supply-chain/audits.toml

   1
   2 # cargo-vet audits file
   3
   4 [[wildcard-audits.audio_thread_priority]]
   5 who = "Paul Adenot <paul@paul.cx>"
   6 criteria = "safe-to-deploy"
   7 user-id = 1258 # Paul Adenot (padenot)
   8 start = "2019-05-09"
   9 end = "2024-04-24"
  10 notes = """
  11 I've written most of this crate, the rest has been either written and in any
  12 case has been reviewed by Mozilla developers.
  13 """
  14
  15 [[wildcard-audits.authenticator]]
  16 who = "John M. Schanck <jschanck@mozilla.com>"
  17 criteria = "safe-to-deploy"
  18 user-id = 175410 # John Schanck (jschanck)
  19 start = "2022-11-15"
  20 end = "2024-04-26"
  21 notes = "Maintained by the CryptoEng team at Mozilla."
  22
  23 [[wildcard-audits.bhttp]]
  24 who = "Martin Thomson <mt@lowentropy.net>"
  25 criteria = "safe-to-deploy"
  26 user-id = 128763 # Martin Thomson (martinthomson)
  27 start = "2022-08-04"
  28 end = "2024-03-09"
  29 notes = "Though the code is safe to run and deploy, the code for processing HTTP/1.1 messages (the `read-http` feature, specifically) is not suited for deployment in real applications, either clients or servers.  Some features necessary for live deployment are not implemented, such as the proper handling of some types of response (e.g., a response to a HEAD request).  Software that processes HTTP/1.1 messages requires a large number of compatibility tweaks if it is to be deployed interoperably.  This feature only exists to support basic validation tools and is unlikely to be widely compatible."
  30
  31 [[wildcard-audits.cexpr]]
  32 who = "Emilio Cobos Álvarez <emilio@crisal.io>"
  33 criteria = "safe-to-deploy"
  34 user-id = 3788 # Emilio Cobos Álvarez (emilio)
  35 start = "2021-06-21"
  36 end = "2024-04-21"
  37 notes = "No unsafe code, rather straight-forward parser."
  38
  39 [[wildcard-audits.cocoa]]
  40 who = "Bobby Holley <bobbyholley@gmail.com>"
  41 criteria = "safe-to-deploy"
  42 user-id = 2396 # Josh Matthews (jdm)
  43 start = "2019-07-23"
  44 end = "2023-05-04"
  45 renew = false
  46 notes = "I've reviewed every source contribution that was neither authored nor reviewed by Mozilla."
  47
  48 [[wildcard-audits.cocoa]]
  49 who = "Bobby Holley <bobbyholley@gmail.com>"
  50 criteria = "safe-to-deploy"
  51 user-id = 5946 # Jeff Muizelaar (jrmuizel)
  52 start = "2022-11-01"
  53 end = "2023-05-04"
  54 renew = false
  55 notes = "I've reviewed every source contribution that was neither authored nor reviewed by Mozilla."
  56
  57 [[wildcard-audits.cocoa-foundation]]
  58 who = "Bobby Holley <bobbyholley@gmail.com>"
  59 criteria = "safe-to-deploy"
  60 user-id = 5946 # Jeff Muizelaar (jrmuizel)
  61 start = "2023-03-16"
  62 end = "2023-05-04"
  63 renew = false
  64 notes = "I've reviewed every source contribution that was neither authored nor reviewed by Mozilla."
  65
  66 [[wildcard-audits.cocoa-foundation]]
  67 who = "Bobby Holley <bobbyholley@gmail.com>"
  68 criteria = "safe-to-deploy"
  69 user-id = 2396 # Josh Matthews (jdm)
  70 start = "2020-07-20"
  71 end = "2023-05-04"
  72 renew = false
  73 notes = "I've reviewed every source contribution that was neither authored nor reviewed by Mozilla."
  74
  75 [[wildcard-audits.core-foundation]]
  76 who = "Bobby Holley <bobbyholley@gmail.com>"
  77 criteria = "safe-to-deploy"
  78 user-id = 2396 # Josh Matthews (jdm)
  79 start = "2019-11-12"
  80 end = "2023-05-04"
  81 renew = false
  82 notes = "I've reviewed every source contribution that was neither authored nor reviewed by Mozilla."
  83
  84 [[wildcard-audits.core-foundation]]
  85 who = "Bobby Holley <bobbyholley@gmail.com>"
  86 criteria = "safe-to-deploy"
  87 user-id = 5946 # Jeff Muizelaar (jrmuizel)
  88 start = "2019-03-29"
  89 end = "2023-05-04"
  90 renew = false
  91 notes = "I've reviewed every source contribution that was neither authored nor reviewed by Mozilla."
  92
  93 [[wildcard-audits.core-foundation-sys]]
  94 who = "Bobby Holley <bobbyholley@gmail.com>"
  95 criteria = "safe-to-deploy"
  96 user-id = 2396 # Josh Matthews (jdm)
  97 start = "2019-11-12"
  98 end = "2023-05-04"
  99 renew = false
 100 notes = "I've reviewed every source contribution that was neither authored nor reviewed by Mozilla."
 101
 102 [[wildcard-audits.core-foundation-sys]]
 103 who = "Bobby Holley <bobbyholley@gmail.com>"
 104 criteria = "safe-to-deploy"
 105 user-id = 5946 # Jeff Muizelaar (jrmuizel)
 106 start = "2020-10-14"
 107 end = "2023-05-04"
 108 renew = false
 109 notes = "I've reviewed every source contribution that was neither authored nor reviewed by Mozilla."
 110
 111 [[wildcard-audits.core-graphics]]
 112 who = "Bobby Holley <bobbyholley@gmail.com>"
 113 criteria = "safe-to-deploy"
 114 user-id = 2396 # Josh Matthews (jdm)
 115 start = "2019-10-28"
 116 end = "2023-05-04"
 117 renew = false
 118 notes = "I've reviewed every source contribution that was neither authored nor reviewed by Mozilla."
 119
 120 [[wildcard-audits.core-graphics]]
 121 who = "Bobby Holley <bobbyholley@gmail.com>"
 122 criteria = "safe-to-deploy"
 123 user-id = 5946 # Jeff Muizelaar (jrmuizel)
 124 start = "2020-12-08"
 125 end = "2023-05-04"
 126 renew = false
 127 notes = "I've reviewed every source contribution that was neither authored nor reviewed by Mozilla."
 128
 129 [[wildcard-audits.core-graphics-types]]
 130 who = "Bobby Holley <bobbyholley@gmail.com>"
 131 criteria = "safe-to-deploy"
 132 user-id = 2396 # Josh Matthews (jdm)
 133 start = "2020-07-20"
 134 end = "2023-05-04"
 135 renew = false
 136 notes = "I've reviewed every source contribution that was neither authored nor reviewed by Mozilla."
 137
 138 [[wildcard-audits.core-text]]
 139 who = "Bobby Holley <bobbyholley@gmail.com>"
 140 criteria = "safe-to-deploy"
 141 user-id = 2396 # Josh Matthews (jdm)
 142 start = "2019-03-29"
 143 end = "2023-05-04"
 144 renew = false
 145 notes = "I've reviewed every source contribution that was neither authored nor reviewed by Mozilla."
 146
 147 [[wildcard-audits.core-text]]
 148 who = "Bobby Holley <bobbyholley@gmail.com>"
 149 criteria = "safe-to-deploy"
 150 user-id = 5946 # Jeff Muizelaar (jrmuizel)
 151 start = "2021-02-14"
 152 end = "2023-05-04"
 153 renew = false
 154 notes = "I've reviewed every source contribution that was neither authored nor reviewed by Mozilla."
 155
 156 [[wildcard-audits.dogear]]
 157 who = "Bobby Holley <bobbyholley@gmail.com>"
 158 criteria = "safe-to-deploy"
 159 user-id = 27901 # Lina Butler (linabutler)
 160 start = "2019-03-04"
 161 end = "2024-05-05"
 162 notes = "Lina developed this crate as Mozilla staff."
 163
 164 [[wildcard-audits.encoding_rs]]
 165 who = "Henri Sivonen <hsivonen@hsivonen.fi>"
 166 criteria = "safe-to-deploy"
 167 user-id = 4484 # Henri Sivonen (hsivonen)
 168 start = "2019-02-26"
 169 end = "2024-08-28"
 170 notes = "I, Henri Sivonen, wrote encoding_rs for Gecko and have reviewed contributions by others. There are two caveats to the certification: 1) The crate does things that are documented to be UB but that do not appear to actually be UB due to integer types differing from the general rule; https://github.com/hsivonen/encoding_rs/issues/79 . 2) It would be prudent to re-review the code that reinterprets buffers of integers as SIMD vectors; see https://github.com/hsivonen/encoding_rs/issues/87 ."
 171
 172 [[wildcard-audits.etagere]]
 173 who = "Nicolas Silva <nical@fastmail.com>"
 174 criteria = "safe-to-deploy"
 175 user-id = 1281 # Nicolas Silva (nical)
 176 start = "2020-11-12"
 177 end = "2024-04-25"
 178 notes = "I am the author of this crate."
 179
 180 [[wildcard-audits.euclid]]
 181 who = "Nicolas Silva <nical@fastmail.com>"
 182 criteria = "safe-to-deploy"
 183 user-id = 1281 # Nicolas Silva (nical)
 184 start = "2019-03-14"
 185 end = "2024-04-25"
 186 notes = "I wrote most of the commits in the euclid reprository and review every change that is not produced by me."
 187
 188 [[wildcard-audits.freetype]]
 189 who = "Bobby Holley <bobbyholley@gmail.com>"
 190 criteria = "safe-to-deploy"
 191 user-id = 2396 # Josh Matthews (jdm)
 192 start = "2020-02-28"
 193 end = "2023-05-04"
 194 renew = false
 195 notes = "All code written or reviewed by Mozilla staff."
 196
 197 [[wildcard-audits.gleam]]
 198 who = "Bobby Holley <bobbyholley@gmail.com>"
 199 criteria = "safe-to-deploy"
 200 user-id = 2396 # Josh Matthews (jdm)
 201 start = "2019-03-18"
 202 end = "2023-05-04"
 203 renew = false
 204 notes = "All code written or reviewed by Mozilla."
 205
 206 [[wildcard-audits.gleam]]
 207 who = "Bobby Holley <bobbyholley@gmail.com>"
 208 criteria = "safe-to-deploy"
 209 user-id = 5946 # Jeff Muizelaar (jrmuizel)
 210 start = "2023-04-21"
 211 end = "2023-05-04"
 212 renew = false
 213 notes = "All code written or reviewed by Mozilla."
 214
 215 [[wildcard-audits.gleam]]
 216 who = "Bobby Holley <bobbyholley@gmail.com>"
 217 criteria = "safe-to-deploy"
 218 user-id = 1039
 219 start = "2019-03-01"
 220 end = "2023-05-04"
 221 renew = false
 222 notes = "All code written or reviewed by Mozilla."
 223
 224 [[wildcard-audits.glean]]
 225 who = "Chris H-C <chutten@mozilla.com>"
 226 criteria = "safe-to-deploy"
 227 user-id = 48 # Jan-Erik Rediger (badboy)
 228 start = "2020-11-10"
 229 end = "2025-02-12"
 230 notes = "The Glean SDKs are maintained by the Glean Team at Mozilla."
 231
 232 [[wildcard-audits.glean]]
 233 who = "Travis Long <tlong@mozilla.com>"
 234 criteria = "safe-to-deploy"
 235 user-id = 66068
 236 start = "2024-02-12"
 237 end = "2025-02-13"
 238
 239 [[wildcard-audits.glean-core]]
 240 who = "Chris H-C <chutten@mozilla.com>"
 241 criteria = "safe-to-deploy"
 242 user-id = 48 # Jan-Erik Rediger (badboy)
 243 start = "2019-09-24"
 244 end = "2025-02-12"
 245 notes = "The Glean SDKs are maintained by the Glean Team at Mozilla."
 246
 247 [[wildcard-audits.glean-core]]
 248 who = "Travis Long <tlong@mozilla.com>"
 249 criteria = "safe-to-deploy"
 250 user-id = 66068
 251 start = "2020-07-10"
 252 end = "2025-02-13"
 253
 254 [[wildcard-audits.glslopt]]
 255 who = "Jamie Nicol <jnicol@mozilla.com>"
 256 criteria = "safe-to-deploy"
 257 user-id = 84794 # Jamie Nicol (jamienicol)
 258 start = "2020-04-07"
 259 end = "2024-04-25"
 260
 261 [[wildcard-audits.io-surface]]
 262 who = "Bobby Holley <bobbyholley@gmail.com>"
 263 criteria = "safe-to-deploy"
 264 user-id = 2396 # Josh Matthews (jdm)
 265 start = "2019-07-23"
 266 end = "2023-05-04"
 267 renew = false
 268 notes = "I've reviewed every source contribution that was neither authored nor reviewed by Mozilla."
 269
 270 [[wildcard-audits.marionette]]
 271 who = "Henrik Skupin <mail@hskupin.info>"
 272 criteria = "safe-to-run"
 273 user-id = 22262
 274 start = "2020-11-03"
 275 end = "2024-03-31"
 276 notes = "Maintained by the DevTools team at Mozilla and has no unsafe code."
 277
 278 [[wildcard-audits.mozdevice]]
 279 who = "Henrik Skupin <mail@hskupin.info>"
 280 criteria = "safe-to-run"
 281 user-id = 22262
 282 start = "2020-11-03"
 283 end = "2024-03-31"
 284 notes = "Maintained by the DevTools team at Mozilla and has no unsafe code."
 285
 286 [[wildcard-audits.mozprofile]]
 287 who = "Henrik Skupin <mail@hskupin.info>"
 288 criteria = "safe-to-deploy"
 289 user-id = 22262
 290 start = "2020-11-03"
 291 end = "2024-03-31"
 292 notes = "Maintained by the DevTools team at Mozilla and has no unsafe code."
 293
 294 [[wildcard-audits.mozrunner]]
 295 who = "Henrik Skupin <mail@hskupin.info>"
 296 criteria = "safe-to-deploy"
 297 user-id = 22262
 298 start = "2020-11-03"
 299 end = "2024-03-31"
 300 notes = "Maintained by the DevTools team at Mozilla and has no unsafe code."
 301
 302 [[wildcard-audits.mozversion]]
 303 who = "Henrik Skupin <mail@hskupin.info>"
 304 criteria = "safe-to-run"
 305 user-id = 22262
 306 start = "2020-11-03"
 307 end = "2024-03-31"
 308 notes = "Maintained by the DevTools team at Mozilla and has no unsafe code."
 309
 310 [[wildcard-audits.nss-gk-api]]
 311 who = "John M. Schanck <jschanck@mozilla.com>"
 312 criteria = "safe-to-deploy"
 313 user-id = 175410 # John Schanck (jschanck)
 314 start = "2022-11-14"
 315 end = "2024-06-20"
 316 notes = "Maintained by the CryptoEng team at Mozilla."
 317
 318 [[wildcard-audits.ohttp]]
 319 who = "Martin Thomson <mt@lowentropy.net>"
 320 criteria = "safe-to-deploy"
 321 user-id = 128763 # Martin Thomson (martinthomson)
 322 start = "2022-08-04"
 323 end = "2024-03-09"
 324 notes = "This code contains two cryptographic back ends.  No unsafe code is contained if the Rust `hpke` crate is used (the `rust-hpke` feature).  Using NSS (the `nss` feature) involves extensive use of bindings to the native code provided by NSS.  This interface uses wrappers that attempt to add safety to a fundamentally very dangerous library, but those wrappers have only been validated for use following the needs of this crate."
 325
 326 [[wildcard-audits.qcms]]
 327 who = "Jeff Muizelaar <jmuizelaar@mozilla.com>"
 328 criteria = "safe-to-deploy"
 329 user-id = 5946 # Jeff Muizelaar (jrmuizel)
 330 start = "2020-11-05"
 331 end = "2025-01-09"
 332 notes = "Maintained by the Graphics team at Mozilla in mozilla-central."
 333
 334 [[wildcard-audits.rust_cascade]]
 335 who = "Dana Keeler <dkeeler@mozilla.com>"
 336 criteria = "safe-to-deploy"
 337 user-id = 57462 # Dana Keeler (mozkeeler)
 338 start = "2019-11-15"
 339 end = "2024-04-24"
 340 notes = "Written and maintained by the security engineering team at Mozilla."
 341
 342 [[wildcard-audits.unicode-normalization]]
 343 who = "Manish Goregaokar <manishsmail@gmail.com>"
 344 criteria = "safe-to-deploy"
 345 user-id = 1139 # Manish Goregaokar (Manishearth)
 346 start = "2019-11-06"
 347 end = "2024-05-03"
 348 notes = "All code written or reviewed by Manish"
 349
 350 [[wildcard-audits.unicode-segmentation]]
 351 who = "Manish Goregaokar <manishsmail@gmail.com>"
 352 criteria = "safe-to-deploy"
 353 user-id = 1139 # Manish Goregaokar (Manishearth)
 354 start = "2019-05-15"
 355 end = "2024-05-03"
 356 notes = "All code written or reviewed by Manish"
 357
 358 [[wildcard-audits.unicode-width]]
 359 who = "Manish Goregaokar <manishsmail@gmail.com>"
 360 criteria = "safe-to-deploy"
 361 user-id = 1139 # Manish Goregaokar (Manishearth)
 362 start = "2019-12-05"
 363 end = "2024-05-03"
 364 notes = "All code written or reviewed by Manish"
 365
 366 [[wildcard-audits.unicode-xid]]
 367 who = "Manish Goregaokar <manishsmail@gmail.com>"
 368 criteria = "safe-to-deploy"
 369 user-id = 1139 # Manish Goregaokar (Manishearth)
 370 start = "2019-07-25"
 371 end = "2024-05-03"
 372 notes = "All code written or reviewed by Manish"
 373
 374 [[wildcard-audits.uniffi]]
 375 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
 376 criteria = "safe-to-deploy"
 377 user-id = 48 # Jan-Erik Rediger (badboy)
 378 start = "2022-05-05"
 379 end = "2024-06-21"
 380 notes = "Maintained by the Glean and Application Services teams"
 381
 382 [[wildcard-audits.uniffi]]
 383 who = "Ben Dean-Kawamura <bdk@mozilla.com>"
 384 criteria = "safe-to-deploy"
 385 user-id = 127697 # bendk
 386 start = "2021-10-27"
 387 end = "2024-12-11"
 388 notes = "Maintained by the Glean and Application Services teams"
 389
 390 [[wildcard-audits.uniffi_bindgen]]
 391 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
 392 criteria = "safe-to-deploy"
 393 user-id = 48 # Jan-Erik Rediger (badboy)
 394 start = "2022-05-05"
 395 end = "2024-06-21"
 396 notes = "Maintained by the Glean and Application Services teams"
 397
 398 [[wildcard-audits.uniffi_bindgen]]
 399 who = "Ben Dean-Kawamura <bdk@mozilla.com>"
 400 criteria = "safe-to-deploy"
 401 user-id = 127697 # bendk
 402 start = "2021-10-27"
 403 end = "2024-12-11"
 404 notes = "Maintained by the Glean and Application Services teams"
 405
 406 [[wildcard-audits.uniffi_build]]
 407 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
 408 criteria = "safe-to-deploy"
 409 user-id = 48 # Jan-Erik Rediger (badboy)
 410 start = "2022-05-05"
 411 end = "2024-06-21"
 412 notes = "Maintained by the Glean and Application Services teams"
 413
 414 [[wildcard-audits.uniffi_build]]
 415 who = "Ben Dean-Kawamura <bdk@mozilla.com>"
 416 criteria = "safe-to-deploy"
 417 user-id = 127697 # bendk
 418 start = "2021-10-27"
 419 end = "2024-12-11"
 420 notes = "Maintained by the Glean and Application Services teams"
 421
 422 [[wildcard-audits.uniffi_checksum_derive]]
 423 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
 424 criteria = "safe-to-deploy"
 425 user-id = 48 # Jan-Erik Rediger (badboy)
 426 start = "2022-12-16"
 427 end = "2024-06-21"
 428 notes = "Maintained by the Glean and Application Services teams"
 429
 430 [[wildcard-audits.uniffi_checksum_derive]]
 431 who = "Ben Dean-Kawamura <bdk@mozilla.com>"
 432 criteria = "safe-to-deploy"
 433 user-id = 127697 # bendk
 434 start = "2023-01-27"
 435 end = "2024-12-11"
 436 notes = "Maintained by the Glean and Application Services teams"
 437
 438 [[wildcard-audits.uniffi_core]]
 439 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
 440 criteria = "safe-to-deploy"
 441 user-id = 48 # Jan-Erik Rediger (badboy)
 442 start = "2023-06-21"
 443 end = "2024-06-21"
 444 notes = "Maintained by the Glean and Application Services teams"
 445
 446 [[wildcard-audits.uniffi_core]]
 447 who = "Ben Dean-Kawamura <bdk@mozilla.com>"
 448 criteria = "safe-to-deploy"
 449 user-id = 127697 # bendk
 450 start = "2023-01-27"
 451 end = "2024-12-11"
 452 notes = "Maintained by the Glean and Application Services teams"
 453
 454 [[wildcard-audits.uniffi_macros]]
 455 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
 456 criteria = "safe-to-deploy"
 457 user-id = 48 # Jan-Erik Rediger (badboy)
 458 start = "2022-05-05"
 459 end = "2024-06-21"
 460 notes = "Maintained by the Glean and Application Services teams"
 461
 462 [[wildcard-audits.uniffi_macros]]
 463 who = "Ben Dean-Kawamura <bdk@mozilla.com>"
 464 criteria = "safe-to-deploy"
 465 user-id = 127697 # bendk
 466 start = "2021-10-27"
 467 end = "2024-12-11"
 468 notes = "Maintained by the Glean and Application Services teams"
 469
 470 [[wildcard-audits.uniffi_meta]]
 471 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
 472 criteria = "safe-to-deploy"
 473 user-id = 48 # Jan-Erik Rediger (badboy)
 474 start = "2022-08-31"
 475 end = "2024-06-21"
 476 notes = "Maintained by the Glean and Application Services teams"
 477
 478 [[wildcard-audits.uniffi_meta]]
 479 who = "Ben Dean-Kawamura <bdk@mozilla.com>"
 480 criteria = "safe-to-deploy"
 481 user-id = 127697 # bendk
 482 start = "2022-09-13"
 483 end = "2024-12-11"
 484 notes = "Maintained by the Glean and Application Services teams"
 485
 486 [[wildcard-audits.uniffi_testing]]
 487 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
 488 criteria = "safe-to-deploy"
 489 user-id = 48 # Jan-Erik Rediger (badboy)
 490 start = "2022-12-16"
 491 end = "2024-06-21"
 492 notes = "Maintained by the Glean and Application Services teams"
 493
 494 [[wildcard-audits.uniffi_testing]]
 495 who = "Ben Dean-Kawamura <bdk@mozilla.com>"
 496 criteria = "safe-to-deploy"
 497 user-id = 127697 # bendk
 498 start = "2023-01-27"
 499 end = "2024-12-11"
 500 notes = "Maintained by the Glean and Application Services teams"
 501
 502 [[wildcard-audits.uniffi_udl]]
 503 who = "Ben Dean-Kawamura <bdk@mozilla.com>"
 504 criteria = "safe-to-deploy"
 505 user-id = 127697 # bendk
 506 start = "2023-10-18"
 507 end = "2024-12-11"
 508 notes = "Maintained by the Glean and Application Services teams"
 509
 510 [[wildcard-audits.utf8_iter]]
 511 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
 512 criteria = "safe-to-deploy"
 513 user-id = 4484 # Henri Sivonen (hsivonen)
 514 start = "2022-04-19"
 515 end = "2024-06-16"
 516 notes = "Maintained by Henri Sivonen who works at Mozilla."
 517
 518 [[wildcard-audits.webdriver]]
 519 who = "Henrik Skupin <mail@hskupin.info>"
 520 criteria = "safe-to-deploy"
 521 user-id = 22262
 522 start = "2020-11-03"
 523 end = "2024-03-31"
 524 notes = "Maintained by the DevTools team at Mozilla and has no unsafe code."
 525
 526 [[audits.aa-stroke]]
 527 who = "Lee Salzman <lsalzman@mozilla.com>"
 528 criteria = "safe-to-deploy"
 529 version = "0.1.0"
 530 notes = "Written and maintained by Gfx team at Mozilla."
 531
 532 [[audits.ahash]]
 533 who = "Mike Hommey <mh+mozilla@glandium.org>"
 534 criteria = "safe-to-deploy"
 535 delta = "0.7.6 -> 0.7.8"
 536
 537 [[audits.aho-corasick]]
 538 who = "Mike Hommey <mh+mozilla@glandium.org>"
 539 criteria = "safe-to-deploy"
 540 delta = "0.7.18 -> 0.7.20"
 541
 542 [[audits.alsa]]
 543 who = "Mike Hommey <mh+mozilla@glandium.org>"
 544 criteria = "safe-to-deploy"
 545 delta = "0.4.3 -> 0.7.0"
 546
 547 [[audits.alsa]]
 548 who = "Mike Hommey <mh+mozilla@glandium.org>"
 549 criteria = "safe-to-deploy"
 550 delta = "0.7.0 -> 0.8.1"
 551
 552 [[audits.android_logger]]
 553 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
 554 criteria = "safe-to-deploy"
 555 version = "0.11.0"
 556 notes = "Small crate, wrapping Android log functionality, reviewed by janerik"
 557
 558 [[audits.android_logger]]
 559 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
 560 criteria = "safe-to-deploy"
 561 delta = "0.11.0 -> 0.11.1"
 562 notes = "Small crate, wrapping Android log functionality, now switched to properly using MaybeUninit"
 563
 564 [[audits.android_logger]]
 565 who = "Mike Hommey <mh+mozilla@glandium.org>"
 566 criteria = "safe-to-deploy"
 567 delta = "0.11.1 -> 0.11.3"
 568
 569 [[audits.android_logger]]
 570 who = "Chris H-C <chutten@mozilla.com>"
 571 criteria = "safe-to-deploy"
 572 delta = "0.11.3 -> 0.12.0"
 573 notes = "Small wrapper crate. This update fixes log level filtering."
 574
 575 [[audits.android_system_properties]]
 576 who = "Nicolas Silva <nical@fastmail.com>"
 577 criteria = "safe-to-deploy"
 578 version = "0.1.2"
 579 notes = "I wrote this crate, reviewed by jimb. It is mostly a Rust port of some C++ code we already ship."
 580
 581 [[audits.android_system_properties]]
 582 who = "Mike Hommey <mh+mozilla@glandium.org>"
 583 criteria = "safe-to-deploy"
 584 delta = "0.1.2 -> 0.1.4"
 585
 586 [[audits.android_system_properties]]
 587 who = "Mike Hommey <mh+mozilla@glandium.org>"
 588 criteria = "safe-to-deploy"
 589 delta = "0.1.4 -> 0.1.5"
 590
 591 [[audits.anyhow]]
 592 who = "Mike Hommey <mh+mozilla@glandium.org>"
 593 criteria = "safe-to-deploy"
 594 delta = "1.0.57 -> 1.0.61"
 595
 596 [[audits.anyhow]]
 597 who = "Bobby Holley <bobbyholley@gmail.com>"
 598 criteria = "safe-to-deploy"
 599 delta = "1.0.58 -> 1.0.57"
 600 notes = "No functional differences, just CI config and docs."
