PkgRadar

Cargo · crates.io

signet-eval

Remote Payload: matched "curl "

Why PkgRadar flagged 3.11.1

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · signet-eval-3.11.1/src/policy.rs
mediumRemote Payloadmatched "curl " · signet-eval-3.11.1/tests/integration_hook.rs

Scanned versions

VersionVerdictScoreScanned (UTC)
3.11.1Review242026-05-29

Block this in CI

PkgRadar gates signet-eval (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem cargo [email protected]