ClaudeRabbit
New scan
github.com/sharkdp/hexyl · 6ecc29b

90/ 100

No threats observed

No threats observed: The observed scan scored 90, with no behaviour or code findings reported. Scanned 23 Oct 2026.

NetworkForged
2 calls, answered by the forge
Files250 changes
/home/cr/.cargo/.package-cache
CodeNothing taken off
no code deduction

Score

90 / 100
1000

Nothing was taken off for what the code did or what running it showed.

What it did

535 events in 32.9s
Fetched5.1s
48422 bytes fetched inside the VM from codeload.github.com in 3372 ms; commit id verified; egress restored
Read12.6s
1 scanner finding(s)
Checked12.6s
0 locked dependencies, 0 malicious
Jev29.8s
Answered questions from the evidence
Sandbox29.8s
install completed, entry completed, 106 forged call(s)
Score29.8s
90 No threats observed

Network

nothing real left the machine
A
index.crates.io
0 B sent in install
Forged dns
AAAA
index.crates.io
0 B sent in install
Forged dns
AAAA
index.crates.io.local
0 B sent in install
Forged dns
GET
index.crates.io/config.json
0 B sent in install
Forged registry
GET
index.crates.io/an/yh/anyhow
0 B sent in install
Forged registry
GET
index.crates.io/cl/ap/clap
0 B sent in install
Forged registry
Show all 106 calls
GET
index.crates.io/cl/ap/clap_complete
0 B sent in install
Forged registry
GET
index.crates.io/co/ns/const_format
0 B sent in install
Forged registry
GET
index.crates.io/li/bc/libc
0 B sent in install
Forged registry
GET
index.crates.io/ow/o-/owo-colors
0 B sent in install
Forged registry
GET
index.crates.io/su/pp/supports-color
0 B sent in install
Forged registry
GET
index.crates.io/te/rm/terminal_size
0 B sent in install
Forged registry
GET
index.crates.io/th/is/thiserror
0 B sent in install
Forged registry
GET
index.crates.io/pr/et/pretty_assertions
0 B sent in install
Forged registry
GET
index.crates.io/as/se/assert_cmd
0 B sent in install
Forged registry
GET
index.crates.io/pr/ed/predicates
0 B sent in install
Forged registry
GET
index.crates.io/cl/ap/clap_builder
0 B sent in install
Forged registry
GET
index.crates.io/cl/ap/clap_derive
0 B sent in install
Forged registry
GET
index.crates.io/is/_c/is_ci
0 B sent in install
Forged registry
GET
index.crates.io/co/ns/const_format_proc_macros
0 B sent in install
Forged registry
GET
index.crates.io/wi/nd/windows-sys
0 B sent in install
Forged registry
GET
index.crates.io/ru/st/rustix
0 B sent in install
Forged registry
GET
index.crates.io/th/is/thiserror-impl
0 B sent in install
Forged registry
GET
index.crates.io/an/st/anstyle
0 B sent in install
Forged registry
GET
index.crates.io/bs/tr/bstr
0 B sent in install
Forged registry
GET
index.crates.io/pr/ed/predicates-tree
0 B sent in install
Forged registry
GET
index.crates.io/pr/ed/predicates-core
0 B sent in install
Forged registry
GET
index.crates.io/wa/it/wait-timeout
0 B sent in install
Forged registry
GET
index.crates.io/ya/ns/yansi
0 B sent in install
Forged registry
GET
index.crates.io/re/ge/regex
0 B sent in install
Forged registry
GET
index.crates.io/no/rm/normalize-line-endings
0 B sent in install
Forged registry
GET
index.crates.io/di/ff/diff
0 B sent in install
Forged registry
GET
index.crates.io/fl/oa/float-cmp
0 B sent in install
Forged registry
GET
index.crates.io/di/ff/difflib
0 B sent in install
Forged registry
GET
index.crates.io/an/st/anstream
0 B sent in install
Forged registry
GET
index.crates.io/cl/ap/clap_lex
0 B sent in install
Forged registry
GET
index.crates.io/he/ck/heck
0 B sent in install
