Is packageurl safe to use?

packageurl has no known vulnerabilities on the latest version (0.6.0). DepScope rates its health at 63/100 (moderate risk).

What is the latest version of packageurl?

The latest version of packageurl is 0.6.0, released 2025-12-11.

No known vulnerabilities on the latest version of packageurl.

No, packageurl is actively maintained. Latest release: 0.6.0 (2025-12-11).

Popular alternatives to packageurl in Cargo include: hashbrown, getrandom, windows-sys, syn.

packageurl is licensed under MIT.

cargov0.6.0

Rust implementation of the package url specification

License MITpermissive12 versions0 deps69,377 weekly dl

/ 100

Health

safe to use

[email protected] is safe to use (health: 63/100)

Health breakdown0 – 100

15/25

maintenance

10/20

popularity

25/25

security

12/15

maturity

1/15

community

Vulnerabilities

none known

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/cargo/packageurl