supply-chain/audits.toml

   1
   2 # cargo-vet audits file
   3
   4 [[wildcard-audits.audio_thread_priority]]
   5 who = "Paul Adenot <paul@paul.cx>"
   6 criteria = "safe-to-deploy"
   7 user-id = 1258 # Paul Adenot (padenot)
   8 start = "2019-05-09"
   9 end = "2024-04-24"
  10 notes = """
  11 I've written most of this crate, the rest has been either written and in any
  12 case has been reviewed by Mozilla developers.
  13 """
  14
  15 [[wildcard-audits.authenticator]]
  16 who = "John M. Schanck <jschanck@mozilla.com>"
  17 criteria = "safe-to-deploy"
  18 user-id = 175410 # John Schanck (jschanck)
  19 start = "2022-11-15"
  20 end = "2024-04-26"
  21 notes = "Maintained by the CryptoEng team at Mozilla."
  22
  23 [[wildcard-audits.bhttp]]
  24 who = "Martin Thomson <mt@lowentropy.net>"
  25 criteria = "safe-to-deploy"
  26 user-id = 128763 # Martin Thomson (martinthomson)
  27 start = "2022-08-04"
  28 end = "2024-03-09"
  29 notes = "Though the code is safe to run and deploy, the code for processing HTTP/1.1 messages (the `read-http` feature, specifically) is not suited for deployment in real applications, either clients or servers.  Some features necessary for live deployment are not implemented, such as the proper handling of some types of response (e.g., a response to a HEAD request).  Software that processes HTTP/1.1 messages requires a large number of compatibility tweaks if it is to be deployed interoperably.  This feature only exists to support basic validation tools and is unlikely to be widely compatible."
  30
  31 [[wildcard-audits.cexpr]]
  32 who = "Emilio Cobos Álvarez <emilio@crisal.io>"
  33 criteria = "safe-to-deploy"
  34 user-id = 3788 # Emilio Cobos Álvarez (emilio)
  35 start = "2021-06-21"
  36 end = "2024-04-21"
  37 notes = "No unsafe code, rather straight-forward parser."
  38
  39 [[wildcard-audits.cocoa]]
  40 who = "Bobby Holley <bobbyholley@gmail.com>"
  41 criteria = "safe-to-deploy"
  42 user-id = 2396 # Josh Matthews (jdm)
  43 start = "2019-07-23"
  44 end = "2023-05-04"
  45 renew = false
  46 notes = "I've reviewed every source contribution that was neither authored nor reviewed by Mozilla."
  47
  48 [[wildcard-audits.cocoa]]
  49 who = "Bobby Holley <bobbyholley@gmail.com>"
  50 criteria = "safe-to-deploy"
  51 user-id = 5946 # Jeff Muizelaar (jrmuizel)
  52 start = "2022-11-01"
  53 end = "2023-05-04"
  54 renew = false
  55 notes = "I've reviewed every source contribution that was neither authored nor reviewed by Mozilla."
  56
  57 [[wildcard-audits.cocoa-foundation]]
  58 who = "Bobby Holley <bobbyholley@gmail.com>"
  59 criteria = "safe-to-deploy"
  60 user-id = 5946 # Jeff Muizelaar (jrmuizel)
  61 start = "2023-03-16"
  62 end = "2023-05-04"
  63 renew = false
  64 notes = "I've reviewed every source contribution that was neither authored nor reviewed by Mozilla."
  65
  66 [[wildcard-audits.cocoa-foundation]]
  67 who = "Bobby Holley <bobbyholley@gmail.com>"
  68 criteria = "safe-to-deploy"
  69 user-id = 2396 # Josh Matthews (jdm)
  70 start = "2020-07-20"
  71 end = "2023-05-04"
  72 renew = false
  73 notes = "I've reviewed every source contribution that was neither authored nor reviewed by Mozilla."
  74
  75 [[wildcard-audits.core-foundation]]
  76 who = "Bobby Holley <bobbyholley@gmail.com>"
  77 criteria = "safe-to-deploy"
  78 user-id = 2396 # Josh Matthews (jdm)
  79 start = "2019-11-12"
  80 end = "2023-05-04"
  81 renew = false
  82 notes = "I've reviewed every source contribution that was neither authored nor reviewed by Mozilla."
  83
  84 [[wildcard-audits.core-foundation]]
  85 who = "Bobby Holley <bobbyholley@gmail.com>"
  86 criteria = "safe-to-deploy"
  87 user-id = 5946 # Jeff Muizelaar (jrmuizel)
  88 start = "2019-03-29"
  89 end = "2023-05-04"
  90 renew = false
  91 notes = "I've reviewed every source contribution that was neither authored nor reviewed by Mozilla."
  92
  93 [[wildcard-audits.core-foundation-sys]]
  94 who = "Bobby Holley <bobbyholley@gmail.com>"
  95 criteria = "safe-to-deploy"
  96 user-id = 2396 # Josh Matthews (jdm)
  97 start = "2019-11-12"
  98 end = "2023-05-04"
  99 renew = false
 100 notes = "I've reviewed every source contribution that was neither authored nor reviewed by Mozilla."
 101
 102 [[wildcard-audits.core-foundation-sys]]
 103 who = "Bobby Holley <bobbyholley@gmail.com>"
 104 criteria = "safe-to-deploy"
 105 user-id = 5946 # Jeff Muizelaar (jrmuizel)
 106 start = "2020-10-14"
 107 end = "2023-05-04"
 108 renew = false
 109 notes = "I've reviewed every source contribution that was neither authored nor reviewed by Mozilla."
 110
 111 [[wildcard-audits.core-graphics]]
 112 who = "Bobby Holley <bobbyholley@gmail.com>"
 113 criteria = "safe-to-deploy"
 114 user-id = 2396 # Josh Matthews (jdm)
 115 start = "2019-10-28"
 116 end = "2023-05-04"
 117 renew = false
 118 notes = "I've reviewed every source contribution that was neither authored nor reviewed by Mozilla."
 119
 120 [[wildcard-audits.core-graphics]]
 121 who = "Bobby Holley <bobbyholley@gmail.com>"
 122 criteria = "safe-to-deploy"
 123 user-id = 5946 # Jeff Muizelaar (jrmuizel)
 124 start = "2020-12-08"
 125 end = "2023-05-04"
 126 renew = false
 127 notes = "I've reviewed every source contribution that was neither authored nor reviewed by Mozilla."
 128
 129 [[wildcard-audits.core-graphics-types]]
 130 who = "Bobby Holley <bobbyholley@gmail.com>"
 131 criteria = "safe-to-deploy"
 132 user-id = 2396 # Josh Matthews (jdm)
 133 start = "2020-07-20"
 134 end = "2023-05-04"
 135 renew = false
 136 notes = "I've reviewed every source contribution that was neither authored nor reviewed by Mozilla."
 137
 138 [[wildcard-audits.core-text]]
 139 who = "Bobby Holley <bobbyholley@gmail.com>"
 140 criteria = "safe-to-deploy"
 141 user-id = 2396 # Josh Matthews (jdm)
 142 start = "2019-03-29"
 143 end = "2023-05-04"
 144 renew = false
 145 notes = "I've reviewed every source contribution that was neither authored nor reviewed by Mozilla."
 146
 147 [[wildcard-audits.core-text]]
 148 who = "Bobby Holley <bobbyholley@gmail.com>"
 149 criteria = "safe-to-deploy"
 150 user-id = 5946 # Jeff Muizelaar (jrmuizel)
 151 start = "2021-02-14"
 152 end = "2023-05-04"
 153 renew = false
 154 notes = "I've reviewed every source contribution that was neither authored nor reviewed by Mozilla."
 155
 156 [[wildcard-audits.dogear]]
 157 who = "Bobby Holley <bobbyholley@gmail.com>"
 158 criteria = "safe-to-deploy"
 159 user-id = 27901 # Lina Butler (linabutler)
 160 start = "2019-03-04"
 161 end = "2024-05-05"
 162 notes = "Lina developed this crate as Mozilla staff."
 163
 164 [[wildcard-audits.encoding_rs]]
 165 who = "Henri Sivonen <hsivonen@hsivonen.fi>"
 166 criteria = "safe-to-deploy"
 167 user-id = 4484 # Henri Sivonen (hsivonen)
 168 start = "2019-02-26"
 169 end = "2024-08-28"
 170 notes = "I, Henri Sivonen, wrote encoding_rs for Gecko and have reviewed contributions by others. There are two caveats to the certification: 1) The crate does things that are documented to be UB but that do not appear to actually be UB due to integer types differing from the general rule; https://github.com/hsivonen/encoding_rs/issues/79 . 2) It would be prudent to re-review the code that reinterprets buffers of integers as SIMD vectors; see https://github.com/hsivonen/encoding_rs/issues/87 ."
 171
 172 [[wildcard-audits.etagere]]
 173 who = "Nicolas Silva <nical@fastmail.com>"
 174 criteria = "safe-to-deploy"
 175 user-id = 1281 # Nicolas Silva (nical)
 176 start = "2020-11-12"
 177 end = "2024-04-25"
 178 notes = "I am the author of this crate."
 179
 180 [[wildcard-audits.euclid]]
 181 who = "Nicolas Silva <nical@fastmail.com>"
 182 criteria = "safe-to-deploy"
 183 user-id = 1281 # Nicolas Silva (nical)
 184 start = "2019-03-14"
 185 end = "2024-04-25"
 186 notes = "I wrote most of the commits in the euclid reprository and review every change that is not produced by me."
 187
 188 [[wildcard-audits.freetype]]
 189 who = "Bobby Holley <bobbyholley@gmail.com>"
 190 criteria = "safe-to-deploy"
 191 user-id = 2396 # Josh Matthews (jdm)
 192 start = "2020-02-28"
 193 end = "2023-05-04"
 194 renew = false
 195 notes = "All code written or reviewed by Mozilla staff."
 196
 197 [[wildcard-audits.gleam]]
 198 who = "Bobby Holley <bobbyholley@gmail.com>"
 199 criteria = "safe-to-deploy"
 200 user-id = 2396 # Josh Matthews (jdm)
 201 start = "2019-03-18"
 202 end = "2023-05-04"
 203 renew = false
 204 notes = "All code written or reviewed by Mozilla."
 205
 206 [[wildcard-audits.gleam]]
 207 who = "Bobby Holley <bobbyholley@gmail.com>"
 208 criteria = "safe-to-deploy"
 209 user-id = 5946 # Jeff Muizelaar (jrmuizel)
 210 start = "2023-04-21"
 211 end = "2023-05-04"
 212 renew = false
 213 notes = "All code written or reviewed by Mozilla."
 214
 215 [[wildcard-audits.gleam]]
 216 who = "Bobby Holley <bobbyholley@gmail.com>"
 217 criteria = "safe-to-deploy"
 218 user-id = 1039
 219 start = "2019-03-01"
 220 end = "2023-05-04"
 221 renew = false
 222 notes = "All code written or reviewed by Mozilla."
 223
 224 [[wildcard-audits.glean]]
 225 who = "Chris H-C <chutten@mozilla.com>"
 226 criteria = "safe-to-deploy"
 227 user-id = 48 # Jan-Erik Rediger (badboy)
 228 start = "2020-11-10"
 229 end = "2024-02-24"
 230 notes = "The Glean SDKs are maintained by the Glean Team at Mozilla."
 231
 232 [[wildcard-audits.glean-core]]
 233 who = "Chris H-C <chutten@mozilla.com>"
 234 criteria = "safe-to-deploy"
 235 user-id = 48 # Jan-Erik Rediger (badboy)
 236 start = "2019-09-24"
 237 end = "2024-02-24"
 238 notes = "The Glean SDKs are maintained by the Glean Team at Mozilla."
 239
 240 [[wildcard-audits.glslopt]]
 241 who = "Jamie Nicol <jnicol@mozilla.com>"
 242 criteria = "safe-to-deploy"
 243 user-id = 84794 # Jamie Nicol (jamienicol)
 244 start = "2020-04-07"
 245 end = "2024-04-25"
 246
 247 [[wildcard-audits.io-surface]]
 248 who = "Bobby Holley <bobbyholley@gmail.com>"
 249 criteria = "safe-to-deploy"
 250 user-id = 2396 # Josh Matthews (jdm)
 251 start = "2019-07-23"
 252 end = "2023-05-04"
 253 renew = false
 254 notes = "I've reviewed every source contribution that was neither authored nor reviewed by Mozilla."
 255
 256 [[wildcard-audits.marionette]]
 257 who = "Henrik Skupin <mail@hskupin.info>"
 258 criteria = "safe-to-run"
 259 user-id = 22262
 260 start = "2020-11-03"
 261 end = "2024-03-31"
 262 notes = "Maintained by the DevTools team at Mozilla and has no unsafe code."
 263
 264 [[wildcard-audits.mozdevice]]
 265 who = "Henrik Skupin <mail@hskupin.info>"
 266 criteria = "safe-to-run"
 267 user-id = 22262
 268 start = "2020-11-03"
 269 end = "2024-03-31"
 270 notes = "Maintained by the DevTools team at Mozilla and has no unsafe code."
 271
 272 [[wildcard-audits.mozprofile]]
 273 who = "Henrik Skupin <mail@hskupin.info>"
 274 criteria = "safe-to-deploy"
 275 user-id = 22262
 276 start = "2020-11-03"
 277 end = "2024-03-31"
 278 notes = "Maintained by the DevTools team at Mozilla and has no unsafe code."
 279
 280 [[wildcard-audits.mozrunner]]
 281 who = "Henrik Skupin <mail@hskupin.info>"
 282 criteria = "safe-to-deploy"
 283 user-id = 22262
 284 start = "2020-11-03"
 285 end = "2024-03-31"
 286 notes = "Maintained by the DevTools team at Mozilla and has no unsafe code."
 287
 288 [[wildcard-audits.mozversion]]
 289 who = "Henrik Skupin <mail@hskupin.info>"
 290 criteria = "safe-to-run"
 291 user-id = 22262
 292 start = "2020-11-03"
 293 end = "2024-03-31"
 294 notes = "Maintained by the DevTools team at Mozilla and has no unsafe code."
 295
 296 [[wildcard-audits.nss-gk-api]]
 297 who = "John M. Schanck <jschanck@mozilla.com>"
 298 criteria = "safe-to-deploy"
 299 user-id = 175410 # John Schanck (jschanck)
 300 start = "2022-11-14"
 301 end = "2024-06-20"
 302 notes = "Maintained by the CryptoEng team at Mozilla."
 303
 304 [[wildcard-audits.ohttp]]
 305 who = "Martin Thomson <mt@lowentropy.net>"
 306 criteria = "safe-to-deploy"
 307 user-id = 128763 # Martin Thomson (martinthomson)
 308 start = "2022-08-04"
 309 end = "2024-03-09"
 310 notes = "This code contains two cryptographic back ends.  No unsafe code is contained if the Rust `hpke` crate is used (the `rust-hpke` feature).  Using NSS (the `nss` feature) involves extensive use of bindings to the native code provided by NSS.  This interface uses wrappers that attempt to add safety to a fundamentally very dangerous library, but those wrappers have only been validated for use following the needs of this crate."
 311
 312 [[wildcard-audits.rust_cascade]]
 313 who = "Dana Keeler <dkeeler@mozilla.com>"
 314 criteria = "safe-to-deploy"
 315 user-id = 57462 # Dana Keeler (mozkeeler)
 316 start = "2019-11-15"
 317 end = "2024-04-24"
 318 notes = "Written and maintained by the security engineering team at Mozilla."
 319
 320 [[wildcard-audits.unicode-normalization]]
 321 who = "Manish Goregaokar <manishsmail@gmail.com>"
 322 criteria = "safe-to-deploy"
 323 user-id = 1139 # Manish Goregaokar (Manishearth)
 324 start = "2019-11-06"
 325 end = "2024-05-03"
 326 notes = "All code written or reviewed by Manish"
 327
 328 [[wildcard-audits.unicode-segmentation]]
 329 who = "Manish Goregaokar <manishsmail@gmail.com>"
 330 criteria = "safe-to-deploy"
 331 user-id = 1139 # Manish Goregaokar (Manishearth)
 332 start = "2019-05-15"
 333 end = "2024-05-03"
 334 notes = "All code written or reviewed by Manish"
 335
 336 [[wildcard-audits.unicode-width]]
 337 who = "Manish Goregaokar <manishsmail@gmail.com>"
 338 criteria = "safe-to-deploy"
 339 user-id = 1139 # Manish Goregaokar (Manishearth)
 340 start = "2019-12-05"
 341 end = "2024-05-03"
 342 notes = "All code written or reviewed by Manish"
 343
 344 [[wildcard-audits.unicode-xid]]
 345 who = "Manish Goregaokar <manishsmail@gmail.com>"
 346 criteria = "safe-to-deploy"
 347 user-id = 1139 # Manish Goregaokar (Manishearth)
 348 start = "2019-07-25"
 349 end = "2024-05-03"
 350 notes = "All code written or reviewed by Manish"
 351
 352 [[wildcard-audits.uniffi]]
 353 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
 354 criteria = "safe-to-deploy"
 355 user-id = 48 # Jan-Erik Rediger (badboy)
 356 start = "2022-05-05"
 357 end = "2024-06-21"
 358 notes = "Maintained by the Glean and Application Services teams"
 359
 360 [[wildcard-audits.uniffi_bindgen]]
 361 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
 362 criteria = "safe-to-deploy"
 363 user-id = 48 # Jan-Erik Rediger (badboy)
 364 start = "2022-05-05"
 365 end = "2024-06-21"
 366 notes = "Maintained by the Glean and Application Services teams"
 367
 368 [[wildcard-audits.uniffi_build]]
 369 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
 370 criteria = "safe-to-deploy"
 371 user-id = 48 # Jan-Erik Rediger (badboy)
 372 start = "2022-05-05"
 373 end = "2024-06-21"
 374 notes = "Maintained by the Glean and Application Services teams"
 375
 376 [[wildcard-audits.uniffi_checksum_derive]]
 377 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
 378 criteria = "safe-to-deploy"
 379 user-id = 48 # Jan-Erik Rediger (badboy)
 380 start = "2022-12-16"
 381 end = "2024-06-21"
 382 notes = "Maintained by the Glean and Application Services teams"
 383
 384 [[wildcard-audits.uniffi_core]]
 385 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
 386 criteria = "safe-to-deploy"
 387 user-id = 48 # Jan-Erik Rediger (badboy)
 388 start = "2023-06-21"
 389 end = "2024-06-21"
 390 notes = "Maintained by the Glean and Application Services teams"
 391
 392 [[wildcard-audits.uniffi_macros]]
 393 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
 394 criteria = "safe-to-deploy"
 395 user-id = 48 # Jan-Erik Rediger (badboy)
 396 start = "2022-05-05"
 397 end = "2024-06-21"
 398 notes = "Maintained by the Glean and Application Services teams"
 399
 400 [[wildcard-audits.uniffi_meta]]
 401 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
 402 criteria = "safe-to-deploy"
 403 user-id = 48 # Jan-Erik Rediger (badboy)
 404 start = "2022-08-31"
 405 end = "2024-06-21"
 406 notes = "Maintained by the Glean and Application Services teams"
 407
 408 [[wildcard-audits.uniffi_testing]]
 409 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
 410 criteria = "safe-to-deploy"
 411 user-id = 48 # Jan-Erik Rediger (badboy)
 412 start = "2022-12-16"
 413 end = "2024-06-21"
 414 notes = "Maintained by the Glean and Application Services teams"
 415
 416 [[wildcard-audits.utf8_iter]]
 417 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
 418 criteria = "safe-to-deploy"
 419 user-id = 4484 # Henri Sivonen (hsivonen)
 420 start = "2022-04-19"
 421 end = "2024-06-16"
 422 notes = "Maintained by Henri Sivonen who works at Mozilla."
 423
 424 [[wildcard-audits.webdriver]]
 425 who = "Henrik Skupin <mail@hskupin.info>"
 426 criteria = "safe-to-deploy"
 427 user-id = 22262
 428 start = "2020-11-03"
 429 end = "2024-03-31"
 430 notes = "Maintained by the DevTools team at Mozilla and has no unsafe code."
 431
 432 [[audits.aa-stroke]]
 433 who = "Lee Salzman <lsalzman@mozilla.com>"
 434 criteria = "safe-to-deploy"
 435 version = "0.1.0"
 436 notes = "Written and maintained by Gfx team at Mozilla."
 437
 438 [[audits.aho-corasick]]
 439 who = "Mike Hommey <mh+mozilla@glandium.org>"
 440 criteria = "safe-to-deploy"
 441 delta = "0.7.18 -> 0.7.20"
 442
 443 [[audits.alsa]]
 444 who = "Mike Hommey <mh+mozilla@glandium.org>"
 445 criteria = "safe-to-deploy"
 446 delta = "0.4.3 -> 0.7.0"
 447
 448 [[audits.android_logger]]
 449 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
 450 criteria = "safe-to-deploy"
 451 version = "0.11.0"
 452 notes = "Small crate, wrapping Android log functionality, reviewed by janerik"
 453
 454 [[audits.android_logger]]
 455 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
 456 criteria = "safe-to-deploy"
 457 delta = "0.11.0 -> 0.11.1"
 458 notes = "Small crate, wrapping Android log functionality, now switched to properly using MaybeUninit"
 459
 460 [[audits.android_logger]]
 461 who = "Mike Hommey <mh+mozilla@glandium.org>"
 462 criteria = "safe-to-deploy"
 463 delta = "0.11.1 -> 0.11.3"
 464
 465 [[audits.android_logger]]
 466 who = "Chris H-C <chutten@mozilla.com>"
 467 criteria = "safe-to-deploy"
 468 delta = "0.11.3 -> 0.12.0"
 469 notes = "Small wrapper crate. This update fixes log level filtering."
 470
 471 [[audits.android_system_properties]]
 472 who = "Nicolas Silva <nical@fastmail.com>"
 473 criteria = "safe-to-deploy"
 474 version = "0.1.2"
 475 notes = "I wrote this crate, reviewed by jimb. It is mostly a Rust port of some C++ code we already ship."
 476
 477 [[audits.android_system_properties]]
 478 who = "Mike Hommey <mh+mozilla@glandium.org>"
 479 criteria = "safe-to-deploy"
 480 delta = "0.1.2 -> 0.1.4"
 481
 482 [[audits.android_system_properties]]
 483 who = "Mike Hommey <mh+mozilla@glandium.org>"
 484 criteria = "safe-to-deploy"
 485 delta = "0.1.4 -> 0.1.5"
 486
 487 [[audits.anyhow]]
 488 who = "Mike Hommey <mh+mozilla@glandium.org>"
 489 criteria = "safe-to-deploy"
 490 delta = "1.0.57 -> 1.0.61"
 491
 492 [[audits.anyhow]]
 493 who = "Bobby Holley <bobbyholley@gmail.com>"
 494 criteria = "safe-to-deploy"
 495 delta = "1.0.58 -> 1.0.57"
 496 notes = "No functional differences, just CI config and docs."
 497
 498 [[audits.anyhow]]
 499 who = "Mike Hommey <mh+mozilla@glandium.org>"
 500 criteria = "safe-to-deploy"
 501 delta = "1.0.61 -> 1.0.62"
 502
 503 [[audits.anyhow]]
 504 who = "Mike Hommey <mh+mozilla@glandium.org>"
 505 criteria = "safe-to-deploy"
 506 delta = "1.0.62 -> 1.0.68"
 507
 508 [[audits.anyhow]]
 509 who = "Mike Hommey <mh+mozilla@glandium.org>"
 510 criteria = "safe-to-deploy"
 511 delta = "1.0.68 -> 1.0.69"
 512
 513 [[audits.app_units]]
 514 who = "Emilio Cobos Álvarez <emilio@crisal.io>"
 515 criteria = "safe-to-deploy"
 516 version = "0.7.1"
 517 notes = """
 518 I'm pretty familiar with this crate. It provides a fixed-point numeric type.
 519 The code is pretty straight-forward, there's no unsafe code at all.
 520 """
 521
 522 [[audits.app_units]]
 523 who = "Nicolas Silva <nical@fastmail.com>"
 524 criteria = "safe-to-deploy"
 525 version = "0.7.3"
 526
 527 [[audits.app_units]]
 528 who = "Emilio Cobos Álvarez <emilio@crisal.io>"
 529 criteria = "safe-to-deploy"
 530 delta = "0.7.1 -> 0.7.2"
 531 notes = "Adding repr(transparent) plus a couple minor clean-ups, no functional changes from 0.7.1."
 532
 533 [[audits.arbitrary]]
 534 who = "Mike Hommey <mh+mozilla@glandium.org>"
 535 criteria = "safe-to-run"
 536 delta = "1.1.0 -> 1.1.1"
 537
 538 [[audits.arbitrary]]
 539 who = "Mike Hommey <mh+mozilla@glandium.org>"
 540 criteria = "safe-to-run"
 541 delta = "1.1.1 -> 1.1.3"
 542
 543 [[audits.arbitrary]]
 544 who = "Mike Hommey <mh+mozilla@glandium.org>"
 545 criteria = "safe-to-run"
 546 delta = "1.1.3 -> 1.2.0"
 547
 548 [[audits.arbitrary]]
 549 who = "Mike Hommey <mh+mozilla@glandium.org>"
 550 criteria = "safe-to-run"
 551 delta = "1.2.0 -> 1.2.3"
 552
 553 [[audits.ash]]
 554 who = "Jim Blandy <jimb@red-bean.com>"
 555 criteria = "safe-to-deploy"
 556 delta = "0.37.0+1.3.209 -> 0.37.1+1.3.235"
 557 notes = """
 558 Nicolas Silva, Jim Blandy, and Teodor Tanasoaia audited ash master
 559 branch commits from e43e9c0c to 6bd82768 inclusive.
 560 """
 561
 562 [[audits.ash]]
 563 who = "Nicolas Silva <nical@fastmail.com>"
 564 criteria = "safe-to-deploy"
 565 delta = "0.37.1+1.3.235 -> 0.37.2+1.3.238"
 566
 567 [[audits.ash]]
 568 who = "Teodor Tanasoaia <ttanasoaia@mozilla.com>"
 569 criteria = "safe-to-deploy"
 570 delta = "0.37.2+1.3.238 -> 0.37.3+1.3.251"
 571
 572 [[audits.ashmem]]
 573 who = "Matthew Gregan <kinetik@flim.org>"
 574 criteria = "safe-to-deploy"
 575 version = "0.1.2"
 576 notes = """
 577 Small unsafe wrapper around Android 8.0's ASharedMemory native API that falls
 578 back to older private ioctl-based API at runtime on earlier OS releases.  The
 579 shim code is small and doesn't inspect the API arguments, so is unlikely to
 580 expose any safety issues beyond those presented by the native OS API.
 581 """
 582
 583 [[audits.askama]]
 584 who = "Bobby Holley <bobbyholley@gmail.com>"
 585 criteria = "safe-to-deploy"
 586 version = "0.11.1"
 587 notes = """
 588 Just contains some traits and re-exports for use by a broader package of related
 589 crates. No unsafe code or ambient capability usage.
 590 """
 591
 592 [[audits.async-task]]
 593 who = "Nika Layzell <nika@thelayzells.com>"
 594 criteria = "safe-to-deploy"
 595 delta = "4.0.3 -> 4.0.3@git:f6488e35beccb26eb6e85847b02aa78a42cd3d0e"
 596 notes = "Recorded by bholley, confirmed over slack."
 597
 598 [[audits.async-task]]
 599 who = "Nika Layzell <nika@thelayzells.com>"
 600 criteria = "safe-to-deploy"
 601 delta = "4.0.3 -> 4.3.0"
 602 notes = "Main addition is the new FallibleTask type, which I implemented. No risky unsafe code changes."
