Search 7 packages

Found detections shipping vulnerabilities yanked

Build behaviour fetched outside the registry undeclared fetch fetch went into the output linked a downloaded binary read credentials connected outside the registry

Packages1–7 of 7	Version	Findings	Description	Downloads	When
trql-client cargo		not built 0.23.0 did not build	Transport-agnostic Trust Registry query client (TRQP over Trust Tasks): HTTPS, DIDComm, TSP	1.4K	13h ago
verify-trust cargo		not built 0.18.1 did not build	CI verifier for VGI: checks that every commit in a git range is signed by a DID the community's Trust Registry currently authorizes.	617	1d ago
vgi-forge cargo	0.18.2	clean	Forge-neutral adapter trait and types for VGI git namespaces: resources, rights, capabilities, bootstrap plans, events and drift.	495	1d ago
vgi-forge-forgejo cargo	0.18.2	clean	Forgejo (and Gitea) adapter for VGI git namespaces: a scoped bot user with token rotation, OAuth2+PKCE binding and account linking, capability probing, repo…	359	1d ago
vgi-forge-github cargo	0.18.2	clean	GitHub adapter for VGI git namespaces: per-community GitHub App auth, repo creation and bootstrap, role projection, device-flow account linking and verified…	349	1d ago
vgi-cli cargo		not built 0.18.2 did not build	The `vgi` command: `vgi repo init` turns VGI commit trust on for a repository in a manual or personal-account git namespace, acting as you through `gh`…	242	1d ago
vgi-bridge cargo		not built 0.18.1 did not build	The per-community VGI bridge: holds the community's forge credentials, takes git-ns/bridge jobs from its VTC over TSP or DIDComm, runs the forge adapters,…	38	1d ago