cargo package report

Is get-size-derive safe?

1 known vulnerability.

// reach

0 direct dependencies

none carry a known advisory

0 packages depend on it

an advisory here reaches each of them

Create a free accountfor every dependency path, dependent and what to upgrade

// ai model usage

Tracked for PyPI packages. HuggingFace models declare Python dependencies, so cargo packages are not covered.

cvss

not scored

severity out of 10

epss

not scored

chance of exploitation in 30 days

xyz score

not scored

CyberXYZ composite out of 10

fig. 01 — RUSTSEC-2024-0427, the advisory selected below

// 1 advisories

RUSTSEC-2024-0427

UNKNOWN

get-size-derive's maintainer seems to be unreachable, with no commits and releases pushed for 1 year and no activity on the GitHub repo.

get-size-derive also depends on attribute-derive ^0.6 a version of the crate which uses the yanked crate proc-macro-error.

// possible alternative(s)

Checked 2026-10-04 at 01:12 UTC. The most recent advisory here was published 2024-09-15. Updated continuously from NVD, GHSA, OSV and CNA feeds.