RustSec

Health v2 · maintenance only

Flags: no_license

Adoption not part of the score

1956 stars · 201 forks observed · 2026-09-27

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

RustSec is the Rust ecosystem's security advisory database plus a workspace of tooling crates, including the rustsec client library, cargo-audit for scanning Cargo.lock files, and cargo-lock/CVSS support crates. It publishes advisories that are exported to OSV and the GitHub Advisory Database.

Use cases

• audit Cargo.lock for crates with known vulnerabilities
• query the RustSec advisory database programmatically from Rust
• scan CI for vulnerable dependencies
• parse Cargo.lock files
• score vulnerabilities with CVSS
• lint and publish security advisories for Rust crates

When to choose

• you maintain Rust projects and want automated vulnerability scanning of dependencies
• you need programmatic access to Rust security advisories
• you are building Rust supply-chain or dependency auditing tools

When to avoid

• you need vulnerability scanning for non-Rust ecosystems like npm or pip
• you want a general-purpose SAST or code-scanning tool rather than dependency advisories

Facets

library · maturity stable

security vulnerability-scanning dependency-audit parser developer-tools security developer-tools programming-languages rust cli cross-platform rustsec cargo-audit advisory-database cargo-lock cvss supply-chain-security

Member repositories

For agents

markdown · JSON · MCP: product_card(name="rustsec/rustsec")