 601
 602 [[audits.anyhow]]
 603 who = "Mike Hommey <mh+mozilla@glandium.org>"
 604 criteria = "safe-to-deploy"
 605 delta = "1.0.61 -> 1.0.62"
 606
 607 [[audits.anyhow]]
 608 who = "Mike Hommey <mh+mozilla@glandium.org>"
 609 criteria = "safe-to-deploy"
 610 delta = "1.0.62 -> 1.0.68"
 611
 612 [[audits.anyhow]]
 613 who = "Mike Hommey <mh+mozilla@glandium.org>"
 614 criteria = "safe-to-deploy"
 615 delta = "1.0.68 -> 1.0.69"
 616
 617 [[audits.app_units]]
 618 who = "Emilio Cobos Álvarez <emilio@crisal.io>"
 619 criteria = "safe-to-deploy"
 620 version = "0.7.1"
 621 notes = """
 622 I'm pretty familiar with this crate. It provides a fixed-point numeric type.
 623 The code is pretty straight-forward, there's no unsafe code at all.
 624 """
 625
 626 [[audits.app_units]]
 627 who = "Nicolas Silva <nical@fastmail.com>"
 628 criteria = "safe-to-deploy"
 629 version = "0.7.3"
 630
 631 [[audits.app_units]]
 632 who = "Emilio Cobos Álvarez <emilio@crisal.io>"
 633 criteria = "safe-to-deploy"
 634 delta = "0.7.1 -> 0.7.2"
 635 notes = "Adding repr(transparent) plus a couple minor clean-ups, no functional changes from 0.7.1."
 636
 637 [[audits.arbitrary]]
 638 who = "Mike Hommey <mh+mozilla@glandium.org>"
 639 criteria = "safe-to-run"
 640 delta = "1.1.0 -> 1.1.1"
 641
 642 [[audits.arbitrary]]
 643 who = "Mike Hommey <mh+mozilla@glandium.org>"
 644 criteria = "safe-to-run"
 645 delta = "1.1.1 -> 1.1.3"
 646
 647 [[audits.arbitrary]]
 648 who = "Mike Hommey <mh+mozilla@glandium.org>"
 649 criteria = "safe-to-run"
 650 delta = "1.1.3 -> 1.2.0"
 651
 652 [[audits.arbitrary]]
 653 who = "Mike Hommey <mh+mozilla@glandium.org>"
 654 criteria = "safe-to-run"
 655 delta = "1.2.0 -> 1.2.3"
 656
 657 [[audits.ash]]
 658 who = "Jim Blandy <jimb@red-bean.com>"
 659 criteria = "safe-to-deploy"
 660 delta = "0.37.0+1.3.209 -> 0.37.1+1.3.235"
 661 notes = """
 662 Nicolas Silva, Jim Blandy, and Teodor Tanasoaia audited ash master
 663 branch commits from e43e9c0c to 6bd82768 inclusive.
 664 """
 665
 666 [[audits.ash]]
 667 who = "Nicolas Silva <nical@fastmail.com>"
 668 criteria = "safe-to-deploy"
 669 delta = "0.37.1+1.3.235 -> 0.37.2+1.3.238"
 670
 671 [[audits.ash]]
 672 who = "Teodor Tanasoaia <ttanasoaia@mozilla.com>"
 673 criteria = "safe-to-deploy"
 674 delta = "0.37.2+1.3.238 -> 0.37.3+1.3.251"
 675
 676 [[audits.ashmem]]
 677 who = "Matthew Gregan <kinetik@flim.org>"
 678 criteria = "safe-to-deploy"
 679 version = "0.1.2"
 680 notes = """
 681 Small unsafe wrapper around Android 8.0's ASharedMemory native API that falls
 682 back to older private ioctl-based API at runtime on earlier OS releases.  The
 683 shim code is small and doesn't inspect the API arguments, so is unlikely to
 684 expose any safety issues beyond those presented by the native OS API.
 685 """
 686
 687 [[audits.askama]]
 688 who = "Bobby Holley <bobbyholley@gmail.com>"
 689 criteria = "safe-to-deploy"
 690 version = "0.11.1"
 691 notes = """
 692 Just contains some traits and re-exports for use by a broader package of related
 693 crates. No unsafe code or ambient capability usage.
 694 """
 695
 696 [[audits.async-task]]
 697 who = "Nika Layzell <nika@thelayzells.com>"
 698 criteria = "safe-to-deploy"
 699 delta = "4.0.3 -> 4.0.3@git:f6488e35beccb26eb6e85847b02aa78a42cd3d0e"
 700 notes = "Recorded by bholley, confirmed over slack."
 701
 702 [[audits.async-task]]
 703 who = "Nika Layzell <nika@thelayzells.com>"
 704 criteria = "safe-to-deploy"
 705 delta = "4.0.3 -> 4.3.0"
 706 notes = "Main addition is the new FallibleTask type, which I implemented. No risky unsafe code changes."
 707
 708 [[audits.async-trait]]
 709 who = "Mike Hommey <mh+mozilla@glandium.org>"
 710 criteria = "safe-to-deploy"
 711 delta = "0.1.56 -> 0.1.57"
 712
 713 [[audits.async-trait]]
 714 who = "Mike Hommey <mh+mozilla@glandium.org>"
 715 criteria = "safe-to-deploy"
 716 delta = "0.1.57 -> 0.1.60"
 717
 718 [[audits.async-trait]]
 719 who = "Mike Hommey <mh+mozilla@glandium.org>"
 720 criteria = "safe-to-deploy"
 721 delta = "0.1.60 -> 0.1.64"
 722
 723 [[audits.atomic_refcell]]
 724 who = "Bobby Holley <bholley@mozilla.com>"
 725 criteria = "safe-to-deploy"
 726 version = "0.1.8"
 727 notes = "I maintain this crate and have reviewed every line."
 728
 729 [[audits.atomic_refcell]]
 730 who = "Mike Hommey <mh+mozilla@glandium.org>"
 731 criteria = "safe-to-deploy"
 732 delta = "0.1.8 -> 0.1.9"
 733
 734 [[audits.audio-mixer]]
 735 who = "Chun-Min Chang <chun.m.chang@gmail.com>"
 736 criteria = "safe-to-deploy"
 737 version = "0.1.2"
 738 notes = "audio-mixer is a Mozilla-developed package."
 739
 740 [[audits.audio-mixer]]
 741 who = "Mike Hommey <mh+mozilla@glandium.org>"
 742 criteria = "safe-to-deploy"
 743 delta = "0.1.2 -> 0.1.3"
 744
 745 [[audits.authenticator]]
 746 who = "John M. Schanck <jschanck@mozilla.com>"
 747 criteria = "safe-to-deploy"
 748 version = "0.4.0-alpha.13"
 749 notes = "Maintained by the CryptoEng team at Mozilla."
 750
 751 [[audits.autocfg]]
 752 who = "Josh Stone <jistone@redhat.com>"
 753 criteria = "safe-to-deploy"
 754 version = "1.1.0"
 755 notes = "All code written or reviewed by Josh Stone."
 756
 757 [[audits.base64]]
 758 who = "Mike Hommey <mh+mozilla@glandium.org>"
 759 criteria = "safe-to-deploy"
 760 delta = "0.13.0 -> 0.13.1"
 761
 762 [[audits.bindgen]]
 763 who = "Emilio Cobos Álvarez <emilio@crisal.io>"
 764 criteria = "safe-to-deploy"
 765 version = "0.59.2"
 766 notes = "I'm the primary author and maintainer of the crate."
 767
 768 [[audits.bindgen]]
 769 who = "Emilio Cobos Álvarez <emilio@crisal.io>"
 770 criteria = "safe-to-deploy"
 771 delta = "0.59.2 -> 0.63.0"
 772
 773 [[audits.bindgen]]
 774 who = "Mike Hommey <mh+mozilla@glandium.org>"
 775 criteria = "safe-to-deploy"
 776 delta = "0.63.0 -> 0.64.0"
 777
 778 [[audits.bindgen]]
 779 who = "Mike Hommey <mh+mozilla@glandium.org>"
 780 criteria = "safe-to-deploy"
 781 delta = "0.64.0 -> 0.66.1"
 782
 783 [[audits.bindgen]]
 784 who = "Mike Hommey <mh+mozilla@glandium.org>"
 785 criteria = "safe-to-deploy"
 786 delta = "0.66.1 -> 0.68.1"
 787
 788 [[audits.bindgen]]
 789 who = "Andreas Pehrson <apehrson@mozilla.com>"
 790 criteria = "safe-to-deploy"
 791 delta = "0.68.1 -> 0.69.1"
 792
 793 [[audits.bindgen]]
 794 who = "Mike Hommey <mh+mozilla@glandium.org>"
 795 criteria = "safe-to-deploy"
 796 delta = "0.69.1 -> 0.69.2"
 797
 798 [[audits.bindgen]]
 799 who = "Emilio Cobos Álvarez <emilio@crisal.io>"
 800 criteria = "safe-to-deploy"
 801 delta = "0.69.2 -> 0.69.4"
 802
 803 [[audits.bit-set]]
 804 who = "Aria Beingessner <a.beingessner@gmail.com>"
 805 criteria = "safe-to-deploy"
 806 version = "0.5.2"
 807 notes = "Another crate I own via contain-rs that is ancient and maintenance mode, no known issues."
 808
 809 [[audits.bit-set]]
 810 who = "Mike Hommey <mh+mozilla@glandium.org>"
 811 criteria = "safe-to-deploy"
 812 delta = "0.5.2 -> 0.5.3"
 813
 814 [[audits.bit-vec]]
 815 who = "Aria Beingessner <a.beingessner@gmail.com>"
 816 criteria = "safe-to-deploy"
 817 version = "0.6.3"
 818 notes = "Another crate I own via contain-rs that is ancient and in maintenance mode but otherwise perfectly fine."
 819
 820 [[audits.bitflags]]
 821 who = "Alex Franchuk <afranchuk@mozilla.com>"
 822 criteria = "safe-to-deploy"
 823 delta = "1.3.2 -> 2.0.2"
 824 notes = "Removal of some unsafe code/methods. No changes to externals, just some refactoring (mostly internal)."
 825
 826 [[audits.bitflags]]
 827 who = "Nicolas Silva <nical@fastmail.com>"
 828 criteria = "safe-to-deploy"
 829 delta = "2.0.2 -> 2.1.0"
 830
 831 [[audits.bitflags]]
 832 who = "Teodor Tanasoaia <ttanasoaia@mozilla.com>"
 833 criteria = "safe-to-deploy"
 834 delta = "2.2.1 -> 2.3.2"
 835
 836 [[audits.bitflags]]
 837 who = "Mike Hommey <mh+mozilla@glandium.org>"
 838 criteria = "safe-to-deploy"
 839 delta = "2.3.3 -> 2.4.0"
 840
 841 [[audits.block-buffer]]
 842 who = "Mike Hommey <mh+mozilla@glandium.org>"
 843 criteria = "safe-to-deploy"
 844 delta = "0.10.2 -> 0.10.3"
 845
 846 [[audits.build-parallel]]
 847 who = "Jeff Muizelaar <jmuizelaar@mozilla.com>"
 848 criteria = "safe-to-deploy"
 849 version = "0.1.2"
 850
 851 [[audits.bumpalo]]
 852 who = "Bobby Holley <bobbyholley@gmail.com>"
 853 criteria = "safe-to-run"
 854 delta = "3.9.1 -> 3.10.0"
 855 notes = """
 856 Some nontrivial functional changes but certainly meets the no-malware bar of
 857 safe-to-run. If we needed safe-to-deploy for this in m-c I'd ask Nick to re-
 858 certify this version, but we don't, so this is fine for now.
 859 """
 860
 861 [[audits.bumpalo]]
 862 who = "Mike Hommey <mh+mozilla@glandium.org>"
 863 criteria = "safe-to-run"
 864 delta = "3.11.1 -> 3.12.0"
 865
 866 [[audits.bytes]]
 867 who = "Mike Hommey <mh+mozilla@glandium.org>"
 868 criteria = "safe-to-deploy"
 869 delta = "1.1.0 -> 1.2.1"
 870
 871 [[audits.bytes]]
 872 who = "Mike Hommey <mh+mozilla@glandium.org>"
 873 criteria = "safe-to-deploy"
 874 delta = "1.2.1 -> 1.3.0"
 875
 876 [[audits.bytes]]
 877 who = "Mike Hommey <mh+mozilla@glandium.org>"
 878 criteria = "safe-to-deploy"
 879 delta = "1.3.0 -> 1.4.0"
 880
 881 [[audits.camino]]
 882 who = "Mike Hommey <mh+mozilla@glandium.org>"
 883 criteria = "safe-to-deploy"
 884 delta = "1.0.9 -> 1.1.1"
 885
 886 [[audits.camino]]
 887 who = "Mike Hommey <mh+mozilla@glandium.org>"
 888 criteria = "safe-to-deploy"
 889 delta = "1.1.1 -> 1.1.2"
 890
 891 [[audits.cargo_metadata]]
 892 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
 893 criteria = "safe-to-deploy"
 894 version = "0.15.2"
 895 notes = "I reviewed the whole code base. Parser for the output of cargo-metadata, relying mostly on serde. No unsafe code used."
 896
 897 [[audits.cargo_metadata]]
 898 who = "Mike Hommey <mh+mozilla@glandium.org>"
 899 criteria = "safe-to-deploy"
 900 delta = "0.15.2 -> 0.15.3"
 901
 902 [[audits.cc]]
 903 who = "Mike Hommey <mh+mozilla@glandium.org>"
 904 criteria = "safe-to-deploy"
 905 delta = "1.0.73 -> 1.0.78"
 906
 907 [[audits.chardetng]]
 908 who = "Henri Sivonen <hsivonen@hsivonen.fi>"
 909 criteria = "safe-to-deploy"
 910 version = "0.1.9"
 911 notes = "I, Henri Sivonen, wrote this (safe-code-only) crate for Gecko even though the crate is published via crates.io."
 912
 913 [[audits.chardetng]]
 914 who = "Bobby Holley <bobbyholley@gmail.com>"
 915 criteria = "safe-to-deploy"
 916 delta = "0.1.9 -> 0.1.9@git:3484d3e3ebdc8931493aa5df4d7ee9360a90e76b"
 917
 918 [[audits.chardetng_c]]
 919 who = "Henri Sivonen <hsivonen@hsivonen.fi>"
 920 criteria = "safe-to-deploy"
 921 version = "0.1.2"
 922 notes = "I, Henri Sivonen, wrote this crate for Gecko even though it is published via crates.io. The buffer input assumes Rust slice constraints for the start pointer. In Gecko, this is taken care of by mozilla::Span, but the C API doesn't conform to idiomatic C constraints on this point."
 923
 924 [[audits.chardetng_c]]
 925 who = "Bobby Holley <bobbyholley@gmail.com>"
 926 criteria = "safe-to-deploy"
 927 delta = "0.1.2 -> 0.1.2@git:ed8a4c6f900a90d4dbc1d64b856e61490a1c3570"
 928
 929 [[audits.clang-sys]]
 930 who = "Mike Hommey <mh+mozilla@glandium.org>"
 931 criteria = "safe-to-deploy"
 932 delta = "1.3.3 -> 1.4.0"
 933
 934 [[audits.clang-sys]]
 935 who = "Mike Hommey <mh+mozilla@glandium.org>"
 936 criteria = "safe-to-deploy"
 937 delta = "1.4.0 -> 1.6.0"
 938
 939 [[audits.clap_lex]]
 940 who = "Mike Hommey <mh+mozilla@glandium.org>"
 941 criteria = "safe-to-deploy"
 942 delta = "0.2.0 -> 0.2.2"
 943
 944 [[audits.clap_lex]]
 945 who = "Mike Hommey <mh+mozilla@glandium.org>"
 946 criteria = "safe-to-deploy"
 947 delta = "0.2.2 -> 0.2.4"
 948
 949 [[audits.comedy]]
 950 who = "Nick Alexander <nalexander@mozilla.com>"
 951 criteria = "safe-to-deploy"
 952 version = "0.2.0"
 953 notes = """
 954 The comedy crate was written by Adam Gashlin for Mozilla's use.  The entire
 955 comedy 0.2.0 crate is full of `unsafe` code and makes many assumptions about
 956 memory and layout, but there is no particular processing of untrusted input
 957 here.
 958 """
 959
 960 [[audits.cookie]]
 961 who = "Mike Hommey <mh+mozilla@glandium.org>"
 962 criteria = "safe-to-run"
 963 delta = "0.16.0 -> 0.16.2"
 964
 965 [[audits.core-graphics]]
 966 who = "Teodor Tanasoaia <ttanasoaia@mozilla.com>"
 967 criteria = "safe-to-deploy"
 968 delta = "0.22.3 -> 0.23.1"
 969
 970 [[audits.core-graphics-types]]
 971 who = "Teodor Tanasoaia <ttanasoaia@mozilla.com>"
 972 criteria = "safe-to-deploy"
 973 delta = "0.1.1 -> 0.1.2"
 974
 975 [[audits.core-text]]
 976 who = "Teodor Tanasoaia <ttanasoaia@mozilla.com>"
 977 criteria = "safe-to-deploy"
 978 delta = "19.2.0 -> 20.0.0"
 979
 980 [[audits.core-text]]
 981 who = "Jonathan Kew <jfkthame@gmail.com>"
 982 criteria = "safe-to-deploy"
 983 delta = "20.0.0 -> 20.1.0"
 984 notes = """
 985 The bulk of the 20.0.0 -> 20.1.0 changes were purely cosmetic clippy and rustfmt changes.
 986
 987 The only substantive change was the addition of wrappers to expose two additional Core Text APIs,
 988 the variants of CTFontCreateWithName and CTFontCreateWithFontDescriptor that accept a CTFontOptions
 989 parameter. These are directly parallel to the existing versions without CTFontOptions, and do not
 990 introduce any new forms of risk.
 991 """
 992
 993 [[audits.core_maths]]
 994 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
 995 criteria = "safe-to-deploy"
 996 version = "0.1.0"
 997
 998 [[audits.coreaudio-sys]]
 999 who = "Mike Hommey <mh+mozilla@glandium.org>"
1000 criteria = "safe-to-deploy"
1001 delta = "0.2.10 -> 0.2.11"
1002
1003 [[audits.coreaudio-sys]]
1004 who = "Mike Hommey <mh+mozilla@glandium.org>"
1005 criteria = "safe-to-deploy"
1006 delta = "0.2.11 -> 0.2.12"
1007
1008 [[audits.coreaudio-sys]]
1009 who = "Mike Hommey <mh+mozilla@glandium.org>"
1010 criteria = "safe-to-deploy"
1011 delta = "0.2.12 -> 0.2.13"
1012
1013 [[audits.coreaudio-sys]]
1014 who = "Andreas Pehrson <apehrson@mozilla.com>"
1015 criteria = "safe-to-deploy"
1016 delta = "0.2.13 -> 0.2.14"
1017
1018 [[audits.cose]]
1019 who = "Mathew Hodson <mathew.hodson@gmail.com>"
1020 criteria = "safe-to-deploy"
1021 delta = "0.1.4 -> 0.1.4@git:43c22248d136c8b38fe42ea709d08da6355cf04b"
1022
1023 [[audits.cpufeatures]]
1024 who = "Mike Hommey <mh+mozilla@glandium.org>"
1025 criteria = "safe-to-deploy"
1026 delta = "0.2.2 -> 0.2.4"
1027
1028 [[audits.cpufeatures]]
1029 who = "Mike Hommey <mh+mozilla@glandium.org>"
1030 criteria = "safe-to-deploy"
1031 delta = "0.2.4 -> 0.2.5"
1032
1033 [[audits.cpufeatures]]
1034 who = "Gabriele Svelto <gsvelto@mozilla.com>"
1035 criteria = "safe-to-deploy"
1036 delta = "0.2.7 -> 0.2.8"
1037 notes = "This release contains a single fix for an issue that affected Firefox"
1038
1039 [[audits.crash-context]]
1040 who = "Gabriele Svelto <gsvelto@mozilla.com>"
1041 criteria = "safe-to-deploy"
1042 version = "0.5.1"
1043 notes = "Mozilla employees contributed to this crate and the remaining code was fully audited"
1044
1045 [[audits.crash-context]]
1046 who = "Alex Franchuk <afranchuk@mozilla.com>"
1047 criteria = "safe-to-deploy"
1048 delta = "0.5.1 -> 0.6.0"
1049 notes = """
1050 There are few changes. The main change is the removal of `winapi` in favor of
1051 manually-generated bindings (which are minimal). The few small bugfixes are
1052 sound.
1053 """
1054
1055 [[audits.crash-context]]
1056 who = "Gabriele Svelto <gsvelto@mozilla.com>"
1057 criteria = "safe-to-deploy"
1058 delta = "0.6.0 -> 0.6.1"
1059
1060 [[audits.crossbeam-channel]]
1061 who = "Mike Hommey <mh+mozilla@glandium.org>"
1062 criteria = "safe-to-deploy"
1063 delta = "0.5.4 -> 0.5.6"
1064
1065 [[audits.crossbeam-deque]]
1066 who = "Mike Hommey <mh+mozilla@glandium.org>"
1067 criteria = "safe-to-deploy"
1068 delta = "0.8.1 -> 0.8.2"
1069
1070 [[audits.crossbeam-epoch]]
1071 who = "Mike Hommey <mh+mozilla@glandium.org>"
1072 criteria = "safe-to-deploy"
1073 delta = "0.9.8 -> 0.9.10"
1074
1075 [[audits.crossbeam-epoch]]
1076 who = "Mike Hommey <mh+mozilla@glandium.org>"
1077 criteria = "safe-to-deploy"
1078 delta = "0.9.10 -> 0.9.13"
1079
1080 [[audits.crossbeam-epoch]]
1081 who = "Mike Hommey <mh+mozilla@glandium.org>"
1082 criteria = "safe-to-deploy"
1083 delta = "0.9.13 -> 0.9.14"
1084
1085 [[audits.crossbeam-queue]]
1086 who = "Matthew Gregan <kinetik@flim.org>"
1087 criteria = "safe-to-deploy"
1088 version = "0.3.8"
1089
1090 [[audits.crossbeam-utils]]
1091 who = "Mike Hommey <mh+mozilla@glandium.org>"
1092 criteria = "safe-to-deploy"
1093 delta = "0.8.8 -> 0.8.11"
1094
1095 [[audits.crossbeam-utils]]
1096 who = "Mike Hommey <mh+mozilla@glandium.org>"
1097 criteria = "safe-to-deploy"
1098 delta = "0.8.11 -> 0.8.14"
1099
1100 [[audits.crypto-common]]
1101 who = "Mike Hommey <mh+mozilla@glandium.org>"
1102 criteria = "safe-to-deploy"
1103 delta = "0.1.3 -> 0.1.6"
1104
1105 [[audits.cssparser]]
1106 who = "Emilio Cobos Álvarez <emilio@crisal.io>"
1107 criteria = "safe-to-deploy"
1108 version = "0.29.6"
1109 notes = """
1110 I've reviewed or authored most of the recent changes to this library, and it
1111 was developed by other mozilla folks. Unsafe code there is reasonable (utf-8
1112 casts for serialization and parsing).
1113 """
1114
1115 [[audits.cssparser]]
1116 who = "Bobby Holley <bobbyholley@gmail.com>"
1117 criteria = "safe-to-deploy"
1118 delta = "0.29.6 -> 0.31.0"
1119 notes = """
1120 All the changes in this release were authored by Mozilla staff, except the
1121 uninit_array stuff, which looks fine.
1122 """
1123
1124 [[audits.cssparser]]
1125 who = "Mike Hommey <mh+mozilla@glandium.org>"
1126 criteria = "safe-to-deploy"
1127 delta = "0.31.0 -> 0.31.2"
1128
1129 [[audits.cssparser]]
1130 who = "Emilio Cobos Álvarez <emilio@crisal.io>"
1131 criteria = "safe-to-deploy"
1132 delta = "0.31.2 -> 0.32.0"
1133 notes = "All changes were either authored or reviewed by Mozilla employees."
1134
1135 [[audits.cssparser]]
1136 who = "Emilio Cobos Álvarez <emilio@crisal.io>"
1137 criteria = "safe-to-deploy"
1138 delta = "0.32.0 -> 0.33.0"
1139 notes = """
1140 Mozilla authored. Breaking changes from 0.32 involve splitting color APIs into
1141 their own crate and removing an unused line number offset mechanism.
1142 """
1143
1144 [[audits.cssparser]]
1145 who = "Emilio Cobos Álvarez <emilio@crisal.io>"
1146 criteria = "safe-to-deploy"
1147 delta = "0.33.0 -> 0.33.0@git:aaa966d9d6ae70c4b8a62bb5e3a14c068bb7dff0"
1148 notes = "Only one minimal change exposing a previously-private enumeration."
1149
1150 [[audits.cssparser-color]]
1151 who = "Emilio Cobos Álvarez <emilio@crisal.io>"
1152 criteria = "safe-to-deploy"
1153 version = "0.1.0"
1154 notes = "This code used to live in cssparser's color module. Only moved out. Mozilla-authored."
1155
1156 [[audits.cssparser-macros]]
1157 who = "Emilio Cobos Álvarez <emilio@crisal.io>"
1158 criteria = "safe-to-deploy"
1159 version = "0.6.0"
1160 notes = """
1161 Trivial crate with a single proc macro to compute the max length of the inputs
1162 to a match expression.
1163 """
1164
1165 [[audits.cssparser-macros]]
1166 who = "Mike Hommey <mh+mozilla@glandium.org>"
1167 criteria = "safe-to-deploy"
1168 delta = "0.6.0 -> 0.6.1"
1169
1170 [[audits.cssparser-macros]]
1171 who = "Emilio Cobos Álvarez <emilio@crisal.io>"
1172 criteria = "safe-to-deploy"
1173 delta = "0.6.1 -> 0.6.1@git:aaa966d9d6ae70c4b8a62bb5e3a14c068bb7dff0"
1174 notes = "No changes from already-certified upstream, but needed because it lives in the same git repo as the cssparser crate."
1175
1176 [[audits.cstr]]
1177 who = "Emilio Cobos Álvarez <emilio@crisal.io>"
1178 criteria = "safe-to-deploy"
1179 version = "0.2.10"
1180 notes = """
1181 I've reviewed the code of the crate thoroughly. It generates an unsafe block
1182 which is statically guaranteed to be safe. Inputs to the macro have to be
1183 static so there's no uncontrolled input whatsoever.
