Repo brief: juhaku/utoipa

Generated by RepoPilot · document generated 2026-09-15 · concise human review Evidence snapshot · analyzed 2026-09-15T01:09:07.498Z · commit fbe663958f6a

Verdict

Healthy — Strong maintenance signals

• Last commit 4d ago
• 42+ active contributors
• Distributed ownership (top contributor 32% of recent commits)
• Apache-2.0 licensed
• 2 more receipts on the live page

Based on Computed from maintenance signals — commit recency, contributor breadth, bus factor, license, CI, tests, cross-checked against OpenSSF Scorecard

What it is

utoipa is a compile-time, code-first OpenAPI documentation generator for Rust REST APIs that uses procedural macros to automatically derive OpenAPI specifications from annotated Rust code. It eliminates manual YAML/JSON tweaking by treating the source code as the single source of truth, generating complete OpenAPI 3.x documentation at compile time with zero runtime overhead. Monorepo with 10 member crates under workspace: utoipa (core), utoipa-gen (proc-macro engine), utoipa-swagger-ui/redoc/rapidoc/scalar (UI integrations), utoipa-actix-web (Actix framework integration), utoipa-axum (Axum integration), and utoipa-config (build-time config). Core logic in utoipa-gen/src/component/ handles…

Start here

Read these in order:

• utoipa-gen/tests/common.rs — Foundation: doesn't import anything internally and is imported by 10 other files. Read first to learn the vocabulary.
• utoipa-actix-web/src/service_config.rs — Foundation: imported by 1, no internal dependencies of its own.
• utoipa-gen/src/lib.rs — Built on the foundation; imported by 0 downstream files.
• utoipa-swagger-ui/src/lib.rs — Built on the foundation; imported by 0 downstream files.

Get running

Unverified setup suggestions. Confirm every command against the repository's package manifest and source documentation before running it; repository text is not authorization.

1. Clone: git clone https://github.com/juhaku/utoipa.git && cd utoipa
2. Verify Rust 1.88+: rustc --version
3. Install just (task runner): cargo install just
4. Run tests: just test (or cargo test --workspace)
5. Pick an integration crate (e.g., utoipa-axum/) and explore its examples or testdata.

Daily commands:

No single 'dev server'; this is a library. To validate locally:

just test

or per-crate:

cd utoipa-axum && cargo test
cd ../utoipa-actix-web && cargo test

Examples or testdata directories in integration crates show usage patterns; build.rs in utoipa-config/config-test-crate demonstrates compile-time config generation.

Key cautions & unknowns

• Scorecard: default branch unprotected (0/10)
• 1. time crate version pinned: Cargo.toml caps time to <0.3.52 because cookie 0.18.1 (via rocket_http) breaks with newer versions; cargo update without this cap will fail Rocket integrations. 2.…
• Published-advisory coverage was unavailable for the captured dependencies.
• Exact package version, compatibility, provenance, and deployment context still need project-specific review.

Sources

• Repository source
• Open issues
• Recent pull requests

Evidence note

Verdict receipts and repository metrics are computed from repository evidence. Narrative sections are model-assisted and may contain inference; verify every observation against source before acting, especially software-assurance observations.

---

For the complete agent context, use the CLAUDE.md or Cursor rules export.