Cargo · crates.io
otoji
Rs Build Time Command: Process spawn (std::process::Command) at build time.
Why PkgRadar flagged 0.1.16
| Severity | Signal | Evidence |
|---|---|---|
| medium | Rs Build Time Command | Process spawn (std::process::Command) at build time. · otoji-0.1.16/build.rs |
| medium | Remote Payload | matched "curl " · otoji-0.1.16/src/asr/sensevoice.rs |
| medium | Remote Payload | matched "github.com/k2-fsa/sherpa-onnx/releases/download" · otoji-0.1.16/src/asr/sensevoice_download.rs |
| medium | Remote Payload | matched "curl " · otoji-0.1.16/src/kws.rs |
| medium | Remote Payload | matched "curl " · otoji-0.1.16/src/main.rs |
| medium | Remote Payload | matched "curl " · otoji-0.1.16/src/tts/piper.rs |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
0.1.16 | High risk | 90 | 2026-06-15 |
0.1.15 | High risk | 90 | 2026-06-15 |
0.1.14 | High risk | 90 | 2026-06-15 |
Block this in CI
pkgradar gate --ecosystem cargo [email protected]