sha2
v0.11.0 GrowingPure Rust implementation of the SHA-2 hash function family including SHA-224, SHA-256, SHA-384, and SHA-512.
Quick Verdict
- ✓Actively maintained (updated 2d ago)
- !Pre-1.0: API may have breaking changes
- ✓Massive adoption (100.8K crates depend on it)
- ✓Team maintained (3 owners)
- ✓Permissive license (MIT OR Apache-2.0)
Security
Deep Insights
42.7M downloads in the last 30 days (1.4M/day), up 22% from the previous period.
100.8K crates depend on sha2 — it's part of the Rust ecosystem's core infrastructure. Removing it from your dependency tree would be extremely difficult.
The primary maintainer publishes 211 crates. This suggests deep Rust expertise and long-term commitment to the ecosystem.
Despite being 9+ years old, sha2 hasn't reached 1.0 yet. Expect potential API changes between versions.
At 33KB, sha2 is lightweight. Small crate size correlates with focused, well-scoped functionality.
30% of releases have been yanked. Check version history before pinning.
Notable dependents include digest, hmac, signature, spki, pest_meta. When high-quality crates choose sha2, it's a strong quality signal.
Health Breakdown
Recency, release consistency, active ratio
Yanked ratio, deps, size, maturity, features
Reverse deps, ownership, ecosystem
Downloads, momentum, growth trend
Docs, repo, license, metadata
Download Trend
Top Dependents
Most downloaded crates that depend on sha2
Version Adoption
Release Timeline
Feature Flags
default =["alloc", "oid"]
