supply-chain/config.toml

   1
   2 # cargo-vet config file
   3
   4 [imports.bytecodealliance]
   5 url = "https://raw.githubusercontent.com/bytecodealliance/wasmtime/main/supply-chain/audits.toml"
   6
   7 [imports.chromeos]
   8 url = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/main/cargo-vet/audits.toml?format=TEXT"
   9
  10 [imports.embark]
  11 url = "https://raw.githubusercontent.com/EmbarkStudios/rust-ecosystem/main/audits.toml"
  12
  13 [imports.mozilla]
  14 url = "https://raw.githubusercontent.com/mozilla/supply-chain/main/audits.toml"
  15
  16 [policy.audioipc-client]
  17 criteria = []
  18 notes = "Going away very soon in bug 1697845"
  19
  20 [policy.audioipc-server]
  21 criteria = []
  22 notes = "Going away very soon in bug 1697845"
  23
  24 [policy.autocfg]
  25 audit-as-crates-io = true
  26 notes = "This is the upstream code plus a few local fixes, see bug 1685697."
  27
  28 [policy.chardetng]
  29 audit-as-crates-io = true
  30 notes = "This is a crate Henri wrote which is also published. We should probably update Firefox to tip and certify that."
  31
  32 [policy.chardetng_c]
  33 audit-as-crates-io = true
  34 notes = "This is a crate Henri wrote which is also published. We should probably update Firefox to tip and certify that."
  35
  36 [policy.coremidi]
  37 audit-as-crates-io = true
  38 notes = "This is a pinned version of the upstream code, presumably to get a fix that hadn't been released yet. We should consider switching to the latest official release."
  39
  40 [policy.cssparser-macros]
  41 audit-as-crates-io = true
  42 notes = "Using non-crates.io revision because the color-4 changes has not been published yet."
  43
  44 [policy.d3d12]
  45 audit-as-crates-io = true
  46 notes = "Unpublished wgpu revisions point to unpublished d3d12 revisions."
  47
  48 [policy.firefox-on-glean]
  49 audit-as-crates-io = false
  50 notes = "The crates.io version of this is just a placeholder to allow public crates to depend on firefox-on-glean."
  51
  52 [policy.geckodriver]
  53 audit-as-crates-io = false
  54 criteria = "safe-to-run"
  55 notes = "This is a first-party crate which is also published to crates.io. We certify audits for this crate as part of the documented release process, but that step happens after the version bump lands on central so we don't enforce it here. It's also used only for automation, so its subtree can be safe-to-run."
  56
  57 [policy.gkrust-gtest]
  58 criteria = "safe-to-run"
  59 notes = "Used for testing."
  60
  61 [policy.gkrust-shared]
  62 dependency-criteria = { tokio-reactor = [], tokio-threadpool = [] }
  63 notes = "The dependencies on tokio-reactor and tokio-threadpools are just a hack to pin the version used by audioipc-{client,server}. Suppress vetting on those for the same reasons behind the policy entries."
  64
  65 [policy.gluesmith]
  66 criteria = "safe-to-run"
  67 notes = "Used for fuzzing."
  68
  69 [policy.http3server]
  70 criteria = "safe-to-run"
  71 notes = "Used for testing."
  72
  73 [policy.l10nregistry]
  74 dependency-criteria = { fluent-testing = "safe-to-run", tokio = "safe-to-run" }
  75 notes = "This crate has two testing-only dependencies which are specified as regular-but-optional rather than a dev-dependencies, because they need to be available to both benchmarks and integration tests."
  76
  77 [policy.libudev-sys]
  78 audit-as-crates-io = false
  79 notes = "This override is an api-compatible fork with an orthogonal implementation."
  80
  81 [policy.marionette]
  82 audit-as-crates-io = true
  83 notes = "This is a first-party crate which is also published to crates.io, but we should publish audits for it for the benefit of the ecosystem."
  84
  85 [policy.midir]
  86 audit-as-crates-io = true
  87 notes = "This is a pinned version of the upstream code, presumably to get a fix that hadn't been released yet. We should consider switching to the latest official release."
  88
  89 [policy.minidump-writer]
  90 audit-as-crates-io = true
  91 notes = "This is a pinned version of the upstream code, presumably to get a fix that hadn't been released yet. We should consider switching to the latest official release."
  92
  93 [policy.mio-named-pipes]
  94 audit-as-crates-io = true
  95 notes = "We have a local fork, but this entire subtree is going away shortly anyway with the old audioipc code."
  96
  97 [policy."mio:0.6.23"]
  98 audit-as-crates-io = true
  99 notes = "Version 0.6.23 is a local fork of upstream which just twiddles some dependencies."
 100
 101 [policy.mozbuild]
 102 audit-as-crates-io = false
 103 notes = "The crates.io version of this is just a placeholder to allow public crates to depend on mozbuild."
 104
 105 [policy.mozdevice]
 106 audit-as-crates-io = true
 107 notes = "This is a first-party crate which is also published to crates.io, but we should publish audits for it for the benefit of the ecosystem."
 108
 109 [policy.mozglue-static]
 110 dependency-criteria = { rustc_version = "safe-to-run" }
 111 notes = "The rustc_version dependency is only used in the build script, and does not generate any runtime code"
 112
 113 [policy.mozprofile]
 114 audit-as-crates-io = true
 115 notes = "This is a first-party crate which is also published to crates.io, but we should publish audits for it for the benefit of the ecosystem."
 116
 117 [policy.mozrunner]
 118 audit-as-crates-io = true
 119 notes = "This is a first-party crate which is also published to crates.io, but we should publish audits for it for the benefit of the ecosystem."
