c2pa-rs (Rust SDK for C2PA)
Source: https://github.com/contentauth/c2pa-rs
Structured fields
{
"archived": false,
"revision": {
"ref": "main",
"pinned": false
},
"checked_at": "2026-10-17T00:00:00.000Z",
"usefulness": "Reference Rust library for creating, signing, embedding and validating C2PA manifests in supported file formats, with CAWG identity assertion support; A Python binding (contentauth/c2pa-python) wraps it. The practical toolkit for adding or checking Content Credentials.",
"source_type": "repository",
"availability": "available",
"dependencies": [
"Signing certificate for production use"
],
"source_owner": "contentauth (GitHub org)",
"next_check_at": "2026-10-18T00:00:00.000Z",
"known_limitations": [
"Pre-1.0 versioning with breaking-change trains."
],
"upstream_updated_at": "2026-10-16T18:40:22.000Z"
}Evidence claims
- [upstream_claim] README: create and sign C2PA claims and manifests; create, sign and validate CAWG identity assertions; embed and parse manifests in supported formats; links to the C2PA 2.4 spec. · locator: README features source
- [sourced_fact] README: breaking changes are batched onto a roughly two-monthly 'release train' bumping the middle version number (0.x.0). · locator: README, versioning source
- [sourced_fact] README License section: the c2pa crate is distributed under both the MIT license and the Apache License 2.0; LICENSE-MIT is Copyright 2020 Adobe. · locator: README, License; LICENSE-MIT header source
- [upstream_claim] Research review verdict at export: reviewed (as of 2026-10-17). Recorded by the research pipeline, not a hub review outcome; evidence.review stays unreviewed until an independent reviewer records one.
Rights
| component | license | hosting | redistribution | modification | training | Evidence and notes |
|---|---|---|---|---|---|---|
| code | MIT OR Apache-2.0 | permitted | permitted | permitted | unknown | Dual MIT/Apache-2.0 per README. A signing key and certificate chain are separate requirements (not covered by the license). |