Rust crate maintenance · data Oct 24, 2026
Is hmac still maintained?
Short answerYes, on a slow release cadence. hmac's newest version, 0.13.0, shipped on Mar 29, 2026 (7 months ago). It has had 5 releases in the last 12 months and 9 in 24, and 25 non-yanked versions since 2018. 4,359 crates depend on it and it gets 2,124,794 real downloads a day.
The signals
- Last release: 7 months ago (0.13.0, Mar 29, 2026).
- Release rhythm: 5 in the last year, 9 in two.
- Still used: 2,124,794 real downloads a day, quiet-day trend +3% against the field.
- Pre-1.0: 0.13.0; minor bumps may break you, so pin the minor version.
- Yanked versions: 13 (a normal sign of a maintainer fixing a bad release).
Releases per quarter, last 2 years
| Quarter | Releases | |
|---|---|---|
| Oct 27 to Jan 25, 2025 | 0 | |
| Jan 26 to Apr 26, 2025 | 1 | |
| Apr 27 to Jul 26, 2025 | 1 | |
| Jul 27 to Oct 25, 2025 | 2 | |
| Oct 26 to Jan 24, 2026 | 1 | |
| Jan 25 to Apr 25, 2026 | 4 | |
| Apr 26 to Jul 25, 2026 | 0 | |
| Jul 26 to Oct 24, 2026 | 0 |
If you need something more active
Rules
From crates.io release history (non-yanked versions), fetched Oct 24, 2026: last release within 6 months = actively maintained; within 18 months = slow cadence; older with 1,000+ dependents = quiet and widely relied on; otherwise quiet. We do not read commits or issues: a crate can be finished and safe without new releases, and active on GitHub without publishing. Before you rely on it, look at the repository for recent commits and open issues. Run cargo audit for security advisories.
Up next
The full numbers: Widely used and steady. Chart, alternatives and badge.hmacRust crate. Generic implementation of Hash-based Message Authentication Code (HMAC). Real use: 2.1M downloads a day on quiet days; 4,359 crates depend on it.Read it next →Also worth your time