 120
 121 [policy.mozversion]
 122 audit-as-crates-io = true
 123 notes = "This is a first-party crate which is also published to crates.io, but we should publish audits for it for the benefit of the ecosystem."
 124
 125 [policy.naga]
 126 audit-as-crates-io = true
 127 notes = "wgpu-core pins this crate."
 128
 129 [policy.packed_simd_2]
 130 audit-as-crates-io = true
 131 notes = "Based on upstream, see bug 1719674."
 132
 133 [policy.pulse]
 134 audit-as-crates-io = false
 135 notes = "This is a first-party crate which is entirely unrelated to the crates.io package of the same name."
 136
 137 [policy.qcms]
 138 audit-as-crates-io = true
 139 notes = "This is a first-party crate which is also published to crates.io, but we should publish audits for it for the benefit of the ecosystem."
 140
 141 [policy.rure]
 142 audit-as-crates-io = true
 143 notes = "Identical to upstream, but with cdylib and staticlib targets disabled to avoid unnecessary build artifacts and linker errors."
 144
 145 [policy.selectors]
 146 audit-as-crates-io = true
 147 notes = "This is a first-party crate which is also published to crates.io, but we should publish audits for it for the benefit of the ecosystem."
 148
 149 [policy.servo_arc]
 150 audit-as-crates-io = true
 151 notes = "This is a first-party crate which is also published to crates.io, but we should publish audits for it for the benefit of the ecosystem."
 152
 153 [policy.smoosh]
 154 criteria = "safe-to-run"
 155 notes = "We're not shipping this and have no plans to ship it."
 156
 157 [policy.storage]
 158 audit-as-crates-io = false
 159 notes = "This is a first-party crate which is entirely unrelated to the crates.io package of the same name."
 160
 161 [policy.tabs]
 162 audit-as-crates-io = false
 163 notes = "This is a first-party crate, maintained by the appservices team, which is entirely unrelated to the crates.io package of the same name."
 164
 165 [policy.viaduct]
 166 audit-as-crates-io = false
 167 notes = "This is a first-party crate, maintained by the appservices team, which is entirely unrelated to the crates.io package of the same name."
 168
 169 [policy.warp]
 170 audit-as-crates-io = true
 171 notes = "This is a third-party crate, with an extra patch."
 172
 173 [policy.webdriver]
 174 audit-as-crates-io = false
 175 criteria = "safe-to-run"
 176 notes = "This is a first-party crate which is also published to crates.io. We certify audits for this crate as part of the documented release process, but that step happens after the version bump lands on central so we don't enforce it here. It's also used only for automation, so its subtree can be safe-to-run."
 177
 178 [policy.wgpu-core]
 179 audit-as-crates-io = true
 180 notes = "Upstream project which we pin."
 181
 182 [policy.wgpu-hal]
 183 audit-as-crates-io = true
 184 notes = "Upstream project which we pin."
 185
 186 [policy.wgpu-types]
 187 audit-as-crates-io = true
 188 notes = "Upstream project which we pin."
 189
 190 [[exemptions.adler]]
 191 version = "1.0.2"
 192 criteria = "safe-to-deploy"
 193
 194 [[exemptions.ahash]]
 195 version = "0.7.6"
 196 criteria = "safe-to-deploy"
 197
 198 [[exemptions.aho-corasick]]
 199 version = "0.7.18"
 200 criteria = "safe-to-deploy"
 201
 202 [[exemptions.alsa]]
 203 version = "0.4.3"
 204 criteria = "safe-to-deploy"
 205
 206 [[exemptions.alsa-sys]]
 207 version = "0.3.1"
 208 criteria = "safe-to-deploy"
 209
 210 [[exemptions.android_log-sys]]
 211 version = "0.2.0"
 212 criteria = "safe-to-deploy"
 213
 214 [[exemptions.ash]]
 215 version = "0.37.0+1.3.209"
 216 criteria = "safe-to-deploy"
 217
 218 [[exemptions.askama_derive]]
 219 version = "0.11.2"
 220 criteria = "safe-to-deploy"
 221
 222 [[exemptions.askama_escape]]
 223 version = "0.10.3"
 224 criteria = "safe-to-deploy"
 225
 226 [[exemptions.askama_shared]]
 227 version = "0.12.2"
 228 criteria = "safe-to-deploy"
 229
 230 [[exemptions.async-task]]
 231 version = "4.0.3"
 232 criteria = "safe-to-deploy"
 233
 234 [[exemptions.async-trait]]
 235 version = "0.1.56"
 236 criteria = "safe-to-deploy"
