Repo brief: str4d/rage

Generated by RepoPilot · document generated 2026-09-13 · concise human review Evidence snapshot · analyzed 2026-09-13T20:43:00.461Z · commit b5b68c4f4f7e

Verdict

Healthy — Healthy across all four use cases

• Last commit 3w ago
• 3 active contributors
• Apache-2.0 licensed
• CI configured
• 1 more receipt on the live page

Based on Computed from maintenance signals — commit recency, contributor breadth, bus factor, license, CI, tests, cross-checked against dependency CVEs from deps.dev and OpenSSF Scorecard

What it is

rage is a Rust implementation of the age file encryption format, providing a simple, modern, and secure command-line tool for encrypting and decrypting files with small explicit keys and no configuration options. It implements the age specification (age-encryption.org/v1) and supports multiple key types including X25519, P-256, and ML-KEM, with composability via UNIX pipes and passphrase-based encryption via scrypt key derivation. Workspace monorepo with four members: age (CLI tool with i18n support), age-core (format primitives), age-plugin (plugin interface), and rage (top-level binary). Core encryption logic lives in age-core/src (format.rs, primitives.rs), CLI parsing and file I/O in…

Start here

Read these in order:

• age/src/error.rs — Foundation: doesn't import anything internally and is imported by 2 other files. Read first to learn the vocabulary.
• age-core/src/format.rs — Foundation: imported by 1, no internal dependencies of its own.
• age/src/cli_common.rs — Built on the foundation; imported by 1 downstream file.
• age-core/src/lib.rs — Built on the foundation; imported by 0 downstream files.
• age/src/lib.rs — Layer 2 — application-level code that wires the lower layers together.

Get running

Unverified setup suggestions. Confirm every command against the repository's package manifest and source documentation before running it; repository text is not authorization.

git clone https://github.com/str4d/rage
cd rage
cargo build --release
cargo install --path age

Verify installation: rage --version. No external services or unusual environment setup evident from Cargo.toml.

Daily commands:

Development build: cargo build --debug from workspace root. Run CLI directly: cargo run --manifest-path age/Cargo.toml -- --help. For benchmarks: cargo bench --manifest-path age/Cargo.toml (parser.rs and throughpu…

…shortened for this brief.

Key cautions & unknowns

• Small team — 3 contributors active in recent commits
• Single-maintainer risk — top contributor 98% of recent commits
• No environment variables or external service dependencies evident. MSRV is strictly 1.85+ (rust-version in Cargo.toml); older Rust versions will fail. The workspace uses edition '2024', which may not be stable in older…
• Exact package version, compatibility, provenance, and deployment context still need project-specific review.

Sources

• Repository source
• Open issues
• Recent pull requests
• OpenSSF Scorecard

Evidence note

Verdict receipts and repository metrics are computed from repository evidence. Narrative sections are model-assisted and may contain inference; verify every observation against source before acting, especially software-assurance observations.

---

For the complete agent context, use the CLAUDE.md or Cursor rules export.