supply-chain/imports.lock

   1
   2 # cargo-vet imports lock
   3
   4 [[publisher.aho-corasick]]
   5 version = "1.1.0"
   6 when = "2023-09-18"
   7 user-id = 189
   8 user-login = "BurntSushi"
   9 user-name = "Andrew Gallant"
  10
  11 [[publisher.anstyle]]
  12 version = "1.0.3"
  13 when = "2023-09-11"
  14 user-id = 6743
  15 user-login = "epage"
  16 user-name = "Ed Page"
  17
  18 [[publisher.arbitrary]]
  19 version = "1.3.0"
  20 when = "2023-03-13"
  21 user-id = 696
  22 user-login = "fitzgen"
  23 user-name = "Nick Fitzgerald"
  24
  25 [[publisher.async-trait]]
  26 version = "0.1.68"
  27 when = "2023-03-24"
  28 user-id = 3618
  29 user-login = "dtolnay"
  30 user-name = "David Tolnay"
  31
  32 [[publisher.atomic]]
  33 version = "0.4.6"
  34 when = "2020-07-05"
  35 user-id = 2915
  36 user-login = "Amanieu"
  37 user-name = "Amanieu d'Antras"
  38
  39 [[publisher.audio_thread_priority]]
  40 version = "0.32.0"
  41 when = "2024-03-14"
  42 user-id = 1258
  43 user-login = "padenot"
  44 user-name = "Paul Adenot"
  45
  46 [[publisher.authenticator]]
  47 version = "0.4.0-alpha.24"
  48 when = "2023-11-29"
  49 user-id = 175410
  50 user-login = "jschanck"
  51 user-name = "John Schanck"
  52
  53 [[publisher.bhttp]]
  54 version = "0.3.1"
  55 when = "2023-02-23"
  56 user-id = 128763
  57 user-login = "martinthomson"
  58 user-name = "Martin Thomson"
  59
  60 [[publisher.bumpalo]]
  61 version = "3.15.4"
  62 when = "2024-03-07"
  63 user-id = 696
  64 user-login = "fitzgen"
  65 user-name = "Nick Fitzgerald"
  66
  67 [[publisher.byteorder]]
  68 version = "1.4.3"
  69 when = "2021-03-10"
  70 user-id = 189
  71 user-login = "BurntSushi"
  72 user-name = "Andrew Gallant"
  73
  74 [[publisher.bytes]]
  75 version = "1.4.0"
  76 when = "2023-01-31"
  77 user-id = 6741
  78 user-login = "Darksonn"
  79 user-name = "Alice Ryhl"
  80
  81 [[publisher.cc]]
  82 version = "1.0.89"
  83 when = "2024-03-04"
  84 user-id = 2915
  85 user-login = "Amanieu"
  86 user-name = "Amanieu d'Antras"
  87
  88 [[publisher.cexpr]]
  89 version = "0.6.0"
  90 when = "2021-10-11"
  91 user-id = 3788
  92 user-login = "emilio"
  93 user-name = "Emilio Cobos Álvarez"
  94
  95 [[publisher.clap]]
  96 version = "4.4.5"
  97 when = "2023-09-25"
  98 user-id = 6743
  99 user-login = "epage"
 100 user-name = "Ed Page"
 101
 102 [[publisher.clap_builder]]
 103 version = "4.4.5"
 104 when = "2023-09-25"
 105 user-id = 6743
 106 user-login = "epage"
 107 user-name = "Ed Page"
 108
 109 [[publisher.clap_derive]]
 110 version = "4.4.2"
 111 when = "2023-08-31"
 112 user-id = 6743
 113 user-login = "epage"
 114 user-name = "Ed Page"
 115
 116 [[publisher.clap_lex]]
 117 version = "0.5.1"
 118 when = "2023-08-24"
 119 user-id = 6743
 120 user-login = "epage"
 121 user-name = "Ed Page"
 122
 123 [[publisher.core-foundation]]
 124 version = "0.9.3"
 125 when = "2022-02-07"
 126 user-id = 5946
 127 user-login = "jrmuizel"
 128 user-name = "Jeff Muizelaar"
 129
 130 [[publisher.core-foundation-sys]]
 131 version = "0.8.3"
 132 when = "2021-10-12"
 133 user-id = 2396
 134 user-login = "jdm"
 135 user-name = "Josh Matthews"
 136
 137 [[publisher.core-graphics]]
 138 version = "0.22.3"
 139 when = "2021-11-02"
 140 user-id = 5946
 141 user-login = "jrmuizel"
 142 user-name = "Jeff Muizelaar"
 143
 144 [[publisher.core-graphics-types]]
 145 version = "0.1.1"
 146 when = "2020-09-15"
 147 user-id = 2396
 148 user-login = "jdm"
 149 user-name = "Josh Matthews"
 150
 151 [[publisher.core-text]]
 152 version = "19.2.0"
 153 when = "2021-02-14"
 154 user-id = 5946
 155 user-login = "jrmuizel"
 156 user-name = "Jeff Muizelaar"
 157
 158 [[publisher.derive_arbitrary]]
 159 version = "1.3.0"
 160 when = "2023-03-13"
 161 user-id = 696
 162 user-login = "fitzgen"
 163 user-name = "Nick Fitzgerald"
 164
 165 [[publisher.dogear]]
 166 version = "0.4.0"
 167 when = "2019-09-16"
 168 user-id = 27901
 169 user-login = "linabutler"
 170 user-name = "Lina Butler"
 171
 172 [[publisher.dtoa]]
 173 version = "0.4.8"
 174 when = "2021-03-29"
 175 user-id = 3618
 176 user-login = "dtolnay"
 177 user-name = "David Tolnay"
 178
 179 [[publisher.encoding_rs]]
 180 version = "0.8.33"
 181 when = "2023-08-23"
 182 user-id = 4484
 183 user-login = "hsivonen"
 184 user-name = "Henri Sivonen"
 185
 186 [[publisher.errno]]
 187 version = "0.3.8"
 188 when = "2023-11-28"
 189 user-id = 6825
 190 user-login = "sunfishcode"
 191 user-name = "Dan Gohman"
 192
 193 [[publisher.etagere]]
 194 version = "0.2.7"
 195 when = "2022-05-04"
 196 user-id = 1281
 197 user-login = "nical"
 198 user-name = "Nicolas Silva"
 199
 200 [[publisher.euclid]]
 201 version = "0.22.7"
 202 when = "2022-04-04"
 203 user-id = 1281
 204 user-login = "nical"
 205 user-name = "Nicolas Silva"
 206
 207 [[publisher.flate2]]
 208 version = "1.0.26"
 209 when = "2023-04-28"
 210 user-id = 4333
 211 user-login = "joshtriplett"
 212 user-name = "Josh Triplett"
 213
 214 [[publisher.freetype]]
 215 version = "0.7.0"
 216 when = "2020-07-14"
 217 user-id = 2396
 218 user-login = "jdm"
 219 user-name = "Josh Matthews"
 220
 221 [[publisher.gleam]]
 222 version = "0.15.0"
 223 when = "2023-04-21"
 224 user-id = 5946
 225 user-login = "jrmuizel"
 226 user-name = "Jeff Muizelaar"
 227
 228 [[publisher.glean]]
 229 version = "59.0.0"
 230 when = "2024-03-28"
 231 user-id = 48
 232 user-login = "badboy"
 233 user-name = "Jan-Erik Rediger"
 234
 235 [[publisher.glean-core]]
 236 version = "59.0.0"
 237 when = "2024-03-28"
 238 user-id = 48
 239 user-login = "badboy"
 240 user-name = "Jan-Erik Rediger"
 241
 242 [[publisher.glslopt]]
 243 version = "0.1.10"
 244 when = "2024-02-13"
 245 user-id = 84794
 246 user-login = "jamienicol"
 247 user-name = "Jamie Nicol"
 248
 249 [[publisher.h2]]
 250 version = "0.3.22"
 251 when = "2023-11-15"
 252 user-id = 359
 253 user-login = "seanmonstar"
 254 user-name = "Sean McArthur"
 255
 256 [[publisher.headers]]
 257 version = "0.3.9"
