nom
v8.0.0 GrowingA byte-oriented, zero-copy, parser combinators library
Quick Verdict
- ✕Not updated for 1+ year
- ✓Stable API (8.x for 11+ years)
- ✓Massive adoption (26.5K crates depend on it)
- ✓Tiny footprint (136KB, 3 deps)
- ✓Permissive license (MIT)
Security
Deep Insights
33.9M downloads in the last 30 days (1.1M/day), up 20% from the previous period.
26.5K crates depend on nom — it's part of the Rust ecosystem's core infrastructure. Removing it from your dependency tree would be extremely difficult.
nom has only 1 owner despite 26.5K dependents. This is a bus-factor concern — consider the implications for long-term support.
The API has been stable (1.x) for over 11 years with 98 releases. This level of maturity means you can depend on it without worrying about breaking changes.
Only 3 direct dependencies. Lean dependency tree means faster builds and lower supply chain risk.
Notable dependents include cexpr, x509-parser, der-parser, asn1-rs, rusticata-macros. When high-quality crates choose nom, it's a strong quality signal.
Health Breakdown
Recency, release consistency, active ratio
Yanked ratio, deps, size, maturity, features
Reverse deps, ownership, ecosystem
Downloads, momentum, growth trend
Docs, repo, license, metadata
Download Trend
Top Dependents
Version Adoption
Release Timeline
Feature Flags
default =["std"]