Crateward

Crateward watches new crate versions on crates.io. It analyzes every one statically and builds those whose build runs their own code inside an isolated microVM, where it records what the build does. This page shows aggregate numbers only. Findings are published here after they were reported and the embargo passed.

So far

Verdicts by risk level

A low level is not a claim that a version is safe: every verdict states what the analysis covered, and static only means the version was not built.

Versions finished per day

Self checks

The latest canary runs (a known bad and a known good test crate) gave the expected results.

Job reports

The reports of chosen crate versions, as Crateward's dashboard shows them.

Published findings