[INFO] fetching crate threatflux-package-security 0.2.1...
[INFO] testing threatflux-package-security-0.2.1 against 1.99.0-beta.8 for beta-1.100-2
[INFO] extracting crate threatflux-package-security 0.2.1 into /workspace/builds/worker-3-tc1/source
[INFO] started tweaking crates.io crate threatflux-package-security 0.2.1
[INFO] removed 0 missing examples
[INFO] removed 0 missing tests
[INFO] finished tweaking crates.io crate threatflux-package-security 0.2.1
[INFO] tweaked toml for crates.io crate threatflux-package-security 0.2.1 written to /workspace/builds/worker-3-tc1/source/Cargo.toml
[INFO] validating manifest of crates.io crate threatflux-package-security 0.2.1 on toolchain 1.99.0-beta.8
[INFO] running `Command { std: CARGO_HOME="/workspace/cargo-home" RUSTUP_HOME="/workspace/rustup-home" "/workspace/cargo-home/bin/cargo" "+1.99.0-beta.8" "metadata" "--manifest-path" "Cargo.toml" "--no-deps", kill_on_drop: false }`
[INFO] crate crates.io crate threatflux-package-security 0.2.1 already has a lockfile, it will not be regenerated
[INFO] running `Command { std: CARGO_HOME="/workspace/cargo-home" RUSTUP_HOME="/workspace/rustup-home" "/workspace/cargo-home/bin/cargo" "+1.99.0-beta.8" "fetch" "--manifest-path" "Cargo.toml", kill_on_drop: false }`
[INFO] [stderr]     Updating crates.io index
[INFO] [stderr]  Downloading crates ...
[INFO] [stderr]   Downloaded toml v1.1.4+spec-1.1.0
[INFO] [stderr]   Downloaded pep440_rs v0.7.3
[INFO] [stderr]   Downloaded unscanny v0.1.0
[INFO] [stderr]   Downloaded zip v8.6.0
[INFO] [stderr]   Downloaded typed-path v0.12.3
[INFO] [stderr]   Downloaded zlib-rs v0.6.7
[INFO] running `Command { std: "docker" "create" "-v" "/var/lib/crater-agent-workspace/builds/worker-3-tc1/source:/opt/rustwide/workdir:ro,Z" "-v" "/var/lib/crater-agent-workspace/builds/worker-3-tc1/target:/opt/rustwide/target:rw,Z" "-v" "/var/lib/crater-agent-workspace/cargo-home:/opt/rustwide/cargo-home:ro,Z" "-v" "/var/lib/crater-agent-workspace/rustup-home:/opt/rustwide/rustup-home:ro,Z" "-m" "1610612736" "--network" "none" "ghcr.io/rust-lang/crates-build-env/linux@sha256:3111399a4047eeb3a02b7a90e478d715f38a8c6669b5c4b49d30a17385265909" "sleep" "infinity", kill_on_drop: false }`
[INFO] [stdout] 0dfa85e2a3fa220475b0ff26120b7b1a59b7a5125056f186b6169e7a966afe0b
[INFO] running `Command { std: "docker" "start" "0dfa85e2a3fa220475b0ff26120b7b1a59b7a5125056f186b6169e7a966afe0b", kill_on_drop: false }`
[INFO] running `Command { std: "docker" "inspect" "0dfa85e2a3fa220475b0ff26120b7b1a59b7a5125056f186b6169e7a966afe0b", kill_on_drop: false }`
[INFO] running `Command { std: "docker" "exec" "-e" "SOURCE_DIR=/opt/rustwide/workdir" "-e" "CARGO_HOME=/opt/rustwide/cargo-home" "-e" "RUSTUP_HOME=/opt/rustwide/rustup-home" "-e" "CARGO_TARGET_DIR=/opt/rustwide/target" "-w" "/opt/rustwide/workdir" "--user" "0:0" "0dfa85e2a3fa220475b0ff26120b7b1a59b7a5125056f186b6169e7a966afe0b" "/opt/rustwide/cargo-home/bin/cargo" "+1.99.0-beta.8" "metadata" "--no-deps" "--format-version=1", kill_on_drop: false }`
[INFO] running `Command { std: "docker" "inspect" "0dfa85e2a3fa220475b0ff26120b7b1a59b7a5125056f186b6169e7a966afe0b", kill_on_drop: false }`
