PkgRadar

Cargo · crates.io

matrixcode-core

Remote Payload: matched "raw.githubusercontent.com"

Why PkgRadar flagged 0.4.37

SeveritySignalEvidence
mediumRemote Payloadmatched "raw.githubusercontent.com" · matrixcode-core-0.4.37/src/tools/codegraph/install.rs
mediumRemote Payloadmatched "raw.githubusercontent.com" · matrixcode-core-0.4.37/src/tools/codegraph_original.rs

Scanned versions

VersionVerdictScoreScanned (UTC)
0.4.37Review242026-06-03
0.4.36Review242026-06-02
0.4.35Review242026-06-02
0.4.34Review242026-06-01
0.4.33Review242026-06-01
0.4.32Review242026-06-01
0.4.31Review242026-06-01
0.4.30Review242026-06-01
0.4.28Review242026-05-30
0.4.27Review242026-05-29
0.4.26Review242026-05-29
0.4.25Review242026-05-29
0.4.24Review242026-05-28
0.4.23Review242026-05-28
0.4.22Review242026-05-28
0.4.21Review242026-05-27
0.4.20Review122026-05-27
0.4.19Review122026-05-27
0.4.18Review122026-05-27

Block this in CI

PkgRadar gates matrixcode-core (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem cargo [email protected]
Start free — 25 scans / moView full evidence