.

Crates.io


Reading time: less than 1 minute

crates.io is the package repository for Rust packages.

Github dependency

You can only authenticate to crates.io using a Github login. This has two problems.

  • If any Github or Microsoft employee dislikes you, they can cut you off from publishing Rust packages.
  • A Github or Microsoft employee can log in as any crates.io user, and publish malicious updates to any package.

If crates.io had regular authentication instead of only Github authentication, both of these issues could be fixed for any regular-auth users.

API

Download package source code

https://crates.io/api/v1/crates/serde/1.0.218/download

Citation

If you find this work useful, please cite it as:
@article{yaltirakli,
  title   = "Crates.io",
  author  = "Yaltirakli, Gokberk",
  journal = "gkbrk.com",
  year    = "2025",
  url     = "https://www.gkbrk.com/crates-io"
}
Not using BibTeX? Click here for more citation styles.
IEEE Citation
Gokberk Yaltirakli, "Crates.io", August, 2025. [Online]. Available: https://www.gkbrk.com/crates-io. [Accessed Aug. 16, 2025].
APA Style
Yaltirakli, G. (2025, August 16). Crates.io. https://www.gkbrk.com/crates-io
Bluebook Style
Gokberk Yaltirakli, Crates.io, GKBRK.COM (Aug. 16, 2025), https://www.gkbrk.com/crates-io

Comments

© 2025 Gokberk Yaltirakli