cc
cargoA build-time dependency for Cargo build scripts to assist in invoking the native C compiler to compile native C code into a static archive to be linked into Rust code.
Audits
cc@1.2.63 · 2 findings
Audit of cc 1.2.63, a Cargo build-time helper that orchestrates native C/C++/CUDA/assembly compilation. All process spawning is argv-form with no shell, writes are confined to OUT_DIR, environment access goes through a clippy-enforced cache-aware helper, and the small unsafe surface is documented and minimal. No crypto, network, or install/build-time code execution. Two low-severity quality findings on unwrap/expect panics over environment inputs and a non-CSPRNG tempfile name.
cc@1.2.62 · 1 finding
cc 1.2.62 is a build-time C/C++ compiler driver used by most -sys crates. All subprocess invocations use argv form (no shell), writes are confined to OUT_DIR, environment variables are documented and tracked for Cargo rebuild detection, and 19 unsafe blocks were read and found sound. One low-severity quality finding: most unsafe blocks lack canonical // SAFETY: comments.