PkgRadar

Cargo · crates.io

anno-eval

Remote Payload: matched "raw.githubusercontent.com"

Why PkgRadar flagged 0.11.0

SeveritySignalEvidence
mediumRemote Payloadmatched "raw.githubusercontent.com" · anno-eval-0.11.0/src/eval/dataset_registry.rs
mediumRemote Payloadmatched "raw.githubusercontent.com" · anno-eval-0.11.0/src/eval/dataset_registry_src/coref.rs
mediumRemote Payloadmatched "raw.githubusercontent.com" · anno-eval-0.11.0/src/eval/dataset_registry_src/el.rs
mediumRemote Payloadmatched "raw.githubusercontent.com" · anno-eval-0.11.0/src/eval/dataset_registry_src/ner_biomedical.rs
mediumRemote Payloadmatched "raw.githubusercontent.com" · anno-eval-0.11.0/src/eval/dataset_registry_src/ner_core.rs
mediumRemote Payloadmatched "raw.githubusercontent.com" · anno-eval-0.11.0/src/eval/dataset_registry_src/re.rs
mediumRemote Payloadmatched "raw.githubusercontent.com" · anno-eval-0.11.0/src/eval/loader.rs

Scanned versions

VersionVerdictScoreScanned (UTC)
0.11.0High risk502026-06-11

Block this in CI

PkgRadar gates anno-eval (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem cargo [email protected]