1184 """
1185
1186 [[audits.cstr]]
1187 who = "Mike Hommey <mh+mozilla@glandium.org>"
1188 criteria = "safe-to-deploy"
1189 delta = "0.2.10 -> 0.2.11"
1190
1191 [[audits.cubeb]]
1192 who = "Matthew Gregan <kinetik@flim.org>"
1193 criteria = "safe-to-deploy"
1194 version = "0.10.1"
1195 notes = """
1196 Mozilla-developed package.
1197 """
1198
1199 [[audits.cubeb]]
1200 who = "Matthew Gregan <kinetik@flim.org>"
1201 criteria = "safe-to-deploy"
1202 delta = "0.10.1 -> 0.10.2"
1203
1204 [[audits.cubeb]]
1205 who = "Mike Hommey <mh+mozilla@glandium.org>"
1206 criteria = "safe-to-deploy"
1207 delta = "0.10.2 -> 0.10.3"
1208
1209 [[audits.cubeb]]
1210 who = "Andreas Pehrson <apehrson@mozilla.com>"
1211 criteria = "safe-to-deploy"
1212 delta = "0.10.3 -> 0.12.0"
1213
1214 [[audits.cubeb-backend]]
1215 who = "Matthew Gregan <kinetik@flim.org>"
1216 criteria = "safe-to-deploy"
1217 version = "0.10.1"
1218 notes = """
1219 Mozilla-developed package.
1220 """
1221
1222 [[audits.cubeb-backend]]
1223 who = "Matthew Gregan <kinetik@flim.org>"
1224 criteria = "safe-to-deploy"
1225 delta = "0.10.1 -> 0.10.2"
1226
1227 [[audits.cubeb-backend]]
1228 who = "Paul Adenot <paul@paul.cx>"
1229 criteria = "safe-to-deploy"
1230 delta = "0.10.2 -> 0.10.3"
1231 notes = """
1232 Mozilla-developed package.
1233 """
1234
1235 [[audits.cubeb-backend]]
1236 who = "Andreas Pehrson <apehrson@mozilla.com>"
1237 criteria = "safe-to-deploy"
1238 delta = "0.10.3 -> 0.10.7"
1239
1240 [[audits.cubeb-backend]]
1241 who = "Andreas Pehrson <apehrson@mozilla.com>"
1242 criteria = "safe-to-deploy"
1243 delta = "0.10.7 -> 0.12.0"
1244
1245 [[audits.cubeb-core]]
1246 who = "Matthew Gregan <kinetik@flim.org>"
1247 criteria = "safe-to-deploy"
1248 version = "0.10.1"
1249 notes = """
1250 Mozilla-developed package.
1251 """
1252
1253 [[audits.cubeb-core]]
1254 who = "Matthew Gregan <kinetik@flim.org>"
1255 criteria = "safe-to-deploy"
1256 delta = "0.10.1 -> 0.10.2"
1257
1258 [[audits.cubeb-core]]
1259 who = "Paul Adenot <paul@paul.cx>"
1260 criteria = "safe-to-deploy"
1261 delta = "0.10.2 -> 0.10.3"
1262 notes = """
1263 Mozilla-developed package.
1264 """
1265
1266 [[audits.cubeb-core]]
1267 who = "Mike Hommey <mh+mozilla@glandium.org>"
1268 criteria = "safe-to-deploy"
1269 delta = "0.10.3 -> 0.10.4"
1270
1271 [[audits.cubeb-core]]
1272 who = "Andreas Pehrson <apehrson@mozilla.com>"
1273 criteria = "safe-to-deploy"
1274 delta = "0.10.4 -> 0.10.7"
1275
1276 [[audits.cubeb-core]]
1277 who = "Andreas Pehrson <apehrson@mozilla.com>"
1278 criteria = "safe-to-deploy"
1279 delta = "0.10.7 -> 0.12.0"
1280
1281 [[audits.cubeb-sys]]
1282 who = "Matthew Gregan <kinetik@flim.org>"
1283 criteria = "safe-to-deploy"
1284 version = "0.10.1"
1285 notes = """
1286 Mozilla-developed package.
1287 """
1288
1289 [[audits.cubeb-sys]]
1290 who = "Matthew Gregan <kinetik@flim.org>"
1291 criteria = "safe-to-deploy"
1292 delta = "0.10.1 -> 0.10.2"
1293
1294 [[audits.cubeb-sys]]
1295 who = "Paul Adenot <paul@paul.cx>"
1296 criteria = "safe-to-deploy"
1297 delta = "0.10.2 -> 0.10.3"
1298 notes = """
1299 Mozilla-developed package.
1300 """
1301
1302 [[audits.cubeb-sys]]
1303 who = "Andreas Pehrson <apehrson@mozilla.com>"
1304 criteria = "safe-to-deploy"
1305 delta = "0.10.3 -> 0.10.7"
1306
1307 [[audits.cubeb-sys]]
1308 who = "Andreas Pehrson <apehrson@mozilla.com>"
1309 criteria = "safe-to-deploy"
1310 delta = "0.10.7 -> 0.12.0"
1311
1312 [[audits.d3d12]]
1313 who = "Jim Blandy <jimb@red-bean.com>"
1314 criteria = "safe-to-deploy"
1315 delta = "0.4.1 -> 0.5.0"
1316 notes = "The commits between 0.4.1 and 0.5.0 were all audited by Dzmitry Malyshau or myself."
1317
1318 [[audits.d3d12]]
1319 who = "Nicolas Silva <nical@fastmail.com>"
1320 criteria = "safe-to-deploy"
1321 delta = "0.5.0 -> 0.7.0"
1322
1323 [[audits.d3d12]]
1324 who = [
1325     "Erich Gubler <egubler@mozilla.com>",
1326     "Jim Blandy <jimb@red-bean.com>",
1327     "Nicolas Silva <nical@fastmail.com>",
1328     "Teodor Tanasoaia <ttanasoaia@mozilla.com>",
1329     "Erich Gubler <erichdongubler@gmail.com>",
1330 ]
1331 criteria = "safe-to-deploy"
1332 delta = "0.7.0 -> 0.19.0@git:0c5bebca514eb06d9387f87666c1c658f3f673b4"
1333 importable = false
1334
1335 [[audits.darling]]
1336 who = "Mike Hommey <mh+mozilla@glandium.org>"
1337 criteria = "safe-to-deploy"
1338 delta = "0.13.4 -> 0.14.2"
1339
1340 [[audits.darling]]
1341 who = "Mike Hommey <mh+mozilla@glandium.org>"
1342 criteria = "safe-to-deploy"
1343 delta = "0.14.2 -> 0.14.3"
1344
1345 [[audits.darling]]
1346 who = "Mike Hommey <mh+mozilla@glandium.org>"
1347 criteria = "safe-to-deploy"
1348 delta = "0.14.3 -> 0.20.1"
1349
1350 [[audits.darling_core]]
1351 who = "Mike Hommey <mh+mozilla@glandium.org>"
1352 criteria = "safe-to-deploy"
1353 delta = "0.13.4 -> 0.14.2"
1354
1355 [[audits.darling_core]]
1356 who = "Mike Hommey <mh+mozilla@glandium.org>"
1357 criteria = "safe-to-deploy"
1358 delta = "0.14.2 -> 0.14.3"
1359
1360 [[audits.darling_core]]
1361 who = "Mike Hommey <mh+mozilla@glandium.org>"
1362 criteria = "safe-to-deploy"
1363 delta = "0.14.3 -> 0.20.1"
1364
1365 [[audits.darling_macro]]
1366 who = "Mike Hommey <mh+mozilla@glandium.org>"
1367 criteria = "safe-to-deploy"
1368 delta = "0.13.4 -> 0.14.2"
1369
1370 [[audits.darling_macro]]
1371 who = "Mike Hommey <mh+mozilla@glandium.org>"
1372 criteria = "safe-to-deploy"
1373 delta = "0.14.2 -> 0.14.3"
1374
1375 [[audits.darling_macro]]
1376 who = "Mike Hommey <mh+mozilla@glandium.org>"
1377 criteria = "safe-to-deploy"
1378 delta = "0.14.3 -> 0.20.1"
1379
1380 [[audits.data-encoding]]
1381 who = "Mike Hommey <mh+mozilla@glandium.org>"
1382 criteria = "safe-to-deploy"
1383 delta = "2.3.2 -> 2.3.3"
1384
1385 [[audits.debugid]]
1386 who = "Gabriele Svelto <gsvelto@mozilla.com>"
1387 criteria = "safe-to-deploy"
1388 version = "0.8.0"
1389 notes = "This crates was written by Sentry and I've fully audited it as Firefox crash reporting machinery relies on it."
1390
1391 [[audits.derive_arbitrary]]
1392 who = "Mike Hommey <mh+mozilla@glandium.org>"
1393 criteria = "safe-to-run"
1394 delta = "1.1.0 -> 1.1.1"
1395
1396 [[audits.derive_arbitrary]]
1397 who = "Mike Hommey <mh+mozilla@glandium.org>"
1398 criteria = "safe-to-run"
1399 delta = "1.1.1 -> 1.1.3"
1400
1401 [[audits.derive_arbitrary]]
1402 who = "Mike Hommey <mh+mozilla@glandium.org>"
1403 criteria = "safe-to-run"
1404 delta = "1.1.3 -> 1.2.1"
1405
1406 [[audits.derive_arbitrary]]
1407 who = "Mike Hommey <mh+mozilla@glandium.org>"
1408 criteria = "safe-to-run"
1409 delta = "1.2.1 -> 1.2.3"
1410
1411 [[audits.derive_arbitrary]]
1412 who = "Mike Hommey <mh+mozilla@glandium.org>"
1413 criteria = "safe-to-run"
1414 delta = "1.3.0 -> 1.3.1"
1415
1416 [[audits.derive_more]]
1417 who = "Mike Hommey <mh+mozilla@glandium.org>"
1418 criteria = "safe-to-deploy"
1419 delta = "0.99.17 -> 1.0.0-beta.2"
1420
1421 [[audits.devd-rs]]
1422 who = "Mike Hommey <mh+mozilla@glandium.org>"
1423 criteria = "safe-to-deploy"
1424 delta = "0.3.4 -> 0.3.5"
1425
1426 [[audits.devd-rs]]
1427 who = "Mike Hommey <mh+mozilla@glandium.org>"
1428 criteria = "safe-to-deploy"
1429 delta = "0.3.5 -> 0.3.6"
1430
1431 [[audits.digest]]
1432 who = "Mike Hommey <mh+mozilla@glandium.org>"
1433 criteria = "safe-to-deploy"
1434 delta = "0.10.3 -> 0.10.6"
1435
1436 [[audits.diplomat]]
1437 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
1438 criteria = "safe-to-deploy"
1439 version = "0.5.2"
1440 notes = "This crate is FFI wrapper generator using by ICU4X ffi libraries. This uses unsafe code to convert paramenters, I have reviewed this and generated headers."
1441
1442 [[audits.diplomat]]
1443 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
1444 criteria = "safe-to-deploy"
1445 delta = "0.5.2 -> 0.5.2@git:8d125999893fedfdf30595e97334c21ec4b18da9"
1446
1447 [[audits.diplomat]]
1448 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
1449 criteria = "safe-to-deploy"
1450 delta = "0.5.2 -> 0.7.0"
1451
1452 [[audits.diplomat-runtime]]
1453 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
1454 criteria = "safe-to-deploy"
1455 version = "0.5.2"
1456 notes = "This crate is FFI wrapper generator runtime using by ICU4X ffi libraries. This uses unsafe code for memory access of FFI. I have reviewed carefully."
1457
1458 [[audits.diplomat-runtime]]
1459 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
1460 criteria = "safe-to-deploy"
1461 delta = "0.5.2 -> 0.5.2@git:8d125999893fedfdf30595e97334c21ec4b18da9"
1462
1463 [[audits.diplomat-runtime]]
1464 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
1465 criteria = "safe-to-deploy"
1466 delta = "0.5.2 -> 0.7.0"
1467
1468 [[audits.diplomat_core]]
1469 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
1470 criteria = "safe-to-deploy"
1471 version = "0.5.2"
1472 notes = "This crate contains unsafe code, no network and no file access."
1473
1474 [[audits.diplomat_core]]
1475 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
1476 criteria = "safe-to-deploy"
1477 delta = "0.5.2 -> 0.5.2@git:8d125999893fedfdf30595e97334c21ec4b18da9"
1478
1479 [[audits.diplomat_core]]
1480 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
1481 criteria = "safe-to-deploy"
1482 delta = "0.5.2 -> 0.7.0"
1483
1484 [[audits.displaydoc]]
1485 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
1486 criteria = "safe-to-deploy"
1487 version = "0.2.3"
1488 notes = """
1489 This crate is convenient macros to implement core::fmt::Display trait.
1490 Although `unsafe` is used for test code to call `libc::abort()`, it has no `unsafe` code in this crate. And there is no file access.
1491 It meets the criteria for safe-to-deploy.
1492 """
1493
1494 [[audits.displaydoc]]
1495 who = "Mike Hommey <mh+mozilla@glandium.org>"
1496 criteria = "safe-to-deploy"
1497 delta = "0.2.3 -> 0.2.4"
1498
1499 [[audits.document-features]]
1500 who = "Erich Gubler <erichdongubler@gmail.com>"
1501 criteria = "safe-to-deploy"
1502 version = "0.2.8"
1503
1504 [[audits.dogear]]
1505 who = "Sammy Khamis <skhamis@mozilla.com>"
1506 criteria = "safe-to-deploy"
1507 delta = "0.4.0 -> 0.5.0"
1508 notes = "The repository for this crate belongs in the Mozilla org."
1509
1510 [[audits.dtoa-short]]
1511 who = "Bobby Holley <bobbyholley@gmail.com>"
1512 criteria = "safe-to-deploy"
1513 version = "0.3.3"
1514
1515 [[audits.dwrote]]
1516 who = "Bobby Holley <bobbyholley@gmail.com>"
1517 criteria = "safe-to-deploy"
1518 version = "0.11.0"
1519 notes = "All code written or reviewed by Mozilla staff."
1520
1521 [[audits.either]]
1522 who = "Mike Hommey <mh+mozilla@glandium.org>"
1523 criteria = "safe-to-deploy"
1524 delta = "1.6.1 -> 1.7.0"
1525
1526 [[audits.either]]
1527 who = "Mike Hommey <mh+mozilla@glandium.org>"
1528 criteria = "safe-to-deploy"
1529 delta = "1.7.0 -> 1.8.0"
1530
1531 [[audits.either]]
1532 who = "Mike Hommey <mh+mozilla@glandium.org>"
1533 criteria = "safe-to-deploy"
1534 delta = "1.8.0 -> 1.8.1"
1535
1536 [[audits.embed-manifest]]
1537 who = "Alex Franchuk <afranchuk@mozilla.com>"
1538 criteria = "safe-to-deploy"
1539 version = "1.4.0"
1540 notes = "Necessary dependencies, all environment variable access is for build script vars set by cargo."
1541
1542 [[audits.encoding_c]]
1543 who = "Henri Sivonen <hsivonen@hsivonen.fi>"
1544 criteria = "safe-to-deploy"
1545 version = "0.9.8"
1546 notes = "I, Henri Sivonen, wrote encoding_c for Gecko even though it is published via crates.io. There are two caveats: 1) the C API is designed to be used together with mozilla::Span and is unidiomatic for zero-length inputs otherwise. 2) It is idiomatic in C and C++ to pass uninitialized buffers as output buffers. This is generally documented to be UB in Rust, but idiomatic C and C++ usage here relies on this not actually being UB for buffers of integers (which these buffers are). See https://github.com/hsivonen/encoding_rs/issues/79#issuecomment-1211870361"
1547
1548 [[audits.encoding_c_mem]]
1549 who = "Henri Sivonen <hsivonen@hsivonen.fi>"
1550 criteria = "safe-to-deploy"
1551 version = "0.2.6"
1552 notes = """
1553 I, Henri Sivonen, wrote encoding_c_mem for Gecko even though it is published via crates.io. There are two caveats: 1) the C API is designed to be used together with mozilla::Span and is unidiomatic for zero-length inputs otherwise. 2) It is idiomatic in C and C
1554 ++ to pass uninitialized buffers as output buffers. This is generally documented to be UB in Rust, but idiomatic C and C++ usage here relies on this not actually being UB for buffers of integers (which these buffers are). See https://github.com/hsivonen/encoding_rs/i
1555 ssues/79#issuecomment-1211870361
1556 """
1557
1558 [[audits.encoding_rs]]
1559 who = "Henri Sivonen <hsivonen@hsivonen.fi>"
1560 criteria = "safe-to-deploy"
1561 version = "0.8.31"
1562 notes = "I, Henri Sivonen, wrote encoding_rs for Gecko and have reviewed contributions by others. There are two caveats to the certification: 1) The crate does things that are documented to be UB but that do not appear to actually be UB due to integer types differing from the general rule; https://github.com/hsivonen/encoding_rs/issues/79 . 2) It would be prudent to re-review the code that reinterprets buffers of integers as SIMD vectors; see https://github.com/hsivonen/encoding_rs/issues/87 ."
1563
1564 [[audits.encoding_rs]]
1565 who = "Mike Hommey <mh+mozilla@glandium.org>"
1566 criteria = "safe-to-deploy"
1567 delta = "0.8.31 -> 0.8.32"
1568
1569 [[audits.enum-map]]
1570 who = "Kershaw Chang <kershaw@mozilla.com>"
1571 criteria = "safe-to-deploy"
1572 version = "2.7.3"
1573
1574 [[audits.enum-map-derive]]
1575 who = "Kershaw Chang <kershaw@mozilla.com>"
1576 criteria = "safe-to-deploy"
1577 version = "0.17.0"
1578
1579 [[audits.enum-primitive-derive]]
1580 who = "Gabriele Svelto <gsvelto@mozilla.com>"
1581 criteria = "safe-to-deploy"
1582 version = "0.2.2"
1583
1584 [[audits.enumset]]
1585 who = "Mike Hommey <mh+mozilla@glandium.org>"
1586 criteria = "safe-to-deploy"
1587 delta = "1.0.11 -> 1.0.12"
1588
1589 [[audits.enumset]]
1590 who = "Mike Hommey <mh+mozilla@glandium.org>"
1591 criteria = "safe-to-deploy"
1592 delta = "1.0.12 -> 1.1.2"
1593
1594 [[audits.enumset_derive]]
1595 who = "Mike Hommey <mh+mozilla@glandium.org>"
1596 criteria = "safe-to-deploy"
1597 delta = "0.6.0 -> 0.6.1"
1598
1599 [[audits.enumset_derive]]
1600 who = "Mike Hommey <mh+mozilla@glandium.org>"
1601 criteria = "safe-to-deploy"
1602 delta = "0.6.1 -> 0.8.1"
1603
1604 [[audits.env_logger]]
1605 who = "Mike Hommey <mh+mozilla@glandium.org>"
1606 criteria = "safe-to-deploy"
1607 delta = "0.9.0 -> 0.9.3"
1608
1609 [[audits.env_logger]]
1610 who = "Nicolas Silva <nical@fastmail.com>"
1611 criteria = "safe-to-deploy"
1612 delta = "0.9.3 -> 0.10.0"
1613
1614 [[audits.errno]]
1615 who = "Mike Hommey <mh+mozilla@glandium.org>"
1616 criteria = "safe-to-deploy"
1617 delta = "0.3.1 -> 0.3.3"
1618
1619 [[audits.extend]]
1620 who = "Ben Dean-Kawamura <bdk@mozilla.com>"
1621 criteria = "safe-to-deploy"
1622 version = "1.1.2"
1623 notes = "Inspected the crate and noted that the impl block comes directly from the proc-macro input.  If no new code can be added by this crate, I don't think there can be any issues."
1624
1625 [[audits.extend]]
1626 who = "Mike Hommey <mh+mozilla@glandium.org>"
1627 criteria = "safe-to-deploy"
1628 delta = "1.1.2 -> 1.2.0"
1629
1630 [[audits.fallible_collections]]
1631 who = "Mike Hommey <mh+mozilla@glandium.org>"
1632 criteria = "safe-to-deploy"
1633 delta = "0.4.4 -> 0.4.5"
1634
1635 [[audits.fallible_collections]]
1636 who = "Mike Hommey <mh+mozilla@glandium.org>"
1637 criteria = "safe-to-deploy"
1638 delta = "0.4.5 -> 0.4.6"
1639 notes = "The changes in this version are mine."
1640
1641 [[audits.fastrand]]
1642 who = "Mike Hommey <mh+mozilla@glandium.org>"
1643 criteria = "safe-to-deploy"
1644 delta = "1.7.0 -> 1.8.0"
1645
1646 [[audits.fastrand]]
1647 who = "Mike Hommey <mh+mozilla@glandium.org>"
1648 criteria = "safe-to-deploy"
1649 delta = "1.8.0 -> 1.9.0"
1650
1651 [[audits.fastrand]]
1652 who = "Mike Hommey <mh+mozilla@glandium.org>"
1653 criteria = "safe-to-deploy"
1654 delta = "1.9.0 -> 2.0.0"
1655
1656 [[audits.filetime_win]]
1657 who = "Nick Alexander <nalexander@mozilla.com>"
1658 criteria = "safe-to-deploy"
1659 version = "0.2.0"
1660 notes = """
1661 filetime_win was written by Adam Gashlin for Mozilla's use.  The `unsafe` code
1662 blocks in filetime_win 0.2.0 are straight-forward invocations of `mem::zeroed`
1663 and expected invocations of Win32 APIs (with error handling as appropriate).
1664 """
1665
1666 [[audits.flagset]]
1667 who = "Ryan Hunt <rhunt@eqrion.net>"
1668 criteria = "safe-to-deploy"
1669 version = "0.4.3"
1670 notes = "Uses no ambient capabilities, vetted the one instance of unsafe."
1671
1672 [[audits.flate2]]
1673 who = "Mike Hommey <mh+mozilla@glandium.org>"
1674 criteria = "safe-to-deploy"
1675 delta = "1.0.24 -> 1.0.25"
1676
1677 [[audits.fluent]]
1678 who = "Zibi Braniecki <zibi@unicode.org>"
1679 criteria = "safe-to-deploy"
1680 version = "0.16.0"
1681
1682 [[audits.fluent-bundle]]
1683 who = "Zibi Braniecki <zibi@unicode.org>"
1684 criteria = "safe-to-deploy"
1685 version = "0.15.2"
1686
1687 [[audits.fluent-fallback]]
1688 who = "Zibi Braniecki <zibi@unicode.org>"
1689 criteria = "safe-to-deploy"
1690 version = "0.6.0"
1691
1692 [[audits.fluent-fallback]]
1693 who = "Greg Tatum <tatum.creative@gmail.com>"
1694 criteria = "safe-to-deploy"
1695 delta = "0.6.0 -> 0.7.0"
1696
1697 [[audits.fluent-langneg]]
1698 who = "Zibi Braniecki <zibi@unicode.org>"
1699 criteria = "safe-to-deploy"
1700 version = "0.13.0"
1701
1702 [[audits.fluent-pseudo]]
1703 who = "Zibi Braniecki <zibi@unicode.org>"
1704 criteria = "safe-to-deploy"
1705 version = "0.3.1"
1706
1707 [[audits.fluent-syntax]]
1708 who = "Zibi Braniecki <zibi@unicode.org>"
1709 criteria = "safe-to-deploy"
1710 version = "0.11.0"
1711
1712 [[audits.fluent-testing]]
1713 who = "Zibi Braniecki <zibi@unicode.org>"
1714 criteria = "safe-to-run"
1715 version = "0.0.2"
1716
1717 [[audits.fluent-testing]]
1718 who = "Greg Tatum <tatum.creative@gmail.com>"
1719 criteria = "safe-to-run"
1720 delta = "0.0.2 -> 0.0.3"
1721
1722 [[audits.fnv]]
1723 who = "Bobby Holley <bobbyholley@gmail.com>"
1724 criteria = "safe-to-deploy"
1725 version = "1.0.7"
1726 notes = "Simple hasher implementation with no unsafe code."
1727
1728 [[audits.foreign-types]]
1729 who = "Teodor Tanasoaia <ttanasoaia@mozilla.com>"
1730 criteria = "safe-to-deploy"
1731 delta = "0.3.2 -> 0.5.0"
1732
1733 [[audits.foreign-types-macros]]
1734 who = "Teodor Tanasoaia <ttanasoaia@mozilla.com>"
1735 criteria = "safe-to-deploy"
1736 version = "0.2.3"
1737
1738 [[audits.foreign-types-shared]]
1739 who = "Teodor Tanasoaia <ttanasoaia@mozilla.com>"
1740 criteria = "safe-to-deploy"
1741 delta = "0.1.1 -> 0.3.1"
1742
1743 [[audits.form_urlencoded]]
1744 who = "Valentin Gosu <valentin.gosu@gmail.com>"
1745 criteria = "safe-to-deploy"
1746 version = "1.2.0"
1747
1748 [[audits.form_urlencoded]]
1749 who = "Valentin Gosu <valentin.gosu@gmail.com>"
1750 criteria = "safe-to-deploy"
1751 delta = "1.2.0 -> 1.2.1"
1752
1753 [[audits.fs-err]]
1754 who = "Mike Hommey <mh+mozilla@glandium.org>"
1755 criteria = "safe-to-deploy"
1756 delta = "2.7.0 -> 2.8.1"
1757
1758 [[audits.fs-err]]
1759 who = "Mike Hommey <mh+mozilla@glandium.org>"
1760 criteria = "safe-to-deploy"
1761 delta = "2.8.1 -> 2.9.0"
1762
1763 [[audits.futures]]
1764 who = "Mike Hommey <mh+mozilla@glandium.org>"
1765 criteria = "safe-to-deploy"
1766 delta = "0.3.21 -> 0.3.23"
1767
1768 [[audits.futures]]
1769 who = "Mike Hommey <mh+mozilla@glandium.org>"
1770 criteria = "safe-to-deploy"
1771 delta = "0.3.23 -> 0.3.25"
1772
1773 [[audits.futures]]
1774 who = "Mike Hommey <mh+mozilla@glandium.org>"
1775 criteria = "safe-to-deploy"
1776 delta = "0.3.25 -> 0.3.26"
1777
1778 [[audits.futures]]
1779 who = "Mike Hommey <mh+mozilla@glandium.org>"
1780 criteria = "safe-to-deploy"
1781 delta = "0.3.26 -> 0.3.28"
1782
1783 [[audits.futures-channel]]
1784 who = "Mike Hommey <mh+mozilla@glandium.org>"
1785 criteria = "safe-to-deploy"
1786 delta = "0.3.21 -> 0.3.23"
1787
1788 [[audits.futures-channel]]
1789 who = "Mike Hommey <mh+mozilla@glandium.org>"
1790 criteria = "safe-to-deploy"
1791 delta = "0.3.23 -> 0.3.25"
1792
1793 [[audits.futures-channel]]
1794 who = "Mike Hommey <mh+mozilla@glandium.org>"
1795 criteria = "safe-to-deploy"
1796 delta = "0.3.25 -> 0.3.26"
1797
1798 [[audits.futures-channel]]
1799 who = "Bobby Holley <bobbyholley@gmail.com>"
1800 criteria = "safe-to-deploy"
1801 delta = "0.3.27 -> 0.3.26"
1802
1803 [[audits.futures-channel]]
1804 who = "Mike Hommey <mh+mozilla@glandium.org>"
1805 criteria = "safe-to-deploy"
1806 delta = "0.3.27 -> 0.3.28"
1807
1808 [[audits.futures-core]]
1809 who = "Mike Hommey <mh+mozilla@glandium.org>"
1810 criteria = "safe-to-deploy"
1811 delta = "0.3.21 -> 0.3.23"
1812
1813 [[audits.futures-core]]
1814 who = "Mike Hommey <mh+mozilla@glandium.org>"
1815 criteria = "safe-to-deploy"
1816 delta = "0.3.23 -> 0.3.25"
1817
1818 [[audits.futures-core]]
1819 who = "Mike Hommey <mh+mozilla@glandium.org>"
1820 criteria = "safe-to-deploy"
1821 delta = "0.3.25 -> 0.3.26"
1822
1823 [[audits.futures-core]]
1824 who = "Bobby Holley <bobbyholley@gmail.com>"
1825 criteria = "safe-to-deploy"
1826 delta = "0.3.27 -> 0.3.26"
1827
1828 [[audits.futures-core]]
1829 who = "Mike Hommey <mh+mozilla@glandium.org>"
1830 criteria = "safe-to-deploy"
1831 delta = "0.3.27 -> 0.3.28"
1832
1833 [[audits.futures-executor]]
1834 who = "Mike Hommey <mh+mozilla@glandium.org>"
1835 criteria = "safe-to-deploy"
1836 delta = "0.3.21 -> 0.3.23"
1837
1838 [[audits.futures-executor]]
1839 who = "Mike Hommey <mh+mozilla@glandium.org>"
1840 criteria = "safe-to-deploy"
1841 delta = "0.3.23 -> 0.3.25"
1842
1843 [[audits.futures-executor]]
1844 who = "Mike Hommey <mh+mozilla@glandium.org>"
1845 criteria = "safe-to-deploy"
1846 delta = "0.3.25 -> 0.3.26"
1847
1848 [[audits.futures-executor]]
1849 who = "Bobby Holley <bobbyholley@gmail.com>"
1850 criteria = "safe-to-deploy"
1851 delta = "0.3.27 -> 0.3.23"
1852
1853 [[audits.futures-executor]]
1854 who = "Mike Hommey <mh+mozilla@glandium.org>"
1855 criteria = "safe-to-deploy"
1856 delta = "0.3.27 -> 0.3.28"
1857
1858 [[audits.futures-io]]
1859 who = "Mike Hommey <mh+mozilla@glandium.org>"
1860 criteria = "safe-to-deploy"
1861 delta = "0.3.21 -> 0.3.23"
1862
1863 [[audits.futures-io]]
1864 who = "Mike Hommey <mh+mozilla@glandium.org>"
1865 criteria = "safe-to-deploy"
1866 delta = "0.3.23 -> 0.3.25"
1867
1868 [[audits.futures-io]]
1869 who = "Mike Hommey <mh+mozilla@glandium.org>"
1870 criteria = "safe-to-deploy"
1871 delta = "0.3.25 -> 0.3.26"
1872
1873 [[audits.futures-io]]
1874 who = "Bobby Holley <bobbyholley@gmail.com>"
1875 criteria = "safe-to-deploy"
1876 delta = "0.3.27 -> 0.3.23"
1877
1878 [[audits.futures-io]]
1879 who = "Mike Hommey <mh+mozilla@glandium.org>"
1880 criteria = "safe-to-deploy"
1881 delta = "0.3.27 -> 0.3.28"
1882
1883 [[audits.futures-macro]]
1884 who = "Mike Hommey <mh+mozilla@glandium.org>"
1885 criteria = "safe-to-deploy"
1886 delta = "0.3.21 -> 0.3.23"
1887
1888 [[audits.futures-macro]]
1889 who = "Mike Hommey <mh+mozilla@glandium.org>"
1890 criteria = "safe-to-deploy"
1891 delta = "0.3.23 -> 0.3.25"
1892
1893 [[audits.futures-macro]]
1894 who = "Mike Hommey <mh+mozilla@glandium.org>"
1895 criteria = "safe-to-deploy"
1896 delta = "0.3.25 -> 0.3.26"
1897
1898 [[audits.futures-macro]]
1899 who = "Mike Hommey <mh+mozilla@glandium.org>"
1900 criteria = "safe-to-deploy"
1901 delta = "0.3.26 -> 0.3.28"
1902
1903 [[audits.futures-sink]]
1904 who = "Mike Hommey <mh+mozilla@glandium.org>"
1905 criteria = "safe-to-deploy"
1906 delta = "0.3.21 -> 0.3.23"
1907
1908 [[audits.futures-sink]]
1909 who = "Mike Hommey <mh+mozilla@glandium.org>"
1910 criteria = "safe-to-deploy"
1911 delta = "0.3.23 -> 0.3.25"
1912
1913 [[audits.futures-sink]]
1914 who = "Mike Hommey <mh+mozilla@glandium.org>"
1915 criteria = "safe-to-deploy"
1916 delta = "0.3.25 -> 0.3.26"
1917
1918 [[audits.futures-sink]]
1919 who = "Bobby Holley <bobbyholley@gmail.com>"
1920 criteria = "safe-to-deploy"
1921 delta = "0.3.27 -> 0.3.23"
1922
1923 [[audits.futures-sink]]
1924 who = "Mike Hommey <mh+mozilla@glandium.org>"
1925 criteria = "safe-to-deploy"
1926 delta = "0.3.27 -> 0.3.28"
1927
1928 [[audits.futures-task]]
1929 who = "Mike Hommey <mh+mozilla@glandium.org>"
1930 criteria = "safe-to-deploy"
1931 delta = "0.3.21 -> 0.3.23"
1932
1933 [[audits.futures-task]]
1934 who = "Mike Hommey <mh+mozilla@glandium.org>"
1935 criteria = "safe-to-deploy"
1936 delta = "0.3.23 -> 0.3.25"
1937
1938 [[audits.futures-task]]
1939 who = "Mike Hommey <mh+mozilla@glandium.org>"
1940 criteria = "safe-to-deploy"
1941 delta = "0.3.25 -> 0.3.26"
1942
1943 [[audits.futures-task]]
1944 who = "Mike Hommey <mh+mozilla@glandium.org>"
1945 criteria = "safe-to-deploy"
1946 delta = "0.3.26 -> 0.3.28"
1947
1948 [[audits.futures-util]]
1949 who = "Mike Hommey <mh+mozilla@glandium.org>"
1950 criteria = "safe-to-deploy"
1951 delta = "0.3.21 -> 0.3.23"
1952
1953 [[audits.futures-util]]
1954 who = "Mike Hommey <mh+mozilla@glandium.org>"
1955 criteria = "safe-to-deploy"
1956 delta = "0.3.23 -> 0.3.25"
1957
1958 [[audits.futures-util]]
1959 who = "Mike Hommey <mh+mozilla@glandium.org>"
1960 criteria = "safe-to-deploy"
1961 delta = "0.3.25 -> 0.3.26"
1962
1963 [[audits.futures-util]]
1964 who = "Mike Hommey <mh+mozilla@glandium.org>"
1965 criteria = "safe-to-deploy"
1966 delta = "0.3.26 -> 0.3.28"
1967
1968 [[audits.fxhash]]
1969 who = "Bobby Holley <bobbyholley@gmail.com>"
1970 criteria = "safe-to-deploy"
1971 version = "0.2.1"
1972 notes = "Straightforward crate with no unsafe code, does what it says on the tin."
