rust-semver
Pass
Audited by Gen Agent Trust Hub on Jul 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: Provides instructions for using Cargo-based release and maintenance tools, such as
cargo publish,cargo yank, andcargo workspaces. The instructions explicitly state that publishing is a public action and require the agent to seek user confirmation before proceeding. - [EXTERNAL_DOWNLOADS]: Recommends the installation of standard Rust development utilities (e.g.,
cargo-semver-checks,cargo-audit,cargo-deny) from the official crates.io registry. The commands include the--lockedflag to ensure the integrity and reproducibility of the installed binaries. - [SAFE]: Integrates security auditing into the release workflow by documenting how to use
cargo-auditandcargo-denyto scan projects for known vulnerabilities listed in the RustSec advisory database.
Audit Metadata