I'd use popularity (how many people are using the crate indirectly) divided by trust level in the publisher of the crate. However, publishing a list that basic

I'd use popularity (how many people are using the crate indirectly) divided by trust level in the publisher of the crate. However, publishing a list that basically says "these are the least trustworthy Rust users" would cause quite a stir, so I'm not doing that.