[INFO] cloning repository https://github.com/jtsilverman/supply-scan
[INFO] running `Command { std: "git" "-c" "credential.helper=" "-c" "credential.helper=/workspace/cargo-home/bin/git-credential-null" "clone" "--bare" "https://github.com/jtsilverman/supply-scan" "/workspace/cache/git-repos/https%3A%2F%2Fgithub.com%2Fjtsilverman%2Fsupply-scan", kill_on_drop: false }`
[INFO] [stderr] Cloning into bare repository '/workspace/cache/git-repos/https%3A%2F%2Fgithub.com%2Fjtsilverman%2Fsupply-scan'...
[INFO] running `Command { std: "git" "rev-parse" "HEAD", kill_on_drop: false }`
[INFO] [stdout] c4415f04444b9e3c476568fe93e545c9a2ca17c1
[INFO] testing jtsilverman/supply-scan against beta-2026-04-21 for beta-1.96-2
[INFO] running `Command { std: "git" "clone" "/workspace/cache/git-repos/https%3A%2F%2Fgithub.com%2Fjtsilverman%2Fsupply-scan" "/workspace/builds/worker-6-tc2/source", kill_on_drop: false }`
[INFO] [stderr] Cloning into '/workspace/builds/worker-6-tc2/source'...
[INFO] [stderr] done.
[INFO] started tweaking git repo https://github.com/jtsilverman/supply-scan
[INFO] finished tweaking git repo https://github.com/jtsilverman/supply-scan
[INFO] tweaked toml for git repo https://github.com/jtsilverman/supply-scan written to /workspace/builds/worker-6-tc2/source/Cargo.toml
[INFO] validating manifest of git repo https://github.com/jtsilverman/supply-scan on toolchain beta-2026-04-21
[INFO] running `Command { std: CARGO_HOME="/workspace/cargo-home" RUSTUP_HOME="/workspace/rustup-home" "/workspace/cargo-home/bin/cargo" "+beta-2026-04-21" "metadata" "--manifest-path" "Cargo.toml" "--no-deps", kill_on_drop: false }`
[INFO] crate git repo https://github.com/jtsilverman/supply-scan already has a lockfile, it will not be regenerated
[INFO] running `Command { std: CARGO_HOME="/workspace/cargo-home" RUSTUP_HOME="/workspace/rustup-home" "/workspace/cargo-home/bin/cargo" "+beta-2026-04-21" "fetch" "--manifest-path" "Cargo.toml", kill_on_drop: false }`
[INFO] running `Command { std: "docker" "create" "-v" "/var/lib/crater-agent-workspace/builds/worker-6-tc2/target:/opt/rustwide/target:rw,Z" "-v" "/var/lib/crater-agent-workspace/builds/worker-6-tc2/source:/opt/rustwide/workdir:ro,Z" "-v" "/var/lib/crater-agent-workspace/cargo-home:/opt/rustwide/cargo-home:ro,Z" "-v" "/var/lib/crater-agent-workspace/rustup-home:/opt/rustwide/rustup-home:ro,Z" "-e" "SOURCE_DIR=/opt/rustwide/workdir" "-e" "CARGO_TARGET_DIR=/opt/rustwide/target" "-e" "CARGO_HOME=/opt/rustwide/cargo-home" "-e" "RUSTUP_HOME=/opt/rustwide/rustup-home" "-w" "/opt/rustwide/workdir" "-m" "1610612736" "--user" "0:0" "--network" "none" "ghcr.io/rust-lang/crates-build-env/linux@sha256:d429b63d4308055ea97f60fb1d3dfca48854a00942f1bd2ad806beaf015945ec" "/opt/rustwide/cargo-home/bin/cargo" "+beta-2026-04-21" "metadata" "--no-deps" "--format-version=1", kill_on_drop: false }`
