A service that shows at a glance if your Rust dependencies are out of date or insecure.
Deps.rs is a web service that analyzes Rust project dependencies to show their update and security status. It compares dependencies in Cargo.toml files against the latest versions on crates.io and checks for known vulnerabilities using the RustSec database. This helps developers quickly identify outdated or insecure dependencies in their projects.
Rust developers and maintainers who need to monitor dependency health in their crates or applications, especially those managing multiple projects or prioritizing security.
Developers choose Deps.rs for its simplicity, Rust-specific focus, and integration with the RustSec advisory database. It provides immediate visual feedback through badges and detailed analysis pages without requiring complex setup or configuration.
Keep your dependencies up-to-date
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
Supports analysis for projects on crates.io, GitHub, Gitlab, Bitbucket, SourceHut, Codeberg, and Gitea, offering broad compatibility with common hosting services as detailed in the README.
Queries the RustSec Security Advisory Database to identify insecure dependencies, providing up-to-date security insights specifically tailored for Rust projects.
Provides embeddable status badges with multiple style options (e.g., flat, flat-square) and customizable subjects, similar to shields.io, for easy integration into READMEs without complex setup.
Allows analysis of specific crate versions or the latest release, ensuring accurate status reporting for both fixed and moving dependency targets as mentioned in the badge options.
Exclusively analyzes Rust projects using Cargo.toml, making it ineffective for projects in other languages or those with non-standard dependency management systems.
Relies on external databases like crates.io and RustSec, which can lead to latency, downtime, or data freshness issues, with no mention of offline or local analysis capabilities in the README.
The README does not indicate support for private repositories, limiting its utility for proprietary or closed-source projects that require dependency monitoring.