Decision Workspace
cargo-bom vs cargo-upgrades vs cyclonedx-bom
Side-by-side comparison of Rust crates
47
cargo-bom
growingv0.7.1
Bill of Materials for Rust Crates
62
cargo-upgrades
stablev3.1.0
Checks if dependencies in Cargo.toml are up to date. Compatible with workspaces and path dependencies.
60
cyclonedx-bom
growingv0.8.1
CycloneDX Software Bill of Materials Library
Core Metrics
| cargo-bom | cargo-upgrades | cyclonedx-bom | |
|---|---|---|---|
| Health Score | 47 | 62 | 60 |
| Total Downloads | 36.8K | 78.6K | 1.2M |
| 30d Downloads | 0 | 1.6K | 241.2K |
| Dependents | 0 | 3 | 220 |
| Releases | 24 | 29 | 19 |
| Last Updated | 108d ago | 14d ago | 67d ago |
| Age | 8y 5m | 6y 10m | 6y 1m |
Health Breakdown
cargo-bom
Maintenance
11
Quality
13
Community
8
Popularity
5
Documentation
10
cargo-upgrades
Maintenance
18
Quality
19
Community
7
Popularity
6
Documentation
12
cyclonedx-bom
Maintenance
14
Quality
11
Community
16
Popularity
7
Documentation
12
Technical Details
| cargo-bom | cargo-upgrades | cyclonedx-bom | |
|---|---|---|---|
| Version | 0.7.1 | 3.1.0 | 0.8.1 |
| Stable (≥1.0) | ✗ No | ✓ Yes | ✗ No |
| License | MIT | GPL-3.0+ | Apache-2.0 |
| Dependencies | 4 | 11 | 18 |
| Crate Size | 14KB | 19KB | 189KB |
| Features | 0 | 3 | 0 |
| Yanked % | 4.2% | 3.5% | 0.0% |
| Edition | 2024 | 2024 | 2021 |
| MSRV | — | 1.92 | 1.85.0 |
| Owners | 2 | 1 | 5 |
Links
Quick Verdict
- •cargo-upgrades leads with a health score of 62/100, but none of the options score above 80.
- •cyclonedx-bom has the most downloads (1.2M), suggesting wider adoption.
- •cyclonedx-bom is depended on by 220 crates — strongest ecosystem trust.
- •cargo-bom, cyclonedx-bom are pre-1.0 — API may change.