errno 0.3.14

Source: https://github.com/lambda-fairy/rust-errno
Artifact scanned: errno-0.3.14.crate (crate · 11.7 KB · SHA-256 39cab71617ae…)
Compared with: errno-0.3.13.crate (0 signals introduced since)
Files: 10 scanned, 8 skipped (binary, oversized, or unrecognised)
Signals: 0 critical · 0 warn · 1 info
Scan time: 2.9 s
LLM review: Reviewed by claude-haiku-5-5 (Anthropic): 1 of 1 warn and critical signal; 1 demoted to info.
Disclude version: 4.3.0
Scanned (UTC): 2026-10-24 05:27

Signals

Ordered by severity, then signals introduced in this release. Hidden characters are shown as ⟨U+…⟩.

info ~~warn~~ → info by review dynamic-execution .github/workflows/main.yml:52:11

[embedded bash] pipeline feeds into `bash` — piped data is executed as shell code (ast pass, confidence 0.80)
```
          curl https://wasmtime.dev/install.sh -sSf | bash
          echo "$HOME/.wasmtime/bin" >> $GITHUB_PATH
```
likely benign LLM, confidence 0.72 A CI workflow step downloads the Wasmtime install script from wasmtime.dev and runs it with bash, then adds Wasmtime's bin directory to the PATH.
Reasoning
The workflow fetches the official Wasmtime installer over HTTPS from wasmtime.dev and pipes it to bash, then adds the install directory to GITHUB_PATH. This is a common, documented way to install a toolchain in CI, not obfuscation. The curl-to-bash pattern does carry supply-chain risk because the script is unpinned and runs unverified, so this is not fully clean, but the destination and purpose look legitimate.

Reproduce This Scan

Run disclude locally to verify. These commands scan the published file; the "new in this release" marks come from comparing it with the previous release's file, which they don't repeat. Add --format sarif for SARIF output. Add --llm (with an API key in the environment) to include the LLM review.

cargo install disclude --version 4.3.0
curl -fsSL -o errno-0.3.14.crate 'https://static.crates.io/crates/errno/errno-0%2E3%2E14.crate'
printf '%s  %s\n' 39cab71617ae0d63f51a36d69f866391735b51691dbda63cf6f96d042b63efeb errno-0.3.14.crate | shasum -a 256 -c -
mkdir pkg && tar -xzf errno-0.3.14.crate -C pkg --strip-components 1
disclude scan --untrusted --severity info pkg