 258 when = "2023-08-31"
 259 user-id = 359
 260 user-login = "seanmonstar"
 261 user-name = "Sean McArthur"
 262
 263 [[publisher.httparse]]
 264 version = "1.8.0"
 265 when = "2022-08-30"
 266 user-id = 359
 267 user-login = "seanmonstar"
 268 user-name = "Sean McArthur"
 269
 270 [[publisher.indexmap]]
 271 version = "1.9.3"
 272 when = "2023-03-24"
 273 user-id = 539
 274 user-login = "cuviper"
 275 user-name = "Josh Stone"
 276
 277 [[publisher.inherent]]
 278 version = "1.0.7"
 279 when = "2023-03-25"
 280 user-id = 3618
 281 user-login = "dtolnay"
 282 user-name = "David Tolnay"
 283
 284 [[publisher.iovec]]
 285 version = "0.1.4"
 286 when = "2019-10-09"
 287 user-id = 10
 288 user-login = "carllerche"
 289 user-name = "Carl Lerche"
 290
 291 [[publisher.itoa]]
 292 version = "1.0.5"
 293 when = "2022-12-17"
 294 user-id = 3618
 295 user-login = "dtolnay"
 296 user-name = "David Tolnay"
 297
 298 [[publisher.jobserver]]
 299 version = "0.1.25"
 300 when = "2022-09-23"
 301 user-id = 1
 302 user-login = "alexcrichton"
 303 user-name = "Alex Crichton"
 304
 305 [[publisher.libc]]
 306 version = "0.2.152"
 307 when = "2024-01-07"
 308 user-id = 51017
 309 user-login = "JohnTitor"
 310 user-name = "Yuki Okushi"
 311
 312 [[publisher.linux-raw-sys]]
 313 version = "0.4.12"
 314 when = "2023-11-30"
 315 user-id = 6825
 316 user-login = "sunfishcode"
 317 user-name = "Dan Gohman"
 318
 319 [[publisher.lock_api]]
 320 version = "0.4.9"
 321 when = "2022-09-20"
 322 user-id = 2915
 323 user-login = "Amanieu"
 324 user-name = "Amanieu d'Antras"
 325
 326 [[publisher.memchr]]
 327 version = "2.5.0"
 328 when = "2022-04-30"
 329 user-id = 189
 330 user-login = "BurntSushi"
 331 user-name = "Andrew Gallant"
 332
 333 [[publisher.mime]]
 334 version = "0.3.16"
 335 when = "2020-01-07"
 336 user-id = 359
 337 user-login = "seanmonstar"
 338 user-name = "Sean McArthur"
 339
 340 [[publisher.mio]]
 341 version = "0.6.21"
 342 when = "2019-11-27"
 343 user-id = 10
 344 user-login = "carllerche"
 345 user-name = "Carl Lerche"
 346
 347 [[publisher.nss-gk-api]]
 348 version = "0.3.0"
 349 when = "2023-06-14"
 350 user-id = 175410
 351 user-login = "jschanck"
 352 user-name = "John Schanck"
 353
 354 [[publisher.num_cpus]]
 355 version = "1.15.0"
 356 when = "2022-12-20"
 357 user-id = 359
 358 user-login = "seanmonstar"
 359 user-name = "Sean McArthur"
 360
 361 [[publisher.ohttp]]
 362 version = "0.3.1"
 363 when = "2023-02-23"
 364 user-id = 128763
 365 user-login = "martinthomson"
 366 user-name = "Martin Thomson"
 367
 368 [[publisher.ordered-float]]
 369 version = "3.4.0"
 370 when = "2022-11-06"
 371 user-id = 2017
 372 user-login = "mbrubeck"
 373 user-name = "Matt Brubeck"
 374
 375 [[publisher.parking_lot]]
 376 version = "0.12.1"
 377 when = "2022-05-31"
 378 user-id = 2915
 379 user-login = "Amanieu"
 380 user-name = "Amanieu d'Antras"
 381
 382 [[publisher.parking_lot_core]]
 383 version = "0.9.9"
 384 when = "2023-10-17"
 385 user-id = 2915
 386 user-login = "Amanieu"
 387 user-name = "Amanieu d'Antras"
 388
 389 [[publisher.paste]]
 390 version = "1.0.11"
 391 when = "2022-12-17"
 392 user-id = 3618
 393 user-login = "dtolnay"
 394 user-name = "David Tolnay"
 395
 396 [[publisher.presser]]
 397 version = "0.3.1"
 398 when = "2022-10-16"
 399 user-id = 52553
 400 user-login = "embark-studios"
 401
 402 [[publisher.prio]]
 403 version = "0.15.3"
 404 when = "2023-10-03"
 405 user-id = 213776
 406 user-login = "divviup-github-automation"
 407
 408 [[publisher.proc-macro2]]
 409 version = "1.0.74"
 410 when = "2024-01-02"
 411 user-id = 3618
 412 user-login = "dtolnay"
 413 user-name = "David Tolnay"
 414
 415 [[publisher.qcms]]
 416 version = "0.3.0"
 417 when = "2024-01-09"
 418 user-id = 5946
 419 user-login = "jrmuizel"
 420 user-name = "Jeff Muizelaar"
 421
 422 [[publisher.quote]]
 423 version = "1.0.35"
 424 when = "2024-01-02"
 425 user-id = 3618
 426 user-login = "dtolnay"
 427 user-name = "David Tolnay"
 428
 429 [[publisher.regex]]
 430 version = "1.9.4"
 431 when = "2023-08-26"
 432 user-id = 189
 433 user-login = "BurntSushi"
 434 user-name = "Andrew Gallant"
 435
 436 [[publisher.regex-automata]]
 437 version = "0.3.7"
 438 when = "2023-08-26"
 439 user-id = 189
 440 user-login = "BurntSushi"
 441 user-name = "Andrew Gallant"
 442
 443 [[publisher.regex-syntax]]
 444 version = "0.7.5"
 445 when = "2023-08-26"
 446 user-id = 189
 447 user-login = "BurntSushi"
 448 user-name = "Andrew Gallant"
 449
 450 [[publisher.rust_cascade]]
 451 version = "1.5.0"
 452 when = "2023-04-05"
 453 user-id = 57462
 454 user-login = "mozkeeler"
 455 user-name = "Dana Keeler"
 456
 457 [[publisher.rustix]]
 458 version = "0.38.28"
 459 when = "2023-12-09"
 460 user-id = 6825
 461 user-login = "sunfishcode"
 462 user-name = "Dan Gohman"
 463
 464 [[publisher.ryu]]
 465 version = "1.0.12"
 466 when = "2022-12-17"
 467 user-id = 3618
 468 user-login = "dtolnay"
 469 user-name = "David Tolnay"
 470
 471 [[publisher.same-file]]
 472 version = "1.0.6"
 473 when = "2020-01-11"
 474 user-id = 189
 475 user-login = "BurntSushi"
 476 user-name = "Andrew Gallant"
 477
 478 [[publisher.scopeguard]]
 479 version = "1.1.0"
 480 when = "2020-02-16"
 481 user-id = 2915
 482 user-login = "Amanieu"
 483 user-name = "Amanieu d'Antras"
 484
 485 [[publisher.serde]]
 486 version = "1.0.197"
 487 when = "2024-02-20"
 488 user-id = 3618
 489 user-login = "dtolnay"
 490 user-name = "David Tolnay"
 491
 492 [[publisher.serde_bytes]]
 493 version = "0.11.9"
 494 when = "2023-02-05"
 495 user-id = 3618
 496 user-login = "dtolnay"
 497 user-name = "David Tolnay"
 498
 499 [[publisher.serde_derive]]
 500 version = "1.0.197"
 501 when = "2024-02-20"
 502 user-id = 3618
 503 user-login = "dtolnay"
 504 user-name = "David Tolnay"
 505
 506 [[publisher.serde_json]]
 507 version = "1.0.93"
 508 when = "2023-02-08"
 509 user-id = 3618
 510 user-login = "dtolnay"
 511 user-name = "David Tolnay"
 512
 513 [[publisher.serde_repr]]
