PkgRadar

Cargo · crates.io

vfox

Remote Payload: matched "github.com/JetBrains/kotlin/releases/download"

Why PkgRadar flagged 2026.6.12

SeveritySignalEvidence
mediumRemote Payloadmatched "github.com/JetBrains/kotlin/releases/download" · vfox-2026.6.12/src/lua_mod/http.rs

Scanned versions

VersionVerdictScoreScanned (UTC)
2026.6.12Review62026-06-16
2026.6.11Review62026-06-14
2026.6.10Review62026-06-14
2026.6.9Review62026-06-14
2026.6.8Review62026-06-14
2026.6.6Review62026-06-13
2026.6.5Review62026-06-12
2026.6.4Review62026-06-12
2026.6.3Review62026-06-11
2026.6.2Review62026-06-09
2026.6.1Review62026-06-06
2026.6.0Review62026-06-03
2026.5.17Review62026-05-31
2026.5.16Review62026-05-31
2026.5.15Review62026-05-30

Block this in CI

PkgRadar gates vfox (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem cargo [email protected]
Start free — 25 scans / moView full evidence