[INFO] [stdout] 3a2769ac48586aedc11d305075639718c0993de76e7dacb5d43b86460b826e49
[INFO] running `Command { std: "docker" "start" "-a" "3a2769ac48586aedc11d305075639718c0993de76e7dacb5d43b86460b826e49", kill_on_drop: false }`
[INFO] running `Command { std: "docker" "inspect" "3a2769ac48586aedc11d305075639718c0993de76e7dacb5d43b86460b826e49", kill_on_drop: false }`
[INFO] running `Command { std: "docker" "rm" "-f" "3a2769ac48586aedc11d305075639718c0993de76e7dacb5d43b86460b826e49", kill_on_drop: false }`
[INFO] [stdout] 3a2769ac48586aedc11d305075639718c0993de76e7dacb5d43b86460b826e49
[INFO] running `Command { std: "docker" "create" "-v" "/var/lib/crater-agent-workspace/builds/worker-6-tc2/target:/opt/rustwide/target:rw,Z" "-v" "/var/lib/crater-agent-workspace/builds/worker-6-tc2/source:/opt/rustwide/workdir:ro,Z" "-v" "/var/lib/crater-agent-workspace/cargo-home:/opt/rustwide/cargo-home:ro,Z" "-v" "/var/lib/crater-agent-workspace/rustup-home:/opt/rustwide/rustup-home:ro,Z" "-e" "SOURCE_DIR=/opt/rustwide/workdir" "-e" "CARGO_TARGET_DIR=/opt/rustwide/target" "-e" "CARGO_INCREMENTAL=0" "-e" "RUST_BACKTRACE=full" "-e" "RUSTFLAGS=--cap-lints=warn" "-e" "RUSTDOCFLAGS=--cap-lints=warn" "-e" "CARGO_HOME=/opt/rustwide/cargo-home" "-e" "RUSTUP_HOME=/opt/rustwide/rustup-home" "-w" "/opt/rustwide/workdir" "-m" "1610612736" "--user" "0:0" "--network" "none" "ghcr.io/rust-lang/crates-build-env/linux@sha256:d429b63d4308055ea97f60fb1d3dfca48854a00942f1bd2ad806beaf015945ec" "/opt/rustwide/cargo-home/bin/cargo" "+beta-2026-04-21" "build" "--frozen" "--message-format=json", kill_on_drop: false }`
[INFO] [stdout] 759aa7666df7549cf56de8db8e32cc067074f03eb3c9a46825f7d34bf64c313c
[INFO] running `Command { std: "docker" "start" "-a" "759aa7666df7549cf56de8db8e32cc067074f03eb3c9a46825f7d34bf64c313c", kill_on_drop: false }`
[INFO] [stderr]    Compiling syn v2.0.117
[INFO] [stderr]    Compiling libc v0.2.183
[INFO] [stderr]    Compiling bytes v1.11.1
[INFO] [stderr]    Compiling futures-core v0.3.32
[INFO] [stderr]    Compiling find-msvc-tools v0.1.9
[INFO] [stderr]    Compiling itoa v1.0.18
[INFO] [stderr]    Compiling icu_properties_data v2.1.2
[INFO] [stderr]    Compiling zeroize v1.8.2
[INFO] [stderr]    Compiling once_cell v1.21.4
[INFO] [stderr]    Compiling slab v0.4.12
[INFO] [stderr]    Compiling futures-task v0.3.32
[INFO] [stderr]    Compiling rustls v0.23.37
[INFO] [stderr]    Compiling subtle v2.6.1
[INFO] [stderr]    Compiling anstyle-parse v1.0.0
[INFO] [stderr]    Compiling form_urlencoded v1.2.2
[INFO] [stderr]    Compiling tower-layer v0.3.3
[INFO] [stderr]    Compiling ipnet v2.12.0
[INFO] [stderr]    Compiling colorchoice v1.0.5
[INFO] [stderr]    Compiling tracing-core v0.1.36
[INFO] [stderr]    Compiling anstyle v1.0.14
[INFO] [stderr]    Compiling cc v1.2.58
[INFO] [stderr]    Compiling rustls-pki-types v1.14.0
[INFO] [stderr]    Compiling futures-util v0.3.32
