Score card for dependencies in a project

• cargo-deny

  15 1,550 8.8 Rust

  ❌ Cargo plugin for linting your dependencies 🦀

  

cargo-deny does license and security advisory checking, and cargo-geiger does unsafe checking.

• cargo-supply-chain

  20 311 4.9 Rust

  Gather author, contributor and publisher data on crates in your dependency graph.

  

I did also just find cargo supply-chain that shows the authors, contributors, and publishers of the crates.

• WorkOS

  workos.com sponsored

  The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.

  

• cargo-crev

  55 2,030 7.9 Rust

  A cryptographically verifiable code review system for the cargo (Rust) package manager.

  

For anyone running across this later, cargo crev is actually much closer to what I had in mind.

Suggest a related project