Search 8 packages
Found
detections shipping vulnerabilities yanked Build behaviour
fetched outside the registry undeclared fetch fetch went into the output linked a downloaded binary read credentials connected outside the registry
Packages 1–8 of 8 Version Findings Description Downloads When car-auth cargo not built 0.56.1 did not build Shared Parslee OAuth2 PKCE + token/keychain logic for the CAR CLI and daemon 4.2K 11h ago ppoppo-pas-external cargo 0.51.0 clean Ppoppo Accounts System (PAS) external SDK — OAuth2 PKCE, JWT verification port, Axum middleware, refresh-token cipher 730 17h ago skyauth cargo 0.3.3 clean High-assurance, formally verified OAuth 2.1 and RFC 9449 DPoP authentication engine for the AT Protocol (Bluesky) 412 16h ago vgi-forge-forgejo cargo 0.18.2 clean Forgejo (and Gitea) adapter for VGI git namespaces: a scoped bot user with token rotation, OAuth2+PKCE binding and account linking, capability probing, repo… 359 1d ago phylax-core cargo 0.1.2 clean OAuth, JWT, PKCE, and refresh-token primitives. 294 13h ago temperkb-auth cargo 0.6.0 clean Shared OAuth2 PKCE mechanics and instance auth-config parsing for temper's client and server surfaces 236 2d ago xdk-rs cargo 0.2.0 clean Async Rust client for the X (Twitter) API: OAuth1, OAuth2 PKCE, bearer tokens, media upload, streaming. xdk is X's SDK name; this is an independent project,… 104 20h ago boombox-core cargo 0.2.2 clean Core of boombox: Spotify sign-in over PKCE, a Web API client, and configuration. 41 2d ago
