secrecy
v0.10.3 GrowingWrapper types and traits for secret management which help ensure they aren't accidentally copied, logged, or otherwise exposed (as much as possible), and also ensure secrets are securely wiped from memory when dropped.
Quick Verdict
- ✕Not updated for 1+ year
- !Pre-1.0: API may have breaking changes
- ✓Massive adoption (12.4K crates depend on it)
- ✓Tiny footprint (11KB, 2 deps)
- ✓Permissive license (Apache-2.0 OR MIT)
Security
Deep Insights
10.4M downloads in the last 30 days (348.3K/day), up 1% from the previous period.
12.4K crates depend on secrecy — it's part of the Rust ecosystem's core infrastructure. Removing it from your dependency tree would be extremely difficult.
The primary maintainer publishes 96 crates. This suggests deep Rust expertise and long-term commitment to the ecosystem.
Despite being 7+ years old, secrecy hasn't reached 1.0 yet. Expect potential API changes between versions.
Only 2 direct dependencies. Lean dependency tree means faster builds and lower supply chain risk.
At 11KB, secrecy is lightweight. Small crate size correlates with focused, well-scoped functionality.
Notable dependents include kube-client, async-graphql, octocrab, abscissa_core, domain. When high-quality crates choose secrecy, it's a strong quality signal.
Health Breakdown
Recency, release consistency, active ratio
Yanked ratio, deps, size, maturity, features
Reverse deps, ownership, ecosystem
Downloads, momentum, growth trend
Docs, repo, license, metadata
Download Trend
Top Dependents
Most downloaded crates that depend on secrecy