 237
 238 [[exemptions.atomic]]
 239 version = "0.4.6"
 240 criteria = "safe-to-deploy"
 241
 242 [[exemptions.audio-mixer]]
 243 version = "0.1.2"
 244 criteria = "safe-to-deploy"
 245
 246 [[exemptions.audio_thread_priority]]
 247 version = "0.26.1"
 248 criteria = "safe-to-deploy"
 249
 250 [[exemptions.base64]]
 251 version = "0.13.0"
 252 criteria = "safe-to-deploy"
 253
 254 [[exemptions.bincode]]
 255 version = "1.3.3"
 256 criteria = "safe-to-deploy"
 257
 258 [[exemptions.bitflags]]
 259 version = "1.3.2"
 260 criteria = "safe-to-deploy"
 261
 262 [[exemptions.bitreader]]
 263 version = "0.3.6"
 264 criteria = "safe-to-deploy"
 265
 266 [[exemptions.block]]
 267 version = "0.1.6"
 268 criteria = "safe-to-deploy"
 269
 270 [[exemptions.block-buffer]]
 271 version = "0.10.2"
 272 criteria = "safe-to-deploy"
 273
 274 [[exemptions.byteorder]]
 275 version = "1.4.3"
 276 criteria = "safe-to-deploy"
 277
 278 [[exemptions.bytes]]
 279 version = "1.1.0"
 280 criteria = "safe-to-deploy"
 281
 282 [[exemptions.cache-padded]]
 283 version = "1.2.0"
 284 criteria = "safe-to-deploy"
 285
 286 [[exemptions.camino]]
 287 version = "1.0.9"
 288 criteria = "safe-to-deploy"
 289
 290 [[exemptions.cargo-platform]]
 291 version = "0.1.2"
 292 criteria = "safe-to-deploy"
 293
 294 [[exemptions.cexpr]]
 295 version = "0.6.0"
 296 criteria = "safe-to-deploy"
 297
 298 [[exemptions.chrono]]
 299 version = "0.4.19"
 300 criteria = "safe-to-deploy"
 301
 302 [[exemptions.chunky-vec]]
 303 version = "0.1.0"
 304 criteria = "safe-to-deploy"
 305
 306 [[exemptions.clang-sys]]
 307 version = "1.3.3"
 308 criteria = "safe-to-deploy"
 309
 310 [[exemptions.clap]]
 311 version = "3.1.18"
 312 criteria = "safe-to-deploy"
 313
 314 [[exemptions.clap_derive]]
 315 version = "3.1.18"
 316 criteria = "safe-to-deploy"
 317
 318 [[exemptions.clap_lex]]
 319 version = "0.2.0"
 320 criteria = "safe-to-deploy"
 321
 322 [[exemptions.cookie]]
 323 version = "0.16.0"
 324 criteria = "safe-to-run"
 325
 326 [[exemptions.core-foundation]]
 327 version = "0.9.3"
 328 criteria = "safe-to-deploy"
 329
 330 [[exemptions.core-foundation-sys]]
 331 version = "0.8.3"
 332 criteria = "safe-to-deploy"
 333
 334 [[exemptions.core-graphics]]
 335 version = "0.22.3"
 336 criteria = "safe-to-deploy"
 337
 338 [[exemptions.core-graphics-types]]
 339 version = "0.1.1"
 340 criteria = "safe-to-deploy"
 341
 342 [[exemptions.core-text]]
 343 version = "19.2.0"
 344 criteria = "safe-to-deploy"
 345
 346 [[exemptions.coreaudio-sys]]
 347 version = "0.2.10"
 348 criteria = "safe-to-deploy"
 349
 350 [[exemptions.coremidi]]
 351 version = "0.6.0@git:fc68464b5445caf111e41f643a2e69ccce0b4f83"
 352 criteria = "safe-to-deploy"
 353
 354 [[exemptions.coremidi-sys]]
 355 version = "3.1.0"
 356 criteria = "safe-to-deploy"
 357
 358 [[exemptions.cose]]
 359 version = "0.1.4"
 360 criteria = "safe-to-deploy"
 361
 362 [[exemptions.cose-c]]
 363 version = "0.1.5"
 364 criteria = "safe-to-deploy"
 365
 366 [[exemptions.cpufeatures]]
 367 version = "0.2.2"
 368 criteria = "safe-to-deploy"
 369
 370 [[exemptions.crc32fast]]
 371 version = "1.3.2"
 372 criteria = "safe-to-deploy"
 373
 374 [[exemptions.crossbeam-channel]]
 375 version = "0.5.4"
 376 criteria = "safe-to-deploy"
 377
 378 [[exemptions.crossbeam-deque]]
 379 version = "0.8.1"
 380 criteria = "safe-to-deploy"
 381
 382 [[exemptions.crossbeam-epoch]]
 383 version = "0.9.8"
 384 criteria = "safe-to-deploy"
 385
 386 [[exemptions.crossbeam-utils]]
 387 version = "0.8.8"
 388 criteria = "safe-to-deploy"
 389
 390 [[exemptions.d3d12]]
 391 version = "0.4.1"
 392 criteria = "safe-to-deploy"
 393
 394 [[exemptions.darling]]
 395 version = "0.13.4"
 396 criteria = "safe-to-deploy"
 397
 398 [[exemptions.darling_core]]
 399 version = "0.13.4"
 400 criteria = "safe-to-deploy"
 401
 402 [[exemptions.darling_macro]]
 403 version = "0.13.4"
 404 criteria = "safe-to-deploy"
 405
 406 [[exemptions.dashmap]]
 407 version = "4.0.2"
 408 criteria = "safe-to-deploy"
 409
 410 [[exemptions.data-encoding]]
 411 version = "2.3.2"
