Dependencies

All third-party dependencies used by symtrace are strictly pinned to exact versions (=x.y.z) in Cargo.toml.

Core Engine Dependencies (v0.3.0)

Crate	Version	Role / Purpose
`clap`	`=4.5.60`	CLI argument parsing, positional defaults, flags, subcommands
`git2`	`=0.19.0`	In-process `libgit2` bindings for Git repository, commit, and diff access
`tree-sitter`	`=0.25.10`	Parser framework for AST construction
`tree-sitter-rust`	`=0.24.0`	Rust language grammar
`tree-sitter-javascript`	`=0.25.0`	JavaScript language grammar
`tree-sitter-typescript`	`=0.23.2`	TypeScript language grammar
`tree-sitter-python`	`=0.25.0`	Python language grammar
`tree-sitter-java`	`=0.23.5`	Java language grammar
`tree-sitter-c`	`=0.23.4`	C language grammar
`tree-sitter-cpp`	`=0.23.4`	C++ language grammar
`tree-sitter-go`	`=0.23.4`	Go language grammar
`tree-sitter-json`	`=0.24.8`	JSON language grammar
`blake3`	`=1.8.3`	SIMD-optimized BLAKE3 hashing for 4-hash node fingerprints
`serde` / `serde_json`	`=1.0.228` / `=1.0.149`	Serde JSON serialization for machine-readable `--json` reports
`bincode`	`=1.3.3`	Bounded binary serialization for disk AST caching
`rayon`	`=1.11.0`	Multi-threaded parallel file parsing and 5-phase tree diffing
`lru`	`=0.12.5`	In-memory LRU AST tree cache (500 capacity)
`bumpalo`	`=3.20.2`	Arena allocator for zero-overhead AST tree node construction
`globset`	`=0.4.15`	Fast glob pattern compilation for `--path` filtering
`toml`	`=0.8.23`	TOML parser for `.symtracerc` / `symtrace.toml` config loader
`colored`	`=2.2.0`	ANSI terminal styling
`anyhow`	`=1.0.102`	Structured error handling
`proptest`	`=1.5.0`	(dev-dependency) Property-based testing framework

Exact Version Locking — Prevents unexpected upstream updates during builds.
Automated Verification (cargo-deny) — Enforces open-source license allowlists and scans for security vulnerabilities.
Offline Runtime Execution — Zero dependencies make network calls at runtime.