PkgRadar

Cargo · crates.io

copilot-api

Rs Build Time Command: Process spawn (std::process::Command) at build time.

Why PkgRadar flagged 1.12.8

SeveritySignalEvidence
mediumRs Build Time CommandProcess spawn (std::process::Command) at build time. · copilot-api-1.12.8/build.rs
mediumSuspicious Publish Context{"package_age_days":1,"publisher":"Arthur","burst_same_day":2,"burst_week":6,"lure":null,"version_anomaly":false,"new_account":false}

Scanned versions

VersionVerdictScoreScanned (UTC)
1.12.8Review402026-06-19
1.12.7Review402026-06-19
1.12.6Review302026-06-18
1.12.5Review302026-06-18

Block this in CI

PkgRadar gates copilot-api (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem cargo [email protected]