tough
v0.24.0 GrowingThe Update Framework (TUF) repository client
Quick Verdict
- ✓Actively maintained (updated 3d ago)
- !Pre-1.0: API may have breaking changes
- ✓Trusted by 118 crates
- ✓Team maintained (3 owners)
- !Heavy dependency tree (34 direct deps)
Security
Deep Insights
196.7K downloads in the last 30 days, down 21% from the previous period. May indicate migration to alternatives.
118 crates depend on tough. Reasonable ecosystem adoption, though not yet a core dependency.
The primary maintainer publishes 81 crates. This suggests deep Rust expertise and long-term commitment to the ecosystem.
Despite being 7+ years old, tough hasn't reached 1.0 yet. Expect potential API changes between versions.
34 direct dependencies. Consider the impact on compile times and supply chain complexity.
Notable dependents include sigstore, tough-ssm, tough-kms, tuftool. When high-quality crates choose tough, it's a strong quality signal.
Health Breakdown
Recency, release consistency, active ratio
Yanked ratio, deps, size, maturity, features
Reverse deps, ownership, ecosystem
Downloads, momentum, growth trend
Docs, repo, license, metadata
Download Trend
Top Dependents
Most downloaded crates that depend on tough
