Rust Code Raider

Rust Code Raider analyzes Rust projects to identify unsafe usage, dependency risk, and licensing concerns. It ingests a crate or repository and produces a structured risk report. The analysis covers source code and Cargo.lock data, enabling reproducible results for security reviews and CI checks. The tool targets security engineers, developers, and audit teams who need actionable insights without manual code reviews.
Conceptually, it parses Rust source into an AST, flags unsafe blocks, raw pointers, and FFI usage, then cross-references dependencies against advisories and licenses. It computes a composite risk score and highlights file paths and locations that require remediation. Outputs include machine-readable JSON and optional human-friendly summaries for governance discussions.
Unique differentiators include incremental analysis to refresh only changed files, configurable rule sets, offline operation, and flexible export options for integration with existing pipelines. It emphasizes reproducibility, producing deterministic results given the same inputs and rules. It supports SPDX license checks and crates.io advisory data to help teams prioritize fixes and license remediation.
Common use cases include CI checks for new pull requests, security audits of critical services, and licensing compliance validation for open source components. Users gain faster triage of issues, clearer remediation guidance, and a standard report format that can feed ticketing systems or risk dashboards. Designed to scale from small crates to large workspace projects, it fits as a lightweight, headless analysis step in modern Rust workflows.