PkgRadar

Cargo · crates.io

buf-tools

Remote Payload: matched "github.com/bufbuild/buf/releases/download"

Why PkgRadar flagged 1.70.0

SeveritySignalEvidence
mediumRemote Payloadmatched "github.com/bufbuild/buf/releases/download" · buf-tools-1.70.0/build.rs

Scanned versions

VersionVerdictScoreScanned (UTC)
1.70.0Review122026-05-28
1.70.0-rc.3Review122026-05-28
1.70.0-rc.2Review122026-05-28
1.70.0-rc.1Review122026-05-28

Block this in CI

PkgRadar gates buf-tools (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem cargo [email protected]