clap is the well-known legitimate Rust CLI argument parser. No static findings, only standard crate files, no source or sandbox evidence of malice.
AI breakdown
Plain-English summary of what this package does and how it behaves.
clap 4.6.7 is a Rust crate that provides command-line argument parsing. The manifest lists no scripts or dependencies; the file sample consists of source, examples, documentation, and license files typical of the clap library.
Capabilities
- Provides command-line argument parsing (evidenced by example files)
Data access
- None observed
Network
- No network access observed
No scripts, dependencies, or static findings are present in the supplied manifest. The package appears to be a standard library crate with example code for argument handling.
Files in package (294)
How ShadowCanopy checks crates.io packages
ShadowCanopy blocks every dependency by default and only lets through what it can verify — against live malicious-package advisories, an AI behavior scan, and a byte-for-byte hash check. It protects installs across npm, PyPI, crates.io, pkg.go.dev, RubyGems, Maven Central, NuGet, Packagist, Hex, pub.dev, Swift Package Manager.
This report reflects ShadowCanopy's threat intelligence at page load and is informational, not a warranty. Canonical URL: https://shadowcanopy.dev/packages/crates/clap