sigstore-tsa
v0.11.0 ExperimentalRFC 3161 Time-Stamp Protocol client for Sigstore
Quick Verdict
- ✓Actively maintained (updated 5d ago)
- !Pre-1.0: API may have breaking changes
- !Heavy dependency tree (22 direct deps)
- ✓Permissive license (Apache-2.0)
Security
Deep Insights
167.0K downloads in the last 30 days (5.6K/day), up 83% from the previous period.
The primary maintainer publishes 54 crates. This suggests deep Rust expertise and long-term commitment to the ecosystem.
22 direct dependencies. Consider the impact on compile times and supply chain complexity.
At 44KB, sigstore-tsa is lightweight. Small crate size correlates with focused, well-scoped functionality.
Notable dependents include sigstore-bundle, sigstore-verify, sigstore-sign, kam, apohara-sealchain-core. When high-quality crates choose sigstore-tsa, it's a strong quality signal.
Health Breakdown
Recency, release consistency, active ratio
Yanked ratio, deps, size, maturity, features
Reverse deps, ownership, ecosystem
Downloads, momentum, growth trend
Docs, repo, license, metadata
Download Trend
Top Dependents
Most downloaded crates that depend on sigstore-tsa
Version Adoption
Release Timeline
Feature Flags
default =["rustls"]