argon2
v0.5.3 GrowingPure Rust implementation of the Argon2 password hashing function with support for the Argon2d, Argon2i, and Argon2id algorithmic variants
Quick Verdict
- ✓Actively maintained (updated 83d ago)
- !Pre-1.0: API may have breaking changes
- ✓Massive adoption (12.2K crates depend on it)
- ✓Team maintained (2 owners)
- ✓Permissive license (MIT OR Apache-2.0)
Security
Deep Insights
4.9M downloads in the last 30 days, down 23% from the previous period. May indicate migration to alternatives.
12.2K crates depend on argon2 — it's part of the Rust ecosystem's core infrastructure. Removing it from your dependency tree would be extremely difficult.
The primary maintainer publishes 216 crates. This suggests deep Rust expertise and long-term commitment to the ecosystem.
Despite being 9+ years old, argon2 hasn't reached 1.0 yet. Expect potential API changes between versions.
At 28KB, argon2 is lightweight. Small crate size correlates with focused, well-scoped functionality.
31% of releases have been yanked. Check version history before pinning.
Notable dependents include pgp, internal-russh-forked-ssh-key, sequoia-openpgp, surrealdb-core, password-auth. When high-quality crates choose argon2, it's a strong quality signal.
Health Breakdown
Recency, release consistency, active ratio
Yanked ratio, deps, size, maturity, features
Reverse deps, ownership, ecosystem
Downloads, momentum, growth trend
Docs, repo, license, metadata
Download Trend
Top Dependents
Most downloaded crates that depend on argon2
Version Adoption
Release Timeline
Feature Flags
default =["alloc", "password-hash", "rand"]
