56
sigstore-verify
v0.8.0 ExperimentalSigstore signature verification
Apache-2.0 Edition 2021 MSRV 1.70
Quick Verdict
- ✓Actively maintained (updated 4d ago)
- !Pre-1.0: API may have breaking changes
- !Heavy dependency tree (32 direct deps)
- ✓Permissive license (Apache-2.0)
Security
Checking security advisories...
Downloads
123.7K
Dependents
77
Releases
14
Size
119KB
Deep Insights
📈
Strong growth momentum
64.4K downloads in the last 30 days (2.1K/day), up 53% from the previous period.
👤
Prolific maintainer
The primary maintainer publishes 53 crates. This suggests deep Rust expertise and long-term commitment to the ecosystem.
📦
Heavy dependency tree
32 direct dependencies. Consider the impact on compile times and supply chain complexity.
🌟
Used by top crates
Notable dependents include nono, rattler_build_source_cache, mise-sigstore. When high-quality crates choose sigstore-verify, it's a strong quality signal.
Health Breakdown
Maintenance 19/25
Recency, release consistency, active ratio
Quality 11/25
Yanked ratio, deps, size, maturity, features
Community 8/20
Reverse deps, ownership, ecosystem
Popularity 6/15
Downloads, momentum, growth trend
Documentation 12/15
Docs, repo, license, metadata
Download Trend
Daily downloads · last 90 days
1K/day avg+176%
Top Dependents
Most downloaded crates that depend on sigstore-verify
Version Adoption
v0.6.4
51%
v0.6.5
20%
v0.6.6
14%
v0.6.3
10%
v0.7.0
4%
Release Timeline
10 releasessince 2025
J
F
M
A
M
J
J
A
S
O
N
D
2025
2
2026
8
LessMore
Feature Flags
default =["rustls"]
tufrustls*native-tls
README
Loading README...
Maintainers
Dependencies
32
direct dependencies
Dependents
77
crates depend on sigstore-verify