cvss
v2.2.0 GrowingCommon Vulnerability Scoring System parser/serializer
Quick Verdict
- ✓Stable API (2.x for 6+ years)
- ✓Trusted by 179 crates
- ✓Team maintained (4 owners)
- ✓Tiny footprint (57KB, 1 deps)
- ✓Permissive license (Apache-2.0 OR MIT)
Security
Deep Insights
1.0M downloads in the last 30 days (33.8K/day). Volume is roughly flat compared to the previous period.
179 crates depend on cvss. Reasonable ecosystem adoption, though not yet a core dependency.
The primary maintainer publishes 220 crates. This suggests deep Rust expertise and long-term commitment to the ecosystem.
The API has been stable (1.x) for over 6 years with 10 releases. This level of maturity means you can depend on it without worrying about breaking changes.
Only 1 direct dependencies. Lean dependency tree means faster builds and lower supply chain risk.
Notable dependents include rustsec, fetter, csaf, rustsec-with-git2-v16, indicate. When high-quality crates choose cvss, it's a strong quality signal.
Health Breakdown
Recency, release consistency, active ratio
Yanked ratio, deps, size, maturity, features
Reverse deps, ownership, ecosystem
Downloads, momentum, growth trend
Docs, repo, license, metadata
Download Trend
Top Dependents
Version Adoption
Release Timeline
Feature Flags
default =["std", "v3", "v4"]
