crev-dev/cargo-crev

Health v2 · maintenance only

Adoption not part of the score

2330 stars · 96 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

cargo-crev is a cryptographically verifiable, distributed code review system for the Rust cargo package manager. It lets developers review dependencies and share signed reviews through a decentralized web of trust to verify the security and quality of crates.

Use cases

• audit cargo dependencies for security before adding them
• sign and publish code reviews of rust crates
• verify that dependencies were reviewed by trusted developers
• protect a rust project against supply-chain attacks
• build a web of trust for crate reviews across a team
• check review provenance of transitive dependencies

When to choose

• you maintain a Rust project and want to vet third-party crates
• you need decentralized, cryptographically signed dependency reviews
• your team wants to share trust decisions about crates without a central authority

When to avoid

• you work outside the Rust/cargo ecosystem
• you need a centralized code review platform like GitHub pull requests
• you want automated vulnerability scanning rather than human review attestations

Facets

cli-tool · maturity active

code-review security cryptography cli dependency-audit security developer-tools version-control windows cli rust supply-chain-security rust cargo web-of-trust decentralized p2p command-line linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="crev-dev/cargo-crev")