[INFO] running `Command { std: "docker" "exec" "-e" "SOURCE_DIR=/opt/rustwide/workdir" "-e" "CARGO_HOME=/opt/rustwide/cargo-home" "-e" "RUSTUP_HOME=/opt/rustwide/rustup-home" "-e" "CARGO_TARGET_DIR=/opt/rustwide/target" "-e" "CARGO_INCREMENTAL=0" "-e" "RUST_BACKTRACE=full" "-e" "RUSTFLAGS=--cap-lints=warn" "-e" "RUSTDOCFLAGS=--cap-lints=warn" "-w" "/opt/rustwide/workdir" "--user" "0:0" "0dfa85e2a3fa220475b0ff26120b7b1a59b7a5125056f186b6169e7a966afe0b" "/opt/rustwide/cargo-home/bin/cargo" "+1.99.0-beta.8" "build" "--frozen" "--message-format=json", kill_on_drop: false }`
[INFO] [stderr]    Compiling serde_core v1.0.229
[INFO] [stderr]    Compiling zlib-rs v0.6.7
[INFO] [stderr]    Compiling winnow v1.0.4
[INFO] [stderr]    Compiling num-traits v0.2.19
[INFO] [stderr]    Compiling unicode-width v0.2.2
[INFO] [stderr]    Compiling typed-path v0.12.3
[INFO] [stderr]    Compiling regex-automata v0.4.18
[INFO] [stderr]    Compiling indexmap v2.14.0
[INFO] [stderr]    Compiling toml_writer v1.1.2+spec-1.1.0
[INFO] [stderr]    Compiling unscanny v0.1.0
[INFO] [stderr]    Compiling syn v3.0.3
[INFO] [stderr]    Compiling tokio v1.53.1
[INFO] [stderr]    Compiling toml_parser v1.1.3+spec-1.1.0
[INFO] [stderr]    Compiling serde_derive v1.0.229
[INFO] [stderr]    Compiling async-trait v0.1.92
[INFO] [stderr]    Compiling flate2 v1.1.9
[INFO] [stderr]    Compiling regex v1.13.1
[INFO] [stderr]    Compiling toml_datetime v1.1.1+spec-1.1.0
[INFO] [stderr]    Compiling serde_spanned v1.1.1
[INFO] [stderr]    Compiling serde_json v1.0.151
[INFO] [stderr]    Compiling toml v1.1.4+spec-1.1.0
[INFO] [stderr]    Compiling zip v8.6.0
[INFO] [stderr]    Compiling serde v1.0.229
[INFO] [stderr]    Compiling chrono v0.4.45
[INFO] [stderr]    Compiling pep440_rs v0.7.3
[INFO] [stderr]    Compiling threatflux-package-security v0.2.1 (/opt/rustwide/workdir)
[INFO] [stderr]     Finished `dev` profile [unoptimized + debuginfo] target(s) in 23.73s
[INFO] running `Command { std: "docker" "inspect" "0dfa85e2a3fa220475b0ff26120b7b1a59b7a5125056f186b6169e7a966afe0b", kill_on_drop: false }`
[INFO] running `Command { std: "docker" "exec" "-e" "SOURCE_DIR=/opt/rustwide/workdir" "-e" "CARGO_HOME=/opt/rustwide/cargo-home" "-e" "RUSTUP_HOME=/opt/rustwide/rustup-home" "-e" "CARGO_TARGET_DIR=/opt/rustwide/target" "-e" "CARGO_INCREMENTAL=0" "-e" "RUST_BACKTRACE=full" "-e" "RUSTFLAGS=--cap-lints=warn" "-e" "RUSTDOCFLAGS=--cap-lints=warn" "-w" "/opt/rustwide/workdir" "--user" "0:0" "0dfa85e2a3fa220475b0ff26120b7b1a59b7a5125056f186b6169e7a966afe0b" "/opt/rustwide/cargo-home/bin/cargo" "+1.99.0-beta.8" "test" "--frozen" "--no-run" "--message-format=json", kill_on_drop: false }`
[INFO] [stderr]    Compiling syn v3.0.3
[INFO] [stderr]    Compiling libc v0.2.189
[INFO] [stderr]    Compiling getrandom v0.4.3
[INFO] [stderr]    Compiling rustix v1.1.4
[INFO] [stderr]    Compiling linux-raw-sys v0.12.1
[INFO] [stderr]    Compiling bitflags v2.13.1
[INFO] [stderr]    Compiling fastrand v2.5.0
[INFO] [stderr]    Compiling tempfile v3.27.0
[INFO] [stderr]    Compiling serde_derive v1.0.229