 514 version = "0.1.12"
 515 when = "2023-03-18"
 516 user-id = 3618
 517 user-login = "dtolnay"
 518 user-name = "David Tolnay"
 519
 520 [[publisher.serde_yaml]]
 521 version = "0.8.26"
 522 when = "2022-07-16"
 523 user-id = 3618
 524 user-login = "dtolnay"
 525 user-name = "David Tolnay"
 526
 527 [[publisher.smallvec]]
 528 version = "1.13.1"
 529 when = "2024-01-19"
 530 user-id = 2017
 531 user-login = "mbrubeck"
 532 user-name = "Matt Brubeck"
 533
 534 [[publisher.syn]]
 535 version = "2.0.46"
 536 when = "2024-01-02"
 537 user-id = 3618
 538 user-login = "dtolnay"
 539 user-name = "David Tolnay"
 540
 541 [[publisher.termcolor]]
 542 version = "1.4.1"
 543 when = "2024-01-10"
 544 user-id = 189
 545 user-login = "BurntSushi"
 546 user-name = "Andrew Gallant"
 547
 548 [[publisher.thiserror]]
 549 version = "1.0.57"
 550 when = "2024-02-11"
 551 user-id = 3618
 552 user-login = "dtolnay"
 553 user-name = "David Tolnay"
 554
 555 [[publisher.thiserror-impl]]
 556 version = "1.0.57"
 557 when = "2024-02-11"
 558 user-id = 3618
 559 user-login = "dtolnay"
 560 user-name = "David Tolnay"
 561
 562 [[publisher.threadbound]]
 563 version = "0.1.5"
 564 when = "2022-12-17"
 565 user-id = 3618
 566 user-login = "dtolnay"
 567 user-name = "David Tolnay"
 568
 569 [[publisher.tokio-util]]
 570 version = "0.7.2"
 571 when = "2022-05-15"
 572 user-id = 6741
 573 user-login = "Darksonn"
 574 user-name = "Alice Ryhl"
 575
 576 [[publisher.toml]]
 577 version = "0.5.7"
 578 when = "2020-10-11"
 579 user-id = 1
 580 user-login = "alexcrichton"
 581 user-name = "Alex Crichton"
 582
 583 [[publisher.unicode-ident]]
 584 version = "1.0.6"
 585 when = "2022-12-17"
 586 user-id = 3618
 587 user-login = "dtolnay"
 588 user-name = "David Tolnay"
 589
 590 [[publisher.unicode-width]]
 591 version = "0.1.10"
 592 when = "2022-09-13"
 593 user-id = 1139
 594 user-login = "Manishearth"
 595 user-name = "Manish Goregaokar"
 596
 597 [[publisher.unicode-xid]]
 598 version = "0.2.4"
 599 when = "2022-09-15"
 600 user-id = 1139
 601 user-login = "Manishearth"
 602 user-name = "Manish Goregaokar"
 603
 604 [[publisher.uniffi]]
 605 version = "0.27.1"
 606 when = "2024-04-03"
 607 user-id = 111105
 608 user-login = "mhammond"
 609 user-name = "Mark Hammond"
 610
 611 [[publisher.uniffi_bindgen]]
 612 version = "0.27.1"
 613 when = "2024-04-03"
 614 user-id = 111105
 615 user-login = "mhammond"
 616 user-name = "Mark Hammond"
 617
 618 [[publisher.uniffi_build]]
 619 version = "0.27.1"
 620 when = "2024-04-03"
 621 user-id = 111105
 622 user-login = "mhammond"
 623 user-name = "Mark Hammond"
 624
 625 [[publisher.uniffi_checksum_derive]]
 626 version = "0.27.1"
 627 when = "2024-04-03"
 628 user-id = 111105
 629 user-login = "mhammond"
 630 user-name = "Mark Hammond"
 631
 632 [[publisher.uniffi_core]]
 633 version = "0.27.1"
 634 when = "2024-04-03"
 635 user-id = 111105
 636 user-login = "mhammond"
 637 user-name = "Mark Hammond"
 638
 639 [[publisher.uniffi_macros]]
 640 version = "0.27.1"
 641 when = "2024-04-03"
 642 user-id = 111105
 643 user-login = "mhammond"
 644 user-name = "Mark Hammond"
 645
 646 [[publisher.uniffi_meta]]
 647 version = "0.27.1"
 648 when = "2024-04-03"
 649 user-id = 111105
 650 user-login = "mhammond"
 651 user-name = "Mark Hammond"
 652
 653 [[publisher.uniffi_testing]]
 654 version = "0.27.1"
 655 when = "2024-04-03"
 656 user-id = 111105
 657 user-login = "mhammond"
 658 user-name = "Mark Hammond"
 659
 660 [[publisher.uniffi_udl]]
 661 version = "0.27.1"
 662 when = "2024-04-03"
 663 user-id = 111105
 664 user-login = "mhammond"
 665 user-name = "Mark Hammond"
 666
 667 [[publisher.utf8_iter]]
 668 version = "1.0.3"
 669 when = "2022-09-09"
 670 user-id = 4484
 671 user-login = "hsivonen"
 672 user-name = "Henri Sivonen"
 673
 674 [[publisher.walkdir]]
 675 version = "2.3.2"
 676 when = "2021-03-22"
 677 user-id = 189
 678 user-login = "BurntSushi"
 679 user-name = "Andrew Gallant"
 680
 681 [[publisher.warp]]
 682 version = "0.3.6"
 683 when = "2023-09-27"
 684 user-id = 359
 685 user-login = "seanmonstar"
 686 user-name = "Sean McArthur"
 687
 688 [[publisher.wasi]]
 689 version = "0.11.0+wasi-snapshot-preview1"
 690 when = "2022-01-19"
 691 user-id = 1
 692 user-login = "alexcrichton"
 693 user-name = "Alex Crichton"
 694
 695 [[publisher.wasm-encoder]]
 696 version = "0.201.0"
 697 when = "2024-02-27"
 698 user-id = 73222
 699 user-login = "wasmtime-publish"
 700
 701 [[publisher.wasm-smith]]
 702 version = "0.201.0"
 703 when = "2024-02-27"
 704 user-id = 73222
 705 user-login = "wasmtime-publish"
 706
 707 [[publisher.wast]]
 708 version = "201.0.0"
 709 when = "2024-02-27"
 710 user-id = 73222
 711 user-login = "wasmtime-publish"
 712
 713 [[publisher.weedle2]]
 714 version = "5.0.0"
 715 when = "2024-01-24"
 716 user-id = 127697
 717 user-login = "bendk"
 718
 719 [[publisher.winapi-util]]
 720 version = "0.1.5"
 721 when = "2020-04-20"
 722 user-id = 189
 723 user-login = "BurntSushi"
 724 user-name = "Andrew Gallant"
 725
 726 [[publisher.windows]]
 727 version = "0.52.0"
 728 when = "2023-11-15"
 729 user-id = 64539
 730 user-login = "kennykerr"
 731 user-name = "Kenny Kerr"
 732
 733 [[publisher.windows-core]]
 734 version = "0.52.0"
 735 when = "2023-11-15"
 736 user-id = 64539
 737 user-login = "kennykerr"
 738 user-name = "Kenny Kerr"
 739
 740 [[publisher.windows-sys]]
 741 version = "0.52.0"
 742 when = "2023-11-15"
 743 user-id = 64539
 744 user-login = "kennykerr"
 745 user-name = "Kenny Kerr"
 746
 747 [[publisher.zeitstempel]]
 748 version = "0.1.1"
 749 when = "2021-03-18"
 750 user-id = 48
 751 user-login = "badboy"
 752 user-name = "Jan-Erik Rediger"
 753
 754 [[audits.bytecode-alliance.wildcard-audits.arbitrary]]
 755 who = "Nick Fitzgerald <fitzgen@gmail.com>"
 756 criteria = "safe-to-deploy"
 757 user-id = 696 # Nick Fitzgerald (fitzgen)
 758 start = "2020-01-14"
 759 end = "2024-04-21"
 760 notes = "I am an author of this crate."