[INFO] [stderr]    Compiling futures-channel v0.3.32
[INFO] [stderr]    Compiling sync_wrapper v1.0.2
[INFO] [stderr]    Compiling indexmap v2.13.0
[INFO] [stderr]    Compiling iri-string v0.7.11
[INFO] [stderr]    Compiling winnow v0.7.15
[INFO] [stderr]    Compiling bitflags v2.11.0
[INFO] [stderr]    Compiling ryu v1.0.23
[INFO] [stderr]    Compiling anstream v1.0.0
[INFO] [stderr]    Compiling clap_lex v1.1.0
[INFO] [stderr]    Compiling serde_json v1.0.149
[INFO] [stderr]    Compiling clap_builder v4.6.0
[INFO] [stderr]    Compiling colored v3.1.1
[INFO] [stderr]    Compiling webpki-roots v1.0.6
[INFO] [stderr]    Compiling tracing v0.1.44
[INFO] [stderr]    Compiling http v1.4.0
[INFO] [stderr]    Compiling ring v0.17.14
[INFO] [stderr]    Compiling parking_lot_core v0.9.12
[INFO] [stderr]    Compiling errno v0.3.14
[INFO] [stderr]    Compiling mio v1.2.0
[INFO] [stderr]    Compiling socket2 v0.6.3
[INFO] [stderr]    Compiling getrandom v0.2.17
[INFO] [stderr]    Compiling signal-hook-registry v1.4.8
[INFO] [stderr]    Compiling http-body v1.0.1
[INFO] [stderr]    Compiling parking_lot v0.12.5
[INFO] [stderr]    Compiling http-body-util v0.1.3
[INFO] [stderr]    Compiling synstructure v0.13.2
[INFO] [stderr]    Compiling zerofrom-derive v0.1.6
[INFO] [stderr]    Compiling yoke-derive v0.8.1
[INFO] [stderr]    Compiling zerovec-derive v0.11.2
[INFO] [stderr]    Compiling displaydoc v0.2.5
[INFO] [stderr]    Compiling tokio-macros v2.6.1
[INFO] [stderr]    Compiling serde_derive v1.0.228
[INFO] [stderr]    Compiling clap_derive v4.6.0
[INFO] [stderr]    Compiling tokio v1.50.0
[INFO] [stderr]    Compiling zerofrom v0.1.6
[INFO] [stderr]    Compiling yoke v0.8.1
[INFO] [stderr]    Compiling rustls-webpki v0.103.10
[INFO] [stderr]    Compiling zerovec v0.11.5
[INFO] [stderr]    Compiling zerotrie v0.2.3
[INFO] [stderr]    Compiling clap v4.6.0
[INFO] [stderr]    Compiling tinystr v0.8.2
[INFO] [stderr]    Compiling potential_utf v0.1.4
[INFO] [stderr]    Compiling icu_collections v2.1.1
[INFO] [stderr]    Compiling icu_locale_core v2.1.1
[INFO] [stderr]    Compiling icu_provider v2.1.1
[INFO] [stderr]    Compiling icu_normalizer v2.1.1
[INFO] [stderr]    Compiling icu_properties v2.1.2
[INFO] [stderr]    Compiling serde v1.0.228
[INFO] [stderr]    Compiling toml_datetime v0.6.11
[INFO] [stderr]    Compiling serde_spanned v0.6.9
[INFO] [stderr]    Compiling serde_urlencoded v0.7.1
[INFO] [stderr]    Compiling toml_edit v0.22.27
[INFO] [stderr]    Compiling idna_adapter v1.2.1
[INFO] [stderr]    Compiling idna v1.1.0
[INFO] [stderr]    Compiling url v2.5.8
[INFO] [stderr]    Compiling hyper v1.8.1
[INFO] [stderr]    Compiling tower v0.5.3
[INFO] [stderr]    Compiling tower-http v0.6.8
[INFO] [stderr]    Compiling toml v0.8.23
[INFO] [stderr]    Compiling tokio-rustls v0.26.4
[INFO] [stderr]    Compiling hyper-util v0.1.20
