minisign-verify
v0.2.5 GrowingA small, zero-dependencies crate to verify Minisign signatures.
Quick Verdict
- !Pre-1.0: API may have breaking changes
- ✓Massive adoption (1.3K crates depend on it)
- ✓Tiny footprint (25KB, 0 deps)
- ✓Permissive license (MIT)
Security
Deep Insights
1.5M downloads in the last 30 days (50.0K/day), up 12% from the previous period.
1.3K crates depend on minisign-verify. Strong ecosystem adoption means battle-tested code and long-term stability.
The primary maintainer publishes 143 crates. This suggests deep Rust expertise and long-term commitment to the ecosystem.
Despite being 7+ years old, minisign-verify hasn't reached 1.0 yet. Expect potential API changes between versions.
minisign-verify has no external dependencies — minimal supply chain risk and fast compile times.
At 24KB, minisign-verify is lightweight. Small crate size correlates with focused, well-scoped functionality.
Notable dependents include tauri-plugin-updater, libsodium-sys-stable, binstalk-fetchers, mise, proto_core. When high-quality crates choose minisign-verify, it's a strong quality signal.
Health Breakdown
Recency, release consistency, active ratio
Yanked ratio, deps, size, maturity, features
Reverse deps, ownership, ecosystem
Downloads, momentum, growth trend
Docs, repo, license, metadata
Download Trend
Top Dependents
Most downloaded crates that depend on minisign-verify