pkg.soopen package index

brew / rank 7952

Install cargo-depgraph with Homebrew, Nix, pacman

Creates dependency graphs for cargo projects. Version 1.6.0 via Homebrew; verified from local package data. Also installable with nix: nix profile install nixpkgs#cargo-depgraph.

install

Additional install commands

macOS

Homebrewverified · 100%
brew install cargo-depgraph

local Homebrew formula metadata

Linux

Nixverified · 92%
nix profile install nixpkgs#cargo-depgraph

nixpkgs package indexes · pkgs/by-name/ca/cargo-depgraph/package.nix · source: api.github.com

Arch Linux pacmanverified · 92%
sudo pacman -S cargo-depgraph

Arch Linux sync databases · cargo-depgraph · source: geo.mirror.pkgbuild.com

overview

Package summary

Creates dependency graphs for cargo projects

Commands and aliases

  • cargo-depgraph

history

Project history and usage

cargo-depgraph is a Cargo subcommand for turning a Rust package's Cargo metadata into Graphviz dependency graphs. It fills the small but durable need to see feature, target, dev, build, optional, and transitive dependency structure as an image or DOT graph.

Project history

The crate was published on crates.io in July 2020 with the description that it creates dependency graphs for Cargo projects using cargo metadata and Graphviz. Its official repository metadata has since appeared under jplatte's Codeberg account, while crates.io still records the older SourceHut repository URL, suggesting a repository-hosting move rather than a change in purpose.

The README's examples focus on piping `cargo depgraph` into Graphviz's `dot`, and the documented output legend shows the project grew around Cargo-specific semantics rather than generic graph rendering.

Adoption history

Adoption is niche but broad enough for distribution packaging: the supplied package-manager facts list Homebrew, Nix, and Arch Linux packages, and crates.io records tens of thousands of downloads. That puts cargo-depgraph in the class of Rust ecosystem utilities that are not core workflow tools, but are useful enough to be packaged by Unix-oriented distributions.

How it is used

Users run `cargo depgraph [options] | dot -Tpng > graph.png` from a Cargo project, with Graphviz installed locally or another DOT renderer available. Common options include `--all-deps` and `--all-deps --dedup-transitive-deps` for fuller dependency views.

Why package nerds care

Package nerds care about cargo-depgraph because it exposes Cargo resolver state visually: optional dependencies, target-specific dependencies, build dependencies, dev dependencies, and transitive optional edges become inspectable without hand-reading `Cargo.lock` and `Cargo.toml` trees.

It is also a good example of the Rust community's habit of building small Cargo subcommands around `cargo metadata`, then letting traditional Unix tools such as Graphviz handle the final representation.

Timeline

  • 2020: cargo-depgraph crate first published on crates.io.
  • 2023: crates.io metadata for cargo-depgraph last updated at version 1.6.0.
  • 2026: Codeberg repository metadata lists jplatte/cargo-depgraph as an active repository.

Related projects

  • Cargo metadata is the data source that lets cargo-depgraph inspect Rust package graphs.
  • Graphviz is the rendering toolchain used by the README examples.
  • Other Cargo inspection tools, such as cargo tree, overlap in dependency exploration but present the graph as text rather than DOT output.

security posture

Risk level: green

narrow executable package without higher-risk signals.

Risk classifier

green risk · low confidence · appliance

Why

  • narrow executable package without higher-risk signals

Signals

  • metadata:no-higher-risk-signals

Install behavior

  • No Homebrew bottle metadata was recorded.

Recommended review

Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.

executables

Installed executables

CommandKindExposureNote
cargo-depgraphexecutableindexed executableDiscovered from the local executable index.

freshness

Version and freshness

These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.

page generated2026-08-03
manager version1.6.0
manager updated
local dataunknown
upstreamnot available
latest detectednot detected
  • okNo freshness warnings were generated.

install metadata

Package metadata

Package keybrew:cargo-depgraph
Version1.6.0
Package managerHomebrew
Homepagehttps://sr.ht/~jplatte/cargo-depgraph/
Bottlenot recorded
Servicenone declared

source database matches

Other package-manager records

Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.

Nix95%

cargo-depgraph

nix profile install nixpkgs#cargo-depgraph
  • normalized package name match
  • Matched by: Cargo Depgraph
nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/ca/cargo-depgraph/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
pacman95%

cargo-depgraph 1.6.0-3

Creates dependency graphs for cargo projects using cargo metadata and graphviz

https://github.com/jplatte/cargo-depgraph

sudo pacman -S cargo-depgraph
  • License: GPL-3.0-or-later
  • Architecture: x86_64
  • 3 dependencies
  • normalized package name match
  • Matched by: Cargo Depgraph
Arch Linux sync databases · geo.mirror.pkgbuild.com · Arch Linux sync databases: cargo-depgraph from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz

source trail

Generated from repository data

This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.

Used sources

  • Geiger risk classifier
  • cross-ecosystem install command graph
  • curated package history
  • external package-manager database matches
  • pkg.so package database
  • pkgdb category and tag curation