PkgRadar

Cargo · crates.io

tarn

Remote Payload: matched "raw.githubusercontent.com"

Why PkgRadar flagged 0.14.1

SeveritySignalEvidence
mediumRemote Payloadmatched "raw.githubusercontent.com" · tarn-0.14.1/src/format.rs
mediumRemote Payloadmatched "Curl " · tarn-0.14.1/src/main.rs
mediumRemote Payloadmatched "raw.githubusercontent.com" · tarn-0.14.1/src/parser.rs
mediumRemote Payloadmatched "Curl " · tarn-0.14.1/src/report/html.rs
mediumRemote Payloadmatched "Curl " · tarn-0.14.1/src/report/mod.rs
mediumRemote Payloadmatched "raw.githubusercontent.com" · tarn-0.14.1/src/scaffold/emit.rs
mediumRemote Payloadmatched "Curl " · tarn-0.14.1/src/scaffold/mod.rs

Scanned versions

VersionVerdictScoreScanned (UTC)
0.14.1High risk842026-06-04

Block this in CI

PkgRadar gates tarn (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem cargo [email protected]
Start free — 25 scans / moView full evidence