sigstore
v0.14.0 GrowingAn experimental crate to interact with sigstore
Quick Verdict
- ✓Actively maintained (updated 52d ago)
- !Pre-1.0: API may have breaking changes
- ✓Trusted by 269 crates
- !Heavy dependency tree (54 direct deps)
- ✓Permissive license (Apache-2.0)
Security
Deep Insights
98.7K downloads in the last 30 days, down 30% from the previous period. May indicate migration to alternatives.
269 crates depend on sigstore. Reasonable ecosystem adoption, though not yet a core dependency.
Despite being 4+ years old, sigstore hasn't reached 1.0 yet. Expect potential API changes between versions.
54 direct dependencies. Consider the impact on compile times and supply chain complexity.
Notable dependents include pcu, sigstore-verification, blue-build-process-management, bpfman, bpfman-api. When high-quality crates choose sigstore, it's a strong quality signal.
Health Breakdown
Recency, release consistency, active ratio
Yanked ratio, deps, size, maturity, features
Reverse deps, ownership, ecosystem
Downloads, momentum, growth trend
Docs, repo, license, metadata
Download Trend
Top Dependents
Most downloaded crates that depend on sigstore
Version Adoption
Release Timeline
Feature Flags
default =["full", "native-tls"]