PkgRadar

Cargo · crates.io

cargo-ledger

Remote Payload: matched "raw.githubusercontent.com"

Why PkgRadar flagged 1.14.0

SeveritySignalEvidence
mediumRemote Payloadmatched "raw.githubusercontent.com" · cargo-ledger-1.14.0/src/setup.rs

Scanned versions

VersionVerdictScoreScanned (UTC)
1.14.0Review62026-06-11
1.13.1Review62026-06-11

Block this in CI

PkgRadar gates cargo-ledger (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem cargo [email protected]