muslib 0.2.1

Done dynamic on Linux job 268932 crates.io SBOM Findings (VEX)

A build script was added since 0.2.0.

low

Automated verdict. Nobody reviewed it. A score is a reason to look closer, not a finding.

Evidence

Points	Signal	Where	What
10	build_script_added diff · muslib		A build script was added since 0.2.0.
5	new_behavior diff · muslib	exec:interpreter	New since the previous version: exec:interpreter.
3	exec_interpreter trace · pyo3-ffi	/usr/bin/python3	The build ran /usr/bin/python3.
1	static:build_script static · muslib	build.rs	low severity build_script in build_script code: build.rs

Behavior

New since the previous version

exec:interpreter

Profile

exec:interpreter

Static findings

All 3 low 3 2 groups

low process_spawn test 2

std::process::Command::new tests/cli.rs:44 tests/essentia_oracle.rs:14

low build_script build_script 1

build.rs build.rs

Run: check

succeeded

Ended: agent reported the end
Guest: exit code 0
Run time: 24.5 s
VM restore: 63 ms
Payload: 2469 files, 27.0 MiB
Files opened: 8028

Processes 150

Siblings that ran the same program with the same result and the same processes below are folded into one row, with their number. Hide the 134 compiler processes (rustc, C toolchain)

