V OpenVet
Packages Docs Blog Sign in
cargo / moka

moka

cargo

A fast and concurrent cache library inspired by Java Caffeine

1 audit github.com/moka-rs/moka

Audits

PE Patrick Elsen 2026-05-28

moka@0.12.15 · 1 finding

moka 0.12.15 is a W-TinyLFU concurrent cache with sync and async variants; 141 unsafe sites span an intrusive LRU deque, a custom MiniArc, and a lock-free epoch-reclaimed hash table. One low-severity correctness finding: the is_dirty dirty-entry check reads two atomics with Relaxed ordering before an Acquire fence, imprecisely ordering the loads. No I/O, no FFI, no build-time execution.

algorithm-impl-boundsalgorithm-impl-correctalgorithm-impl-safealgorithm-impl-testedconcurrency-documentedconcurrency-impl-correctconcurrency-impl-documentedconcurrency-impl-safeconcurrency-impl-testedconcurrency-safedatastructure-impl-boundsdatastructure-impl-correctdatastructure-impl-safedatastructure-impl-testedhas-binarieshas-build-exechas-fuzz-testshas-install-exechas-integration-testshas-property-testshas-unit-testsimpl-algorithmimpl-concurrencyimpl-cryptoimpl-datastructureimpl-interpreterimpl-jitimpl-parserimpl-protocolis-benignunsafe-documentedunsafe-minimalunsafe-safeunsafe-testeduses-concurrencyuses-cryptouses-environmentuses-execuses-filesystemuses-interpreteruses-jituses-networkuses-unsafe

Package facts

Registry
cargo
Repository
github.com/moka-rs/moka
V openvet · supply-chain audits · open source
CLI Source