1973
1974 [[audits.generic-array]]
1975 who = "Mike Hommey <mh+mozilla@glandium.org>"
1976 criteria = "safe-to-deploy"
1977 delta = "0.14.5 -> 0.14.6"
1978
1979 [[audits.getrandom]]
1980 who = "Mike Hommey <mh+mozilla@glandium.org>"
1981 criteria = "safe-to-deploy"
1982 delta = "0.2.6 -> 0.2.7"
1983
1984 [[audits.getrandom]]
1985 who = "Mike Hommey <mh+mozilla@glandium.org>"
1986 criteria = "safe-to-deploy"
1987 delta = "0.2.7 -> 0.2.8"
1988
1989 [[audits.getrandom]]
1990 who = "Yannis Juglaret <yjuglaret@mozilla.com>"
1991 criteria = "safe-to-deploy"
1992 delta = "0.2.8 -> 0.2.9"
1993
1994 [[audits.getrandom]]
1995 who = "Simon Friedberger <simon@mozilla.com>"
1996 criteria = "safe-to-deploy"
1997 delta = "0.2.10 -> 0.2.11"
1998
1999 [[audits.gleam]]
2000 who = "Jamie Nicol <jnicol@mozilla.com>"
2001 criteria = "safe-to-deploy"
2002 delta = "0.13.1 -> 0.15.0"
2003
2004 [[audits.glob]]
2005 who = "Mike Hommey <mh+mozilla@glandium.org>"
2006 criteria = "safe-to-deploy"
2007 delta = "0.3.0 -> 0.3.1"
2008
2009 [[audits.glsl]]
2010 who = "Mike Hommey <mh+mozilla@glandium.org>"
2011 criteria = "safe-to-deploy"
2012 delta = "6.0.1 -> 6.0.2"
2013 notes = "I'm the author of the changes in this version of the crate."
2014
2015 [[audits.goblin]]
2016 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
2017 criteria = "safe-to-deploy"
2018 delta = "0.1.3 -> 0.5.4"
2019 notes = "Several bugfixes since 2019. This version is also in use by Mozilla's crash reporting tooling, e.g. minidump-writer"
2020
2021 [[audits.goblin]]
2022 who = "Gabriele Svelto <gsvelto@mozilla.com>"
2023 criteria = "safe-to-deploy"
2024 delta = "0.5.4 -> 0.6.0"
2025 notes = "Mostly bug fixes and some added functionality"
2026
2027 [[audits.goblin]]
2028 who = "Gabriele Svelto <gsvelto@mozilla.com>"
2029 criteria = "safe-to-deploy"
2030 delta = "0.6.0 -> 0.7.1"
2031
2032 [[audits.gpu-alloc]]
2033 who = "Teodor Tanasoaia <ttanasoaia@mozilla.com>"
2034 criteria = "safe-to-deploy"
2035 delta = "0.5.3 -> 0.6.0"
2036
2037 [[audits.gpu-alloc-types]]
2038 who = "Teodor Tanasoaia <ttanasoaia@mozilla.com>"
2039 criteria = "safe-to-deploy"
2040 delta = "0.2.0 -> 0.3.0"
2041
2042 [[audits.gpu-allocator]]
2043 who = "Erich Gubler <erichdongubler@gmail.com>"
2044 criteria = "safe-to-deploy"
2045 version = "0.25.0"
2046
2047 [[audits.gpu-descriptor]]
2048 who = "Mike Hommey <mh+mozilla@glandium.org>"
2049 criteria = "safe-to-deploy"
2050 delta = "0.2.2 -> 0.2.3"
2051
2052 [[audits.guid_win]]
2053 who = "Bobby Holley <bobbyholley@gmail.com>"
2054 criteria = "safe-to-deploy"
2055 version = "0.2.0"
2056 notes = """
2057 This crate has some unsafe code for the FFI bits, which I've reviewed carefully.
2058 It uses the deprecated mem::uninitialized(), which is generally sketchy. However
2059 the usage is pretty straightforward and while it's technically UB, it seems no
2060 more likely to lead to miscompilation than any other use of mem::uninitialized.
2061 """
2062
2063 [[audits.h2]]
2064 who = "Mike Hommey <mh+mozilla@glandium.org>"
2065 criteria = "safe-to-run"
2066 delta = "0.3.13 -> 0.3.14"
2067
2068 [[audits.h2]]
2069 who = "Mike Hommey <mh+mozilla@glandium.org>"
2070 criteria = "safe-to-run"
2071 delta = "0.3.14 -> 0.3.15"
2072
2073 [[audits.half]]
2074 who = "John M. Schanck <jschanck@mozilla.com>"
2075 criteria = "safe-to-deploy"
2076 version = "1.8.2"
2077 notes = """
2078 This crate contains unsafe code for bitwise casts to/from binary16 floating-point
2079 format. I've reviewed these and found no issues. There are no uses of ambient
2080 capabilities.
2081 """
2082
2083 [[audits.hashbrown]]
2084 who = "Mike Hommey <mh+mozilla@glandium.org>"
2085 criteria = "safe-to-deploy"
2086 version = "0.12.3"
2087 notes = "This version is used in rust's libstd, so effectively we're already trusting it"
2088
2089 [[audits.hashlink]]
2090 who = "Mike Hommey <mh+mozilla@glandium.org>"
2091 criteria = "safe-to-deploy"
2092 delta = "0.7.0 -> 0.8.1"
2093
2094 [[audits.headers]]
2095 who = "Mike Hommey <mh+mozilla@glandium.org>"
2096 criteria = "safe-to-run"
2097 delta = "0.3.7 -> 0.3.8"
2098
2099 [[audits.headers-core]]
2100 who = "Bobby Holley <bobbyholley@gmail.com>"
2101 criteria = "safe-to-deploy"
2102 version = "0.2.0"
2103 notes = "Trivial crate, no unsafe code."
2104
2105 [[audits.heck]]
2106 who = "Mike Hommey <mh+mozilla@glandium.org>"
2107 criteria = "safe-to-deploy"
2108 delta = "0.4.0 -> 0.4.1"
2109
2110 [[audits.hermit-abi]]
2111 who = "Mike Hommey <mh+mozilla@glandium.org>"
2112 criteria = "safe-to-deploy"
2113 delta = "0.1.19 -> 0.2.6"
2114
2115 [[audits.hex]]
2116 who = "Simon Friedberger <simon@mozilla.com>"
2117 criteria = "safe-to-deploy"
2118 version = "0.4.3"
2119
2120 [[audits.http]]
2121 who = "Mike Hommey <mh+mozilla@glandium.org>"
2122 criteria = "safe-to-run"
2123 delta = "0.2.8 -> 0.2.9"
2124
2125 [[audits.httparse]]
2126 who = "Mike Hommey <mh+mozilla@glandium.org>"
2127 criteria = "safe-to-run"
2128 delta = "1.7.1 -> 1.8.0"
2129
2130 [[audits.hyper]]
2131 who = "Mike Hommey <mh+mozilla@glandium.org>"
2132 criteria = "safe-to-run"
2133 delta = "0.14.19 -> 0.14.20"
2134
2135 [[audits.hyper]]
2136 who = "Mike Hommey <mh+mozilla@glandium.org>"
2137 criteria = "safe-to-run"
2138 delta = "0.14.20 -> 0.14.22"
2139
2140 [[audits.hyper]]
2141 who = "Mike Hommey <mh+mozilla@glandium.org>"
2142 criteria = "safe-to-run"
2143 delta = "0.14.22 -> 0.14.23"
2144
2145 [[audits.hyper]]
2146 who = "Mike Hommey <mh+mozilla@glandium.org>"
2147 criteria = "safe-to-run"
2148 delta = "0.14.23 -> 0.14.24"
2149
2150 [[audits.icu_capi]]
2151 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
2152 criteria = "safe-to-deploy"
2153 version = "1.2.2"
2154 notes = "This crate is C/C++ FFI for ICU4X using diplomat crate. no unsafe and no file access etc on this crate."
2155
2156 [[audits.icu_capi]]
2157 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
2158 criteria = "safe-to-deploy"
2159 delta = "1.2.2 -> 1.4.0"
2160
2161 [[audits.icu_collections]]
2162 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
2163 criteria = "safe-to-deploy"
2164 version = "1.2.0"
2165 notes = "This crate is used by ICU4X for internal data structure. There is no fileaccess and network access. This uses unsafe block, but we confirm data is valid before."
2166
2167 [[audits.icu_collections]]
2168 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
2169 criteria = "safe-to-deploy"
2170 delta = "1.2.0 -> 1.4.0"
2171
2172 [[audits.icu_locid]]
2173 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
2174 criteria = "safe-to-deploy"
2175 version = "1.2.0"
2176 notes = "This has unsafe block to handle ascii string in utf-8 string. I've vetted the one instance of unsafe code."
2177
2178 [[audits.icu_locid]]
2179 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
2180 criteria = "safe-to-deploy"
2181 delta = "1.2.0 -> 1.4.0"
2182
2183 [[audits.icu_locid_transform]]
2184 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
2185 criteria = "safe-to-deploy"
2186 version = "1.4.0"
2187 notes = "This crate doesn't contain network and file access. Although this has unsafe block, the reason is added in the comment block. I audited code."
2188
2189 [[audits.icu_locid_transform_data]]
2190 who = "Jonathan Kew <jkew@mozilla.com>"
2191 criteria = "safe-to-deploy"
2192 version = "1.4.0"
2193 notes = "Compile-time static for the icu_locid_transform crate."
2194
2195 [[audits.icu_properties]]
2196 who = "Jonathan Kew <jkew@mozilla.com>"
2197 criteria = "safe-to-deploy"
2198 version = "1.4.0"
2199 notes = "This is used by ICU4X for character property lookup. The few (4) usages of unsafe have comments clarifying their safety."
2200
2201 [[audits.icu_properties_data]]
2202 who = "Jonathan Kew <jkew@mozilla.com>"
2203 criteria = "safe-to-deploy"
2204 version = "1.4.0"
2205 notes = "Compile-time static data for the icu_properties crate."
2206
2207 [[audits.icu_provider]]
2208 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
2209 criteria = "safe-to-deploy"
2210 version = "1.2.0"
2211 notes = "Although this has unsafe block, this has a commnet why this is safety and I audited code. Also, this doesn't have file access and network access."
2212
2213 [[audits.icu_provider]]
2214 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
2215 criteria = "safe-to-deploy"
2216 delta = "1.2.0 -> 1.4.0"
2217
2218 [[audits.icu_provider_adapters]]
2219 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
2220 criteria = "safe-to-deploy"
2221 version = "1.2.0"
2222 notes = "This is one of ICU4X data provider crates that depends on data type. This has no unsafe code and uses no ambient capabilities."
2223
2224 [[audits.icu_provider_adapters]]
2225 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
2226 criteria = "safe-to-deploy"
2227 delta = "1.2.0 -> 1.4.0"
2228
2229 [[audits.icu_provider_macros]]
2230 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
2231 criteria = "safe-to-deploy"
2232 version = "1.2.0"
2233 notes = "This crate is macros for ICU4X's data provider implementer. This has no unsafe code and uses no ambient capabilities."
2234
2235 [[audits.icu_provider_macros]]
2236 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
2237 criteria = "safe-to-deploy"
2238 delta = "1.2.0 -> 1.2.0@git:14e9a3a9857be74582abe2dfa7ab799c5eaac873"
2239
2240 [[audits.icu_provider_macros]]
2241 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
2242 criteria = "safe-to-deploy"
2243 delta = "1.2.0 -> 1.4.0"
2244
2245 [[audits.icu_segmenter]]
2246 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
2247 criteria = "safe-to-deploy"
2248 version = "1.2.1"
2249 notes = "Original authors are Makoto Kato and Ting-Yu Lin who work at Mozilla. This crate uses unsafe to matrix calculation, but it is safety to check length. And there is no filesystem / network access."
2250
2251 [[audits.icu_segmenter]]
2252 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
2253 criteria = "safe-to-deploy"
2254 delta = "1.2.1 -> 1.4.0"
2255
2256 [[audits.icu_segmenter_data]]
2257 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
2258 criteria = "safe-to-deploy"
2259 version = "1.4.0"
2260 notes = "This crate is data only for icu_segmenter. There is no filesystem / network access."
2261
2262 [[audits.idna]]
2263 who = "Bobby Holley <bobbyholley@gmail.com>"
2264 criteria = "safe-to-deploy"
2265 delta = "0.3.0 -> 0.2.3"
2266 notes = "Backwards diff with some algorithm changes, no unsafe code."
2267
2268 [[audits.idna]]
2269 who = "Valentin Gosu <valentin.gosu@gmail.com>"
2270 criteria = "safe-to-deploy"
2271 delta = "0.4.0 -> 0.5.0"
2272
2273 [[audits.indexmap]]
2274 who = "Mike Hommey <mh+mozilla@glandium.org>"
2275 criteria = "safe-to-deploy"
2276 delta = "1.8.2 -> 1.9.1"
2277
2278 [[audits.indexmap]]
2279 who = "Mike Hommey <mh+mozilla@glandium.org>"
2280 criteria = "safe-to-deploy"
2281 delta = "1.9.1 -> 1.9.2"
2282
2283 [[audits.inherent]]
2284 who = "Mike Hommey <mh+mozilla@glandium.org>"
2285 criteria = "safe-to-deploy"
2286 delta = "1.0.1 -> 1.0.2"
2287
2288 [[audits.inherent]]
2289 who = "Mike Hommey <mh+mozilla@glandium.org>"
2290 criteria = "safe-to-deploy"
2291 delta = "1.0.2 -> 1.0.3"
2292
2293 [[audits.inherent]]
2294 who = "Mike Hommey <mh+mozilla@glandium.org>"
2295 criteria = "safe-to-deploy"
2296 delta = "1.0.3 -> 1.0.4"
2297
2298 [[audits.inplace_it]]
2299 who = "Mike Hommey <mh+mozilla@glandium.org>"
2300 criteria = "safe-to-deploy"
2301 delta = "0.3.3 -> 0.3.4"
2302
2303 [[audits.intl-memoizer]]
2304 who = "Zibi Braniecki <zibi@unicode.org>"
2305 criteria = "safe-to-deploy"
2306 version = "0.5.1"
2307
2308 [[audits.intl_pluralrules]]
2309 who = "Zibi Braniecki <zibi@unicode.org>"
2310 criteria = "safe-to-deploy"
2311 version = "7.0.1"
2312
2313 [[audits.intl_pluralrules]]
2314 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
2315 criteria = "safe-to-deploy"
2316 delta = "7.0.1 -> 7.0.2"
2317
2318 [[audits.itertools]]
2319 who = "Mike Hommey <mh+mozilla@glandium.org>"
2320 criteria = "safe-to-deploy"
2321 delta = "0.10.3 -> 0.10.5"
2322
2323 [[audits.itoa]]
2324 who = "Mike Hommey <mh+mozilla@glandium.org>"
2325 criteria = "safe-to-deploy"
2326 delta = "1.0.2 -> 1.0.3"
2327
2328 [[audits.itoa]]
2329 who = "Mike Hommey <mh+mozilla@glandium.org>"
2330 criteria = "safe-to-deploy"
2331 delta = "1.0.3 -> 1.0.5"
2332
2333 [[audits.jobserver]]
2334 who = "Mike Hommey <mh+mozilla@glandium.org>"
2335 criteria = "safe-to-deploy"
2336 delta = "0.1.24 -> 0.1.25"
2337
2338 [[audits.keccak]]
2339 who = "Simon Friedberger <simon@mozilla.com>"
2340 criteria = "safe-to-deploy"
2341 delta = "0.1.2 -> 0.1.3"
2342
2343 [[audits.khronos-egl]]
2344 who = "Nicolas Silva <nical@fastmail.com>"
2345 criteria = "safe-to-deploy"
2346 delta = "4.1.0 -> 6.0.0"
2347
2348 [[audits.libc]]
2349 who = "Mike Hommey <mh+mozilla@glandium.org>"
2350 criteria = "safe-to-deploy"
2351 delta = "0.2.126 -> 0.2.132"
2352
2353 [[audits.libc]]
2354 who = "Mike Hommey <mh+mozilla@glandium.org>"
2355 criteria = "safe-to-deploy"
2356 delta = "0.2.132 -> 0.2.138"
2357
2358 [[audits.libc]]
2359 who = "Mike Hommey <mh+mozilla@glandium.org>"
2360 criteria = "safe-to-deploy"
2361 delta = "0.2.138 -> 0.2.139"
2362
2363 [[audits.libc]]
2364 who = "Mike Hommey <mh+mozilla@glandium.org>"
2365 criteria = "safe-to-deploy"
2366 delta = "0.2.147 -> 0.2.148"
2367
2368 [[audits.libloading]]
2369 who = "Mike Hommey <mh+mozilla@glandium.org>"
2370 criteria = "safe-to-deploy"
2371 delta = "0.7.3 -> 0.7.4"
2372
2373 [[audits.libm]]
2374 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
2375 criteria = "safe-to-deploy"
2376 version = "0.2.6"
2377 notes = "This crate uses unsafe block, but this doesn't have network and file access. I audited code."
2378
2379 [[audits.libsqlite3-sys]]
2380 who = "Ben Dean-Kawamura <bdk@mozilla.com>"
2381 criteria = "safe-to-deploy"
2382 delta = "0.25.2 -> 0.26.0"
2383
2384 [[audits.libsqlite3-sys]]
2385 who = "Mark Hammond <mhammond@mozilla.com>"
2386 criteria = "safe-to-deploy"
2387 delta = "0.26.0 -> 0.27.0"
2388
2389 [[audits.linked-hash-map]]
2390 who = "Aria Beingessner <a.beingessner@gmail.com>"
2391 criteria = "safe-to-deploy"
2392 version = "0.5.4"
2393 notes = "I own this crate (I am contain-rs) and 0.5.4 passes miri. This code is very old and used by lots of people, so I'm pretty confident in it, even though it's in maintenance-mode and missing some nice-to-have APIs."
2394
2395 [[audits.linked-hash-map]]
2396 who = "Alex Franchuk <afranchuk@mozilla.com>"
2397 criteria = "safe-to-deploy"
2398 delta = "0.5.4 -> 0.5.6"
2399 notes = "New unsafe code has debug assertions and meets invariants. All other changes are formatting-related."
2400
2401 [[audits.linked-hash-map]]
2402 who = "Mike Hommey <mh+mozilla@glandium.org>"
2403 criteria = "safe-to-run"
2404 delta = "0.5.4 -> 0.5.6"
2405
2406 [[audits.litemap]]
2407 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
2408 criteria = "safe-to-deploy"
2409 version = "0.7.0"
2410 notes = "This crete has no unsafe code, no file acceess and no network access."
2411
2412 [[audits.litemap]]
2413 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
2414 criteria = "safe-to-deploy"
2415 delta = "0.7.0 -> 0.7.2"
2416
2417 [[audits.litrs]]
2418 who = "Erich Gubler <erichdongubler@gmail.com>"
2419 criteria = "safe-to-deploy"
2420 version = "0.4.1"
2421
2422 [[audits.lmdb-rkv]]
2423 who = "Bobby Holley <bobbyholley@gmail.com>"
2424 criteria = "safe-to-deploy"
2425 version = "0.14.0"
2426 notes = "Victor and Myk developed this crate at Mozilla."
2427
2428 [[audits.lock_api]]
2429 who = "Mike Hommey <mh+mozilla@glandium.org>"
2430 criteria = "safe-to-deploy"
2431 delta = "0.4.7 -> 0.4.9"
2432
2433 [[audits.log]]
2434 who = "Mike Hommey <mh+mozilla@glandium.org>"
2435 criteria = "safe-to-deploy"
2436 version = "0.4.17"
2437
2438 [[audits.mach2]]
2439 who = "Gabriele Svelto <gsvelto@mozilla.com>"
2440 criteria = "safe-to-deploy"
2441 version = "0.4.1"
2442
2443 [[audits.malloc_buf]]
2444 who = "Bobby Holley <bobbyholley@gmail.com>"
2445 criteria = "safe-to-deploy"
2446 version = "0.0.6"
2447 notes = """
2448 Very small crate for managing malloc-ed buffers, primarily for use in the objc crate.
2449 There is an edge-case condition that passes slice::from_raw_parts(0x1, 0) which I'm
2450 not entirely certain is technically sound, but in either case I am reasonably confident
2451 it's not exploitable.
2452 """
2453
2454 [[audits.malloc_size_of_derive]]
2455 who = "Bobby Holley <bobbyholley@gmail.com>"
2456 criteria = "safe-to-deploy"
2457 version = "0.1.2"
2458 notes = """
2459 This was originally servo code which I put on crates.io some years ago but didn't
2460 examine at the time, so I examined it now. I didn't perform a full logic review
2461 but convinced myself that any generated code will be entirely safe to deploy.
2462 """
2463
2464 [[audits.matches]]
2465 who = "Bobby Holley <bobbyholley@gmail.com>"
2466 criteria = "safe-to-deploy"
2467 version = "0.1.9"
2468 notes = "This is a trivial crate."
2469
2470 [[audits.matches]]
2471 who = "Mike Hommey <mh+mozilla@glandium.org>"
2472 criteria = "safe-to-deploy"
2473 delta = "0.1.9 -> 0.1.10"
2474
2475 [[audits.md-5]]
2476 who = "Dana Keeler <dkeeler@mozilla.com>"
2477 criteria = "safe-to-deploy"
2478 version = "0.10.5"
2479
2480 [[audits.memmap2]]
2481 who = "Mike Hommey <mh+mozilla@glandium.org>"
2482 criteria = "safe-to-deploy"
2483 delta = "0.5.4 -> 0.5.7"
2484
2485 [[audits.memmap2]]
2486 who = "Mike Hommey <mh+mozilla@glandium.org>"
2487 criteria = "safe-to-deploy"
2488 delta = "0.5.7 -> 0.5.8"
2489
2490 [[audits.memmap2]]
2491 who = "Mike Hommey <mh+mozilla@glandium.org>"
2492 criteria = "safe-to-deploy"
2493 delta = "0.5.8 -> 0.5.9"
2494
2495 [[audits.memmap2]]
2496 who = "Gabriele Svelto <gsvelto@mozilla.com>"
2497 criteria = "safe-to-deploy"
2498 delta = "0.5.9 -> 0.8.0"
2499
2500 [[audits.memmap2]]
2501 who = "Mike Hommey <mh+mozilla@glandium.org>"
2502 criteria = "safe-to-deploy"
2503 delta = "0.8.0 -> 0.9.3"
2504
2505 [[audits.memoffset]]
2506 who = "Gabriele Svelto <gsvelto@mozilla.com>"
2507 criteria = "safe-to-deploy"
2508 delta = "0.6.5 -> 0.7.1"
2509
2510 [[audits.memoffset]]
2511 who = "Gabriele Svelto <gsvelto@mozilla.com>"
2512 criteria = "safe-to-deploy"
2513 delta = "0.8.0 -> 0.9.0"
2514
2515 [[audits.metal]]
2516 who = "Jim Blandy <jimb@red-bean.com>"
2517 criteria = "safe-to-deploy"
2518 version = "0.23.1"
2519 notes = "This audit treats Dzmitry Malyshau (kvark) as a trusted reviewer."
2520
2521 [[audits.metal]]
2522 who = "Jim Blandy <jimb@red-bean.com>"
2523 criteria = "safe-to-deploy"
2524 delta = "0.23.1 -> 0.24.0"
2525 notes = "This audit treats Dzmitry Malyshau (kvark) as a trusted reviewer."