Process	Arguments	Start	Took	Exit
cargo /usr/local/bin/cargo	check --locked --offline	5 ms	24.5 s	0
└rustc /usr/local/bin/rustc ×55	--crate-name autocfg --edition=2015 /cw/vendor/autocfg-1.5.1/src/lib.rs --error-format=json --json=diagnostic-rendered-ansi,artifacts,future-incompat --crate-type lib --emit=dep-info,metadata,link -C embed-bitcode=no --check-cfg cfg(docsrs,test) --check-cfg cfg(feature, values()) -C metadata=64b7f860beb5602f -C extra-filename=-bf0361778853b3f7 --out-dir /work/target/debug/deps -L dependency=/work/target/debug/deps --cap-lints allow	164 ms	715 ms	0
└rustc /usr/local/bin/rustc ×16	--crate-name build_script_build --edition=2018 /cw/vendor/rustversion-1.0.23/build/build.rs --error-format=json --json=diagnostic-rendered-ansi,artifacts,future-incompat --crate-type bin --emit=dep-info,link -C embed-bitcode=no --check-cfg cfg(docsrs,test) --check-cfg cfg(feature, values()) -C metadata=ba2952f2390ba9bb -C extra-filename=-cd03e7da230c42f2 --out-dir /work/target/debug/build/rustversion-cd03e7da230c42f2 -L dependency=/work/target/debug/deps --cap-lints allow	884 ms	268 ms	0
└toolchain /usr/bin/cc	-m64 /work/target/debug/build/rustversion-cd03e7da230c42f2/rustc9kaRdL/symbols.o /work/target/debug/build/rustversion-cd03e7da230c42f2/build_script_build-cd03e7da230c42f2.build_script_build.8c605e2acebe63ce-cgu.0.rcgu.o /work/target/debug/build/rustversion-cd03e7da230c42f2/build_script_build-cd03e7da230c42f2.build_script_build.8c605e2acebe63ce-cgu.1.rcgu.o /work/target/debug/build/rustversion-cd03e7da230c42f2/build_script_build-cd03e7da230c42f2.a1owr7ha7bqkrjr20lj8jf4zi.rcgu.o -Wl,--as-needed -Wl,-Bstatic /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libstd-64f5f36fb0927694.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libpanic_unwind-549498e8b2e4d924.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libobject-7ff85ea729a864ff.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libmemchr-0e3477fb2664a277.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libaddr2line-09755979c57b7e64.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libgimli-9a1fede77fbbf2f0.rlib	1.0 s	150 ms	0
└toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/collect2	-plugin /usr/libexec/gcc/x86_64-linux-gnu/14/liblto_plugin.so -plugin-opt=/usr/libexec/gcc/x86_64-linux-gnu/14/lto-wrapper -plugin-opt=-fresolution=/tmp/ccV3DvQo.res --build-id --eh-frame-hdr -m elf_x86_64 --hash-style=gnu --as-needed -dynamic-linker /lib64/ld-linux-x86-64.so.2 -pie -fuse-ld=lld -o /work/target/debug/build/rustversion-cd03e7da230c42f2/build_script_build-cd03e7da230c42f2 /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/Scrt1.o /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/crti.o /usr/lib/gcc/x86_64-linux-gnu/14/crtbeginS.o -L/work/target/debug/build/rustversion-cd03e7da230c42f2/rustc9kaRdL/raw-dylibs -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/bin/gcc-ld -L/usr/lib/gcc/x86_64-linux-gnu/14 -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../../lib -L/lib/x86_64-linux-gnu -L/lib/../lib -L/usr/lib/x86_64-linux-gnu -L	1.0 s	144 ms	0
└toolchain /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/bin/rust-lld	-flavor gnu -plugin /usr/libexec/gcc/x86_64-linux-gnu/14/liblto_plugin.so -plugin-opt=/usr/libexec/gcc/x86_64-linux-gnu/14/lto-wrapper -plugin-opt=-fresolution=/tmp/ccV3DvQo.res --build-id --eh-frame-hdr -m elf_x86_64 --hash-style=gnu --as-needed -dynamic-linker /lib64/ld-linux-x86-64.so.2 -pie -o /work/target/debug/build/rustversion-cd03e7da230c42f2/build_script_build-cd03e7da230c42f2 /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/Scrt1.o /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/crti.o /usr/lib/gcc/x86_64-linux-gnu/14/crtbeginS.o -L/work/target/debug/build/rustversion-cd03e7da230c42f2/rustc9kaRdL/raw-dylibs -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/bin/gcc-ld -L/usr/lib/gcc/x86_64-linux-gnu/14 -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../../lib -L/lib/x86_64-linux-gnu -L/lib/../lib -L/usr/lib/x86_6	1.0 s	140 ms	0
└build_script rustversion		1.1 s	9 ms	0
└rustc /usr/local/bin/rustc	--version	1.1 s	7 ms	0
└build_script num-traits		1.2 s	45 ms	0
└rustc /usr/local/bin/rustc ×3	--version --verbose	1.2 s	8 ms	0
└build_script target-lexicon		2.7 s	9 ms	0
└rustc /usr/local/bin/rustc	--version	2.7 s	7 ms	0
└build_script proc-macro2		2.8 s	81 ms	0
└rustc /usr/local/bin/rustc ×3	--version	2.8 s	8 ms	0
└rustc /usr/local/bin/rustc	--cfg=procmacro2_build_probe --edition=2021 --crate-name=proc_macro2 --crate-type=lib --cap-lints=allow --emit=dep-info,metadata --out-dir /work/target/debug/build/proc-macro2-4f3f927bd5485a92/out/probe src/probe/proc_macro_span.rs --target x86_64-unknown-linux-gnu	2.8 s	32 ms	256
└build_script quote		3.5 s	9 ms	0
└rustc /usr/local/bin/rustc	--version	3.5 s	7 ms	0
└build_script encoding_rs		4.0 s	1 ms	0
└build_script pyo3-ffi		10.0 s	67 ms	0
└unknown		10.0 s	0 ms	32512
└other /usr/bin/python3 ×3	--version	10.0 s	6 ms	0
└rustc /usr/local/bin/rustc	--version	10.1 s	7 ms	0
└build_script libc		10.4 s	9 ms	0
└rustc /usr/local/bin/rustc	--version	10.4 s	7 ms	0
└build_script pyo3		16.7 s	10 ms	0
└rustc /usr/local/bin/rustc	--version	16.7 s	7 ms	0
└build_script thiserror		17.8 s	24 ms	0
└rustc /usr/local/bin/rustc	--edition=2018 --crate-name=thiserror --crate-type=lib --cap-lints=allow --emit=dep-info,metadata --out-dir /work/target/debug/build/thiserror-bf0fafdea055103f/out/probe build/probe.rs --target x86_64-unknown-linux-gnu	17.8 s	21 ms	256
└build_script muslib		22.6 s	9 ms	0
└rustc /usr/local/bin/rustc	--version	22.6 s	7 ms	0

Network 0

No network activity.

