cargo-deny

6.4easy start · #23 of 65
in Software Composition Analysis Software

Free to practise onnot on record
Free trialnot on record
Well documentedyes
Runs where you workyes

Runs on Linux, Mac, Windows.

cargo-deny is ranked #23 of 65 in software composition analysis software on The Geeks Club. It runs on Linux, macOS, Windows.

Compared on software composition analysis software

Supported ecosystems: Rust; Cargo; crates.io; Git registries; Git repositories
Pull request scanning: Yes
Deployment options: self_hosted

Best cargo-deny alternatives

See all 20

Sonatype Nexus Repository 0 of 4 in the starter kit Lesson 18.0 Xygeni 0 of 4 in the starter kit Lesson 27.9 FOSSA 0 of 4 in the starter kit Lesson 37.7 Snyk Open Source 0 of 4 in the starter kit Lesson 47.4 Docker Desktop 0 of 4 in the starter kit Lesson 57.3 Socket 0 of 4 in the starter kit Lesson 67.3

The record

Purpose: cargo-deny is a Cargo plugin for linting a Rust project's dependency graph against specified expectations and requirements.
Advisories: Its advisories check uses an advisory database to find known vulnerabilities, unmaintained crates, and crates yanked from their source registry.
License checks: Its licenses check evaluates each crate's license requirements against the project's configured acceptable licenses.
License check limit: The tool does not exhaustively search all crate source code for every license that could apply, and it assumes crates correctly define their license requirements.
Dependency bans: Its bans check can allow or deny specific crates and detect multiple versions of the same crate.
Trusted sources: Its sources check checks that crates come only from sources the project trusts, including registries, Git repositories, or local paths.
Configuration: The tool supports configurable checks, and `cargo deny check` runs all supported checks by default, using each check's default configuration when none is specified.
CI integration: The maker documents a GitHub Action for running cargo-deny in continuous integration.
Pre-commit integration: The maker's repository documents using cargo-deny with pre-commit hooks.
Installation: The repository documents installation with Cargo and, for Arch Linux users, with pacman.
Standalone use: The repository says cargo-deny can be built with its `standalone` feature for use without Cargo installed, such as in Docker images.
License: The repository says cargo-deny is available under either the Apache License 2.0 or MIT license, at the user's option.
Disclaimer: The repository says the makers take no responsibility for whether the tool functions correctly or meets a user's needs, and that it does not provide legal advice.

Where it ranks on The Geeks Club

Best Software Composition Analysis Software in 2026#23 of 65

Is cargo-deny yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Claim it free Promote cargo-deny

Sources

embarkstudios.github.io/cargo-deny/· checked 4 Oct 2026
embarkstudios.github.io/cargo-deny/checks/index.html· checked 4 Oct 2026
embarkstudios.github.io/cargo-deny/checks/licenses/index.html· checked 4 Oct 2026
embarkstudios.github.io/cargo-deny/checks/bans/index.html· checked 4 Oct 2026
embarkstudios.github.io/cargo-deny/checks/sources/index.html· checked 4 Oct 2026
github.com/EmbarkStudios/cargo-deny· checked 4 Oct 2026