Search 9 packages
Found
detections shipping vulnerabilities yanked Build behaviour
fetched outside the registry undeclared fetch fetch went into the output linked a downloaded binary read credentials connected outside the registry
Packages 1–9 of 9 Version Findings Description Downloads When lean-toolchain cargo 0.9.3 clean Lean 4 toolchain discovery, fingerprinting, symbol allowlist, and build-script helpers reusable by downstream embedders' own build.rs scripts. 2.5K 7h ago af-mcp-server cargo 0.19.2 clean Explicitly allowlisted MCP server projection for Agent and Docs capabilities. 673 2d ago isb-egress cargo 3.0.0 clean isb's per-sandbox egress proxy: hostname allowlists and secrets that never enter the guest. Use the `isb` crate. 581 1h ago car-messaging cargo not built 0.57.4 did not build Multi-channel messaging (iMessage + Slack) for the CAR daemon — approval transports (inbound poller/orchestrator, Slack wire parsing, per-channel… 576 15h ago stellar-agent-loopback-http cargo 0.1.0-alpha.11 clean Shared tower/axum defence-in-depth middleware and page presentation for the Stellar agent wallet's browser-facing HTTP listeners (Host allowlist, Origin… 279 5d ago tauri-kit-diagnostics cargo 0.15.0 clean 0.16.0 did not build Content-free error reports for desktop apps: built from an allowlist, never from messages, queued on disk, optionally sent to Application Insights. 108 2d ago rightkit-service cargo 0.1.3 clean One discovery/auth convention for Right Suite local services: service.json, ranking and takeover, current-user-only Unix socket / named pipe, per-app request… 69 3d ago backbone-website cargo not built 0.5.0 did not build Headless website engine — per-website pages/menus with ONE generic-vs-specific resolver backed by real COALESCE-sentinel unique constraints, explicit… 53 2d ago hatchling-egress cargo 0.1.2 clean Egress proxy: surrogate-validated, allowlisted outbound network access. The agent never touches the network or holds real credentials. 18 18h ago
