Is proc-macro2 safe to use?

proc-macro2 has no known vulnerabilities on the latest version (1.0.106). DepScope rates its health at 83/100 (low risk).

What is the latest version of proc-macro2?

The latest version of proc-macro2 is 1.0.106, released 2026-01-21.

Does proc-macro2 have known vulnerabilities?

No known vulnerabilities on the latest version of proc-macro2.

Is proc-macro2 deprecated?

No, proc-macro2 is actively maintained. Latest release: 1.0.106 (2026-01-21).

What are alternatives to proc-macro2?

Popular alternatives to proc-macro2 in Cargo include: hashbrown, getrandom, windows-sys, syn, rand_core.

What license does proc-macro2 use?

proc-macro2 is licensed under MIT OR Apache-2.0.

proc-macro2

cargov1.0.106

A substitute implementation of the compiler's `proc_macro` API to decouple token-based libraries from the procedural macro use case.

License MIT OR Apache-2.0permissive162 versions0 deps227,454,924 weekly dl

dtolnay/proc-macro2

/ 100

Health

safe to use

[email protected] is safe to use (health: 83/100)

Health breakdown0 – 100

20/25

maintenance

20/20

popularity

25/25

security

15/15

maturity

3/15

community

0/15

popularity_floor

Vulnerabilities

none known

OSS Scorecard

OpenSSF security posture score

5.5/10

moderate

Maintainer trust

Active maintainers (3m)

1

Contributors (12m)

2

Primary author dominance

99%

GitHub stars

916

single active maintainer 3msingle author dominance

Quality signals

OSS Criticality

0.78critical

Download trend

stable(+2.5%)

Health History

Dependency Tree

License Audit

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/cargo/proc-macro2