CrateAudit

Audit Rust crate dependencies for unsafe code and supply chain risks

Code & DevelopmentFree

CrateAudit scans Rust project dependency trees to quantify unsafe code usage, identify unmaintained crates, flag recent ownership transfers, and detect dependency confusion risks. The tool generates trust scores based on download counts, audit history, and maintainer reputation metrics, and produces a bill of materials suitable for security compliance reviews. Rust teams use it as a pre-merge gate to prevent introduction of dependencies that violate their safety policies.

Key Features

• ✓Unsafe code quantification
• ✓Ownership transfer alerts
• ✓Trust scoring
• ✓SBOM generation
• ✓Pre-merge gate integration