View packages at a commit

Paste a `locked_commit` from your `minimal.toml`, or a recent commit from the list.

Back to search results
charon-ml owner avatar

charon-ml

Version: 0.1.281

Analyze Rust crates without touching compiler internals

Install package

min add charon-ml
Datacompilerformal-methodsformal-verification

OpenSSF Score

OpenSSF Scorecard — charon-ml

Scored 0–10, as OpenSSF Scorecard reports them.N/A: not applicable or inconclusive.

Binary-Artifacts

No binaries found in the repo

10
Branch-Protection

Branch protection is not maximal on development and all release branches

3
CI-Tests

4 out of 4 merged PRs checked by a CI test -- score normalized to 10

10
CII-Best-Practices

No effort to earn an OpenSSF best practices badge detected

0
Code-Review

Found 0/4 approved changesets -- score normalized to 0

0
Contributors

Project has 26 contributing companies or organizations

10
Dangerous-Workflow

No dangerous workflow patterns detected

10
Dependency-Update-Tool

No update tool detected

0
Fuzzing

Project is not fuzzed

0
License

License file detected

10
Maintained

30 commit(s) and 17 issue activity found in the last 90 days -- score normalized to 10

10
Packaging

Packaging workflow not detected

N/A
Pinned-Dependencies

Dependency not pinned by hash detected -- score normalized to 0

0
SAST

SAST tool is not run on all commits -- score normalized to 0

0
Security-Policy

Security policy file not detected

0
Signed-Releases

Project has not signed or included provenance with any releases.

0
Token-Permissions

Detected GitHub workflow tokens with excessive permissions

0
Vulnerabilities

22 existing vulnerabilities detected

0

Scored by Minimal's own OpenSSF Scorecard run.

AeneasVerif/charonscanned

Last scored on

What is "charon-ml"?

Analyze Rust crates without touching compiler internals

How to use this package

Quick install

Installs the package into the current environment for this session. Use --build or --runtime to persist it as a build-time or runtime dependency.

min add charon-ml

Declare as a task dependency in minimal.toml

Listing the package under tasks.<name>.packages makes it available inside that task’s sandbox.

[tasks.dev]
packages = ["charon-ml"]

Build-time vs runtime

Choose build-time for tools needed during compilation, runtime for dynamic libraries loaded at runtime.

min add --build charon-ml
min add --runtime charon-ml
Compare versions
to

Dependencies (13)

Dependencies
NameVersionKind
base—build
dune3.24.2build
logs0.10.0build + runtime
menhir20240715build + runtime
ocaml5.5.1build + runtime
ocamlfind1.9.8build
ppx_deriving6.1.3build + runtime
ppxlib0.38.0build
toolchain—build
unionfind20220122build + runtime
visitors20251114build + runtime
yojson3.0.0build + runtime
zarith1.14build + runtime

Dependants (1)

Dependants
NameVersion
aeneas20261008
  1. charon-ml v0.1.28143e9ed2
    Diff
    Lines:+8 / -8Deps:13(+1 / -1)
    Released:
  2. charon-ml v0.1.223b12c91c
    Diff
    Lines:+98Deps:13(+13)
    Released:

No direct advisories

This package inherits 12 transitive advisories from its dependencies.

Build provenance

Loading provenance

For the signed record of what the build used, see the Provenance tab.

Software Bill of Materials — every package this build depends on
PackagesVersion
charon-mlROOT0.1.281
acl2.4.0
attr2.6.0
bash5.3
bash-bootstrap5.3
binutils2.47
bison3.8.2
bzip21.0.8
coreutils9.12
cppo1.6.9
diffutils3.12
dune3.24.2
expat2.8.5
file5.48
findutils4.11.0
flex2.6.4
gawk5.4.1
gawk-bootstrap5.4.1
gcc15.2.0
gdbm1.26
glibc2.44
gmp6.3.0
grep3.12
gzip1.15
libcap2.78
libffi3.8.0
linux_headers6.12.43
logs0.10.0
lz41.10.0
m41.4.21
make4.4.1
menhir20240715
mpc1.4.1
mpfr4.2.2
ncurses6.6
ocaml5.5.1
ocaml-compiler-libs0.17.0
ocamlfind1.9.8
openssl3.6.5
patch2.8
pcre210.49
perl5.44.0
pkgconf3.0.5
ppx_derivers1.2.1
ppx_deriving6.1.3
ppxlib0.38.0
python3.14.8
readline8.3
result1.5
sed4.10
seq0.3.1
sexplib00.17.0
sqlite3.53.4
stdlib-shims0.3.0
tar1.35
tzdata2026e
unionfind20220122
util-linux2.42.4
visitors20251114
xz5.8.4
yojson3.0.0
zarith1.14
zlib1.3.2
zstd1.5.7

Join the waitlist

Confirm your identity by email or GitHub.

or