Free tools / Rust and dev
Free tool · runs in your browser
Cargo.toml checker: is anything in my dependencies a problem?
Paste a Cargo.toml or a Cargo.lock. You get every dependency's security advisories, yanked or outdated versions, license, MSRV, last release and how much real use it gets, in one table.
What it checks
- Security advisories from OSV, which includes the RustSec database that cargo-audit uses, for the exact version your requirement resolves to (or the locked version in a Cargo.lock), with the fixed version.
- Unmaintained and unsound notices from RustSec.
- Version health: which version your requirement picks today (same caret rules as Cargo), whether it is yanked, and whether you are a breaking release behind.
- License of the version you get, flagged when it is copyleft or missing.
- MSRV: the minimum Rust version each crate declares, and the newest one in your tree, which is the oldest Rust that can build it.
- Real use and maintenance: last release, and for the 1,000 most-downloaded crates our bot-adjusted daily downloads and dependents count.
Privacy
Your file never leaves your browser. Only crate names (and versions) go to crates.io and api.osv.dev to look them up, one crates.io request a second as their policy asks. Nothing is stored.
Next steps
- Got a compiler error instead? Paste it into the Rust errors finder.
- Choosing between crates? Crate data and verdicts.
- Checking a version requirement? Semver checker.
Up next
Same toolboxRust compiler errors, explained with fixesPaste any rustc error and jump to the fix.Read it next →Also worth your time
Did this answer your question?
Up next
Most read on the site this weekcrates.io download count: 80% of ours arrived with a new versionWhat the crates.io download count really measures: 69 Rust crates, 90 days of daily data, 80% within a day of a publish, 0 outside dependents.Read it next →