 412 criteria = "safe-to-deploy"
 413
 414 [[exemptions.dbus]]
 415 version = "0.6.5"
 416 criteria = "safe-to-deploy"
 417
 418 [[exemptions.derive_more]]
 419 version = "0.99.17"
 420 criteria = "safe-to-deploy"
 421
 422 [[exemptions.devd-rs]]
 423 version = "0.3.4"
 424 criteria = "safe-to-deploy"
 425
 426 [[exemptions.digest]]
 427 version = "0.10.3"
 428 criteria = "safe-to-deploy"
 429
 430 [[exemptions.dirs]]
 431 version = "4.0.0"
 432 criteria = "safe-to-deploy"
 433
 434 [[exemptions.dirs-sys]]
 435 version = "0.3.7"
 436 criteria = "safe-to-deploy"
 437
 438 [[exemptions.dns-parser]]
 439 version = "0.8.0"
 440 criteria = "safe-to-deploy"
 441
 442 [[exemptions.dogear]]
 443 version = "0.4.0"
 444 criteria = "safe-to-deploy"
 445
 446 [[exemptions.dtoa]]
 447 version = "0.4.8"
 448 criteria = "safe-to-deploy"
 449
 450 [[exemptions.dtoa-short]]
 451 version = "0.3.3"
 452 criteria = "safe-to-deploy"
 453
 454 [[exemptions.dwrote]]
 455 version = "0.11.0"
 456 criteria = "safe-to-deploy"
 457
 458 [[exemptions.enumset]]
 459 version = "1.0.11"
 460 criteria = "safe-to-deploy"
 461
 462 [[exemptions.enumset_derive]]
 463 version = "0.6.0"
 464 criteria = "safe-to-deploy"
 465
 466 [[exemptions.env_logger]]
 467 version = "0.9.0"
 468 criteria = "safe-to-deploy"
 469
 470 [[exemptions.error-chain]]
 471 version = "0.12.4"
 472 criteria = "safe-to-deploy"
 473
 474 [[exemptions.etagere]]
 475 version = "0.2.7"
 476 criteria = "safe-to-deploy"
 477
 478 [[exemptions.euclid]]
 479 version = "0.22.7"
 480 criteria = "safe-to-deploy"
 481
 482 [[exemptions.fallible-iterator]]
 483 version = "0.2.0"
 484 criteria = "safe-to-deploy"
 485
 486 [[exemptions.fallible-streaming-iterator]]
 487 version = "0.1.9"
 488 criteria = "safe-to-deploy"
 489
 490 [[exemptions.fallible_collections]]
 491 version = "0.4.4"
 492 criteria = "safe-to-deploy"
 493
 494 [[exemptions.fastrand]]
 495 version = "1.7.0"
 496 criteria = "safe-to-deploy"
 497
 498 [[exemptions.ffi-support]]
 499 version = "0.4.4"
 500 criteria = "safe-to-deploy"
 501
 502 [[exemptions.flate2]]
 503 version = "1.0.24"
 504 criteria = "safe-to-deploy"
 505
 506 [[exemptions.float-cmp]]
 507 version = "0.6.0"
 508 criteria = "safe-to-deploy"
 509
 510 [[exemptions.foreign-types]]
 511 version = "0.3.2"
 512 criteria = "safe-to-deploy"
 513
 514 [[exemptions.foreign-types-shared]]
 515 version = "0.1.1"
 516 criteria = "safe-to-deploy"
 517
 518 [[exemptions.freetype]]
 519 version = "0.7.0"
 520 criteria = "safe-to-deploy"
 521
 522 [[exemptions.fs-err]]
 523 version = "2.7.0"
 524 criteria = "safe-to-deploy"
 525
 526 [[exemptions.fuchsia-zircon]]
 527 version = "0.3.3"
 528 criteria = "safe-to-run"
 529
 530 [[exemptions.fuchsia-zircon-sys]]
 531 version = "0.3.3"
 532 criteria = "safe-to-run"
 533
 534 [[exemptions.futures]]
 535 version = "0.3.21"
 536 criteria = "safe-to-deploy"
 537
 538 [[exemptions.futures-channel]]
 539 version = "0.3.21"
 540 criteria = "safe-to-deploy"
 541
 542 [[exemptions.futures-core]]
 543 version = "0.3.21"
 544 criteria = "safe-to-deploy"
 545
 546 [[exemptions.futures-executor]]
 547 version = "0.3.21"
 548 criteria = "safe-to-deploy"
 549
 550 [[exemptions.futures-io]]
 551 version = "0.3.21"
 552 criteria = "safe-to-deploy"
 553
 554 [[exemptions.futures-macro]]
 555 version = "0.3.21"
 556 criteria = "safe-to-deploy"
 557
 558 [[exemptions.futures-sink]]
 559 version = "0.3.21"
 560 criteria = "safe-to-deploy"
 561
 562 [[exemptions.futures-task]]
 563 version = "0.3.21"
 564 criteria = "safe-to-deploy"
 565
 566 [[exemptions.futures-util]]
 567 version = "0.3.21"
 568 criteria = "safe-to-deploy"
 569
 570 [[exemptions.generic-array]]
 571 version = "0.14.5"
 572 criteria = "safe-to-deploy"
 573
 574 [[exemptions.getrandom]]
 575 version = "0.2.6"
 576 criteria = "safe-to-deploy"
 577
 578 [[exemptions.gl_generator]]
 579 version = "0.14.0"
 580 criteria = "safe-to-deploy"
 581
 582 [[exemptions.gleam]]
 583 version = "0.13.1"
 584 criteria = "safe-to-deploy"
 585
 586 [[exemptions.glob]]
 587 version = "0.3.0"
 588 criteria = "safe-to-deploy"