 603
 604 [[audits.async-trait]]
 605 who = "Mike Hommey <mh+mozilla@glandium.org>"
 606 criteria = "safe-to-deploy"
 607 delta = "0.1.56 -> 0.1.57"
 608
 609 [[audits.async-trait]]
 610 who = "Mike Hommey <mh+mozilla@glandium.org>"
 611 criteria = "safe-to-deploy"
 612 delta = "0.1.57 -> 0.1.60"
 613
 614 [[audits.async-trait]]
 615 who = "Mike Hommey <mh+mozilla@glandium.org>"
 616 criteria = "safe-to-deploy"
 617 delta = "0.1.60 -> 0.1.64"
 618
 619 [[audits.atomic_refcell]]
 620 who = "Bobby Holley <bholley@mozilla.com>"
 621 criteria = "safe-to-deploy"
 622 version = "0.1.8"
 623 notes = "I maintain this crate and have reviewed every line."
 624
 625 [[audits.atomic_refcell]]
 626 who = "Mike Hommey <mh+mozilla@glandium.org>"
 627 criteria = "safe-to-deploy"
 628 delta = "0.1.8 -> 0.1.9"
 629
 630 [[audits.audio-mixer]]
 631 who = "Chun-Min Chang <chun.m.chang@gmail.com>"
 632 criteria = "safe-to-deploy"
 633 version = "0.1.2"
 634 notes = "audio-mixer is a Mozilla-developed package."
 635
 636 [[audits.audio-mixer]]
 637 who = "Mike Hommey <mh+mozilla@glandium.org>"
 638 criteria = "safe-to-deploy"
 639 delta = "0.1.2 -> 0.1.3"
 640
 641 [[audits.authenticator]]
 642 who = "John M. Schanck <jschanck@mozilla.com>"
 643 criteria = "safe-to-deploy"
 644 version = "0.4.0-alpha.13"
 645 notes = "Maintained by the CryptoEng team at Mozilla."
 646
 647 [[audits.autocfg]]
 648 who = "Josh Stone <jistone@redhat.com>"
 649 criteria = "safe-to-deploy"
 650 version = "1.1.0"
 651 notes = "All code written or reviewed by Josh Stone."
 652
 653 [[audits.base64]]
 654 who = "Mike Hommey <mh+mozilla@glandium.org>"
 655 criteria = "safe-to-deploy"
 656 delta = "0.13.0 -> 0.13.1"
 657
 658 [[audits.bindgen]]
 659 who = "Emilio Cobos Álvarez <emilio@crisal.io>"
 660 criteria = "safe-to-deploy"
 661 version = "0.59.2"
 662 notes = "I'm the primary author and maintainer of the crate."
 663
 664 [[audits.bindgen]]
 665 who = "Emilio Cobos Álvarez <emilio@crisal.io>"
 666 criteria = "safe-to-deploy"
 667 delta = "0.59.2 -> 0.63.0"
 668
 669 [[audits.bindgen]]
 670 who = "Mike Hommey <mh+mozilla@glandium.org>"
 671 criteria = "safe-to-deploy"
 672 delta = "0.63.0 -> 0.64.0"
 673
 674 [[audits.bindgen]]
 675 who = "Mike Hommey <mh+mozilla@glandium.org>"
 676 criteria = "safe-to-deploy"
 677 delta = "0.64.0 -> 0.66.1"
 678
 679 [[audits.bindgen]]
 680 who = "Mike Hommey <mh+mozilla@glandium.org>"
 681 criteria = "safe-to-deploy"
 682 delta = "0.66.1 -> 0.68.1"
 683
 684 [[audits.bit-set]]
 685 who = "Aria Beingessner <a.beingessner@gmail.com>"
 686 criteria = "safe-to-deploy"
 687 version = "0.5.2"
 688 notes = "Another crate I own via contain-rs that is ancient and maintenance mode, no known issues."
 689
 690 [[audits.bit-set]]
 691 who = "Mike Hommey <mh+mozilla@glandium.org>"
 692 criteria = "safe-to-deploy"
 693 delta = "0.5.2 -> 0.5.3"
 694
 695 [[audits.bit-vec]]
 696 who = "Aria Beingessner <a.beingessner@gmail.com>"
 697 criteria = "safe-to-deploy"
 698 version = "0.6.3"
 699 notes = "Another crate I own via contain-rs that is ancient and in maintenance mode but otherwise perfectly fine."
 700
 701 [[audits.bitflags]]
 702 who = "Alex Franchuk <afranchuk@mozilla.com>"
 703 criteria = "safe-to-deploy"
 704 delta = "1.3.2 -> 2.0.2"
 705 notes = "Removal of some unsafe code/methods. No changes to externals, just some refactoring (mostly internal)."
 706
 707 [[audits.bitflags]]
 708 who = "Nicolas Silva <nical@fastmail.com>"
 709 criteria = "safe-to-deploy"
 710 delta = "2.0.2 -> 2.1.0"
 711
 712 [[audits.bitflags]]
 713 who = "Teodor Tanasoaia <ttanasoaia@mozilla.com>"
 714 criteria = "safe-to-deploy"
 715 delta = "2.2.1 -> 2.3.2"
 716
 717 [[audits.bitflags]]
 718 who = "Mike Hommey <mh+mozilla@glandium.org>"
 719 criteria = "safe-to-deploy"
 720 delta = "2.3.3 -> 2.4.0"
 721
 722 [[audits.block-buffer]]
 723 who = "Mike Hommey <mh+mozilla@glandium.org>"
 724 criteria = "safe-to-deploy"
 725 delta = "0.10.2 -> 0.10.3"
 726
 727 [[audits.build-parallel]]
 728 who = "Jeff Muizelaar <jmuizelaar@mozilla.com>"
 729 criteria = "safe-to-deploy"
 730 version = "0.1.2"
 731
 732 [[audits.bumpalo]]
 733 who = "Bobby Holley <bobbyholley@gmail.com>"
 734 criteria = "safe-to-run"
 735 delta = "3.9.1 -> 3.10.0"
 736 notes = """
 737 Some nontrivial functional changes but certainly meets the no-malware bar of
 738 safe-to-run. If we needed safe-to-deploy for this in m-c I'd ask Nick to re-
 739 certify this version, but we don't, so this is fine for now.
 740 """
 741
 742 [[audits.bumpalo]]
 743 who = "Mike Hommey <mh+mozilla@glandium.org>"
 744 criteria = "safe-to-run"
 745 delta = "3.11.1 -> 3.12.0"
 746
 747 [[audits.bytes]]
 748 who = "Mike Hommey <mh+mozilla@glandium.org>"
 749 criteria = "safe-to-deploy"
 750 delta = "1.1.0 -> 1.2.1"
 751
 752 [[audits.bytes]]
 753 who = "Mike Hommey <mh+mozilla@glandium.org>"
 754 criteria = "safe-to-deploy"
 755 delta = "1.2.1 -> 1.3.0"
 756
 757 [[audits.bytes]]
 758 who = "Mike Hommey <mh+mozilla@glandium.org>"
 759 criteria = "safe-to-deploy"
 760 delta = "1.3.0 -> 1.4.0"
 761
 762 [[audits.camino]]
 763 who = "Mike Hommey <mh+mozilla@glandium.org>"
 764 criteria = "safe-to-deploy"
 765 delta = "1.0.9 -> 1.1.1"
 766
 767 [[audits.camino]]
 768 who = "Mike Hommey <mh+mozilla@glandium.org>"
 769 criteria = "safe-to-deploy"
 770 delta = "1.1.1 -> 1.1.2"
 771
 772 [[audits.cargo_metadata]]
 773 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
 774 criteria = "safe-to-deploy"
 775 version = "0.15.2"
 776 notes = "I reviewed the whole code base. Parser for the output of cargo-metadata, relying mostly on serde. No unsafe code used."
 777
 778 [[audits.cargo_metadata]]
 779 who = "Mike Hommey <mh+mozilla@glandium.org>"
 780 criteria = "safe-to-deploy"
 781 delta = "0.15.2 -> 0.15.3"
 782
 783 [[audits.chardetng]]
 784 who = "Henri Sivonen <hsivonen@hsivonen.fi>"
 785 criteria = "safe-to-deploy"
 786 version = "0.1.9"
 787 notes = "I, Henri Sivonen, wrote this (safe-code-only) crate for Gecko even though the crate is published via crates.io."
 788
 789 [[audits.chardetng]]
 790 who = "Bobby Holley <bobbyholley@gmail.com>"
 791 criteria = "safe-to-deploy"
 792 delta = "0.1.9 -> 0.1.9@git:3484d3e3ebdc8931493aa5df4d7ee9360a90e76b"
 793
 794 [[audits.chardetng_c]]
 795 who = "Henri Sivonen <hsivonen@hsivonen.fi>"
 796 criteria = "safe-to-deploy"
 797 version = "0.1.2"
 798 notes = "I, Henri Sivonen, wrote this crate for Gecko even though it is published via crates.io. The buffer input assumes Rust slice constraints for the start pointer. In Gecko, this is taken care of by mozilla::Span, but the C API doesn't conform to idiomatic C constraints on this point."
 799
 800 [[audits.chardetng_c]]
 801 who = "Bobby Holley <bobbyholley@gmail.com>"
 802 criteria = "safe-to-deploy"
 803 delta = "0.1.2 -> 0.1.2@git:ed8a4c6f900a90d4dbc1d64b856e61490a1c3570"
 804
 805 [[audits.clang-sys]]
 806 who = "Mike Hommey <mh+mozilla@glandium.org>"
 807 criteria = "safe-to-deploy"
 808 delta = "1.3.3 -> 1.4.0"
 809
 810 [[audits.clang-sys]]
 811 who = "Mike Hommey <mh+mozilla@glandium.org>"
 812 criteria = "safe-to-deploy"
 813 delta = "1.4.0 -> 1.6.0"
 814
 815 [[audits.clap_lex]]
 816 who = "Mike Hommey <mh+mozilla@glandium.org>"
 817 criteria = "safe-to-deploy"
 818 delta = "0.2.0 -> 0.2.2"
 819
 820 [[audits.clap_lex]]
 821 who = "Mike Hommey <mh+mozilla@glandium.org>"
 822 criteria = "safe-to-deploy"
 823 delta = "0.2.2 -> 0.2.4"
 824
 825 [[audits.comedy]]
 826 who = "Nick Alexander <nalexander@mozilla.com>"
 827 criteria = "safe-to-deploy"
 828 version = "0.2.0"
 829 notes = """
 830 The comedy crate was written by Adam Gashlin for Mozilla's use.  The entire
 831 comedy 0.2.0 crate is full of `unsafe` code and makes many assumptions about
 832 memory and layout, but there is no particular processing of untrusted input
 833 here.
 834 """
 835
 836 [[audits.cookie]]
 837 who = "Mike Hommey <mh+mozilla@glandium.org>"
 838 criteria = "safe-to-run"
 839 delta = "0.16.0 -> 0.16.2"
 840
 841 [[audits.core-graphics]]
 842 who = "Teodor Tanasoaia <ttanasoaia@mozilla.com>"
 843 criteria = "safe-to-deploy"
 844 delta = "0.22.3 -> 0.23.1"
 845
 846 [[audits.core-graphics-types]]
 847 who = "Teodor Tanasoaia <ttanasoaia@mozilla.com>"
 848 criteria = "safe-to-deploy"
 849 delta = "0.1.1 -> 0.1.2"
 850
 851 [[audits.core-text]]
 852 who = "Teodor Tanasoaia <ttanasoaia@mozilla.com>"
 853 criteria = "safe-to-deploy"
 854 delta = "19.2.0 -> 20.0.0"
 855
 856 [[audits.core-text]]
 857 who = "Jonathan Kew <jfkthame@gmail.com>"
 858 criteria = "safe-to-deploy"
 859 delta = "20.0.0 -> 20.1.0"
 860 notes = """
 861 The bulk of the 20.0.0 -> 20.1.0 changes were purely cosmetic clippy and rustfmt changes.
 862
 863 The only substantive change was the addition of wrappers to expose two additional Core Text APIs,
 864 the variants of CTFontCreateWithName and CTFontCreateWithFontDescriptor that accept a CTFontOptions
 865 parameter. These are directly parallel to the existing versions without CTFontOptions, and do not
 866 introduce any new forms of risk.
 867 """
 868
 869 [[audits.coreaudio-sys]]
 870 who = "Mike Hommey <mh+mozilla@glandium.org>"
 871 criteria = "safe-to-deploy"
 872 delta = "0.2.10 -> 0.2.11"
 873
 874 [[audits.coreaudio-sys]]
 875 who = "Mike Hommey <mh+mozilla@glandium.org>"
 876 criteria = "safe-to-deploy"
 877 delta = "0.2.11 -> 0.2.12"
 878
 879 [[audits.coreaudio-sys]]
 880 who = "Mike Hommey <mh+mozilla@glandium.org>"
 881 criteria = "safe-to-deploy"
 882 delta = "0.2.12 -> 0.2.13"
 883
 884 [[audits.cose]]
 885 who = "Mathew Hodson <mathew.hodson@gmail.com>"
 886 criteria = "safe-to-deploy"
 887 delta = "0.1.4 -> 0.1.4@git:43c22248d136c8b38fe42ea709d08da6355cf04b"
 888
 889 [[audits.cpufeatures]]
 890 who = "Mike Hommey <mh+mozilla@glandium.org>"
 891 criteria = "safe-to-deploy"
 892 delta = "0.2.2 -> 0.2.4"
 893
 894 [[audits.cpufeatures]]
 895 who = "Mike Hommey <mh+mozilla@glandium.org>"
 896 criteria = "safe-to-deploy"
 897 delta = "0.2.4 -> 0.2.5"
 898
 899 [[audits.cpufeatures]]
 900 who = "Gabriele Svelto <gsvelto@mozilla.com>"
 901 criteria = "safe-to-deploy"
 902 delta = "0.2.7 -> 0.2.8"
 903 notes = "This release contains a single fix for an issue that affected Firefox"
 904
 905 [[audits.crash-context]]
 906 who = "Gabriele Svelto <gsvelto@mozilla.com>"
 907 criteria = "safe-to-deploy"
 908 version = "0.5.1"
 909 notes = "Mozilla employees contributed to this crate and the remaining code was fully audited"
 910
 911 [[audits.crash-context]]
 912 who = "Alex Franchuk <afranchuk@mozilla.com>"
 913 criteria = "safe-to-deploy"
 914 delta = "0.5.1 -> 0.6.0"
 915 notes = """
 916 There are few changes. The main change is the removal of `winapi` in favor of
 917 manually-generated bindings (which are minimal). The few small bugfixes are
 918 sound.
 919 """
 920
 921 [[audits.crash-context]]
 922 who = "Gabriele Svelto <gsvelto@mozilla.com>"
 923 criteria = "safe-to-deploy"
 924 delta = "0.6.0 -> 0.6.1"
 925
 926 [[audits.crossbeam-channel]]
 927 who = "Mike Hommey <mh+mozilla@glandium.org>"
 928 criteria = "safe-to-deploy"
 929 delta = "0.5.4 -> 0.5.6"
 930
 931 [[audits.crossbeam-deque]]
 932 who = "Mike Hommey <mh+mozilla@glandium.org>"
 933 criteria = "safe-to-deploy"
 934 delta = "0.8.1 -> 0.8.2"
 935
 936 [[audits.crossbeam-epoch]]
 937 who = "Mike Hommey <mh+mozilla@glandium.org>"
 938 criteria = "safe-to-deploy"
 939 delta = "0.9.8 -> 0.9.10"
 940
 941 [[audits.crossbeam-epoch]]
 942 who = "Mike Hommey <mh+mozilla@glandium.org>"
 943 criteria = "safe-to-deploy"
 944 delta = "0.9.10 -> 0.9.13"
 945
 946 [[audits.crossbeam-epoch]]
 947 who = "Mike Hommey <mh+mozilla@glandium.org>"
 948 criteria = "safe-to-deploy"
 949 delta = "0.9.13 -> 0.9.14"
 950
 951 [[audits.crossbeam-queue]]
 952 who = "Matthew Gregan <kinetik@flim.org>"
 953 criteria = "safe-to-deploy"
 954 version = "0.3.8"
 955
 956 [[audits.crossbeam-utils]]
 957 who = "Mike Hommey <mh+mozilla@glandium.org>"
 958 criteria = "safe-to-deploy"
 959 delta = "0.8.8 -> 0.8.11"
 960
 961 [[audits.crossbeam-utils]]
 962 who = "Mike Hommey <mh+mozilla@glandium.org>"
 963 criteria = "safe-to-deploy"
 964 delta = "0.8.11 -> 0.8.14"
 965
 966 [[audits.crypto-common]]
 967 who = "Mike Hommey <mh+mozilla@glandium.org>"
 968 criteria = "safe-to-deploy"
 969 delta = "0.1.3 -> 0.1.6"
 970
 971 [[audits.cssparser]]
 972 who = "Emilio Cobos Álvarez <emilio@crisal.io>"
 973 criteria = "safe-to-deploy"
 974 version = "0.29.6"
 975 notes = """
 976 I've reviewed or authored most of the recent changes to this library, and it
 977 was developed by other mozilla folks. Unsafe code there is reasonable (utf-8
 978 casts for serialization and parsing).
 979 """
 980
 981 [[audits.cssparser]]
 982 who = "Bobby Holley <bobbyholley@gmail.com>"
 983 criteria = "safe-to-deploy"
 984 delta = "0.29.6 -> 0.31.0"
 985 notes = """
 986 All the changes in this release were authored by Mozilla staff, except the
 987 uninit_array stuff, which looks fine.
 988 """
 989
 990 [[audits.cssparser]]
 991 who = "Mike Hommey <mh+mozilla@glandium.org>"
 992 criteria = "safe-to-deploy"
 993 delta = "0.31.0 -> 0.31.2"
 994
 995 [[audits.cssparser]]
 996 who = "Emilio Cobos Álvarez <emilio@crisal.io>"
 997 criteria = "safe-to-deploy"
 998 delta = "0.31.2 -> 0.32.0"
 999 notes = "All changes were either authored or reviewed by Mozilla employees."
1000
1001 [[audits.cssparser]]
1002 who = "Emilio Cobos Álvarez <emilio@crisal.io>"
1003 criteria = "safe-to-deploy"
1004 delta = "0.32.0 -> 0.33.0"
1005 notes = """
1006 Mozilla authored. Breaking changes from 0.32 involve splitting color APIs into
1007 their own crate and removing an unused line number offset mechanism.
1008 """
1009
1010 [[audits.cssparser-color]]
1011 who = "Emilio Cobos Álvarez <emilio@crisal.io>"
1012 criteria = "safe-to-deploy"
1013 version = "0.1.0"
1014 notes = "This code used to live in cssparser's color module. Only moved out. Mozilla-authored."
1015
1016 [[audits.cssparser-macros]]
1017 who = "Emilio Cobos Álvarez <emilio@crisal.io>"
1018 criteria = "safe-to-deploy"
1019 version = "0.6.0"
1020 notes = """
1021 Trivial crate with a single proc macro to compute the max length of the inputs
1022 to a match expression.
1023 """
1024
1025 [[audits.cssparser-macros]]
1026 who = "Mike Hommey <mh+mozilla@glandium.org>"
1027 criteria = "safe-to-deploy"
1028 delta = "0.6.0 -> 0.6.1"
1029
1030 [[audits.cstr]]
1031 who = "Emilio Cobos Álvarez <emilio@crisal.io>"
1032 criteria = "safe-to-deploy"
1033 version = "0.2.10"
1034 notes = """
1035 I've reviewed the code of the crate thoroughly. It generates an unsafe block
1036 which is statically guaranteed to be safe. Inputs to the macro have to be
1037 static so there's no uncontrolled input whatsoever.
1038 """
1039
1040 [[audits.cstr]]
1041 who = "Mike Hommey <mh+mozilla@glandium.org>"
1042 criteria = "safe-to-deploy"
1043 delta = "0.2.10 -> 0.2.11"
1044
1045 [[audits.cubeb]]
1046 who = "Matthew Gregan <kinetik@flim.org>"
1047 criteria = "safe-to-deploy"
1048 version = "0.10.1"
1049 notes = """
1050 Mozilla-developed package.
1051 """
1052
1053 [[audits.cubeb]]
1054 who = "Matthew Gregan <kinetik@flim.org>"
1055 criteria = "safe-to-deploy"
1056 delta = "0.10.1 -> 0.10.2"
1057
1058 [[audits.cubeb]]
1059 who = "Mike Hommey <mh+mozilla@glandium.org>"
1060 criteria = "safe-to-deploy"
1061 delta = "0.10.2 -> 0.10.3"
1062
1063 [[audits.cubeb-backend]]
1064 who = "Matthew Gregan <kinetik@flim.org>"
1065 criteria = "safe-to-deploy"
1066 version = "0.10.1"
1067 notes = """
1068 Mozilla-developed package.
1069 """
1070
1071 [[audits.cubeb-backend]]
1072 who = "Matthew Gregan <kinetik@flim.org>"
1073 criteria = "safe-to-deploy"
1074 delta = "0.10.1 -> 0.10.2"
1075
1076 [[audits.cubeb-backend]]
1077 who = "Paul Adenot <paul@paul.cx>"
1078 criteria = "safe-to-deploy"
1079 delta = "0.10.2 -> 0.10.3"
1080 notes = """
1081 Mozilla-developed package.
1082 """
1083
1084 [[audits.cubeb-core]]
1085 who = "Matthew Gregan <kinetik@flim.org>"
1086 criteria = "safe-to-deploy"
1087 version = "0.10.1"
1088 notes = """
1089 Mozilla-developed package.
1090 """
1091
1092 [[audits.cubeb-core]]
1093 who = "Matthew Gregan <kinetik@flim.org>"
1094 criteria = "safe-to-deploy"
1095 delta = "0.10.1 -> 0.10.2"
1096
1097 [[audits.cubeb-core]]
1098 who = "Paul Adenot <paul@paul.cx>"
1099 criteria = "safe-to-deploy"
1100 delta = "0.10.2 -> 0.10.3"
1101 notes = """
1102 Mozilla-developed package.
1103 """
1104
1105 [[audits.cubeb-core]]
1106 who = "Mike Hommey <mh+mozilla@glandium.org>"
1107 criteria = "safe-to-deploy"
1108 delta = "0.10.3 -> 0.10.4"
1109
1110 [[audits.cubeb-sys]]
1111 who = "Matthew Gregan <kinetik@flim.org>"
1112 criteria = "safe-to-deploy"
1113 version = "0.10.1"
1114 notes = """
1115 Mozilla-developed package.
1116 """
1117
1118 [[audits.cubeb-sys]]
1119 who = "Matthew Gregan <kinetik@flim.org>"
1120 criteria = "safe-to-deploy"
1121 delta = "0.10.1 -> 0.10.2"
1122
1123 [[audits.cubeb-sys]]
1124 who = "Paul Adenot <paul@paul.cx>"
1125 criteria = "safe-to-deploy"
1126 delta = "0.10.2 -> 0.10.3"
1127 notes = """
1128 Mozilla-developed package.
1129 """
1130
1131 [[audits.d3d12]]
1132 who = "Jim Blandy <jimb@red-bean.com>"
1133 criteria = "safe-to-deploy"
1134 delta = "0.4.1 -> 0.5.0"
1135 notes = "The commits between 0.4.1 and 0.5.0 were all audited by Dzmitry Malyshau or myself."
1136
1137 [[audits.d3d12]]
1138 who = "Nicolas Silva <nical@fastmail.com>"
1139 criteria = "safe-to-deploy"
1140 delta = "0.5.0 -> 0.5.0@git:a990c93ec64eeab78f2292763d0715da9dba1d59"
1141
1142 [[audits.d3d12]]
1143 who = "Nicolas Silva <nical@fastmail.com>"
1144 criteria = "safe-to-deploy"
1145 delta = "0.5.0@git:a990c93ec64eeab78f2292763d0715da9dba1d59 -> 0.6.0@git:b940b1d71ab7083ae80eec697872672dc1f2bd32"
1146
1147 [[audits.d3d12]]
1148 who = "Nicolas Silva <nical@fastmail.com>"
1149 criteria = "safe-to-deploy"
1150 delta = "0.6.0@git:b940b1d71ab7083ae80eec697872672dc1f2bd32 -> 0.7.0"
1151
1152 [[audits.darling]]
1153 who = "Mike Hommey <mh+mozilla@glandium.org>"
1154 criteria = "safe-to-deploy"
1155 delta = "0.13.4 -> 0.14.2"
1156
1157 [[audits.darling]]
1158 who = "Mike Hommey <mh+mozilla@glandium.org>"
1159 criteria = "safe-to-deploy"
1160 delta = "0.14.2 -> 0.14.3"
1161
1162 [[audits.darling]]
1163 who = "Mike Hommey <mh+mozilla@glandium.org>"
1164 criteria = "safe-to-deploy"
1165 delta = "0.14.3 -> 0.20.1"
1166
1167 [[audits.darling_core]]
1168 who = "Mike Hommey <mh+mozilla@glandium.org>"
1169 criteria = "safe-to-deploy"
1170 delta = "0.13.4 -> 0.14.2"
1171
1172 [[audits.darling_core]]
1173 who = "Mike Hommey <mh+mozilla@glandium.org>"
1174 criteria = "safe-to-deploy"
1175 delta = "0.14.2 -> 0.14.3"
1176
1177 [[audits.darling_core]]
1178 who = "Mike Hommey <mh+mozilla@glandium.org>"
1179 criteria = "safe-to-deploy"
1180 delta = "0.14.3 -> 0.20.1"
1181
1182 [[audits.darling_macro]]
1183 who = "Mike Hommey <mh+mozilla@glandium.org>"
1184 criteria = "safe-to-deploy"
1185 delta = "0.13.4 -> 0.14.2"
1186
1187 [[audits.darling_macro]]
1188 who = "Mike Hommey <mh+mozilla@glandium.org>"
1189 criteria = "safe-to-deploy"
1190 delta = "0.14.2 -> 0.14.3"
1191
1192 [[audits.darling_macro]]
1193 who = "Mike Hommey <mh+mozilla@glandium.org>"
1194 criteria = "safe-to-deploy"
1195 delta = "0.14.3 -> 0.20.1"
1196
1197 [[audits.data-encoding]]
1198 who = "Mike Hommey <mh+mozilla@glandium.org>"
1199 criteria = "safe-to-deploy"
1200 delta = "2.3.2 -> 2.3.3"
1201
1202 [[audits.debugid]]
1203 who = "Gabriele Svelto <gsvelto@mozilla.com>"
1204 criteria = "safe-to-deploy"
1205 version = "0.8.0"
1206 notes = "This crates was written by Sentry and I've fully audited it as Firefox crash reporting machinery relies on it."
1207
1208 [[audits.derive_arbitrary]]
1209 who = "Mike Hommey <mh+mozilla@glandium.org>"
1210 criteria = "safe-to-run"
1211 delta = "1.1.0 -> 1.1.1"
1212
1213 [[audits.derive_arbitrary]]
1214 who = "Mike Hommey <mh+mozilla@glandium.org>"
1215 criteria = "safe-to-run"
1216 delta = "1.1.1 -> 1.1.3"
1217
1218 [[audits.derive_arbitrary]]
1219 who = "Mike Hommey <mh+mozilla@glandium.org>"
1220 criteria = "safe-to-run"
1221 delta = "1.1.3 -> 1.2.1"
1222
1223 [[audits.derive_arbitrary]]
1224 who = "Mike Hommey <mh+mozilla@glandium.org>"
1225 criteria = "safe-to-run"
1226 delta = "1.2.1 -> 1.2.3"
1227
1228 [[audits.derive_arbitrary]]
1229 who = "Mike Hommey <mh+mozilla@glandium.org>"
1230 criteria = "safe-to-run"
1231 delta = "1.3.0 -> 1.3.1"
1232
1233 [[audits.derive_more]]
1234 who = "Mike Hommey <mh+mozilla@glandium.org>"
1235 criteria = "safe-to-deploy"
1236 delta = "0.99.17 -> 1.0.0-beta.2"
1237
1238 [[audits.devd-rs]]
1239 who = "Mike Hommey <mh+mozilla@glandium.org>"
1240 criteria = "safe-to-deploy"
1241 delta = "0.3.4 -> 0.3.5"
1242
1243 [[audits.devd-rs]]
1244 who = "Mike Hommey <mh+mozilla@glandium.org>"
1245 criteria = "safe-to-deploy"
1246 delta = "0.3.5 -> 0.3.6"
1247
1248 [[audits.digest]]
1249 who = "Mike Hommey <mh+mozilla@glandium.org>"
1250 criteria = "safe-to-deploy"
1251 delta = "0.10.3 -> 0.10.6"
1252
1253 [[audits.diplomat]]
1254 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
1255 criteria = "safe-to-deploy"
1256 version = "0.5.2"
1257 notes = "This crate is FFI wrapper generator using by ICU4X ffi libraries. This uses unsafe code to convert paramenters, I have reviewed this and generated headers."
