Cargo · crates.io
hematite-cli
Rs Build Time Command: Process spawn (std::process::Command) at build time.
Why PkgRadar flagged 0.14.1
| Severity | Signal | Evidence |
|---|---|---|
| medium | Rs Build Time Command | Process spawn (std::process::Command) at build time. · hematite-cli-0.14.1/build.rs |
| medium | Remote Payload | matched "curl " · hematite-cli-0.14.1/src/agent/routing.rs |
| medium | Remote Payload | matched "wget " · hematite-cli-0.14.1/src/agent/tool_registry.rs |
| medium | Remote Payload | matched "curl " · hematite-cli-0.14.1/src/lib.rs |
| medium | Remote Payload | matched "curl " · hematite-cli-0.14.1/src/main.rs |
| medium | Remote Payload | matched "curl " · hematite-cli-0.14.1/src/tools/curl_tools.rs |
| medium | Remote Payload | matched "curl " · hematite-cli-0.14.1/src/tools/em_tools.rs |
| medium | Remote Payload | matched "curl " · hematite-cli-0.14.1/src/tools/guard.rs |
| medium | Remote Payload | matched "curl " · hematite-cli-0.14.1/src/tools/openid_tools.rs |
| medium | Remote Payload | matched "curl " · hematite-cli-0.14.1/src/tools/risk_evaluator.rs |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
0.14.1 | High risk | 132 | 2026-06-08 |
Block this in CI
pkgradar gate --ecosystem cargo [email protected]