[INFO] [stderr]    Compiling tokio-macros v2.7.2
[INFO] [stderr]    Compiling async-trait v0.1.92
[INFO] [stderr]    Compiling tokio v1.53.1
[INFO] [stderr]    Compiling serde v1.0.229
[INFO] [stderr]    Compiling chrono v0.4.45
[INFO] [stderr]    Compiling pep440_rs v0.7.3
[INFO] [stderr]    Compiling threatflux-package-security v0.2.1 (/opt/rustwide/workdir)
[INFO] [stderr]     Finished `test` profile [unoptimized + debuginfo] target(s) in 20.43s
[INFO] running `Command { std: "docker" "inspect" "0dfa85e2a3fa220475b0ff26120b7b1a59b7a5125056f186b6169e7a966afe0b", kill_on_drop: false }`
[INFO] running `Command { std: "docker" "exec" "-e" "SOURCE_DIR=/opt/rustwide/workdir" "-e" "CARGO_HOME=/opt/rustwide/cargo-home" "-e" "RUSTUP_HOME=/opt/rustwide/rustup-home" "-e" "CARGO_TARGET_DIR=/opt/rustwide/target" "-e" "CARGO_INCREMENTAL=0" "-e" "RUST_BACKTRACE=full" "-e" "RUSTFLAGS=--cap-lints=warn" "-e" "RUSTDOCFLAGS=--cap-lints=warn" "-w" "/opt/rustwide/workdir" "--user" "0:0" "0dfa85e2a3fa220475b0ff26120b7b1a59b7a5125056f186b6169e7a966afe0b" "/opt/rustwide/cargo-home/bin/cargo" "+1.99.0-beta.8" "test" "--frozen", kill_on_drop: false }`
[INFO] [stderr]     Finished `test` profile [unoptimized + debuginfo] target(s) in 0.09s
[INFO] [stderr]      Running unittests src/lib.rs (/opt/rustwide/target/debug/deps/threatflux_package_security-b3de334dada9a21f)
[INFO] [stdout] 
[INFO] [stdout] running 41 tests
[INFO] [stdout] test analyzers::java::tests::manifest_keys_are_case_insensitive_and_duplicates_fail ... ok
[INFO] [stdout] test core::patterns::tests::literal_indicators_match_case_sensitively_and_empty_matchers_are_rejected ... ok
[INFO] [stdout] test analyzers::java::tests::native_library_risk_evidence_does_not_claim_install_scripts ... ok
[INFO] [stdout] test analyzers::java::tests::nested_signature_like_file_is_not_a_signature_block_entry ... ok
[INFO] [stdout] test analyzers::java::tests::inspect_rejects_unsupported_extension_even_for_valid_zip ... ok
[INFO] [stdout] test core::vulnerability::tests::cvss_classification_handles_boundaries_and_invalid_values ... ok
[INFO] [stdout] test core::vulnerability::tests::severity_score_rejects_invalid_cvss_values ... ok
[INFO] [stdout] test core::risk::tests::component_weighting_is_deterministic_and_bounded ... ok
[INFO] [stdout] test core::risk::tests::critical_advisory_is_critical_and_similarity_alone_is_low ... ok
[INFO] [stdout] test core::risk::tests::low_severity_capability_is_not_promoted_to_critical ... ok
[INFO] [stdout] test core::risk::tests::rejects_non_finite_or_out_of_range_scores ... ok
[INFO] [stdout] test analyzers::java::tests::preflight_rejects_entry_count_before_zip_parser_allocation ... ok
[INFO] [stdout] test utils::version_parser::tests::advisory_intervals_include_prereleases_before_the_fixed_version ... ok
[INFO] [stdout] test utils::input::tests::reads_regular_bounded_utf8_file ... ok
[INFO] [stdout] test utils::version_parser::tests::compares_prerelease_identifiers_semantically ... ok
[INFO] [stdout] test utils::input::tests::rejects_symlinked_project_metadata ... ok