 761
 762 [[audits.bytecode-alliance.wildcard-audits.bumpalo]]
 763 who = "Nick Fitzgerald <fitzgen@gmail.com>"
 764 criteria = "safe-to-deploy"
 765 user-id = 696 # Nick Fitzgerald (fitzgen)
 766 start = "2019-03-16"
 767 end = "2024-03-10"
 768
 769 [[audits.bytecode-alliance.wildcard-audits.derive_arbitrary]]
 770 who = "Nick Fitzgerald <fitzgen@gmail.com>"
 771 criteria = "safe-to-deploy"
 772 user-id = 696 # Nick Fitzgerald (fitzgen)
 773 start = "2020-01-14"
 774 end = "2024-04-27"
 775 notes = "I am an author of this crate"
 776
 777 [[audits.bytecode-alliance.audits.adler]]
 778 who = "Alex Crichton <alex@alexcrichton.com>"
 779 criteria = "safe-to-deploy"
 780 version = "1.0.2"
 781 notes = "This is a small crate which forbids unsafe code and is a straightforward implementation of the adler hashing algorithm."
 782
 783 [[audits.bytecode-alliance.audits.arrayref]]
 784 who = "Nick Fitzgerald <fitzgen@gmail.com>"
 785 criteria = "safe-to-deploy"
 786 version = "0.3.6"
 787 notes = """
 788 Unsafe code, but its logic looks good to me. Necessary given what it is
 789 doing. Well tested, has quickchecks.
 790 """
 791
 792 [[audits.bytecode-alliance.audits.arrayvec]]
 793 who = "Nick Fitzgerald <fitzgen@gmail.com>"
 794 criteria = "safe-to-deploy"
 795 version = "0.7.2"
 796 notes = """
 797 Well documented invariants, good assertions for those invariants in unsafe code,
 798 and tested with MIRI to boot. LGTM.
 799 """
 800
 801 [[audits.bytecode-alliance.audits.base64]]
 802 who = "Pat Hickey <phickey@fastly.com>"
 803 criteria = "safe-to-deploy"
 804 version = "0.21.0"
 805 notes = "This crate has no dependencies, no build.rs, and contains no unsafe code."
 806
 807 [[audits.bytecode-alliance.audits.bitflags]]
 808 who = "Jamey Sharp <jsharp@fastly.com>"
 809 criteria = "safe-to-deploy"
 810 delta = "2.1.0 -> 2.2.1"
 811 notes = """
 812 This version adds unsafe impls of traits from the bytemuck crate when built
 813 with that library enabled, but I believe the impls satisfy the documented
 814 safety requirements for bytemuck. The other changes are minor.
 815 """
 816
 817 [[audits.bytecode-alliance.audits.bitflags]]
 818 who = "Alex Crichton <alex@alexcrichton.com>"
 819 criteria = "safe-to-deploy"
 820 delta = "2.3.2 -> 2.3.3"
 821 notes = """
 822 Nothing outside the realm of what one would expect from a bitflags generator,
 823 all as expected.
 824 """
 825
 826 [[audits.bytecode-alliance.audits.block-buffer]]
 827 who = "Benjamin Bouvier <public@benj.me>"
 828 criteria = "safe-to-deploy"
 829 delta = "0.9.0 -> 0.10.2"
 830
 831 [[audits.bytecode-alliance.audits.cargo-platform]]
 832 who = "Pat Hickey <phickey@fastly.com>"
 833 criteria = "safe-to-deploy"
 834 version = "0.1.2"
 835 notes = "no build, no ambient capabilities, no unsafe"
 836
 837 [[audits.bytecode-alliance.audits.cfg-if]]
 838 who = "Alex Crichton <alex@alexcrichton.com>"
 839 criteria = "safe-to-deploy"
 840 version = "1.0.0"
 841 notes = "I am the author of this crate."
 842
 843 [[audits.bytecode-alliance.audits.codespan-reporting]]
 844 who = "Jamey Sharp <jsharp@fastly.com>"
 845 criteria = "safe-to-deploy"
 846 version = "0.11.1"
 847 notes = "This library uses `forbid(unsafe_code)` and has no filesystem or network I/O."
 848
 849 [[audits.bytecode-alliance.audits.cpufeatures]]
 850 who = "Alex Crichton <alex@alexcrichton.com>"
 851 criteria = "safe-to-deploy"
 852 delta = "0.2.2 -> 0.2.7"
 853 notes = """
 854 This is a minor update that looks to add some more detected CPU features and
 855 various other minor portability fixes such as MIRI support.
 856 """
 857
 858 [[audits.bytecode-alliance.audits.crypto-common]]
 859 who = "Benjamin Bouvier <public@benj.me>"
 860 criteria = "safe-to-deploy"
 861 version = "0.1.3"
 862
 863 [[audits.bytecode-alliance.audits.fallible-iterator]]
 864 who = "Alex Crichton <alex@alexcrichton.com>"
 865 criteria = "safe-to-deploy"
 866 delta = "0.2.0 -> 0.3.0"
 867 notes = """
 868 This major version update has a few minor breaking changes but everything
 869 this crate has to do with iterators and `Result` and such. No `unsafe` or
 870 anything like that, all looks good.
 871 """
 872
 873 [[audits.bytecode-alliance.audits.foreign-types]]
 874 who = "Pat Hickey <phickey@fastly.com>"
 875 criteria = "safe-to-deploy"
 876 version = "0.3.2"
 877 notes = "This crate defined a macro-rules which creates wrappers working with FFI types. The implementation of this crate appears to be safe, but each use of this macro would need to be vetted for correctness as well."
 878
 879 [[audits.bytecode-alliance.audits.foreign-types-shared]]
 880 who = "Pat Hickey <phickey@fastly.com>"
 881 criteria = "safe-to-deploy"
 882 version = "0.1.1"
 883
 884 [[audits.bytecode-alliance.audits.futures-channel]]
 885 who = "Pat Hickey <phickey@fastly.com>"
 886 criteria = "safe-to-deploy"
 887 version = "0.3.27"
 888 notes = "build.rs is just detecting the target and setting cfg. unsafety is for implementing a concurrency primitives using atomics and unsafecell, and is not obviously incorrect (this is the sort of thing I wouldn't certify as correct without formal methods)"
 889
 890 [[audits.bytecode-alliance.audits.futures-core]]
 891 who = "Pat Hickey <phickey@fastly.com>"
 892 criteria = "safe-to-deploy"
 893 version = "0.3.27"
 894 notes = "Unsafe used to implement a concurrency primitive AtomicWaker. Well-commented and not obviously incorrect. Like my other audits of these concurrency primitives inside the futures family, I couldn't certify that it is correct without formal methods, but that is out of scope for this vetting."
 895
 896 [[audits.bytecode-alliance.audits.futures-executor]]
 897 who = "Pat Hickey <phickey@fastly.com>"
 898 criteria = "safe-to-deploy"
 899 version = "0.3.27"
 900 notes = "Unsafe used to implement the unpark mutex, which is well commented and not obviously incorrect. Like with futures-channel I wouldn't be able to certify it as correct without formal methods."
