security-rust 2.1.1

A pure Rust attack detection library with 32 detectors across 4 categories — injection, protocol, data, and file — plus stateful session, throttling, and risk scoring. Zero framework dependencies.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31

# Copyright (c) 2026 erik <erik@erik.xyz> — https://erik.xyz

[package]
name = "security-rust"
version = "2.1.1"
edition = "2024"
rust-version = "1.87"
description = "A pure Rust attack detection library with 32 detectors across 4 categories — injection, protocol, data, and file — plus stateful session, throttling, and risk scoring. Zero framework dependencies."
license = "MIT"
repository = "https://github.com/erikwang2013/security-rust"
authors = ["erik <erik@erik.xyz>"]
keywords = ["security", "security-rust", "xss", "sql-injection", "waf"]
categories = ["security", "parsing"]
# 随包只发「读代码 / 用库」要用的东西。`docs/pet.svg` 不能排 —— src/pet.rs 用
# include_str! 内联它，排掉就编译不过（cargo package 会当场报错，不会静默漏发）。
exclude = [
    "CLAUDE.md",         # 仓库的 agent 配置，与使用者无关
    "docs/coin",         # 打赏码原图 ~1.2MB
    "docs/i18n",         # 12 语言文档 ~2.1MB，仓库内有效、包内无引用
    "docs/superpowers",  # 设计与计划留档（流程产物）
]

[dependencies]
regex = "1"

[dev-dependencies]
# 只给 examples/ 用。本 crate 的零依赖承诺针对 [dependencies] ——
# 运行时依赖永远只有 regex。
axum = "0.8"
tokio = { version = "1", features = ["macros", "rt"] }
tower = { version = "0.5", features = ["util"] }