webpki-roots

49.7M downloads in the last 30 days (1.7M/day), up 27% from the previous period.

11.5K crates depend on webpki-roots — it's part of the Rust ecosystem's core infrastructure. Removing it from your dependency tree would be extremely difficult.

This crate is maintained by a team (3 owners), reducing bus-factor risk and ensuring continuity.

The API has been stable (1.x) for over 9 years with 60 releases. This level of maturity means you can depend on it without worrying about breaking changes.

Notable dependents include rustls, h2, tokio-rustls, hyper-rustls, rustls-native-certs. When high-quality crates choose webpki-roots, it's a strong quality signal.