Forged registry
GET
index.crates.io/st/rs/strsim
0 B sent in install
Forged registry
GET
index.crates.io/pr/oc/proc-macro2
0 B sent in install
Forged registry
GET
index.crates.io/qu/ot/quote
0 B sent in install
Forged registry
GET
index.crates.io/3/s/syn
0 B sent in install
Forged registry
GET
index.crates.io/bi/tf/bitflags
0 B sent in install
Forged registry
GET
index.crates.io/un/ic/unicode-xid
0 B sent in install
Forged registry
GET
index.crates.io/er/rn/errno
0 B sent in install
Forged registry
GET
index.crates.io/li/nu/linux-raw-sys
0 B sent in install
Forged registry
GET
index.crates.io/wi/nd/windows-targets
0 B sent in install
Forged registry
GET
index.crates.io/me/mc/memchr
0 B sent in install
Forged registry
GET
index.crates.io/re/ge/regex-automata
0 B sent in install
Forged registry
GET
index.crates.io/se/rd/serde
0 B sent in install
Forged registry
GET
index.crates.io/nu/m-/num-traits
0 B sent in install
Forged registry
GET
index.crates.io/ah/o-/aho-corasick
0 B sent in install
Forged registry
GET
index.crates.io/te/rm/termtree
0 B sent in install
Forged registry
GET
index.crates.io/re/ge/regex-syntax
0 B sent in install
Forged registry
GET
index.crates.io/an/st/anstyle-parse
0 B sent in install
Forged registry
GET
index.crates.io/an/st/anstyle-query
0 B sent in install
Forged registry
GET
index.crates.io/an/st/anstyle-wincon
0 B sent in install
Forged registry
GET
index.crates.io/co/lo/colorchoice
0 B sent in install
Forged registry
GET
index.crates.io/is/_t/is_terminal_polyfill
0 B sent in install
Forged registry
GET
index.crates.io/ut/f8/utf8parse
0 B sent in install
Forged registry
GET
index.crates.io/un/ic/unicode-ident
0 B sent in install
Forged registry
GET
index.crates.io/wi/nd/windows_aarch64_gnullvm
0 B sent in install
Forged registry
GET
index.crates.io/wi/nd/windows_aarch64_msvc
0 B sent in install
Forged registry
GET
index.crates.io/wi/nd/windows_i686_gnu
0 B sent in install
Forged registry
GET
index.crates.io/wi/nd/windows_x86_64_msvc
0 B sent in install
Forged registry
GET
index.crates.io/wi/nd/windows_x86_64_gnullvm
0 B sent in install
Forged registry
GET
index.crates.io/wi/nd/windows_i686_msvc
0 B sent in install
Forged registry
GET
index.crates.io/wi/nd/windows_x86_64_gnu
0 B sent in install
Forged registry
GET
index.crates.io/wi/nd/windows_i686_gnullvm
0 B sent in install
Forged registry
GET
index.crates.io/au/to/autocfg
0 B sent in install
Forged registry
GET
index.crates.io/se/rd/serde_derive
0 B sent in install
Forged registry
A
static.crates.io
0 B sent in install
Forged dns
AAAA
static.crates.io
0 B sent in install
Forged dns
AAAA
static.crates.io.local
0 B sent in install
Forged dns
GET
static.crates.io/crates/anstyle/1.0.9/download
0 B sent in install
Forged registry
GET
static.crates.io/crates/bitflags/2.6.0/download
0 B sent in install
Forged registry
GET
static.crates.io/crates/anyhow/1.0.91/download
0 B sent in install
Forged registry
GET
static.crates.io/crates/anstream/0.6.17/download
0 B sent in install
Forged registry
GET
static.crates.io/crates/clap/4.5.20/download
0 B sent in install
Forged registry
GET
static.crates.io/crates/anstyle-parse/0.2.6/download
0 B sent in install
Forged registry
GET
static.crates.io/crates/anstyle-query/1.1.2/download
0 B sent in install
Forged registry
GET
static.crates.io/crates/colorchoice/1.0.3/download
0 B sent in install
Forged registry
GET
static.crates.io/crates/clap_builder/4.5.20/download
0 B sent in install
Forged registry
GET
static.crates.io/crates/clap_lex/0.7.2/download
