PkgRadar

Cargo · crates.io

snarf

Rs Build Time Command: Process spawn (std::process::Command) at build time.

Why PkgRadar flagged 0.2.0

SeveritySignalEvidence
mediumRs Build Time CommandProcess spawn (std::process::Command) at build time. · snarf-0.2.0/build.rs
mediumRemote Payloadmatched "api.github.com/graphql" · snarf-0.2.0/src/code_search.rs

Scanned versions

VersionVerdictScoreScanned (UTC)
0.2.0Review422026-06-17
0.1.1Review422026-06-17
0.1.0Review422026-06-17

Block this in CI

PkgRadar gates snarf (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem cargo [email protected]