rust-impl-ffi-bindgen
Warn
Audited by Socket on Sep 9, 2026
1 alert found:
AnomalyAnomalyreferences/examples.md
LOWAnomalyLOW
references/examples.md
No malicious behavior or supply-chain attack indicators are present. The code is instructional and readable, with no exfiltration, persistence, shell execution, obfuscated payload, or suspicious network activity. However, Example 5 is unsafe because shrink_to_fit does not guarantee capacity equals length before reconstructing the Vec; this should be redesigned to preserve and pass the actual capacity. Example 3 also requires explicit callback lifetime and deregistration guarantees to avoid use-after-free. These are significant security and correctness concerns despite the absence of malware.
Confidence: 98%Severity: 62%
Audit Metadata