Random question, does cargo have a way to identify if a package uses unsafe Rust code?

No, but you can use cargo-geiger[1] or siderophile[2] for that.

[1]: https://github.com/geiger-rs/cargo-geiger

[2]: https://github.com/trailofbits/siderophile