2526
2527 [[audits.metal]]
2528 who = "Teodor Tanasoaia <ttanasoaia@mozilla.com>"
2529 criteria = "safe-to-deploy"
2530 delta = "0.24.0 -> 0.25.0"
2531
2532 [[audits.metal]]
2533 who = "Erich Gubler <egubler@mozilla.com>"
2534 criteria = "safe-to-deploy"
2535 delta = "0.25.0 -> 0.26.0"
2536
2537 [[audits.metal]]
2538 who = "Nicolas Silva <nical@fastmail.com>, Jim Blandy <jimb@red-bean.com>"
2539 criteria = "safe-to-deploy"
2540 delta = "0.26.0 -> 0.27.0"
2541
2542 [[audits.midir]]
2543 who = "Bobby Holley <bobbyholley@gmail.com>"
2544 criteria = "safe-to-deploy"
2545 delta = "0.7.0 -> 0.7.0@git:519e651241e867af3391db08f9ae6400bc023e18"
2546
2547 [[audits.midir]]
2548 who = "Mike Hommey <mh+mozilla@glandium.org>"
2549 criteria = "safe-to-deploy"
2550 delta = "0.7.0 -> 0.7.0@git:85156e360a37d851734118104619f86bd18e94c6"
2551 importable = false
2552
2553 [[audits.minidump-common]]
2554 who = "Gabriele Svelto <gsvelto@mozilla.com>"
2555 criteria = "safe-to-deploy"
2556 version = "0.15.2"
2557 notes = "The code in this crate was written or reviewed by Mozilla employees."
2558
2559 [[audits.minidump-common]]
2560 who = "Gabriele Svelto <gsvelto@mozilla.com>"
2561 criteria = "safe-to-deploy"
2562 delta = "0.15.2 -> 0.17.0"
2563
2564 [[audits.minidump-common]]
2565 who = "Mike Hommey <mh+mozilla@glandium.org>"
2566 criteria = "safe-to-deploy"
2567 delta = "0.17.0 -> 0.17.0@git:87a29fba5e19cfae5ebf73a57ba31504a3872545"
2568
2569 [[audits.minidump-common]]
2570 who = "Gabriele Svelto <gsvelto@mozilla.com>"
2571 criteria = "safe-to-deploy"
2572 delta = "0.17.0 -> 0.19.1"
2573 notes = "All the changes have been authored or reviewed by Mozilla employees"
2574
2575 [[audits.minidump-common]]
2576 who = "Mike Hommey <mh+mozilla@glandium.org>"
2577 criteria = "safe-to-deploy"
2578 delta = "0.17.0@git:87a29fba5e19cfae5ebf73a57ba31504a3872545 -> 0.17.0@git:6ae42a7f992e8a88ebee661bc77bcedb95cd671f"
2579
2580 [[audits.minidump-writer]]
2581 who = "Gabriele Svelto <gsvelto@mozilla.com>"
2582 criteria = "safe-to-deploy"
2583 version = "0.7.0"
2584 notes = "The code in this crate was written or reviewed by Mozilla employees, the crate it evolved from was written specifically for gecko."
2585
2586 [[audits.minidump-writer]]
2587 who = "Alex Franchuk <afranchuk@mozilla.com>"
2588 criteria = "safe-to-deploy"
2589 delta = "0.7.0 -> 0.8.0"
2590 notes = "The code in this crate was written or reviewed by Mozilla employees, the crate it evolved from was written specifically for gecko."
2591
2592 [[audits.minidump-writer]]
2593 who = "Gabriele Svelto <gsvelto@mozilla.com>"
2594 criteria = "safe-to-deploy"
2595 delta = "0.8.0 -> 0.8.1"
2596
2597 [[audits.minidump-writer]]
2598 who = "Gabriele Svelto <gsvelto@mozilla.com>"
2599 criteria = "safe-to-deploy"
2600 delta = "0.8.1 -> 0.8.1@git:491eb330e78e310c32927e5cc3bd2350af1e93f8"
2601 notes = "All the changes were written by a Mozilla employee (me)"
2602
2603 [[audits.minidump-writer]]
2604 who = "Gabriele Svelto <gsvelto@mozilla.com>"
2605 criteria = "safe-to-deploy"
2606 delta = "0.8.1 -> 0.8.3"
2607 notes = "All changes were authored or reviewed by Mozilla employees"
2608
2609 [[audits.miniz_oxide]]
2610 who = "Mike Hommey <mh+mozilla@glandium.org>"
2611 criteria = "safe-to-deploy"
2612 delta = "0.5.3 -> 0.6.2"
2613
2614 [[audits.mio]]
2615 who = "Bobby Holley <bobbyholley@gmail.com>"
2616 criteria = "safe-to-run"
2617 delta = "0.6.21 -> 0.6.23"
2618
2619 [[audits.mio]]
2620 who = "Mike Hommey <mh+mozilla@glandium.org>"
2621 criteria = "safe-to-deploy"
2622 delta = "0.8.0 -> 0.8.6"
2623
2624 [[audits.mio]]
2625 who = "Mike Hommey <mh+mozilla@glandium.org>"
2626 criteria = "safe-to-deploy"
2627 delta = "0.8.8 -> 0.8.8@git:9a2ef335c366044ffe73b1c4acabe50a1daefe05"
2628 importable = false
2629
2630 [[audits.moz_cbor]]
2631 who = "Bobby Holley <bobbyholley@gmail.com>"
2632 criteria = "safe-to-deploy"
2633 version = "0.1.2"
2634 notes = "Developed by Mozilla staff."
2635
2636 [[audits.naga]]
2637 who = "Dzmitry Malyshau <kvark@fastmail.com>"
2638 criteria = "safe-to-deploy"
2639 version = "0.8.0"
2640 notes = """
2641 This crate, up through the indicated version, was written or reviewed
2642 by Dzmitry Malyshau while he was a Mozilla employee. Dzmitry left
2643 Mozilla at the beginning of February 2022. This audit statement was
2644 collected by Jim Blandy, a Mozilla employee, over email in July 2022:
2645 Dzmitry was shown, and agreed to, the 'safe-to-deploy' text.
2646 """
2647
2648 [[audits.naga]]
2649 who = "Jim Blandy <jimb@red-bean.com>"
2650 criteria = "safe-to-deploy"
2651 delta = "0.8.0 -> 0.9.0"
2652
2653 [[audits.naga]]
2654 who = "Jim Blandy <jimb@red-bean.com>"
2655 criteria = "safe-to-deploy"
2656 delta = "0.9.0 -> 0.10.0"
2657
2658 [[audits.naga]]
2659 who = "Nicolas Silva <nical@fastmail.com>"
2660 criteria = "safe-to-deploy"
2661 delta = "0.10.0 -> 0.11.0"
2662
2663 [[audits.naga]]
2664 who = "Nicolas Silva <nical@fastmail.com>"
2665 criteria = "safe-to-deploy"
2666 delta = "0.11.0 -> 0.12.0"
2667
2668 [[audits.naga]]
2669 who = "Nicolas Silva <nical@fastmail.com>"
2670 criteria = "safe-to-deploy"
2671 delta = "0.12.0 -> 0.13.0"
2672
2673 [[audits.naga]]
2674 who = "Nicolas Silva <nical@fastmail.com>"
2675 criteria = "safe-to-deploy"
2676 delta = "0.13.0 -> 0.14.0"
2677
2678 [[audits.naga]]
2679 who = [
2680     "Jim Blandy <jimb@red-bean.com>",
2681     "Nicolas Silva <nical@fastmail.com>",
2682     "Teodor Tanasoaia <ttanasoaia@mozilla.com>",
2683     "Erich Gubler <erichdongubler@gmail.com>",
2684 ]
2685 criteria = "safe-to-deploy"
2686 delta = "0.14.0 -> 0.19.0@git:0c5bebca514eb06d9387f87666c1c658f3f673b4"
2687 importable = false
2688
2689 [[audits.net2]]
2690 who = "Mike Hommey <mh+mozilla@glandium.org>"
2691 criteria = "safe-to-run"
2692 delta = "0.2.37 -> 0.2.38"
2693
2694 [[audits.new_debug_unreachable]]
2695 who = "Bobby Holley <bobbyholley@gmail.com>"
2696 criteria = "safe-to-deploy"
2697 version = "1.0.4"
2698 notes = "This is a trivial crate."
2699
2700 [[audits.nix]]
2701 who = "Gabriele Svelto <gsvelto@mozilla.com>"
2702 criteria = "safe-to-deploy"
2703 delta = "0.15.0 -> 0.25.0"
2704 notes = "Plenty of new bindings but also several important bug fixes (including buffer overflows). New unsafe sections are restricted to wrappers and are no more dangerous than calling the C functions."
2705
2706 [[audits.nix]]
2707 who = "Mike Hommey <mh+mozilla@glandium.org>"
2708 criteria = "safe-to-deploy"
2709 delta = "0.25.0 -> 0.25.1"
2710
2711 [[audits.nix]]
2712 who = "Mike Hommey <mh+mozilla@glandium.org>"
2713 criteria = "safe-to-deploy"
2714 delta = "0.25.1 -> 0.26.2"
2715
2716 [[audits.nix]]
2717 who = "Gabriele Svelto <gsvelto@mozilla.com>"
2718 criteria = "safe-to-deploy"
2719 delta = "0.26.2 -> 0.27.1"
2720
2721 [[audits.nom]]
2722 who = "Mike Hommey <mh+mozilla@glandium.org>"
2723 criteria = "safe-to-deploy"
2724 delta = "7.1.1 -> 7.1.3"
2725
2726 [[audits.nss-gk-api]]
2727 who = "John M. Schanck <jschanck@mozilla.com>"
2728 criteria = "safe-to-deploy"
2729 version = "0.2.1"
2730 notes = "Maintained by the CryptoEng team at Mozilla."
2731
2732 [[audits.ntapi]]
2733 who = "Mike Hommey <mh+mozilla@glandium.org>"
2734 criteria = "safe-to-deploy"
2735 delta = "0.3.7 -> 0.4.0"
2736
2737 [[audits.num]]
2738 who = "Josh Stone <jistone@redhat.com>"
2739 criteria = "safe-to-deploy"
2740 version = "0.4.0"
2741 notes = "All code written or reviewed by Josh Stone."
2742
2743 [[audits.num-bigint]]
2744 who = "Josh Stone <jistone@redhat.com>"
2745 criteria = "safe-to-deploy"
2746 version = "0.2.6"
2747 notes = "All code written or reviewed by Josh Stone."
2748
2749 [[audits.num-bigint]]
2750 who = "Josh Stone <jistone@redhat.com>"
2751 criteria = "safe-to-deploy"
2752 version = "0.4.3"
2753 notes = "All code written or reviewed by Josh Stone."
2754
2755 [[audits.num-complex]]
2756 who = "Josh Stone <jistone@redhat.com>"
2757 criteria = "safe-to-deploy"
2758 version = "0.4.2"
2759 notes = "All code written or reviewed by Josh Stone."
2760
2761 [[audits.num-derive]]
2762 who = "Josh Stone <jistone@redhat.com>"
2763 criteria = "safe-to-deploy"
2764 version = "0.3.3"
2765 notes = "All code written or reviewed by Josh Stone."
2766
2767 [[audits.num-derive]]
2768 who = "Mike Hommey <mh+mozilla@glandium.org>"
2769 criteria = "safe-to-deploy"
2770 delta = "0.3.3 -> 0.4.0"
2771
2772 [[audits.num-integer]]
2773 who = "Josh Stone <jistone@redhat.com>"
2774 criteria = "safe-to-deploy"
2775 version = "0.1.45"
2776 notes = "All code written or reviewed by Josh Stone."
2777
2778 [[audits.num-iter]]
2779 who = "Josh Stone <jistone@redhat.com>"
2780 criteria = "safe-to-deploy"
2781 version = "0.1.43"
2782 notes = "All code written or reviewed by Josh Stone."
2783
2784 [[audits.num-macros]]
2785 who = "Josh Stone <jistone@redhat.com>"
2786 criteria = "safe-to-deploy"
2787 version = "0.1.40"
2788 notes = "All code written or reviewed by Josh Stone."
2789
2790 [[audits.num-rational]]
2791 who = "Josh Stone <jistone@redhat.com>"
2792 criteria = "safe-to-deploy"
2793 version = "0.4.1"
2794 notes = "All code written or reviewed by Josh Stone."
2795
2796 [[audits.num-traits]]
2797 who = "Josh Stone <jistone@redhat.com>"
2798 criteria = "safe-to-deploy"
2799 version = "0.2.15"
2800 notes = "All code written or reviewed by Josh Stone."
2801
2802 [[audits.num_cpus]]
2803 who = "Mike Hommey <mh+mozilla@glandium.org>"
2804 criteria = "safe-to-deploy"
2805 delta = "1.13.1 -> 1.14.0"
2806
2807 [[audits.num_cpus]]
2808 who = "Mike Hommey <mh+mozilla@glandium.org>"
2809 criteria = "safe-to-deploy"
2810 delta = "1.14.0 -> 1.15.0"
2811
2812 [[audits.object]]
2813 who = "Mike Hommey <mh+mozilla@glandium.org>"
2814 criteria = "safe-to-deploy"
2815 delta = "0.28.4 -> 0.30.0"
2816
2817 [[audits.object]]
2818 who = "Mike Hommey <mh+mozilla@glandium.org>"
2819 criteria = "safe-to-deploy"
2820 delta = "0.30.0 -> 0.30.3"
2821
2822 [[audits.once_cell]]
2823 who = "Mike Hommey <mh+mozilla@glandium.org>"
2824 criteria = "safe-to-deploy"
2825 delta = "1.12.0 -> 1.13.1"
2826
2827 [[audits.once_cell]]
2828 who = "Mike Hommey <mh+mozilla@glandium.org>"
2829 criteria = "safe-to-deploy"
2830 delta = "1.13.1 -> 1.16.0"
2831
2832 [[audits.once_cell]]
2833 who = "Mike Hommey <mh+mozilla@glandium.org>"
2834 criteria = "safe-to-deploy"
2835 delta = "1.16.0 -> 1.17.1"
2836
2837 [[audits.oneshot]]
2838 who = "Ben Dean-Kawamura <bdk@mozilla.com>"
2839 criteria = "safe-to-deploy"
2840 version = "0.1.5"
2841 notes = "Small crate, reviewed by bendk.  There is a decent amount of unsafe code, but it's well tested and the crate has been well-used over the years."
2842
2843 [[audits.oneshot]]
2844 who = "Ben Dean-Kawamura <bdk@mozilla.com>"
2845 criteria = "safe-to-deploy"
2846 version = "0.1.5@git:1f3c657c8073aec4f0b6ebac7be33b4851644745"
2847 notes = """
2848 Small crate, reviewed by bendk.  There is a decent amount of unsafe code, but it's well tested and the crate has been well-used over the years.
2849
2850 The git branch is my fork of the official code that removes the `loom` target to avoid pulling in that crate and its dependencies into moz-central.
2851 This doesn't change any of the functionality -- the `loom` target is only used for testing.
2852 """
2853
2854 [[audits.oneshot-uniffi]]
2855 who = "Ben Dean-Kawamura <bdk@mozilla.com>"
2856 criteria = "safe-to-deploy"
2857 version = "0.1.5"
2858 notes = "This is the essentially same code as `oneshot version 0.1.5` which has already been audited.  The only difference is that it won't pull in `loom` and related dependencies when `mach vendor rust` is run."
2859
2860 [[audits.ordered-float]]
2861 who = "Mike Hommey <mh+mozilla@glandium.org>"
2862 criteria = "safe-to-deploy"
2863 delta = "3.0.0 -> 3.4.0"
2864
2865 [[audits.origin-trial-token]]
2866 who = "Emilio Cobos Álvarez <emilio@crisal.io>"
2867 criteria = "safe-to-deploy"
2868 version = "0.1.1"
2869 notes = """
2870 I'm the author of the crate. The only unsafe code is a view over a byte array
2871 which is properly validated.
2872
2873 Cryptography shenanigans are delegated to the caller so there's no possible
2874 unsoundness there.
2875 """
2876
2877 [[audits.os_str_bytes]]
2878 who = "Mike Hommey <mh+mozilla@glandium.org>"
2879 criteria = "safe-to-deploy"
2880 delta = "6.1.0 -> 6.3.0"
2881
2882 [[audits.os_str_bytes]]
2883 who = "Mike Hommey <mh+mozilla@glandium.org>"
2884 criteria = "safe-to-deploy"
2885 delta = "6.3.0 -> 6.4.1"
2886
2887 [[audits.oxilangtag]]
2888 who = "Jonathan Kew <jkew@mozilla.com>"
2889 criteria = "safe-to-deploy"
2890 version = "0.1.3"
2891 notes = """
2892 I have reviewed all the code in this (small) crate.
2893 There is no unsafe code present.
2894 """
2895
2896 [[audits.packed_simd]]
2897 who = "Henri Sivonen <hsivonen@hsivonen.fi>"
2898 criteria = "safe-to-deploy"
2899 delta = "0.3.8 -> 0.3.9"
2900 notes = "The update from 0.3.8 to 0.3.9 makes mechanical changes to accommodate renaming, compiler updates, and CI service updates."
2901
2902 [[audits.packed_simd]]
2903 who = "Henri Sivonen <hsivonen@hsivonen.fi>"
2904 criteria = "safe-to-deploy"
2905 delta = "0.3.9 -> 0.3.9@git:e588ceb568878e1a3156ea9ce551d5b63ef0cdc4"
2906 notes = "The patch on top of crates.io version 0.3.9 merely deletes code for a feature that Firefox does not use."
2907
2908 [[audits.packed_simd_2]]
2909 who = "Mike Hommey <mh+mozilla@glandium.org>"
2910 criteria = "safe-to-deploy"
2911 delta = "0.3.7 -> 0.3.8"
2912
2913 [[audits.packed_simd_2]]
2914 who = "Bobby Holley <bobbyholley@gmail.com>"
2915 criteria = "safe-to-deploy"
2916 delta = "0.3.8 -> 0.3.8@git:412f9a0aa556611de021bde89dee8fefe6e0fbbd"
2917
2918 [[audits.parking_lot_core]]
2919 who = "Mike Hommey <mh+mozilla@glandium.org>"
2920 criteria = "safe-to-deploy"
2921 delta = "0.8.5 -> 0.8.6"
2922
2923 [[audits.paste]]
2924 who = "Mike Hommey <mh+mozilla@glandium.org>"
2925 criteria = "safe-to-deploy"
2926 delta = "1.0.7 -> 1.0.8"
2927
2928 [[audits.paste]]
2929 who = "Mike Hommey <mh+mozilla@glandium.org>"
2930 criteria = "safe-to-deploy"
2931 delta = "1.0.8 -> 1.0.11"
2932
2933 [[audits.peeking_take_while]]
2934 who = "Bobby Holley <bobbyholley@gmail.com>"
2935 criteria = "safe-to-deploy"
2936 delta = "1.0.0 -> 0.1.2"
2937 notes = "Small refactor of some simple iterator logic, no unsafe code or capabilities."
2938
2939 [[audits.percent-encoding]]
2940 who = "Valentin Gosu <valentin.gosu@gmail.com>"
2941 criteria = "safe-to-deploy"
2942 delta = "2.2.0 -> 2.3.0"
2943
2944 [[audits.percent-encoding]]
2945 who = "Valentin Gosu <valentin.gosu@gmail.com>"
2946 criteria = "safe-to-deploy"
2947 delta = "2.3.0 -> 2.3.1"
2948
2949 [[audits.phf]]
2950 who = "Mike Hommey <mh+mozilla@glandium.org>"
2951 criteria = "safe-to-deploy"
2952 delta = "0.10.1 -> 0.11.2"
2953
2954 [[audits.phf_codegen]]
2955 who = "Mike Hommey <mh+mozilla@glandium.org>"
2956 criteria = "safe-to-deploy"
2957 delta = "0.10.0 -> 0.11.2"
2958
2959 [[audits.phf_generator]]
2960 who = "Mike Hommey <mh+mozilla@glandium.org>"
2961 criteria = "safe-to-deploy"
2962 delta = "0.10.0 -> 0.11.2"
2963
2964 [[audits.phf_macros]]
2965 who = "Mike Hommey <mh+mozilla@glandium.org>"
2966 criteria = "safe-to-deploy"
2967 delta = "0.10.0 -> 0.11.2"
2968
2969 [[audits.phf_shared]]
2970 who = "Mike Hommey <mh+mozilla@glandium.org>"
2971 criteria = "safe-to-deploy"
2972 delta = "0.10.0 -> 0.11.2"
2973
2974 [[audits.pin-project]]
2975 who = "Mike Hommey <mh+mozilla@glandium.org>"
2976 criteria = "safe-to-run"
2977 delta = "1.0.10 -> 1.0.12"
2978
2979 [[audits.pin-project]]
2980 who = "Mike Hommey <mh+mozilla@glandium.org>"
2981 criteria = "safe-to-run"
2982 delta = "1.0.12 -> 1.1.0"
2983
2984 [[audits.pin-project-internal]]
2985 who = "Mike Hommey <mh+mozilla@glandium.org>"
2986 criteria = "safe-to-run"
2987 delta = "1.0.10 -> 1.0.12"
2988
2989 [[audits.pin-project-internal]]
2990 who = "Mike Hommey <mh+mozilla@glandium.org>"
2991 criteria = "safe-to-run"
2992 delta = "1.0.12 -> 1.1.0"
2993
2994 [[audits.pkcs11-bindings]]
2995 who = "Dana Keeler <dkeeler@mozilla.com>"
2996 criteria = "safe-to-deploy"
2997 version = "0.1.0"
2998 notes = """
2999 This crate consists of declarations of types and constants that are
3000 auto-generated by running bindgen on the PKCS#11 specification headers. Other
3001 than the tests generated by bindgen, it consists of no runnable code.
3002 """
3003
3004 [[audits.pkcs11-bindings]]
3005 who = "John M. Schanck <jmschanck@gmail.com>"
3006 criteria = "safe-to-deploy"
3007 version = "0.1.1"
3008
3009 [[audits.pkcs11-bindings]]
3010 who = "Mike Hommey <mh+mozilla@glandium.org>"
3011 criteria = "safe-to-deploy"
3012 delta = "0.1.1 -> 0.1.4"
3013
3014 [[audits.pkcs11-bindings]]
3015 who = "Mike Hommey <mh+mozilla@glandium.org>"
3016 criteria = "safe-to-deploy"
3017 delta = "0.1.4 -> 0.1.5"
3018
3019 [[audits.pkg-config]]
3020 who = "Mike Hommey <mh+mozilla@glandium.org>"
3021 criteria = "safe-to-deploy"
3022 delta = "0.3.25 -> 0.3.26"
3023
3024 [[audits.plane-split]]
3025 who = "Nicolas Silva <nical@fastmail.com>"
3026 criteria = "safe-to-deploy"
3027 version = "0.18.0"
3028 notes = "Mozilla-developed package, no unsafe code, no access to file system, network or other far reaching APIs."
3029
3030 [[audits.ppv-lite86]]
3031 who = "Mike Hommey <mh+mozilla@glandium.org>"
3032 criteria = "safe-to-deploy"
3033 delta = "0.2.16 -> 0.2.17"
3034
3035 [[audits.precomputed-hash]]
3036 who = "Bobby Holley <bobbyholley@gmail.com>"
3037 criteria = "safe-to-deploy"
3038 version = "0.1.1"
3039 notes = "This is a trivial crate."
3040
3041 [[audits.prio]]
3042 who = "Simon Friedberger <simon@mozilla.com>"
3043 criteria = "safe-to-deploy"
3044 version = "0.8.4"
3045 notes = "The crate does not use any unsafe code or ambient capabilities and thus meets the criteria for safe-to-deploy. The cryptography itself should be considered experimental at this phase and is currently undergoing a thorough audit organized by Cloudflare."
3046
3047 [[audits.prio]]
3048 who = "Simon Friedberger <simon@mozilla.com>"
3049 criteria = "safe-to-deploy"
3050 version = "0.9.1"
3051
3052 [[audits.proc-macro-hack]]
3053 who = "Mike Hommey <mh+mozilla@glandium.org>"
3054 criteria = "safe-to-deploy"
3055 delta = "0.5.19 -> 0.5.20+deprecated"
3056
3057 [[audits.proc-macro2]]
3058 who = "Nika Layzell <nika@thelayzells.com>"
3059 criteria = "safe-to-deploy"
3060 version = "1.0.39"
3061 notes = """
3062 `proc-macro2` acts as either a thin(-ish) wrapper around the std-provided
3063 `proc_macro` crate, or as a fallback implementation of the crate, depending on
3064 where it is used.
3065
3066 If using this crate on older versions of rustc (1.56 and earlier), it will
3067 temporarily replace the panic handler while initializing in order to detect if
3068 it is running within a `proc_macro`, which could lead to surprising behaviour.
3069 This should not be an issue for more recent compiler versions, which support
3070 `proc_macro::is_available()`.
3071
3072 The `proc-macro2` crate's fallback behaviour is not identical to the complex
3073 behaviour of the rustc compiler (e.g. it does not perform unicode normalization
3074 for identifiers), however it behaves well enough for its intended use-case
3075 (tests and scripts processing rust code).
3076
3077 `proc-macro2` does not use unsafe code, however exposes one `unsafe` API to
3078 allow bypassing checks in the fallback implementation when constructing
3079 `Literal` using `from_str_unchecked`. This was intended to only be used by the
3080 `quote!` macro, however it has been removed
3081 (https://github.com/dtolnay/quote/commit/f621fe64a8a501cae8e95ebd6848e637bbc79078),
3082 and is likely completely unused. Even when used, this API shouldn't be able to
3083 cause unsoundness.
3084 """
3085
3086 [[audits.proc-macro2]]
3087 who = "Mike Hommey <mh+mozilla@glandium.org>"
3088 criteria = "safe-to-deploy"
3089 delta = "1.0.39 -> 1.0.43"
3090
3091 [[audits.proc-macro2]]
3092 who = "Mike Hommey <mh+mozilla@glandium.org>"
3093 criteria = "safe-to-deploy"
3094 delta = "1.0.43 -> 1.0.49"
3095
3096 [[audits.proc-macro2]]
3097 who = "Mike Hommey <mh+mozilla@glandium.org>"
3098 criteria = "safe-to-deploy"
3099 delta = "1.0.49 -> 1.0.51"
3100
3101 [[audits.procfs-core]]
3102 who = "Gabriele Svelto <gsvelto@mozilla.com>"
3103 criteria = "safe-to-deploy"
3104 version = "0.16.0-RC1"
3105
3106 [[audits.procfs-core]]
3107 who = "Gabriele Svelto <gsvelto@mozilla.com>"
3108 criteria = "safe-to-deploy"
3109 delta = "0.16.0-RC1 -> 0.16.0"
3110
3111 [[audits.profiling]]
3112 who = "Mike Hommey <mh+mozilla@glandium.org>"
3113 criteria = "safe-to-deploy"
3114 delta = "1.0.6 -> 1.0.7"
3115
3116 [[audits.prost]]
3117 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
3118 criteria = "safe-to-deploy"
3119 delta = "0.8.0 -> 0.11.9"
3120 notes = "Mostly internal refactorings. Minimal new unsafe code, but with the invariants explicitly checked in code"
3121
3122 [[audits.prost]]
3123 who = "Drew Willcoxon <adw@mozilla.com>"
3124 criteria = "safe-to-deploy"
3125 delta = "0.11.9 -> 0.12.1"
3126
3127 [[audits.prost-derive]]
3128 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
3129 criteria = "safe-to-deploy"
3130 delta = "0.8.0 -> 0.11.9"
3131 notes = "Documentation and internal refactoring changes only"
3132
3133 [[audits.prost-derive]]
3134 who = "Mike Hommey <mh+mozilla@glandium.org>"
3135 criteria = "safe-to-deploy"
3136 delta = "0.11.9 -> 0.11.9@git:95964e9d33df3c2a9c3f14285e262867cab6f96b"
3137 notes = "Changes against 0.11.9 are mine."
3138
3139 [[audits.prost-derive]]
3140 who = "Drew Willcoxon <adw@mozilla.com>"
3141 criteria = "safe-to-deploy"
3142 delta = "0.11.9 -> 0.12.1"
3143
3144 [[audits.qlog]]
3145 who = "Kershaw Chang <kershaw@mozilla.com>"
3146 criteria = "safe-to-deploy"
3147 version = "0.9.0"
3148
3149 [[audits.qlog]]
3150 who = "Kershaw Chang <kershaw@mozilla.com>"
3151 criteria = "safe-to-deploy"
3152 delta = "0.9.0 -> 0.11.0"
3153
3154 [[audits.qlog]]
3155 who = "Kershaw Chang <kershaw@mozilla.com>"
3156 criteria = "safe-to-deploy"
3157 delta = "0.11.0 -> 0.12.0"
3158
3159 [[audits.quote]]
3160 who = "Nika Layzell <nika@thelayzells.com>"
3161 criteria = "safe-to-deploy"
3162 version = "1.0.18"
3163 notes = """
3164 `quote` is a utility crate used by proc-macros to generate TokenStreams
3165 conveniently from source code. The bulk of the logic is some complex
3166 interlocking `macro_rules!` macros which are used to parse and build the
3167 `TokenStream` within the proc-macro.
