EmbarkStudios/cargo-deny

Health v2 · maintenance only

Adoption not part of the score

2407 stars · 129 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

cargo-deny is a Cargo plugin (cargo subcommand) for linting Rust dependency graphs. It checks crate licenses against allow/deny lists, bans or duplicates dependencies, and flags crates with known security advisories.

Use cases

• enforce license compliance across all cargo dependencies
• check rust crates for known security advisories in CI
• ban or duplicate-detect specific crates in a rust workspace
• lint large dependency graphs in a rust project
• run dependency checks as a github action
• generate a deny.toml policy for crate sources and versions

When to choose

• you maintain a Rust project or workspace and want automated dependency policy enforcement
• you need license auditing (SPDX) and RustSec advisory checks in CI
• you want to ban certain crates, sources, or duplicate versions

When to avoid

• you need runtime application security testing rather than dependency linting
• your project is not Rust/Cargo based
• you need legal advice on license compliance rather than automated checks

Facets

cli-tool · maturity active

linter security dependency-audit cli ci-cd developer-tools security version-control programming-languages rust cli windows cargo-subcommand license-compliance spdx rustsec-advisories dependency-management supply-chain-security linux macos docker

Member repositories

For agents

markdown · JSON · MCP: product_card(name="EmbarkStudios/cargo-deny")