CPE is used at run time in 5 crates. It is a direct run-time dependency in 1 crate.

Depender (with downloads and own rev deps) CPE version
120 2 csaf ^0.1.2