3168
3169 This crate contains no unsafe code, and the internal logic, while difficult to
3170 read, is generally straightforward. I have audited the the quote macros, ident
3171 formatter, and runtime logic.
3172 """
3173
3174 [[audits.quote]]
3175 who = "Mike Hommey <mh+mozilla@glandium.org>"
3176 criteria = "safe-to-deploy"
3177 delta = "1.0.18 -> 1.0.21"
3178
3179 [[audits.quote]]
3180 who = "Mike Hommey <mh+mozilla@glandium.org>"
3181 criteria = "safe-to-deploy"
3182 delta = "1.0.21 -> 1.0.23"
3183
3184 [[audits.radium]]
3185 who = "Nika Layzell <nika@thelayzells.com>"
3186 criteria = "safe-to-deploy"
3187 version = "0.5.3"
3188 notes = """
3189 I am no longer the primary maintainer of `radium`, however I have audited the
3190 code to ensure it is still correct. The implementation contains no `unsafe`
3191 logic, and will not abstract away `Sync` trait bounds.
3192
3193 The core logic is very simple, and acts as an abstraction trait for `Cell<T>`
3194 and `AtomicT`.
3195 """
3196
3197 [[audits.rand_core]]
3198 who = "Mike Hommey <mh+mozilla@glandium.org>"
3199 criteria = "safe-to-deploy"
3200 delta = "0.6.3 -> 0.6.4"
3201
3202 [[audits.range-alloc]]
3203 who = "Bobby Holley <bobbyholley@gmail.com>"
3204 criteria = "safe-to-deploy"
3205 version = "0.1.2"
3206 notes = "Dzmitry authored this crate while he was staff at Mozilla."
3207
3208 [[audits.range-alloc]]
3209 who = "Mike Hommey <mh+mozilla@glandium.org>"
3210 criteria = "safe-to-deploy"
3211 delta = "0.1.2 -> 0.1.3"
3212
3213 [[audits.range-map]]
3214 who = "Gabriele Svelto <gsvelto@mozilla.com>"
3215 criteria = "safe-to-deploy"
3216 version = "0.2.0"
3217
3218 [[audits.raw-window-handle]]
3219 who = "Jim Blandy <jimb@red-bean.com>"
3220 criteria = "safe-to-deploy"
3221 version = "0.5.0"
3222 notes = "I looked through all the sources of the v0.5.0 crate."
3223
3224 [[audits.raw-window-handle]]
3225 who = "Mike Hommey <mh+mozilla@glandium.org>"
3226 criteria = "safe-to-deploy"
3227 delta = "0.5.0 -> 0.5.2"
3228
3229 [[audits.raw-window-handle]]
3230 who = "Nicolas Silva <nical@fastmail.com>"
3231 criteria = "safe-to-deploy"
3232 delta = "0.5.2 -> 0.6.0"
3233
3234 [[audits.rayon]]
3235 who = "Josh Stone <jistone@redhat.com>"
3236 criteria = "safe-to-deploy"
3237 version = "1.5.3"
3238 notes = "All code written or reviewed by Josh Stone or Niko Matsakis."
3239
3240 [[audits.rayon]]
3241 who = "Mike Hommey <mh+mozilla@glandium.org>"
3242 criteria = "safe-to-deploy"
3243 delta = "1.5.3 -> 1.6.1"
3244
3245 [[audits.rayon-core]]
3246 who = "Josh Stone <jistone@redhat.com>"
3247 criteria = "safe-to-deploy"
3248 version = "1.9.3"
3249 notes = "All code written or reviewed by Josh Stone or Niko Matsakis."
3250
3251 [[audits.rayon-core]]
3252 who = "Mike Hommey <mh+mozilla@glandium.org>"
3253 criteria = "safe-to-deploy"
3254 delta = "1.9.3 -> 1.10.1"
3255
3256 [[audits.rayon-core]]
3257 who = "Mike Hommey <mh+mozilla@glandium.org>"
3258 criteria = "safe-to-deploy"
3259 delta = "1.10.1 -> 1.10.2"
3260
3261 [[audits.redox_syscall]]
3262 who = "Mike Hommey <mh+mozilla@glandium.org>"
3263 criteria = "safe-to-deploy"
3264 delta = "0.2.13 -> 0.2.16"
3265
3266 [[audits.regex]]
3267 who = "Mike Hommey <mh+mozilla@glandium.org>"
3268 criteria = "safe-to-deploy"
3269 delta = "1.5.6 -> 1.6.0"
3270
3271 [[audits.regex]]
3272 who = "Mike Hommey <mh+mozilla@glandium.org>"
3273 criteria = "safe-to-deploy"
3274 delta = "1.6.0 -> 1.7.0"
3275
3276 [[audits.regex]]
3277 who = "Mike Hommey <mh+mozilla@glandium.org>"
3278 criteria = "safe-to-deploy"
3279 delta = "1.7.0 -> 1.7.1"
3280
3281 [[audits.regex-syntax]]
3282 who = "Mike Hommey <mh+mozilla@glandium.org>"
3283 criteria = "safe-to-deploy"
3284 delta = "0.6.26 -> 0.6.27"
3285
3286 [[audits.regex-syntax]]
3287 who = "Mike Hommey <mh+mozilla@glandium.org>"
3288 criteria = "safe-to-deploy"
3289 delta = "0.6.27 -> 0.6.28"
3290
3291 [[audits.rkv]]
3292 who = "Chris H-C <chutten@mozilla.com>"
3293 criteria = "safe-to-deploy"
3294 version = "0.18.2"
3295 notes = "Maintained by Jan-Erik and :krosylight."
3296
3297 [[audits.rkv]]
3298 who = "Chris H-C <chutten@mozilla.com>"
3299 criteria = "safe-to-deploy"
3300 version = "0.18.4"
3301
3302 [[audits.ron]]
3303 who = "Mike Hommey <mh+mozilla@glandium.org>"
3304 criteria = "safe-to-deploy"
3305 delta = "0.7.0 -> 0.7.1"
3306
3307 [[audits.ron]]
3308 who = "Jim Blandy <jimb@red-bean.com>"
3309 criteria = "safe-to-deploy"
3310 delta = "0.7.1 -> 0.8.0"
3311
3312 [[audits.ron]]
3313 who = "Mike Hommey <mh+mozilla@glandium.org>"
3314 criteria = "safe-to-deploy"
3315 delta = "0.8.0 -> 0.8.1"
3316
3317 [[audits.rure]]
3318 who = "Nika Layzell <nika@thelayzells.com>"
3319 criteria = "safe-to-deploy"
3320 version = "0.2.2"
3321 notes = """
3322 This is a fairly straightforward FFI wrapper crate for `regex`, maintained by
3323 the `regex` developers in the same repository.
3324
3325 This crate is explicitly designed for FFI use, and should not be used directly
3326 by Rust code. The exported `extern \"C\"` functions are not marked as `unsafe`,
3327 meaning that it is technically incorrect to use them from within Rust code,
3328 however they are reasonable to use from C code.
3329
3330 The unsafe code in this crate heavily depends on the C caller maintaining
3331 invariants, however these invariants are clearly documented in the `rure.h`
3332 file, bundled with the crate.
3333
3334 I have checked the signatures of each function both in C++ and in the Rust to
3335 ensure they match.  In some places, the c `rure.h` header file is missing a
3336 `const` qualifier which could be present given the Rust code, however this will
3337 have no impact on ABI, and is fairly normal for FFI crates.
3338
3339 Panics are handled in all Rust FFI methods, meaning that projects which do not
3340 disable unwinding will still consistently abort (using `libc::abort()`) if a
3341 panic occurs in the Rust code.
3342 """
3343
3344 [[audits.rusqlite]]
3345 who = "Mike Hommey <mh+mozilla@glandium.org>"
3346 criteria = "safe-to-deploy"
3347 delta = "0.27.0 -> 0.28.0"
3348
3349 [[audits.rusqlite]]
3350 who = "Ben Dean-Kawamura <bdk@mozilla.com>"
3351 criteria = "safe-to-deploy"
3352 delta = "0.28.0 -> 0.29.0"
3353
3354 [[audits.rusqlite]]
3355 who = "Mark Hammond <mhammond@mozilla.com>"
3356 criteria = "safe-to-deploy"
3357 delta = "0.29.0 -> 0.30.0"
3358
3359 [[audits.rust_cascade]]
3360 who = "Mike Hommey <mh+mozilla@glandium.org>"
3361 criteria = "safe-to-deploy"
3362 delta = "1.4.0 -> 1.5.0"
3363
3364 [[audits.rust_decimal]]
3365 who = "Mike Hommey <mh+mozilla@glandium.org>"
3366 criteria = "safe-to-deploy"
3367 delta = "1.24.0 -> 1.25.0"
3368
3369 [[audits.rust_decimal]]
3370 who = "Mike Hommey <mh+mozilla@glandium.org>"
3371 criteria = "safe-to-deploy"
3372 delta = "1.25.0 -> 1.26.1"
3373
3374 [[audits.rust_decimal]]
3375 who = "Mike Hommey <mh+mozilla@glandium.org>"
3376 criteria = "safe-to-deploy"
3377 delta = "1.26.1 -> 1.27.0"
3378
3379 [[audits.rust_decimal]]
3380 who = "Mike Hommey <mh+mozilla@glandium.org>"
3381 criteria = "safe-to-deploy"
3382 delta = "1.27.0 -> 1.28.1"
3383
3384 [[audits.rustc-hash]]
3385 who = "Bobby Holley <bobbyholley@gmail.com>"
3386 criteria = "safe-to-deploy"
3387 version = "1.1.0"
3388 notes = "Straightforward crate with no unsafe code, does what it says on the tin."
3389
3390 [[audits.rustc_version]]
3391 who = "Nika Layzell <nika@thelayzells.com>"
3392 criteria = "safe-to-run"
3393 version = "0.4.0"
3394 notes = """
3395 Straightforward crate which runs `$RUSTC -vV` and parses the output into a
3396 machine-interpretable form for build scripts.
3397 """
3398
3399 [[audits.rustversion]]
3400 who = "Bobby Holley <bobbyholley@gmail.com>"
3401 criteria = "safe-to-deploy"
3402 version = "1.0.9"
3403 notes = """
3404 This crate has a build-time component and procedural macro logic, which I looked
3405 at enough to convince myself it wasn't going to do anything dramatically wrong.
3406 I don't think logic bugs in the version parsing etc can realistically introduce
3407 a security vulnerability.
3408 """
3409
3410 [[audits.rustversion]]
3411 who = "Mike Hommey <mh+mozilla@glandium.org>"
3412 criteria = "safe-to-run"
3413 delta = "1.0.9 -> 1.0.11"
3414
3415 [[audits.ryu]]
3416 who = "Mike Hommey <mh+mozilla@glandium.org>"
3417 criteria = "safe-to-deploy"
3418 delta = "1.0.10 -> 1.0.11"
3419
3420 [[audits.ryu]]
3421 who = "Mike Hommey <mh+mozilla@glandium.org>"
3422 criteria = "safe-to-deploy"
3423 delta = "1.0.11 -> 1.0.12"
3424
3425 [[audits.safemem]]
3426 who = "Bobby Holley <bobbyholley@gmail.com>"
3427 criteria = "safe-to-run"
3428 version = "0.3.3"
3429 notes = "I didn't review the allocation code carefully but it's not malicious."
3430
3431 [[audits.scoped-tls]]
3432 who = "Mike Hommey <mh+mozilla@glandium.org>"
3433 criteria = "safe-to-run"
3434 delta = "1.0.0 -> 1.0.1"
3435
3436 [[audits.scroll]]
3437 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
3438 criteria = "safe-to-deploy"
3439 delta = "0.10.2 -> 0.11.0"
3440 notes = "Small changes to exposed traits, that look reasonable and have additional buffer boundary checks. No unsafe code touched."
3441
3442 [[audits.scroll_derive]]
3443 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
3444 criteria = "safe-to-deploy"
3445 delta = "0.10.5 -> 0.11.0"
3446 notes = "No code changes. Tagged together with its parent crate scroll."
3447
3448 [[audits.scroll_derive]]
3449 who = "Mike Hommey <mh+mozilla@glandium.org>"
3450 criteria = "safe-to-deploy"
3451 delta = "0.11.0 -> 0.11.1"
3452
3453 [[audits.selectors]]
3454 who = "Emilio Cobos Álvarez <emilio@crisal.io>"
3455 criteria = "safe-to-deploy"
3456 version = "0.22.0"
3457 notes = """
3458 This crate is basically developed in-tree. Mozilla employees have either
3459 reviewed or written virtually all of the code.
3460 """
3461
3462 [[audits.semver]]
3463 who = "Mike Hommey <mh+mozilla@glandium.org>"
3464 criteria = "safe-to-deploy"
3465 delta = "1.0.9 -> 1.0.10"
3466
3467 [[audits.semver]]
3468 who = "Mike Hommey <mh+mozilla@glandium.org>"
3469 criteria = "safe-to-deploy"
3470 delta = "1.0.10 -> 1.0.13"
3471
3472 [[audits.semver]]
3473 who = "Mike Hommey <mh+mozilla@glandium.org>"
3474 criteria = "safe-to-deploy"
3475 delta = "1.0.13 -> 1.0.16"
3476
3477 [[audits.semver]]
3478 who = "Bobby Holley <bobbyholley@gmail.com>"
3479 criteria = "safe-to-deploy"
3480 delta = "1.0.17 -> 1.0.16"
3481
3482 [[audits.serde]]
3483 who = "Mike Hommey <mh+mozilla@glandium.org>"
3484 criteria = "safe-to-deploy"
3485 delta = "1.0.137 -> 1.0.143"
3486
3487 [[audits.serde]]
3488 who = "Mike Hommey <mh+mozilla@glandium.org>"
3489 criteria = "safe-to-deploy"
3490 delta = "1.0.143 -> 1.0.144"
3491
3492 [[audits.serde]]
3493 who = "Mike Hommey <mh+mozilla@glandium.org>"
3494 criteria = "safe-to-deploy"
3495 delta = "1.0.144 -> 1.0.151"
3496
3497 [[audits.serde]]
3498 who = "Mike Hommey <mh+mozilla@glandium.org>"
3499 criteria = "safe-to-deploy"
3500 delta = "1.0.151 -> 1.0.152"
3501
3502 [[audits.serde_bytes]]
3503 who = "Mike Hommey <mh+mozilla@glandium.org>"
3504 criteria = "safe-to-deploy"
3505 delta = "0.11.6 -> 0.11.7"
3506
3507 [[audits.serde_bytes]]
3508 who = "Mike Hommey <mh+mozilla@glandium.org>"
3509 criteria = "safe-to-deploy"
3510 delta = "0.11.7 -> 0.11.8"
3511
3512 [[audits.serde_bytes]]
3513 who = "Mike Hommey <mh+mozilla@glandium.org>"
3514 criteria = "safe-to-deploy"
3515 delta = "0.11.8 -> 0.11.9"
3516
3517 [[audits.serde_cbor]]
3518 who = "R. Martinho Fernandes <bugs@rmf.io>"
3519 criteria = "safe-to-deploy"
3520 version = "0.11.1"
3521
3522 [[audits.serde_cbor]]
3523 who = "John M. Schanck <jschanck@mozilla.com>"
3524 criteria = "safe-to-deploy"
3525 delta = "0.11.1 -> 0.11.2"
3526
3527 [[audits.serde_derive]]
3528 who = "Mike Hommey <mh+mozilla@glandium.org>"
3529 criteria = "safe-to-deploy"
3530 delta = "1.0.137 -> 1.0.143"
3531
3532 [[audits.serde_derive]]
3533 who = "Mike Hommey <mh+mozilla@glandium.org>"
3534 criteria = "safe-to-deploy"
3535 delta = "1.0.143 -> 1.0.144"
3536
3537 [[audits.serde_derive]]
3538 who = "Mike Hommey <mh+mozilla@glandium.org>"
3539 criteria = "safe-to-deploy"
3540 delta = "1.0.144 -> 1.0.151"
3541
3542 [[audits.serde_derive]]
3543 who = "Mike Hommey <mh+mozilla@glandium.org>"
3544 criteria = "safe-to-deploy"
3545 delta = "1.0.151 -> 1.0.152"
3546
3547 [[audits.serde_json]]
3548 who = "Mike Hommey <mh+mozilla@glandium.org>"
3549 criteria = "safe-to-deploy"
3550 delta = "1.0.81 -> 1.0.83"
3551
3552 [[audits.serde_json]]
3553 who = "Mike Hommey <mh+mozilla@glandium.org>"
3554 criteria = "safe-to-deploy"
3555 delta = "1.0.83 -> 1.0.85"
3556
3557 [[audits.serde_json]]
3558 who = "Mike Hommey <mh+mozilla@glandium.org>"
3559 criteria = "safe-to-deploy"
3560 delta = "1.0.85 -> 1.0.91"
3561
3562 [[audits.serde_json]]
3563 who = "Mike Hommey <mh+mozilla@glandium.org>"
3564 criteria = "safe-to-deploy"
3565 delta = "1.0.91 -> 1.0.93"
3566
3567 [[audits.serde_path_to_error]]
3568 who = "Ben Dean-Kawamura <bdk@mozilla.com>"
3569 criteria = "safe-to-deploy"
3570 version = "0.1.11"
3571
3572 [[audits.serde_repr]]
3573 who = "Mike Hommey <mh+mozilla@glandium.org>"
3574 criteria = "safe-to-run"
3575 delta = "0.1.8 -> 0.1.9"
3576
3577 [[audits.serde_repr]]
3578 who = "Mike Hommey <mh+mozilla@glandium.org>"
3579 criteria = "safe-to-run"
3580 delta = "0.1.9 -> 0.1.10"
3581
3582 [[audits.serde_with]]
3583 who = "Mike Hommey <mh+mozilla@glandium.org>"
3584 criteria = "safe-to-deploy"
3585 delta = "1.14.0 -> 3.0.0"
3586
3587 [[audits.serde_with_macros]]
3588 who = "Mike Hommey <mh+mozilla@glandium.org>"
3589 criteria = "safe-to-deploy"
3590 delta = "1.5.2 -> 3.0.0"
3591
3592 [[audits.serde_yaml]]
3593 who = "Mike Hommey <mh+mozilla@glandium.org>"
3594 criteria = "safe-to-run"
3595 delta = "0.8.24 -> 0.8.26"
3596
3597 [[audits.servo_arc]]
3598 who = "Emilio Cobos Álvarez <emilio@crisal.io>"
3599 criteria = "safe-to-deploy"
3600 version = "0.1.1"
3601 notes = "Developed in-tree, effectively."
3602
3603 [[audits.sfv]]
3604 who = "Mike Hommey <mh+mozilla@glandium.org>"
3605 criteria = "safe-to-deploy"
3606 delta = "0.9.2 -> 0.9.3"
3607
3608 [[audits.sha1]]
3609 who = "Dana Keeler <dkeeler@mozilla.com>"
3610 criteria = "safe-to-deploy"
3611 version = "0.10.5"
3612
3613 [[audits.sha1]]
3614 who = "Mike Hommey <mh+mozilla@glandium.org>"
3615 criteria = "safe-to-run"
3616 delta = "0.10.0 -> 0.10.5"
3617
3618 [[audits.sha2]]
3619 who = "Mike Hommey <mh+mozilla@glandium.org>"
3620 criteria = "safe-to-deploy"
3621 delta = "0.10.2 -> 0.10.6"
3622
3623 [[audits.sha3]]
3624 who = "Simon Friedberger <simon@mozilla.com>"
3625 criteria = "safe-to-deploy"
3626 delta = "0.10.6 -> 0.10.7"
3627
3628 [[audits.slab]]
3629 who = "Mike Hommey <mh+mozilla@glandium.org>"
3630 criteria = "safe-to-deploy"
3631 delta = "0.4.6 -> 0.4.7"
3632
3633 [[audits.slab]]
3634 who = "Mike Hommey <mh+mozilla@glandium.org>"
3635 criteria = "safe-to-deploy"
3636 delta = "0.4.7 -> 0.4.8"
3637
3638 [[audits.smallbitvec]]
3639 who = "Bobby Holley <bobbyholley@gmail.com>"
3640 criteria = "safe-to-deploy"
3641 version = "2.5.0"
3642 notes = "All code written or reviewed by Mozilla staff."
3643
3644 [[audits.smallbitvec]]
3645 who = "Bobby Holley <bobbyholley@gmail.com>"
3646 criteria = "safe-to-deploy"
3647 delta = "2.5.0 -> 2.5.1"
3648
3649 [[audits.smallvec]]
3650 who = "Mike Hommey <mh+mozilla@glandium.org>"
3651 criteria = "safe-to-deploy"
3652 delta = "1.8.0 -> 1.9.0"
3653
3654 [[audits.smallvec]]
3655 who = "Mike Hommey <mh+mozilla@glandium.org>"
3656 criteria = "safe-to-deploy"
3657 delta = "1.9.0 -> 1.10.0"
3658
3659 [[audits.smart-default]]
3660 who = "Gabriele Svelto <gsvelto@mozilla.com>"
3661 criteria = "safe-to-deploy"
3662 version = "0.6.0"
3663
3664 [[audits.smart-default]]
3665 who = "Mike Hommey <mh+mozilla@glandium.org>"
3666 criteria = "safe-to-deploy"
3667 delta = "0.6.0 -> 0.7.1"
3668
3669 [[audits.socket2]]
3670 who = "Mike Hommey <mh+mozilla@glandium.org>"
3671 criteria = "safe-to-deploy"
3672 delta = "0.4.4 -> 0.4.7"
3673
3674 [[audits.spirv]]
3675 who = "Nicolas Silva <nical@fastmail.com>"
3676 criteria = "safe-to-deploy"
3677 delta = "0.2.0+1.5.4 -> 0.3.0+sdk-1.3.268.0"
3678
3679 [[audits.strck]]
3680 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
3681 criteria = "safe-to-deploy"
3682 version = "0.1.2"
3683 notes = "This crate uses unsafe lock to keep invariant. I auditted code. Also, this doesn't have file access and network access."
3684
3685 [[audits.strck_ident]]
3686 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
3687 criteria = "safe-to-deploy"
3688 version = "0.1.2"
3689 notes = "This crate doesn't use unsafe block, network access and filesystem access."
3690
3691 [[audits.subtle]]
3692 who = "Simon Friedberger <simon@mozilla.com>"
3693 criteria = "safe-to-deploy"
3694 version = "2.5.0"
3695 notes = "The goal is to provide some constant-time correctness for cryptographic implementations. The approach is reasonable, it is known to be insufficient but this is pointed out in the documentation."
3696
3697 [[audits.svg_fmt]]
3698 who = "Bobby Holley <bobbyholley@gmail.com>"
3699 criteria = "safe-to-deploy"
3700 version = "0.4.1"
3701 notes = "Simple string processing with no unsafe code or ambient capability usage."
3702
3703 [[audits.syn]]
3704 who = "Mike Hommey <mh+mozilla@glandium.org>"
3705 criteria = "safe-to-deploy"
3706 delta = "1.0.96 -> 1.0.99"
3707
3708 [[audits.syn]]
3709 who = "Mike Hommey <mh+mozilla@glandium.org>"
3710 criteria = "safe-to-deploy"
3711 delta = "1.0.99 -> 1.0.107"
3712
3713 [[audits.synstructure]]
3714 who = "Nika Layzell <nika@thelayzells.com>"
3715 criteria = "safe-to-deploy"
3716 version = "0.12.6"
3717 notes = """
3718 I am the primary author of the `synstructure` crate, and its current
3719 maintainer. The one use of `unsafe` is unnecessary, but documented and
3720 harmless. It will be removed in the next version.
3721 """
3722
3723 [[audits.synstructure]]
3724 who = "Mike Hommey <mh+mozilla@glandium.org>"
3725 criteria = "safe-to-deploy"
3726 delta = "0.12.6 -> 0.13.0"
3727
3728 [[audits.tempfile]]
3729 who = "Mike Hommey <mh+mozilla@glandium.org>"
3730 criteria = "safe-to-deploy"
3731 delta = "3.6.0 -> 3.8.0"
3732
3733 [[audits.tempfile]]
3734 who = "Mike Hommey <mh+mozilla@glandium.org>"
3735 criteria = "safe-to-deploy"
3736 delta = "3.8.0 -> 3.9.0"
3737
3738 [[audits.termcolor]]
3739 who = "Mike Hommey <mh+mozilla@glandium.org>"
3740 criteria = "safe-to-deploy"
3741 delta = "1.1.3 -> 1.2.0"
3742
3743 [[audits.textwrap]]
3744 who = "Mike Hommey <mh+mozilla@glandium.org>"
3745 criteria = "safe-to-deploy"
3746 delta = "0.15.0 -> 0.15.2"
3747
3748 [[audits.textwrap]]
3749 who = "Mike Hommey <mh+mozilla@glandium.org>"
3750 criteria = "safe-to-deploy"
3751 delta = "0.15.2 -> 0.16.0"
3752
3753 [[audits.textwrap]]
3754 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
3755 criteria = "safe-to-deploy"
3756 delta = "0.16.0 -> 0.16.1"
3757
3758 [[audits.thin-vec]]
3759 who = "Aria Beingessner <a.beingessner@gmail.com>"
3760 criteria = "safe-to-deploy"
3761 version = "0.2.5"
3762 notes = "I own this crate, and most of its versions were codeveloped and reviewed by Nika Layzell. This version was not explicitly reviewed by her, but it was specifically a release that made the code pass miri and was reviewed by me. Firefox uses it in the gecko-ffi configuration which is less thoroughly tested and more dangerous but we're reasonably confident in it. The real danger is from C++ code failing to use it correctly in FFI but that's just how FFI is."
