webpki-roots

51.4M downloads in the last 30 days (1.7M/day). Volume is roughly flat compared to the previous period.

13.1K crates depend on webpki-roots — it's part of the Rust ecosystem's core infrastructure. Removing it from your dependency tree would be extremely difficult.

This crate is maintained by a team (3 owners), reducing bus-factor risk and ensuring continuity.

The API has been stable (1.x) for over 9 years with 61 releases. This level of maturity means you can depend on it without worrying about breaking changes.

Notable dependents include rustls, h2, tokio-rustls, hyper-rustls, rustls-native-certs. When high-quality crates choose webpki-roots, it's a strong quality signal.