1258
1259 [[audits.diplomat]]
1260 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
1261 criteria = "safe-to-deploy"
1262 delta = "0.5.2 -> 0.5.2@git:8d125999893fedfdf30595e97334c21ec4b18da9"
1263
1264 [[audits.diplomat-runtime]]
1265 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
1266 criteria = "safe-to-deploy"
1267 version = "0.5.2"
1268 notes = "This crate is FFI wrapper generator runtime using by ICU4X ffi libraries. This uses unsafe code for memory access of FFI. I have reviewed carefully."
1269
1270 [[audits.diplomat-runtime]]
1271 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
1272 criteria = "safe-to-deploy"
1273 delta = "0.5.2 -> 0.5.2@git:8d125999893fedfdf30595e97334c21ec4b18da9"
1274
1275 [[audits.diplomat_core]]
1276 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
1277 criteria = "safe-to-deploy"
1278 version = "0.5.2"
1279 notes = "This crate contains unsafe code, no network and no file access."
1280
1281 [[audits.diplomat_core]]
1282 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
1283 criteria = "safe-to-deploy"
1284 delta = "0.5.2 -> 0.5.2@git:8d125999893fedfdf30595e97334c21ec4b18da9"
1285
1286 [[audits.displaydoc]]
1287 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
1288 criteria = "safe-to-deploy"
1289 version = "0.2.3"
1290 notes = """
1291 This crate is convenient macros to implement core::fmt::Display trait.
1292 Although `unsafe` is used for test code to call `libc::abort()`, it has no `unsafe` code in this crate. And there is no file access.
1293 It meets the criteria for safe-to-deploy.
1294 """
1295
1296 [[audits.displaydoc]]
1297 who = "Mike Hommey <mh+mozilla@glandium.org>"
1298 criteria = "safe-to-deploy"
1299 delta = "0.2.3 -> 0.2.4"
1300
1301 [[audits.dogear]]
1302 who = "Sammy Khamis <skhamis@mozilla.com>"
1303 criteria = "safe-to-deploy"
1304 delta = "0.4.0 -> 0.5.0"
1305 notes = "The repository for this crate belongs in the Mozilla org."
1306
1307 [[audits.dtoa-short]]
1308 who = "Bobby Holley <bobbyholley@gmail.com>"
1309 criteria = "safe-to-deploy"
1310 version = "0.3.3"
1311
1312 [[audits.dwrote]]
1313 who = "Bobby Holley <bobbyholley@gmail.com>"
1314 criteria = "safe-to-deploy"
1315 version = "0.11.0"
1316 notes = "All code written or reviewed by Mozilla staff."
1317
1318 [[audits.either]]
1319 who = "Mike Hommey <mh+mozilla@glandium.org>"
1320 criteria = "safe-to-deploy"
1321 delta = "1.6.1 -> 1.7.0"
1322
1323 [[audits.either]]
1324 who = "Mike Hommey <mh+mozilla@glandium.org>"
1325 criteria = "safe-to-deploy"
1326 delta = "1.7.0 -> 1.8.0"
1327
1328 [[audits.either]]
1329 who = "Mike Hommey <mh+mozilla@glandium.org>"
1330 criteria = "safe-to-deploy"
1331 delta = "1.8.0 -> 1.8.1"
1332
1333 [[audits.encoding_c]]
1334 who = "Henri Sivonen <hsivonen@hsivonen.fi>"
1335 criteria = "safe-to-deploy"
1336 version = "0.9.8"
1337 notes = "I, Henri Sivonen, wrote encoding_c for Gecko even though it is published via crates.io. There are two caveats: 1) the C API is designed to be used together with mozilla::Span and is unidiomatic for zero-length inputs otherwise. 2) It is idiomatic in C and C++ to pass uninitialized buffers as output buffers. This is generally documented to be UB in Rust, but idiomatic C and C++ usage here relies on this not actually being UB for buffers of integers (which these buffers are). See https://github.com/hsivonen/encoding_rs/issues/79#issuecomment-1211870361"
1338
1339 [[audits.encoding_c_mem]]
1340 who = "Henri Sivonen <hsivonen@hsivonen.fi>"
1341 criteria = "safe-to-deploy"
1342 version = "0.2.6"
1343 notes = """
1344 I, Henri Sivonen, wrote encoding_c_mem for Gecko even though it is published via crates.io. There are two caveats: 1) the C API is designed to be used together with mozilla::Span and is unidiomatic for zero-length inputs otherwise. 2) It is idiomatic in C and C
1345 ++ to pass uninitialized buffers as output buffers. This is generally documented to be UB in Rust, but idiomatic C and C++ usage here relies on this not actually being UB for buffers of integers (which these buffers are). See https://github.com/hsivonen/encoding_rs/i
1346 ssues/79#issuecomment-1211870361
1347 """
1348
1349 [[audits.encoding_rs]]
1350 who = "Henri Sivonen <hsivonen@hsivonen.fi>"
1351 criteria = "safe-to-deploy"
1352 version = "0.8.31"
1353 notes = "I, Henri Sivonen, wrote encoding_rs for Gecko and have reviewed contributions by others. There are two caveats to the certification: 1) The crate does things that are documented to be UB but that do not appear to actually be UB due to integer types differing from the general rule; https://github.com/hsivonen/encoding_rs/issues/79 . 2) It would be prudent to re-review the code that reinterprets buffers of integers as SIMD vectors; see https://github.com/hsivonen/encoding_rs/issues/87 ."
1354
1355 [[audits.encoding_rs]]
1356 who = "Mike Hommey <mh+mozilla@glandium.org>"
1357 criteria = "safe-to-deploy"
1358 delta = "0.8.31 -> 0.8.32"
1359
1360 [[audits.enum-primitive-derive]]
1361 who = "Gabriele Svelto <gsvelto@mozilla.com>"
1362 criteria = "safe-to-deploy"
1363 version = "0.2.2"
1364
1365 [[audits.enumset]]
1366 who = "Mike Hommey <mh+mozilla@glandium.org>"
1367 criteria = "safe-to-deploy"
1368 delta = "1.0.11 -> 1.0.12"
1369
1370 [[audits.enumset]]
1371 who = "Mike Hommey <mh+mozilla@glandium.org>"
1372 criteria = "safe-to-deploy"
1373 delta = "1.0.12 -> 1.1.2"
1374
1375 [[audits.enumset_derive]]
1376 who = "Mike Hommey <mh+mozilla@glandium.org>"
1377 criteria = "safe-to-deploy"
1378 delta = "0.6.0 -> 0.6.1"
1379
1380 [[audits.enumset_derive]]
1381 who = "Mike Hommey <mh+mozilla@glandium.org>"
1382 criteria = "safe-to-deploy"
1383 delta = "0.6.1 -> 0.8.1"
1384
1385 [[audits.env_logger]]
1386 who = "Mike Hommey <mh+mozilla@glandium.org>"
1387 criteria = "safe-to-deploy"
1388 delta = "0.9.0 -> 0.9.3"
1389
1390 [[audits.env_logger]]
1391 who = "Nicolas Silva <nical@fastmail.com>"
1392 criteria = "safe-to-deploy"
1393 delta = "0.9.3 -> 0.10.0"
1394
1395 [[audits.errno]]
1396 who = "Mike Hommey <mh+mozilla@glandium.org>"
1397 criteria = "safe-to-deploy"
1398 delta = "0.3.1 -> 0.3.3"
1399
1400 [[audits.extend]]
1401 who = "Ben Dean-Kawamura <bdk@mozilla.com>"
1402 criteria = "safe-to-deploy"
1403 version = "1.1.2"
1404 notes = "Inspected the crate and noted that the impl block comes directly from the proc-macro input.  If no new code can be added by this crate, I don't think there can be any issues."
1405
1406 [[audits.extend]]
1407 who = "Mike Hommey <mh+mozilla@glandium.org>"
1408 criteria = "safe-to-deploy"
1409 delta = "1.1.2 -> 1.2.0"
1410
1411 [[audits.fallible_collections]]
1412 who = "Mike Hommey <mh+mozilla@glandium.org>"
1413 criteria = "safe-to-deploy"
1414 delta = "0.4.4 -> 0.4.5"
1415
1416 [[audits.fallible_collections]]
1417 who = "Mike Hommey <mh+mozilla@glandium.org>"
1418 criteria = "safe-to-deploy"
1419 delta = "0.4.5 -> 0.4.6"
1420 notes = "The changes in this version are mine."
1421
1422 [[audits.fastrand]]
1423 who = "Mike Hommey <mh+mozilla@glandium.org>"
1424 criteria = "safe-to-deploy"
1425 delta = "1.7.0 -> 1.8.0"
1426
1427 [[audits.fastrand]]
1428 who = "Mike Hommey <mh+mozilla@glandium.org>"
1429 criteria = "safe-to-deploy"
1430 delta = "1.8.0 -> 1.9.0"
1431
1432 [[audits.fastrand]]
1433 who = "Mike Hommey <mh+mozilla@glandium.org>"
1434 criteria = "safe-to-deploy"
1435 delta = "1.9.0 -> 2.0.0"
1436
1437 [[audits.filetime_win]]
1438 who = "Nick Alexander <nalexander@mozilla.com>"
1439 criteria = "safe-to-deploy"
1440 version = "0.2.0"
1441 notes = """
1442 filetime_win was written by Adam Gashlin for Mozilla's use.  The `unsafe` code
1443 blocks in filetime_win 0.2.0 are straight-forward invocations of `mem::zeroed`
1444 and expected invocations of Win32 APIs (with error handling as appropriate).
1445 """
1446
1447 [[audits.flagset]]
1448 who = "Ryan Hunt <rhunt@eqrion.net>"
1449 criteria = "safe-to-deploy"
1450 version = "0.4.3"
1451 notes = "Uses no ambient capabilities, vetted the one instance of unsafe."
1452
1453 [[audits.flate2]]
1454 who = "Mike Hommey <mh+mozilla@glandium.org>"
1455 criteria = "safe-to-deploy"
1456 delta = "1.0.24 -> 1.0.25"
1457
1458 [[audits.fluent]]
1459 who = "Zibi Braniecki <zibi@unicode.org>"
1460 criteria = "safe-to-deploy"
1461 version = "0.16.0"
1462
1463 [[audits.fluent-bundle]]
1464 who = "Zibi Braniecki <zibi@unicode.org>"
1465 criteria = "safe-to-deploy"
1466 version = "0.15.2"
1467
1468 [[audits.fluent-fallback]]
1469 who = "Zibi Braniecki <zibi@unicode.org>"
1470 criteria = "safe-to-deploy"
1471 version = "0.6.0"
1472
1473 [[audits.fluent-fallback]]
1474 who = "Greg Tatum <tatum.creative@gmail.com>"
1475 criteria = "safe-to-deploy"
1476 delta = "0.6.0 -> 0.7.0"
1477
1478 [[audits.fluent-langneg]]
1479 who = "Zibi Braniecki <zibi@unicode.org>"
1480 criteria = "safe-to-deploy"
1481 version = "0.13.0"
1482
1483 [[audits.fluent-pseudo]]
1484 who = "Zibi Braniecki <zibi@unicode.org>"
1485 criteria = "safe-to-deploy"
1486 version = "0.3.1"
1487
1488 [[audits.fluent-syntax]]
1489 who = "Zibi Braniecki <zibi@unicode.org>"
1490 criteria = "safe-to-deploy"
1491 version = "0.11.0"
1492
1493 [[audits.fluent-testing]]
1494 who = "Zibi Braniecki <zibi@unicode.org>"
1495 criteria = "safe-to-run"
1496 version = "0.0.2"
1497
1498 [[audits.fluent-testing]]
1499 who = "Greg Tatum <tatum.creative@gmail.com>"
1500 criteria = "safe-to-run"
1501 delta = "0.0.2 -> 0.0.3"
1502
1503 [[audits.fnv]]
1504 who = "Bobby Holley <bobbyholley@gmail.com>"
1505 criteria = "safe-to-deploy"
1506 version = "1.0.7"
1507 notes = "Simple hasher implementation with no unsafe code."
1508
1509 [[audits.foreign-types]]
1510 who = "Teodor Tanasoaia <ttanasoaia@mozilla.com>"
1511 criteria = "safe-to-deploy"
1512 delta = "0.3.2 -> 0.5.0"
1513
1514 [[audits.foreign-types-macros]]
1515 who = "Teodor Tanasoaia <ttanasoaia@mozilla.com>"
1516 criteria = "safe-to-deploy"
1517 version = "0.2.3"
1518
1519 [[audits.foreign-types-shared]]
1520 who = "Teodor Tanasoaia <ttanasoaia@mozilla.com>"
1521 criteria = "safe-to-deploy"
1522 delta = "0.1.1 -> 0.3.1"
1523
1524 [[audits.fs-err]]
1525 who = "Mike Hommey <mh+mozilla@glandium.org>"
1526 criteria = "safe-to-deploy"
1527 delta = "2.7.0 -> 2.8.1"
1528
1529 [[audits.fs-err]]
1530 who = "Mike Hommey <mh+mozilla@glandium.org>"
1531 criteria = "safe-to-deploy"
1532 delta = "2.8.1 -> 2.9.0"
1533
1534 [[audits.futures]]
1535 who = "Mike Hommey <mh+mozilla@glandium.org>"
1536 criteria = "safe-to-deploy"
1537 delta = "0.3.21 -> 0.3.23"
1538
1539 [[audits.futures]]
1540 who = "Mike Hommey <mh+mozilla@glandium.org>"
1541 criteria = "safe-to-deploy"
1542 delta = "0.3.23 -> 0.3.25"
1543
1544 [[audits.futures]]
1545 who = "Mike Hommey <mh+mozilla@glandium.org>"
1546 criteria = "safe-to-deploy"
1547 delta = "0.3.25 -> 0.3.26"
1548
1549 [[audits.futures]]
1550 who = "Mike Hommey <mh+mozilla@glandium.org>"
1551 criteria = "safe-to-deploy"
1552 delta = "0.3.26 -> 0.3.28"
1553
1554 [[audits.futures-channel]]
1555 who = "Mike Hommey <mh+mozilla@glandium.org>"
1556 criteria = "safe-to-deploy"
1557 delta = "0.3.21 -> 0.3.23"
1558
1559 [[audits.futures-channel]]
1560 who = "Mike Hommey <mh+mozilla@glandium.org>"
1561 criteria = "safe-to-deploy"
1562 delta = "0.3.23 -> 0.3.25"
1563
1564 [[audits.futures-channel]]
1565 who = "Mike Hommey <mh+mozilla@glandium.org>"
1566 criteria = "safe-to-deploy"
1567 delta = "0.3.25 -> 0.3.26"
1568
1569 [[audits.futures-channel]]
1570 who = "Bobby Holley <bobbyholley@gmail.com>"
1571 criteria = "safe-to-deploy"
1572 delta = "0.3.27 -> 0.3.26"
1573
1574 [[audits.futures-channel]]
1575 who = "Mike Hommey <mh+mozilla@glandium.org>"
1576 criteria = "safe-to-deploy"
1577 delta = "0.3.27 -> 0.3.28"
1578
1579 [[audits.futures-core]]
1580 who = "Mike Hommey <mh+mozilla@glandium.org>"
1581 criteria = "safe-to-deploy"
1582 delta = "0.3.21 -> 0.3.23"
1583
1584 [[audits.futures-core]]
1585 who = "Mike Hommey <mh+mozilla@glandium.org>"
1586 criteria = "safe-to-deploy"
1587 delta = "0.3.23 -> 0.3.25"
1588
1589 [[audits.futures-core]]
1590 who = "Mike Hommey <mh+mozilla@glandium.org>"
1591 criteria = "safe-to-deploy"
1592 delta = "0.3.25 -> 0.3.26"
1593
1594 [[audits.futures-core]]
1595 who = "Bobby Holley <bobbyholley@gmail.com>"
1596 criteria = "safe-to-deploy"
1597 delta = "0.3.27 -> 0.3.26"
1598
1599 [[audits.futures-core]]
1600 who = "Mike Hommey <mh+mozilla@glandium.org>"
1601 criteria = "safe-to-deploy"
1602 delta = "0.3.27 -> 0.3.28"
1603
1604 [[audits.futures-executor]]
1605 who = "Mike Hommey <mh+mozilla@glandium.org>"
1606 criteria = "safe-to-deploy"
1607 delta = "0.3.21 -> 0.3.23"
1608
1609 [[audits.futures-executor]]
1610 who = "Mike Hommey <mh+mozilla@glandium.org>"
1611 criteria = "safe-to-deploy"
1612 delta = "0.3.23 -> 0.3.25"
1613
1614 [[audits.futures-executor]]
1615 who = "Mike Hommey <mh+mozilla@glandium.org>"
1616 criteria = "safe-to-deploy"
1617 delta = "0.3.25 -> 0.3.26"
1618
1619 [[audits.futures-executor]]
1620 who = "Bobby Holley <bobbyholley@gmail.com>"
1621 criteria = "safe-to-deploy"
1622 delta = "0.3.27 -> 0.3.23"
1623
1624 [[audits.futures-executor]]
1625 who = "Mike Hommey <mh+mozilla@glandium.org>"
1626 criteria = "safe-to-deploy"
1627 delta = "0.3.27 -> 0.3.28"
1628
1629 [[audits.futures-io]]
1630 who = "Mike Hommey <mh+mozilla@glandium.org>"
1631 criteria = "safe-to-deploy"
1632 delta = "0.3.21 -> 0.3.23"
1633
1634 [[audits.futures-io]]
1635 who = "Mike Hommey <mh+mozilla@glandium.org>"
1636 criteria = "safe-to-deploy"
1637 delta = "0.3.23 -> 0.3.25"
1638
1639 [[audits.futures-io]]
1640 who = "Mike Hommey <mh+mozilla@glandium.org>"
1641 criteria = "safe-to-deploy"
1642 delta = "0.3.25 -> 0.3.26"
1643
1644 [[audits.futures-io]]
1645 who = "Bobby Holley <bobbyholley@gmail.com>"
1646 criteria = "safe-to-deploy"
1647 delta = "0.3.27 -> 0.3.23"
1648
1649 [[audits.futures-io]]
1650 who = "Mike Hommey <mh+mozilla@glandium.org>"
1651 criteria = "safe-to-deploy"
1652 delta = "0.3.27 -> 0.3.28"
1653
1654 [[audits.futures-macro]]
1655 who = "Mike Hommey <mh+mozilla@glandium.org>"
1656 criteria = "safe-to-deploy"
1657 delta = "0.3.21 -> 0.3.23"
1658
1659 [[audits.futures-macro]]
1660 who = "Mike Hommey <mh+mozilla@glandium.org>"
1661 criteria = "safe-to-deploy"
1662 delta = "0.3.23 -> 0.3.25"
1663
1664 [[audits.futures-macro]]
1665 who = "Mike Hommey <mh+mozilla@glandium.org>"
1666 criteria = "safe-to-deploy"
1667 delta = "0.3.25 -> 0.3.26"
1668
1669 [[audits.futures-macro]]
1670 who = "Mike Hommey <mh+mozilla@glandium.org>"
1671 criteria = "safe-to-deploy"
1672 delta = "0.3.26 -> 0.3.28"
1673
1674 [[audits.futures-sink]]
1675 who = "Mike Hommey <mh+mozilla@glandium.org>"
1676 criteria = "safe-to-deploy"
1677 delta = "0.3.21 -> 0.3.23"
1678
1679 [[audits.futures-sink]]
1680 who = "Mike Hommey <mh+mozilla@glandium.org>"
1681 criteria = "safe-to-deploy"
1682 delta = "0.3.23 -> 0.3.25"
1683
1684 [[audits.futures-sink]]
1685 who = "Mike Hommey <mh+mozilla@glandium.org>"
1686 criteria = "safe-to-deploy"
1687 delta = "0.3.25 -> 0.3.26"
1688
1689 [[audits.futures-sink]]
1690 who = "Bobby Holley <bobbyholley@gmail.com>"
1691 criteria = "safe-to-deploy"
1692 delta = "0.3.27 -> 0.3.23"
1693
1694 [[audits.futures-sink]]
1695 who = "Mike Hommey <mh+mozilla@glandium.org>"
1696 criteria = "safe-to-deploy"
1697 delta = "0.3.27 -> 0.3.28"
1698
1699 [[audits.futures-task]]
1700 who = "Mike Hommey <mh+mozilla@glandium.org>"
1701 criteria = "safe-to-deploy"
1702 delta = "0.3.21 -> 0.3.23"
1703
1704 [[audits.futures-task]]
1705 who = "Mike Hommey <mh+mozilla@glandium.org>"
1706 criteria = "safe-to-deploy"
1707 delta = "0.3.23 -> 0.3.25"
1708
1709 [[audits.futures-task]]
1710 who = "Mike Hommey <mh+mozilla@glandium.org>"
1711 criteria = "safe-to-deploy"
1712 delta = "0.3.25 -> 0.3.26"
1713
1714 [[audits.futures-task]]
1715 who = "Mike Hommey <mh+mozilla@glandium.org>"
1716 criteria = "safe-to-deploy"
1717 delta = "0.3.26 -> 0.3.28"
1718
1719 [[audits.futures-util]]
1720 who = "Mike Hommey <mh+mozilla@glandium.org>"
1721 criteria = "safe-to-deploy"
1722 delta = "0.3.21 -> 0.3.23"
1723
1724 [[audits.futures-util]]
1725 who = "Mike Hommey <mh+mozilla@glandium.org>"
1726 criteria = "safe-to-deploy"
1727 delta = "0.3.23 -> 0.3.25"
1728
1729 [[audits.futures-util]]
1730 who = "Mike Hommey <mh+mozilla@glandium.org>"
1731 criteria = "safe-to-deploy"
1732 delta = "0.3.25 -> 0.3.26"
1733
1734 [[audits.futures-util]]
1735 who = "Mike Hommey <mh+mozilla@glandium.org>"
1736 criteria = "safe-to-deploy"
1737 delta = "0.3.26 -> 0.3.28"
1738
1739 [[audits.fxhash]]
1740 who = "Bobby Holley <bobbyholley@gmail.com>"
1741 criteria = "safe-to-deploy"
1742 version = "0.2.1"
1743 notes = "Straightforward crate with no unsafe code, does what it says on the tin."
1744
1745 [[audits.generic-array]]
1746 who = "Mike Hommey <mh+mozilla@glandium.org>"
1747 criteria = "safe-to-deploy"
1748 delta = "0.14.5 -> 0.14.6"
1749
1750 [[audits.getrandom]]
1751 who = "Mike Hommey <mh+mozilla@glandium.org>"
1752 criteria = "safe-to-deploy"
1753 delta = "0.2.6 -> 0.2.7"
1754
1755 [[audits.getrandom]]
1756 who = "Mike Hommey <mh+mozilla@glandium.org>"
1757 criteria = "safe-to-deploy"
1758 delta = "0.2.7 -> 0.2.8"
1759
1760 [[audits.getrandom]]
1761 who = "Yannis Juglaret <yjuglaret@mozilla.com>"
1762 criteria = "safe-to-deploy"
1763 delta = "0.2.8 -> 0.2.9"
1764
1765 [[audits.gleam]]
1766 who = "Jamie Nicol <jnicol@mozilla.com>"
1767 criteria = "safe-to-deploy"
1768 delta = "0.13.1 -> 0.15.0"
1769
1770 [[audits.glob]]
1771 who = "Mike Hommey <mh+mozilla@glandium.org>"
1772 criteria = "safe-to-deploy"
1773 delta = "0.3.0 -> 0.3.1"
1774
1775 [[audits.glsl]]
1776 who = "Mike Hommey <mh+mozilla@glandium.org>"
1777 criteria = "safe-to-deploy"
1778 delta = "6.0.1 -> 6.0.2"
1779 notes = "I'm the author of the changes in this version of the crate."
1780
1781 [[audits.goblin]]
1782 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
1783 criteria = "safe-to-deploy"
1784 delta = "0.1.3 -> 0.5.4"
1785 notes = "Several bugfixes since 2019. This version is also in use by Mozilla's crash reporting tooling, e.g. minidump-writer"
1786
1787 [[audits.goblin]]
1788 who = "Gabriele Svelto <gsvelto@mozilla.com>"
1789 criteria = "safe-to-deploy"
1790 delta = "0.5.4 -> 0.6.0"
1791 notes = "Mostly bug fixes and some added functionality"
1792
1793 [[audits.goblin]]
1794 who = "Gabriele Svelto <gsvelto@mozilla.com>"
1795 criteria = "safe-to-deploy"
1796 delta = "0.6.0 -> 0.7.1"
1797
1798 [[audits.gpu-alloc]]
1799 who = "Teodor Tanasoaia <ttanasoaia@mozilla.com>"
1800 criteria = "safe-to-deploy"
1801 delta = "0.5.3 -> 0.6.0"
1802
1803 [[audits.gpu-alloc-types]]
1804 who = "Teodor Tanasoaia <ttanasoaia@mozilla.com>"
1805 criteria = "safe-to-deploy"
1806 delta = "0.2.0 -> 0.3.0"
1807
1808 [[audits.gpu-descriptor]]
1809 who = "Mike Hommey <mh+mozilla@glandium.org>"
1810 criteria = "safe-to-deploy"
1811 delta = "0.2.2 -> 0.2.3"
1812
1813 [[audits.guid_win]]
1814 who = "Bobby Holley <bobbyholley@gmail.com>"
1815 criteria = "safe-to-deploy"
1816 version = "0.2.0"
1817 notes = """
1818 This crate has some unsafe code for the FFI bits, which I've reviewed carefully.
1819 It uses the deprecated mem::uninitialized(), which is generally sketchy. However
1820 the usage is pretty straightforward and while it's technically UB, it seems no
1821 more likely to lead to miscompilation than any other use of mem::uninitialized.
1822 """
1823
1824 [[audits.h2]]
1825 who = "Mike Hommey <mh+mozilla@glandium.org>"
1826 criteria = "safe-to-run"
1827 delta = "0.3.13 -> 0.3.14"
1828
1829 [[audits.h2]]
1830 who = "Mike Hommey <mh+mozilla@glandium.org>"
1831 criteria = "safe-to-run"
1832 delta = "0.3.14 -> 0.3.15"
1833
1834 [[audits.half]]
1835 who = "John M. Schanck <jschanck@mozilla.com>"
1836 criteria = "safe-to-deploy"
1837 version = "1.8.2"
1838 notes = """
1839 This crate contains unsafe code for bitwise casts to/from binary16 floating-point
1840 format. I've reviewed these and found no issues. There are no uses of ambient
1841 capabilities.
