rsign2
v0.6.6 GrowingA command-line tool to sign files and verify signatures.
Quick Verdict
- ✓Actively maintained (updated 24d ago)
- !Pre-1.0: API may have breaking changes
- ✓Tiny footprint (15KB, 3 deps)
- ✓Permissive license (MIT)
Security
Deep Insights
490 downloads in the last 30 days, down 21% from the previous period. May indicate migration to alternatives.
The primary maintainer publishes 139 crates. This suggests deep Rust expertise and long-term commitment to the ecosystem.
Despite being 6+ years old, rsign2 hasn't reached 1.0 yet. Expect potential API changes between versions.
Only 3 direct dependencies. Lean dependency tree means faster builds and lower supply chain risk.
At 15KB, rsign2 is lightweight. Small crate size correlates with focused, well-scoped functionality.
Health Breakdown
Recency, release consistency, active ratio
Yanked ratio, deps, size, maturity, features
Reverse deps, ownership, ecosystem
Downloads, momentum, growth trend
Docs, repo, license, metadata