[INFO] [stderr]    Compiling hyper-rustls v0.27.7
[INFO] [stderr]    Compiling reqwest v0.12.28
[INFO] [stderr]    Compiling supply-scan v0.1.1 (/opt/rustwide/workdir)
[INFO] [stderr]     Finished `dev` profile [unoptimized + debuginfo] target(s) in 58.21s
[INFO] running `Command { std: "docker" "inspect" "759aa7666df7549cf56de8db8e32cc067074f03eb3c9a46825f7d34bf64c313c", kill_on_drop: false }`
[INFO] running `Command { std: "docker" "rm" "-f" "759aa7666df7549cf56de8db8e32cc067074f03eb3c9a46825f7d34bf64c313c", kill_on_drop: false }`
[INFO] [stdout] 759aa7666df7549cf56de8db8e32cc067074f03eb3c9a46825f7d34bf64c313c
[INFO] running `Command { std: "docker" "create" "-v" "/var/lib/crater-agent-workspace/builds/worker-6-tc2/target:/opt/rustwide/target:rw,Z" "-v" "/var/lib/crater-agent-workspace/builds/worker-6-tc2/source:/opt/rustwide/workdir:ro,Z" "-v" "/var/lib/crater-agent-workspace/cargo-home:/opt/rustwide/cargo-home:ro,Z" "-v" "/var/lib/crater-agent-workspace/rustup-home:/opt/rustwide/rustup-home:ro,Z" "-e" "SOURCE_DIR=/opt/rustwide/workdir" "-e" "CARGO_TARGET_DIR=/opt/rustwide/target" "-e" "CARGO_INCREMENTAL=0" "-e" "RUST_BACKTRACE=full" "-e" "RUSTFLAGS=--cap-lints=warn" "-e" "RUSTDOCFLAGS=--cap-lints=warn" "-e" "CARGO_HOME=/opt/rustwide/cargo-home" "-e" "RUSTUP_HOME=/opt/rustwide/rustup-home" "-w" "/opt/rustwide/workdir" "-m" "1610612736" "--user" "0:0" "--network" "none" "ghcr.io/rust-lang/crates-build-env/linux@sha256:d429b63d4308055ea97f60fb1d3dfca48854a00942f1bd2ad806beaf015945ec" "/opt/rustwide/cargo-home/bin/cargo" "+beta-2026-04-21" "test" "--frozen" "--no-run" "--message-format=json", kill_on_drop: false }`
[INFO] [stdout] 0b49a5195421a0a8a40a857a780a619a2bd0c44442be07514977eace20d099ef
[INFO] running `Command { std: "docker" "start" "-a" "0b49a5195421a0a8a40a857a780a619a2bd0c44442be07514977eace20d099ef", kill_on_drop: false }`
[INFO] [stderr]    Compiling supply-scan v0.1.1 (/opt/rustwide/workdir)
[INFO] [stderr]     Finished `test` profile [unoptimized + debuginfo] target(s) in 3.55s
[INFO] running `Command { std: "docker" "inspect" "0b49a5195421a0a8a40a857a780a619a2bd0c44442be07514977eace20d099ef", kill_on_drop: false }`
[INFO] running `Command { std: "docker" "rm" "-f" "0b49a5195421a0a8a40a857a780a619a2bd0c44442be07514977eace20d099ef", kill_on_drop: false }`
[INFO] [stdout] 0b49a5195421a0a8a40a857a780a619a2bd0c44442be07514977eace20d099ef
[INFO] running `Command { std: "docker" "create" "-v" "/var/lib/crater-agent-workspace/builds/worker-6-tc2/target:/opt/rustwide/target:rw,Z" "-v" "/var/lib/crater-agent-workspace/builds/worker-6-tc2/source:/opt/rustwide/workdir:ro,Z" "-v" "/var/lib/crater-agent-workspace/cargo-home:/opt/rustwide/cargo-home:ro,Z" "-v" "/var/lib/crater-agent-workspace/rustup-home:/opt/rustwide/rustup-home:ro,Z" "-e" "SOURCE_DIR=/opt/rustwide/workdir" "-e" "CARGO_TARGET_DIR=/opt/rustwide/target" "-e" "CARGO_INCREMENTAL=0" "-e" "RUST_BACKTRACE=full" "-e" "RUSTFLAGS=--cap-lints=warn" "-e" "RUSTDOCFLAGS=--cap-lints=warn" "-e" "CARGO_HOME=/opt/rustwide/cargo-home" "-e" "RUSTUP_HOME=/opt/rustwide/rustup-home" "-w" "/opt/rustwide/workdir" "-m" "1610612736" "--user" "0:0" "--network" "none" "ghcr.io/rust-lang/crates-build-env/linux@sha256:d429b63d4308055ea97f60fb1d3dfca48854a00942f1bd2ad806beaf015945ec" "/opt/rustwide/cargo-home/bin/cargo" "+beta-2026-04-21" "test" "--frozen", kill_on_drop: false }`
[INFO] [stdout] 311f3dc1a28acdfe40519616f1e43d8937a8dcd1f31e4b6d5261afc096930ae2
[INFO] running `Command { std: "docker" "start" "-a" "311f3dc1a28acdfe40519616f1e43d8937a8dcd1f31e4b6d5261afc096930ae2", kill_on_drop: false }`
[INFO] [stderr]     Finished `test` profile [unoptimized + debuginfo] target(s) in 0.19s
[INFO] [stderr]      Running unittests src/main.rs (/opt/rustwide/target/debug/deps/supply_scan-7692270dc20174ee)
[INFO] [stdout] 
[INFO] [stdout] running 43 tests
[INFO] [stdout] test checks::existence::tests::none_metadata_returns_critical ... ok
[INFO] [stdout] test checks::signals::tests::none_metadata_returns_empty ... ok
[INFO] [stdout] test checks::typosquat::tests::expresss_flags_for_npm ... ok
[INFO] [stdout] test checks::signals::tests::single_maintainer_info ... ok
[INFO] [stdout] test checks::vulnerability::tests::medium_severity_is_warning ... ok
[INFO] [stdout] test checks::typosquat::tests::reqeusts_flags_for_pypi ... ok
[INFO] [stdout] test checks::typosquat::tests::requests_does_not_flag_for_pypi ... ok
[INFO] [stdout] test checks::vulnerability::tests::high_severity_is_critical ... ok
[INFO] [stdout] test checks::typosquat::tests::totally_unique_does_not_flag ... ok
[INFO] [stdout] test checks::vulnerability::tests::empty_vulns_returns_empty ... ok
[INFO] [stdout] test checks::vulnerability::tests::none_severity_is_info ... ok
[INFO] [stdout] test checks::vulnerability::tests::low_severity_is_info ... ok
[INFO] [stdout] test parsers::npm::tests::test_parse_deps_and_dev_deps ... ok
[INFO] [stdout] test parsers::npm::tests::test_parse_empty_deps ... ok
[INFO] [stdout] test parsers::npm::tests::test_parse_invalid_json ... ok
[INFO] [stdout] test checks::signals::tests::recent_publish_warning ... ok
[INFO] [stdout] test parsers::npm::tests::test_parse_missing_fields ... ok
[INFO] [stdout] test checks::vulnerability::tests::critical_severity_is_critical ... ok
[INFO] [stdout] test parsers::pypi::tests::test_editable_and_url_lines_skipped ... ok
[INFO] [stdout] test parsers::pypi::tests::test_environment_markers_stripped ... ok
[INFO] [stdout] test registry::npm::tests::test_fetch_express ... ignored
[INFO] [stdout] test registry::npm::tests::test_fetch_nonexistent ... ignored
[INFO] [stdout] test registry::osv::tests::test_query_express_npm ... ignored