1842 """
1843
1844 [[audits.hashbrown]]
1845 who = "Mike Hommey <mh+mozilla@glandium.org>"
1846 criteria = "safe-to-deploy"
1847 version = "0.12.3"
1848 notes = "This version is used in rust's libstd, so effectively we're already trusting it"
1849
1850 [[audits.hashlink]]
1851 who = "Mike Hommey <mh+mozilla@glandium.org>"
1852 criteria = "safe-to-deploy"
1853 delta = "0.7.0 -> 0.8.1"
1854
1855 [[audits.headers]]
1856 who = "Mike Hommey <mh+mozilla@glandium.org>"
1857 criteria = "safe-to-run"
1858 delta = "0.3.7 -> 0.3.8"
1859
1860 [[audits.headers-core]]
1861 who = "Bobby Holley <bobbyholley@gmail.com>"
1862 criteria = "safe-to-deploy"
1863 version = "0.2.0"
1864 notes = "Trivial crate, no unsafe code."
1865
1866 [[audits.heck]]
1867 who = "Mike Hommey <mh+mozilla@glandium.org>"
1868 criteria = "safe-to-deploy"
1869 delta = "0.4.0 -> 0.4.1"
1870
1871 [[audits.hermit-abi]]
1872 who = "Mike Hommey <mh+mozilla@glandium.org>"
1873 criteria = "safe-to-deploy"
1874 delta = "0.1.19 -> 0.2.6"
1875
1876 [[audits.hex]]
1877 who = "Simon Friedberger <simon@mozilla.com>"
1878 criteria = "safe-to-deploy"
1879 version = "0.4.3"
1880
1881 [[audits.http]]
1882 who = "Mike Hommey <mh+mozilla@glandium.org>"
1883 criteria = "safe-to-run"
1884 delta = "0.2.8 -> 0.2.9"
1885
1886 [[audits.httparse]]
1887 who = "Mike Hommey <mh+mozilla@glandium.org>"
1888 criteria = "safe-to-run"
1889 delta = "1.7.1 -> 1.8.0"
1890
1891 [[audits.hyper]]
1892 who = "Mike Hommey <mh+mozilla@glandium.org>"
1893 criteria = "safe-to-run"
1894 delta = "0.14.19 -> 0.14.20"
1895
1896 [[audits.hyper]]
1897 who = "Mike Hommey <mh+mozilla@glandium.org>"
1898 criteria = "safe-to-run"
1899 delta = "0.14.20 -> 0.14.22"
1900
1901 [[audits.hyper]]
1902 who = "Mike Hommey <mh+mozilla@glandium.org>"
1903 criteria = "safe-to-run"
1904 delta = "0.14.22 -> 0.14.23"
1905
1906 [[audits.hyper]]
1907 who = "Mike Hommey <mh+mozilla@glandium.org>"
1908 criteria = "safe-to-run"
1909 delta = "0.14.23 -> 0.14.24"
1910
1911 [[audits.icu_capi]]
1912 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
1913 criteria = "safe-to-deploy"
1914 version = "1.2.2"
1915 notes = "This crate is C/C++ FFI for ICU4X using diplomat crate. no unsafe and no file access etc on this crate."
1916
1917 [[audits.icu_collections]]
1918 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
1919 criteria = "safe-to-deploy"
1920 version = "1.2.0"
1921 notes = "This crate is used by ICU4X for internal data structure. There is no fileaccess and network access. This uses unsafe block, but we confirm data is valid before."
1922
1923 [[audits.icu_locid]]
1924 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
1925 criteria = "safe-to-deploy"
1926 version = "1.2.0"
1927 notes = "This has unsafe block to handle ascii string in utf-8 string. I've vetted the one instance of unsafe code."
1928
1929 [[audits.icu_provider]]
1930 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
1931 criteria = "safe-to-deploy"
1932 version = "1.2.0"
1933 notes = "Although this has unsafe block, this has a commnet why this is safety and I audited code. Also, this doesn't have file access and network access."
1934
1935 [[audits.icu_provider_adapters]]
1936 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
1937 criteria = "safe-to-deploy"
1938 version = "1.2.0"
1939 notes = "This is one of ICU4X data provider crates that depends on data type. This has no unsafe code and uses no ambient capabilities."
1940
1941 [[audits.icu_provider_macros]]
1942 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
1943 criteria = "safe-to-deploy"
1944 version = "1.2.0"
1945 notes = "This crate is macros for ICU4X's data provider implementer. This has no unsafe code and uses no ambient capabilities."
1946
1947 [[audits.icu_provider_macros]]
1948 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
1949 criteria = "safe-to-deploy"
1950 delta = "1.2.0 -> 1.2.0@git:14e9a3a9857be74582abe2dfa7ab799c5eaac873"
1951
1952 [[audits.icu_segmenter]]
1953 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
1954 criteria = "safe-to-deploy"
1955 version = "1.2.1"
1956 notes = "Original authors are Makoto Kato and Ting-Yu Lin who work at Mozilla. This crate uses unsafe to matrix calculation, but it is safety to check length. And there is no filesystem / network access."
1957
1958 [[audits.icu_testdata]]
1959 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
1960 criteria = "safe-to-deploy"
1961 version = "1.2.0"
1962 notes = "This is just ICU4X data only that is generated by ICU4X datagen. Generated data is in unsafe block to use zero-copy implmentation, but it is safety."
1963
1964 [[audits.idna]]
1965 who = "Bobby Holley <bobbyholley@gmail.com>"
1966 criteria = "safe-to-deploy"
1967 delta = "0.3.0 -> 0.2.3"
1968 notes = "Backwards diff with some algorithm changes, no unsafe code."
1969
1970 [[audits.indexmap]]
1971 who = "Mike Hommey <mh+mozilla@glandium.org>"
1972 criteria = "safe-to-deploy"
1973 delta = "1.8.2 -> 1.9.1"
1974
1975 [[audits.indexmap]]
1976 who = "Mike Hommey <mh+mozilla@glandium.org>"
1977 criteria = "safe-to-deploy"
1978 delta = "1.9.1 -> 1.9.2"
1979
1980 [[audits.inherent]]
1981 who = "Mike Hommey <mh+mozilla@glandium.org>"
1982 criteria = "safe-to-deploy"
1983 delta = "1.0.1 -> 1.0.2"
1984
1985 [[audits.inherent]]
1986 who = "Mike Hommey <mh+mozilla@glandium.org>"
1987 criteria = "safe-to-deploy"
1988 delta = "1.0.2 -> 1.0.3"
1989
1990 [[audits.inherent]]
1991 who = "Mike Hommey <mh+mozilla@glandium.org>"
1992 criteria = "safe-to-deploy"
1993 delta = "1.0.3 -> 1.0.4"
1994
1995 [[audits.inplace_it]]
1996 who = "Mike Hommey <mh+mozilla@glandium.org>"
1997 criteria = "safe-to-deploy"
1998 delta = "0.3.3 -> 0.3.4"
1999
2000 [[audits.intl-memoizer]]
2001 who = "Zibi Braniecki <zibi@unicode.org>"
2002 criteria = "safe-to-deploy"
2003 version = "0.5.1"
2004
2005 [[audits.intl_pluralrules]]
2006 who = "Zibi Braniecki <zibi@unicode.org>"
2007 criteria = "safe-to-deploy"
2008 version = "7.0.1"
2009
2010 [[audits.intl_pluralrules]]
2011 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
2012 criteria = "safe-to-deploy"
2013 delta = "7.0.1 -> 7.0.2"
2014
2015 [[audits.itertools]]
2016 who = "Mike Hommey <mh+mozilla@glandium.org>"
2017 criteria = "safe-to-deploy"
2018 delta = "0.10.3 -> 0.10.5"
2019
2020 [[audits.itoa]]
2021 who = "Mike Hommey <mh+mozilla@glandium.org>"
2022 criteria = "safe-to-deploy"
2023 delta = "1.0.2 -> 1.0.3"
2024
2025 [[audits.itoa]]
2026 who = "Mike Hommey <mh+mozilla@glandium.org>"
2027 criteria = "safe-to-deploy"
2028 delta = "1.0.3 -> 1.0.5"
2029
2030 [[audits.jobserver]]
2031 who = "Mike Hommey <mh+mozilla@glandium.org>"
2032 criteria = "safe-to-deploy"
2033 delta = "0.1.24 -> 0.1.25"
2034
2035 [[audits.keccak]]
2036 who = "Simon Friedberger <simon@mozilla.com>"
2037 criteria = "safe-to-deploy"
2038 delta = "0.1.2 -> 0.1.3"
2039
2040 [[audits.khronos-egl]]
2041 who = "Nicolas Silva <nical@fastmail.com>"
2042 criteria = "safe-to-deploy"
2043 delta = "4.1.0 -> 6.0.0"
2044
2045 [[audits.libc]]
2046 who = "Mike Hommey <mh+mozilla@glandium.org>"
2047 criteria = "safe-to-deploy"
2048 delta = "0.2.126 -> 0.2.132"
2049
2050 [[audits.libc]]
2051 who = "Mike Hommey <mh+mozilla@glandium.org>"
2052 criteria = "safe-to-deploy"
2053 delta = "0.2.132 -> 0.2.138"
2054
2055 [[audits.libc]]
2056 who = "Mike Hommey <mh+mozilla@glandium.org>"
2057 criteria = "safe-to-deploy"
2058 delta = "0.2.138 -> 0.2.139"
2059
2060 [[audits.libc]]
2061 who = "Mike Hommey <mh+mozilla@glandium.org>"
2062 criteria = "safe-to-deploy"
2063 delta = "0.2.147 -> 0.2.148"
2064
2065 [[audits.libloading]]
2066 who = "Mike Hommey <mh+mozilla@glandium.org>"
2067 criteria = "safe-to-deploy"
2068 delta = "0.7.3 -> 0.7.4"
2069
2070 [[audits.libm]]
2071 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
2072 criteria = "safe-to-deploy"
2073 version = "0.2.6"
2074 notes = "This crate uses unsafe block, but this doesn't have network and file access. I audited code."
2075
2076 [[audits.libsqlite3-sys]]
2077 who = "Ben Dean-Kawamura <bdk@mozilla.com>"
2078 criteria = "safe-to-deploy"
2079 delta = "0.25.2 -> 0.26.0"
2080
2081 [[audits.linked-hash-map]]
2082 who = "Aria Beingessner <a.beingessner@gmail.com>"
2083 criteria = "safe-to-deploy"
2084 version = "0.5.4"
2085 notes = "I own this crate (I am contain-rs) and 0.5.4 passes miri. This code is very old and used by lots of people, so I'm pretty confident in it, even though it's in maintenance-mode and missing some nice-to-have APIs."
2086
2087 [[audits.linked-hash-map]]
2088 who = "Mike Hommey <mh+mozilla@glandium.org>"
2089 criteria = "safe-to-run"
2090 delta = "0.5.4 -> 0.5.6"
2091
2092 [[audits.litemap]]
2093 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
2094 criteria = "safe-to-deploy"
2095 version = "0.7.0"
2096 notes = "This crete has no unsafe code, no file acceess and no network access."
2097
2098 [[audits.lmdb-rkv]]
2099 who = "Bobby Holley <bobbyholley@gmail.com>"
2100 criteria = "safe-to-deploy"
2101 version = "0.14.0"
2102 notes = "Victor and Myk developed this crate at Mozilla."
2103
2104 [[audits.lock_api]]
2105 who = "Mike Hommey <mh+mozilla@glandium.org>"
2106 criteria = "safe-to-deploy"
2107 delta = "0.4.7 -> 0.4.9"
2108
2109 [[audits.log]]
2110 who = "Mike Hommey <mh+mozilla@glandium.org>"
2111 criteria = "safe-to-deploy"
2112 version = "0.4.17"
2113
2114 [[audits.mach2]]
2115 who = "Gabriele Svelto <gsvelto@mozilla.com>"
2116 criteria = "safe-to-deploy"
2117 version = "0.4.1"
2118
2119 [[audits.malloc_buf]]
2120 who = "Bobby Holley <bobbyholley@gmail.com>"
2121 criteria = "safe-to-deploy"
2122 version = "0.0.6"
2123 notes = """
2124 Very small crate for managing malloc-ed buffers, primarily for use in the objc crate.
2125 There is an edge-case condition that passes slice::from_raw_parts(0x1, 0) which I'm
2126 not entirely certain is technically sound, but in either case I am reasonably confident
2127 it's not exploitable.
2128 """
2129
2130 [[audits.malloc_size_of_derive]]
2131 who = "Bobby Holley <bobbyholley@gmail.com>"
2132 criteria = "safe-to-deploy"
2133 version = "0.1.2"
2134 notes = """
2135 This was originally servo code which I put on crates.io some years ago but didn't
2136 examine at the time, so I examined it now. I didn't perform a full logic review
2137 but convinced myself that any generated code will be entirely safe to deploy.
2138 """
2139
2140 [[audits.matches]]
2141 who = "Bobby Holley <bobbyholley@gmail.com>"
2142 criteria = "safe-to-deploy"
2143 version = "0.1.9"
2144 notes = "This is a trivial crate."
2145
2146 [[audits.matches]]
2147 who = "Mike Hommey <mh+mozilla@glandium.org>"
2148 criteria = "safe-to-deploy"
2149 delta = "0.1.9 -> 0.1.10"
2150
2151 [[audits.md-5]]
2152 who = "Dana Keeler <dkeeler@mozilla.com>"
2153 criteria = "safe-to-deploy"
2154 version = "0.10.5"
2155
2156 [[audits.memmap2]]
2157 who = "Mike Hommey <mh+mozilla@glandium.org>"
2158 criteria = "safe-to-deploy"
2159 delta = "0.5.4 -> 0.5.7"
2160
2161 [[audits.memmap2]]
2162 who = "Mike Hommey <mh+mozilla@glandium.org>"
2163 criteria = "safe-to-deploy"
2164 delta = "0.5.7 -> 0.5.8"
2165
2166 [[audits.memmap2]]
2167 who = "Mike Hommey <mh+mozilla@glandium.org>"
2168 criteria = "safe-to-deploy"
2169 delta = "0.5.8 -> 0.5.9"
2170
2171 [[audits.memoffset]]
2172 who = "Gabriele Svelto <gsvelto@mozilla.com>"
2173 criteria = "safe-to-deploy"
2174 delta = "0.6.5 -> 0.7.1"
2175
2176 [[audits.memoffset]]
2177 who = "Gabriele Svelto <gsvelto@mozilla.com>"
2178 criteria = "safe-to-deploy"
2179 delta = "0.8.0 -> 0.9.0"
2180
2181 [[audits.metal]]
2182 who = "Jim Blandy <jimb@red-bean.com>"
2183 criteria = "safe-to-deploy"
2184 version = "0.23.1"
2185 notes = "This audit treats Dzmitry Malyshau (kvark) as a trusted reviewer."
2186
2187 [[audits.metal]]
2188 who = "Jim Blandy <jimb@red-bean.com>"
2189 criteria = "safe-to-deploy"
2190 delta = "0.23.1 -> 0.24.0"
2191 notes = "This audit treats Dzmitry Malyshau (kvark) as a trusted reviewer."
2192
2193 [[audits.metal]]
2194 who = "Teodor Tanasoaia <ttanasoaia@mozilla.com>"
2195 criteria = "safe-to-deploy"
2196 delta = "0.24.0 -> 0.25.0"
2197
2198 [[audits.metal]]
2199 who = "Erich Gubler <egubler@mozilla.com>"
2200 criteria = "safe-to-deploy"
2201 delta = "0.25.0 -> 0.26.0"
2202
2203 [[audits.metal]]
2204 who = "Nicolas Silva <nical@fastmail.com>"
2205 criteria = "safe-to-deploy"
2206 delta = "0.26.0 -> 0.26.0@git:d24f1a4ae92470bf87a0c65ecfe78c9299835505"
2207
2208 [[audits.midir]]
2209 who = "Bobby Holley <bobbyholley@gmail.com>"
2210 criteria = "safe-to-deploy"
2211 delta = "0.7.0 -> 0.7.0@git:519e651241e867af3391db08f9ae6400bc023e18"
2212
2213 [[audits.minidump-common]]
2214 who = "Gabriele Svelto <gsvelto@mozilla.com>"
2215 criteria = "safe-to-deploy"
2216 version = "0.15.2"
2217 notes = "The code in this crate was written or reviewed by Mozilla employees."
2218
2219 [[audits.minidump-common]]
2220 who = "Gabriele Svelto <gsvelto@mozilla.com>"
2221 criteria = "safe-to-deploy"
2222 delta = "0.15.2 -> 0.17.0"
2223
2224 [[audits.minidump-common]]
2225 who = "Mike Hommey <mh+mozilla@glandium.org>"
2226 criteria = "safe-to-deploy"
2227 delta = "0.17.0 -> 0.17.0@git:87a29fba5e19cfae5ebf73a57ba31504a3872545"
2228
2229 [[audits.minidump-common]]
2230 who = "Mike Hommey <mh+mozilla@glandium.org>"
2231 criteria = "safe-to-deploy"
2232 delta = "0.17.0@git:87a29fba5e19cfae5ebf73a57ba31504a3872545 -> 0.17.0@git:6ae42a7f992e8a88ebee661bc77bcedb95cd671f"
2233
2234 [[audits.minidump-writer]]
2235 who = "Gabriele Svelto <gsvelto@mozilla.com>"
2236 criteria = "safe-to-deploy"
2237 version = "0.7.0"
2238 notes = "The code in this crate was written or reviewed by Mozilla employees, the crate it evolved from was written specifically for gecko."
2239
2240 [[audits.minidump-writer]]
2241 who = "Alex Franchuk <afranchuk@mozilla.com>"
2242 criteria = "safe-to-deploy"
2243 delta = "0.7.0 -> 0.8.0"
2244 notes = "The code in this crate was written or reviewed by Mozilla employees, the crate it evolved from was written specifically for gecko."
2245
2246 [[audits.minidump-writer]]
2247 who = "Gabriele Svelto <gsvelto@mozilla.com>"
2248 criteria = "safe-to-deploy"
2249 delta = "0.8.0 -> 0.8.1"
2250
2251 [[audits.minidump-writer]]
2252 who = "Gabriele Svelto <gsvelto@mozilla.com>"
2253 criteria = "safe-to-deploy"
2254 delta = "0.8.1 -> 0.8.1@git:491eb330e78e310c32927e5cc3bd2350af1e93f8"
2255 notes = "All the changes were written by a Mozilla employee (me)"
2256
2257 [[audits.miniz_oxide]]
2258 who = "Mike Hommey <mh+mozilla@glandium.org>"
2259 criteria = "safe-to-deploy"
2260 delta = "0.5.3 -> 0.6.2"
2261
2262 [[audits.mio]]
2263 who = "Bobby Holley <bobbyholley@gmail.com>"
2264 criteria = "safe-to-run"
2265 delta = "0.6.21 -> 0.6.23"
2266
2267 [[audits.mio]]
2268 who = "Mike Hommey <mh+mozilla@glandium.org>"
2269 criteria = "safe-to-deploy"
2270 delta = "0.8.0 -> 0.8.6"
2271
2272 [[audits.moz_cbor]]
2273 who = "Bobby Holley <bobbyholley@gmail.com>"
2274 criteria = "safe-to-deploy"
2275 version = "0.1.2"
2276 notes = "Developed by Mozilla staff."
2277
2278 [[audits.naga]]
2279 who = "Dzmitry Malyshau <kvark@fastmail.com>"
2280 criteria = "safe-to-deploy"
2281 version = "0.8.0"
2282 notes = """
2283 This crate, up through the indicated version, was written or reviewed
2284 by Dzmitry Malyshau while he was a Mozilla employee. Dzmitry left
2285 Mozilla at the beginning of February 2022. This audit statement was
2286 collected by Jim Blandy, a Mozilla employee, over email in July 2022:
2287 Dzmitry was shown, and agreed to, the 'safe-to-deploy' text.
2288 """
2289
2290 [[audits.naga]]
2291 who = "Jim Blandy <jimb@red-bean.com>"
2292 criteria = "safe-to-deploy"
2293 delta = "0.8.0 -> 0.9.0"
2294
2295 [[audits.naga]]
2296 who = "Jim Blandy <jimb@red-bean.com>"
2297 criteria = "safe-to-deploy"
2298 delta = "0.9.0 -> 0.10.0"
2299
2300 [[audits.naga]]
2301 who = "Nicolas Silva <nical@fastmail.com>"
2302 criteria = "safe-to-deploy"
2303 delta = "0.10.0 -> 0.10.0@git:e98bd9264c3a6b04dff15a6b1213c0c80201740a"
2304
2305 [[audits.naga]]
2306 who = "Nicolas Silva <nical@fastmail.com>"
2307 criteria = "safe-to-deploy"
2308 delta = "0.10.0@git:1be8024bda3594987b417bead5024b98be9ab521 -> 0.11.0@git:f0edae8ce9e55eeef489fc53b10dc95fb79561cc"
2309
2310 [[audits.naga]]
2311 who = "Nicolas Silva <nical@fastmail.com>"
2312 criteria = "safe-to-deploy"
2313 delta = "0.10.0@git:e98bd9264c3a6b04dff15a6b1213c0c80201740a -> 0.10.0@git:1be8024bda3594987b417bead5024b98be9ab521"
2314
2315 [[audits.naga]]
2316 who = "Nicolas Silva <nical@fastmail.com>"
2317 criteria = "safe-to-deploy"
2318 delta = "0.11.0@git:4b796b157cb2b67b0ab166a2238fe4e9473bfd52 -> 0.11.0@git:9742f1616c3e3dd2cc9a5880616fc886c391bb9f"
2319
2320 [[audits.naga]]
2321 who = "Nicolas Silva <nical@fastmail.com>"
2322 criteria = "safe-to-deploy"
2323 delta = "0.11.0@git:9742f1616c3e3dd2cc9a5880616fc886c391bb9f -> 0.11.0@git:f59668ccfaf7bdb3a7e43d84363a21c77357b2fe"
2324
2325 [[audits.naga]]
2326 who = "Nicolas Silva <nical@fastmail.com>"
2327 criteria = "safe-to-deploy"
2328 delta = "0.11.0@git:f0edae8ce9e55eeef489fc53b10dc95fb79561cc -> 0.11.0@git:4b796b157cb2b67b0ab166a2238fe4e9473bfd52"
2329
2330 [[audits.naga]]
2331 who = "Nicolas Silva <nical@fastmail.com>"
2332 criteria = "safe-to-deploy"
2333 delta = "0.11.0@git:f59668ccfaf7bdb3a7e43d84363a21c77357b2fe -> 0.12.0@git:b99d58ea435090e561377949f428bce2c18451bb"
2334
2335 [[audits.naga]]
2336 who = "Erich Gubler <egubler@mozilla.com"
2337 criteria = "safe-to-deploy"
2338 delta = "0.12.0@git:409239c0e2313bfd0dc4fd64f8c3021185ccef1b -> 0.13.0@git:bac2d82a430fbfcf100ee22b7c3bc12f3d593079"
2339
2340 [[audits.naga]]
2341 who = "Nicolas Silva <nical@fastmail.com>"
2342 criteria = "safe-to-deploy"
2343 delta = "0.12.0@git:76003dc0035d53a474d366dcdf49d2e4d12e921f -> 0.12.0@git:409239c0e2313bfd0dc4fd64f8c3021185ccef1b"
2344
2345 [[audits.naga]]
2346 who = "Teodor Tanasoaia <ttanasoaia@mozilla.com>"
2347 criteria = "safe-to-deploy"
2348 delta = "0.12.0@git:b99d58ea435090e561377949f428bce2c18451bb -> 0.12.0@git:76003dc0035d53a474d366dcdf49d2e4d12e921f"
2349
2350 [[audits.naga]]
2351 who = "Nicolas Silva <nical@fastmail.com>"
2352 criteria = "safe-to-deploy"
2353 delta = "0.13.0@git:6668d0694cc51ee66c71c2ca3a1ab1081956299b -> 0.13.0@git:33b75a27d93c6574b11b4dd4492b85b5783d6c52"
2354
2355 [[audits.naga]]
2356 who = "Nicolas Silva <nical@fastmail.com>"
2357 criteria = "safe-to-deploy"
2358 delta = "0.13.0@git:7a19f3af909202c7eafd36633b5584bfbb353ecb -> 0.13.0@git:cc87b8f9eb30bb55d0735b89d3df3e099e1a6e7c"
2359
2360 [[audits.naga]]
2361 who = "Erich Gubler <egubler@mozilla.com"
2362 criteria = "safe-to-deploy"
2363 delta = "0.13.0@git:bac2d82a430fbfcf100ee22b7c3bc12f3d593079 -> 0.13.0@git:7a19f3af909202c7eafd36633b5584bfbb353ecb"
2364
2365 [[audits.naga]]
2366 who = "Nicolas Silva <nical@fastmail.com>"
2367 criteria = "safe-to-deploy"
2368 delta = "0.13.0@git:cc87b8f9eb30bb55d0735b89d3df3e099e1a6e7c -> 0.13.0@git:df8107b78812cc2b1e3d5de35279cedc1f0da3fb"
2369
2370 [[audits.naga]]
2371 who = "Nicolas Silva <nical@fastmail.com>"
2372 criteria = "safe-to-deploy"
2373 delta = "0.13.0@git:df8107b78812cc2b1e3d5de35279cedc1f0da3fb -> 0.13.0@git:6668d0694cc51ee66c71c2ca3a1ab1081956299b"
2374
2375 [[audits.net2]]
2376 who = "Mike Hommey <mh+mozilla@glandium.org>"
2377 criteria = "safe-to-run"
2378 delta = "0.2.37 -> 0.2.38"
2379
2380 [[audits.new_debug_unreachable]]
2381 who = "Bobby Holley <bobbyholley@gmail.com>"
2382 criteria = "safe-to-deploy"
2383 version = "1.0.4"
2384 notes = "This is a trivial crate."
2385
2386 [[audits.nix]]
2387 who = "Gabriele Svelto <gsvelto@mozilla.com>"
2388 criteria = "safe-to-deploy"
2389 delta = "0.15.0 -> 0.25.0"
2390 notes = "Plenty of new bindings but also several important bug fixes (including buffer overflows). New unsafe sections are restricted to wrappers and are no more dangerous than calling the C functions."
2391
2392 [[audits.nix]]
2393 who = "Mike Hommey <mh+mozilla@glandium.org>"
2394 criteria = "safe-to-deploy"
2395 delta = "0.25.0 -> 0.25.1"
2396
2397 [[audits.nix]]
2398 who = "Mike Hommey <mh+mozilla@glandium.org>"
2399 criteria = "safe-to-deploy"
2400 delta = "0.25.1 -> 0.26.2"
2401
2402 [[audits.nom]]
2403 who = "Mike Hommey <mh+mozilla@glandium.org>"
2404 criteria = "safe-to-deploy"
2405 delta = "7.1.1 -> 7.1.3"
2406
2407 [[audits.nss-gk-api]]
2408 who = "John M. Schanck <jschanck@mozilla.com>"
2409 criteria = "safe-to-deploy"
2410 version = "0.2.1"
2411 notes = "Maintained by the CryptoEng team at Mozilla."
2412
2413 [[audits.ntapi]]
2414 who = "Mike Hommey <mh+mozilla@glandium.org>"
2415 criteria = "safe-to-deploy"
2416 delta = "0.3.7 -> 0.4.0"
2417
2418 [[audits.num]]
2419 who = "Josh Stone <jistone@redhat.com>"
2420 criteria = "safe-to-deploy"
2421 version = "0.4.0"
2422 notes = "All code written or reviewed by Josh Stone."
2423
2424 [[audits.num-bigint]]
2425 who = "Josh Stone <jistone@redhat.com>"
2426 criteria = "safe-to-deploy"
2427 version = "0.2.6"
2428 notes = "All code written or reviewed by Josh Stone."
2429
2430 [[audits.num-bigint]]
2431 who = "Josh Stone <jistone@redhat.com>"
2432 criteria = "safe-to-deploy"
2433 version = "0.4.3"
2434 notes = "All code written or reviewed by Josh Stone."
2435
2436 [[audits.num-complex]]
2437 who = "Josh Stone <jistone@redhat.com>"
2438 criteria = "safe-to-deploy"
2439 version = "0.4.2"
2440 notes = "All code written or reviewed by Josh Stone."
