rustio rustio.net
58

cyclonedx-bom

v0.8.1 Growing

CycloneDX Software Bill of Materials Library

Apache-2.0 Edition 2021 MSRV 1.85.0
EncodingParser implementations #dependencies#components#bom#owasp#sbom

Quick Verdict

  • !Pre-1.0: API may have breaking changes
  • โœ“Trusted by 238 crates
  • โœ“Permissive license (Apache-2.0)

Security

Checking security advisories...
Downloads
1.7M
Dependents
238
Releases
19
Size
189KB

Deep Insights

๐Ÿ“Š
Steady growth

300.7K downloads in the last 30 days (10.0K/day), up 11% from the previous period.

๐Ÿ”—
Moderate adoption

238 crates depend on cyclonedx-bom. Reasonable ecosystem adoption, though not yet a core dependency.

๐Ÿ”ฌ
Pre-1.0 for over a year

Despite being 6+ years old, cyclonedx-bom hasn't reached 1.0 yet. Expect potential API changes between versions.

๐ŸŒŸ
Used by top crates

Notable dependents include cargo-cyclonedx, libcnb, sbom-walker, uv-resolver, hipcheck. When high-quality crates choose cyclonedx-bom, it's a strong quality signal.

Health Breakdown

Maintenance 12/25

Recency, release consistency, active ratio

Quality 11/25

Yanked ratio, deps, size, maturity, features

Community 16/20

Reverse deps, ownership, ecosystem

Popularity 7/15

Downloads, momentum, growth trend

Documentation 12/15

Docs, repo, license, metadata

Download Trend

Daily downloads ยท last 90 days
8K/day avg-27%
05K10K15K20K4/265/146/16/197/77/24

Top Dependents

Version Adoption

v0.8.1
47%
v0.8.0
46%
v0.6.2
3%
v0.7.0
2%
v0.4.3
2%

Release Timeline

10 releasessince 2022
J
F
M
A
M
J
J
A
S
O
N
D
2022
1
2023
2
2024
6
2025
2026
1
Less
More

README

Loading README...

Maintainers

Dependencies
18
direct dependencies
Dependents
238
crates depend on cyclonedx-bom

Similar Crates