 901
 902 [[audits.bytecode-alliance.audits.futures-io]]
 903 who = "Pat Hickey <phickey@fastly.com>"
 904 criteria = "safe-to-deploy"
 905 version = "0.3.27"
 906
 907 [[audits.bytecode-alliance.audits.futures-sink]]
 908 who = "Pat Hickey <phickey@fastly.com>"
 909 criteria = "safe-to-deploy"
 910 version = "0.3.27"
 911
 912 [[audits.bytecode-alliance.audits.heck]]
 913 who = "Alex Crichton <alex@alexcrichton.com>"
 914 criteria = "safe-to-deploy"
 915 version = "0.4.0"
 916 notes = "Contains `forbid_unsafe` and only uses `std::fmt` from the standard library. Otherwise only contains string manipulation."
 917
 918 [[audits.bytecode-alliance.audits.id-arena]]
 919 who = "Nick Fitzgerald <fitzgen@gmail.com>"
 920 criteria = "safe-to-deploy"
 921 version = "2.2.1"
 922 notes = "I am the author of this crate."
 923
 924 [[audits.bytecode-alliance.audits.idna]]
 925 who = "Alex Crichton <alex@alexcrichton.com>"
 926 criteria = "safe-to-deploy"
 927 version = "0.3.0"
 928 notes = """
 929 This is a crate without unsafe code or usage of the standard library. The large
 930 size of this crate comes from the large generated unicode tables file. This
 931 crate is broadly used throughout the ecosystem and does not contain anything
 932 suspicious.
 933 """
 934
 935 [[audits.bytecode-alliance.audits.leb128]]
 936 who = "Nick Fitzgerald <fitzgen@gmail.com>"
 937 criteria = "safe-to-deploy"
 938 version = "0.2.5"
 939 notes = "I am the author of this crate."
 940
 941 [[audits.bytecode-alliance.audits.memoffset]]
 942 who = "Alex Crichton <alex@alexcrichton.com>"
 943 criteria = "safe-to-deploy"
 944 delta = "0.7.1 -> 0.8.0"
 945 notes = "This was a small update to the crate which has to do with Rust language features and compiler versions, no substantial changes."
 946
 947 [[audits.bytecode-alliance.audits.miniz_oxide]]
 948 who = "Alex Crichton <alex@alexcrichton.com>"
 949 criteria = "safe-to-deploy"
 950 version = "0.7.1"
 951 notes = """
 952 This crate is a Rust implementation of zlib compression/decompression and has
 953 been used by default by the Rust standard library for quite some time. It's also
 954 a default dependency of the popular `backtrace` crate for decompressing debug
 955 information. This crate forbids unsafe code and does not otherwise access system
 956 resources. It's originally a port of the `miniz.c` library as well, and given
 957 its own longevity should be relatively hardened against some of the more common
 958 compression-related issues.
 959 """
 960
 961 [[audits.bytecode-alliance.audits.mio]]
 962 who = "Alex Crichton <alex@alexcrichton.com>"
 963 criteria = "safe-to-deploy"
 964 delta = "0.8.6 -> 0.8.8"
 965 notes = "Mostly OS portability updates along with some minor bugfixes."
 966
 967 [[audits.bytecode-alliance.audits.object]]
 968 who = "Alex Crichton <alex@alexcrichton.com>"
 969 criteria = "safe-to-deploy"
 970 delta = "0.30.3 -> 0.31.1"
 971 notes = "A large-ish update to the crate but nothing out of the ordering. Support for new formats like xcoff, new constants, minor refactorings, etc. Nothing out of the ordinary."
 972
 973 [[audits.bytecode-alliance.audits.object]]
 974 who = "Alex Crichton <alex@alexcrichton.com>"
 975 criteria = "safe-to-deploy"
 976 delta = "0.31.1 -> 0.32.0"
 977 notes = "Various new features and refactorings as one would expect from an object parsing crate, all looks good."
 978
 979 [[audits.bytecode-alliance.audits.percent-encoding]]
 980 who = "Alex Crichton <alex@alexcrichton.com>"
 981 criteria = "safe-to-deploy"
 982 version = "2.2.0"
 983 notes = """
 984 This crate is a single-file crate that does what it says on the tin. There are
 985 a few `unsafe` blocks related to utf-8 validation which are locally verifiable
 986 as correct and otherwise this crate is good to go.
 987 """
 988
 989 [[audits.bytecode-alliance.audits.pin-utils]]
 990 who = "Pat Hickey <phickey@fastly.com>"
 991 criteria = "safe-to-deploy"
 992 version = "0.1.0"
 993
 994 [[audits.bytecode-alliance.audits.pkg-config]]
 995 who = "Pat Hickey <phickey@fastly.com>"
 996 criteria = "safe-to-deploy"
 997 version = "0.3.25"
 998 notes = "This crate shells out to the pkg-config executable, but it appears to sanitize inputs reasonably."
 999
1000 [[audits.bytecode-alliance.audits.rustc-demangle]]
1001 who = "Alex Crichton <alex@alexcrichton.com>"
1002 criteria = "safe-to-deploy"
1003 version = "0.1.21"
1004 notes = "I am the author of this crate."
1005
1006 [[audits.bytecode-alliance.audits.semver]]
1007 who = "Pat Hickey <phickey@fastly.com>"
1008 criteria = "safe-to-deploy"
1009 version = "1.0.17"
1010 notes = "plenty of unsafe pointer and vec tricks, but in well-structured and commented code that appears to be correct"
1011
1012 [[audits.bytecode-alliance.audits.slab]]
1013 who = "Pat Hickey <phickey@fastly.com>"
1014 criteria = "safe-to-deploy"
1015 version = "0.4.6"
1016 notes = "provides a datastructure implemented using std's Vec. all uses of unsafe are just delegating to the underlying unsafe Vec methods."
1017
1018 [[audits.bytecode-alliance.audits.socket2]]
1019 who = "Alex Crichton <alex@alexcrichton.com>"
1020 criteria = "safe-to-deploy"
1021 delta = "0.4.7 -> 0.4.9"
1022 notes = "Minor OS compat updates but otherwise nothing major here."
1023
1024 [[audits.bytecode-alliance.audits.tempfile]]
1025 who = "Pat Hickey <phickey@fastly.com>"
1026 criteria = "safe-to-deploy"
1027 delta = "3.3.0 -> 3.5.0"
1028
1029 [[audits.bytecode-alliance.audits.tempfile]]
1030 who = "Alex Crichton <alex@alexcrichton.com>"
1031 criteria = "safe-to-deploy"
1032 delta = "3.5.0 -> 3.6.0"
1033 notes = "Dependency updates and new optimized trait implementations, but otherwise everything looks normal."
1034
1035 [[audits.bytecode-alliance.audits.unicase]]
1036 who = "Alex Crichton <alex@alexcrichton.com>"
1037 criteria = "safe-to-deploy"
1038 version = "2.6.0"
1039 notes = """
1040 This crate contains no `unsafe` code and no unnecessary use of the standard
1041 library.
1042 """
1043
1044 [[audits.bytecode-alliance.audits.unicode-bidi]]
1045 who = "Alex Crichton <alex@alexcrichton.com>"
1046 criteria = "safe-to-deploy"
1047 version = "0.3.8"
1048 notes = """
1049 This crate has no unsafe code and does not use `std::*`. Skimming the crate it
1050 does not attempt to out of the bounds of what it's already supposed to be doing.
1051 """
1052
1053 [[audits.bytecode-alliance.audits.unicode-normalization]]
1054 who = "Alex Crichton <alex@alexcrichton.com>"
1055 criteria = "safe-to-deploy"
1056 version = "0.1.19"
1057 notes = """
1058 This crate contains one usage of `unsafe` which I have manually checked to see
1059 it as correct. This crate's size comes in large part due to the generated
1060 unicode tables that it contains. This crate is additionally widely used
1061 throughout the ecosystem and skimming the crate shows no usage of `std::*` APIs
1062 and nothing suspicious.
