FOSSA supports Rust codebases through Cargo.

When Rust code is imported, FOSSA will inspect any cargo.toml or cargo.lock files and download their dependencies for analysis.

Known Limitations:

• Optional dependencies are currently handled like Java optional dependencies, when they should be enabled/disabled based on features
• FOSSA does not currently understand default/missing features aren't supported
• FOSSA does not handle path dependencies that point above your repo root

Provided Builds currently does not have support for Cargo builds.

1. Comment on this GitHub issue to receive updates on fossa-cli support for Python.

2. View our docs on adding a new language integration yourself!

Currently, FOSSA supports only public packages on the Cargo registry.

Cargo packages are downloaded and extracted for full code auditing; metadata from the registry and cargo.toml manifest are parsed and extracted.