2441
2442 [[audits.num-derive]]
2443 who = "Josh Stone <jistone@redhat.com>"
2444 criteria = "safe-to-deploy"
2445 version = "0.3.3"
2446 notes = "All code written or reviewed by Josh Stone."
2447
2448 [[audits.num-derive]]
2449 who = "Mike Hommey <mh+mozilla@glandium.org>"
2450 criteria = "safe-to-deploy"
2451 delta = "0.3.3 -> 0.4.0"
2452
2453 [[audits.num-integer]]
2454 who = "Josh Stone <jistone@redhat.com>"
2455 criteria = "safe-to-deploy"
2456 version = "0.1.45"
2457 notes = "All code written or reviewed by Josh Stone."
2458
2459 [[audits.num-iter]]
2460 who = "Josh Stone <jistone@redhat.com>"
2461 criteria = "safe-to-deploy"
2462 version = "0.1.43"
2463 notes = "All code written or reviewed by Josh Stone."
2464
2465 [[audits.num-macros]]
2466 who = "Josh Stone <jistone@redhat.com>"
2467 criteria = "safe-to-deploy"
2468 version = "0.1.40"
2469 notes = "All code written or reviewed by Josh Stone."
2470
2471 [[audits.num-rational]]
2472 who = "Josh Stone <jistone@redhat.com>"
2473 criteria = "safe-to-deploy"
2474 version = "0.4.1"
2475 notes = "All code written or reviewed by Josh Stone."
2476
2477 [[audits.num-traits]]
2478 who = "Josh Stone <jistone@redhat.com>"
2479 criteria = "safe-to-deploy"
2480 version = "0.2.15"
2481 notes = "All code written or reviewed by Josh Stone."
2482
2483 [[audits.num_cpus]]
2484 who = "Mike Hommey <mh+mozilla@glandium.org>"
2485 criteria = "safe-to-deploy"
2486 delta = "1.13.1 -> 1.14.0"
2487
2488 [[audits.num_cpus]]
2489 who = "Mike Hommey <mh+mozilla@glandium.org>"
2490 criteria = "safe-to-deploy"
2491 delta = "1.14.0 -> 1.15.0"
2492
2493 [[audits.object]]
2494 who = "Mike Hommey <mh+mozilla@glandium.org>"
2495 criteria = "safe-to-deploy"
2496 delta = "0.28.4 -> 0.30.0"
2497
2498 [[audits.object]]
2499 who = "Mike Hommey <mh+mozilla@glandium.org>"
2500 criteria = "safe-to-deploy"
2501 delta = "0.30.0 -> 0.30.3"
2502
2503 [[audits.once_cell]]
2504 who = "Mike Hommey <mh+mozilla@glandium.org>"
2505 criteria = "safe-to-deploy"
2506 delta = "1.12.0 -> 1.13.1"
2507
2508 [[audits.once_cell]]
2509 who = "Mike Hommey <mh+mozilla@glandium.org>"
2510 criteria = "safe-to-deploy"
2511 delta = "1.13.1 -> 1.16.0"
2512
2513 [[audits.once_cell]]
2514 who = "Mike Hommey <mh+mozilla@glandium.org>"
2515 criteria = "safe-to-deploy"
2516 delta = "1.16.0 -> 1.17.1"
2517
2518 [[audits.ordered-float]]
2519 who = "Mike Hommey <mh+mozilla@glandium.org>"
2520 criteria = "safe-to-deploy"
2521 delta = "3.0.0 -> 3.4.0"
2522
2523 [[audits.origin-trial-token]]
2524 who = "Emilio Cobos Álvarez <emilio@crisal.io>"
2525 criteria = "safe-to-deploy"
2526 version = "0.1.1"
2527 notes = """
2528 I'm the author of the crate. The only unsafe code is a view over a byte array
2529 which is properly validated.
2530
2531 Cryptography shenanigans are delegated to the caller so there's no possible
2532 unsoundness there.
2533 """
2534
2535 [[audits.os_str_bytes]]
2536 who = "Mike Hommey <mh+mozilla@glandium.org>"
2537 criteria = "safe-to-deploy"
2538 delta = "6.1.0 -> 6.3.0"
2539
2540 [[audits.os_str_bytes]]
2541 who = "Mike Hommey <mh+mozilla@glandium.org>"
2542 criteria = "safe-to-deploy"
2543 delta = "6.3.0 -> 6.4.1"
2544
2545 [[audits.packed_simd]]
2546 who = "Henri Sivonen <hsivonen@hsivonen.fi>"
2547 criteria = "safe-to-deploy"
2548 delta = "0.3.8 -> 0.3.9"
2549 notes = "The update from 0.3.8 to 0.3.9 makes mechanical changes to accommodate renaming, compiler updates, and CI service updates."
2550
2551 [[audits.packed_simd]]
2552 who = "Henri Sivonen <hsivonen@hsivonen.fi>"
2553 criteria = "safe-to-deploy"
2554 delta = "0.3.9 -> 0.3.9@git:e588ceb568878e1a3156ea9ce551d5b63ef0cdc4"
2555 notes = "The patch on top of crates.io version 0.3.9 merely deletes code for a feature that Firefox does not use."
2556
2557 [[audits.packed_simd_2]]
2558 who = "Mike Hommey <mh+mozilla@glandium.org>"
2559 criteria = "safe-to-deploy"
2560 delta = "0.3.7 -> 0.3.8"
2561
2562 [[audits.packed_simd_2]]
2563 who = "Bobby Holley <bobbyholley@gmail.com>"
2564 criteria = "safe-to-deploy"
2565 delta = "0.3.8 -> 0.3.8@git:412f9a0aa556611de021bde89dee8fefe6e0fbbd"
2566
2567 [[audits.parking_lot_core]]
2568 who = "Mike Hommey <mh+mozilla@glandium.org>"
2569 criteria = "safe-to-deploy"
2570 delta = "0.8.5 -> 0.8.6"
2571
2572 [[audits.paste]]
2573 who = "Mike Hommey <mh+mozilla@glandium.org>"
2574 criteria = "safe-to-deploy"
2575 delta = "1.0.7 -> 1.0.8"
2576
2577 [[audits.paste]]
2578 who = "Mike Hommey <mh+mozilla@glandium.org>"
2579 criteria = "safe-to-deploy"
2580 delta = "1.0.8 -> 1.0.11"
2581
2582 [[audits.peeking_take_while]]
2583 who = "Bobby Holley <bobbyholley@gmail.com>"
2584 criteria = "safe-to-deploy"
2585 delta = "1.0.0 -> 0.1.2"
2586 notes = "Small refactor of some simple iterator logic, no unsafe code or capabilities."
2587
2588 [[audits.phf]]
2589 who = "Mike Hommey <mh+mozilla@glandium.org>"
2590 criteria = "safe-to-deploy"
2591 delta = "0.10.1 -> 0.11.2"
2592
2593 [[audits.phf_codegen]]
2594 who = "Mike Hommey <mh+mozilla@glandium.org>"
2595 criteria = "safe-to-deploy"
2596 delta = "0.10.0 -> 0.11.2"
2597
2598 [[audits.phf_generator]]
2599 who = "Mike Hommey <mh+mozilla@glandium.org>"
2600 criteria = "safe-to-deploy"
2601 delta = "0.10.0 -> 0.11.2"
2602
2603 [[audits.phf_macros]]
2604 who = "Mike Hommey <mh+mozilla@glandium.org>"
2605 criteria = "safe-to-deploy"
2606 delta = "0.10.0 -> 0.11.2"
2607
2608 [[audits.phf_shared]]
2609 who = "Mike Hommey <mh+mozilla@glandium.org>"
2610 criteria = "safe-to-deploy"
2611 delta = "0.10.0 -> 0.11.2"
2612
2613 [[audits.pin-project]]
2614 who = "Mike Hommey <mh+mozilla@glandium.org>"
2615 criteria = "safe-to-run"
2616 delta = "1.0.10 -> 1.0.12"
2617
2618 [[audits.pin-project]]
2619 who = "Mike Hommey <mh+mozilla@glandium.org>"
2620 criteria = "safe-to-run"
2621 delta = "1.0.12 -> 1.1.0"
2622
2623 [[audits.pin-project-internal]]
2624 who = "Mike Hommey <mh+mozilla@glandium.org>"
2625 criteria = "safe-to-run"
2626 delta = "1.0.10 -> 1.0.12"
2627
2628 [[audits.pin-project-internal]]
2629 who = "Mike Hommey <mh+mozilla@glandium.org>"
2630 criteria = "safe-to-run"
2631 delta = "1.0.12 -> 1.1.0"
2632
2633 [[audits.pkcs11-bindings]]
2634 who = "Dana Keeler <dkeeler@mozilla.com>"
2635 criteria = "safe-to-deploy"
2636 version = "0.1.0"
2637 notes = """
2638 This crate consists of declarations of types and constants that are
2639 auto-generated by running bindgen on the PKCS#11 specification headers. Other
2640 than the tests generated by bindgen, it consists of no runnable code.
2641 """
2642
2643 [[audits.pkcs11-bindings]]
2644 who = "John M. Schanck <jmschanck@gmail.com>"
2645 criteria = "safe-to-deploy"
2646 version = "0.1.1"
2647
2648 [[audits.pkcs11-bindings]]
2649 who = "Mike Hommey <mh+mozilla@glandium.org>"
2650 criteria = "safe-to-deploy"
2651 delta = "0.1.1 -> 0.1.4"
2652
2653 [[audits.pkcs11-bindings]]
2654 who = "Mike Hommey <mh+mozilla@glandium.org>"
2655 criteria = "safe-to-deploy"
2656 delta = "0.1.4 -> 0.1.5"
2657
2658 [[audits.pkg-config]]
2659 who = "Mike Hommey <mh+mozilla@glandium.org>"
2660 criteria = "safe-to-deploy"
2661 delta = "0.3.25 -> 0.3.26"
2662
2663 [[audits.plane-split]]
2664 who = "Nicolas Silva <nical@fastmail.com>"
2665 criteria = "safe-to-deploy"
2666 version = "0.18.0"
2667 notes = "Mozilla-developed package, no unsafe code, no access to file system, network or other far reaching APIs."
2668
2669 [[audits.ppv-lite86]]
2670 who = "Mike Hommey <mh+mozilla@glandium.org>"
2671 criteria = "safe-to-deploy"
2672 delta = "0.2.16 -> 0.2.17"
2673
2674 [[audits.precomputed-hash]]
2675 who = "Bobby Holley <bobbyholley@gmail.com>"
2676 criteria = "safe-to-deploy"
2677 version = "0.1.1"
2678 notes = "This is a trivial crate."
2679
2680 [[audits.prio]]
2681 who = "Simon Friedberger <simon@mozilla.com>"
2682 criteria = "safe-to-deploy"
2683 version = "0.8.4"
2684 notes = "The crate does not use any unsafe code or ambient capabilities and thus meets the criteria for safe-to-deploy. The cryptography itself should be considered experimental at this phase and is currently undergoing a thorough audit organized by Cloudflare."
2685
2686 [[audits.prio]]
2687 who = "Simon Friedberger <simon@mozilla.com>"
2688 criteria = "safe-to-deploy"
2689 version = "0.9.1"
2690
2691 [[audits.proc-macro-hack]]
2692 who = "Mike Hommey <mh+mozilla@glandium.org>"
2693 criteria = "safe-to-deploy"
2694 delta = "0.5.19 -> 0.5.20+deprecated"
2695
2696 [[audits.proc-macro2]]
2697 who = "Nika Layzell <nika@thelayzells.com>"
2698 criteria = "safe-to-deploy"
2699 version = "1.0.39"
2700 notes = """
2701 `proc-macro2` acts as either a thin(-ish) wrapper around the std-provided
2702 `proc_macro` crate, or as a fallback implementation of the crate, depending on
2703 where it is used.
2704
2705 If using this crate on older versions of rustc (1.56 and earlier), it will
2706 temporarily replace the panic handler while initializing in order to detect if
2707 it is running within a `proc_macro`, which could lead to surprising behaviour.
2708 This should not be an issue for more recent compiler versions, which support
2709 `proc_macro::is_available()`.
2710
2711 The `proc-macro2` crate's fallback behaviour is not identical to the complex
2712 behaviour of the rustc compiler (e.g. it does not perform unicode normalization
2713 for identifiers), however it behaves well enough for its intended use-case
2714 (tests and scripts processing rust code).
2715
2716 `proc-macro2` does not use unsafe code, however exposes one `unsafe` API to
2717 allow bypassing checks in the fallback implementation when constructing
2718 `Literal` using `from_str_unchecked`. This was intended to only be used by the
2719 `quote!` macro, however it has been removed
2720 (https://github.com/dtolnay/quote/commit/f621fe64a8a501cae8e95ebd6848e637bbc79078),
2721 and is likely completely unused. Even when used, this API shouldn't be able to
2722 cause unsoundness.
2723 """
2724
2725 [[audits.proc-macro2]]
2726 who = "Mike Hommey <mh+mozilla@glandium.org>"
2727 criteria = "safe-to-deploy"
2728 delta = "1.0.39 -> 1.0.43"
2729
2730 [[audits.proc-macro2]]
2731 who = "Mike Hommey <mh+mozilla@glandium.org>"
2732 criteria = "safe-to-deploy"
2733 delta = "1.0.43 -> 1.0.49"
2734
2735 [[audits.proc-macro2]]
2736 who = "Mike Hommey <mh+mozilla@glandium.org>"
2737 criteria = "safe-to-deploy"
2738 delta = "1.0.49 -> 1.0.51"
2739
2740 [[audits.procfs-core]]
2741 who = "Gabriele Svelto <gsvelto@mozilla.com>"
2742 criteria = "safe-to-deploy"
2743 version = "0.16.0-RC1"
2744
2745 [[audits.profiling]]
2746 who = "Mike Hommey <mh+mozilla@glandium.org>"
2747 criteria = "safe-to-deploy"
2748 delta = "1.0.6 -> 1.0.7"
2749
2750 [[audits.prost]]
2751 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
2752 criteria = "safe-to-deploy"
2753 delta = "0.8.0 -> 0.11.9"
2754 notes = "Mostly internal refactorings. Minimal new unsafe code, but with the invariants explicitly checked in code"
2755
2756 [[audits.prost]]
2757 who = "Drew Willcoxon <adw@mozilla.com>"
2758 criteria = "safe-to-deploy"
2759 delta = "0.11.9 -> 0.12.1"
2760
2761 [[audits.prost-derive]]
2762 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
2763 criteria = "safe-to-deploy"
2764 delta = "0.8.0 -> 0.11.9"
2765 notes = "Documentation and internal refactoring changes only"
2766
2767 [[audits.prost-derive]]
2768 who = "Mike Hommey <mh+mozilla@glandium.org>"
2769 criteria = "safe-to-deploy"
2770 delta = "0.11.9 -> 0.11.9@git:95964e9d33df3c2a9c3f14285e262867cab6f96b"
2771 notes = "Changes against 0.11.9 are mine."
2772
2773 [[audits.prost-derive]]
2774 who = "Drew Willcoxon <adw@mozilla.com>"
2775 criteria = "safe-to-deploy"
2776 delta = "0.11.9 -> 0.12.1"
2777
2778 [[audits.qcms]]
2779 who = "Jeff Muizelaar <jmuizelaar@mozilla.com>"
2780 criteria = "safe-to-deploy"
2781 version = "0.2.0"
2782
2783 [[audits.quote]]
2784 who = "Nika Layzell <nika@thelayzells.com>"
2785 criteria = "safe-to-deploy"
2786 version = "1.0.18"
2787 notes = """
2788 `quote` is a utility crate used by proc-macros to generate TokenStreams
2789 conveniently from source code. The bulk of the logic is some complex
2790 interlocking `macro_rules!` macros which are used to parse and build the
2791 `TokenStream` within the proc-macro.
2792
2793 This crate contains no unsafe code, and the internal logic, while difficult to
2794 read, is generally straightforward. I have audited the the quote macros, ident
2795 formatter, and runtime logic.
2796 """
2797
2798 [[audits.quote]]
2799 who = "Mike Hommey <mh+mozilla@glandium.org>"
2800 criteria = "safe-to-deploy"
2801 delta = "1.0.18 -> 1.0.21"
2802
2803 [[audits.quote]]
2804 who = "Mike Hommey <mh+mozilla@glandium.org>"
2805 criteria = "safe-to-deploy"
2806 delta = "1.0.21 -> 1.0.23"
2807
2808 [[audits.radium]]
2809 who = "Nika Layzell <nika@thelayzells.com>"
2810 criteria = "safe-to-deploy"
2811 version = "0.5.3"
2812 notes = """
2813 I am no longer the primary maintainer of `radium`, however I have audited the
2814 code to ensure it is still correct. The implementation contains no `unsafe`
2815 logic, and will not abstract away `Sync` trait bounds.
2816
2817 The core logic is very simple, and acts as an abstraction trait for `Cell<T>`
2818 and `AtomicT`.
2819 """
2820
2821 [[audits.rand_core]]
2822 who = "Mike Hommey <mh+mozilla@glandium.org>"
2823 criteria = "safe-to-deploy"
2824 delta = "0.6.3 -> 0.6.4"
2825
2826 [[audits.range-alloc]]
2827 who = "Bobby Holley <bobbyholley@gmail.com>"
2828 criteria = "safe-to-deploy"
2829 version = "0.1.2"
2830 notes = "Dzmitry authored this crate while he was staff at Mozilla."
2831
2832 [[audits.range-alloc]]
2833 who = "Mike Hommey <mh+mozilla@glandium.org>"
2834 criteria = "safe-to-deploy"
2835 delta = "0.1.2 -> 0.1.3"
2836
2837 [[audits.range-map]]
2838 who = "Gabriele Svelto <gsvelto@mozilla.com>"
2839 criteria = "safe-to-deploy"
2840 version = "0.2.0"
2841
2842 [[audits.raw-window-handle]]
2843 who = "Jim Blandy <jimb@red-bean.com>"
2844 criteria = "safe-to-deploy"
2845 version = "0.5.0"
2846 notes = "I looked through all the sources of the v0.5.0 crate."
2847
2848 [[audits.raw-window-handle]]
2849 who = "Mike Hommey <mh+mozilla@glandium.org>"
2850 criteria = "safe-to-deploy"
2851 delta = "0.5.0 -> 0.5.2"
2852
2853 [[audits.rayon]]
2854 who = "Josh Stone <jistone@redhat.com>"
2855 criteria = "safe-to-deploy"
2856 version = "1.5.3"
2857 notes = "All code written or reviewed by Josh Stone or Niko Matsakis."
2858
2859 [[audits.rayon]]
2860 who = "Mike Hommey <mh+mozilla@glandium.org>"
2861 criteria = "safe-to-deploy"
2862 delta = "1.5.3 -> 1.6.1"
2863
2864 [[audits.rayon-core]]
2865 who = "Josh Stone <jistone@redhat.com>"
2866 criteria = "safe-to-deploy"
2867 version = "1.9.3"
2868 notes = "All code written or reviewed by Josh Stone or Niko Matsakis."
2869
2870 [[audits.rayon-core]]
2871 who = "Mike Hommey <mh+mozilla@glandium.org>"
2872 criteria = "safe-to-deploy"
2873 delta = "1.9.3 -> 1.10.1"
2874
2875 [[audits.rayon-core]]
2876 who = "Mike Hommey <mh+mozilla@glandium.org>"
2877 criteria = "safe-to-deploy"
2878 delta = "1.10.1 -> 1.10.2"
2879
2880 [[audits.redox_syscall]]
2881 who = "Mike Hommey <mh+mozilla@glandium.org>"
2882 criteria = "safe-to-deploy"
2883 delta = "0.2.13 -> 0.2.16"
2884
2885 [[audits.regex]]
2886 who = "Mike Hommey <mh+mozilla@glandium.org>"
2887 criteria = "safe-to-deploy"
2888 delta = "1.5.6 -> 1.6.0"
2889
2890 [[audits.regex]]
2891 who = "Mike Hommey <mh+mozilla@glandium.org>"
2892 criteria = "safe-to-deploy"
2893 delta = "1.6.0 -> 1.7.0"
2894
2895 [[audits.regex]]
2896 who = "Mike Hommey <mh+mozilla@glandium.org>"
2897 criteria = "safe-to-deploy"
2898 delta = "1.7.0 -> 1.7.1"
2899
2900 [[audits.regex-syntax]]
2901 who = "Mike Hommey <mh+mozilla@glandium.org>"
2902 criteria = "safe-to-deploy"
2903 delta = "0.6.26 -> 0.6.27"
2904
2905 [[audits.regex-syntax]]
2906 who = "Mike Hommey <mh+mozilla@glandium.org>"
2907 criteria = "safe-to-deploy"
2908 delta = "0.6.27 -> 0.6.28"
2909
2910 [[audits.rkv]]
2911 who = "Chris H-C <chutten@mozilla.com>"
2912 criteria = "safe-to-deploy"
2913 version = "0.18.2"
2914 notes = "Maintained by Jan-Erik and :krosylight."
2915
2916 [[audits.rkv]]
2917 who = "Chris H-C <chutten@mozilla.com>"
2918 criteria = "safe-to-deploy"
2919 version = "0.18.4"
2920
2921 [[audits.ron]]
2922 who = "Mike Hommey <mh+mozilla@glandium.org>"
2923 criteria = "safe-to-deploy"
2924 delta = "0.7.0 -> 0.7.1"
2925
2926 [[audits.ron]]
2927 who = "Jim Blandy <jimb@red-bean.com>"
2928 criteria = "safe-to-deploy"
2929 delta = "0.7.1 -> 0.8.0"
2930
2931 [[audits.ron]]
2932 who = "Mike Hommey <mh+mozilla@glandium.org>"
2933 criteria = "safe-to-deploy"
2934 delta = "0.8.0 -> 0.8.1"
2935
2936 [[audits.rure]]
2937 who = "Nika Layzell <nika@thelayzells.com>"
2938 criteria = "safe-to-deploy"
2939 version = "0.2.2"
2940 notes = """
2941 This is a fairly straightforward FFI wrapper crate for `regex`, maintained by
2942 the `regex` developers in the same repository.
2943
2944 This crate is explicitly designed for FFI use, and should not be used directly
2945 by Rust code. The exported `extern \"C\"` functions are not marked as `unsafe`,
2946 meaning that it is technically incorrect to use them from within Rust code,
2947 however they are reasonable to use from C code.
2948
2949 The unsafe code in this crate heavily depends on the C caller maintaining
2950 invariants, however these invariants are clearly documented in the `rure.h`
2951 file, bundled with the crate.
2952
2953 I have checked the signatures of each function both in C++ and in the Rust to
2954 ensure they match.  In some places, the c `rure.h` header file is missing a
2955 `const` qualifier which could be present given the Rust code, however this will
2956 have no impact on ABI, and is fairly normal for FFI crates.
2957
2958 Panics are handled in all Rust FFI methods, meaning that projects which do not
2959 disable unwinding will still consistently abort (using `libc::abort()`) if a
2960 panic occurs in the Rust code.
2961 """
2962
2963 [[audits.rusqlite]]
2964 who = "Mike Hommey <mh+mozilla@glandium.org>"
2965 criteria = "safe-to-deploy"
2966 delta = "0.27.0 -> 0.28.0"
2967
2968 [[audits.rusqlite]]
2969 who = "Ben Dean-Kawamura <bdk@mozilla.com>"
2970 criteria = "safe-to-deploy"
2971 delta = "0.28.0 -> 0.29.0"
2972
2973 [[audits.rust_cascade]]
2974 who = "Mike Hommey <mh+mozilla@glandium.org>"
2975 criteria = "safe-to-deploy"
2976 delta = "1.4.0 -> 1.5.0"
2977
2978 [[audits.rust_decimal]]
2979 who = "Mike Hommey <mh+mozilla@glandium.org>"
2980 criteria = "safe-to-deploy"
2981 delta = "1.24.0 -> 1.25.0"
2982
2983 [[audits.rust_decimal]]
2984 who = "Mike Hommey <mh+mozilla@glandium.org>"
2985 criteria = "safe-to-deploy"
2986 delta = "1.25.0 -> 1.26.1"
2987
2988 [[audits.rust_decimal]]
2989 who = "Mike Hommey <mh+mozilla@glandium.org>"
2990 criteria = "safe-to-deploy"
2991 delta = "1.26.1 -> 1.27.0"
2992
2993 [[audits.rust_decimal]]
2994 who = "Mike Hommey <mh+mozilla@glandium.org>"
2995 criteria = "safe-to-deploy"
2996 delta = "1.27.0 -> 1.28.1"
2997
2998 [[audits.rustc-hash]]
2999 who = "Bobby Holley <bobbyholley@gmail.com>"
3000 criteria = "safe-to-deploy"
3001 version = "1.1.0"
3002 notes = "Straightforward crate with no unsafe code, does what it says on the tin."
3003
3004 [[audits.rustc_version]]
3005 who = "Nika Layzell <nika@thelayzells.com>"
3006 criteria = "safe-to-run"
3007 version = "0.4.0"
3008 notes = """
3009 Straightforward crate which runs `$RUSTC -vV` and parses the output into a
3010 machine-interpretable form for build scripts.
3011 """
3012
3013 [[audits.rustversion]]
3014 who = "Bobby Holley <bobbyholley@gmail.com>"
3015 criteria = "safe-to-deploy"
3016 version = "1.0.9"
3017 notes = """
3018 This crate has a build-time component and procedural macro logic, which I looked
3019 at enough to convince myself it wasn't going to do anything dramatically wrong.
3020 I don't think logic bugs in the version parsing etc can realistically introduce
3021 a security vulnerability.
3022 """
3023
3024 [[audits.rustversion]]
3025 who = "Mike Hommey <mh+mozilla@glandium.org>"
3026 criteria = "safe-to-run"
3027 delta = "1.0.9 -> 1.0.11"
3028
3029 [[audits.ryu]]
3030 who = "Mike Hommey <mh+mozilla@glandium.org>"
3031 criteria = "safe-to-deploy"
3032 delta = "1.0.10 -> 1.0.11"
3033
3034 [[audits.ryu]]
3035 who = "Mike Hommey <mh+mozilla@glandium.org>"
3036 criteria = "safe-to-deploy"
3037 delta = "1.0.11 -> 1.0.12"
3038
3039 [[audits.safemem]]
3040 who = "Bobby Holley <bobbyholley@gmail.com>"
3041 criteria = "safe-to-run"
3042 version = "0.3.3"
3043 notes = "I didn't review the allocation code carefully but it's not malicious."
3044
3045 [[audits.scoped-tls]]
3046 who = "Mike Hommey <mh+mozilla@glandium.org>"
3047 criteria = "safe-to-run"
3048 delta = "1.0.0 -> 1.0.1"
3049
3050 [[audits.scroll]]
3051 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
3052 criteria = "safe-to-deploy"
3053 delta = "0.10.2 -> 0.11.0"
3054 notes = "Small changes to exposed traits, that look reasonable and have additional buffer boundary checks. No unsafe code touched."
3055
3056 [[audits.scroll_derive]]
3057 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
3058 criteria = "safe-to-deploy"
3059 delta = "0.10.5 -> 0.11.0"
3060 notes = "No code changes. Tagged together with its parent crate scroll."
3061
3062 [[audits.scroll_derive]]
3063 who = "Mike Hommey <mh+mozilla@glandium.org>"
3064 criteria = "safe-to-deploy"
3065 delta = "0.11.0 -> 0.11.1"
3066
3067 [[audits.selectors]]
3068 who = "Emilio Cobos Álvarez <emilio@crisal.io>"
3069 criteria = "safe-to-deploy"
3070 version = "0.22.0"
3071 notes = """
3072 This crate is basically developed in-tree. Mozilla employees have either
3073 reviewed or written virtually all of the code.