Files 0

Secrets opened

None.

Written outside the build directories

None.

Scratch disk 0

Files: 529
Directories: 134
Size: 195.9 MiB
Compiled units: 69

Nothing outside the build areas.

Output

Standard error

   Compiling autocfg v1.5.1
   Compiling rustversion v1.0.23
   Compiling num-traits v0.2.19
    Checking bitflags v1.3.2
    Checking lazy_static v1.5.1
   Compiling proc-macro2 v1.0.107
   Compiling target-lexicon v0.13.5
    Checking arrayvec v0.7.8
    Checking bytemuck v1.25.2
    Checking symphonia-core v0.5.5
   Compiling encoding_rs v0.8.42
   Compiling unicode-ident v1.0.27
   Compiling quote v1.0.47
    Checking scopeguard v1.2.0
    Checking core_detect v1.0.0
    Checking cfg-if v1.0.5
    Checking simdutf8 v0.1.5
   Compiling multiversion_no_op v1.0.0
   Compiling pyo3-build-config v0.29.3
   Compiling syn v2.0.119
    Checking symphonia-metadata v0.5.5
    Checking symphonia-utils-xiph v0.5.5
   Compiling pyo3-ffi v0.29.3
    Checking num-integer v0.1.47
   Compiling libc v0.2.191
    Checking strength_reduce v0.2.4
    Checking transpose v0.2.3
    Checking primal-check v0.3.4
   Compiling pyo3 v0.29.3
    Checking num-complex v0.4.6
   Compiling heck v0.5.0
    Checking audio-codec-algorithms v0.8.1
    Checking audioadapter-sample v5.2.0
   Compiling pyo3-macros-backend v0.29.3
    Checking rustfft v6.4.1
    Checking extended v0.1.0
   Compiling thiserror v1.0.69
    Checking audioadapter v5.0.0
    Checking audioadapter-buffers v5.2.0
    Checking symphonia-format-riff v0.5.5
    Checking realfft v3.5.0
   Compiling pyo3-macros v0.29.3
    Checking symphonia-codec-vorbis v0.5.5
    Checking symphonia-format-mkv v0.5.5
    Checking symphonia-format-ogg v0.5.5
    Checking symphonia-bundle-flac v0.5.5
   Compiling thiserror-impl v1.0.69
   Compiling visibility v0.1.1
   Compiling muslib v0.2.1
    Checking windowfunctions v0.1.1
    Checking symphonia-codec-adpcm v0.5.5
    Checking symphonia-codec-pcm v0.5.5
    Checking once_cell v1.21.4
    Checking byteorder v1.5.0
    Checking ogg v0.9.2
    Checking symphonia v0.5.5
    Checking rubato v5.0.1
    Checking opus-rs v0.1.40
    Checking hound v3.5.1
    Checking crateward-probe v0.0.0 (/cw/probe)
    Finished `dev` profile [unoptimized + debuginfo] target(s) in 24.45s

Timeline

When	From	To	Event	Worker
2026-10-25 15:13 UTC	Discovered	Fetched	fetched	fetcher-12688
2026-10-25 15:13 UTC	Fetched	ReadyForSandbox	static_analysis_completed	static-12726
2026-10-25 15:13 UTC	ReadyForSandbox	Running	sandbox_started	orchestrator-12760-slot2
2026-10-25 15:14 UTC	Running	DynamicallyAnalyzed	sandbox_completed	orchestrator-12760-slot2
2026-10-25 15:14 UTC	DynamicallyAnalyzed	Scored	scored	analyzer-12816
2026-10-25 15:14 UTC	Scored	Done	finalized	analyzer-12816