in-toto is used at run time in 2 crates.

Depender (with downloads and own rev deps) in-toto version
130 rebuilderd-worker ^0.3
120 sh4d0wup ^0.3.0