cargo-lock
Self-contained Cargo.lock parser with optional dependency graph analysis
11.1.0
35M downloads/mo
#1521 most downloaded on crates.io
rustsec/rustsec
What this package is like to depend on
Last release 1 months ago
24 Jul 2026
Release timing varies
gaps range from 2 weeks to 1.3 years
Most releases are documented
notes for 20 of 23 stable releases
3 versions withdrawn
withdrawn after publishing
7 years old
31 releases · first in 2019
3 releases in the last 12 months
see the full history below
Release timeline
31 releases · Sep 2019 to Jul 2026Releases
latest 31-
11.1.024 Jul 2026 -
11.0.119 Jan 2026Nothing published for this version
-
11.0.007 Nov 2025Nothing published for this version
-
10.1.019 Jan 2025Release notes
Open source →Fixed
- Fixed git tags in Cargo.lock not being normalized correctly when using lockfile v4 format (#1298)
- Increased MSRV to 1.73 to match the requirements of dependencies in Cargo.lock
-
10.0.125 Oct 2024 -
10.0.015 Oct 2024Release notes
Open source →Added
- V4 lockfile support (#1206)
Changed
- MSRV 1.70 (#1092)
Removed
tomldependency from public API (#1226)
-
10.0.0-rc.009 Oct 2024 pre-releaseNothing published for this version
-
10.0.0-pre.030 Jul 2024 pre-releaseNothing published for this version
-
9.0.024 Apr 2023 -
8.0.301 Dec 2022Release notes
Open source →Fixed
- Encoding inconsistency when there's only one registry for all packages (#767)
-
8.0.230 Jun 2022Release notes
Open source → -
8.0.121 May 2022 -
8.0.008 May 2022 withdrawnRelease notes
Open source → -
7.1.023 Apr 2022Release notes
Open source →Added
SourceId::default()(#536)
Changed
- MSRV is now 1.49 (#524)
Fixed
- V3 lockfile handling and tests (#535)
-
7.0.106 Jul 2021 -
7.0.027 May 2021 withdrawnRelease notes
Open source → -
6.0.126 Jan 2021 -
6.0.025 Sep 2020 -
5.0.023 Sep 2020Release notes
Open source →- CLI: support for listing a single dependency
- Cargo-compatible serializer
- CLI: add
--dependenciesand--sourcesflags tocargo lock list - CLI: implement
cargo lock treewithout arguments - Add
dependency::Tree::roots()method - CLI: make
listthe default command - Make
clifeature non-default - WASM support; MSRV 1.41+
- Bump
semverdependency from v0.9 to v0.10
-
5.0.0-rc22 Sep 2020 pre-releaseNothing published for this version
-
4.0.123 Jan 2020 -
4.0.022 Jan 2020 withdrawnRelease notes
Open source →- Command line interface
- Add helper methods for working with checksum metadata
- Use minified version of Cargo's
SourceIdtype - Overhaul encoding: use serde_derive, proper V1/V2 support
- Add support Cargo.lock
patchandroot - Detect V1 vs V2 Cargo.lock files
- Update
petgraphrequirement from 0.4 to 0.5 - Add
package::Checksum
-
3.0.001 Oct 2019 -
2.0.026 Sep 2019Release notes
Open source →- Use two-pass dependency tree computation
- Remove
Lockfile::root_package()
-
2.0.0-pre25 Sep 2019 pre-releaseNothing published for this version
-
1.0.024 Sep 2019Release notes
Open source →- dependency/tree: Render trees to an
io::Write - metadata: Generalize into
KeyandValuetypes - Refactor dependency handling
- dependency/tree: Render trees to an
-
1.0.0-pre24 Sep 2019 pre-releaseNothing published for this version
-
0.2.121 Sep 2019 -
0.2.021 Sep 2019 -
0.1.021 Sep 2019 -
0.0.021 Sep 2019Nothing published for this version