Is serde_yml safe to use?

serde_yml has 2 known vulnerabilities on the latest version (0.0.12). DepScope rates its health at 49/100 (high risk).

What is the latest version of serde_yml?

The latest version of serde_yml is 0.0.12, released 2024-08-25.

Does serde_yml have known vulnerabilities?

Yes. serde_yml has 2 known vulnerabilities. See depscope.dev/pkg/cargo/serde_yml for details.

Is serde_yml deprecated?

No, serde_yml is actively maintained. Latest release: 0.0.12 (2024-08-25).

What are alternatives to serde_yml?

Popular alternatives to serde_yml in Cargo include: hashbrown, getrandom, windows-sys, syn.

What license does serde_yml use?

serde_yml is licensed under MIT OR Apache-2.0.

serde_yml

cargov0.0.12

A robust Rust library that simplifies the serialization and deserialization of Rust data structures to and from YAML format using the widely-used Serde framework.

License MIT OR Apache-2.0permissive12 versions0 deps4,349,592 weekly dl

sebastienrousseau/serde_yml

/ 100

Health

safe to use

[email protected] is safe to use (health: 49/100)

Health breakdown0 – 100

0/25

maintenance

17/20

popularity

23/25

security

9/15

maturity

0/15

community

Vulnerabilities

1 medium1 low

Advisories (2)

Severity	ID	Summary	Fixed in
medium	RUSTSEC-2025-0068	serde_yml crate is unsound and unmaintained	—
unknown	GHSA-hhw4-xg65-fp2x	serde_yml crate is unsound and unmaintained	—

Maintainer trust

Active maintainers (3m)

1

Contributors (12m)

0

Primary author dominance

0%

GitHub stars

121

single active maintainer 3marchived repo

Quality signals

OSS Criticality

0.54high

Health History

Dependency Tree

License Audit

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/cargo/serde_yml