Immutable Deep Scan reportEvidence is locked to this exact artifact and scan.
About immutable reports
Future scans cannot replace the findings, coverage, ruleset, or artifact hash shown on this URL.
- Scan
ac6abdc6-f80b-490f-8436-a1bdac8a1c1b- Artifact
5ff02c55c7d5…0e7f3085
Analysis Report
rust-analyzer
rust-lang.rust-analyzer@0.4.2976Completed analysis for this exact extension version. Use the summary below to decide what your team should do next.
The extension exposes sensitive capabilities or non-confirmed risk evidence that needs context.
- Required action
- Record a team decision before approval
Frozen regression fixtureThis exact artifact is in the GuardRails regression corpus.
Hash-pinned as a native packed case. The exact artifact identity matches the frozen cohort; the current decision above comes only from this scan's evidence.
Review decision-relevant behavior before installation.
Review the grouped evidence, affected locations, and whether each behavior matches the extension’s purpose.
The extension exposes sensitive capabilities or non-confirmed risk evidence that needs context.
This result applies only to the scanned artifact SHA-256, not to future releases or a publisher generally.
Review the grouped evidence and record the accountable team decision before approval.
Required analysis completed for this exact artifact; evidence remains scoped to scanner coverage.
- 1Artifact boundExtension, version, hash, and scan identity fixed
- 2Analysis checkedExecutable-file coverage
- 3Evidence grouped1 actionable · 6 contextual
- 4Policy appliedExact-release ruleset evaluated
- 5Review neededCurrent decision for this artifact
74/100Review needed
Diagnostic risk index for this exact artifact — not a probability of malice.
Policy result for this exact artifact
100
7/7 required analyzers completed
0
Diagnostic index, not probability
6 contextual notes kept separate
Power describes access, not intent
1 behavior group needs context before approval.
The extension exposes sensitive capabilities or non-confirmed risk evidence that needs context.
5ff02c55c7d5a7326e1a5087da6f680e73e14350602d6131b6e86c260e7f3085Build 6aab1d4caaf6 · ruleset 2026.07.24-policy-v3-calibration.6
Evidence that drives review
brace-expansion@2.0.3 has 3 OSV finding(s). Version match: exact.
1 observed location · review evidence