c2pa
v0.89.3 GrowingRust SDK for C2PA (Coalition for Content Provenance and Authenticity) implementors
Quick Verdict
- ✓Actively maintained (updated 0d ago)
- !Pre-1.0: API may have breaking changes
- ✓Trusted by 343 crates
- !Heavy dependency tree (115 direct deps)
- ✓Permissive license (MIT OR Apache-2.0)
Security
Deep Insights
129.3K downloads in the last 30 days (4.3K/day), up 55% from the previous period.
343 crates depend on c2pa. Reasonable ecosystem adoption, though not yet a core dependency.
Despite being 4+ years old, c2pa hasn't reached 1.0 yet. Expect potential API changes between versions.
115 direct dependencies. Consider the impact on compile times and supply chain complexity.
6.8MB is relatively large. May impact download and compile times.
Notable dependents include c2patool, c2pa-c-ffi, cawg-identity, c2pa-attacks, proofmode. When high-quality crates choose c2pa, it's a strong quality signal.
Health Breakdown
Recency, release consistency, active ratio
Yanked ratio, deps, size, maturity, features
Reverse deps, ownership, ecosystem
Downloads, momentum, growth trend
Docs, repo, license, metadata
Download Trend
Top Dependents
Most downloaded crates that depend on c2pa
Version Adoption
Release Timeline
Feature Flags
default =["openssl", "default_http"]