PkgRadar

Cargo · crates.io

uxie

Rs Build Time Command: Process spawn (std::process::Command) at build time.

Why PkgRadar flagged 0.8.4

SeveritySignalEvidence
mediumRs Build Time CommandProcess spawn (std::process::Command) at build time. · uxie-0.8.4/build.rs
mediumRemote Payloadmatched "curl " · uxie-0.8.4/src/c_parser/tests.rs
mediumRemote Payloadmatched "raw.githubusercontent.com" · uxie-0.8.4/src/cli/commands.rs

Scanned versions

VersionVerdictScoreScanned (UTC)
0.8.4Review542026-06-08
0.8.3Review542026-06-08
0.8.2Review542026-06-08
0.8.1Review542026-06-07
0.8.0Review542026-06-07

Block this in CI

PkgRadar gates uxie (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem cargo [email protected]