Is gix-worktree-state safe to use?

gix-worktree-state has 2 known vulnerabilities on the latest version (0.30.0). DepScope rates its health at 79/100 (moderate risk).

What is the latest version of gix-worktree-state?

The latest version of gix-worktree-state is 0.30.0, released 2026-04-27.

Does gix-worktree-state have known vulnerabilities?

Yes. gix-worktree-state has 2 known vulnerabilities. See depscope.dev/pkg/cargo/gix-worktree-state for details.

Is gix-worktree-state deprecated?

No, gix-worktree-state is actively maintained. Latest release: 0.30.0 (2026-04-27).

What are alternatives to gix-worktree-state?

Popular alternatives to gix-worktree-state in Cargo include: hashbrown, getrandom, windows-sys, syn.

What license does gix-worktree-state use?

gix-worktree-state is licensed under MIT OR Apache-2.0.

gix-worktree-state

cargov0.30.0

A crate of the gitoxide project implementing setting the worktree to a particular state

License MIT OR Apache-2.0permissive33 versions0 deps4,673,127 weekly dl

GitoxideLabs/gitoxide

/ 100

Health

update required

[email protected] has vulnerabilities — update to latest

Update to >= 0.33.0 to fix known vulnerabilities

1 high severity vulnerabilities

Health breakdown0 – 100

25/25

maintenance

17/20

popularity

18/25

security

12/15

maturity

7/15

community

Vulnerabilities

1 high1 medium

Advisories (2)

Severity	ID	Summary	Fixed in
medium	CVE-2024-35197	gix refs and paths with reserved Windows device names access the devices	0.33.0
high	CVE-2024-35186	gix traversal outside working tree enables arbitrary code execution	0.33.0

Maintainer trust

Active maintainers (3m)

1

Contributors (12m)

0

Primary author dominance

0%

GitHub stars

11,250

single active maintainer 3m

Quality signals

OSS Criticality

0.58high

Health History

Dependency Tree

License Audit

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/cargo/gix-worktree-state