V OpenVet
Packages Docs Blog Sign in
cargo / tracing-subscriber

tracing-subscriber

cargo

Utilities for implementing and composing `tracing` subscribers.

1 audit github.com/tokio-rs/tracing

Audits

PE Patrick Elsen 2026-05-28

tracing-subscriber@0.3.23 · 1 finding

tracing-subscriber 0.3.23 implements the Layer composition API, span Registry (sharded slab), EnvFilter directive parser, and fmt output layers for the tracing ecosystem. All 25 unsafe blocks implement downcast_raw with documented invariants; no pointers are dereferenced beyond type-checked reference casts. One low-severity quality finding: regex field-value matching in EnvFilter is enabled by default, presenting a ReDoS surface if filter strings come from untrusted inputs.

concurrency-documentedconcurrency-safeenvironment-safehas-binarieshas-build-exechas-fuzz-testshas-install-exechas-integration-testshas-property-testshas-unit-testsimpl-algorithmimpl-concurrencyimpl-cryptoimpl-datastructureimpl-interpreterimpl-jitimpl-parserimpl-protocolis-benignparser-impl-correctparser-impl-safeparser-impl-testedunsafe-documentedunsafe-minimalunsafe-safeunsafe-testeduses-concurrencyuses-cryptouses-environmentuses-execuses-filesystemuses-interpreteruses-jituses-networkuses-unsafe

Package facts

Registry
cargo
Repository
github.com/tokio-rs/tracing
Homepage
tokio.rs
V openvet · supply-chain audits · open source
CLI Source