0 B sent in install
Forged registry
GET
static.crates.io/crates/clap_complete/4.5.55/download
0 B sent in install
Forged registry
GET
static.crates.io/crates/libc/0.2.161/download
0 B sent in install
Forged registry
GET
static.crates.io/crates/linux-raw-sys/0.4.14/download
0 B sent in install
Forged registry
GET
static.crates.io/crates/is_ci/1.2.0/download
0 B sent in install
Forged registry
GET
static.crates.io/crates/strsim/0.11.1/download
0 B sent in install
Forged registry
GET
static.crates.io/crates/errno/0.3.9/download
0 B sent in install
Forged registry
GET
static.crates.io/crates/is_termina…yfill/1.70.1/download
0 B sent in install
Forged registry
GET
static.crates.io/crates/heck/0.5.0/download
0 B sent in install
Forged registry
GET
static.crates.io/crates/supports-color/3.0.1/download
0 B sent in install
Forged registry
GET
static.crates.io/crates/unicode-xid/0.2.6/download
0 B sent in install
Forged registry
GET
static.crates.io/crates/clap_derive/4.5.18/download
0 B sent in install
Forged registry
GET
static.crates.io/crates/const_format/0.2.33/download
0 B sent in install
Forged registry
GET
static.crates.io/crates/owo-colors/4.1.0/download
0 B sent in install
Forged registry
GET
static.crates.io/crates/const_form…acros/0.2.33/download
0 B sent in install
Forged registry
GET
static.crates.io/crates/thiserror-impl/1.0.65/download
0 B sent in install
Forged registry
GET
static.crates.io/crates/terminal_size/0.4.0/download
0 B sent in install
Forged registry
GET
static.crates.io/crates/rustix/0.38.38/download
0 B sent in install
Forged registry
GET
static.crates.io/crates/quote/1.0.37/download
0 B sent in install
Forged registry
GET
static.crates.io/crates/syn/2.0.85/download
0 B sent in install
Forged registry
GET
static.crates.io/crates/utf8parse/0.2.2/download
0 B sent in install
Forged registry
GET
static.crates.io/crates/proc-macro2/1.0.89/download
0 B sent in install
Forged registry
GET
static.crates.io/crates/thiserror/1.0.65/download
0 B sent in install
Forged registry
GET
static.crates.io/crates/unicode-ident/1.0.13/download
0 B sent in install
Forged registry

Luna's report

The observed run and code review reported no findings. Pin the scanned version before using it. Behaviour outside the observed install and entry windows was not verified.

We installed the package and ran its entry point in a throwaway sandbox, and scanned the reachable code. The run completed; no behaviour findings were reported.

What it ran

InstalledNothing to install
Entry pointenv -i HOME=/hom…T=1 FAKETIME_NO_CAC
Network2 calls, forged
MachineDestroyed after the scan

Jev's answers

answered from the evidence
Install check
Install-time code does not use the network
Install-time code does not read credentials
Show all 4 answers
Install-time code does not run other programs or payloads
Install-time code is not obfuscated
Docs check
The docs do not say it makes no network calls
The docs do not say it has no side effects
Show all 3 answers
What it did fits what its docs say it is for

Not verified

Behaviour outside the observed install and entry windows

Code paths not triggered by install or the entry point

Show all 3 items

Payloads gated on calendar dates past the accelerated clock window, or on hosts that need real responses

Reputation

GitHubOwner 13 years old
GitHubOwner established (over a year, 3+ public repositories)
GitHub10K stars
GitHub122 public repos

Shown apart from the code and behaviour findings.