# Dependency audit
This crate receives reusable credentials and is security-critical. Its direct
dependencies are exact-version pinned:
- `age 0.12.1` provides passphrase-based authenticated encryption and the
secret-string boundary.
- `serde 1.0.229` and `serde_json 1.0.151` encode the small versioned plaintext
payload before encryption.
- `uuid 1.24.0` supplies unpredictable names for same-directory temporary
files used during atomic replacement.
- `zeroize 1.9.0` clears plaintext buffers and stored credential values on
replacement, removal, error paths, and drop.
The crate performs no network operations. Consumers must pin and inspect the
complete resolved dependency graph before adopting or upgrading it.