Sample report. Input: the public Cargo.lock of ripgrep, checked 2026-10-25. Generated by the same code that writes paid reports. Check your own Cargo.lock →

Tensorust Crate Portfolio

Sample: dependency health of ripgrep's Cargo.lock

Generated 2026-10-25 15:40 UTC from your Cargo.lock (format v4): 50 crates.io packages (49 crates), 27 direct. Workspace members: globset, grep, grep-cli, grep-matcher, grep-pcre2, grep-printer, grep-regex, grep-searcher, ignore, ripgrep.

0packages with a security advisory on the version you pin
0flagged unmaintained, unsound or notice
0pinned versions that were yanked
22behind the latest release (3 a major version behind)
3with no release in 2+ years
1.85minimum Rust your lockfile declares (highest rust-version)

Needs attention, in order

  1. same-file: no release in 6.8 yearsLast release 2020-01-11. Small finished crates can be fine; check the repository for open security issues and whether a maintained fork exists.
  2. termcolor: no release in 2.8 yearsLast release 2024-01-10. Small finished crates can be fine; check the repository for open security issues and whether a maintained fork exists.
  3. walkdir: no release in 2.7 yearsLast release 2024-03-01. Small finished crates can be fine; check the repository for open security issues and whether a maintained fork exists.

Priority 1 (red): security advisories and yanked versions. 2 (amber): unmaintained or unsound. 3: direct dependencies a major version behind or without a release in two years. Transitive packages come in through your direct ones: cargo tree -i NAME shows which.

