PkgRadar

Cargo · crates.io

ryra

Remote Payload: matched "wget "

Why PkgRadar flagged 0.9.4

SeveritySignalEvidence
mediumRemote Payloadmatched "wget " · ryra-0.9.4/src/cli/add.rs

Scanned versions

VersionVerdictScoreScanned (UTC)
0.9.4Review122026-06-16
0.9.3Review122026-06-16
0.9.2Review122026-06-16
0.9.1Review122026-06-16
0.9.0Review122026-06-16
0.8.7Review122026-06-15
0.8.6Review122026-06-14
0.8.5Review122026-06-14
0.8.4Review122026-06-14
0.8.3Review122026-06-14
0.8.2Review122026-06-13
0.8.1Review122026-06-11
0.8.0Review242026-06-11
0.7.4Review242026-06-11
0.7.3Review242026-06-11
0.7.2Review242026-06-10
0.7.1Review242026-06-10
0.7.0Review242026-06-09
0.6.2Review242026-06-09
0.6.1Review242026-06-09
0.6.0Review242026-06-09
0.5.0Review242026-06-08
0.4.0Review242026-05-28

Block this in CI

PkgRadar gates ryra (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem cargo [email protected]