3763
3764 [[audits.thin-vec]]
3765 who = "Mike Hommey <mh+mozilla@glandium.org>"
3766 criteria = "safe-to-deploy"
3767 delta = "0.2.5 -> 0.2.7"
3768
3769 [[audits.thin-vec]]
3770 who = "Mike Hommey <mh+mozilla@glandium.org>"
3771 criteria = "safe-to-deploy"
3772 delta = "0.2.7 -> 0.2.12"
3773
3774 [[audits.thiserror]]
3775 who = "Mike Hommey <mh+mozilla@glandium.org>"
3776 criteria = "safe-to-deploy"
3777 delta = "1.0.31 -> 1.0.32"
3778
3779 [[audits.thiserror]]
3780 who = "Mike Hommey <mh+mozilla@glandium.org>"
3781 criteria = "safe-to-deploy"
3782 delta = "1.0.32 -> 1.0.38"
3783
3784 [[audits.thiserror-impl]]
3785 who = "Mike Hommey <mh+mozilla@glandium.org>"
3786 criteria = "safe-to-deploy"
3787 delta = "1.0.31 -> 1.0.32"
3788
3789 [[audits.thiserror-impl]]
3790 who = "Mike Hommey <mh+mozilla@glandium.org>"
3791 criteria = "safe-to-deploy"
3792 delta = "1.0.32 -> 1.0.38"
3793
3794 [[audits.threadbound]]
3795 who = "Mike Hommey <mh+mozilla@glandium.org>"
3796 criteria = "safe-to-deploy"
3797 delta = "0.1.3 -> 0.1.4"
3798
3799 [[audits.threadbound]]
3800 who = "Mike Hommey <mh+mozilla@glandium.org>"
3801 criteria = "safe-to-deploy"
3802 delta = "0.1.4 -> 0.1.5"
3803
3804 [[audits.time]]
3805 who = "Mike Hommey <mh+mozilla@glandium.org>"
3806 criteria = "safe-to-deploy"
3807 delta = "0.1.44 -> 0.1.45"
3808
3809 [[audits.time]]
3810 who = "Kershaw Chang <kershaw@mozilla.com>"
3811 criteria = "safe-to-deploy"
3812 delta = "0.1.45 -> 0.3.17"
3813
3814 [[audits.time]]
3815 who = "Mike Hommey <mh+mozilla@glandium.org>"
3816 criteria = "safe-to-run"
3817 delta = "0.3.9 -> 0.3.17"
3818
3819 [[audits.time]]
3820 who = "Kershaw Chang <kershaw@mozilla.com>"
3821 criteria = "safe-to-deploy"
3822 delta = "0.3.17 -> 0.3.23"
3823
3824 [[audits.time-core]]
3825 who = "Kershaw Chang <kershaw@mozilla.com>"
3826 criteria = "safe-to-deploy"
3827 version = "0.1.0"
3828
3829 [[audits.time-core]]
3830 who = "Mike Hommey <mh+mozilla@glandium.org>"
3831 criteria = "safe-to-run"
3832 version = "0.1.0"
3833
3834 [[audits.time-core]]
3835 who = "Kershaw Chang <kershaw@mozilla.com>"
3836 criteria = "safe-to-deploy"
3837 delta = "0.1.0 -> 0.1.1"
3838
3839 [[audits.time-macros]]
3840 who = "Kershaw Chang <kershaw@mozilla.com>"
3841 criteria = "safe-to-deploy"
3842 version = "0.2.6"
3843
3844 [[audits.time-macros]]
3845 who = "Mike Hommey <mh+mozilla@glandium.org>"
3846 criteria = "safe-to-run"
3847 delta = "0.2.4 -> 0.2.6"
3848
3849 [[audits.time-macros]]
3850 who = "Kershaw Chang <kershaw@mozilla.com>"
3851 criteria = "safe-to-deploy"
3852 delta = "0.2.6 -> 0.2.10"
3853
3854 [[audits.tinystr]]
3855 who = "Zibi Braniecki <zibi@unicode.org>"
3856 criteria = "safe-to-deploy"
3857 version = "0.3.4"
3858
3859 [[audits.tinystr]]
3860 who = "Zibi Braniecki <zibi@unicode.org>"
3861 criteria = "safe-to-deploy"
3862 version = "0.6.0"
3863
3864 [[audits.tinystr]]
3865 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
3866 criteria = "safe-to-deploy"
3867 version = "0.7.0"
3868 notes = "One of original auther was Zibi Braniecki who worked at Mozilla and maintained by ICU4X developers (Google and Mozilla). I've vetted the one instance of unsafe code."
3869
3870 [[audits.tinystr]]
3871 who = "Mike Hommey <mh+mozilla@glandium.org>"
3872 criteria = "safe-to-deploy"
3873 delta = "0.7.0 -> 0.7.1"
3874
3875 [[audits.tinystr]]
3876 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
3877 criteria = "safe-to-deploy"
3878 delta = "0.7.1 -> 0.7.4"
3879
3880 [[audits.tokio-macros]]
3881 who = "Mike Hommey <mh+mozilla@glandium.org>"
3882 criteria = "safe-to-run"
3883 delta = "1.8.0 -> 1.8.2"
3884
3885 [[audits.tokio-stream]]
3886 who = "Mike Hommey <mh+mozilla@glandium.org>"
3887 criteria = "safe-to-run"
3888 delta = "0.1.9 -> 0.1.11"
3889
3890 [[audits.tokio-stream]]
3891 who = "Mike Hommey <mh+mozilla@glandium.org>"
3892 criteria = "safe-to-run"
3893 delta = "0.1.11 -> 0.1.12"
3894
3895 [[audits.toml]]
3896 who = "Bobby Holley <bobbyholley@gmail.com>"
3897 criteria = "safe-to-deploy"
3898 delta = "0.5.7 -> 0.5.9"
3899
3900 [[audits.toml]]
3901 who = "Mike Hommey <mh+mozilla@glandium.org>"
3902 criteria = "safe-to-deploy"
3903 delta = "0.5.9 -> 0.5.10"
3904
3905 [[audits.toml]]
3906 who = "Mike Hommey <mh+mozilla@glandium.org>"
3907 criteria = "safe-to-deploy"
3908 delta = "0.5.10 -> 0.5.11"
3909
3910 [[audits.topological-sort]]
3911 who = "Bobby Holley <bobbyholley@gmail.com>"
3912 criteria = "safe-to-deploy"
3913 version = "0.1.0"
3914 notes = "Simple algorithm crate with no unsafe code or capability usage."
3915
3916 [[audits.tower-service]]
3917 who = "Mike Hommey <mh+mozilla@glandium.org>"
3918 criteria = "safe-to-run"
3919 delta = "0.3.1 -> 0.3.2"
3920
3921 [[audits.tracing]]
3922 who = "Mike Hommey <mh+mozilla@glandium.org>"
3923 criteria = "safe-to-run"
3924 delta = "0.1.35 -> 0.1.36"
3925
3926 [[audits.tracing]]
3927 who = "Mike Hommey <mh+mozilla@glandium.org>"
3928 criteria = "safe-to-run"
3929 delta = "0.1.36 -> 0.1.37"
3930
3931 [[audits.tracing-attributes]]
3932 who = "Mike Hommey <mh+mozilla@glandium.org>"
3933 criteria = "safe-to-run"
3934 delta = "0.1.21 -> 0.1.22"
3935
3936 [[audits.tracing-attributes]]
3937 who = "Mike Hommey <mh+mozilla@glandium.org>"
3938 criteria = "safe-to-run"
3939 delta = "0.1.22 -> 0.1.23"
3940
3941 [[audits.tracing-attributes]]
3942 who = "Mike Hommey <mh+mozilla@glandium.org>"
3943 criteria = "safe-to-run"
3944 delta = "0.1.23 -> 0.1.24"
3945
3946 [[audits.tracing-core]]
3947 who = "Mike Hommey <mh+mozilla@glandium.org>"
3948 criteria = "safe-to-run"
3949 delta = "0.1.27 -> 0.1.29"
3950
3951 [[audits.tracing-core]]
3952 who = "Mike Hommey <mh+mozilla@glandium.org>"
3953 criteria = "safe-to-run"
3954 delta = "0.1.29 -> 0.1.30"
3955
3956 [[audits.tracy-rs]]
3957 who = "Glenn Watson <git@intuitionlibrary.com>"
3958 criteria = "safe-to-deploy"
3959 version = "0.1.2"
3960
3961 [[audits.try-lock]]
3962 who = "Mike Hommey <mh+mozilla@glandium.org>"
3963 criteria = "safe-to-run"
3964 delta = "0.2.3 -> 0.2.4"
3965
3966 [[audits.typed-arena-nomut]]
3967 who = "Lee Salzman <lsalzman@gmail.com>"
3968 criteria = "safe-to-deploy"
3969 version = "0.1.0"
3970
3971 [[audits.typenum]]
3972 who = "Mike Hommey <mh+mozilla@glandium.org>"
3973 criteria = "safe-to-deploy"
3974 delta = "1.15.0 -> 1.16.0"
3975
3976 [[audits.uluru]]
3977 who = "Emilio Cobos Álvarez <emilio@crisal.io>"
3978 criteria = "safe-to-deploy"
3979 version = "3.0.0"
3980 notes = """
3981 I've reviewed multiple patches in this crate, including the initial
3982 implementation back in the day. It has no unsafe code at all nowadays.
3983 """
3984
3985 [[audits.unic-langid]]
3986 who = "Zibi Braniecki <zibi@unicode.org>"
3987 criteria = "safe-to-deploy"
3988 version = "0.9.0"
3989
3990 [[audits.unic-langid]]
3991 who = "Mike Hommey <mh+mozilla@glandium.org>"
3992 criteria = "safe-to-deploy"
3993 delta = "0.9.0 -> 0.9.1"
3994
3995 [[audits.unic-langid-impl]]
3996 who = "Zibi Braniecki <zibi@unicode.org>"
3997 criteria = "safe-to-deploy"
3998 version = "0.9.0"
3999
4000 [[audits.unic-langid-impl]]
4001 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
4002 criteria = "safe-to-deploy"
4003 delta = "0.9.0 -> 0.9.1"
4004
4005 [[audits.unic-langid-macros]]
4006 who = "Zibi Braniecki <zibi@unicode.org>"
4007 criteria = "safe-to-deploy"
4008 version = "0.9.0"
4009
4010 [[audits.unic-langid-macros]]
4011 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
4012 criteria = "safe-to-deploy"
4013 delta = "0.9.0 -> 0.9.1"
4014
4015 [[audits.unic-langid-macros-impl]]
4016 who = "Zibi Braniecki <zibi@unicode.org>"
4017 criteria = "safe-to-deploy"
4018 version = "0.9.0"
4019
4020 [[audits.unic-langid-macros-impl]]
4021 who = "Mike Hommey <mh+mozilla@glandium.org>"
4022 criteria = "safe-to-deploy"
4023 delta = "0.9.0 -> 0.9.1"
4024
4025 [[audits.unicode-bidi]]
4026 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
4027 criteria = "safe-to-deploy"
4028 delta = "0.3.8 -> 0.3.13"
4029
4030 [[audits.unicode-bidi]]
4031 who = "Jonathan Kew <jkew@mozilla.com>"
4032 criteria = "safe-to-deploy"
4033 delta = "0.3.13 -> 0.3.14"
4034 notes = "I am the author of the bulk of the upstream changes in this version, and also checked the remaining post-0.3.13 changes."
4035
4036 [[audits.unicode-bidi]]
4037 who = "Jonathan Kew <jfkthame@gmail.com>"
4038 criteria = "safe-to-deploy"
4039 delta = "0.3.14 -> 0.3.15"
4040
4041 [[audits.unicode-bidi]]
4042 who = "Jonathan Kew <jfkthame@gmail.com>"
4043 criteria = "safe-to-deploy"
4044 delta = "0.3.15 -> 0.3.15@git:ca612daf1c08c53abe07327cb3e6ef6e0a760f0c"
4045 importable = false
4046
4047 [[audits.unicode-ident]]
4048 who = "Mike Hommey <mh+mozilla@glandium.org>"
4049 criteria = "safe-to-deploy"
4050 delta = "1.0.0 -> 1.0.1"
4051
4052 [[audits.unicode-ident]]
4053 who = "Mike Hommey <mh+mozilla@glandium.org>"
4054 criteria = "safe-to-deploy"
4055 delta = "1.0.1 -> 1.0.3"
4056
4057 [[audits.unicode-ident]]
4058 who = "Mike Hommey <mh+mozilla@glandium.org>"
4059 criteria = "safe-to-deploy"
4060 delta = "1.0.3 -> 1.0.6"
4061
4062 [[audits.unicode-normalization]]
4063 who = "Mike Hommey <mh+mozilla@glandium.org>"
4064 criteria = "safe-to-deploy"
4065 delta = "0.1.19 -> 0.1.20"
4066 notes = "I am the author of most of these changes upstream, and prepared the release myself, at which point I looked at the other changes since 0.1.19."
4067
4068 [[audits.unicode-normalization]]
4069 who = "Mike Hommey <mh+mozilla@glandium.org>"
4070 criteria = "safe-to-deploy"
4071 delta = "0.1.20 -> 0.1.21"
4072
4073 [[audits.unicode-normalization]]
4074 who = "Mike Hommey <mh+mozilla@glandium.org>"
4075 criteria = "safe-to-deploy"
4076 delta = "0.1.21 -> 0.1.22"
4077
4078 [[audits.unicode-segmentation]]
4079 who = "Mike Hommey <mh+mozilla@glandium.org>"
4080 criteria = "safe-to-deploy"
4081 delta = "1.9.0 -> 1.10.0"
4082
4083 [[audits.unicode-width]]
4084 who = "Mike Hommey <mh+mozilla@glandium.org>"
4085 criteria = "safe-to-deploy"
4086 delta = "0.1.9 -> 0.1.10"
4087
4088 [[audits.unicode-xid]]
4089 who = "Mike Hommey <mh+mozilla@glandium.org>"
4090 criteria = "safe-to-deploy"
4091 delta = "0.2.3 -> 0.2.4"
4092
4093 [[audits.uniffi]]
4094 who = "Travis Long <tlong@mozilla.com>"
4095 criteria = "safe-to-deploy"
4096 version = "0.19.3"
4097 notes = "Maintained by the Glean and Application Services teams"
4098
4099 [[audits.uniffi]]
4100 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
4101 criteria = "safe-to-deploy"
4102 delta = "0.19.3 -> 0.19.6"
4103 notes = "Maintained by the Glean and Application Services team."
4104
4105 [[audits.uniffi]]
4106 who = "Perry McManis <pmcmanis@mozilla.com>"
4107 criteria = "safe-to-deploy"
4108 delta = "0.19.6 -> 0.20.0"
4109
4110 [[audits.uniffi]]
4111 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
4112 criteria = "safe-to-deploy"
4113 delta = "0.20.0 -> 0.21.0"
4114 notes = "Maintained by the Glean and Application Services team."
4115
4116 [[audits.uniffi]]
4117 who = "Mike Hommey <mh+mozilla@glandium.org>"
4118 criteria = "safe-to-deploy"
4119 delta = "0.21.0 -> 0.21.1"
4120 notes = "No changes."
4121
4122 [[audits.uniffi]]
4123 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
4124 criteria = "safe-to-deploy"
4125 delta = "0.21.1 -> 0.23.0"
4126 notes = "Maintained by the Glean and Application Services team."
4127
4128 [[audits.uniffi_bindgen]]
4129 who = "Travis Long <tlong@mozilla.com>"
4130 criteria = "safe-to-deploy"
4131 version = "0.19.3"
4132 notes = "Maintained by the Glean and Application Services teams."
4133
4134 [[audits.uniffi_bindgen]]
4135 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
4136 criteria = "safe-to-deploy"
4137 delta = "0.19.3 -> 0.19.6"
4138 notes = "Maintained by the Glean and Application Services team."
4139
4140 [[audits.uniffi_bindgen]]
4141 who = "Perry McManis <pmcmanis@mozilla.com>"
4142 criteria = "safe-to-deploy"
4143 delta = "0.19.6 -> 0.20.0"
4144
4145 [[audits.uniffi_bindgen]]
4146 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
4147 criteria = "safe-to-deploy"
4148 delta = "0.20.0 -> 0.21.0"
4149 notes = "Maintained by the Glean and Application Services team."
4150
4151 [[audits.uniffi_bindgen]]
4152 who = "Mike Hommey <mh+mozilla@glandium.org>"
4153 criteria = "safe-to-deploy"
4154 delta = "0.21.0 -> 0.21.1"
4155 notes = "I authored the changes in this version."
4156
4157 [[audits.uniffi_bindgen]]
4158 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
4159 criteria = "safe-to-deploy"
4160 delta = "0.21.1 -> 0.23.0"
4161 notes = "Maintained by the Glean and Application Services team."
4162
4163 [[audits.uniffi_build]]
4164 who = "Travis Long <tlong@mozilla.com>"
4165 criteria = "safe-to-deploy"
4166 version = "0.19.3"
4167 notes = "Maintained by the Glean and Application Services teams."
4168
4169 [[audits.uniffi_build]]
4170 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
4171 criteria = "safe-to-deploy"
4172 delta = "0.19.3 -> 0.19.6"
4173 notes = "Maintained by the Glean and Application Services team."
4174
4175 [[audits.uniffi_build]]
4176 who = "Perry McManis <pmcmanis@mozilla.com>"
4177 criteria = "safe-to-deploy"
4178 delta = "0.19.6 -> 0.20.0"
4179
4180 [[audits.uniffi_build]]
4181 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
4182 criteria = "safe-to-deploy"
4183 delta = "0.20.0 -> 0.21.0"
4184 notes = "Maintained by the Glean and Application Services team."
4185
4186 [[audits.uniffi_build]]
4187 who = "Mike Hommey <mh+mozilla@glandium.org>"
4188 criteria = "safe-to-deploy"
4189 delta = "0.21.0 -> 0.21.1"
4190 notes = "No changes."
4191
4192 [[audits.uniffi_build]]
4193 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
4194 criteria = "safe-to-deploy"
4195 delta = "0.21.1 -> 0.23.0"
4196 notes = "Maintained by the Glean and Application Services team."
4197
4198 [[audits.uniffi_checksum_derive]]
4199 who = "Mike Hommey <mh+mozilla@glandium.org>"
4200 criteria = "safe-to-deploy"
4201 version = "0.21.1"
4202 notes = "I authored this crate."
4203
4204 [[audits.uniffi_checksum_derive]]
4205 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
4206 criteria = "safe-to-deploy"
4207 delta = "0.21.1 -> 0.23.0"
4208 notes = "Maintained by the Glean and Application Services team."
4209
4210 [[audits.uniffi_core]]
4211 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
4212 criteria = "safe-to-deploy"
4213 version = "0.23.0"
4214 notes = "Maintained by the Glean and Application Services teams."
4215
4216 [[audits.uniffi_macros]]
4217 who = "Travis Long <tlong@mozilla.com>"
4218 criteria = "safe-to-deploy"
4219 version = "0.19.3"
4220 notes = "Maintained by the Glean and Application Services teams."
4221
4222 [[audits.uniffi_macros]]
4223 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
4224 criteria = "safe-to-deploy"
4225 delta = "0.19.3 -> 0.19.6"
4226 notes = "Maintained by the Glean and Application Services team."
4227
4228 [[audits.uniffi_macros]]
4229 who = "Perry McManis <pmcmanis@mozilla.com>"
4230 criteria = "safe-to-deploy"
4231 delta = "0.19.6 -> 0.20.0"
4232
4233 [[audits.uniffi_macros]]
4234 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
4235 criteria = "safe-to-deploy"
4236 delta = "0.20.0 -> 0.21.0"
4237 notes = "Maintained by the Glean and Application Services team."
4238
4239 [[audits.uniffi_macros]]
4240 who = "Mike Hommey <mh+mozilla@glandium.org>"
4241 criteria = "safe-to-deploy"
4242 delta = "0.21.0 -> 0.21.1"
4243 notes = "No changes."
4244
4245 [[audits.uniffi_macros]]
4246 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
4247 criteria = "safe-to-deploy"
4248 delta = "0.21.1 -> 0.23.0"
4249 notes = "Maintained by the Glean and Application Services team."
4250
4251 [[audits.uniffi_meta]]
4252 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
4253 criteria = "safe-to-deploy"
4254 version = "0.19.6"
4255 notes = "Maintained by the Glean and Application Services team."
4256
4257 [[audits.uniffi_meta]]
4258 who = "Perry McManis <pmcmanis@mozilla.com>"
4259 criteria = "safe-to-deploy"
4260 delta = "0.19.6 -> 0.20.0"
4261
4262 [[audits.uniffi_meta]]
4263 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
4264 criteria = "safe-to-deploy"
4265 delta = "0.20.0 -> 0.21.0"
4266 notes = "Maintained by the Glean and Application Services team."
4267
4268 [[audits.uniffi_meta]]
4269 who = "Mike Hommey <mh+mozilla@glandium.org>"
4270 criteria = "safe-to-deploy"
4271 delta = "0.21.0 -> 0.21.1"
4272 notes = "I authored the changes in this version."
4273
4274 [[audits.uniffi_meta]]
4275 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
4276 criteria = "safe-to-deploy"
4277 delta = "0.21.1 -> 0.23.0"
4278 notes = "Maintained by the Glean and Application Services team."
4279
4280 [[audits.uniffi_testing]]
4281 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
4282 criteria = "safe-to-deploy"
4283 version = "0.23.0"
4284 notes = "Maintained by the Glean and Application Services team."
4285
4286 [[audits.url]]
4287 who = "Valentin Gosu <valentin.gosu@gmail.com>"
4288 criteria = "safe-to-deploy"
4289 version = "2.4.0"
4290
4291 [[audits.url]]
4292 who = "Valentin Gosu <valentin.gosu@gmail.com>"
4293 criteria = "safe-to-deploy"
4294 delta = "2.4.0 -> 2.4.1"
4295
4296 [[audits.url]]
4297 who = "Valentin Gosu <valentin.gosu@gmail.com>"
4298 criteria = "safe-to-deploy"
4299 delta = "2.4.1 -> 2.5.0"
4300
4301 [[audits.uuid]]
4302 who = "Gabriele Svelto <gsvelto@mozilla.com>"
4303 criteria = "safe-to-deploy"
4304 delta = "0.8.2 -> 1.2.2"
4305
4306 [[audits.uuid]]
4307 who = "Mike Hommey <mh+mozilla@glandium.org>"
4308 criteria = "safe-to-deploy"
4309 delta = "1.2.2 -> 1.3.0"
4310
4311 [[audits.void]]
4312 who = "Bobby Holley <bobbyholley@gmail.com>"
4313 criteria = "safe-to-deploy"
4314 version = "1.0.2"
4315 notes = "Very small crate, just hosts the Void type for easier cross-crate interfacing."
4316
4317 [[audits.warp]]
4318 who = "Mike Hommey <mh+mozilla@glandium.org>"
4319 criteria = "safe-to-run"
4320 delta = "0.3.2 -> 0.3.3"
4321
4322 [[audits.warp]]
4323 who = "Bobby Holley <bobbyholley@gmail.com>"
4324 criteria = "safe-to-run"
4325 delta = "0.3.3 -> 0.3.3@git:4af45fae95bc98b0eba1ef0db17e1dac471bb23d"
4326
4327 [[audits.warp]]
4328 who = "Mike Hommey <mh+mozilla@glandium.org>"
4329 criteria = "safe-to-run"
4330 delta = "0.3.6 -> 0.3.6@git:9d081461ae1167eb321585ce424f4fef6cf0092b"
4331
4332 [[audits.wasm-encoder]]
4333 who = "Ryan Hunt <rhunt@eqrion.net>"
4334 criteria = "safe-to-deploy"
4335 version = "0.7.0"
4336 notes = "Maintained by the Bytecode Alliance, with contributions from Mozilla. This has no unsafe code and uses no ambient capabilities."
4337
4338 [[audits.wasm-encoder]]
4339 who = "Ryan Hunt <rhunt@eqrion.net>"
4340 criteria = "safe-to-deploy"
4341 delta = "0.7.0 -> 0.14.0"
4342 notes = "wasm-encoder has no unsafe code and uses no ambient capabilities."
4343
4344 [[audits.wasm-encoder]]
4345 who = "Yury Delendik <ydelendik@mozilla.com>"
4346 criteria = "safe-to-deploy"
4347 delta = "0.14.0 -> 0.15.0"
4348
4349 [[audits.wasm-encoder]]
4350 who = "Yury Delendik <ydelendik@mozilla.com>"
4351 criteria = "safe-to-deploy"
4352 delta = "0.16.0 -> 0.17.0"
4353
4354 [[audits.wasm-encoder]]
4355 who = "Ryan Hunt <rhunt@eqrion.net>"
4356 criteria = "safe-to-deploy"
4357 delta = "0.19.0 -> 0.19.1"
4358
4359 [[audits.wasm-smith]]
4360 who = "Ryan Hunt <rhunt@eqrion.net>"
4361 criteria = "safe-to-deploy"
4362 version = "0.11.2"
4363 notes = "Maintained by the Bytecode Alliance, with contributions from Mozilla. I've vetted the one instance of unsafe code."
4364
4365 [[audits.wasm-smith]]
4366 who = "Yury Delendik <ydelendik@mozilla.com>"
4367 criteria = "safe-to-run"
4368 delta = "0.11.2 -> 0.11.3"
4369
4370 [[audits.wasm-smith]]
4371 who = "Yury Delendik <ydelendik@mozilla.com>"
4372 criteria = "safe-to-run"
4373 delta = "0.11.4 -> 0.11.5"
4374
4375 [[audits.wasm-smith]]
4376 who = "Ryan Hunt <rhunt@eqrion.net>"
4377 criteria = "safe-to-run"
4378 delta = "0.11.7 -> 0.11.8"
4379
4380 [[audits.wasmparser]]
4381 who = "Ryan Hunt <rhunt@eqrion.net>"
4382 criteria = "safe-to-deploy"
4383 version = "0.87.0"
4384 notes = "Maintained by the Bytecode Alliance, with contributions from Mozilla. I've vetted the one instance of unsafe code."
4385
4386 [[audits.wasmparser]]
4387 who = "Yury Delendik <ydelendik@mozilla.com>"
4388 criteria = "safe-to-deploy"
4389 delta = "0.87.0 -> 0.88.0"
4390
4391 [[audits.wasmparser]]
4392 who = "Yury Delendik <ydelendik@mozilla.com>"
4393 criteria = "safe-to-deploy"
4394 delta = "0.89.1 -> 0.91.0"
4395
4396 [[audits.wasmparser]]
4397 who = "Ryan Hunt <rhunt@eqrion.net>"
4398 criteria = "safe-to-deploy"
4399 delta = "0.93.0 -> 0.94.0"
4400
4401 [[audits.wast]]
4402 who = "Ryan Hunt <rhunt@eqrion.net>"
4403 criteria = "safe-to-deploy"
4404 version = "44.0.0"
4405
4406 [[audits.wast]]
4407 who = "Ryan Hunt <rhunt@eqrion.net>"
4408 criteria = "safe-to-deploy"
4409 version = "44.0.0"
4410 notes = "Maintained by the Bytecode Alliance, with contributions from Mozilla. wast has no unsafe code and the only ambient capability it uses is to read the full contents of a file that is given to it."
4411
4412 [[audits.wast]]
4413 who = "Yury Delendik <ydelendik@mozilla.com>"
4414 criteria = "safe-to-deploy"
4415 delta = "44.0.0 -> 45.0.0"
4416
4417 [[audits.wast]]
4418 who = "Yury Delendik <ydelendik@mozilla.com>"
4419 criteria = "safe-to-deploy"
4420 delta = "46.0.0 -> 47.0.0"
4421
4422 [[audits.wast]]
4423 who = "Ryan Hunt <rhunt@eqrion.net>"
4424 criteria = "safe-to-deploy"
4425 delta = "48.0.0 -> 49.0.0"
4426
4427 [[audits.wast]]
4428 who = "Ben Visness <bvisness@mozilla.com>"
4429 criteria = "safe-to-deploy"
4430 delta = "55.0.0 -> 56.0.0"
4431
4432 [[audits.webrtc-sdp]]
4433 who = "Byron Campen <docfaraday@gmail.com>"
4434 criteria = "safe-to-deploy"
4435 delta = "0.3.9 -> 0.3.10"
4436
4437 [[audits.webrtc-sdp]]
4438 who = "Nicolas Grunbaum <ngrunbaum@mozilla.com>"
4439 criteria = "safe-to-deploy"
4440 delta = "0.3.10 -> 0.3.11"
4441
4442 [[audits.weedle2]]
4443 who = "Travis Long <tlong@mozilla.com>"
4444 criteria = "safe-to-deploy"
4445 version = "3.0.0"
4446 notes = "Maintained by the Glean and Application Services teams."
4447
4448 [[audits.weedle2]]
4449 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
4450 criteria = "safe-to-deploy"
4451 delta = "3.0.0 -> 4.0.0"
4452 notes = "Maintained by the Glean and Application Services team."
4453
4454 [[audits.wgpu-core]]
4455 who = "Dzmitry Malyshau <kvark@fastmail.com>"
4456 criteria = "safe-to-deploy"
4457 version = "0.12.0"
4458 notes = """
4459 This crate, up through the indicated version, was written or reviewed
4460 by Dzmitry Malyshau while he was a Mozilla employee. Dzmitry left
4461 Mozilla at the beginning of February 2022. This audit statement was
4462 collected by Jim Blandy, a Mozilla employee, over email in July 2022:
4463 Dzmitry was shown, and agreed to, the 'safe-to-deploy' text.
4464 """
4465
4466 [[audits.wgpu-core]]
4467 who = "Jim Blandy <jimb@mozilla.com>"
4468 criteria = "safe-to-deploy"
4469 delta = "0.12.0 -> 0.13.0"
4470
4471 [[audits.wgpu-core]]
4472 who = "Jim Blandy <jimb@red-bean.com>"
4473 criteria = "safe-to-deploy"
4474 delta = "0.13.0 -> 0.14.0"
4475 notes = "Audit by Erich Gubler, Jim Blandy, Nicolas Silva, and Teodor Tanasoaia."