 589
 590 [[exemptions.glsl]]
 591 version = "6.0.1"
 592 criteria = "safe-to-deploy"
 593
 594 [[exemptions.glslopt]]
 595 version = "0.1.9"
 596 criteria = "safe-to-deploy"
 597
 598 [[exemptions.goblin]]
 599 version = "0.1.3"
 600 criteria = "safe-to-deploy"
 601
 602 [[exemptions.gpu-alloc]]
 603 version = "0.5.3"
 604 criteria = "safe-to-deploy"
 605
 606 [[exemptions.gpu-alloc-types]]
 607 version = "0.2.0"
 608 criteria = "safe-to-deploy"
 609
 610 [[exemptions.gpu-descriptor]]
 611 version = "0.2.2"
 612 criteria = "safe-to-deploy"
 613
 614 [[exemptions.gpu-descriptor-types]]
 615 version = "0.1.1"
 616 criteria = "safe-to-deploy"
 617
 618 [[exemptions.hashlink]]
 619 version = "0.7.0"
 620 criteria = "safe-to-deploy"
 621
 622 [[exemptions.headers]]
 623 version = "0.3.7"
 624 criteria = "safe-to-run"
 625
 626 [[exemptions.headers-core]]
 627 version = "0.2.0"
 628 criteria = "safe-to-run"
 629
 630 [[exemptions.hermit-abi]]
 631 version = "0.1.19"
 632 criteria = "safe-to-deploy"
 633
 634 [[exemptions.hexf-parse]]
 635 version = "0.2.1"
 636 criteria = "safe-to-deploy"
 637
 638 [[exemptions.httparse]]
 639 version = "1.7.1"
 640 criteria = "safe-to-run"
 641
 642 [[exemptions.ident_case]]
 643 version = "1.0.1"
 644 criteria = "safe-to-deploy"
 645
 646 [[exemptions.idna]]
 647 version = "0.2.3"
 648 criteria = "safe-to-deploy"
 649
 650 [[exemptions.indexmap]]
 651 version = "1.8.2"
 652 criteria = "safe-to-deploy"
 653
 654 [[exemptions.inherent]]
 655 version = "1.0.1"
 656 criteria = "safe-to-deploy"
 657
 658 [[exemptions.instant]]
 659 version = "0.1.12"
 660 criteria = "safe-to-deploy"
 661
 662 [[exemptions.ioctl-sys]]
 663 version = "0.7.1"
 664 criteria = "safe-to-deploy"
 665
 666 [[exemptions.iovec]]
 667 version = "0.1.4"
 668 criteria = "safe-to-deploy"
 669
 670 [[exemptions.itertools]]
 671 version = "0.10.3"
 672 criteria = "safe-to-deploy"
 673
 674 [[exemptions.itoa]]
 675 version = "1.0.2"
 676 criteria = "safe-to-deploy"
 677
 678 [[exemptions.jobserver]]
 679 version = "0.1.24"
 680 criteria = "safe-to-deploy"
 681
 682 [[exemptions.khronos-egl]]
 683 version = "4.1.0"
 684 criteria = "safe-to-deploy"
 685
 686 [[exemptions.khronos_api]]
 687 version = "3.1.0"
 688 criteria = "safe-to-deploy"
 689
 690 [[exemptions.lazycell]]
 691 version = "1.3.0"
 692 criteria = "safe-to-deploy"
 693
 694 [[exemptions.libc]]
 695 version = "0.2.126"
 696 criteria = "safe-to-deploy"
 697
 698 [[exemptions.libdbus-sys]]
 699 version = "0.2.2"
 700 criteria = "safe-to-deploy"
 701
 702 [[exemptions.libloading]]
 703 version = "0.7.3"
 704 criteria = "safe-to-deploy"
 705
 706 [[exemptions.libsqlite3-sys]]
 707 version = "0.25.2"
 708 criteria = "safe-to-deploy"
 709 suggest = false
 710 notes = "The in-gecko feature that we enable makes only pre-built bindings used, and none of the embedded C code is built. The build script was audited and is not doing anything besides exposing those bindings"
 711
 712 [[exemptions.libudev]]
 713 version = "0.2.0"
 714 criteria = "safe-to-deploy"
 715
 716 [[exemptions.line-wrap]]
 717 version = "0.1.1"
 718 criteria = "safe-to-run"
 719
 720 [[exemptions.lmdb-rkv]]
 721 version = "0.14.0"
 722 criteria = "safe-to-deploy"
 723
 724 [[exemptions.lmdb-rkv-sys]]
 725 version = "0.11.2"
 726 criteria = "safe-to-deploy"
 727
 728 [[exemptions.lock_api]]
 729 version = "0.4.7"
 730 criteria = "safe-to-deploy"
 731
 732 [[exemptions.mach]]
 733 version = "0.3.2"
 734 criteria = "safe-to-deploy"
 735
 736 [[exemptions.malloc_buf]]
 737 version = "0.0.6"
 738 criteria = "safe-to-deploy"
 739
 740 [[exemptions.memalloc]]
 741 version = "0.1.0"
 742 criteria = "safe-to-deploy"
 743
 744 [[exemptions.memchr]]
 745 version = "2.5.0"
 746 criteria = "safe-to-deploy"
 747
 748 [[exemptions.memmap2]]
 749 version = "0.5.4"
 750 criteria = "safe-to-deploy"
 751
 752 [[exemptions.memoffset]]
 753 version = "0.6.5"
 754 criteria = "safe-to-deploy"
 755
 756 [[exemptions.metal]]
 757 version = "0.23.1"
 758 criteria = "safe-to-deploy"
 759
 760 [[exemptions.midir]]
