On: I've compared nearly all Rust crates.io crates to ...

[pornel]

I'd use popularity (how many people are using the crate indirectly) divided by trust level in the publisher of the crate.

However, publishing a list that basically says "these are the least trustworthy Rust users" would cause quite a stir, so I'm not doing that.