Dependencies

All third-party dependencies used by symtrace are strictly pinned to exact versions (=x.y.z) in Cargo.toml.

Core Engine Dependencies (v0.5.0)

Crate	Version	Role / Purpose
`clap`	`=4.5.60`	CLI argument parsing, positional defaults, flags, subcommands
`ratatui`	`=0.29.0`	TUI framework for interactive terminal diff inspector (`symtrace tui`)
`crossterm`	`=0.28.1`	Cross-platform terminal manipulation and keyboard input handling
`git2`	`=0.19.0`	In-process `libgit2` bindings for Git repository, commit, and diff access
`tree-sitter`	`=0.25.10`	Parser framework for AST construction and `.scm` query evaluation
`tree-sitter-rust`	`=0.24.0`	Rust 2021 & 2024 language grammar
`tree-sitter-javascript`	`=0.25.0`	JavaScript language grammar
`tree-sitter-typescript`	`=0.23.2`	TypeScript / TSX language grammar
`tree-sitter-python`	`=0.25.0`	Python language grammar
`tree-sitter-java`	`=0.23.5`	Java language grammar
`tree-sitter-c`	`=0.23.4`	C language grammar
`tree-sitter-cpp`	`=0.23.4`	C++ language grammar
`tree-sitter-go`	`=0.23.4`	Go language grammar
`tree-sitter-c-sharp`	`=0.23.1`	C# language grammar
`tree-sitter-ruby`	`=0.23.1`	Ruby language grammar
`tree-sitter-php`	`=0.23.2`	PHP language grammar
`tree-sitter-json`	`=0.24.8`	JSON language grammar
`blake3`	`=1.8.3`	SIMD-optimized BLAKE3 hashing for 4-hash node fingerprints
`serde` / `serde_json`	`=1.0.228` / `=1.0.149`	Serde JSON serialization for machine-readable `--format json` reports
`bincode`	`=1.3.3`	Bounded binary serialization for disk AST caching
`rayon`	`=1.11.0`	Multi-threaded parallel file parsing and global tree diffing
`lru`	`=0.12.5`	In-memory LRU AST tree cache (500 capacity)
`bumpalo`	`=3.20.2`	Arena allocator for zero-overhead AST tree node construction
`globset`	`=0.4.15`	Fast glob pattern compilation for `--path` filtering
`toml`	`=0.8.23`	TOML parser for `.symtracerc` / `symtrace.toml` config loader
`colored`	`=2.2.0`	ANSI terminal styling
`anyhow`	`=1.0.102`	Structured error handling
`proptest`	`=1.5.0`	(dev-dependency) Property-based testing framework

Supply Chain Policy

Exact Version Locking - Prevents unexpected upstream updates during builds.
Automated Verification (cargo-deny) - Enforces open-source license allowlists and scans for security vulnerabilities.
Offline Runtime Execution - Zero dependencies make network calls at runtime.