PkgRadar

Cargo · crates.io

insmaller-core

Remote Payload: matched "curl "

Why PkgRadar flagged 0.16.0

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · insmaller-core-0.16.0/src/desugar.rs
mediumRemote Payloadmatched "curl " · insmaller-core-0.16.0/src/scripts.rs

Scanned versions

VersionVerdictScoreScanned (UTC)
0.16.0Review242026-06-11
0.15.0Review242026-06-11
0.14.0Review242026-06-10
0.13.0Review242026-06-10
0.12.0Review242026-06-10
0.10.0Review242026-06-09
0.9.0Review242026-06-09
0.8.0Review242026-06-05
0.6.2Review242026-05-31
0.6.1Review242026-05-31

Block this in CI

PkgRadar gates insmaller-core (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem cargo [email protected]