1063 """
1064
1065 [[audits.embark-studios.wildcard-audits.presser]]
1066 who = "Gray Olson <opensource@embark-studios.com>"
1067 criteria = "safe-to-deploy"
1068 user-id = 52553 # embark-studios
1069 start = "2021-01-01"
1070 end = "2024-05-23"
1071 notes = """
1072 Small crate with no dependencies and no ambient capabilities. The safe interface of the crate
1073 is gated behind unsafe implementation of a core trait, and care must be taken to ensure that
1074 the relevant invariants are guaranteed when doing so. Maintained by the Ark team at Embark
1075 and used in production.
1076 """
1077
1078 [[audits.embark-studios.audits.anyhow]]
1079 who = "Johan Andersson <opensource@embark-studios.com>"
1080 criteria = "safe-to-deploy"
1081 version = "1.0.58"
1082
1083 [[audits.embark-studios.audits.cfg_aliases]]
1084 who = "Johan Andersson <opensource@embark-studios.com>"
1085 criteria = "safe-to-deploy"
1086 version = "0.1.1"
1087 notes = "No unsafe usage or ambient capabilities"
1088
1089 [[audits.embark-studios.audits.derive_more]]
1090 who = "Johan Andersson <opensource@embark-studios.com>"
1091 criteria = "safe-to-deploy"
1092 version = "0.99.17"
1093 notes = "No unsafe usage or ambient capabilities"
1094
1095 [[audits.embark-studios.audits.ident_case]]
1096 who = "Johan Andersson <opensource@embark-studios.com>"
1097 criteria = "safe-to-deploy"
1098 version = "1.0.1"
1099 notes = "No unsafe usage or ambient capabilities"
1100
1101 [[audits.embark-studios.audits.idna]]
1102 who = "Johan Andersson <opensource@embark-studios.com>"
1103 criteria = "safe-to-deploy"
1104 delta = "0.3.0 -> 0.4.0"
1105 notes = "No unsafe usage or ambient capabilities"
1106
1107 [[audits.embark-studios.audits.line-wrap]]
1108 who = "Johan Andersson <opensource@embark-studios.com>"
1109 criteria = "safe-to-deploy"
1110 version = "0.1.1"
1111 notes = "No unsafe usage or ambient capabilities"
1112
1113 [[audits.embark-studios.audits.yaml-rust]]
1114 who = "Johan Andersson <opensource@embark-studios.com>"
1115 criteria = "safe-to-deploy"
1116 version = "0.4.5"
1117 notes = "No unsafe usage or ambient capabilities"
1118
1119 [[audits.google.audits.ash]]
1120 who = "David Koloski <dkoloski@google.com>"
1121 criteria = "safe-to-deploy"
1122 version = "0.37.0+1.3.209"
1123 notes = "Reviewed on https://fxrev.dev/694269"
1124 aggregated-from = "https://fuchsia.googlesource.com/fuchsia/+/refs/heads/main/third_party/rust_crates/supply-chain/audits.toml?format=TEXT"
1125
1126 [[audits.google.audits.fastrand]]
1127 who = "George Burgess IV <gbiv@google.com>"
1128 criteria = "safe-to-deploy"
1129 version = "1.9.0"
1130 notes = """
1131 `does-not-implement-crypto` is certified because this crate explicitly says
1132 that the RNG here is not cryptographically secure.
1133 """
1134 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1135
1136 [[audits.google.audits.futures]]
1137 who = "George Burgess IV <gbiv@google.com>"
1138 criteria = "safe-to-deploy"
1139 version = "0.3.28"
1140 notes = """
1141 `futures` has no logic other than tests - it simply `pub use`s things from
1142 other crates.
1143 """
1144 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1145
1146 [[audits.google.audits.glob]]
1147 who = "George Burgess IV <gbiv@google.com>"
1148 criteria = "safe-to-deploy"
1149 version = "0.3.1"
1150 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1151
1152 [[audits.google.audits.http]]
1153 who = "ChromeOS"
1154 criteria = "safe-to-run"
1155 version = "0.2.8"
1156 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1157
1158 [[audits.google.audits.http-body]]
1159 who = "ChromeOS"
1160 criteria = "safe-to-run"
1161 version = "0.4.5"
1162 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1163
1164 [[audits.google.audits.httpdate]]
1165 who = "ChromeOS"
1166 criteria = "safe-to-run"
1167 version = "1.0.2"
1168 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1169
1170 [[audits.google.audits.hyper]]
1171 who = "ChromeOS"
1172 criteria = "safe-to-run"
1173 version = "0.14.20"
1174 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1175
1176 [[audits.google.audits.nom]]
1177 who = "danakj@chromium.org"
1178 criteria = "safe-to-deploy"
1179 version = "7.1.3"
1180 notes = """
1181 Reviewed in https://chromium-review.googlesource.com/c/chromium/src/+/5046153
1182 """
1183 aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
1184
1185 [[audits.google.audits.pin-project]]
1186 who = "ChromeOS"
1187 criteria = "safe-to-run"
1188 version = "1.0.12"
1189 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1190
1191 [[audits.google.audits.pin-project-internal]]
1192 who = "ChromeOS"
1193 criteria = "safe-to-run"
1194 version = "1.0.12"
1195 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1196
1197 [[audits.google.audits.pin-project-lite]]
1198 who = "David Koloski <dkoloski@google.com>"
1199 criteria = "safe-to-deploy"
1200 version = "0.2.9"
1201 notes = "Reviewed on https://fxrev.dev/824504"
1202 aggregated-from = "https://fuchsia.googlesource.com/fuchsia/+/refs/heads/main/third_party/rust_crates/supply-chain/audits.toml?format=TEXT"
1203
1204 [[audits.google.audits.scoped-tls]]
1205 who = "George Burgess IV <gbiv@google.com>"
1206 criteria = "safe-to-run"
1207 version = "1.0.0"
1208 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1209
1210 [[audits.google.audits.serde_urlencoded]]
1211 who = "ChromeOS"
1212 criteria = "safe-to-run"
1213 version = "0.7.1"
1214 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1215
1216 [[audits.google.audits.static_assertions]]
1217 who = "Lukasz Anforowicz <lukasza@chromium.org>"
1218 criteria = "safe-to-deploy"
1219 version = "1.1.0"
1220 notes = """
1221 Grepped for `-i cipher`, `-i crypto`, `'\bfs\b'`, `'\bnet\b'`, `'\bunsafe\b'`
1222 and there were no hits except for one `unsafe`.
1223
1224 The lambda where `unsafe` is used is never invoked (e.g. the `unsafe` code
1225 never runs) and is only introduced for some compile-time checks.  Additional
1226 unsafe review comments can be found in https://crrev.com/c/5353376.
1227
1228 This crate has been added to Chromium in https://crrev.com/c/3736562.  The CL
1229 description contains a link to a document with an additional security review.
