PkgRadar

Cargo · crates.io

appimagetool

Remote Payload: matched "github.com/mhx/dwarfs/releases/download"

Why PkgRadar flagged 0.3.2

SeveritySignalEvidence
mediumRemote Payloadmatched "github.com/mhx/dwarfs/releases/download" · appimagetool-0.3.2/src/dwarfs.rs
mediumRemote Payloadmatched "github.com/VHSgunzo/uruntime/releases/download" · appimagetool-0.3.2/src/uruntime.rs

Scanned versions

VersionVerdictScoreScanned (UTC)
0.3.2Review242026-06-07
0.3.1Review242026-06-07

Block this in CI

PkgRadar gates appimagetool (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem cargo [email protected]
appimagetool — Cargo security scan | PkgRadar