PkgRadar

Cargo · crates.io

cargo-allow

Remote Payload: matched "raw.githubusercontent.com"

Why PkgRadar flagged 0.1.9

SeveritySignalEvidence
mediumRemote Payloadmatched "raw.githubusercontent.com" · cargo-allow-0.1.9/src/readme_tests.rs

Scanned versions

VersionVerdictScoreScanned (UTC)
0.1.9Review122026-06-16
0.1.8Review122026-06-12
0.1.7Review122026-06-12
0.1.6Review122026-06-02
0.1.5Review122026-06-02
0.1.4Review122026-06-02
0.1.3Low risk02026-06-01
0.1.2Low risk02026-05-31
0.1.1Low risk02026-05-31
0.1.0Low risk02026-05-27

Block this in CI

PkgRadar gates cargo-allow (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem cargo [email protected]
Start free — 25 scans / moView full evidence