InfluxDB is the Time Series Platform where developers build real-time applications for analytics, IoT and cloud-native services. Easy to start, it is available in the cloud or on-premises. Learn more →
Rustsec Alternatives
Similar projects and alternatives to rustsec
-
-
cargo-crev
A cryptographically verifiable code review system for the cargo (Rust) package manager.
-
SonarLint
Clean code begins in your IDE with SonarLint. Up your coding game and discover issues early. SonarLint is a free plugin that helps you find & fix bugs and security issues from the moment you start writing code. Install from your favorite IDE marketplace today.
-
opensnitch
OpenSnitch is a GNU/Linux port of the Little Snitch application firewall
-
-
advisory-db
Security advisory database for Rust crates published through crates.io
-
-
-
InfluxDB
Build time-series-based applications quickly and at scale.. InfluxDB is the Time Series Platform where developers build real-time applications for analytics, IoT and cloud-native services. Easy to start, it is available in the cloud or on-premises.
-
Clippy
A bunch of lints to catch common mistakes and improve your Rust code. Book: https://doc.rust-lang.org/clippy/
-
-
-
-
-
-
cargo-outdated
A cargo subcommand for displaying when Rust dependencies are out of date
-
-
-
compiler-team
A home for compiler team planning documents, meeting minutes, and other such things.
-
cargo-supply-chain
Gather author, contributor and publisher data on crates in your dependency graph.
-
-
actix-web
Actix Web is a powerful, pragmatic, and extremely fast web framework for Rust.
-
SaaSHub
SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives
rustsec reviews and mentions
-
Rust from a security perspective, where is it vulnerable?
For known vulnerabilities we have the rustsec vulnerability database. You could have a look over there for inspiration. There's also the related cargo-audit for checking dependencies for known vulnerabilities.
-
capnproto-rust: out-of-bound memory access bug
Would be cool if this was also reported to https://rustsec.org/ that way cargo audit could pick up and alert the users about it.
-
`cargo audit` can now scan compiled binaries
P.S. I also made scanning binaries 5x faster in the latest release of cargo audit.
-
My Rust development workflow (after 3+ years)
Thanks to cargo and the community, project maintenance is straightforward in rust. You'll need to install cargo-outdated and cargo-audit:
-
Mental models for learning Rust
Use the automated tools to assist you in the maintenance of your projects: rustfmt, clippy, cargo update, cargo outdated and cargo-audit.
-
A major refactor of Rust's IP address representation has just been merged
Try cargo audit and see if any advisories show. Since tokio 1.0.0, it has depended on mio 0.7.6+, which is without the issues here.
-
Rust code quality and vulnerability scan tool
cargo audit will check all your dependencies against the rustsec database and is closer to being a first-party tool than the fancier stuff that also performs the same function.
There is also cargo-audit for vulnerability scanning against known issues.
-
What precautions does the crates registry have against malicious supply chain attacks?
Sadly, not much. Though every Rust user should know about cargo audit.
-
NPM malware and what it could imply for Cargo
After doing that, please file a vulnerability with the RustSec Security Advisory Database: https://rustsec.org
-
A note from our sponsor - InfluxDB
www.influxdata.com | 8 Feb 2023
Stats
rustsec/rustsec is an open source project licensed under GNU General Public License v3.0 or later which is an OSI approved license.