Cargo · crates.io

nur

Credential File Packaged: nur-0.28.1+0.113.1/nur-tests/.env

Why PkgRadar flagged 0.28.1+0.113.1

Severity	Signal	Evidence
high	Credential File Packaged	nur-0.28.1+0.113.1/nur-tests/.env · nur-0.28.1+0.113.1/nur-tests/.env

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`0.28.1+0.113.1`	High risk	17	2026-05-30

Block this in CI

PkgRadar gates nur (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem cargo [email protected]+0.113.1