platform
crates.io: security advisories, deprecations and releases
crates.io and Cargo, the Rust package registry and manager.
Get crates.io alerts Free. No account. One email, and only when something touches your
stack.
- Items, 90 days
- 3
- Critical
- 0
- Last critical
- none
- This week
- 0
Security 1
- HIGH OpenSSF Blog · 17 Oct 2026
GitHub expands malware advisories to eight ecosystems via OpenSSF
GitHub integrated OpenSSF malicious-packages data into its Advisory Database, extending malware detection from npm to PyPI, Maven, RubyGems, NuGet, Go, crates.io, and PHP Composer.
News and tools 2
- INFO tl;dr sec · 8 Oct 2026
Survey of package-manager sandboxing status across ecosystems
Homebrew, opam, Nix, Bazel and others differ in sandbox strength; many still rely on allow-lists or no isolation at all.
- INFO Rust Blog · 3 Oct 2026
Announcing Scott Schafer as Cargo Maintainer in Residence
Rust Foundation funds Scott Schafer full-time for one year to handle Cargo maintenance, feature work, and technical debt after team attrition.
Only hear about crates.io when it touches your stack
Tell Zero what you run. You get one email, and only on the days something above applies to you.