cargo-mommy
Mommy's here to support you when running cargo~ (by Gankra)
cargo-geiger
Detects usage of unsafe Rust in a Rust crate and its dependencies. (by geiger-rs)
| cargo-mommy | cargo-geiger | |
|---|---|---|
| 8 | 30 | |
| 540 | 1,311 | |
| - | 1.1% | |
| 8.2 | 5.2 | |
| 2 months ago | 17 days ago | |
| Rust | Rust | |
| Apache License 2.0 | GNU General Public License v3.0 or later |
The number of mentions indicates the total number of mentions that we've tracked plus the number of user suggested alternatives.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
cargo-mommy
Posts with mentions or reviews of cargo-mommy.
We have used some of these posts to build our list of alternatives
and similar projects. The last one was on 2023-02-11.
-
Vore: A minimal, no-bullshit web-based RSS/atom feed reader
Open source is increasingly a kink friendly space where people are encouraged to let their freak flag fly. See also, e.g., cargo-mommy: https://github.com/Gankra/cargo-mommy
- Was wandering what I find if I ask google for some validation, should have expected that
-
That's why C++ won't die anytime soon. I feel like Rust, Go and similar languages are about controlling you and your decisions as much as possible. C and C++ not at all. And I LOVE that.
Although you have to install a plugin for the full experience.
-
telemetry in the Go toolchain · Discussion #58409 · golang/go
Speak for yourself. Sounds like a perfect complement for cargo-mommy.
- The most creative, funny, clever, ridiculous, ... library names!
- Least lonely programmer
-
shell-mommy — mommy is here to support you when on the command line ~
Quote from here
- Gankra/cargo-mommy: Mommy's here to support you when running cargo~
cargo-geiger
Posts with mentions or reviews of cargo-geiger.
We have used some of these posts to build our list of alternatives
and similar projects. The last one was on 2023-10-25.
-
Was Rust Worth It?
Instead of looking at the crates themselves, you might want to check your (or others') Rust application with https://github.com/rust-secure-code/cargo-geiger to get a sense of effective prevalence. I also dispute that the presence of unsafe somewhere in the dependency tree is an issue in itself, but that's a different discussion that many more had in other sub-threads.
-
Found a language in development called Vale which claims to be the safest AOT compiled language in the World (Claims to beSafer than Rust)
There's still plenty. Run cargo geiger on any of your projects and see for yourself.
-
Question Omnibus: Dependency Fingerprinting, Unsafe Rust, and Memory Safety
On point 2, the answer is cargo geiger, and judging how much memory safety you need for a given project.
- pliron: An extensible compiler IR framework, inspired by MLIR and written in safe Rust.
-
[Discussion] What crates would you like to see?
You can use cargo-geiger or cargo-crev to check for whether people you trusted (e.g. u/jonhoo ) trust this crate.
-
How do you choose what crate you will use?
The amount of unsafe code is also a factor. cargo geiger is a handy tool for measuring it.
-
Seems legit
We have cargo-geiger that does just that.
-
Rosenpass – formally verified post-quantum WireGuard
For that, I believe you need to use cargo-geiger[0] and audit the results.
[0] - https://github.com/rust-secure-code/cargo-geiger
-
Hey Rustaceans! Got a question? Ask here (6/2023)!
cargo-geiger is a subcommand you can install which will check all the crates in your dependency graph for unsafe blocks and print out a report (which also shows if a crate has #![forbid(unsafe_code)] or not). You can then inspect those crates' sources to judge their use of unsafe for yourself. I don't think it has a "check" mode that simply errors if your dependency graph contains unsafe though, it's more about just collecting that information.
-
[CCS Proposal] Preliminary research on rewriting Monero node in Rust
wrt to memory safety, keep in mind that many rust crates use "unsafe" internally. There are tools available that can find these such as cargo-geiger. So I would suggest to avoid unsafe deps as much as possible. Since they cannot be avoided entirely, it is a good idea to keep a list of unsafe deps.
What are some alternatives?
When comparing cargo-mommy and cargo-geiger you can also consider the following projects:
libass - libass is a portable subtitle renderer for the ASS/SSA (Advanced Substation Alpha/Substation Alpha) subtitle format.
bacon - background rust code check
abomonation - A mortifying serialization library for Rust
ziglings - Learn the Zig programming language by fixing tiny broken programs.
gitoxide - An idiomatic, lean, fast & safe pure Rust implementation of Git
nomicon - The Dark Arts of Advanced and Unsafe Rust Programming
rouille - Rust programming, in French.
mold - Mold: A Modern Linker 🦠
octocrab - A modern, extensible GitHub API Client for Rust.
miri - An interpreter for Rust's mid-level intermediate representation
go - The Go programming language
orz - a high performance, general purpose data compressor written in the crab-lang