PkgRadar

Cargo · crates.io

tibet-trust-kernel

Remote Payload: matched "curl "

Why PkgRadar flagged 1.0.0-alpha.5

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · tibet-trust-kernel-1.0.0-alpha.5/src/airlock_vmm.rs
mediumRemote Payloadmatched "curl " · tibet-trust-kernel-1.0.0-alpha.5/src/voorproever.rs

Scanned versions

VersionVerdictScoreScanned (UTC)
1.0.0-alpha.5Review242026-06-01
1.0.0-alpha.4Review242026-05-31

Block this in CI

PkgRadar gates tibet-trust-kernel (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem cargo [email protected]