[INFO] [stdout] test utils::typosquatting::tests::results_are_ecosystem_scoped_and_deterministic ... ok
[INFO] [stdout] test utils::package_name::tests::python_names_follow_pep_503_equivalence ... ok
[INFO] [stdout] test utils::typosquatting::tests::exact_popular_names_are_not_flagged ... ok
[INFO] [stdout] test utils::typosquatting::tests::suspicious_affix_returns_the_comparison_target ... ok
[INFO] [stdout] test utils::version_parser::tests::rejects_malformed_versions ... ok
[INFO] [stdout] test utils::version_parser::tests::evaluates_supported_advisory_ranges_in_operator_order ... ok
[INFO] [stdout] test vulnerability_db::npm_db::tests::curated_advisory_boundaries_are_numeric_and_exact_only ... ok
[INFO] [stdout] test utils::version_parser::tests::only_exact_requirements_are_confirmed_affected ... ok
[INFO] [stdout] test utils::version_parser::tests::parses_partial_versions_and_ignores_build_for_precedence ... ok
[INFO] [stdout] test vulnerability_db::npm_db::tests::embedded_advisory_snapshot_matches_reviewed_source_metadata ... ok
[INFO] [stdout] test vulnerability_db::java_db::tests::empty_snapshot_does_not_guess_from_ambiguous_artifact_names ... ok
[INFO] [stdout] test vulnerability_db::npm_db::tests::false_cve_package_attributions_are_not_present ... ok
[INFO] [stdout] test vulnerability_db::npm_db::tests::advisory_lookup_keeps_shared_cve_aliases_distinct_and_deterministic ... ok
[INFO] [stdout] test analyzers::java::tests::valid_archive_parses_case_insensitive_manifest_and_continuation ... ok
[INFO] [stdout] test vulnerability_db::python_db::tests::embedded_advisory_snapshot_matches_reviewed_source_metadata ... ok
[INFO] [stdout] test vulnerability_db::python_db::tests::django_fixed_branch_is_not_reintroduced_by_another_range ... ok
[INFO] [stdout] test vulnerability_db::python_db::tests::normalizes_pep_503_names_and_filters_exact_versions ... ok
[INFO] [stdout] test core::patterns::tests::scan_is_fallible_and_bounded ... ok
[INFO] [stdout] test core::patterns::tests::invalid_import_is_atomic ... ok
[INFO] [stdout] test analyzers::java::tests::rejects_unsafe_paths_and_oversized_manifests ... ok
[INFO] [stdout] test core::patterns::tests::default_patterns_do_not_match_benign_identifier_substrings ... ok
[INFO] [stdout] test core::patterns::tests::definition_evidence_is_rejected_before_storage ... ok
[INFO] [stdout] test tests::test_package_detection ... ok
[INFO] [stdout] test core::patterns::tests::database_updates_category_without_duplicates_and_exports_stably ... ok
[INFO] [stdout] test core::patterns::tests::aggregate_regex_count_and_bytes_are_rejected_before_compilation ... ok
[INFO] [stdout] 
[INFO] [stdout] test result: ok. 41 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.65s
[INFO] [stdout] 
[INFO] [stderr]      Running tests/analysis_boundaries.rs (/opt/rustwide/target/debug/deps/analysis_boundaries-0bd6e6b416a52012)
[INFO] [stdout] 
[INFO] [stdout] running 24 tests
[INFO] [stdout] test parse_errors_do_not_echo_attacker_controlled_toml ... ok
[INFO] [stdout] test python_prefers_pyproject_and_parses_pep508_subset_without_guessing_ranges ... ok
[INFO] [stdout] test analysis_without_tokio_returns_an_error_instead_of_panicking ... ok