3074 """
3075
3076 [[audits.semver]]
3077 who = "Mike Hommey <mh+mozilla@glandium.org>"
3078 criteria = "safe-to-deploy"
3079 delta = "1.0.9 -> 1.0.10"
3080
3081 [[audits.semver]]
3082 who = "Mike Hommey <mh+mozilla@glandium.org>"
3083 criteria = "safe-to-deploy"
3084 delta = "1.0.10 -> 1.0.13"
3085
3086 [[audits.semver]]
3087 who = "Mike Hommey <mh+mozilla@glandium.org>"
3088 criteria = "safe-to-deploy"
3089 delta = "1.0.13 -> 1.0.16"
3090
3091 [[audits.semver]]
3092 who = "Bobby Holley <bobbyholley@gmail.com>"
3093 criteria = "safe-to-deploy"
3094 delta = "1.0.17 -> 1.0.16"
3095
3096 [[audits.serde]]
3097 who = "Mike Hommey <mh+mozilla@glandium.org>"
3098 criteria = "safe-to-deploy"
3099 delta = "1.0.137 -> 1.0.143"
3100
3101 [[audits.serde]]
3102 who = "Mike Hommey <mh+mozilla@glandium.org>"
3103 criteria = "safe-to-deploy"
3104 delta = "1.0.143 -> 1.0.144"
3105
3106 [[audits.serde]]
3107 who = "Mike Hommey <mh+mozilla@glandium.org>"
3108 criteria = "safe-to-deploy"
3109 delta = "1.0.144 -> 1.0.151"
3110
3111 [[audits.serde]]
3112 who = "Mike Hommey <mh+mozilla@glandium.org>"
3113 criteria = "safe-to-deploy"
3114 delta = "1.0.151 -> 1.0.152"
3115
3116 [[audits.serde_bytes]]
3117 who = "Mike Hommey <mh+mozilla@glandium.org>"
3118 criteria = "safe-to-deploy"
3119 delta = "0.11.6 -> 0.11.7"
3120
3121 [[audits.serde_bytes]]
3122 who = "Mike Hommey <mh+mozilla@glandium.org>"
3123 criteria = "safe-to-deploy"
3124 delta = "0.11.7 -> 0.11.8"
3125
3126 [[audits.serde_bytes]]
3127 who = "Mike Hommey <mh+mozilla@glandium.org>"
3128 criteria = "safe-to-deploy"
3129 delta = "0.11.8 -> 0.11.9"
3130
3131 [[audits.serde_cbor]]
3132 who = "R. Martinho Fernandes <bugs@rmf.io>"
3133 criteria = "safe-to-deploy"
3134 version = "0.11.1"
3135
3136 [[audits.serde_cbor]]
3137 who = "John M. Schanck <jschanck@mozilla.com>"
3138 criteria = "safe-to-deploy"
3139 delta = "0.11.1 -> 0.11.2"
3140
3141 [[audits.serde_derive]]
3142 who = "Mike Hommey <mh+mozilla@glandium.org>"
3143 criteria = "safe-to-deploy"
3144 delta = "1.0.137 -> 1.0.143"
3145
3146 [[audits.serde_derive]]
3147 who = "Mike Hommey <mh+mozilla@glandium.org>"
3148 criteria = "safe-to-deploy"
3149 delta = "1.0.143 -> 1.0.144"
3150
3151 [[audits.serde_derive]]
3152 who = "Mike Hommey <mh+mozilla@glandium.org>"
3153 criteria = "safe-to-deploy"
3154 delta = "1.0.144 -> 1.0.151"
3155
3156 [[audits.serde_derive]]
3157 who = "Mike Hommey <mh+mozilla@glandium.org>"
3158 criteria = "safe-to-deploy"
3159 delta = "1.0.151 -> 1.0.152"
3160
3161 [[audits.serde_json]]
3162 who = "Mike Hommey <mh+mozilla@glandium.org>"
3163 criteria = "safe-to-deploy"
3164 delta = "1.0.81 -> 1.0.83"
3165
3166 [[audits.serde_json]]
3167 who = "Mike Hommey <mh+mozilla@glandium.org>"
3168 criteria = "safe-to-deploy"
3169 delta = "1.0.83 -> 1.0.85"
3170
3171 [[audits.serde_json]]
3172 who = "Mike Hommey <mh+mozilla@glandium.org>"
3173 criteria = "safe-to-deploy"
3174 delta = "1.0.85 -> 1.0.91"
3175
3176 [[audits.serde_json]]
3177 who = "Mike Hommey <mh+mozilla@glandium.org>"
3178 criteria = "safe-to-deploy"
3179 delta = "1.0.91 -> 1.0.93"
3180
3181 [[audits.serde_path_to_error]]
3182 who = "Ben Dean-Kawamura <bdk@mozilla.com>"
3183 criteria = "safe-to-deploy"
3184 version = "0.1.11"
3185
3186 [[audits.serde_repr]]
3187 who = "Mike Hommey <mh+mozilla@glandium.org>"
3188 criteria = "safe-to-run"
3189 delta = "0.1.8 -> 0.1.9"
3190
3191 [[audits.serde_repr]]
3192 who = "Mike Hommey <mh+mozilla@glandium.org>"
3193 criteria = "safe-to-run"
3194 delta = "0.1.9 -> 0.1.10"
3195
3196 [[audits.serde_with]]
3197 who = "Mike Hommey <mh+mozilla@glandium.org>"
3198 criteria = "safe-to-deploy"
3199 delta = "1.14.0 -> 3.0.0"
3200
3201 [[audits.serde_with_macros]]
3202 who = "Mike Hommey <mh+mozilla@glandium.org>"
3203 criteria = "safe-to-deploy"
3204 delta = "1.5.2 -> 3.0.0"
3205
3206 [[audits.serde_yaml]]
3207 who = "Mike Hommey <mh+mozilla@glandium.org>"
3208 criteria = "safe-to-run"
3209 delta = "0.8.24 -> 0.8.26"
3210
3211 [[audits.servo_arc]]
3212 who = "Emilio Cobos Álvarez <emilio@crisal.io>"
3213 criteria = "safe-to-deploy"
3214 version = "0.1.1"
3215 notes = "Developed in-tree, effectively."
3216
3217 [[audits.sfv]]
3218 who = "Mike Hommey <mh+mozilla@glandium.org>"
3219 criteria = "safe-to-deploy"
3220 delta = "0.9.2 -> 0.9.3"
3221
3222 [[audits.sha1]]
3223 who = "Dana Keeler <dkeeler@mozilla.com>"
3224 criteria = "safe-to-deploy"
3225 version = "0.10.5"
3226
3227 [[audits.sha1]]
3228 who = "Mike Hommey <mh+mozilla@glandium.org>"
3229 criteria = "safe-to-run"
3230 delta = "0.10.0 -> 0.10.5"
3231
3232 [[audits.sha2]]
3233 who = "Mike Hommey <mh+mozilla@glandium.org>"
3234 criteria = "safe-to-deploy"
3235 delta = "0.10.2 -> 0.10.6"
3236
3237 [[audits.sha3]]
3238 who = "Simon Friedberger <simon@mozilla.com>"
3239 criteria = "safe-to-deploy"
3240 delta = "0.10.6 -> 0.10.7"
3241
3242 [[audits.slab]]
3243 who = "Mike Hommey <mh+mozilla@glandium.org>"
3244 criteria = "safe-to-deploy"
3245 delta = "0.4.6 -> 0.4.7"
3246
3247 [[audits.slab]]
3248 who = "Mike Hommey <mh+mozilla@glandium.org>"
3249 criteria = "safe-to-deploy"
3250 delta = "0.4.7 -> 0.4.8"
3251
3252 [[audits.smallbitvec]]
3253 who = "Bobby Holley <bobbyholley@gmail.com>"
3254 criteria = "safe-to-deploy"
3255 version = "2.5.0"
3256 notes = "All code written or reviewed by Mozilla staff."
3257
3258 [[audits.smallbitvec]]
3259 who = "Bobby Holley <bobbyholley@gmail.com>"
3260 criteria = "safe-to-deploy"
3261 delta = "2.5.0 -> 2.5.1"
3262
3263 [[audits.smallvec]]
3264 who = "Mike Hommey <mh+mozilla@glandium.org>"
3265 criteria = "safe-to-deploy"
3266 delta = "1.8.0 -> 1.9.0"
3267
3268 [[audits.smallvec]]
3269 who = "Mike Hommey <mh+mozilla@glandium.org>"
3270 criteria = "safe-to-deploy"
3271 delta = "1.9.0 -> 1.10.0"
3272
3273 [[audits.smart-default]]
3274 who = "Gabriele Svelto <gsvelto@mozilla.com>"
3275 criteria = "safe-to-deploy"
3276 version = "0.6.0"
3277
3278 [[audits.smart-default]]
3279 who = "Mike Hommey <mh+mozilla@glandium.org>"
3280 criteria = "safe-to-deploy"
3281 delta = "0.6.0 -> 0.7.1"
3282
3283 [[audits.socket2]]
3284 who = "Mike Hommey <mh+mozilla@glandium.org>"
3285 criteria = "safe-to-deploy"
3286 delta = "0.4.4 -> 0.4.7"
3287
3288 [[audits.strck]]
3289 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
3290 criteria = "safe-to-deploy"
3291 version = "0.1.2"
3292 notes = "This crate uses unsafe lock to keep invariant. I auditted code. Also, this doesn't have file access and network access."
3293
3294 [[audits.strck_ident]]
3295 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
3296 criteria = "safe-to-deploy"
3297 version = "0.1.2"
3298 notes = "This crate doesn't use unsafe block, network access and filesystem access."
3299
3300 [[audits.subtle]]
3301 who = "Simon Friedberger <simon@mozilla.com>"
3302 criteria = "safe-to-deploy"
3303 version = "2.5.0"
3304 notes = "The goal is to provide some constant-time correctness for cryptographic implementations. The approach is reasonable, it is known to be insufficient but this is pointed out in the documentation."
3305
3306 [[audits.svg_fmt]]
3307 who = "Bobby Holley <bobbyholley@gmail.com>"
3308 criteria = "safe-to-deploy"
3309 version = "0.4.1"
3310 notes = "Simple string processing with no unsafe code or ambient capability usage."
3311
3312 [[audits.syn]]
3313 who = "Mike Hommey <mh+mozilla@glandium.org>"
3314 criteria = "safe-to-deploy"
3315 delta = "1.0.96 -> 1.0.99"
3316
3317 [[audits.syn]]
3318 who = "Mike Hommey <mh+mozilla@glandium.org>"
3319 criteria = "safe-to-deploy"
3320 delta = "1.0.99 -> 1.0.107"
3321
3322 [[audits.synstructure]]
3323 who = "Nika Layzell <nika@thelayzells.com>"
3324 criteria = "safe-to-deploy"
3325 version = "0.12.6"
3326 notes = """
3327 I am the primary author of the `synstructure` crate, and its current
3328 maintainer. The one use of `unsafe` is unnecessary, but documented and
3329 harmless. It will be removed in the next version.
3330 """
3331
3332 [[audits.synstructure]]
3333 who = "Mike Hommey <mh+mozilla@glandium.org>"
3334 criteria = "safe-to-deploy"
3335 delta = "0.12.6 -> 0.13.0"
3336
3337 [[audits.tempfile]]
3338 who = "Mike Hommey <mh+mozilla@glandium.org>"
3339 criteria = "safe-to-deploy"
3340 delta = "3.6.0 -> 3.8.0"
3341
3342 [[audits.termcolor]]
3343 who = "Mike Hommey <mh+mozilla@glandium.org>"
3344 criteria = "safe-to-deploy"
3345 delta = "1.1.3 -> 1.2.0"
3346
3347 [[audits.textwrap]]
3348 who = "Mike Hommey <mh+mozilla@glandium.org>"
3349 criteria = "safe-to-deploy"
3350 delta = "0.15.0 -> 0.15.2"
3351
3352 [[audits.textwrap]]
3353 who = "Mike Hommey <mh+mozilla@glandium.org>"
3354 criteria = "safe-to-deploy"
3355 delta = "0.15.2 -> 0.16.0"
3356
3357 [[audits.thin-vec]]
3358 who = "Aria Beingessner <a.beingessner@gmail.com>"
3359 criteria = "safe-to-deploy"
3360 version = "0.2.5"
3361 notes = "I own this crate, and most of its versions were codeveloped and reviewed by Nika Layzell. This version was not explicitly reviewed by her, but it was specifically a release that made the code pass miri and was reviewed by me. Firefox uses it in the gecko-ffi configuration which is less thoroughly tested and more dangerous but we're reasonably confident in it. The real danger is from C++ code failing to use it correctly in FFI but that's just how FFI is."
3362
3363 [[audits.thin-vec]]
3364 who = "Mike Hommey <mh+mozilla@glandium.org>"
3365 criteria = "safe-to-deploy"
3366 delta = "0.2.5 -> 0.2.7"
3367
3368 [[audits.thin-vec]]
3369 who = "Mike Hommey <mh+mozilla@glandium.org>"
3370 criteria = "safe-to-deploy"
3371 delta = "0.2.7 -> 0.2.12"
3372
3373 [[audits.thiserror]]
3374 who = "Mike Hommey <mh+mozilla@glandium.org>"
3375 criteria = "safe-to-deploy"
3376 delta = "1.0.31 -> 1.0.32"
3377
3378 [[audits.thiserror]]
3379 who = "Mike Hommey <mh+mozilla@glandium.org>"
3380 criteria = "safe-to-deploy"
3381 delta = "1.0.32 -> 1.0.38"
3382
3383 [[audits.thiserror-impl]]
3384 who = "Mike Hommey <mh+mozilla@glandium.org>"
3385 criteria = "safe-to-deploy"
3386 delta = "1.0.31 -> 1.0.32"
3387
3388 [[audits.thiserror-impl]]
3389 who = "Mike Hommey <mh+mozilla@glandium.org>"
3390 criteria = "safe-to-deploy"
3391 delta = "1.0.32 -> 1.0.38"
3392
3393 [[audits.threadbound]]
3394 who = "Mike Hommey <mh+mozilla@glandium.org>"
3395 criteria = "safe-to-deploy"
3396 delta = "0.1.3 -> 0.1.4"
3397
3398 [[audits.threadbound]]
3399 who = "Mike Hommey <mh+mozilla@glandium.org>"
3400 criteria = "safe-to-deploy"
3401 delta = "0.1.4 -> 0.1.5"
3402
3403 [[audits.time]]
3404 who = "Mike Hommey <mh+mozilla@glandium.org>"
3405 criteria = "safe-to-deploy"
3406 delta = "0.1.44 -> 0.1.45"
3407
3408 [[audits.time]]
3409 who = "Kershaw Chang <kershaw@mozilla.com>"
3410 criteria = "safe-to-deploy"
3411 delta = "0.1.45 -> 0.3.17"
3412
3413 [[audits.time]]
3414 who = "Mike Hommey <mh+mozilla@glandium.org>"
3415 criteria = "safe-to-run"
3416 delta = "0.3.9 -> 0.3.17"
3417
3418 [[audits.time-core]]
3419 who = "Kershaw Chang <kershaw@mozilla.com>"
3420 criteria = "safe-to-deploy"
3421 version = "0.1.0"
3422
3423 [[audits.time-core]]
3424 who = "Mike Hommey <mh+mozilla@glandium.org>"
3425 criteria = "safe-to-run"
3426 version = "0.1.0"
3427
3428 [[audits.time-macros]]
3429 who = "Kershaw Chang <kershaw@mozilla.com>"
3430 criteria = "safe-to-deploy"
3431 version = "0.2.6"
3432
3433 [[audits.time-macros]]
3434 who = "Mike Hommey <mh+mozilla@glandium.org>"
3435 criteria = "safe-to-run"
3436 delta = "0.2.4 -> 0.2.6"
3437
3438 [[audits.tinystr]]
3439 who = "Zibi Braniecki <zibi@unicode.org>"
3440 criteria = "safe-to-deploy"
3441 version = "0.3.4"
3442
3443 [[audits.tinystr]]
3444 who = "Zibi Braniecki <zibi@unicode.org>"
3445 criteria = "safe-to-deploy"
3446 version = "0.6.0"
3447
3448 [[audits.tinystr]]
3449 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
3450 criteria = "safe-to-deploy"
3451 version = "0.7.0"
3452 notes = "One of original auther was Zibi Braniecki who worked at Mozilla and maintained by ICU4X developers (Google and Mozilla). I've vetted the one instance of unsafe code."
3453
3454 [[audits.tinystr]]
3455 who = "Mike Hommey <mh+mozilla@glandium.org>"
3456 criteria = "safe-to-deploy"
3457 delta = "0.7.0 -> 0.7.1"
3458
3459 [[audits.tokio-macros]]
3460 who = "Mike Hommey <mh+mozilla@glandium.org>"
3461 criteria = "safe-to-run"
3462 delta = "1.8.0 -> 1.8.2"
3463
3464 [[audits.tokio-stream]]
3465 who = "Mike Hommey <mh+mozilla@glandium.org>"
3466 criteria = "safe-to-run"
3467 delta = "0.1.9 -> 0.1.11"
3468
3469 [[audits.tokio-stream]]
3470 who = "Mike Hommey <mh+mozilla@glandium.org>"
3471 criteria = "safe-to-run"
3472 delta = "0.1.11 -> 0.1.12"
3473
3474 [[audits.toml]]
3475 who = "Bobby Holley <bobbyholley@gmail.com>"
3476 criteria = "safe-to-deploy"
3477 delta = "0.5.7 -> 0.5.9"
3478
3479 [[audits.toml]]
3480 who = "Mike Hommey <mh+mozilla@glandium.org>"
3481 criteria = "safe-to-deploy"
3482 delta = "0.5.9 -> 0.5.10"
3483
3484 [[audits.toml]]
3485 who = "Mike Hommey <mh+mozilla@glandium.org>"
3486 criteria = "safe-to-deploy"
3487 delta = "0.5.10 -> 0.5.11"
3488
3489 [[audits.topological-sort]]
3490 who = "Bobby Holley <bobbyholley@gmail.com>"
3491 criteria = "safe-to-deploy"
3492 version = "0.1.0"
3493 notes = "Simple algorithm crate with no unsafe code or capability usage."
3494
3495 [[audits.tower-service]]
3496 who = "Mike Hommey <mh+mozilla@glandium.org>"
3497 criteria = "safe-to-run"
3498 delta = "0.3.1 -> 0.3.2"
3499
3500 [[audits.tracing]]
3501 who = "Mike Hommey <mh+mozilla@glandium.org>"
3502 criteria = "safe-to-run"
3503 delta = "0.1.35 -> 0.1.36"
3504
3505 [[audits.tracing]]
3506 who = "Mike Hommey <mh+mozilla@glandium.org>"
3507 criteria = "safe-to-run"
3508 delta = "0.1.36 -> 0.1.37"
3509
3510 [[audits.tracing-attributes]]
3511 who = "Mike Hommey <mh+mozilla@glandium.org>"
3512 criteria = "safe-to-run"
3513 delta = "0.1.21 -> 0.1.22"
3514
3515 [[audits.tracing-attributes]]
3516 who = "Mike Hommey <mh+mozilla@glandium.org>"
3517 criteria = "safe-to-run"
3518 delta = "0.1.22 -> 0.1.23"
3519
3520 [[audits.tracing-attributes]]
3521 who = "Mike Hommey <mh+mozilla@glandium.org>"
3522 criteria = "safe-to-run"
3523 delta = "0.1.23 -> 0.1.24"
3524
3525 [[audits.tracing-core]]
3526 who = "Mike Hommey <mh+mozilla@glandium.org>"
3527 criteria = "safe-to-run"
3528 delta = "0.1.27 -> 0.1.29"
3529
3530 [[audits.tracing-core]]
3531 who = "Mike Hommey <mh+mozilla@glandium.org>"
3532 criteria = "safe-to-run"
3533 delta = "0.1.29 -> 0.1.30"
3534
3535 [[audits.tracy-rs]]
3536 who = "Glenn Watson <git@intuitionlibrary.com>"
3537 criteria = "safe-to-deploy"
3538 version = "0.1.2"
3539
3540 [[audits.try-lock]]
3541 who = "Mike Hommey <mh+mozilla@glandium.org>"
3542 criteria = "safe-to-run"
3543 delta = "0.2.3 -> 0.2.4"
3544
3545 [[audits.typed-arena-nomut]]
3546 who = "Lee Salzman <lsalzman@gmail.com>"
3547 criteria = "safe-to-deploy"
3548 version = "0.1.0"
3549
3550 [[audits.typenum]]
3551 who = "Mike Hommey <mh+mozilla@glandium.org>"
3552 criteria = "safe-to-deploy"
3553 delta = "1.15.0 -> 1.16.0"
3554
3555 [[audits.uluru]]
3556 who = "Emilio Cobos Álvarez <emilio@crisal.io>"
3557 criteria = "safe-to-deploy"
3558 version = "3.0.0"
3559 notes = """
3560 I've reviewed multiple patches in this crate, including the initial
3561 implementation back in the day. It has no unsafe code at all nowadays.
3562 """
3563
3564 [[audits.unic-langid]]
3565 who = "Zibi Braniecki <zibi@unicode.org>"
3566 criteria = "safe-to-deploy"
3567 version = "0.9.0"
3568
3569 [[audits.unic-langid]]
3570 who = "Mike Hommey <mh+mozilla@glandium.org>"
3571 criteria = "safe-to-deploy"
3572 delta = "0.9.0 -> 0.9.1"
3573
3574 [[audits.unic-langid-impl]]
3575 who = "Zibi Braniecki <zibi@unicode.org>"
3576 criteria = "safe-to-deploy"
3577 version = "0.9.0"
3578
3579 [[audits.unic-langid-impl]]
3580 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
3581 criteria = "safe-to-deploy"
3582 delta = "0.9.0 -> 0.9.1"
3583
3584 [[audits.unic-langid-macros]]
3585 who = "Zibi Braniecki <zibi@unicode.org>"
3586 criteria = "safe-to-deploy"
3587 version = "0.9.0"
3588
3589 [[audits.unic-langid-macros]]
3590 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
3591 criteria = "safe-to-deploy"
3592 delta = "0.9.0 -> 0.9.1"
3593
3594 [[audits.unic-langid-macros-impl]]
3595 who = "Zibi Braniecki <zibi@unicode.org>"
3596 criteria = "safe-to-deploy"
3597 version = "0.9.0"
3598
3599 [[audits.unic-langid-macros-impl]]
3600 who = "Mike Hommey <mh+mozilla@glandium.org>"
3601 criteria = "safe-to-deploy"
3602 delta = "0.9.0 -> 0.9.1"
3603
3604 [[audits.unicode-bidi]]
3605 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
3606 criteria = "safe-to-deploy"
3607 delta = "0.3.8 -> 0.3.13"
3608
3609 [[audits.unicode-ident]]
3610 who = "Mike Hommey <mh+mozilla@glandium.org>"
3611 criteria = "safe-to-deploy"
3612 delta = "1.0.0 -> 1.0.1"
3613
3614 [[audits.unicode-ident]]
3615 who = "Mike Hommey <mh+mozilla@glandium.org>"
3616 criteria = "safe-to-deploy"
3617 delta = "1.0.1 -> 1.0.3"
3618
3619 [[audits.unicode-ident]]
3620 who = "Mike Hommey <mh+mozilla@glandium.org>"
3621 criteria = "safe-to-deploy"
3622 delta = "1.0.3 -> 1.0.6"
3623
3624 [[audits.unicode-normalization]]
3625 who = "Mike Hommey <mh+mozilla@glandium.org>"
3626 criteria = "safe-to-deploy"
3627 delta = "0.1.19 -> 0.1.20"
3628 notes = "I am the author of most of these changes upstream, and prepared the release myself, at which point I looked at the other changes since 0.1.19."
3629
3630 [[audits.unicode-normalization]]
3631 who = "Mike Hommey <mh+mozilla@glandium.org>"
3632 criteria = "safe-to-deploy"
3633 delta = "0.1.20 -> 0.1.21"
3634
3635 [[audits.unicode-normalization]]
3636 who = "Mike Hommey <mh+mozilla@glandium.org>"
3637 criteria = "safe-to-deploy"
3638 delta = "0.1.21 -> 0.1.22"
3639
3640 [[audits.unicode-segmentation]]
3641 who = "Mike Hommey <mh+mozilla@glandium.org>"
3642 criteria = "safe-to-deploy"
3643 delta = "1.9.0 -> 1.10.0"
3644
3645 [[audits.unicode-width]]
3646 who = "Mike Hommey <mh+mozilla@glandium.org>"
3647 criteria = "safe-to-deploy"
3648 delta = "0.1.9 -> 0.1.10"
3649
3650 [[audits.unicode-xid]]
3651 who = "Mike Hommey <mh+mozilla@glandium.org>"
3652 criteria = "safe-to-deploy"
3653 delta = "0.2.3 -> 0.2.4"
3654
3655 [[audits.uniffi]]
3656 who = "Travis Long <tlong@mozilla.com>"
3657 criteria = "safe-to-deploy"
3658 version = "0.19.3"
3659 notes = "Maintained by the Glean and Application Services teams"
3660
3661 [[audits.uniffi]]
3662 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
3663 criteria = "safe-to-deploy"
3664 delta = "0.19.3 -> 0.19.6"
3665 notes = "Maintained by the Glean and Application Services team."
3666
3667 [[audits.uniffi]]
3668 who = "Perry McManis <pmcmanis@mozilla.com>"
3669 criteria = "safe-to-deploy"
3670 delta = "0.19.6 -> 0.20.0"
3671
3672 [[audits.uniffi]]
3673 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
3674 criteria = "safe-to-deploy"
3675 delta = "0.20.0 -> 0.21.0"
3676 notes = "Maintained by the Glean and Application Services team."
3677
3678 [[audits.uniffi]]
3679 who = "Mike Hommey <mh+mozilla@glandium.org>"
3680 criteria = "safe-to-deploy"
3681 delta = "0.21.0 -> 0.21.1"
3682 notes = "No changes."
3683
3684 [[audits.uniffi]]
3685 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
3686 criteria = "safe-to-deploy"
3687 delta = "0.21.1 -> 0.23.0"
3688 notes = "Maintained by the Glean and Application Services team."
3689
3690 [[audits.uniffi_bindgen]]
3691 who = "Travis Long <tlong@mozilla.com>"
3692 criteria = "safe-to-deploy"
3693 version = "0.19.3"
3694 notes = "Maintained by the Glean and Application Services teams."
3695
3696 [[audits.uniffi_bindgen]]
3697 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
3698 criteria = "safe-to-deploy"
3699 delta = "0.19.3 -> 0.19.6"
3700 notes = "Maintained by the Glean and Application Services team."
3701
3702 [[audits.uniffi_bindgen]]
3703 who = "Perry McManis <pmcmanis@mozilla.com>"
3704 criteria = "safe-to-deploy"
3705 delta = "0.19.6 -> 0.20.0"
3706
3707 [[audits.uniffi_bindgen]]
3708 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
3709 criteria = "safe-to-deploy"
3710 delta = "0.20.0 -> 0.21.0"
3711 notes = "Maintained by the Glean and Application Services team."
3712
3713 [[audits.uniffi_bindgen]]
3714 who = "Mike Hommey <mh+mozilla@glandium.org>"
3715 criteria = "safe-to-deploy"
3716 delta = "0.21.0 -> 0.21.1"
3717 notes = "I authored the changes in this version."
3718
3719 [[audits.uniffi_bindgen]]
3720 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
3721 criteria = "safe-to-deploy"
3722 delta = "0.21.1 -> 0.23.0"
3723 notes = "Maintained by the Glean and Application Services team."
3724
3725 [[audits.uniffi_build]]
3726 who = "Travis Long <tlong@mozilla.com>"
3727 criteria = "safe-to-deploy"
3728 version = "0.19.3"
3729 notes = "Maintained by the Glean and Application Services teams."
3730
3731 [[audits.uniffi_build]]
3732 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
3733 criteria = "safe-to-deploy"
3734 delta = "0.19.3 -> 0.19.6"
3735 notes = "Maintained by the Glean and Application Services team."
