subtle

34.9M downloads in the last 30 days (1.2M/day), up 17% from the previous period.

10.5K crates depend on subtle — it's part of the Rust ecosystem's core infrastructure. Removing it from your dependency tree would be extremely difficult.

This crate is maintained by a team (2 owners), reducing bus-factor risk and ensuring continuity.

The API has been stable (1.x) for over 8 years with 29 releases. This level of maturity means you can depend on it without worrying about breaking changes.

Only 1 direct dependencies. Lean dependency tree means faster builds and lower supply chain risk.

At 14KB, subtle is lightweight. Small crate size correlates with focused, well-scoped functionality.

59% of releases have been yanked. Check version history before pinning.

Notable dependents include rustls, pkcs8, crypto-bigint, cookie, curve25519-dalek. When high-quality crates choose subtle, it's a strong quality signal.