Search 25 packages

Found detections shipping vulnerabilities yanked

Build behaviour fetched outside the registry undeclared fetch fetch went into the output linked a downloaded binary read credentials connected outside the registry

Packages1–25 of 25	Version	Findings	Description	Downloads	When
did-git-sign cargo		not built 0.18.2 did not build	Git commit signing proxy using DID Ed25519 keys via VTA	3.2K	1d ago
fodid cargo	4.5.8-6	clean	Reader for the 51Did (51Degrees Identifier) value returned by the 51Degrees cloud service. Parses the OWID envelope and unpacks the usage flags, License Id and…	1.0K	1d ago
fodid-client cargo	4.5.8-10	clean	Client for the 51Did (51Degrees Identifier) two-step verification: fetches and caches the published signing keys, verifies a 51Did signature offline or through…	739	1d ago
zim-did cargo	0.1.1	clean	DID (Decentralized Identifier) types for Zim: did:key + did:web identity handles built on zim-crypto.	154	1d ago
fiftyone-fodid-cloud cargo	4.5.8-4	clean	Cloud engine that unpacks the 51Degrees identifier (51Did / FODid) block from the cloud JSON response into typed data.	141	1d ago
polkadot-statement-table cargo	27.0.0	clean	Stores messages other authorities issue about candidates in Polkadot.	366K	10h ago
vta-webvh cargo		not built 0.13.0 did not build	WebVH hosting infrastructure for the VTA — the local did:webvh DID-record and hosting-server store	6.7K	1d ago
vta-persona cargo		not built 0.17.0 did not build	VTA persona store — the holder's own identity attributes, the profiles that project over them, the bindings that assign a profile to a persona DID, and the…	4.3K	1d ago
vgi-core cargo	0.18.2	clean	Shared primitives for Verifiable Git Infrastructure (VGI): PROTOCOL.sshsig encoding, git commit-object handling, and DID-document Ed25519 key extraction.	3.9K	1d ago
vta-tee cargo		not built 0.16.0 did not build	VTA TEE bootstrap — Nitro/SEV-SNP attestation providers, KMS attest/decrypt + storage-key derivation, the anchor MAC, and first-boot DID autogen	3.1K	1d ago
trql-client cargo		not built 0.23.0 did not build	Transport-agnostic Trust Registry query client (TRQP over Trust Tasks): HTTPS, DIDComm, TSP	1.4K	14h ago
ikigai-conformance cargo	0.5.1	clean	What "done" means for an ikigai module, as one test: walks every endpoint a kernel binds and reports every violation of the module recipe at once — ArgSpec…	1.3K	1d ago
verify-trust cargo		not built 0.18.1 did not build	CI verifier for VGI: checks that every commit in a git range is signed by a DID the community's Trust Registry currently authorizes.	617	1d ago
vgi-forge cargo	0.18.2	clean	Forge-neutral adapter trait and types for VGI git namespaces: resources, rights, capabilities, bootstrap plans, events and drift.	495	1d ago
reallyme-ssi-proto cargo		not built 0.4.1 did not build	Canonical ReallyMe identity protobuf bindings generated with Buffa.	472	2d ago
ace-server cargo	0.6.0	clean	UDS ECU server state machine. Handles all session management security access, timing, periodic DID scheduling, and NRC construction.	448	1d ago
ic-host-tools cargo	0.4.6	clean	Host-side Candid extraction and ICP CLI response decoding	363	11h ago
vgi-forge-forgejo cargo	0.18.2	clean	Forgejo (and Gitea) adapter for VGI git namespaces: a scoped bot user with token rotation, OAuth2+PKCE binding and account linking, capability probing, repo…	359	1d ago
vgi-forge-github cargo	0.18.2	clean	GitHub adapter for VGI git namespaces: per-community GitHub App auth, repo creation and bootstrap, role projection, device-flow account linking and verified…	349	1d ago
turbojev-tokenizer cargo	0.31.0	clean	Tokenizer-safe candidate code discovery for TurboJev backends	258	3h ago
vgi-cli cargo		not built 0.18.2 did not build	The `vgi` command: `vgi repo init` turns VGI commit trust on for a repository in a manual or personal-account git namespace, acting as you through `gh`…	242	1d ago
turbojev-projection cargo	0.31.0	clean	Portable candidate-only output projection primitives and parity diagnostics for TurboJev	227	2h ago
turbojev-sequence cargo	0.31.0	clean	Exact prefix-sharing candidate sequence scoring for TurboJev	215	2h ago
turbojev-runtime-projection cargo	0.30.1	clean	Portable dense candidate-only projection runtime adapter for TurboJev	139	2d ago
vgi-bridge cargo		not built 0.18.1 did not build	The per-community VGI bridge: holds the community's forge credentials, takes git-ns/bridge jobs from its VTC over TSP or DIDComm, runs the forge adapters,…	38	1d ago