1230 """
1231 aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
1232
1233 [[audits.google.audits.strsim]]
1234 who = "danakj@chromium.org"
1235 criteria = "safe-to-deploy"
1236 version = "0.10.0"
1237 notes = """
1238 Reviewed in https://crrev.com/c/5171063
1239
1240 Previously reviewed during security review and the audit is grandparented in.
1241 """
1242 aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
1243
1244 [[audits.google.audits.tokio]]
1245 who = "Vovo Yang <vovoy@google.com>"
1246 criteria = "safe-to-run"
1247 version = "1.29.1"
1248 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1249
1250 [[audits.google.audits.tokio-stream]]
1251 who = "David Koloski <dkoloski@google.com>"
1252 criteria = "safe-to-deploy"
1253 version = "0.1.11"
1254 notes = "Reviewed on https://fxrev.dev/804724"
1255 aggregated-from = "https://fuchsia.googlesource.com/fuchsia/+/refs/heads/main/third_party/rust_crates/supply-chain/audits.toml?format=TEXT"
1256
1257 [[audits.google.audits.tower-service]]
1258 who = "ChromeOS"
1259 criteria = "safe-to-run"
1260 version = "0.3.2"
1261 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1262
1263 [[audits.google.audits.tracing]]
1264 who = "ChromeOS"
1265 criteria = "safe-to-run"
1266 version = "0.1.35"
1267 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1268
1269 [[audits.google.audits.tracing-attributes]]
1270 who = "ChromeOS"
1271 criteria = "safe-to-run"
1272 version = "0.1.22"
1273 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1274
1275 [[audits.google.audits.tracing-core]]
1276 who = "ChromeOS"
1277 criteria = "safe-to-run"
1278 version = "0.1.29"
1279 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1280
1281 [[audits.google.audits.try-lock]]
1282 who = "ChromeOS"
1283 criteria = "safe-to-run"
1284 version = "0.2.3"
1285 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1286
1287 [[audits.google.audits.unicode-linebreak]]
1288 who = "Lukasz Anforowicz <lukasza@chromium.org>"
1289 criteria = "safe-to-deploy"
1290 version = "0.1.5"
1291 notes = """
1292 Grepped for `-i cipher`, `-i crypto`, `'\bfs\b'``, `'\bnet\b'``, `'\bunsafe\b'``
1293 and there were no hits.
1294
1295 Version `0.1.2` of this crate has been added to Chromium in
1296 https://source.chromium.org/chromium/chromium/src/+/591a0f30c5eac93b6a3d981c2714ffa4db28dbcb
1297 The CL description contains a link to a Google-internal document with audit details.
1298 """
1299 aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
1300
1301 [[audits.google.audits.version_check]]
1302 who = "George Burgess IV <gbiv@google.com>"
1303 criteria = "safe-to-deploy"
1304 version = "0.9.4"
1305 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1306
1307 [[audits.google.audits.want]]
1308 who = "ChromeOS"
1309 criteria = "safe-to-run"
1310 version = "0.3.0"
1311 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1312
1313 [[audits.isrg.wildcard-audits.prio]]
1314 who = "David Cook <dcook@divviup.org>"
1315 criteria = "safe-to-deploy"
1316 user-id = 213776 # divviup-github-automation
1317 start = "2020-09-28"
1318 end = "2025-02-12"
1319
1320 [[audits.isrg.audits.base64]]
1321 who = "Tim Geoghegan <timg@letsencrypt.org>"
1322 criteria = "safe-to-deploy"
1323 delta = "0.21.0 -> 0.21.1"
1324
1325 [[audits.isrg.audits.base64]]
1326 who = "Brandon Pitman <bran@bran.land>"
1327 criteria = "safe-to-deploy"
1328 delta = "0.21.1 -> 0.21.2"
1329
1330 [[audits.isrg.audits.base64]]
1331 who = "David Cook <dcook@divviup.org>"
1332 criteria = "safe-to-deploy"
1333 delta = "0.21.2 -> 0.21.3"
1334
1335 [[audits.isrg.audits.block-buffer]]
1336 who = "David Cook <dcook@divviup.org>"
1337 criteria = "safe-to-deploy"
1338 version = "0.9.0"
1339
1340 [[audits.isrg.audits.getrandom]]
1341 who = "Tim Geoghegan <timg@letsencrypt.org>"
1342 criteria = "safe-to-deploy"
1343 delta = "0.2.9 -> 0.2.10"
1344 notes = "These changes include some new `unsafe` code for the `emscripten` and `psvita` targets, but all it does is call `libc::getentropy`."
1345
1346 [[audits.isrg.audits.keccak]]
1347 who = "David Cook <dcook@divviup.org>"
1348 criteria = "safe-to-deploy"
1349 version = "0.1.2"
1350
1351 [[audits.isrg.audits.keccak]]
1352 who = "Brandon Pitman <bran@bran.land>"
1353 criteria = "safe-to-deploy"
1354 delta = "0.1.3 -> 0.1.4"
1355
1356 [[audits.isrg.audits.once_cell]]
1357 who = "Brandon Pitman <bran@bran.land>"
1358 criteria = "safe-to-deploy"
1359 delta = "1.17.1 -> 1.17.2"
1360
1361 [[audits.isrg.audits.once_cell]]
1362 who = "David Cook <dcook@divviup.org>"
1363 criteria = "safe-to-deploy"
1364 delta = "1.17.2 -> 1.18.0"
1365
1366 [[audits.isrg.audits.once_cell]]
1367 who = "Brandon Pitman <bran@bran.land>"
1368 criteria = "safe-to-deploy"
1369 delta = "1.18.0 -> 1.19.0"
1370
1371 [[audits.isrg.audits.rand_chacha]]
1372 who = "David Cook <dcook@divviup.org>"
1373 criteria = "safe-to-deploy"
1374 version = "0.3.1"
1375
1376 [[audits.isrg.audits.rand_core]]
1377 who = "David Cook <dcook@divviup.org>"
1378 criteria = "safe-to-deploy"
1379 version = "0.6.3"
1380
1381 [[audits.isrg.audits.rayon-core]]
1382 who = "Brandon Pitman <bran@bran.land>"
1383 criteria = "safe-to-deploy"
1384 delta = "1.10.2 -> 1.11.0"
1385
1386 [[audits.isrg.audits.rayon-core]]
1387 who = "David Cook <dcook@divviup.org>"
1388 criteria = "safe-to-deploy"
1389 delta = "1.11.0 -> 1.12.0"
1390
1391 [[audits.isrg.audits.sha2]]
1392 who = "David Cook <dcook@divviup.org>"
1393 criteria = "safe-to-deploy"
1394 version = "0.10.2"
1395
1396 [[audits.isrg.audits.sha3]]
1397 who = "David Cook <dcook@divviup.org>"
1398 criteria = "safe-to-deploy"
1399 version = "0.10.6"
1400
1401 [[audits.isrg.audits.sha3]]
1402 who = "Brandon Pitman <bran@bran.land>"
1403 criteria = "safe-to-deploy"
1404 delta = "0.10.7 -> 0.10.8"
1405
1406 [[audits.mozilla.wildcard-audits.uniffi]]
1407 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
1408 criteria = "safe-to-deploy"
1409 user-id = 111105 # Mark Hammond (mhammond)
1410 start = "2021-11-22"
1411 end = "2024-11-28"
1412 aggregated-from = "https://raw.githubusercontent.com/mozilla/glean/main/supply-chain/audits.toml"
1413
1414 [[audits.mozilla.wildcard-audits.uniffi_bindgen]]
1415 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
1416 criteria = "safe-to-deploy"
1417 user-id = 111105 # Mark Hammond (mhammond)
1418 start = "2021-11-22"
1419 end = "2024-11-28"
1420 aggregated-from = "https://raw.githubusercontent.com/mozilla/glean/main/supply-chain/audits.toml"
1421
1422 [[audits.mozilla.wildcard-audits.uniffi_build]]
1423 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
1424 criteria = "safe-to-deploy"
1425 user-id = 111105 # Mark Hammond (mhammond)
1426 start = "2021-11-22"
1427 end = "2024-11-28"
1428 aggregated-from = "https://raw.githubusercontent.com/mozilla/glean/main/supply-chain/audits.toml"
1429
1430 [[audits.mozilla.wildcard-audits.uniffi_checksum_derive]]
1431 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
1432 criteria = "safe-to-deploy"
1433 user-id = 111105 # Mark Hammond (mhammond)
1434 start = "2023-11-20"
1435 end = "2024-11-28"
1436 aggregated-from = "https://raw.githubusercontent.com/mozilla/glean/main/supply-chain/audits.toml"
1437
1438 [[audits.mozilla.wildcard-audits.uniffi_core]]
1439 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
