Search 946 packages

Found detections shipping vulnerabilities yanked

Build behaviour fetched outside the registry undeclared fetch fetch went into the output linked a downloaded binary read credentials connected outside the registry

Packages631–660 of 946	Version	Findings	Vulns	Description	Downloads	When
cctop-core cargo	0.36.2	none	none	Internal to cctop: sessions and their parsers, the cache, pricing, config, hooks, the shim, and the conversation model both faces share. No stable API; use the…	231	7h ago
moq-archive cargo	0.0.13	none	none	Versioned hang recording objects on any object_store::ObjectStore	226	18h ago
rustible-build cargo	0.8.0	none	none	Build-script helper for Rustible workspaces: discovers playbook files marked #[rustible::playbook]. Called from the generated build.rs.	224	1d ago
mecha-factory-publish cargo	0.3.0	none	1 vulnerability 1	The home side of mecha-factory: renders bundles, versions them immutably, pairs a machine with scoped keys, and serves the MCP surface any agent client can…	223	2d ago
qiongli-execution cargo	2.5.3	none	none	Versioned AgentBackend and native ToolHost execution boundary	223	5d ago
giff-core cargo	0.2.0	none	none	Pure-Rust core types and algorithms for giffstack — stack data model, validation, and traversal.	222	6d ago
nornir-auth-oidc cargo	0.1.4	none	none	OIDC / OAuth2 auth PROVIDER for the nordisk servers — validate a bearer JWT OFFLINE against a cached/pre-provisioned JWKS (airgap), or an opaque token ONLINE…	221	3d ago
mockly-driver cargo	0.14.0	none	none	Rust client for Mockly — start/stop servers and manage HTTP mocks in tests	220	7d ago
canisend-contracts cargo	1.0.0-beta.12	none	none	Versioned public contracts for Rust-native CanISend	217	8d ago
eqiora-artifact cargo	0.1.3	none	none	Eqiora L3: versioned model artifacts and reproducible run manifests	216	3d ago
gedcomkit cargo	0.1.15	none	none	A byte-preserving GEDCOM document model: decoding, parsing, readings, version conversion, plausibility checks, and the GEDZIP container, for GEDCOM 5.5 through…	216	2d ago
gate4agent-build-stamp cargo	0.5.3	none	none	One content-hash build stamp for gate4agent binaries -- computed by git at build time from the working tree, carried by every wire handshake that used to carry…	214	9h ago
rlg-mcp cargo	0.0.15	none	none	Model Context Protocol (MCP) server exposing rlg log streams as toolsto LLM agents (Claude Desktop, Cursor, mcp.run). Tools: `tail_log`,`filter_log`,…	213	2d ago
athena-query-contracts cargo	5.2.0	none	none	Versioned wire contracts for Athena relational queries	211	3d ago
exocortex-cache cargo		– 0.5.1 did not build	–	Exocortex local read path: ArcSwap lock-free snapshots, 2Q admission, and zero-allocation search/traverse over the org graph.	209	4d ago
imu-sensors cargo	0.1.5	none	none	Drivers for a variety of IMU sensors.	206	6d ago
outpunch cargo	0.2.0	none	none	Reverse WebSocket tunnel proxy — core library	206	15h ago
zwire-host cargo	0.3.23	none	1 vulnerability 1	Universal local host: system stats, filesystem, exec, PTY, real-tmux control and kv store, over Chrome native-messaging or a Unix-socket JSON daemon	205	1d ago
httplib cargo	2.0.0	none	none	Lightweight, synchronous, and multi-threaded Rust library for building fast, secure HTTP servers from scratch.	201	6d ago
dengjen-pinyin-phonemizer cargo	2.1.1	none	none	Mandarin pinyin grapheme-to-phoneme conversion for the dengjen-tts speech synthesis engine	199	6d ago
heddle-git-serialize cargo	0.31.2	none	none	Engine-free, byte-exact Git serialization and async native object reconstruction.	198	9h ago
njoy-outram-park-fork cargo	0.0.4	none	4 vulnerabilities 4	Pure-Rust port (in progress) of NJOY2016 nuclear-data processing — derivative work, not the LANL version. See NOTICE.	192	7d ago
rez-next-runtime cargo	0.3.12	none	10 vulnerabilities 10	Stable runtime integration API for resolving and activating Rez repositories	192	1d ago
newt-mcp-client cargo		– 0.8.0 did not build	–	Newt-Agent MCP client — connect to discovered MCP servers (stdio JSON-RPC) and aggregate their tools.	190	17h ago
wist-release cargo	0.6.0	none	none	wist 发布域纯逻辑：安装包身份解析（version/arch）+ 发布计划灰度（切阶段与推进闸门）。不含存储、端点、鉴权。	190	3d ago
cutver cargo	0.13.0	none	none	Cut a release. Bump SemVer. Every project, every language.	188	3d ago
omgbase cargo	0.19.0	none	none	omgbase: a versioned, addressable graph layer over authored Markdown — the `omgbase` binary (`omgbase mcp` serves the tool catalog over MCP stdio, with the…	186	6h ago
dengjen-hebrew-phonemizer cargo	2.1.1	none	none	Hebrew grapheme-to-phoneme conversion (diacritization + IPA) for the dengjen-tts speech synthesis engine	185	6d ago
argus-ipc cargo	0.2.0	none	none	Versioned Unix-socket IPC protocol between argus and argusd	181	7d ago
skilj-graphql cargo	0.0.10	none	none	SkilJ's GraphQL surface: a unified async-graphql::dynamic schema rebuilt at runtime, and resolvers for every GraphQL-facing surface. See docs/architecture.md…	174	2d ago