3736
3737 [[audits.uniffi_build]]
3738 who = "Perry McManis <pmcmanis@mozilla.com>"
3739 criteria = "safe-to-deploy"
3740 delta = "0.19.6 -> 0.20.0"
3741
3742 [[audits.uniffi_build]]
3743 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
3744 criteria = "safe-to-deploy"
3745 delta = "0.20.0 -> 0.21.0"
3746 notes = "Maintained by the Glean and Application Services team."
3747
3748 [[audits.uniffi_build]]
3749 who = "Mike Hommey <mh+mozilla@glandium.org>"
3750 criteria = "safe-to-deploy"
3751 delta = "0.21.0 -> 0.21.1"
3752 notes = "No changes."
3753
3754 [[audits.uniffi_build]]
3755 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
3756 criteria = "safe-to-deploy"
3757 delta = "0.21.1 -> 0.23.0"
3758 notes = "Maintained by the Glean and Application Services team."
3759
3760 [[audits.uniffi_checksum_derive]]
3761 who = "Mike Hommey <mh+mozilla@glandium.org>"
3762 criteria = "safe-to-deploy"
3763 version = "0.21.1"
3764 notes = "I authored this crate."
3765
3766 [[audits.uniffi_checksum_derive]]
3767 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
3768 criteria = "safe-to-deploy"
3769 delta = "0.21.1 -> 0.23.0"
3770 notes = "Maintained by the Glean and Application Services team."
3771
3772 [[audits.uniffi_core]]
3773 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
3774 criteria = "safe-to-deploy"
3775 version = "0.23.0"
3776 notes = "Maintained by the Glean and Application Services teams."
3777
3778 [[audits.uniffi_macros]]
3779 who = "Travis Long <tlong@mozilla.com>"
3780 criteria = "safe-to-deploy"
3781 version = "0.19.3"
3782 notes = "Maintained by the Glean and Application Services teams."
3783
3784 [[audits.uniffi_macros]]
3785 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
3786 criteria = "safe-to-deploy"
3787 delta = "0.19.3 -> 0.19.6"
3788 notes = "Maintained by the Glean and Application Services team."
3789
3790 [[audits.uniffi_macros]]
3791 who = "Perry McManis <pmcmanis@mozilla.com>"
3792 criteria = "safe-to-deploy"
3793 delta = "0.19.6 -> 0.20.0"
3794
3795 [[audits.uniffi_macros]]
3796 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
3797 criteria = "safe-to-deploy"
3798 delta = "0.20.0 -> 0.21.0"
3799 notes = "Maintained by the Glean and Application Services team."
3800
3801 [[audits.uniffi_macros]]
3802 who = "Mike Hommey <mh+mozilla@glandium.org>"
3803 criteria = "safe-to-deploy"
3804 delta = "0.21.0 -> 0.21.1"
3805 notes = "No changes."
3806
3807 [[audits.uniffi_macros]]
3808 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
3809 criteria = "safe-to-deploy"
3810 delta = "0.21.1 -> 0.23.0"
3811 notes = "Maintained by the Glean and Application Services team."
3812
3813 [[audits.uniffi_meta]]
3814 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
3815 criteria = "safe-to-deploy"
3816 version = "0.19.6"
3817 notes = "Maintained by the Glean and Application Services team."
3818
3819 [[audits.uniffi_meta]]
3820 who = "Perry McManis <pmcmanis@mozilla.com>"
3821 criteria = "safe-to-deploy"
3822 delta = "0.19.6 -> 0.20.0"
3823
3824 [[audits.uniffi_meta]]
3825 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
3826 criteria = "safe-to-deploy"
3827 delta = "0.20.0 -> 0.21.0"
3828 notes = "Maintained by the Glean and Application Services team."
3829
3830 [[audits.uniffi_meta]]
3831 who = "Mike Hommey <mh+mozilla@glandium.org>"
3832 criteria = "safe-to-deploy"
3833 delta = "0.21.0 -> 0.21.1"
3834 notes = "I authored the changes in this version."
3835
3836 [[audits.uniffi_meta]]
3837 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
3838 criteria = "safe-to-deploy"
3839 delta = "0.21.1 -> 0.23.0"
3840 notes = "Maintained by the Glean and Application Services team."
3841
3842 [[audits.uniffi_testing]]
3843 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
3844 criteria = "safe-to-deploy"
3845 version = "0.23.0"
3846 notes = "Maintained by the Glean and Application Services team."
3847
3848 [[audits.uuid]]
3849 who = "Gabriele Svelto <gsvelto@mozilla.com>"
3850 criteria = "safe-to-deploy"
3851 delta = "0.8.2 -> 1.2.2"
3852
3853 [[audits.uuid]]
3854 who = "Mike Hommey <mh+mozilla@glandium.org>"
3855 criteria = "safe-to-deploy"
3856 delta = "1.2.2 -> 1.3.0"
3857
3858 [[audits.void]]
3859 who = "Bobby Holley <bobbyholley@gmail.com>"
3860 criteria = "safe-to-deploy"
3861 version = "1.0.2"
3862 notes = "Very small crate, just hosts the Void type for easier cross-crate interfacing."
3863
3864 [[audits.warp]]
3865 who = "Mike Hommey <mh+mozilla@glandium.org>"
3866 criteria = "safe-to-run"
3867 delta = "0.3.2 -> 0.3.3"
3868
3869 [[audits.warp]]
3870 who = "Bobby Holley <bobbyholley@gmail.com>"
3871 criteria = "safe-to-run"
3872 delta = "0.3.3 -> 0.3.3@git:4af45fae95bc98b0eba1ef0db17e1dac471bb23d"
3873
3874 [[audits.wasm-encoder]]
3875 who = "Ryan Hunt <rhunt@eqrion.net>"
3876 criteria = "safe-to-deploy"
3877 version = "0.7.0"
3878 notes = "Maintained by the Bytecode Alliance, with contributions from Mozilla. This has no unsafe code and uses no ambient capabilities."
3879
3880 [[audits.wasm-encoder]]
3881 who = "Ryan Hunt <rhunt@eqrion.net>"
3882 criteria = "safe-to-deploy"
3883 delta = "0.7.0 -> 0.14.0"
3884 notes = "wasm-encoder has no unsafe code and uses no ambient capabilities."
3885
3886 [[audits.wasm-encoder]]
3887 who = "Yury Delendik <ydelendik@mozilla.com>"
3888 criteria = "safe-to-deploy"
3889 delta = "0.14.0 -> 0.15.0"
3890
3891 [[audits.wasm-encoder]]
3892 who = "Yury Delendik <ydelendik@mozilla.com>"
3893 criteria = "safe-to-deploy"
3894 delta = "0.16.0 -> 0.17.0"
3895
3896 [[audits.wasm-encoder]]
3897 who = "Ryan Hunt <rhunt@eqrion.net>"
3898 criteria = "safe-to-deploy"
3899 delta = "0.19.0 -> 0.19.1"
3900
3901 [[audits.wasm-smith]]
3902 who = "Ryan Hunt <rhunt@eqrion.net>"
3903 criteria = "safe-to-deploy"
3904 version = "0.11.2"
3905 notes = "Maintained by the Bytecode Alliance, with contributions from Mozilla. I've vetted the one instance of unsafe code."
3906
3907 [[audits.wasm-smith]]
3908 who = "Yury Delendik <ydelendik@mozilla.com>"
3909 criteria = "safe-to-run"
3910 delta = "0.11.2 -> 0.11.3"
3911
3912 [[audits.wasm-smith]]
3913 who = "Yury Delendik <ydelendik@mozilla.com>"
3914 criteria = "safe-to-run"
3915 delta = "0.11.4 -> 0.11.5"
3916
3917 [[audits.wasm-smith]]
3918 who = "Ryan Hunt <rhunt@eqrion.net>"
3919 criteria = "safe-to-run"
3920 delta = "0.11.7 -> 0.11.8"
3921
3922 [[audits.wasmparser]]
3923 who = "Ryan Hunt <rhunt@eqrion.net>"
3924 criteria = "safe-to-deploy"
3925 version = "0.87.0"
3926 notes = "Maintained by the Bytecode Alliance, with contributions from Mozilla. I've vetted the one instance of unsafe code."
3927
3928 [[audits.wasmparser]]
3929 who = "Yury Delendik <ydelendik@mozilla.com>"
3930 criteria = "safe-to-deploy"
3931 delta = "0.87.0 -> 0.88.0"
3932
3933 [[audits.wasmparser]]
3934 who = "Yury Delendik <ydelendik@mozilla.com>"
3935 criteria = "safe-to-deploy"
3936 delta = "0.89.1 -> 0.91.0"
3937
3938 [[audits.wasmparser]]
3939 who = "Ryan Hunt <rhunt@eqrion.net>"
3940 criteria = "safe-to-deploy"
3941 delta = "0.93.0 -> 0.94.0"
3942
3943 [[audits.wast]]
3944 who = "Ryan Hunt <rhunt@eqrion.net>"
3945 criteria = "safe-to-deploy"
3946 version = "44.0.0"
3947
3948 [[audits.wast]]
3949 who = "Ryan Hunt <rhunt@eqrion.net>"
3950 criteria = "safe-to-deploy"
3951 version = "44.0.0"
3952 notes = "Maintained by the Bytecode Alliance, with contributions from Mozilla. wast has no unsafe code and the only ambient capability it uses is to read the full contents of a file that is given to it."
3953
3954 [[audits.wast]]
3955 who = "Yury Delendik <ydelendik@mozilla.com>"
3956 criteria = "safe-to-deploy"
3957 delta = "44.0.0 -> 45.0.0"
3958
3959 [[audits.wast]]
3960 who = "Yury Delendik <ydelendik@mozilla.com>"
3961 criteria = "safe-to-deploy"
3962 delta = "46.0.0 -> 47.0.0"
3963
3964 [[audits.wast]]
3965 who = "Ryan Hunt <rhunt@eqrion.net>"
3966 criteria = "safe-to-deploy"
3967 delta = "48.0.0 -> 49.0.0"
3968
3969 [[audits.wast]]
3970 who = "Ben Visness <bvisness@mozilla.com>"
3971 criteria = "safe-to-deploy"
3972 delta = "55.0.0 -> 56.0.0"
3973
3974 [[audits.webrtc-sdp]]
3975 who = "Byron Campen <docfaraday@gmail.com>"
3976 criteria = "safe-to-deploy"
3977 delta = "0.3.9 -> 0.3.10"
3978
3979 [[audits.weedle2]]
3980 who = "Travis Long <tlong@mozilla.com>"
3981 criteria = "safe-to-deploy"
3982 version = "3.0.0"
3983 notes = "Maintained by the Glean and Application Services teams."
3984
3985 [[audits.weedle2]]
3986 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
3987 criteria = "safe-to-deploy"
3988 delta = "3.0.0 -> 4.0.0"
3989 notes = "Maintained by the Glean and Application Services team."
3990
3991 [[audits.wgpu-core]]
3992 who = "Dzmitry Malyshau <kvark@fastmail.com>"
3993 criteria = "safe-to-deploy"
3994 version = "0.12.0"
3995 notes = """
3996 This crate, up through the indicated version, was written or reviewed
3997 by Dzmitry Malyshau while he was a Mozilla employee. Dzmitry left
3998 Mozilla at the beginning of February 2022. This audit statement was
3999 collected by Jim Blandy, a Mozilla employee, over email in July 2022:
4000 Dzmitry was shown, and agreed to, the 'safe-to-deploy' text.
4001 """
4002
4003 [[audits.wgpu-core]]
4004 who = "Jim Blandy <jimb@mozilla.com>"
4005 criteria = "safe-to-deploy"
4006 delta = "0.12.0 -> 0.13.0"
4007
4008 [[audits.wgpu-core]]
4009 who = "Jim Blandy <jimb@red-bean.com>"
4010 criteria = "safe-to-deploy"
4011 delta = "0.13.0 -> 0.14.0"
4012 notes = "Audit by Erich Gubler, Jim Blandy, Nicolas Silva, and Teodor Tanasoaia."
4013
4014 [[audits.wgpu-core]]
4015 who = "Nicolas Silva <nical@fastmail.com>"
4016 criteria = "safe-to-deploy"
4017 delta = "0.14.0 -> 0.14.0@git:fac4731288117d951d0944d96cf0b00fa006dd6c"
4018
4019 [[audits.wgpu-core]]
4020 who = "Nicolas Silva <nical@fastmail.com>"
4021 criteria = "safe-to-deploy"
4022 delta = "0.14.0@git:24a904256e225b20b11fb30f914ef53212a2909e -> 0.15.0@git:48d8666de002c7bfddbe85a2596f7748b4cc18b4"
4023
4024 [[audits.wgpu-core]]
4025 who = "Nicolas Silva <nical@fastmail.com>"
4026 criteria = "safe-to-deploy"
4027 delta = "0.14.0@git:fac4731288117d951d0944d96cf0b00fa006dd6c -> 0.14.0@git:24a904256e225b20b11fb30f914ef53212a2909e"
4028
4029 [[audits.wgpu-core]]
4030 who = "Nicolas Silva <nical@fastmail.com>"
4031 criteria = "safe-to-deploy"
4032 delta = "0.15.0@git:41de797c745d317e93b9cf50e7446faff7f65954 -> 0.15.0@git:581b22e6a026ac92589be2f36a30357600f9d02c"
4033
4034 [[audits.wgpu-core]]
4035 who = "Nicolas Silva <nical@fastmail.com>"
4036 criteria = "safe-to-deploy"
4037 delta = "0.15.0@git:48d8666de002c7bfddbe85a2596f7748b4cc18b4 -> 0.15.0@git:41de797c745d317e93b9cf50e7446faff7f65954"
4038
4039 [[audits.wgpu-core]]
4040 who = "Nicolas Silva <nical@fastmail.com>"
4041 criteria = "safe-to-deploy"
4042 delta = "0.15.0@git:581b22e6a026ac92589be2f36a30357600f9d02c -> 0.15.0@git:b33731c44c9dd3bfb79d889e7a699c26c3929cd3"
4043
4044 [[audits.wgpu-core]]
4045 who = "Nicolas Silva <nical@fastmail.com>"
4046 criteria = "safe-to-deploy"
4047 delta = "0.15.0@git:73b4257b17cc62ecc8df6d6aa3730bd9c6cba4b9 -> 0.15.0@git:f3bf0f782e4dfc561d48e758e1f1e04f77860925"
4048
4049 [[audits.wgpu-core]]
4050 who = "Teodor Tanasoaia <ttanasoaia@mozilla.com>"
4051 criteria = "safe-to-deploy"
4052 delta = "0.15.0@git:74303308cd6030071889e865c40aa638214ed938 -> 0.15.0@git:73b4257b17cc62ecc8df6d6aa3730bd9c6cba4b9"
4053
4054 [[audits.wgpu-core]]
4055 who = "Nicolas Silva <nical@fastmail.com>"
4056 criteria = "safe-to-deploy"
4057 delta = "0.15.0@git:b33731c44c9dd3bfb79d889e7a699c26c3929cd3 -> 0.15.0@git:74303308cd6030071889e865c40aa638214ed938"
4058
4059 [[audits.wgpu-core]]
4060 who = "Nicolas Silva <nical@fastmail.com>"
4061 criteria = "safe-to-deploy"
4062 delta = "0.15.0@git:f3bf0f782e4dfc561d48e758e1f1e04f77860925 -> 0.16.0@git:25cb9f61e9a6be572ee42536bbe57aa5f759a700"
4063
4064 [[audits.wgpu-core]]
4065 who = "Erich Gubler <erichdongubler@gmail.com>"
4066 criteria = "safe-to-deploy"
4067 delta = "0.16.0@git:1161a22f4fbb4fc204eb06f2ac4243f83e0e980d -> 0.17.0@git:09b010b26af6876ce84991576a168a572172f08d"
4068
4069 [[audits.wgpu-core]]
4070 who = "Erich Gubler <erichdongubler@gmail.com>"
4071 criteria = "safe-to-deploy"
4072 delta = "0.16.0@git:25cb9f61e9a6be572ee42536bbe57aa5f759a700 -> 0.16.0@git:f71a1bc736fde37509262ca03e91d8f56a13aeb5"
4073
4074 [[audits.wgpu-core]]
4075 who = "Nicolas Silva <nical@fastmail.com>"
4076 criteria = "safe-to-deploy"
4077 delta = "0.16.0@git:dcad7dfba92dd85c3ca21bb553a61834e01b04f5 -> 0.16.0@git:e4eb5b38ecb5646ec354c16ff1128f7e49c0f020"
4078
4079 [[audits.wgpu-core]]
4080 who = "Nicolas Silva <nical@fastmail.com>"
4081 criteria = "safe-to-deploy"
4082 delta = "0.16.0@git:e4eb5b38ecb5646ec354c16ff1128f7e49c0f020 -> 0.16.0@git:1161a22f4fbb4fc204eb06f2ac4243f83e0e980d"
4083
4084 [[audits.wgpu-core]]
4085 who = "Teodor Tanasoaia <ttanasoaia@mozilla.com>"
4086 criteria = "safe-to-deploy"
4087 delta = "0.16.0@git:f71a1bc736fde37509262ca03e91d8f56a13aeb5 -> 0.16.0@git:dcad7dfba92dd85c3ca21bb553a61834e01b04f5"
4088
4089 [[audits.wgpu-core]]
4090 who = "Erich Gubler <erichdongubler@gmail.com>"
4091 criteria = "safe-to-deploy"
4092 delta = "0.17.0@git:09b010b26af6876ce84991576a168a572172f08d -> 0.17.0@git:7c6b85756237f77bfe8d6231dfc7a1412ff662b6"
4093
4094 [[audits.wgpu-core]]
4095 who = "Nicolas Silva <nical@fastmail.com>"
4096 criteria = "safe-to-deploy"
4097 delta = "0.17.0@git:1495e159faf721cbf87a0634157682f454a963fb -> 0.17.0@git:858d7d590ef9ebfe1b91f6f0925aacde15cce714"
4098
4099 [[audits.wgpu-core]]
4100 who = "Nicolas Silva <nical@fastmail.com>"
4101 criteria = "safe-to-deploy"
4102 delta = "0.17.0@git:332cd0325da52675432830870584ec9766679c34 -> 0.17.0@git:7fea9e934efd8d5dc03b9aa3e06b775c1ac4a23e"
4103
4104 [[audits.wgpu-core]]
4105 who = "Erich Gubler <erichdongubler@gmail.com>"
4106 criteria = "safe-to-deploy"
4107 delta = "0.17.0@git:7c6b85756237f77bfe8d6231dfc7a1412ff662b6 -> 0.17.0@git:332cd0325da52675432830870584ec9766679c34"
4108
4109 [[audits.wgpu-core]]
4110 who = "Erich Gubler <erichdongubler@gmail.com>"
4111 criteria = "safe-to-deploy"
4112 delta = "0.17.0@git:7e0d6c971f900f6a8f01a9de9c41f7894164a82c -> 0.17.0@git:9a76c483da4891fb7046c579e36d7c54bdb0b251"
4113
4114 [[audits.wgpu-core]]
4115 who = "Nicolas Silva <nical@fastmail.com>"
4116 criteria = "safe-to-deploy"
4117 delta = "0.17.0@git:7fea9e934efd8d5dc03b9aa3e06b775c1ac4a23e -> 0.17.0@git:7e0d6c971f900f6a8f01a9de9c41f7894164a82c"
4118
4119 [[audits.wgpu-core]]
4120 who = "Nicolas Silva <nical@fastmail.com>"
4121 criteria = "safe-to-deploy"
4122 delta = "0.17.0@git:9a76c483da4891fb7046c579e36d7c54bdb0b251 -> 0.17.0@git:1495e159faf721cbf87a0634157682f454a963fb"
4123
4124 [[audits.wgpu-hal]]
4125 who = "Dzmitry Malyshau <kvark@fastmail.com>"
4126 criteria = "safe-to-deploy"
4127 version = "0.12.0"
4128 notes = """
4129 This crate, up through the indicated version, was written or reviewed
4130 by Dzmitry Malyshau while he was a Mozilla employee. Dzmitry left
4131 Mozilla at the beginning of February 2022. This audit statement was
4132 collected by Jim Blandy, a Mozilla employee, over email in July 2022:
4133 Dzmitry was shown, and agreed to, the 'safe-to-deploy' text.
4134 """
4135
4136 [[audits.wgpu-hal]]
4137 who = "Jim Blandy <jimb@mozilla.com>"
4138 criteria = "safe-to-deploy"
4139 delta = "0.12.0 -> 0.13.0"
4140
4141 [[audits.wgpu-hal]]
4142 who = "Jim Blandy <jimb@red-bean.com>"
4143 criteria = "safe-to-deploy"
4144 delta = "0.13.0 -> 0.14.0"
4145 notes = "Audit by Erich Gubler, Jim Blandy, Nicolas Silva, and Teodor Tanasoaia."
4146
4147 [[audits.wgpu-hal]]
4148 who = "Nicolas Silva <nical@fastmail.com>"
4149 criteria = "safe-to-deploy"
4150 delta = "0.14.0 -> 0.14.0@git:fac4731288117d951d0944d96cf0b00fa006dd6c"
4151
4152 [[audits.wgpu-hal]]
4153 who = "Nicolas Silva <nical@fastmail.com>"
4154 criteria = "safe-to-deploy"
4155 delta = "0.14.0@git:24a904256e225b20b11fb30f914ef53212a2909e -> 0.15.1@git:48d8666de002c7bfddbe85a2596f7748b4cc18b4"
4156
4157 [[audits.wgpu-hal]]
4158 who = "Nicolas Silva <nical@fastmail.com>"
4159 criteria = "safe-to-deploy"
4160 delta = "0.14.0@git:fac4731288117d951d0944d96cf0b00fa006dd6c -> 0.14.0@git:24a904256e225b20b11fb30f914ef53212a2909e"
4161
4162 [[audits.wgpu-hal]]
4163 who = "Nicolas Silva <nical@fastmail.com>"
4164 criteria = "safe-to-deploy"
4165 delta = "0.15.1@git:41de797c745d317e93b9cf50e7446faff7f65954 -> 0.15.1@git:581b22e6a026ac92589be2f36a30357600f9d02c"
4166
4167 [[audits.wgpu-hal]]
4168 who = "Nicolas Silva <nical@fastmail.com>"
4169 criteria = "safe-to-deploy"
4170 delta = "0.15.1@git:48d8666de002c7bfddbe85a2596f7748b4cc18b4 -> 0.15.1@git:41de797c745d317e93b9cf50e7446faff7f65954"
4171
4172 [[audits.wgpu-hal]]
4173 who = "Nicolas Silva <nical@fastmail.com>"
4174 criteria = "safe-to-deploy"
4175 delta = "0.15.1@git:581b22e6a026ac92589be2f36a30357600f9d02c -> 0.15.1@git:b33731c44c9dd3bfb79d889e7a699c26c3929cd3"
4176
4177 [[audits.wgpu-hal]]
4178 who = "Nicolas Silva <nical@fastmail.com>"
4179 criteria = "safe-to-deploy"
4180 delta = "0.15.1@git:73b4257b17cc62ecc8df6d6aa3730bd9c6cba4b9 -> 0.15.1@git:f3bf0f782e4dfc561d48e758e1f1e04f77860925"
4181
4182 [[audits.wgpu-hal]]
4183 who = "Teodor Tanasoaia <ttanasoaia@mozilla.com>"
4184 criteria = "safe-to-deploy"
4185 delta = "0.15.1@git:74303308cd6030071889e865c40aa638214ed938 -> 0.15.1@git:73b4257b17cc62ecc8df6d6aa3730bd9c6cba4b9"
4186
4187 [[audits.wgpu-hal]]
4188 who = "Nicolas Silva <nical@fastmail.com>"
4189 criteria = "safe-to-deploy"
4190 delta = "0.15.1@git:b33731c44c9dd3bfb79d889e7a699c26c3929cd3 -> 0.15.1@git:74303308cd6030071889e865c40aa638214ed938"
4191
4192 [[audits.wgpu-hal]]
4193 who = "Nicolas Silva <nical@fastmail.com>"
4194 criteria = "safe-to-deploy"
4195 delta = "0.15.1@git:f3bf0f782e4dfc561d48e758e1f1e04f77860925 -> 0.16.0@git:25cb9f61e9a6be572ee42536bbe57aa5f759a700"
4196
4197 [[audits.wgpu-hal]]
4198 who = "Erich Gubler <erichdongubler@gmail.com>"
4199 criteria = "safe-to-deploy"
4200 delta = "0.16.0@git:1161a22f4fbb4fc204eb06f2ac4243f83e0e980d -> 0.17.0@git:09b010b26af6876ce84991576a168a572172f08d"
4201
4202 [[audits.wgpu-hal]]
4203 who = "Erich Gubler <erichdongubler@gmail.com>"
4204 criteria = "safe-to-deploy"
4205 delta = "0.16.0@git:25cb9f61e9a6be572ee42536bbe57aa5f759a700 -> 0.16.0@git:f71a1bc736fde37509262ca03e91d8f56a13aeb5"
4206
4207 [[audits.wgpu-hal]]
4208 who = "Nicolas Silva <nical@fastmail.com>"
4209 criteria = "safe-to-deploy"
4210 delta = "0.16.0@git:dcad7dfba92dd85c3ca21bb553a61834e01b04f5 -> 0.16.0@git:e4eb5b38ecb5646ec354c16ff1128f7e49c0f020"
4211
4212 [[audits.wgpu-hal]]
4213 who = "Nicolas Silva <nical@fastmail.com>"
4214 criteria = "safe-to-deploy"
4215 delta = "0.16.0@git:e4eb5b38ecb5646ec354c16ff1128f7e49c0f020 -> 0.16.0@git:1161a22f4fbb4fc204eb06f2ac4243f83e0e980d"
4216
4217 [[audits.wgpu-hal]]
4218 who = "Teodor Tanasoaia <ttanasoaia@mozilla.com>"
4219 criteria = "safe-to-deploy"
4220 delta = "0.16.0@git:f71a1bc736fde37509262ca03e91d8f56a13aeb5 -> 0.16.0@git:dcad7dfba92dd85c3ca21bb553a61834e01b04f5"
4221
4222 [[audits.wgpu-hal]]
4223 who = "Erich Gubler <erichdongubler@gmail.com>"
4224 criteria = "safe-to-deploy"
4225 delta = "0.17.0@git:09b010b26af6876ce84991576a168a572172f08d -> 0.17.0@git:7c6b85756237f77bfe8d6231dfc7a1412ff662b6"
4226
4227 [[audits.wgpu-hal]]
4228 who = "Nicolas Silva <nical@fastmail.com>"
4229 criteria = "safe-to-deploy"
4230 delta = "0.17.0@git:1495e159faf721cbf87a0634157682f454a963fb -> 0.17.0@git:858d7d590ef9ebfe1b91f6f0925aacde15cce714"
4231
4232 [[audits.wgpu-hal]]
4233 who = "Nicolas Silva <nical@fastmail.com>"
4234 criteria = "safe-to-deploy"
4235 delta = "0.17.0@git:332cd0325da52675432830870584ec9766679c34 -> 0.17.0@git:7fea9e934efd8d5dc03b9aa3e06b775c1ac4a23e"
4236
4237 [[audits.wgpu-hal]]
4238 who = "Erich Gubler <erichdongubler@gmail.com>"
4239 criteria = "safe-to-deploy"
4240 delta = "0.17.0@git:7c6b85756237f77bfe8d6231dfc7a1412ff662b6 -> 0.17.0@git:332cd0325da52675432830870584ec9766679c34"
4241
4242 [[audits.wgpu-hal]]
4243 who = "Erich Gubler <erichdongubler@gmail.com>"
4244 criteria = "safe-to-deploy"
4245 delta = "0.17.0@git:7e0d6c971f900f6a8f01a9de9c41f7894164a82c -> 0.17.0@git:9a76c483da4891fb7046c579e36d7c54bdb0b251"
4246
4247 [[audits.wgpu-hal]]
4248 who = "Nicolas Silva <nical@fastmail.com>"
4249 criteria = "safe-to-deploy"
4250 delta = "0.17.0@git:7fea9e934efd8d5dc03b9aa3e06b775c1ac4a23e -> 0.17.0@git:7e0d6c971f900f6a8f01a9de9c41f7894164a82c"
4251
4252 [[audits.wgpu-hal]]
4253 who = "Nicolas Silva <nical@fastmail.com>"
4254 criteria = "safe-to-deploy"
4255 delta = "0.17.0@git:9a76c483da4891fb7046c579e36d7c54bdb0b251 -> 0.17.0@git:1495e159faf721cbf87a0634157682f454a963fb"
4256
4257 [[audits.wgpu-types]]
4258 who = "Dzmitry Malyshau <kvark@fastmail.com>"
4259 criteria = "safe-to-deploy"
4260 version = "0.12.0"
4261 notes = """
4262 This crate, up through the indicated version, was written or reviewed
4263 by Dzmitry Malyshau while he was a Mozilla employee. Dzmitry left
4264 Mozilla at the beginning of February 2022. This audit statement was
4265 collected by Jim Blandy, a Mozilla employee, over email in July 2022:
4266 Dzmitry was shown, and agreed to, the 'safe-to-deploy' text.
4267 """
4268
4269 [[audits.wgpu-types]]
4270 who = "Jim Blandy <jimb@mozilla.com>"
4271 criteria = "safe-to-deploy"
4272 delta = "0.12.0 -> 0.13.0"
4273
4274 [[audits.wgpu-types]]
4275 who = "Jim Blandy <jimb@red-bean.com>"
4276 criteria = "safe-to-deploy"
4277 delta = "0.13.0 -> 0.14.0"
4278 notes = "Audit by Erich Gubler, Jim Blandy, Nicolas Silva, and Teodor Tanasoaia."
