One canonical STIX 2.1 parse: a pure-Rust core for patterns, objects, and bundles, with Python, Java, and TypeScript bindings all producing the same result — where hand-rolled implementations diverge. Patterns now lower to a three-address intermediate representation that renders back to canonical text without loss, the foundation for structural editing and IR-driven matching.
![The STIX pattern [file:hashes.'SHA-256' = 'e3b0…'] parses into one comparison tree, and Python, Java and TypeScript each show the same tree.](/posts/stix-rust/cover-still.svg)
stix-rust
One canonical STIX 2.1 parse: a pure-Rust core for patterns, objects, and bundles, with Python, Java, and TypeScript bindings all producing the same result — where hand-rolled implementations diverge. Patterns now lower to a three-address intermediate representation that renders back to canonical text without loss, the foundation for structural editing and IR-driven matching.
Published Project 2026 – present
- Related
- stix-meta-explorer