PkgRadar

Cargo · crates.io

brokk-anvil

Rs Build Time Command: Process spawn (std::process::Command) at build time.

Why PkgRadar flagged 0.11.1

SeveritySignalEvidence
mediumRs Build Time CommandProcess spawn (std::process::Command) at build time. · brokk-anvil-0.11.1/build.rs
mediumRemote Payloadmatched "github.com/BrokkAi/bifrost/releases/download" · brokk-anvil-0.11.1/src/mcp.rs

Scanned versions

VersionVerdictScoreScanned (UTC)
0.11.1Review472026-06-12
0.11.0Review472026-06-11
0.10.8Review472026-06-09
0.10.7Review472026-06-09
0.10.6Review472026-06-09
0.10.4Review472026-06-08
0.10.3Review422026-06-08
0.10.2Review422026-06-03
0.10.1Review422026-06-02
0.10.0Review422026-05-29
0.9.2Review422026-05-28
0.9.1Review422026-05-28
0.8.1Review422026-05-27

Block this in CI

PkgRadar gates brokk-anvil (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem cargo [email protected]
Start free — 25 scans / moView full evidence