1440 criteria = "safe-to-deploy"
1441 user-id = 111105 # Mark Hammond (mhammond)
1442 start = "2023-11-20"
1443 end = "2024-11-28"
1444 aggregated-from = "https://raw.githubusercontent.com/mozilla/glean/main/supply-chain/audits.toml"
1445
1446 [[audits.mozilla.wildcard-audits.uniffi_macros]]
1447 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
1448 criteria = "safe-to-deploy"
1449 user-id = 111105 # Mark Hammond (mhammond)
1450 start = "2021-11-22"
1451 end = "2024-11-28"
1452 aggregated-from = "https://raw.githubusercontent.com/mozilla/glean/main/supply-chain/audits.toml"
1453
1454 [[audits.mozilla.wildcard-audits.uniffi_meta]]
1455 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
1456 criteria = "safe-to-deploy"
1457 user-id = 111105 # Mark Hammond (mhammond)
1458 start = "2023-11-20"
1459 end = "2024-11-28"
1460 aggregated-from = "https://raw.githubusercontent.com/mozilla/glean/main/supply-chain/audits.toml"
1461
1462 [[audits.mozilla.wildcard-audits.uniffi_testing]]
1463 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
1464 criteria = "safe-to-deploy"
1465 user-id = 111105 # Mark Hammond (mhammond)
1466 start = "2023-11-20"
1467 end = "2024-11-28"
1468 aggregated-from = "https://raw.githubusercontent.com/mozilla/glean/main/supply-chain/audits.toml"
1469
1470 [[audits.mozilla.wildcard-audits.uniffi_udl]]
1471 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
1472 criteria = "safe-to-deploy"
1473 user-id = 111105 # Mark Hammond (mhammond)
1474 start = "2023-11-20"
1475 end = "2024-11-28"
1476 aggregated-from = "https://raw.githubusercontent.com/mozilla/glean/main/supply-chain/audits.toml"
1477
1478 [[audits.mozilla.wildcard-audits.weedle2]]
1479 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
1480 criteria = "safe-to-deploy"
1481 user-id = 127697 # bendk
1482 start = "2022-06-16"
1483 end = "2025-03-05"
1484 notes = "Maintained by Mozilla"
1485 aggregated-from = "https://raw.githubusercontent.com/mozilla/glean/main/supply-chain/audits.toml"
1486
1487 [[audits.mozilla.wildcard-audits.zeitstempel]]
1488 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
1489 criteria = "safe-to-deploy"
1490 user-id = 48 # Jan-Erik Rediger (badboy)
1491 start = "2021-03-03"
1492 end = "2024-05-10"
1493 notes = "Maintained by me"
1494 aggregated-from = "https://raw.githubusercontent.com/mozilla/glean/main/supply-chain/audits.toml"
1495
1496 [[audits.mozilla.audits.askama]]
1497 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
1498 criteria = "safe-to-deploy"
1499 delta = "0.11.1 -> 0.12.0"
1500 notes = "No new unsafe usage, mostly dependency updates and smaller API changes"
1501 aggregated-from = "https://raw.githubusercontent.com/mozilla/glean/main/supply-chain/audits.toml"
1502
1503 [[audits.mozilla.audits.askama_derive]]
1504 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
1505 criteria = "safe-to-deploy"
1506 delta = "0.11.2 -> 0.12.1"
1507 notes = "Dependency updates, a new toml dependency and some API changes. No unsafe use."
1508 aggregated-from = "https://raw.githubusercontent.com/mozilla/glean/main/supply-chain/audits.toml"
1509
1510 [[audits.mozilla.audits.basic-toml]]
1511 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
1512 criteria = "safe-to-deploy"
1513 version = "0.1.2"
1514 notes = "TOML parser, forked from toml 0.5"
1515 aggregated-from = "https://raw.githubusercontent.com/mozilla/glean/main/supply-chain/audits.toml"
1516
1517 [[audits.mozilla.audits.bitflags]]
1518 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
1519 criteria = "safe-to-deploy"
1520 delta = "2.4.0 -> 2.4.1"
1521 notes = "Only allowing new clippy lints"
1522 aggregated-from = "https://raw.githubusercontent.com/mozilla/glean/main/supply-chain/audits.toml"
1523
1524 [[audits.mozilla.audits.either]]
1525 who = "Nika Layzell <nika@thelayzells.com>"
1526 criteria = "safe-to-deploy"
1527 version = "1.6.1"
1528 notes = """
1529 Straightforward crate providing the Either enum and trait implementations with
1530 no unsafe code.
1531 """
1532 aggregated-from = "https://raw.githubusercontent.com/mozilla/cargo-vet/main/supply-chain/audits.toml"
1533
1534 [[audits.mozilla.audits.goblin]]
1535 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
1536 criteria = "safe-to-deploy"
1537 delta = "0.7.1 -> 0.8.0"
1538 notes = "MSRV bump, no unsafe changes"
1539 aggregated-from = "https://raw.githubusercontent.com/mozilla/glean/main/supply-chain/audits.toml"
1540
1541 [[audits.mozilla.audits.lazy_static]]
1542 who = "Nika Layzell <nika@thelayzells.com>"
1543 criteria = "safe-to-deploy"
1544 version = "1.4.0"
1545 notes = "I have read over the macros, and audited the unsafe code."
1546 aggregated-from = "https://raw.githubusercontent.com/mozilla/cargo-vet/main/supply-chain/audits.toml"
1547
1548 [[audits.mozilla.audits.log]]
1549 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
1550 criteria = "safe-to-deploy"
1551 delta = "0.4.17 -> 0.4.18"
1552 notes = "One dependency removed, others updated (which we don't rely on), some APIs (which we don't use) changed."
1553 aggregated-from = "https://raw.githubusercontent.com/mozilla/glean/main/supply-chain/audits.toml"
1554
1555 [[audits.mozilla.audits.log]]
1556 who = "Kagami Sascha Rosylight <krosylight@mozilla.com>"
1557 criteria = "safe-to-deploy"
1558 delta = "0.4.18 -> 0.4.20"
1559 notes = "Only cfg attribute and internal macro changes and module refactorings"
1560 aggregated-from = "https://raw.githubusercontent.com/mozilla/glean/main/supply-chain/audits.toml"
1561
1562 [[audits.mozilla.audits.oneshot-uniffi]]
1563 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
1564 criteria = "safe-to-deploy"
1565 delta = "0.1.5 -> 0.1.6"
1566 notes = "Synced with the orginal crate, no new unsafe"
1567 aggregated-from = "https://raw.githubusercontent.com/mozilla/glean/main/supply-chain/audits.toml"
1568
1569 [[audits.mozilla.audits.rkv]]
1570 who = "Kagami Sascha Rosylight <krosylight@mozilla.com>"
1571 criteria = "safe-to-deploy"
1572 delta = "0.18.4 -> 0.19.0"
1573 notes = "Maintained by Mozilla, no addition of unsafe blocks"
1574 aggregated-from = "https://raw.githubusercontent.com/mozilla/glean/main/supply-chain/audits.toml"
1575
1576 [[audits.mozilla.audits.scroll]]
1577 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
1578 criteria = "safe-to-deploy"
1579 delta = "0.11.0 -> 0.12.0"
1580 aggregated-from = "https://raw.githubusercontent.com/mozilla/glean/main/supply-chain/audits.toml"
1581
1582 [[audits.mozilla.audits.scroll_derive]]
1583 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
1584 criteria = "safe-to-deploy"
1585 delta = "0.11.1 -> 0.12.0"
1586 aggregated-from = "https://raw.githubusercontent.com/mozilla/glean/main/supply-chain/audits.toml"
1587
1588 [[audits.mozilla.audits.smawk]]
1589 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
1590 criteria = "safe-to-deploy"
1591 version = "0.3.2"
1592 aggregated-from = "https://raw.githubusercontent.com/mozilla/glean/main/supply-chain/audits.toml"
1593
1594 [[audits.mozilla.audits.textwrap]]
1595 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
1596 criteria = "safe-to-deploy"
1597 version = "0.15.0"
1598 aggregated-from = "https://raw.githubusercontent.com/mozilla/glean/main/supply-chain/audits.toml"