4476
4477 [[audits.wgpu-core]]
4478 who = "Nicolas Silva <nical@fastmail.com>"
4479 criteria = "safe-to-deploy"
4480 delta = "0.14.0 -> 0.15.0"
4481
4482 [[audits.wgpu-core]]
4483 who = "Nicolas Silva <nical@fastmail.com>"
4484 criteria = "safe-to-deploy"
4485 delta = "0.15.0 -> 0.16.0"
4486
4487 [[audits.wgpu-core]]
4488 who = "Nicolas Silva <nical@fastmail.com>"
4489 criteria = "safe-to-deploy"
4490 delta = "0.16.0 -> 0.17.0"
4491
4492 [[audits.wgpu-core]]
4493 who = "Nicolas Silva <nical@fastmail.com>"
4494 criteria = "safe-to-deploy"
4495 delta = "0.17.0 -> 0.18.0"
4496
4497 [[audits.wgpu-core]]
4498 who = [
4499     "Jim Blandy <jimb@red-bean.com>",
4500     "Nicolas Silva <nical@fastmail.com>",
4501     "Teodor Tanasoaia <ttanasoaia@mozilla.com>",
4502     "Erich Gubler <erichdongubler@gmail.com>",
4503 ]
4504 criteria = "safe-to-deploy"
4505 delta = "0.18.0 -> 0.19.0@git:0c5bebca514eb06d9387f87666c1c658f3f673b4"
4506 importable = false
4507
4508 [[audits.wgpu-hal]]
4509 who = "Dzmitry Malyshau <kvark@fastmail.com>"
4510 criteria = "safe-to-deploy"
4511 version = "0.12.0"
4512 notes = """
4513 This crate, up through the indicated version, was written or reviewed
4514 by Dzmitry Malyshau while he was a Mozilla employee. Dzmitry left
4515 Mozilla at the beginning of February 2022. This audit statement was
4516 collected by Jim Blandy, a Mozilla employee, over email in July 2022:
4517 Dzmitry was shown, and agreed to, the 'safe-to-deploy' text.
4518 """
4519
4520 [[audits.wgpu-hal]]
4521 who = "Jim Blandy <jimb@mozilla.com>"
4522 criteria = "safe-to-deploy"
4523 delta = "0.12.0 -> 0.13.0"
4524
4525 [[audits.wgpu-hal]]
4526 who = "Jim Blandy <jimb@red-bean.com>"
4527 criteria = "safe-to-deploy"
4528 delta = "0.13.0 -> 0.14.0"
4529 notes = "Audit by Erich Gubler, Jim Blandy, Nicolas Silva, and Teodor Tanasoaia."
4530
4531 [[audits.wgpu-hal]]
4532 who = "Nicolas Silva <nical@fastmail.com>"
4533 criteria = "safe-to-deploy"
4534 delta = "0.14.0 -> 0.15.0"
4535
4536 [[audits.wgpu-hal]]
4537 who = "Nicolas Silva <nical@fastmail.com>"
4538 criteria = "safe-to-deploy"
4539 delta = "0.15.0 -> 0.16.0"
4540
4541 [[audits.wgpu-hal]]
4542 who = "Nicolas Silva <nical@fastmail.com>"
4543 criteria = "safe-to-deploy"
4544 delta = "0.16.0 -> 0.17.0"
4545
4546 [[audits.wgpu-hal]]
4547 who = "Nicolas Silva <nical@fastmail.com>"
4548 criteria = "safe-to-deploy"
4549 delta = "0.17.0 -> 0.18.0"
4550
4551 [[audits.wgpu-hal]]
4552 who = [
4553     "Jim Blandy <jimb@red-bean.com>",
4554     "Nicolas Silva <nical@fastmail.com>",
4555     "Teodor Tanasoaia <ttanasoaia@mozilla.com>",
4556     "Erich Gubler <erichdongubler@gmail.com>",
4557 ]
4558 criteria = "safe-to-deploy"
4559 delta = "0.18.0 -> 0.19.0@git:0c5bebca514eb06d9387f87666c1c658f3f673b4"
4560 importable = false
4561
4562 [[audits.wgpu-types]]
4563 who = "Dzmitry Malyshau <kvark@fastmail.com>"
4564 criteria = "safe-to-deploy"
4565 version = "0.12.0"
4566 notes = """
4567 This crate, up through the indicated version, was written or reviewed
4568 by Dzmitry Malyshau while he was a Mozilla employee. Dzmitry left
4569 Mozilla at the beginning of February 2022. This audit statement was
4570 collected by Jim Blandy, a Mozilla employee, over email in July 2022:
4571 Dzmitry was shown, and agreed to, the 'safe-to-deploy' text.
4572 """
4573
4574 [[audits.wgpu-types]]
4575 who = "Jim Blandy <jimb@mozilla.com>"
4576 criteria = "safe-to-deploy"
4577 delta = "0.12.0 -> 0.13.0"
4578
4579 [[audits.wgpu-types]]
4580 who = "Jim Blandy <jimb@red-bean.com>"
4581 criteria = "safe-to-deploy"
4582 delta = "0.13.0 -> 0.14.0"
4583 notes = "Audit by Erich Gubler, Jim Blandy, Nicolas Silva, and Teodor Tanasoaia."
4584
4585 [[audits.wgpu-types]]
4586 who = "Nicolas Silva <nical@fastmail.com>"
4587 criteria = "safe-to-deploy"
4588 delta = "0.14.0 -> 0.15.0"
4589
4590 [[audits.wgpu-types]]
4591 who = "Nicolas Silva <nical@fastmail.com>"
4592 criteria = "safe-to-deploy"
4593 delta = "0.15.0 -> 0.16.0"
4594
4595 [[audits.wgpu-types]]
4596 who = "Nicolas Silva <nical@fastmail.com>"
4597 criteria = "safe-to-deploy"
4598 delta = "0.16.0 -> 0.17.0"
4599
4600 [[audits.wgpu-types]]
4601 who = "Nicolas Silva <nical@fastmail.com>"
4602 criteria = "safe-to-deploy"
4603 delta = "0.17.0 -> 0.18.0"
4604
4605 [[audits.wgpu-types]]
4606 who = [
4607     "Jim Blandy <jimb@red-bean.com>",
4608     "Nicolas Silva <nical@fastmail.com>",
4609     "Teodor Tanasoaia <ttanasoaia@mozilla.com>",
4610     "Erich Gubler <erichdongubler@gmail.com>",
4611 ]
4612 criteria = "safe-to-deploy"
4613 delta = "0.18.0 -> 0.19.0@git:0c5bebca514eb06d9387f87666c1c658f3f673b4"
4614 importable = false
4615
4616 [[audits.whatsys]]
4617 who = "Bobby Holley <bobbyholley@gmail.com>"
4618 criteria = "safe-to-deploy"
4619 version = "0.1.2"
4620 notes = """
4621 Contains platform-specific FFI code for apple, mac, and windows. The windows code
4622 also contains a small C file compiled at build-time. I audited all of it and it
4623 looks correct.
4624 """
4625
4626 [[audits.whatsys]]
4627 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
4628 criteria = "safe-to-deploy"
4629 delta = "0.1.2 -> 0.3.1"
4630 notes = "Maintained by me. I have written or reviewed all of the code."
4631
4632 [[audits.winreg]]
4633 who = "Ray Kraesig <rkraesig@mozilla.com>"
4634 criteria = "safe-to-run"
4635 version = "0.10.1"
4636 notes = """
4637 This crate uses a lot of `unsafe`; not all of it is necessary, and not all of it
4638 is correct. (In particular, the alignment of data buffers does not seem to be
4639 correctly ensured at type-conversion time.) However, the code is not deceptive,
4640 and any more subtle issues do not appear to be exploitable -- certainly not from
4641 a test environment.
4642 """
4643
4644 [[audits.wpf-gpu-raster]]
4645 who = "Lee Salzman <lsalzman@mozilla.com>"
4646 criteria = "safe-to-deploy"
4647 version = "0.1.0"
4648 notes = "Written and maintained by Gfx team at Mozilla."
4649
4650 [[audits.writeable]]
4651 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
4652 criteria = "safe-to-deploy"
4653 version = "0.5.2"
4654 notes = "writeable is a variation of fmt::Write with sink version. This uses `unsafe` block to handle potentially-invalid UTF-8 character. I've vetted the one instance of unsafe code."
4655
4656 [[audits.writeable]]
4657 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
4658 criteria = "safe-to-deploy"
4659 delta = "0.5.2 -> 0.5.4"
4660
4661 [[audits.xmldecl]]
4662 who = "Henri Sivonen <hsivonen@hsivonen.fi>"
4663 criteria = "safe-to-deploy"
4664 version = "0.2.0"
4665 notes = "I, Henri Sivonen, wrote this crate myself for Gecko even though it's published on crates.io."
4666
4667 [[audits.yoke]]
4668 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
4669 criteria = "safe-to-deploy"
4670 version = "0.7.1"
4671 notes = "This crate is for zero-copy serialization for ICU4X data structure, and maintained by ICU4X team. Since this uses unsafe block for serialization, I audited code."
4672
4673 [[audits.yoke]]
4674 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
4675 criteria = "safe-to-deploy"
4676 delta = "0.7.1 -> 0.7.3"
4677
4678 [[audits.yoke-derive]]
4679 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
4680 criteria = "safe-to-deploy"
4681 version = "0.7.1@git:14e9a3a9857be74582abe2dfa7ab799c5eaac873"
4682 notes = "This crate is a helper for yoke crate that is ICU4X data structure, and maintained by ICU4X team. Since this uses unsafe block for serialization, all has the comment why this uses unsafe and I audited code."
4683
4684 [[audits.yoke-derive]]
4685 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
4686 criteria = "safe-to-deploy"
4687 version = "0.7.3"
4688
4689 [[audits.zerofrom]]
4690 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
4691 criteria = "safe-to-deploy"
4692 version = "0.1.2"
4693 notes = "This crate is zero-copy version of \"From\". This has no unsafe code and uses no ambient capabilities."
4694
4695 [[audits.zerofrom-derive]]
4696 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
4697 criteria = "safe-to-deploy"
4698 version = "0.1.2@git:14e9a3a9857be74582abe2dfa7ab799c5eaac873"
4699 notes = "This is custom derives for `ZeroFrom` that is from zerofrom crate. This has no unsafe code and uses no ambient capabilities."
4700
4701 [[audits.zerofrom-derive]]
4702 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
4703 criteria = "safe-to-deploy"
4704 version = "0.1.3"
4705
4706 [[audits.zerovec]]
4707 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
4708 criteria = "safe-to-deploy"
4709 version = "0.9.4"
4710 notes = "This crate is zero-copy data structure implmentation. Although this uses unsafe block in several code, it requires for zero-copy. And this has a comment in code why this uses unsafe and I audited code."
4711
4712 [[audits.zerovec]]
4713 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
4714 criteria = "safe-to-deploy"
4715 delta = "0.9.4 -> 0.10.1"
4716
4717 [[audits.zerovec-derive]]
4718 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
4719 criteria = "safe-to-deploy"
4720 version = "0.9.4@git:14e9a3a9857be74582abe2dfa7ab799c5eaac873"
4721 notes = "This is custom derives for `ZeroVec` that is from zerovec crate. Although this uses unsafe block for zero-copy, this has a comment in code why this uses unsafe and I audited code."
4722
4723 [[audits.zerovec-derive]]
4724 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
4725 criteria = "safe-to-deploy"
4726 version = "0.10.1"
4727
4728 [[audits.zip]]
4729 who = "Alex Franchuk <afranchuk@mozilla.com>"
4730 criteria = "safe-to-deploy"
4731 version = "0.6.4"
4732 notes = """
4733 No unsafe code nor unwarranted dependencies. Side-effectful std usage is only
4734 present where expected (zip archive reading/writing and unpacking)
4735 """
4736
4737 [[audits.zip]]
4738 who = "Mike Hommey <mh+mozilla@glandium.org>"
4739 criteria = "safe-to-run"
4740 delta = "0.6.2 -> 0.6.3"
4741
4742 [[audits.zip]]
4743 who = "Mike Hommey <mh+mozilla@glandium.org>"
4744 criteria = "safe-to-run"
4745 delta = "0.6.3 -> 0.6.4"
4746
4747 [[trusted.aho-corasick]]
4748 criteria = "safe-to-deploy"
4749 user-id = 189 # Andrew Gallant (BurntSushi)
4750 start = "2019-03-28"
4751 end = "2024-05-03"
4752
4753 [[trusted.anstyle]]
4754 criteria = "safe-to-deploy"
4755 user-id = 6743 # Ed Page (epage)
4756 start = "2022-05-18"
4757 end = "2024-09-28"
4758
4759 [[trusted.async-trait]]
4760 criteria = "safe-to-deploy"
4761 user-id = 3618 # David Tolnay (dtolnay)
4762 start = "2019-07-23"
4763 end = "2024-04-25"
4764
4765 [[trusted.atomic]]
4766 criteria = "safe-to-deploy"
4767 user-id = 2915 # Amanieu d'Antras (Amanieu)
4768 start = "2019-02-22"
4769 end = "2024-05-05"
4770
4771 [[trusted.byteorder]]
4772 criteria = "safe-to-deploy"
4773 user-id = 189 # Andrew Gallant (BurntSushi)
4774 start = "2019-06-09"
4775 end = "2024-05-03"
4776
4777 [[trusted.bytes]]
4778 criteria = "safe-to-deploy"
4779 user-id = 6741 # Alice Ryhl (Darksonn)
4780 start = "2021-01-11"
4781 end = "2024-05-05"
4782
4783 [[trusted.cc]]
4784 criteria = "safe-to-deploy"
4785 user-id = 2915 # Amanieu d'Antras (Amanieu)
4786 start = "2024-02-20"
4787 end = "2025-02-26"
4788
4789 [[trusted.clap]]
4790 criteria = "safe-to-deploy"
4791 user-id = 6743 # Ed Page (epage)
4792 start = "2021-12-08"
4793 end = "2024-06-02"
4794
4795 [[trusted.clap_builder]]
4796 criteria = "safe-to-deploy"
4797 user-id = 6743 # Ed Page (epage)
4798 start = "2023-03-28"
4799 end = "2024-06-02"
4800
4801 [[trusted.clap_derive]]
4802 criteria = "safe-to-deploy"
4803 user-id = 6743 # Ed Page (epage)
4804 start = "2021-12-08"
4805 end = "2024-06-02"
4806
4807 [[trusted.clap_lex]]
4808 criteria = "safe-to-deploy"
4809 user-id = 6743 # Ed Page (epage)
4810 start = "2022-04-15"
4811 end = "2024-06-02"
4812
4813 [[trusted.dtoa]]
4814 criteria = "safe-to-deploy"
4815 user-id = 3618 # David Tolnay (dtolnay)
4816 start = "2019-05-02"
4817 end = "2024-04-25"
4818
4819 [[trusted.equivalent]]
4820 criteria = "safe-to-deploy"
4821 user-id = 539 # Josh Stone (cuviper)
4822 start = "2023-02-05"
4823 end = "2024-07-17"
4824
4825 [[trusted.errno]]
4826 criteria = "safe-to-deploy"
4827 user-id = 6825 # Dan Gohman (sunfishcode)
4828 start = "2023-08-29"
4829 end = "2025-01-11"
4830
4831 [[trusted.flate2]]
4832 criteria = "safe-to-deploy"
4833 user-id = 4333 # Josh Triplett (joshtriplett)
4834 start = "2020-09-30"
4835 end = "2024-05-05"
4836
4837 [[trusted.h2]]
4838 criteria = "safe-to-deploy"
4839 user-id = 359 # Sean McArthur (seanmonstar)
4840 start = "2019-03-13"
4841 end = "2024-12-05"
4842
4843 [[trusted.hashbrown]]
4844 criteria = "safe-to-deploy"
4845 user-id = 2915 # Amanieu d'Antras (Amanieu)
4846 start = "2019-04-02"
4847 end = "2024-07-17"
4848
4849 [[trusted.headers]]
4850 criteria = "safe-to-deploy"
4851 user-id = 359 # Sean McArthur (seanmonstar)
4852 start = "2019-09-09"
4853 end = "2024-04-25"
4854
4855 [[trusted.httparse]]
4856 criteria = "safe-to-deploy"
4857 user-id = 359 # Sean McArthur (seanmonstar)
4858 start = "2019-07-03"
4859 end = "2024-04-25"
4860
4861 [[trusted.indexmap]]
4862 criteria = "safe-to-deploy"
4863 user-id = 539 # Josh Stone (cuviper)
4864 start = "2020-01-15"
4865 end = "2024-05-05"
4866
4867 [[trusted.inherent]]
4868 criteria = "safe-to-deploy"
4869 user-id = 3618 # David Tolnay (dtolnay)
4870 start = "2019-07-14"
4871 end = "2024-04-25"
4872
4873 [[trusted.iovec]]
4874 criteria = "safe-to-deploy"
4875 user-id = 10 # Carl Lerche (carllerche)
4876 start = "2019-10-09"
4877 end = "2024-05-05"
4878
4879 [[trusted.itoa]]
4880 criteria = "safe-to-deploy"
4881 user-id = 3618 # David Tolnay (dtolnay)
4882 start = "2019-05-02"
4883 end = "2024-04-25"
4884
4885 [[trusted.jobserver]]
4886 criteria = "safe-to-deploy"
4887 user-id = 1 # Alex Crichton (alexcrichton)
4888 start = "2019-03-15"
4889 end = "2024-05-05"
4890
4891 [[trusted.libc]]
4892 criteria = "safe-to-deploy"
4893 user-id = 2915 # Amanieu d'Antras (Amanieu)
4894 start = "2021-01-27"
4895 end = "2024-05-05"
4896
4897 [[trusted.libc]]
4898 criteria = "safe-to-deploy"
4899 user-id = 51017 # Yuki Okushi (JohnTitor)
4900 start = "2020-03-17"
4901 end = "2024-10-25"
4902
4903 [[trusted.linux-raw-sys]]
4904 criteria = "safe-to-deploy"
4905 user-id = 6825 # Dan Gohman (sunfishcode)
4906 start = "2021-06-12"
4907 end = "2024-09-08"
4908
4909 [[trusted.lock_api]]
4910 criteria = "safe-to-deploy"
4911 user-id = 2915 # Amanieu d'Antras (Amanieu)
4912 start = "2019-05-04"
4913 end = "2024-05-05"
4914
4915 [[trusted.memchr]]
4916 criteria = "safe-to-deploy"
4917 user-id = 189 # Andrew Gallant (BurntSushi)
4918 start = "2019-07-07"
4919 end = "2024-05-03"
4920
4921 [[trusted.mime]]
4922 criteria = "safe-to-deploy"
4923 user-id = 359 # Sean McArthur (seanmonstar)
4924 start = "2019-09-09"
4925 end = "2024-04-25"
4926
4927 [[trusted.mio]]
4928 criteria = "safe-to-deploy"
4929 user-id = 10 # Carl Lerche (carllerche)
4930 start = "2019-05-15"
4931 end = "2024-05-06"
4932
4933 [[trusted.num_cpus]]
4934 criteria = "safe-to-deploy"
4935 user-id = 359 # Sean McArthur (seanmonstar)
4936 start = "2019-06-10"
4937 end = "2024-04-25"
4938
4939 [[trusted.ordered-float]]
4940 criteria = "safe-to-deploy"
4941 user-id = 2017 # Matt Brubeck (mbrubeck)
4942 start = "2019-03-13"
4943 end = "2024-05-06"
4944
4945 [[trusted.parking_lot]]
4946 criteria = "safe-to-deploy"
4947 user-id = 2915 # Amanieu d'Antras (Amanieu)
4948 start = "2019-05-04"
4949 end = "2024-05-05"
4950
4951 [[trusted.parking_lot_core]]
4952 criteria = "safe-to-deploy"
4953 user-id = 2915 # Amanieu d'Antras (Amanieu)
4954 start = "2019-05-04"
4955 end = "2024-05-05"
4956
4957 [[trusted.paste]]
4958 criteria = "safe-to-deploy"
4959 user-id = 3618 # David Tolnay (dtolnay)
4960 start = "2019-03-19"
4961 end = "2024-04-25"
4962
4963 [[trusted.proc-macro-hack]]
4964 criteria = "safe-to-deploy"
4965 user-id = 3618 # David Tolnay (dtolnay)
4966 start = "2019-04-16"
4967 end = "2024-04-25"
4968
4969 [[trusted.proc-macro2]]
4970 criteria = "safe-to-deploy"
4971 user-id = 3618 # David Tolnay (dtolnay)
4972 start = "2019-04-23"
4973 end = "2024-05-30"
4974
4975 [[trusted.quote]]
4976 criteria = "safe-to-deploy"
4977 user-id = 3618 # David Tolnay (dtolnay)
4978 start = "2019-04-09"
4979 end = "2024-05-30"
4980
4981 [[trusted.regex]]
4982 criteria = "safe-to-deploy"
4983 user-id = 189 # Andrew Gallant (BurntSushi)
4984 start = "2019-02-27"
4985 end = "2024-05-03"
4986
4987 [[trusted.regex-automata]]
4988 criteria = "safe-to-deploy"
4989 user-id = 189 # Andrew Gallant (BurntSushi)
4990 start = "2019-02-25"
4991 end = "2024-09-20"
4992
4993 [[trusted.regex-syntax]]
4994 criteria = "safe-to-deploy"
4995 user-id = 189 # Andrew Gallant (BurntSushi)
4996 start = "2019-03-30"
4997 end = "2024-05-03"
4998
4999 [[trusted.rustix]]
5000 criteria = "safe-to-deploy"
5001 user-id = 6825 # Dan Gohman (sunfishcode)
5002 start = "2021-10-29"
5003 end = "2024-09-08"
5004
5005 [[trusted.ryu]]
5006 criteria = "safe-to-deploy"
5007 user-id = 3618 # David Tolnay (dtolnay)
5008 start = "2019-05-02"
5009 end = "2024-04-25"
5010
5011 [[trusted.same-file]]
5012 criteria = "safe-to-deploy"
5013 user-id = 189 # Andrew Gallant (BurntSushi)
5014 start = "2019-07-16"
5015 end = "2024-05-03"
5016
5017 [[trusted.scopeguard]]
5018 criteria = "safe-to-deploy"
5019 user-id = 2915 # Amanieu d'Antras (Amanieu)
5020 start = "2020-02-16"
5021 end = "2024-05-05"
5022
5023 [[trusted.serde]]
5024 criteria = "safe-to-deploy"
5025 user-id = 3618 # David Tolnay (dtolnay)
5026 start = "2019-03-01"
5027 end = "2024-04-25"
5028
5029 [[trusted.serde_bytes]]
5030 criteria = "safe-to-deploy"
5031 user-id = 3618 # David Tolnay (dtolnay)
5032 start = "2019-02-25"
5033 end = "2024-04-25"
5034
5035 [[trusted.serde_derive]]
5036 criteria = "safe-to-deploy"
5037 user-id = 3618 # David Tolnay (dtolnay)
5038 start = "2019-03-01"
5039 end = "2024-04-25"
5040
5041 [[trusted.serde_json]]
5042 criteria = "safe-to-deploy"
5043 user-id = 3618 # David Tolnay (dtolnay)
5044 start = "2019-02-28"
5045 end = "2024-04-25"
5046
5047 [[trusted.serde_repr]]
5048 criteria = "safe-to-deploy"
5049 user-id = 3618 # David Tolnay (dtolnay)
5050 start = "2019-04-26"
5051 end = "2024-04-25"
5052
5053 [[trusted.serde_yaml]]
5054 criteria = "safe-to-deploy"
5055 user-id = 3618 # David Tolnay (dtolnay)
5056 start = "2019-05-02"
5057 end = "2024-04-25"
5058
5059 [[trusted.smallvec]]
5060 criteria = "safe-to-deploy"
5061 user-id = 2017 # Matt Brubeck (mbrubeck)
5062 start = "2019-10-28"
5063 end = "2024-05-06"
5064
5065 [[trusted.syn]]
5066 criteria = "safe-to-deploy"
5067 user-id = 3618 # David Tolnay (dtolnay)
5068 start = "2019-03-01"
5069 end = "2024-04-25"
5070
5071 [[trusted.termcolor]]
5072 criteria = "safe-to-deploy"
5073 user-id = 189 # Andrew Gallant (BurntSushi)
5074 start = "2019-06-04"
5075 end = "2024-05-03"
5076
5077 [[trusted.thiserror]]
5078 criteria = "safe-to-deploy"
5079 user-id = 3618 # David Tolnay (dtolnay)
5080 start = "2019-10-09"
5081 end = "2024-04-25"
5082
5083 [[trusted.thiserror-impl]]
5084 criteria = "safe-to-deploy"
5085 user-id = 3618 # David Tolnay (dtolnay)
5086 start = "2019-10-09"
5087 end = "2024-04-25"
5088
5089 [[trusted.threadbound]]
5090 criteria = "safe-to-deploy"
5091 user-id = 3618 # David Tolnay (dtolnay)
5092 start = "2020-06-16"
5093 end = "2024-04-25"
5094
5095 [[trusted.tokio-macros]]
5096 criteria = "safe-to-deploy"
5097 user-id = 6741 # Alice Ryhl (Darksonn)
5098 start = "2020-10-26"
5099 end = "2024-05-05"
5100
5101 [[trusted.tokio-util]]
5102 criteria = "safe-to-deploy"
5103 user-id = 6741 # Alice Ryhl (Darksonn)
5104 start = "2021-01-12"
5105 end = "2024-05-05"
5106
5107 [[trusted.toml]]
5108 criteria = "safe-to-deploy"
5109 user-id = 1 # Alex Crichton (alexcrichton)
5110 start = "2019-05-16"
5111 end = "2024-05-06"
5112
5113 [[trusted.unicode-ident]]
5114 criteria = "safe-to-deploy"
5115 user-id = 3618 # David Tolnay (dtolnay)
5116 start = "2021-10-02"
5117 end = "2024-04-25"
5118
5119 [[trusted.walkdir]]
5120 criteria = "safe-to-deploy"
5121 user-id = 189 # Andrew Gallant (BurntSushi)
5122 start = "2019-06-09"
5123 end = "2024-05-03"
5124
5125 [[trusted.warp]]
5126 criteria = "safe-to-deploy"
5127 user-id = 359 # Sean McArthur (seanmonstar)
5128 start = "2019-03-20"
5129 end = "2024-05-08"
5130
5131 [[trusted.wasi]]
5132 criteria = "safe-to-deploy"
5133 user-id = 1 # Alex Crichton (alexcrichton)
5134 start = "2020-06-03"
5135 end = "2024-05-05"
5136
5137 [[trusted.wasm-encoder]]
5138 criteria = "safe-to-deploy"
5139 user-id = 73222 # wasmtime-publish
5140 start = "2024-02-15"
5141 end = "2025-03-11"
5142
5143 [[trusted.wasm-smith]]
5144 criteria = "safe-to-deploy"
5145 user-id = 73222 # wasmtime-publish
5146 start = "2024-02-15"
5147 end = "2025-03-11"
5148
5149 [[trusted.wast]]
5150 criteria = "safe-to-deploy"
5151 user-id = 73222 # wasmtime-publish
5152 start = "2024-02-15"
5153 end = "2025-03-11"
5154
5155 [[trusted.winapi-util]]
5156 criteria = "safe-to-deploy"
5157 user-id = 189 # Andrew Gallant (BurntSushi)
5158 start = "2020-01-11"
5159 end = "2024-05-03"
5160
5161 [[trusted.windows]]
5162 criteria = "safe-to-deploy"
5163 user-id = 64539 # Kenny Kerr (kennykerr)
5164 start = "2021-01-15"
5165 end = "2025-01-30"
5166
5167 [[trusted.windows-core]]
5168 criteria = "safe-to-deploy"
5169 user-id = 64539 # Kenny Kerr (kennykerr)
5170 start = "2021-11-15"
5171 end = "2024-09-20"
5172
5173 [[trusted.windows-sys]]
5174 criteria = "safe-to-deploy"
5175 user-id = 64539 # Kenny Kerr (kennykerr)
5176 start = "2021-11-15"
5177 end = "2024-09-12"