Cargo · crates.io

assay-cli

Remote Payload, Credential file access

Why PkgRadar flagged 5.5.2

Severity	Signal
medium	Remote Payload ×2

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`5.5.2`	Review	23	2026-08-31
`5.5.1`	Review	23	2026-08-30
`5.4.0`	Review	23	2026-08-19
`5.3.0`	Review	23	2026-08-18
`5.2.0`	Review	23	2026-08-14
`5.1.0`	Review	23	2026-08-11
`5.0.0`	Review	23	2026-08-08
`4.0.0`	Review	23	2026-08-07
`3.38.0`	Review	23	2026-08-04
`3.37.0`	Review	19	2026-08-02
`3.36.0`	Review	7	2026-07-29
`3.35.0`	Review	4	2026-07-27
`3.34.0`	Low risk	0	2026-07-19
`3.31.1`	Low risk	0	2026-07-11
`3.32.0`	Low risk	0	2026-07-11
`3.29.0`	Low risk

Block this in CI

PkgRadar gates assay-cli (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem cargo [email protected]

Prefer zero config? Install the GitHub App and it gates every pull request automatically — no pipeline edits, no API key.