 761 version = "0.7.0"
 762 criteria = "safe-to-deploy"
 763
 764 [[exemptions.mime]]
 765 version = "0.3.16"
 766 criteria = "safe-to-deploy"
 767
 768 [[exemptions.mime_guess]]
 769 version = "2.0.4"
 770 criteria = "safe-to-deploy"
 771
 772 [[exemptions.minimal-lexical]]
 773 version = "0.2.1"
 774 criteria = "safe-to-deploy"
 775
 776 [[exemptions.miniz_oxide]]
 777 version = "0.5.3"
 778 criteria = "safe-to-deploy"
 779
 780 [[exemptions.mio]]
 781 version = "0.6.23"
 782 criteria = "safe-to-run"
 783
 784 [[exemptions.mio]]
 785 version = "0.8.0"
 786 criteria = "safe-to-deploy"
 787
 788 [[exemptions.mio-extras]]
 789 version = "2.0.6"
 790 criteria = "safe-to-run"
 791
 792 [[exemptions.miow]]
 793 version = "0.3.7"
 794 criteria = "safe-to-deploy"
 795
 796 [[exemptions.moz_cbor]]
 797 version = "0.1.2"
 798 criteria = "safe-to-deploy"
 799
 800 [[exemptions.murmurhash3]]
 801 version = "0.0.5"
 802 criteria = "safe-to-deploy"
 803
 804 [[exemptions.net2]]
 805 version = "0.2.37"
 806 criteria = "safe-to-run"
 807
 808 [[exemptions.nix]]
 809 version = "0.15.0"
 810 criteria = "safe-to-deploy"
 811
 812 [[exemptions.nom]]
 813 version = "7.1.1"
 814 criteria = "safe-to-deploy"
 815
 816 [[exemptions.ntapi]]
 817 version = "0.3.7"
 818 criteria = "safe-to-deploy"
 819
 820 [[exemptions.num_cpus]]
 821 version = "1.13.1"
 822 criteria = "safe-to-deploy"
 823
 824 [[exemptions.objc]]
 825 version = "0.2.7"
 826 criteria = "safe-to-deploy"
 827
 828 [[exemptions.objc_exception]]
 829 version = "0.1.2"
 830 criteria = "safe-to-deploy"
 831
 832 [[exemptions.object]]
 833 version = "0.28.4"
 834 criteria = "safe-to-deploy"
 835
 836 [[exemptions.once_cell]]
 837 version = "1.12.0"
 838 criteria = "safe-to-deploy"
 839
 840 [[exemptions.ordered-float]]
 841 version = "3.0.0"
 842 criteria = "safe-to-deploy"
 843
 844 [[exemptions.os_str_bytes]]
 845 version = "6.1.0"
 846 criteria = "safe-to-deploy"
 847
 848 [[exemptions.oslog]]
 849 version = "0.1.0"
 850 criteria = "safe-to-deploy"
 851
 852 [[exemptions.owning_ref]]
 853 version = "0.4.1"
 854 criteria = "safe-to-deploy"
 855
 856 [[exemptions.packed_simd_2]]
 857 version = "0.3.7"
 858 criteria = "safe-to-deploy"
 859
 860 [[exemptions.parking_lot]]
 861 version = "0.11.2"
 862 criteria = "safe-to-deploy"
 863
 864 [[exemptions.parking_lot_core]]
 865 version = "0.8.5"
 866 criteria = "safe-to-deploy"
 867
 868 [[exemptions.paste]]
 869 version = "1.0.7"
 870 criteria = "safe-to-deploy"
 871
 872 [[exemptions.peeking_take_while]]
 873 version = "0.1.2"
 874 criteria = "safe-to-deploy"
 875
 876 [[exemptions.phf]]
 877 version = "0.10.1"
 878 criteria = "safe-to-deploy"
 879
 880 [[exemptions.phf_codegen]]
 881 version = "0.10.0"
 882 criteria = "safe-to-deploy"
 883
 884 [[exemptions.phf_generator]]
 885 version = "0.10.0"
 886 criteria = "safe-to-deploy"
 887
 888 [[exemptions.phf_macros]]
 889 version = "0.10.0"
 890 criteria = "safe-to-deploy"
 891
 892 [[exemptions.phf_shared]]
 893 version = "0.10.0"
 894 criteria = "safe-to-deploy"
 895
 896 [[exemptions.pin-project-lite]]
 897 version = "0.2.9"
 898 criteria = "safe-to-deploy"
 899
 900 [[exemptions.pin-utils]]
 901 version = "0.1.0"
 902 criteria = "safe-to-deploy"
 903
 904 [[exemptions.pkg-config]]
 905 version = "0.3.25"
 906 criteria = "safe-to-deploy"
 907
 908 [[exemptions.plain]]
 909 version = "0.2.3"
 910 criteria = "safe-to-deploy"
 911
 912 [[exemptions.plist]]
 913 version = "1.3.1"
 914 criteria = "safe-to-run"
 915
 916 [[exemptions.ppv-lite86]]
 917 version = "0.2.16"
 918 criteria = "safe-to-deploy"
 919
 920 [[exemptions.proc-macro-error]]
 921 version = "1.0.4"
 922 criteria = "safe-to-deploy"
 923
 924 [[exemptions.proc-macro-error-attr]]
 925 version = "1.0.4"
 926 criteria = "safe-to-deploy"
 927
 928 [[exemptions.proc-macro-hack]]
 929 version = "0.5.19"
 930 criteria = "safe-to-deploy"
 931
 932 [[exemptions.profiling]]
 933 version = "1.0.6"
 934 criteria = "safe-to-deploy"
 935
 936 [[exemptions.prost]]
 937 version = "0.8.0"
 938 criteria = "safe-to-deploy"
 939
 940 [[exemptions.prost-derive]]
