# rust-fuzz/cargo-fuzz

Command line helpers for fuzzing

Repository: https://github.com/rust-fuzz/cargo-fuzz
Canonical: https://ross.abutalabs.com/products/cargo-fuzz
Homepage: https://rust-fuzz.github.io/book/cargo-fuzz.html
Language: Rust
License: Apache-2.0
License Family: permissive
Topics: fuzz-testing, fuzzing, cargo, rust
Last push: 2026-07-20T16:14:25+00:00

## Health v2 (maintenance only)
Score: 81/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 93, release rhythm 55, longevity 100
- inputs: {"age_days": 3480, "days_push": 44, "days_rel": 85, "gap_med": 347, "n_releases_24m": 2}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1888, forks 132 (observed 2026-08-28T04:05:49.272661+00:00)

## What it is
cargo-fuzz is a Cargo subcommand that makes it easy to fuzz test Rust code with libFuzzer. It scaffolds fuzz targets, runs them, minimizes failing inputs and corpora, and generates coverage reports.

## Use cases
- fuzz test my rust crate
- find crashes and panics in rust code with libfuzzer
- minimize a failing fuzz input
- shrink my fuzzing corpus
- generate code coverage for a fuzz target
- set up a fuzzing harness for a rust library

## When to choose
- you maintain a Rust crate and want coverage-guided fuzzing with minimal setup
- you need input or corpus minimization for reported crashes
- you want coverage reports for fuzz targets on Linux or macOS

## When to avoid
- you need to fuzz on Windows, since libFuzzer sanitizer support is Unix-only
- you cannot use a nightly Rust compiler or lack a C++11 compiler
- you want to fuzz non-Rust code or use fuzzers other than libFuzzer

## Facets
- artifact type: cli-tool
- maturity: active
- function: fuzzing, testing, cli, developer-tools
- domain: testing, developer-tools, security
- platform: rust, cli
- tags: libfuzzer, cargo-subcommand, coverage-guided-fuzzing, sanitizers, rust, command-line, linux, macos

## Member repositories
- rust-fuzz/cargo-fuzz (main) score 81

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:05:49.272661+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T03:13:30.771940+00:00, confidence not recorded.
  - readme: https://github.com/rust-fuzz/cargo-fuzz (fetched 2026-08-28T04:05:49.272661+00:00, sha 1d45dc2041a4)
  - homepage: https://rust-fuzz.github.io/book/cargo-fuzz.html (fetched 2026-08-29T10:52:23.934225+00:00, sha 5ff214150438)
  - registry_crates: https://crates.io/api/v1/crates/cargo-fuzz (fetched 2026-08-29T10:52:23.966821+00:00, sha d8571a007457)
- Data as of 2026-08-30T08:39:29.467469+00:00.