Search 50 packages

Found detections shipping vulnerabilities yanked

Build behaviour fetched outside the registry undeclared fetch fetch went into the output linked a downloaded binary read credentials connected outside the registry

Packages31–50 of 50	Version	Findings	Description	Downloads	When
vgi-forge cargo	0.18.2	clean	Forge-neutral adapter trait and types for VGI git namespaces: resources, rights, capabilities, bootstrap plans, events and drift.	495	1d ago
ikigai-intake cargo	0.1.39	clean	Public form intake: parse an untrusted urlencoded/JSON submission, validate it against declared fields, and drop it into a tuplespace as an escaped…	492	1d ago
polyc-model-broker-protocol cargo	2026.10.1	clean	Narrow local protocol between trusted Control and the model broker.	483	20h ago
weft-client cargo	0.28.12	clean	Native v2 Weft client: descriptor-trusted Iroh transport and Remote::discover	365	5h ago
vgi-forge-forgejo cargo	0.18.2	clean	Forgejo (and Gitea) adapter for VGI git namespaces: a scoped bot user with token rotation, OAuth2+PKCE binding and account linking, capability probing, repo…	359	1d ago
vgi-forge-github cargo	0.18.2	clean	GitHub adapter for VGI git namespaces: per-community GitHub App auth, repo creation and bootstrap, role projection, device-flow account linking and verified…	349	1d ago
vgi-cli cargo		not built 0.18.2 did not build	The `vgi` command: `vgi repo init` turns VGI commit trust on for a repository in a manual or personal-account git namespace, acting as you through `gh`…	242	1d ago
stellar-agent-claimable cargo		not built 0.1.0-alpha.11 did not build	Claimable-balance domain logic for the Stellar agent wallet — balance-id normalization, predicate evaluation, entry/trustline fetch, and claim preview	210	4h ago
stellar-agent-stablecoin cargo		not built 0.1.0-alpha.11 did not build	Stablecoin substrate for the Stellar agent wallet — issuer-account pins, denomination resolver, USDT refusal, clawback disclosure, trustline preview	201	4h ago
qiongli-platform cargo	2.4.0	clean	Qiongli native artifact trust and declarative installation contracts	199	11h ago
dotrepo-core cargo		not built 1.0.3 did not build	Core parsing, validation, trust, and export logic for dotrepo.	186	1d ago
wickra-zk-host cargo		not built 0.2.0 did not build	Prover and verifier for wickra-zk: runs the deterministic wickra-backtest inside a risc0 zkVM guest and turns a receipt into a trustless, data-hiding proof of…	151	1d ago
depth2depth cargo	0.3.2	1 detection 1	Densify and denoise metric depth images: Depth Anything V2 (via candle) affine-anchored to the trusted parts of a raw sensor depth image, filling holes and…	97	1d ago
cargo-privatecrates cargo	0.2.9	clean	Set up PrivateCrates private registries from the command line: sign in, onboard an organisation, configure crate repositories for trusted publishing, and check…	87	20h ago
echovalidum cargo	0.3.1	clean	Echovalidum's Rust hot path, in Python and in the browser: trust-coherence lattice cells, the interval domain, and capability-checked 64-bit memory	44	2d ago
vgi-bridge cargo		not built 0.18.1 did not build	The per-community VGI bridge: holds the community's forge credentials, takes git-ns/bridge jobs from its VTC over TSP or DIDComm, runs the forge adapters,…	38	1d ago
dotrepo-mcp cargo		not built 1.0.3 did not build	Stdio MCP server for trust-aware dotrepo operations.	30	1d ago
tinywasm-c-api cargo	0.1.0	clean	placeholder package to set up trusted publishing	10	13m ago
liwan-api cargo	0.1.0	clean	placeholder package to set up trusted publishing	8	22m ago
seed-guardian cargo	0.2.0	clean	Seed immutable trusted evaluator daemon: JSON-RPC guardian with SQLite WAL store, gates, Pareto archive, champion pointer	8	1d ago