 941 version = "0.8.0"
 942 criteria = "safe-to-deploy"
 943
 944 [[exemptions.qlog]]
 945 version = "0.4.0"
 946 criteria = "safe-to-deploy"
 947
 948 [[exemptions.quick-error]]
 949 version = "1.2.3"
 950 criteria = "safe-to-deploy"
 951
 952 [[exemptions.rand]]
 953 version = "0.8.5"
 954 criteria = "safe-to-deploy"
 955
 956 [[exemptions.rand_chacha]]
 957 version = "0.3.1"
 958 criteria = "safe-to-deploy"
 959
 960 [[exemptions.rand_core]]
 961 version = "0.6.3"
 962 criteria = "safe-to-deploy"
 963
 964 [[exemptions.range-alloc]]
 965 version = "0.1.2"
 966 criteria = "safe-to-deploy"
 967
 968 [[exemptions.redox_syscall]]
 969 version = "0.2.13"
 970 criteria = "safe-to-deploy"
 971
 972 [[exemptions.regex]]
 973 version = "1.5.6"
 974 criteria = "safe-to-deploy"
 975
 976 [[exemptions.regex-syntax]]
 977 version = "0.6.26"
 978 criteria = "safe-to-deploy"
 979
 980 [[exemptions.remove_dir_all]]
 981 version = "0.5.3"
 982 criteria = "safe-to-deploy"
 983
 984 [[exemptions.replace_with]]
 985 version = "0.1.7"
 986 criteria = "safe-to-deploy"
 987
 988 [[exemptions.ringbuf]]
 989 version = "0.2.8"
 990 criteria = "safe-to-deploy"
 991
 992 [[exemptions.ron]]
 993 version = "0.7.0"
 994 criteria = "safe-to-deploy"
 995
 996 [[exemptions.runloop]]
 997 version = "0.1.0"
 998 criteria = "safe-to-deploy"
 999
1000 [[exemptions.rusqlite]]
1001 version = "0.27.0"
1002 criteria = "safe-to-deploy"
1003
1004 [[exemptions.rust-ini]]
1005 version = "0.10.3"
1006 criteria = "safe-to-deploy"
1007
1008 [[exemptions.rust_cascade]]
1009 version = "1.4.0"
1010 criteria = "safe-to-deploy"
1011
1012 [[exemptions.rust_decimal]]
1013 version = "1.24.0"
1014 criteria = "safe-to-deploy"
1015
1016 [[exemptions.ryu]]
1017 version = "1.0.10"
1018 criteria = "safe-to-deploy"
1019
1020 [[exemptions.safemem]]
1021 version = "0.3.3"
1022 criteria = "safe-to-run"
1023
1024 [[exemptions.same-file]]
1025 version = "1.0.6"
1026 criteria = "safe-to-deploy"
1027
1028 [[exemptions.scoped-tls]]
1029 version = "1.0.0"
1030 criteria = "safe-to-run"
1031
1032 [[exemptions.scopeguard]]
1033 version = "1.1.0"
1034 criteria = "safe-to-deploy"
1035
1036 [[exemptions.scroll]]
1037 version = "0.10.2"
1038 criteria = "safe-to-deploy"
1039
1040 [[exemptions.scroll_derive]]
1041 version = "0.10.5"
1042 criteria = "safe-to-deploy"
1043
1044 [[exemptions.self_cell]]
1045 version = "0.10.2"
1046 criteria = "safe-to-deploy"
1047
1048 [[exemptions.semver]]
1049 version = "1.0.9"
1050 criteria = "safe-to-deploy"
1051
1052 [[exemptions.serde]]
1053 version = "1.0.137"
1054 criteria = "safe-to-deploy"
1055
1056 [[exemptions.serde_bytes]]
1057 version = "0.11.6"
1058 criteria = "safe-to-deploy"
1059
1060 [[exemptions.serde_derive]]
1061 version = "1.0.137"
1062 criteria = "safe-to-deploy"
1063
1064 [[exemptions.serde_json]]
1065 version = "1.0.81"
1066 criteria = "safe-to-deploy"
1067
1068 [[exemptions.serde_repr]]
1069 version = "0.1.8"
1070 criteria = "safe-to-run"
1071
1072 [[exemptions.serde_with]]
1073 version = "1.14.0"
1074 criteria = "safe-to-deploy"
1075
1076 [[exemptions.serde_with_macros]]
1077 version = "1.5.2"
1078 criteria = "safe-to-deploy"
1079
1080 [[exemptions.serde_yaml]]
1081 version = "0.8.24"
1082 criteria = "safe-to-run"
1083
1084 [[exemptions.sfv]]
1085 version = "0.9.2"
1086 criteria = "safe-to-deploy"
1087
1088 [[exemptions.sha1]]
1089 version = "0.10.0"
1090 criteria = "safe-to-run"
1091
1092 [[exemptions.sha2]]
1093 version = "0.10.2"
1094 criteria = "safe-to-deploy"
1095
1096 [[exemptions.shlex]]
1097 version = "1.1.0"
1098 criteria = "safe-to-deploy"
1099
1100 [[exemptions.siphasher]]
1101 version = "0.3.10"
1102 criteria = "safe-to-deploy"
1103
1104 [[exemptions.slab]]
1105 version = "0.4.6"
1106 criteria = "safe-to-deploy"
1107
1108 [[exemptions.smallbitvec]]
1109 version = "2.5.1"
1110 criteria = "safe-to-deploy"
1111
1112 [[exemptions.smallvec]]
1113 version = "1.8.0"
1114 criteria = "safe-to-deploy"
1115
1116 [[exemptions.socket2]]
1117 version = "0.4.4"
1118 criteria = "safe-to-deploy"
1119
1120 [[exemptions.spirv]]
