minisign-verify
v0.2.5 GrowingA small, zero-dependencies crate to verify Minisign signatures.
Quick Verdict
- ✓Actively maintained (updated 24d ago)
- !Pre-1.0: API may have breaking changes
- ✓Trusted by 892 crates
- ✓Tiny footprint (25KB, 0 deps)
- ✓Permissive license (MIT)
Security
Deep Insights
968.3K downloads in the last 30 days (32.3K/day), up 59% from the previous period.
892 crates depend on minisign-verify. Reasonable ecosystem adoption, though not yet a core dependency.
The primary maintainer publishes 139 crates. This suggests deep Rust expertise and long-term commitment to the ecosystem.
Despite being 6+ years old, minisign-verify hasn't reached 1.0 yet. Expect potential API changes between versions.
minisign-verify has no external dependencies — minimal supply chain risk and fast compile times.
At 24KB, minisign-verify is lightweight. Small crate size correlates with focused, well-scoped functionality.
Notable dependents include tauri-plugin-updater, libsodium-sys-stable, mise, binstalk-fetchers, proto_core. When high-quality crates choose minisign-verify, it's a strong quality signal.
Health Breakdown
Recency, release consistency, active ratio
Yanked ratio, deps, size, maturity, features
Reverse deps, ownership, ecosystem
Downloads, momentum, growth trend
Docs, repo, license, metadata
Download Trend
Top Dependents
Most downloaded crates that depend on minisign-verify
