Rust crate maintenance · data Oct 24, 2026
Is sha2 still maintained?
Short answerYes: actively maintained. sha2's newest version, 0.11.1, shipped on Oct 12, 2026 (12 days ago). It has had 5 releases in the last 12 months and 9 in 24, and 36 non-yanked versions since 2017. 22,608 crates depend on it and it gets 3,510,276 real downloads a day.
The signals
- Last release: 12 days ago (0.11.1, Oct 12, 2026).
- Release rhythm: 5 in the last year, 9 in two.
- Still used: 3,510,276 real downloads a day, quiet-day trend +5% against the field.
- Pre-1.0: 0.11.1; minor bumps may break you, so pin the minor version.
- Yanked versions: 15 (a normal sign of a maintainer fixing a bad release).
Releases per quarter, last 2 years
| Quarter | Releases | |
|---|---|---|
| Oct 27 to Jan 25, 2025 | 0 | |
| Jan 26 to Apr 26, 2025 | 1 | |
| Apr 27 to Jul 26, 2025 | 2 | |
| Jul 27 to Oct 25, 2025 | 1 | |
| Oct 26 to Jan 24, 2026 | 2 | |
| Jan 25 to Apr 25, 2026 | 2 | |
| Apr 26 to Jul 25, 2026 | 0 | |
| Jul 26 to Oct 24, 2026 | 1 |
If you need something more active
Rules
From crates.io release history (non-yanked versions), fetched Oct 24, 2026: last release within 6 months = actively maintained; within 18 months = slow cadence; older with 1,000+ dependents = quiet and widely relied on; otherwise quiet. We do not read commits or issues: a crate can be finished and safe without new releases, and active on GitHub without publishing. Before you rely on it, look at the repository for recent commits and open issues. Run cargo audit for security advisories.
Up next
The full numbers: Foundational and steady. Chart, alternatives and badge.sha2Rust crate. Pure Rust implementation of the SHA-2 hash function family including SHA-224, SHA-256, SHA-384, and SHA-512. Real use: 3.5M downloads a day on quiet days...Read it next →Also worth your time