Is ml-dsa safe to use?

ml-dsa has no known vulnerabilities on the latest version (0.1.0-rc.9). DepScope rates its health at 76/100 (moderate risk).

What is the latest version of ml-dsa?

The latest version of ml-dsa is 0.1.0-rc.9, released 2026-04-28.

No known vulnerabilities on the latest version of ml-dsa.

No, ml-dsa is actively maintained. Latest release: 0.1.0-rc.9 (2026-04-28).

Popular alternatives to ml-dsa in Cargo include: hashbrown, getrandom, windows-sys, syn.

ml-dsa is licensed under Apache-2.0 OR MIT.

cargov0.1.0-rc.9

Pure Rust implementation of ML-DSA (formerly known as CRYSTALS-Dilithium) as described in FIPS-204 (final)

License Apache-2.0 OR MITpermissive17 versions0 deps299,648 weekly dl

/ 100

Health

safe to use

[email protected] is safe to use (health: 76/100)

Health breakdown0 – 100

25/25

maintenance

14/20

popularity

25/25

security

9/15

maturity

3/15

community

Vulnerabilities

none known

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/cargo/ml-dsa