Every dependency

CratePinnedLatestUpdatePinned releasedLast releaseReleases 12moMSRVAdvisories
aho-corasick direct1.1.5 1.1.5up to date 2026-08-032026-08-03 3mo ago21.60.0
anyhow direct1.0.104 1.0.104up to date 2026-07-182026-07-18 3mo ago41.68
arbitrary direct1.4.2 1.5.0cargo update 2025-08-142026-10-06 19d ago11.63.0
bstr direct1.13.0 1.13.1cargo update 2026-07-142026-08-10 3mo ago51.65
crossbeam-channel direct0.5.16 0.5.17cargo update 2026-07-062026-09-05 50d ago21.60
crossbeam-deque direct0.8.7 0.8.8cargo update 2026-07-062026-09-05 50d ago21.61
encoding_rs direct0.8.35 0.8.42cargo update 2024-10-242026-09-24 31d ago31.36
encoding_rs_io direct0.1.8 0.1.8up to date 2026-08-042026-08-04 3mo ago1
glob direct0.3.4 0.3.4up to date 2026-07-212026-07-21 3mo ago11.63.0
lexopt direct0.3.2 0.3.2up to date 2026-02-282026-02-28 8mo ago1
libc direct0.2.189 0.2.191cargo update 2026-07-212026-10-16 9d ago181.65
log direct0.4.33 0.4.34cargo update 2026-06-202026-08-22 2mo ago61.71.0
memchr direct2.8.3 2.8.3up to date 2026-07-082026-07-08 4mo ago41.61
memmap2 direct0.9.11 0.9.12cargo update 2026-06-222026-10-21 4d ago31.65
pcre2 direct0.2.11 0.2.11up to date 2025-09-252025-09-25 13mo ago0
regex direct1.13.1 1.13.1up to date 2026-07-152026-07-15 3mo ago41.65
regex-automata direct0.4.18 0.4.18up to date 2026-08-042026-08-04 3mo ago51.65
regex-syntax direct0.8.11 0.8.11up to date 2026-06-092026-06-09 5mo ago31.65
same-file direct1.0.6 1.0.6up to date 2020-01-112020-01-11 6.8y ago0
serde direct1.0.229 1.0.229up to date 2026-07-182026-07-18 3mo ago11.56
serde_derive direct1.0.229 1.0.229up to date 2026-07-182026-07-18 3mo ago11.71
serde_json direct1.0.151 1.0.154cargo update 2026-07-202026-10-11 14d ago91.71
termcolor direct1.4.1 1.4.1up to date 2024-01-102024-01-10 2.8y ago0
textwrap direct0.16.2 0.16.4cargo update 2025-03-032026-09-13 42d ago21.70
tikv-jemallocator direct0.7.0 0.7.0up to date 2026-05-252026-05-25 5mo ago1
walkdir direct2.5.0 2.5.0up to date 2024-03-012024-03-01 2.7y ago0
winapi-util direct0.1.11 0.1.11up to date 2025-09-072025-09-07 14mo ago0
cc1.4.0 1.10.0cargo update 2026-07-242026-10-23 2d ago401.63
cfg-if1.0.4 1.0.5cargo update 2025-10-152026-09-16 39d ago11.32
crossbeam-epoch0.9.20 0.9.21cargo update 2026-07-062026-09-05 50d ago31.61
crossbeam-utils0.8.22 0.8.23cargo update 2026-07-062026-09-05 50d ago21.60
derive_arbitrary1.4.2 1.5.0cargo update 2025-08-142026-10-06 19d ago11.63.0
find-msvc-tools0.1.9 0.1.15cargo update 2026-01-302026-10-19 6d ago111.63
getrandom0.4.3 0.4.3up to date 2026-06-172026-06-17 4mo ago71.85
itoa1.0.18 1.0.18up to date 2026-03-202026-03-20 7mo ago31.68
jobserver0.1.35 0.1.35up to date 2026-07-062026-07-06 4mo ago11.85
pcre2-sys0.2.10 0.2.10up to date 2025-09-212025-09-21 13mo ago0
pkg-config0.3.33 0.3.34cargo update 2026-04-122026-08-14 2mo ago21.31
proc-macro21.0.107 1.0.107up to date 2026-07-192026-07-19 3mo ago41.71
quote1.0.47 1.0.47up to date 2026-07-192026-07-19 3mo ago61.71
r-efi6.0.0 7.1.0major behind 2026-02-032026-08-10 3mo ago31.68
serde_core1.0.229 1.0.229up to date 2026-07-182026-07-18 3mo ago11.56
shlex2.0.1 2.0.1up to date 2026-05-172026-05-17 5mo ago21.46.0
syn2.0.119 3.0.9major behind 2026-07-152026-10-12 13d ago211.71
syn3.0.3 3.0.9cargo update 2026-07-222026-10-12 13d ago211.71
tikv-jemalloc-sys0.7.1+5.3.1-0-g81034ce1f1373e37dc865038e1bc8eeecf559ce8 0.7.1+5.3.1-0-g81034ce1f1373e37dc865038e1bc8eeecf559ce8up to date 2026-05-252026-05-25 5mo ago21.71.0
unicode-ident1.0.24 1.0.27cargo update 2026-02-162026-10-12 13d ago71.71
windows-link0.2.1 0.100.0major behind 2025-10-062026-09-03 52d ago11.71
windows-sys0.61.2 0.61.2up to date 2025-10-062025-10-06 13mo ago01.71
zmij1.0.23 1.0.23up to date 2026-07-132026-07-13 3mo ago371.71

MSRV: the highest rust-version declared by a pinned package is 1.85 (getrandom 0.4.3, jobserver 0.1.35). Packages that declare none can still need a newer compiler. Rust releases: tensorust.com/rust/versions/.

Method and sources

TENSORUSTKeep the receipts.Tensorust · Matthew Busel · 404 Read Ave, Tuckahoe, NY 10707 · (914) 312-5691 · support@tensorust.comAboutResearch teamMethodsCorrectionsEmbedsOpen sourceAPI + MCP for agentsFAQRefundsTermsPrivacyReview us on TrustpilotAccountmatt@tensorust.comLinkedInGitHubGitLabX @TensorustAIX @MattBuselSponsor© 2026 Tensorust · ads by Google may use cookies (privacy)