Decision Workspace
cargo-auditable vs uv-sbom vs use-sbom
Side-by-side comparison of Rust crates
52
cargo-auditable
growingv0.7.4
Make production Rust binaries auditable
58
uv-sbom
experimentalv2.4.0
SBOM generation tool for uv projects - Generate CycloneDX SBOMs from uv.lock files
51
use-sbom
experimentalv0.0.1
SBOM and software supply-chain metadata primitives for RustUse
Core Metrics
| cargo-auditable | uv-sbom | use-sbom | |
|---|---|---|---|
| Health Score | 52 | 58 | 51 |
| Total Downloads | 705.7K | 174 | 8 |
| 30d Downloads | 46.8K | 0 | 0 |
| Dependents | 0 | 0 | 1 |
| Releases | 24 | 12 | 1 |
| Last Updated | 82d ago | 4d ago | today |
| Age | 3y 9m | 4m | 1d |
Health Breakdown
cargo-auditable
Maintenance
14
Quality
13
Community
8
Popularity
7
Documentation
10
uv-sbom
Maintenance
23
Quality
13
Community
6
Popularity
3
Documentation
13
use-sbom
Maintenance
13
Quality
15
Community
7
Popularity
1
Documentation
15
Technical Details
| cargo-auditable | uv-sbom | use-sbom | |
|---|---|---|---|
| Version | 0.7.4 | 2.4.0 | 0.0.1 |
| Stable (≥1.0) | ✗ No | ✓ Yes | ✗ No |
| License | MIT OR Apache-2.0 | MIT | MIT OR Apache-2.0 |
| Dependencies | 11 | 20 | 0 |
| Crate Size | 35KB | 286KB | 4KB |
| Features | 0 | 0 | 0 |
| Yanked % | 0.0% | 0.0% | 0.0% |
| Edition | 2021 | 2021 | 2024 |
| MSRV | — | — | 1.95.0 |
| Owners | 2 | 1 | 1 |
Links
Quick Verdict
- •uv-sbom leads with a health score of 58/100, but none of the options score above 80.
- •cargo-auditable has the most downloads (705.7K), suggesting wider adoption.
- •cargo-auditable, use-sbom are pre-1.0 — API may change.