PkgRadar

Cargo · crates.io

scoop-uv

Remote Payload: matched "curl "

Why PkgRadar flagged 0.14.1

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · scoop-uv-0.14.1/src/core/doctor.rs

Scanned versions

VersionVerdictScoreScanned (UTC)
0.14.1Review122026-06-06
0.14.0Review122026-06-06
0.13.0Review122026-06-02
0.12.0Review122026-06-02
0.11.0Review122026-06-01
0.10.1Review122026-05-29
0.10.0Review122026-05-29
0.9.1Review122026-05-29
0.9.0Review122026-05-28

Block this in CI

PkgRadar gates scoop-uv (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem cargo [email protected]