[INFO] [stdout] test executable_f_string_expressions_remain_visible_to_setup_scanning ... ok
[INFO] [stdout] test caller_controlled_paths_are_escaped_in_errors ... ok
[INFO] [stdout] test benign_python_identifier_substrings_are_not_execution_signals ... ok
[INFO] [stdout] test network_capability_alone_is_not_labeled_code_execution ... ok
[INFO] [stdout] test npm_and_python_archives_are_not_advertised_as_supported ... ok
[INFO] [stdout] test requirements_file_dependencies_have_unknown_role_and_directness ... ok
[INFO] [stdout] test build_only_pyproject_falls_back_to_legacy_metadata ... ok
[INFO] [stdout] test npm_preserves_distinct_roles_and_models_optional_override ... ok
[INFO] [stdout] test project_metadata_size_and_symlink_boundaries_fail_closed ... ok
[INFO] [stdout] test malformed_python_requirements_do_not_become_advisory_matches ... ok
[INFO] [stdout] test duplicate_python_requirements_do_not_inflate_advisory_risk ... ok
[INFO] [stdout] test unified_analyzer_rejects_multi_ecosystem_directories ... ok
[INFO] [stdout] test npm_reports_only_exact_curated_matches_and_tracks_unresolved_ranges ... ok
[INFO] [stdout] test setup_cfg_rejects_case_insensitive_duplicate_identity_metadata ... ok
[INFO] [stdout] test setup_field_parser_ignores_comments_and_longer_identifier_decoys ... ok
[INFO] [stdout] test setup_comments_and_string_literals_are_not_executable_signals ... ok
[INFO] [stdout] test lifecycle_and_custom_setup_hooks_are_observable_supply_chain_signals ... ok
[INFO] [stdout] test python_rejects_noncanonical_subject_identity ... ok
[INFO] [stdout] test subject_and_dependency_advisories_are_distinguished_and_deduplicated ... ok
[INFO] [stdout] test setup_parser_rejects_decoys_and_dynamic_subject_metadata ... ok
[INFO] [stdout] test npm_strictly_rejects_malformed_supported_fields ... ok
[INFO] [stdout] 
[INFO] [stdout] test result: ok. 24 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.77s
[INFO] [stdout] 
[INFO] [stderr]      Running tests/injected_database.rs (/opt/rustwide/target/debug/deps/injected_database-f4502e9765e47d80)
[INFO] [stdout] 
[INFO] [stdout] running 3 tests
[INFO] [stdout] test injected_database_receives_ranges_then_subject_and_metadata_is_last ... ok
[INFO] [stdout] test python_injected_database_receives_ranges_but_not_unevaluated_markers ... ok
[INFO] [stdout] test invalid_input_and_database_errors_do_not_produce_metadata ... ok
[INFO] [stdout] 
[INFO] [stdout] test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.13s
[INFO] [stdout] 
[INFO] [stderr]    Doc-tests threatflux_package_security
[INFO] [stdout] 
[INFO] [stdout] running 0 tests
[INFO] [stdout] 
[INFO] [stdout] test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
[INFO] [stdout] 
[INFO] running `Command { std: "docker" "inspect" "0dfa85e2a3fa220475b0ff26120b7b1a59b7a5125056f186b6169e7a966afe0b", kill_on_drop: false }`
[INFO] running `Command { std: "docker" "rm" "-f" "0dfa85e2a3fa220475b0ff26120b7b1a59b7a5125056f186b6169e7a966afe0b", kill_on_drop: false }`
[INFO] [stdout] 0dfa85e2a3fa220475b0ff26120b7b1a59b7a5125056f186b6169e7a966afe0b