1121 version = "0.2.0+1.5.4"
1122 criteria = "safe-to-deploy"
1123
1124 [[exemptions.stable_deref_trait]]
1125 version = "1.2.0"
1126 criteria = "safe-to-deploy"
1127
1128 [[exemptions.static_assertions]]
1129 version = "1.1.0"
1130 criteria = "safe-to-deploy"
1131
1132 [[exemptions.strsim]]
1133 version = "0.10.0"
1134 criteria = "safe-to-deploy"
1135
1136 [[exemptions.syn]]
1137 version = "1.0.96"
1138 criteria = "safe-to-deploy"
1139
1140 [[exemptions.tempfile]]
1141 version = "3.3.0"
1142 criteria = "safe-to-deploy"
1143
1144 [[exemptions.termcolor]]
1145 version = "1.1.3"
1146 criteria = "safe-to-deploy"
1147
1148 [[exemptions.terminal_size]]
1149 version = "0.1.17"
1150 criteria = "safe-to-deploy"
1151
1152 [[exemptions.textwrap]]
1153 version = "0.15.0"
1154 criteria = "safe-to-deploy"
1155
1156 [[exemptions.thiserror]]
1157 version = "1.0.31"
1158 criteria = "safe-to-deploy"
1159
1160 [[exemptions.thiserror-impl]]
1161 version = "1.0.31"
1162 criteria = "safe-to-deploy"
1163
1164 [[exemptions.threadbound]]
1165 version = "0.1.3"
1166 criteria = "safe-to-deploy"
1167
1168 [[exemptions.time]]
1169 version = "0.1.44"
1170 criteria = "safe-to-deploy"
1171
1172 [[exemptions.time]]
1173 version = "0.3.9"
1174 criteria = "safe-to-run"
1175
1176 [[exemptions.time-macros]]
1177 version = "0.2.4"
1178 criteria = "safe-to-run"
1179
1180 [[exemptions.tokio]]
1181 version = "1.17.0"
1182 criteria = "safe-to-run"
1183
1184 [[exemptions.tokio-macros]]
1185 version = "1.8.0"
1186 criteria = "safe-to-run"
1187
1188 [[exemptions.tokio-stream]]
1189 version = "0.1.9"
1190 criteria = "safe-to-run"
1191
1192 [[exemptions.tokio-util]]
1193 version = "0.7.2"
1194 criteria = "safe-to-run"
1195
1196 [[exemptions.toml]]
1197 version = "0.5.9"
1198 criteria = "safe-to-deploy"
1199
1200 [[exemptions.triple_buffer]]
1201 version = "5.0.6"
1202 criteria = "safe-to-deploy"
1203
1204 [[exemptions.type-map]]
1205 version = "0.4.0"
1206 criteria = "safe-to-deploy"
1207
1208 [[exemptions.typenum]]
1209 version = "1.15.0"
1210 criteria = "safe-to-deploy"
1211
1212 [[exemptions.unicode-ident]]
1213 version = "1.0.0"
1214 criteria = "safe-to-deploy"
1215
1216 [[exemptions.unicode-segmentation]]
1217 version = "1.9.0"
1218 criteria = "safe-to-deploy"
1219
1220 [[exemptions.unicode-width]]
1221 version = "0.1.9"
1222 criteria = "safe-to-deploy"
1223
1224 [[exemptions.unicode-xid]]
1225 version = "0.2.3"
1226 criteria = "safe-to-deploy"
1227
1228 [[exemptions.unix_path]]
1229 version = "1.0.1"
1230 criteria = "safe-to-run"
1231
1232 [[exemptions.unix_str]]
1233 version = "1.0.0"
1234 criteria = "safe-to-run"
1235
1236 [[exemptions.url]]
1237 version = "2.1.0"
1238 criteria = "safe-to-deploy"
1239
1240 [[exemptions.uuid]]
1241 version = "0.8.2"
1242 criteria = "safe-to-deploy"
1243
1244 [[exemptions.version_check]]
1245 version = "0.9.4"
1246 criteria = "safe-to-deploy"
1247
1248 [[exemptions.walkdir]]
1249 version = "2.3.2"
1250 criteria = "safe-to-deploy"
1251
1252 [[exemptions.warp]]
1253 version = "0.3.2"
1254 criteria = "safe-to-run"
1255
1256 [[exemptions.wasi]]
1257 version = "0.11.0+wasi-snapshot-preview1"
1258 criteria = "safe-to-deploy"
1259
1260 [[exemptions.webrtc-sdp]]
1261 version = "0.3.9"
1262 criteria = "safe-to-deploy"
1263
1264 [[exemptions.winapi]]
1265 version = "0.3.9"
1266 criteria = "safe-to-deploy"
1267
1268 [[exemptions.winapi-i686-pc-windows-gnu]]
1269 version = "0.4.0"
1270 criteria = "safe-to-deploy"
1271
1272 [[exemptions.winapi-util]]
1273 version = "0.1.5"
1274 criteria = "safe-to-deploy"
1275
1276 [[exemptions.winapi-x86_64-pc-windows-gnu]]
1277 version = "0.4.0"
1278 criteria = "safe-to-deploy"
1279
1280 [[exemptions.wio]]
1281 version = "0.2.2"
1282 criteria = "safe-to-deploy"
1283
1284 [[exemptions.xml-rs]]
1285 version = "0.8.4"
1286 criteria = "safe-to-deploy"
1287
1288 [[exemptions.yaml-rust]]
1289 version = "0.4.5"
1290 criteria = "safe-to-run"
1291
1292 [[exemptions.zeitstempel]]
1293 version = "0.1.1"
1294 criteria = "safe-to-deploy"
1295
1296 [[exemptions.zip]]
1297 version = "0.6.2"
1298 criteria = "safe-to-run"