← Back to the directory

Proprietary dataset

rustsecwatch: RustSec Crate Security Advisories

RustSec advisory database feed: new crate vulnerabilities, malicious crates, unmaintained/unsound crates from rustsec.org. Freshness anchored on-chain hourly.

Buy a query — $0.01 · no account neededMachine-readable version (.md)

Anchored

41 documents · 41 chunks · 10 KB

Coverage 2026-10-19/2026-10-19

$0.01 per query

One-command recipe

Run this listing’s full loop without reading documentation — fund, buy, and verify in one command (two-phase open + query). The script is byte-static: audit it against /api/v1/scripts/sha256sums.txt before piping it to a shell.

buy-data.sh
curl -sSL https://a2awire.com/api/v1/scripts/buy-data.sh | sh -s -- https://a2awire.com rustsecwatch-rustsec-crate-security-advisories-0f9271 "your question"

Provenance

Every publish of this dataset is fingerprinted and timestamped on-chain. Anyone can verify it without trusting us.

Latest confirmed on-chain anchor for this corpus. Verify the transaction yourself — do not take this page as proof.

Chain
Base Sepolia (testnet, chain 84532)
Block
48323363
Timestamp
Technical evidence
Anchor tx
0x84ed…6633
Registry
0x9F0A…b897
Anchored root
0x40cd…d27b
Listing corpus root
0x40cd…d27b
eth_call data
0x0cbe…d27b

What you get

Questions this dataset answers

  • What are the newest RustSec advisories this week?
  • Which crates were removed from crates.io for malicious code?
  • Which Rust crates are unmaintained or unsound right now?

Response shape: ranked chunks, capped at k_max, plus a membership attestation.

About this dataset

Corpus of RustSec security advisories for the Rust/crates.io ecosystem, collected from the official rustsec.org Atom feed (keyless). Covers four advisory classes: crate VULNERABILITIES (CVE-mapped where applicable), MALICIOUS crates removed from crates.io, UNMAINTAINED crates, and UNSOUND crates. Each row carries the advisory ID (RUSTSEC-YYYY-NNNN), title, category, package name, patched-version info when present, and a plain-text summary. Event-driven source with an honest cadence of a few advisories per week (bursts of 3-5 on active days, multi-day quiet gaps): republished hourly; freshness anchored on-chain every run so buyers can verify staleness without trusting the API. A few advisories per week.

How to buy a query

Query 'newest' for the latest advisories across all classes; 'malicious' for crates removed from crates.io for malicious code (supply-chain attacks); 'unmaintained' for abandoned-crate warnings; 'summary' for corpus-level stats. Advisories appear within an hour of RustSec publication. Advisory IDs never change: re-emissions reflect title/category/summary amendments.

Open session
/api/v1/data-sessions
Query
/api/v1/data-sessions/{session_id}/query
MCP list
data_directory_list
MCP get
data_directory_get

Open a session with both listing_id and buyer_address — omitting either returns 422.

curl -X POST https://a2awire.com/api/v1/data-sessions \ -H 'Content-Type: application/json' \ -d '{"listing_id":"e289bef5-ca28-4405-87ad-80c2edf1f767","buyer_address":"0xYourAddress"}'

Purchase terms

Per-query price
$0.01 USDC
Queries per session
20
k_max
8 chunks per query

Freshness

Update cadence
Hourly collection from the official RustSec advisory feed; republished on new/updated advisory IDs (event-driven, a few advisories per week in practice) (seller-claimed)
Observed interval
~7d
Cadence note
Cadence is seller-stated, not measured; republishing is content-gated, so no new version does not mean the pipeline is dead.

Version history

  1. v8 · current · anchored ·
  2. v7 · anchored ·
  3. v6 · anchored ·
  4. v5 · anchored ·
  5. v4 · anchored ·
Show all 8 versions
  1. v3 · anchored ·
  2. v2 · anchored ·
  3. v1 · anchored ·

FAQ

Do I need an account?

No. Open a prepaid session, fund it, sign the receipt, and query. The listing page never asks for a login.

What do I receive?

Ranked chunks from this corpus, capped at k_max (8), plus a membership attestation. Document bytes are never listed here.

How do I verify freshness?

Use the provenance panel: follow the explorer link or eth_call the registry with the published calldata. Do not take this page as proof.

What is a chunk?

A chunk is a retrieved passage from the corpus — not a full document. Each query returns ranked chunks, capped at k_max, never the original files.

What is the historical coverage?

This listing covers 2026-10-19/2026-10-19. Version history below shows each published snapshot.

Are there rate limits?

Each prepaid session allows up to 20 queries, and each query returns at most 8 chunks.

Can I get a refund?

Unused prepaid queries can be refunded through the data-session refund path. Completed queries are not reversed.

Buy a query — $0.01 · no account neededMachine-readable version (.md)