Remade with Rust
Deputy: personally owned dependency vault
A personally-owned dependency vault — offline archive, SHA-256 verification, malware scanning, gated deploy
Replaces: Dependabot / Snyk / cargo-vet (partial)
What is Deputy, the personally owned dependency vault?
Deputy is a personally owned dependency vault. It keeps an offline archive, checks SHA-256, scans for malware, and gates deploy. It covers part of what Dependabot, Snyk, and cargo-vet do.
What Deputy replaces
Deputy is a personally owned dependency vault. The archive is offline, every file is checked with SHA-256, malware scanning runs, and deploy stays gated.
Why Deputy is a personally owned dependency vault
What Deputy keeps from Dependabot / Snyk / cargo-vet (partial)
Deputy keeps the review of what a Rust build is allowed to fetch. Dependabot, Snyk, and cargo-vet are the partial overlap. The vault itself stays with the person who owns the machine.
Where Deputy fits
Deputy is the supply-chain crate beside Sovereign ID and mID. Identity says who signed. Deputy says which crate bytes are allowed to build.
Read more about Deputy
- All Remade with Rust rebuilds
- Freedom Guide
- Vision
- Sovereign ID — self-issued web identity
- mID — server-side Sovereign ID verifier
- Learn article on Deputy
- Deputy on GitHub