Package | Version | Fix | Severity | Title | Reach |
|---|---|---|---|---|---|---|
| RUSTSEC-2026-0204 | crossbeam-epoch | 0.9.18 | >=0.9.20 | high | Invalid pointer dereference in `fmt::Pointer` impl for `Atomic` and `Shared` when the underlying pointer is invalid | retained |
| RUSTSEC-2026-0187 | lopdf | 0.31.0 | >=0.42.0 | high | Stack overflow in lopdf via deeply nested PDF objects | retained |
| RUSTSEC-2026-0235 | rkyv | 0.7.46 | >=0.8.17 | high | Insufficient archive validation can cause out-of-bounds reads in archives containing Rc/Arc | retained |
| RUSTSEC-2026-0190 | anyhow | 1.0.102 | >=1.0.103 | low | Unsoundness in `Error::downcast_mut()` | retained |
| RUSTSEC-2025-0141 | bincode | 1.3.3 | none published | low | Bincode is unmaintained | retained |
| RUSTSEC-2026-0186 | memmap2 | 0.9.10 | >=0.9.11 | low | Unchecked pointer offset in crate `memmap2` | retained |
| RUSTSEC-2026-0192 | ttf-parser | 0.19.2 | none published | low | `ttf-parser` is unmaintained | retained |
1 of 1 jobs captured: build-test success · Generated 2026-10-13 · run 9f01ba9b-89b5-4ced-a132-fda779ff70c5
analysis 0.1.0 · 2026-10-11 · d6246d3 · graph v2