4279
4280 [[audits.wgpu-types]]
4281 who = "Nicolas Silva <nical@fastmail.com>"
4282 criteria = "safe-to-deploy"
4283 delta = "0.14.0 -> 0.14.0@git:fac4731288117d951d0944d96cf0b00fa006dd6c"
4284
4285 [[audits.wgpu-types]]
4286 who = "Nicolas Silva <nical@fastmail.com>"
4287 criteria = "safe-to-deploy"
4288 delta = "0.14.0@git:24a904256e225b20b11fb30f914ef53212a2909e -> 0.15.0@git:48d8666de002c7bfddbe85a2596f7748b4cc18b4"
4289
4290 [[audits.wgpu-types]]
4291 who = "Nicolas Silva <nical@fastmail.com>"
4292 criteria = "safe-to-deploy"
4293 delta = "0.14.0@git:fac4731288117d951d0944d96cf0b00fa006dd6c -> 0.14.0@git:24a904256e225b20b11fb30f914ef53212a2909e"
4294
4295 [[audits.wgpu-types]]
4296 who = "Nicolas Silva <nical@fastmail.com>"
4297 criteria = "safe-to-deploy"
4298 delta = "0.15.0@git:41de797c745d317e93b9cf50e7446faff7f65954 -> 0.15.0@git:581b22e6a026ac92589be2f36a30357600f9d02c"
4299
4300 [[audits.wgpu-types]]
4301 who = "Nicolas Silva <nical@fastmail.com>"
4302 criteria = "safe-to-deploy"
4303 delta = "0.15.0@git:48d8666de002c7bfddbe85a2596f7748b4cc18b4 -> 0.15.0@git:41de797c745d317e93b9cf50e7446faff7f65954"
4304
4305 [[audits.wgpu-types]]
4306 who = "Nicolas Silva <nical@fastmail.com>"
4307 criteria = "safe-to-deploy"
4308 delta = "0.15.0@git:581b22e6a026ac92589be2f36a30357600f9d02c -> 0.15.0@git:b33731c44c9dd3bfb79d889e7a699c26c3929cd3"
4309
4310 [[audits.wgpu-types]]
4311 who = "Nicolas Silva <nical@fastmail.com>"
4312 criteria = "safe-to-deploy"
4313 delta = "0.15.0@git:73b4257b17cc62ecc8df6d6aa3730bd9c6cba4b9 -> 0.15.0@git:f3bf0f782e4dfc561d48e758e1f1e04f77860925"
4314
4315 [[audits.wgpu-types]]
4316 who = "Teodor Tanasoaia <ttanasoaia@mozilla.com>"
4317 criteria = "safe-to-deploy"
4318 delta = "0.15.0@git:74303308cd6030071889e865c40aa638214ed938 -> 0.15.0@git:73b4257b17cc62ecc8df6d6aa3730bd9c6cba4b9"
4319
4320 [[audits.wgpu-types]]
4321 who = "Nicolas Silva <nical@fastmail.com>"
4322 criteria = "safe-to-deploy"
4323 delta = "0.15.0@git:b33731c44c9dd3bfb79d889e7a699c26c3929cd3 -> 0.15.0@git:74303308cd6030071889e865c40aa638214ed938"
4324
4325 [[audits.wgpu-types]]
4326 who = "Nicolas Silva <nical@fastmail.com>"
4327 criteria = "safe-to-deploy"
4328 delta = "0.15.0@git:f3bf0f782e4dfc561d48e758e1f1e04f77860925 -> 0.16.0@git:25cb9f61e9a6be572ee42536bbe57aa5f759a700"
4329
4330 [[audits.wgpu-types]]
4331 who = "Erich Gubler <erichdongubler@gmail.com>"
4332 criteria = "safe-to-deploy"
4333 delta = "0.16.0@git:1161a22f4fbb4fc204eb06f2ac4243f83e0e980d -> 0.17.0@git:09b010b26af6876ce84991576a168a572172f08d"
4334
4335 [[audits.wgpu-types]]
4336 who = "Erich Gubler <erichdongubler@gmail.com>"
4337 criteria = "safe-to-deploy"
4338 delta = "0.16.0@git:25cb9f61e9a6be572ee42536bbe57aa5f759a700 -> 0.16.0@git:f71a1bc736fde37509262ca03e91d8f56a13aeb5"
4339
4340 [[audits.wgpu-types]]
4341 who = "Nicolas Silva <nical@fastmail.com>"
4342 criteria = "safe-to-deploy"
4343 delta = "0.16.0@git:dcad7dfba92dd85c3ca21bb553a61834e01b04f5 -> 0.16.0@git:e4eb5b38ecb5646ec354c16ff1128f7e49c0f020"
4344
4345 [[audits.wgpu-types]]
4346 who = "Nicolas Silva <nical@fastmail.com>"
4347 criteria = "safe-to-deploy"
4348 delta = "0.16.0@git:e4eb5b38ecb5646ec354c16ff1128f7e49c0f020 -> 0.16.0@git:1161a22f4fbb4fc204eb06f2ac4243f83e0e980d"
4349
4350 [[audits.wgpu-types]]
4351 who = "Teodor Tanasoaia <ttanasoaia@mozilla.com>"
4352 criteria = "safe-to-deploy"
4353 delta = "0.16.0@git:f71a1bc736fde37509262ca03e91d8f56a13aeb5 -> 0.16.0@git:dcad7dfba92dd85c3ca21bb553a61834e01b04f5"
4354
4355 [[audits.wgpu-types]]
4356 who = "Erich Gubler <erichdongubler@gmail.com>"
4357 criteria = "safe-to-deploy"
4358 delta = "0.17.0@git:09b010b26af6876ce84991576a168a572172f08d -> 0.17.0@git:7c6b85756237f77bfe8d6231dfc7a1412ff662b6"
4359
4360 [[audits.wgpu-types]]
4361 who = "Nicolas Silva <nical@fastmail.com>"
4362 criteria = "safe-to-deploy"
4363 delta = "0.17.0@git:1495e159faf721cbf87a0634157682f454a963fb -> 0.17.0@git:858d7d590ef9ebfe1b91f6f0925aacde15cce714"
4364
4365 [[audits.wgpu-types]]
4366 who = "Nicolas Silva <nical@fastmail.com>"
4367 criteria = "safe-to-deploy"
4368 delta = "0.17.0@git:332cd0325da52675432830870584ec9766679c34 -> 0.17.0@git:7fea9e934efd8d5dc03b9aa3e06b775c1ac4a23e"
4369
4370 [[audits.wgpu-types]]
4371 who = "Erich Gubler <erichdongubler@gmail.com>"
4372 criteria = "safe-to-deploy"
4373 delta = "0.17.0@git:7c6b85756237f77bfe8d6231dfc7a1412ff662b6 -> 0.17.0@git:332cd0325da52675432830870584ec9766679c34"
4374
4375 [[audits.wgpu-types]]
4376 who = "Erich Gubler <erichdongubler@gmail.com>"
4377 criteria = "safe-to-deploy"
4378 delta = "0.17.0@git:7e0d6c971f900f6a8f01a9de9c41f7894164a82c -> 0.17.0@git:9a76c483da4891fb7046c579e36d7c54bdb0b251"
4379
4380 [[audits.wgpu-types]]
4381 who = "Nicolas Silva <nical@fastmail.com>"
4382 criteria = "safe-to-deploy"
4383 delta = "0.17.0@git:7fea9e934efd8d5dc03b9aa3e06b775c1ac4a23e -> 0.17.0@git:7e0d6c971f900f6a8f01a9de9c41f7894164a82c"
4384
4385 [[audits.wgpu-types]]
4386 who = "Nicolas Silva <nical@fastmail.com>"
4387 criteria = "safe-to-deploy"
4388 delta = "0.17.0@git:9a76c483da4891fb7046c579e36d7c54bdb0b251 -> 0.17.0@git:1495e159faf721cbf87a0634157682f454a963fb"
4389
4390 [[audits.whatsys]]
4391 who = "Bobby Holley <bobbyholley@gmail.com>"
4392 criteria = "safe-to-deploy"
4393 version = "0.1.2"
4394 notes = """
4395 Contains platform-specific FFI code for apple, mac, and windows. The windows code
4396 also contains a small C file compiled at build-time. I audited all of it and it
4397 looks correct.
4398 """
4399
4400 [[audits.whatsys]]
4401 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
4402 criteria = "safe-to-deploy"
4403 delta = "0.1.2 -> 0.3.1"
4404 notes = "Maintained by me. I have written or reviewed all of the code."
4405
4406 [[audits.winreg]]
4407 who = "Ray Kraesig <rkraesig@mozilla.com>"
4408 criteria = "safe-to-run"
4409 version = "0.10.1"
4410 notes = """
4411 This crate uses a lot of `unsafe`; not all of it is necessary, and not all of it
4412 is correct. (In particular, the alignment of data buffers does not seem to be
4413 correctly ensured at type-conversion time.) However, the code is not deceptive,
4414 and any more subtle issues do not appear to be exploitable -- certainly not from
4415 a test environment.
4416 """
4417
4418 [[audits.wpf-gpu-raster]]
4419 who = "Lee Salzman <lsalzman@mozilla.com>"
4420 criteria = "safe-to-deploy"
4421 version = "0.1.0"
4422 notes = "Written and maintained by Gfx team at Mozilla."
4423
4424 [[audits.writeable]]
4425 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
4426 criteria = "safe-to-deploy"
4427 version = "0.5.2"
4428 notes = "writeable is a variation of fmt::Write with sink version. This uses `unsafe` block to handle potentially-invalid UTF-8 character. I've vetted the one instance of unsafe code."
4429
4430 [[audits.xmldecl]]
4431 who = "Henri Sivonen <hsivonen@hsivonen.fi>"
4432 criteria = "safe-to-deploy"
4433 version = "0.2.0"
4434 notes = "I, Henri Sivonen, wrote this crate myself for Gecko even though it's published on crates.io."
4435
4436 [[audits.yoke]]
4437 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
4438 criteria = "safe-to-deploy"
4439 version = "0.7.1"
4440 notes = "This crate is for zero-copy serialization for ICU4X data structure, and maintained by ICU4X team. Since this uses unsafe block for serialization, I audited code."
4441
4442 [[audits.yoke-derive]]
4443 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
4444 criteria = "safe-to-deploy"
4445 version = "0.7.1@git:14e9a3a9857be74582abe2dfa7ab799c5eaac873"
4446 notes = "This crate is a helper for yoke crate that is ICU4X data structure, and maintained by ICU4X team. Since this uses unsafe block for serialization, all has the comment why this uses unsafe and I audited code."
4447
4448 [[audits.zerofrom]]
4449 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
4450 criteria = "safe-to-deploy"
4451 version = "0.1.2"
4452 notes = "This crate is zero-copy version of \"From\". This has no unsafe code and uses no ambient capabilities."
4453
4454 [[audits.zerofrom-derive]]
4455 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
4456 criteria = "safe-to-deploy"
4457 version = "0.1.2@git:14e9a3a9857be74582abe2dfa7ab799c5eaac873"
4458 notes = "This is custom derives for `ZeroFrom` that is from zerofrom crate. This has no unsafe code and uses no ambient capabilities."
4459
4460 [[audits.zerovec]]
4461 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
4462 criteria = "safe-to-deploy"
4463 version = "0.9.4"
4464 notes = "This crate is zero-copy data structure implmentation. Although this uses unsafe block in several code, it requires for zero-copy. And this has a comment in code why this uses unsafe and I audited code."
4465
4466 [[audits.zerovec-derive]]
4467 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
4468 criteria = "safe-to-deploy"
4469 version = "0.9.4@git:14e9a3a9857be74582abe2dfa7ab799c5eaac873"
4470 notes = "This is custom derives for `ZeroVec` that is from zerovec crate. Although this uses unsafe block for zero-copy, this has a comment in code why this uses unsafe and I audited code."
4471
4472 [[audits.zip]]
4473 who = "Mike Hommey <mh+mozilla@glandium.org>"
4474 criteria = "safe-to-run"
4475 delta = "0.6.2 -> 0.6.3"
4476
4477 [[audits.zip]]
4478 who = "Mike Hommey <mh+mozilla@glandium.org>"
4479 criteria = "safe-to-run"
4480 delta = "0.6.3 -> 0.6.4"
4481
4482 [[trusted.aho-corasick]]
4483 criteria = "safe-to-deploy"
4484 user-id = 189 # Andrew Gallant (BurntSushi)
4485 start = "2019-03-28"
4486 end = "2024-05-03"
4487
4488 [[trusted.anstyle]]
4489 criteria = "safe-to-deploy"
4490 user-id = 6743 # Ed Page (epage)
4491 start = "2022-05-18"
4492 end = "2024-09-28"
4493
4494 [[trusted.async-trait]]
4495 criteria = "safe-to-deploy"
4496 user-id = 3618 # David Tolnay (dtolnay)
4497 start = "2019-07-23"
4498 end = "2024-04-25"
4499
4500 [[trusted.atomic]]
4501 criteria = "safe-to-deploy"
4502 user-id = 2915 # Amanieu d'Antras (Amanieu)
4503 start = "2019-02-22"
4504 end = "2024-05-05"
4505
4506 [[trusted.byteorder]]
4507 criteria = "safe-to-deploy"
4508 user-id = 189 # Andrew Gallant (BurntSushi)
4509 start = "2019-06-09"
4510 end = "2024-05-03"
4511
4512 [[trusted.bytes]]
4513 criteria = "safe-to-deploy"
4514 user-id = 6741 # Alice Ryhl (Darksonn)
4515 start = "2021-01-11"
4516 end = "2024-05-05"
4517
4518 [[trusted.clap]]
4519 criteria = "safe-to-deploy"
4520 user-id = 6743 # Ed Page (epage)
4521 start = "2021-12-08"
4522 end = "2024-06-02"
4523
4524 [[trusted.clap_builder]]
4525 criteria = "safe-to-deploy"
4526 user-id = 6743 # Ed Page (epage)
4527 start = "2023-03-28"
4528 end = "2024-06-02"
4529
4530 [[trusted.clap_derive]]
4531 criteria = "safe-to-deploy"
4532 user-id = 6743 # Ed Page (epage)
4533 start = "2021-12-08"
4534 end = "2024-06-02"
4535
4536 [[trusted.clap_lex]]
4537 criteria = "safe-to-deploy"
4538 user-id = 6743 # Ed Page (epage)
4539 start = "2022-04-15"
4540 end = "2024-06-02"
4541
4542 [[trusted.dtoa]]
4543 criteria = "safe-to-deploy"
4544 user-id = 3618 # David Tolnay (dtolnay)
4545 start = "2019-05-02"
4546 end = "2024-04-25"
4547
4548 [[trusted.equivalent]]
4549 criteria = "safe-to-deploy"
4550 user-id = 539 # Josh Stone (cuviper)
4551 start = "2023-02-05"
4552 end = "2024-07-17"
4553
4554 [[trusted.flate2]]
4555 criteria = "safe-to-deploy"
4556 user-id = 4333 # Josh Triplett (joshtriplett)
4557 start = "2020-09-30"
4558 end = "2024-05-05"
4559
4560 [[trusted.hashbrown]]
4561 criteria = "safe-to-deploy"
4562 user-id = 2915 # Amanieu d'Antras (Amanieu)
4563 start = "2019-04-02"
4564 end = "2024-07-17"
4565
4566 [[trusted.headers]]
4567 criteria = "safe-to-deploy"
4568 user-id = 359 # Sean McArthur (seanmonstar)
4569 start = "2019-09-09"
4570 end = "2024-04-25"
4571
4572 [[trusted.httparse]]
4573 criteria = "safe-to-deploy"
4574 user-id = 359 # Sean McArthur (seanmonstar)
4575 start = "2019-07-03"
4576 end = "2024-04-25"
4577
4578 [[trusted.indexmap]]
4579 criteria = "safe-to-deploy"
4580 user-id = 539 # Josh Stone (cuviper)
4581 start = "2020-01-15"
4582 end = "2024-05-05"
4583
4584 [[trusted.inherent]]
4585 criteria = "safe-to-deploy"
4586 user-id = 3618 # David Tolnay (dtolnay)
4587 start = "2019-07-14"
4588 end = "2024-04-25"
4589
4590 [[trusted.iovec]]
4591 criteria = "safe-to-deploy"
4592 user-id = 10 # Carl Lerche (carllerche)
4593 start = "2019-10-09"
4594 end = "2024-05-05"
4595
4596 [[trusted.itoa]]
4597 criteria = "safe-to-deploy"
4598 user-id = 3618 # David Tolnay (dtolnay)
4599 start = "2019-05-02"
4600 end = "2024-04-25"
4601
4602 [[trusted.jobserver]]
4603 criteria = "safe-to-deploy"
4604 user-id = 1 # Alex Crichton (alexcrichton)
4605 start = "2019-03-15"
4606 end = "2024-05-05"
4607
4608 [[trusted.libc]]
4609 criteria = "safe-to-deploy"
4610 user-id = 2915 # Amanieu d'Antras (Amanieu)
4611 start = "2021-01-27"
4612 end = "2024-05-05"
4613
4614 [[trusted.linux-raw-sys]]
4615 criteria = "safe-to-deploy"
4616 user-id = 6825 # Dan Gohman (sunfishcode)
4617 start = "2021-06-12"
4618 end = "2024-09-08"
4619
4620 [[trusted.lock_api]]
4621 criteria = "safe-to-deploy"
4622 user-id = 2915 # Amanieu d'Antras (Amanieu)
4623 start = "2019-05-04"
4624 end = "2024-05-05"
4625
4626 [[trusted.memchr]]
4627 criteria = "safe-to-deploy"
4628 user-id = 189 # Andrew Gallant (BurntSushi)
4629 start = "2019-07-07"
4630 end = "2024-05-03"
4631
4632 [[trusted.mime]]
4633 criteria = "safe-to-deploy"
4634 user-id = 359 # Sean McArthur (seanmonstar)
4635 start = "2019-09-09"
4636 end = "2024-04-25"
4637
4638 [[trusted.mio]]
4639 criteria = "safe-to-deploy"
4640 user-id = 10 # Carl Lerche (carllerche)
4641 start = "2019-05-15"
4642 end = "2024-05-06"
4643
4644 [[trusted.num_cpus]]
4645 criteria = "safe-to-deploy"
4646 user-id = 359 # Sean McArthur (seanmonstar)
4647 start = "2019-06-10"
4648 end = "2024-04-25"
4649
4650 [[trusted.ordered-float]]
4651 criteria = "safe-to-deploy"
4652 user-id = 2017 # Matt Brubeck (mbrubeck)
4653 start = "2019-03-13"
4654 end = "2024-05-06"
4655
4656 [[trusted.parking_lot]]
4657 criteria = "safe-to-deploy"
4658 user-id = 2915 # Amanieu d'Antras (Amanieu)
4659 start = "2019-05-04"
4660 end = "2024-05-05"
4661
4662 [[trusted.parking_lot_core]]
4663 criteria = "safe-to-deploy"
4664 user-id = 2915 # Amanieu d'Antras (Amanieu)
4665 start = "2019-05-04"
4666 end = "2024-05-05"
4667
4668 [[trusted.paste]]
4669 criteria = "safe-to-deploy"
4670 user-id = 3618 # David Tolnay (dtolnay)
4671 start = "2019-03-19"
4672 end = "2024-04-25"
4673
4674 [[trusted.proc-macro-hack]]
4675 criteria = "safe-to-deploy"
4676 user-id = 3618 # David Tolnay (dtolnay)
4677 start = "2019-04-16"
4678 end = "2024-04-25"
4679
4680 [[trusted.proc-macro2]]
4681 criteria = "safe-to-deploy"
4682 user-id = 3618 # David Tolnay (dtolnay)
4683 start = "2019-04-23"
4684 end = "2024-05-30"
4685
4686 [[trusted.quote]]
4687 criteria = "safe-to-deploy"
4688 user-id = 3618 # David Tolnay (dtolnay)
4689 start = "2019-04-09"
4690 end = "2024-05-30"
4691
4692 [[trusted.regex]]
4693 criteria = "safe-to-deploy"
4694 user-id = 189 # Andrew Gallant (BurntSushi)
4695 start = "2019-02-27"
4696 end = "2024-05-03"
4697
4698 [[trusted.regex-syntax]]
4699 criteria = "safe-to-deploy"
4700 user-id = 189 # Andrew Gallant (BurntSushi)
4701 start = "2019-03-30"
4702 end = "2024-05-03"
4703
4704 [[trusted.rustix]]
4705 criteria = "safe-to-deploy"
4706 user-id = 6825 # Dan Gohman (sunfishcode)
4707 start = "2021-10-29"
4708 end = "2024-09-08"
4709
4710 [[trusted.ryu]]
4711 criteria = "safe-to-deploy"
4712 user-id = 3618 # David Tolnay (dtolnay)
4713 start = "2019-05-02"
4714 end = "2024-04-25"
4715
4716 [[trusted.same-file]]
4717 criteria = "safe-to-deploy"
4718 user-id = 189 # Andrew Gallant (BurntSushi)
4719 start = "2019-07-16"
4720 end = "2024-05-03"
4721
4722 [[trusted.scopeguard]]
4723 criteria = "safe-to-deploy"
4724 user-id = 2915 # Amanieu d'Antras (Amanieu)
4725 start = "2020-02-16"
4726 end = "2024-05-05"
4727
4728 [[trusted.serde]]
4729 criteria = "safe-to-deploy"
4730 user-id = 3618 # David Tolnay (dtolnay)
4731 start = "2019-03-01"
4732 end = "2024-04-25"
4733
4734 [[trusted.serde_bytes]]
4735 criteria = "safe-to-deploy"
4736 user-id = 3618 # David Tolnay (dtolnay)
4737 start = "2019-02-25"
4738 end = "2024-04-25"
4739
4740 [[trusted.serde_derive]]
4741 criteria = "safe-to-deploy"
4742 user-id = 3618 # David Tolnay (dtolnay)
4743 start = "2019-03-01"
4744 end = "2024-04-25"
4745
4746 [[trusted.serde_json]]
4747 criteria = "safe-to-deploy"
4748 user-id = 3618 # David Tolnay (dtolnay)
4749 start = "2019-02-28"
4750 end = "2024-04-25"
4751
4752 [[trusted.serde_repr]]
4753 criteria = "safe-to-deploy"
4754 user-id = 3618 # David Tolnay (dtolnay)
4755 start = "2019-04-26"
4756 end = "2024-04-25"
4757
4758 [[trusted.serde_yaml]]
4759 criteria = "safe-to-deploy"
4760 user-id = 3618 # David Tolnay (dtolnay)
4761 start = "2019-05-02"
4762 end = "2024-04-25"
4763
4764 [[trusted.smallvec]]
4765 criteria = "safe-to-deploy"
4766 user-id = 2017 # Matt Brubeck (mbrubeck)
4767 start = "2019-10-28"
4768 end = "2024-05-06"
4769
4770 [[trusted.syn]]
4771 criteria = "safe-to-deploy"
4772 user-id = 3618 # David Tolnay (dtolnay)
4773 start = "2019-03-01"
4774 end = "2024-04-25"
4775
4776 [[trusted.termcolor]]
4777 criteria = "safe-to-deploy"
4778 user-id = 189 # Andrew Gallant (BurntSushi)
4779 start = "2019-06-04"
4780 end = "2024-05-03"
4781
4782 [[trusted.thiserror]]
4783 criteria = "safe-to-deploy"
4784 user-id = 3618 # David Tolnay (dtolnay)
4785 start = "2019-10-09"
4786 end = "2024-04-25"
4787
4788 [[trusted.thiserror-impl]]
4789 criteria = "safe-to-deploy"
4790 user-id = 3618 # David Tolnay (dtolnay)
4791 start = "2019-10-09"
4792 end = "2024-04-25"
4793
4794 [[trusted.threadbound]]
4795 criteria = "safe-to-deploy"
4796 user-id = 3618 # David Tolnay (dtolnay)
4797 start = "2020-06-16"
4798 end = "2024-04-25"
4799
4800 [[trusted.tokio-macros]]
4801 criteria = "safe-to-deploy"
4802 user-id = 6741 # Alice Ryhl (Darksonn)
4803 start = "2020-10-26"
4804 end = "2024-05-05"
4805
4806 [[trusted.tokio-util]]
4807 criteria = "safe-to-deploy"
4808 user-id = 6741 # Alice Ryhl (Darksonn)
4809 start = "2021-01-12"
4810 end = "2024-05-05"
4811
4812 [[trusted.toml]]
4813 criteria = "safe-to-deploy"
4814 user-id = 1 # Alex Crichton (alexcrichton)
4815 start = "2019-05-16"
4816 end = "2024-05-06"
4817
4818 [[trusted.unicode-ident]]
4819 criteria = "safe-to-deploy"
4820 user-id = 3618 # David Tolnay (dtolnay)
4821 start = "2021-10-02"
4822 end = "2024-04-25"
4823
4824 [[trusted.walkdir]]
4825 criteria = "safe-to-deploy"
4826 user-id = 189 # Andrew Gallant (BurntSushi)
4827 start = "2019-06-09"
4828 end = "2024-05-03"
4829
4830 [[trusted.warp]]
4831 criteria = "safe-to-deploy"
4832 user-id = 359 # Sean McArthur (seanmonstar)
4833 start = "2019-03-20"
4834 end = "2024-05-08"
4835
4836 [[trusted.wasi]]
4837 criteria = "safe-to-deploy"
4838 user-id = 1 # Alex Crichton (alexcrichton)
4839 start = "2020-06-03"
4840 end = "2024-05-05"
4841
4842 [[trusted.winapi-util]]
4843 criteria = "safe-to-deploy"
4844 user-id = 189 # Andrew Gallant (BurntSushi)
4845 start = "2020-01-11"
4846 end = "2024-05-03"
4847
4848 [[trusted.windows-sys]]
4849 criteria = "safe-to-deploy"
4850 user-id = 64539 # Kenny Kerr (kennykerr)
4851 start = "2021-11-15"
4852 end = "2024-09-12"