PkgRadar

Cargo · crates.io

temperlux

Remote Payload: matched "curl "

Why PkgRadar flagged 2.0.2

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · temperlux-2.0.2/src/gui/schedule.rs
mediumRemote Payloadmatched "curl " · temperlux-2.0.2/src/main.rs

Scanned versions

VersionVerdictScoreScanned (UTC)
2.0.2Review242026-06-19
2.0.1Review242026-06-19
2.0.0Review242026-06-19
1.9.0Review242026-06-19
1.8.0Review242026-06-19
1.7.0Review242026-06-19
1.6.0Review242026-06-19
1.5.1Review242026-06-19
1.5.0Review242026-06-19
1.4.0Review242026-06-19
1.3.1Review242026-06-19
1.3.0Review242026-06-19
1.2.1Review242026-06-19
1.2.0Review242026-06-19
1.1.0Review242026-06-19
1.0.0Low risk02026-06-01
0.5.0Low risk02026-05-31
0.4.0Low risk02026-05-31
0.3.0Low risk02026-05-31
0.2.0Low risk02026-05-31
0.1.7Low risk02026-05-31
0.1.0Low risk02026-05-31

Block this in CI

PkgRadar gates temperlux (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem cargo [email protected]