password-hash
v0.6.1 GrowingTraits which describe the functionality of password hashing algorithms, with optional support for a `no_std`/`no_alloc`-friendly implementation of the PHC string format, as well as generic support for other formats (e.g. Modular Crypt Format)
Quick Verdict
- !Pre-1.0: API may have breaking changes
- ✓Massive adoption (1.1K crates depend on it)
- ✓Team maintained (2 owners)
- ✓Tiny footprint (16KB, 3 deps)
- ✓Permissive license (MIT OR Apache-2.0)
Security
Deep Insights
8.8M downloads in the last 30 days (294.1K/day). Volume is roughly flat compared to the previous period.
1.1K crates depend on password-hash. Strong ecosystem adoption means battle-tested code and long-term stability.
The primary maintainer publishes 216 crates. This suggests deep Rust expertise and long-term commitment to the ecosystem.
Despite being 5+ years old, password-hash hasn't reached 1.0 yet. Expect potential API changes between versions.
Only 3 direct dependencies. Lean dependency tree means faster builds and lower supply chain risk.
At 16KB, password-hash is lightweight. Small crate size correlates with focused, well-scoped functionality.
16% of releases have been yanked. Check version history before pinning.
Notable dependents include pbkdf2, scrypt, argon2, crypto, password-auth. When high-quality crates choose password-hash, it's a strong quality signal.
Health Breakdown
Recency, release consistency, active ratio
Yanked ratio, deps, size, maturity, features
Reverse deps, ownership, ecosystem
Downloads, momentum, growth trend
Docs, repo, license, metadata
Download Trend
Top Dependents
Most downloaded crates that depend on password-hash
