rust-variance

Warn

Audited by Socket on Nov 4, 2026

1 alert found:

Anomaly
AnomalyLOW
references/variance-tables.md

The fragment is educational Rust variance documentation, not a covert runtime payload. Its `Sender<T>` demonstration intentionally contains an unsound contravariant channel: a borrowed message can outlive its `String`, and `Queue::drop` then invokes `drop_as`/`Box::from_raw`, causing use-after-free undefined behavior. This is a significant memory-safety risk if copied into production, but the example is explicitly labeled and explained; no malware indicators or network activity are present.

Confidence: 99%Severity: 65%
Audit Metadata
Analyzed At
Nov 4, 2026, 12:17 AM
Package URL
pkg:socket/skills-sh/po4yka%2Frust-skills%2Frust-variance%2F@443c332e606fe2e943ac4224252182795939d59a055d97608108d455ca2f2049