rsconstruct 0.9.142 → 0.9.144
Evidence: 2 changed. Static findings: 15 new, 3 gone. Run check: 0 changed.
19
low
19
low
Evidence
2 changed, 5 the same.
| Change | Points | Signal | What |
|---|---|---|---|
| added | 2 | static:credential_access rsconstruct |
medium severity credential_access in library code (4 places): .npmrc |
| removed | 2 | static:environment_enumeration rsconstruct |
medium severity environment_enumeration in library code: std::env::vars |
Package
- Build script
- no change
- Proc macro
- no change
- links
- no change
- New dependencies
- pest_stack_guard
Static findings
15 new, 3 gone, 356 the same. Code that only moved counts as the same.
New in 0.9.144
medium credential_access library 4
medium shell_command library 1
chmod +x {path}src/tools.rs:746
low process_spawn library 3
std::process::Commandsrc/processor/mass_generator/linux_module.rs:171std::process::Command::newsrc/tools.rs:2589 src/tools.rs:2616
info url_literal library 6
Could not connect to the endpoint URL: "https://s3.example.amazonaws.com/"src/remote_cache.rs:542version = 1\u{a}\u{a}[[package]]\u{a}name = "ruff"\u{a}version = "0.14.0"\u{a}source = { registry = "https://pypi.org/simple" }\u{a}src/tool_lock.rs:1299https://github.com/tamasfe/taplo/releases/latest/download/taplo-linux-x86_64.gzsrc/tools.rs:2495https://github.com/tamasfe/taplo/releases/download/0.10.0/taplo-linux-x86_64.gzsrc/tools.rs:2497file://{}src/tools.rs:2600 src/tools.rs:2632
info url_literal test 1
source 'https://rubygems.org'\u{a}gem 'rake'\u{a}tests/processor/mass_generator/gem.rs:127
Gone since 0.9.142
3 findings
medium environment_enumeration library 1
std::env::varssrc/processor/generator/ijinja2.rs:78
medium shell_command library 1
chmod +x {final_tmp}src/tools.rs:890
low process_spawn library 1
std::process::Command::newsrc/processor/mass_generator/linux_module.rs:207
Run: check
Processes 0 new, 0 gone, 2 the same
The same processes ran.
Network 0 changed, 0 the same
No change.
Files 0 changed, 0 the same
No change.
Behavior
1 new, 1 gone, 4 the same.
New in 0.9.144
static:credential_access
Gone since 0.9.142
static:environment_enumeration