[INFO] [stdout] test registry::pypi::tests::test_fetch_requests ... ignored
[INFO] [stdout] test parsers::pypi::tests::test_requirements_txt_inline_comment ... ok
[INFO] [stdout] test parsers::pypi::tests::test_pyproject_toml_missing_deps ... ok
[INFO] [stdout] test parsers::pypi::tests::test_pyproject_extras_and_markers ... ok
[INFO] [stdout] test scanner::tests::scan_no_network_processes_packages ... ok
[INFO] [stdout] test scanner::tests::scan_package_preserves_ecosystem ... ok
[INFO] [stdout] test scanner::tests::scan_package_preserves_name_and_version ... ok
[INFO] [stdout] test parsers::pypi::tests::test_requirements_txt_comments_and_blanks ... ok
[INFO] [stdout] test scanner::tests::scan_package_risk_level_critical_when_critical_finding ... ok
[INFO] [stdout] test parsers::pypi::tests::test_pyproject_toml_invalid ... ok
[INFO] [stdout] test parsers::pypi::tests::test_pyproject_toml_parsing ... ok
[INFO] [stdout] test scanner::tests::scan_package_risk_level_info_when_no_findings ... ok
[INFO] [stdout] test parsers::pypi::tests::test_requirements_txt_various_formats ... ok
[INFO] [stdout] test scanner::tests::scan_package_no_network_only_typosquat_and_signals ... ok
[INFO] [stdout] test scanner::tests::scan_report_counts_findings_correctly ... ok
[INFO] [stdout] test scanner::tests::scan_package_typosquat_name_has_warning_risk ... ok
[INFO] [stdout] test checks::existence::tests::some_metadata_returns_empty ... ok
[INFO] [stdout] test scanner::tests::scan_empty_packages_returns_zeroed_report ... ok
[INFO] [stdout] test checks::signals::tests::install_scripts_warning ... ok
[INFO] [stdout] test parsers::pypi::tests::test_extras_stripped ... ok
[INFO] [stdout] 
[INFO] [stdout] test result: ok. 39 passed; 0 failed; 4 ignored; 0 measured; 0 filtered out; finished in 0.12s
[INFO] [stdout] 
[INFO] [stderr]      Running tests/integration.rs (/opt/rustwide/target/debug/deps/integration-9a23625ffab72987)
[INFO] [stdout] 
[INFO] [stdout] running 6 tests
[INFO] [stdout] test test_json_output_is_valid ... ignored
[INFO] [stdout] test test_npm_clean_no_hallucinations_or_typosquats ... ignored
[INFO] [stdout] test test_npm_risky_has_criticals ... ignored
[INFO] [stdout] test test_pre_commit_exits_1_on_clean_with_known_vulns ... ignored
[INFO] [stdout] test test_pre_commit_exits_1_on_critical ... ignored
[INFO] [stdout] test test_pypi_risky_has_criticals ... ignored
[INFO] [stdout] 
[INFO] [stdout] test result: ok. 0 passed; 0 failed; 6 ignored; 0 measured; 0 filtered out; finished in 0.00s
[INFO] [stdout] 
[INFO] running `Command { std: "docker" "inspect" "311f3dc1a28acdfe40519616f1e43d8937a8dcd1f31e4b6d5261afc096930ae2", kill_on_drop: false }`
[INFO] running `Command { std: "docker" "rm" "-f" "311f3dc1a28acdfe40519616f1e43d8937a8dcd1f31e4b6d5261afc096930ae2", kill_on_drop: false }`
[INFO] [stdout] 311f3dc1a28acdfe40519616f1e43d8937a8dcd1f31e4b6d5261afc096930ae2
