lookup_cargo_crate
Get a behavioral commitment profile for any Rust crate on crates.io. Returns real signals: crate age, download volume (estimated weekly from 90-day totals), version count, publish cadence, owner count (users with publish access), team owners, and linked GitHub activity.
Supply chain risks apply to Cargo too — crate owners with publish access are the attack surface. A single owner on a high-download crate is the same risk pattern as npm.
Useful for: vetting Rust dependencies before adding to Cargo.toml, identifying abandonware, supply chain risk assessment. Examples: "serde", "tokio", "reqwest", "clap", "rand"
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| crate | Yes | Crate name on crates.io. Examples: "serde", "tokio", "reqwest", "clap". Case-insensitive. |