in-toto is used at run time in 2 crates.

Depender (with downloads and own rev deps) in-toto version
1.8K rebuilderd-worker ^0.4
130 sh4d0wup ^0.4