c2pa
v0.84.1 GrowingRust SDK for C2PA (Coalition for Content Provenance and Authenticity) implementors
Quick Verdict
- ✓Actively maintained (updated 13d ago)
- !Pre-1.0: API may have breaking changes
- ✓Trusted by 305 crates
- !Heavy dependency tree (116 direct deps)
- ✓Permissive license (MIT OR Apache-2.0)
Security
Deep Insights
136.9K downloads in the last 30 days, down 54% from the previous period. May indicate migration to alternatives.
305 crates depend on c2pa. Reasonable ecosystem adoption, though not yet a core dependency.
Despite being 4+ years old, c2pa hasn't reached 1.0 yet. Expect potential API changes between versions.
116 direct dependencies. Consider the impact on compile times and supply chain complexity.
6.7MB is relatively large. May impact download and compile times.
Notable dependents include c2patool, c2pa-c-ffi, cawg-identity, c2pa-attacks, proofmode. When high-quality crates choose c2pa, it's a strong quality signal.
Health Breakdown
Recency, release consistency, active ratio
Yanked ratio, deps, size, maturity, features
Reverse deps, ownership, ecosystem
Downloads, momentum, growth trend
Docs, repo, license, metadata
Download Trend
Top Dependents
Most downloaded crates that depend on c2pa
Version Adoption
Release Timeline
Feature Flags
default =["openssl", "default_http"]
