No. 20 of 65 ·Software Composition Analysis Software

cargo-deny

Windows · Mac · Linux

Freedom report

One barScore 5.3

Free tierNo free tier on record
Open codeNo open-source code on record
Runs widely3 of 6 device platforms
DocumentedThinly documented

cargo-deny is ranked #20 of 65 in software composition analysis software on Freedom251. It runs on Linux, macOS, Windows.

Compared on software composition analysis software

Supported ecosystems: Rust; Cargo; crates.io; Git registries; Git repositories
Pull request scanning: Yes
Deployment options: self_hosted

Best cargo-deny alternatives

See all 20

Two bars Snyk Open Source Free tier No. 1$25/mo6.7 Two bars Sonatype Nexus Repository Free tier No. 2$162.50/mo6.7 Two bars Accessibility Test Framework for Android Free tier No. 3Free6.6 Two bars Docker Desktop Free tier No. 4$9/mo6.6 Two bars Endor Labs Free tier No. 5Free6.6 Two bars Socket Free tier No. 6$25/mo6.6

The record

Purpose: cargo-deny is a Cargo plugin for linting a Rust project's dependency graph against specified expectations and requirements.
Advisories: Its advisories check uses an advisory database to find known vulnerabilities, unmaintained crates, and crates yanked from their source registry.
License checks: Its licenses check evaluates each crate's license requirements against the project's configured acceptable licenses.
License check limit: The tool does not exhaustively search all crate source code for every license that could apply, and it assumes crates correctly define their license requirements.
Dependency bans: Its bans check can allow or deny specific crates and detect multiple versions of the same crate.
Trusted sources: Its sources check checks that crates come only from sources the project trusts, including registries, Git repositories, or local paths.
Configuration: The tool supports configurable checks, and `cargo deny check` runs all supported checks by default, using each check's default configuration when none is specified.
CI integration: The maker documents a GitHub Action for running cargo-deny in continuous integration.
Pre-commit integration: The maker's repository documents using cargo-deny with pre-commit hooks.
Installation: The repository documents installation with Cargo and, for Arch Linux users, with pacman.
Standalone use: The repository says cargo-deny can be built with its `standalone` feature for use without Cargo installed, such as in Docker images.
License: The repository says cargo-deny is available under either the Apache License 2.0 or MIT license, at the user's option.
Disclaimer: The repository says the makers take no responsibility for whether the tool functions correctly or meets a user's needs, and that it does not provide legal advice.

Where it ranks on Freedom251

Best Software Composition Analysis Software in 2026#20 of 65

Is cargo-deny yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Claim it free Promote cargo-deny

Sources

embarkstudios.github.io/cargo-deny/· checked 4 Oct 2026
embarkstudios.github.io/cargo-deny/checks/index.html· checked 4 Oct 2026
embarkstudios.github.io/cargo-deny/checks/licenses/index.html· checked 4 Oct 2026
embarkstudios.github.io/cargo-deny/checks/bans/index.html· checked 4 Oct 2026
embarkstudios.github.io/cargo-deny/checks/sources/index.html· checked 4 Oct 2026
github.com/EmbarkStudios/cargo-deny· checked 4 Oct 2026