PkgRadar

Cargo · crates.io

duckduckgo-search-cli

Rs Build Time Command: Process spawn (std::process::Command) at build time.

Why PkgRadar flagged 0.7.7

SeveritySignalEvidence
mediumRs Build Time CommandProcess spawn (std::process::Command) at build time. · duckduckgo-search-cli-0.7.7/build.rs

Scanned versions

VersionVerdictScoreScanned (UTC)
0.7.7Review302026-06-14
0.7.6Review302026-06-14
0.7.5Review302026-06-14
0.7.3Low risk02026-06-09
0.7.2Low risk02026-06-07
0.7.1Low risk02026-06-07
0.6.11Low risk02026-06-05
0.6.10Low risk02026-06-05
0.6.9Low risk02026-06-05
0.6.8Low risk02026-06-05
0.6.6Low risk02026-06-05
0.6.5Low risk02026-06-05
0.6.4Low risk02026-06-03

Block this in CI

PkgRadar gates duckduckgo-search-cli (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem cargo [email protected]