supply-chain/imports.lock

   1
   2 # cargo-vet imports lock
   3
   4 [[publisher.aho-corasick]]
   5 version = "0.7.20"
   6 when = "2022-11-22"
   7 user-id = 189
   8 user-login = "BurntSushi"
   9 user-name = "Andrew Gallant"
  10
  11 [[publisher.arbitrary]]
  12 version = "1.3.0"
  13 when = "2023-03-13"
  14 user-id = 696
  15 user-login = "fitzgen"
  16 user-name = "Nick Fitzgerald"
  17
  18 [[publisher.async-trait]]
  19 version = "0.1.68"
  20 when = "2023-03-24"
  21 user-id = 3618
  22 user-login = "dtolnay"
  23 user-name = "David Tolnay"
  24
  25 [[publisher.atomic]]
  26 version = "0.4.6"
  27 when = "2020-07-05"
  28 user-id = 2915
  29 user-login = "Amanieu"
  30 user-name = "Amanieu d'Antras"
  31
  32 [[publisher.audio_thread_priority]]
  33 version = "0.26.1"
  34 when = "2022-03-22"
  35 user-id = 1258
  36 user-login = "padenot"
  37 user-name = "Paul Adenot"
  38
  39 [[publisher.authenticator]]
  40 version = "0.4.0-alpha.15"
  41 when = "2023-05-15"
  42 user-id = 175410
  43 user-login = "jschanck"
  44 user-name = "John Schanck"
  45
  46 [[publisher.bhttp]]
  47 version = "0.3.1"
  48 when = "2023-02-23"
  49 user-id = 128763
  50 user-login = "martinthomson"
  51 user-name = "Martin Thomson"
  52
  53 [[publisher.byteorder]]
  54 version = "1.4.3"
  55 when = "2021-03-10"
  56 user-id = 189
  57 user-login = "BurntSushi"
  58 user-name = "Andrew Gallant"
  59
  60 [[publisher.bytes]]
  61 version = "1.4.0"
  62 when = "2023-01-31"
  63 user-id = 6741
  64 user-login = "Darksonn"
  65 user-name = "Alice Ryhl"
  66
  67 [[publisher.cexpr]]
  68 version = "0.6.0"
  69 when = "2021-10-11"
  70 user-id = 3788
  71 user-login = "emilio"
  72 user-name = "Emilio Cobos Álvarez"
  73
  74 [[publisher.clap]]
  75 version = "4.1.14"
  76 when = "2023-03-28"
  77 user-id = 6743
  78 user-login = "epage"
  79 user-name = "Ed Page"
  80
  81 [[publisher.clap_builder]]
  82 version = "4.1.14"
  83 when = "2023-03-28"
  84 user-id = 6743
  85 user-login = "epage"
  86 user-name = "Ed Page"
  87
  88 [[publisher.clap_derive]]
  89 version = "4.1.14"
  90 when = "2023-03-28"
  91 user-id = 6743
  92 user-login = "epage"
  93 user-name = "Ed Page"
  94
  95 [[publisher.clap_lex]]
  96 version = "0.4.1"
  97 when = "2023-03-28"
  98 user-id = 6743
  99 user-login = "epage"
 100 user-name = "Ed Page"
 101
 102 [[publisher.core-foundation]]
 103 version = "0.9.3"
 104 when = "2022-02-07"
 105 user-id = 5946
 106 user-login = "jrmuizel"
 107 user-name = "Jeff Muizelaar"
 108
 109 [[publisher.core-foundation-sys]]
 110 version = "0.8.3"
 111 when = "2021-10-12"
 112 user-id = 2396
 113 user-login = "jdm"
 114 user-name = "Josh Matthews"
 115
 116 [[publisher.core-graphics]]
 117 version = "0.22.3"
 118 when = "2021-11-02"
 119 user-id = 5946
 120 user-login = "jrmuizel"
 121 user-name = "Jeff Muizelaar"
 122
 123 [[publisher.core-graphics-types]]
 124 version = "0.1.1"
 125 when = "2020-09-15"
 126 user-id = 2396
 127 user-login = "jdm"
 128 user-name = "Josh Matthews"
 129
 130 [[publisher.core-text]]
 131 version = "19.2.0"
 132 when = "2021-02-14"
 133 user-id = 5946
 134 user-login = "jrmuizel"
 135 user-name = "Jeff Muizelaar"
 136
 137 [[publisher.derive_arbitrary]]
 138 version = "1.3.0"
 139 when = "2023-03-13"
 140 user-id = 696
 141 user-login = "fitzgen"
 142 user-name = "Nick Fitzgerald"
 143
 144 [[publisher.dogear]]
 145 version = "0.4.0"
 146 when = "2019-09-16"
 147 user-id = 27901
 148 user-login = "linabutler"
 149 user-name = "Lina Butler"
 150
 151 [[publisher.dtoa]]
 152 version = "0.4.8"
 153 when = "2021-03-29"
 154 user-id = 3618
 155 user-login = "dtolnay"
 156 user-name = "David Tolnay"
 157
 158 [[publisher.etagere]]
 159 version = "0.2.7"
 160 when = "2022-05-04"
 161 user-id = 1281
 162 user-login = "nical"
 163 user-name = "Nicolas Silva"
 164
 165 [[publisher.euclid]]
 166 version = "0.22.7"
 167 when = "2022-04-04"
 168 user-id = 1281
 169 user-login = "nical"
 170 user-name = "Nicolas Silva"
 171
 172 [[publisher.flate2]]
 173 version = "1.0.24"
 174 when = "2022-05-28"
 175 user-id = 4333
 176 user-login = "joshtriplett"
 177 user-name = "Josh Triplett"
 178
 179 [[publisher.freetype]]
 180 version = "0.7.0"
 181 when = "2020-07-14"
 182 user-id = 2396
 183 user-login = "jdm"
 184 user-name = "Josh Matthews"
 185
 186 [[publisher.gleam]]
 187 version = "0.15.0"
 188 when = "2023-04-21"
 189 user-id = 5946
 190 user-login = "jrmuizel"
 191 user-name = "Jeff Muizelaar"
 192
 193 [[publisher.glean]]
 194 version = "53.0.0"
 195 when = "2023-06-07"
 196 user-id = 48
 197 user-login = "badboy"
 198 user-name = "Jan-Erik Rediger"
 199
 200 [[publisher.glean-core]]
 201 version = "53.0.0"
 202 when = "2023-06-07"
 203 user-id = 48
 204 user-login = "badboy"
 205 user-name = "Jan-Erik Rediger"
 206
 207 [[publisher.glslopt]]
 208 version = "0.1.9"
 209 when = "2021-03-17"
 210 user-id = 84794
 211 user-login = "jamienicol"
 212 user-name = "Jamie Nicol"
 213
 214 [[publisher.headers]]
 215 version = "0.3.8"
 216 when = "2022-09-02"
 217 user-id = 359
 218 user-login = "seanmonstar"
 219 user-name = "Sean McArthur"
 220
 221 [[publisher.httparse]]
 222 version = "1.8.0"
 223 when = "2022-08-30"
 224 user-id = 359
 225 user-login = "seanmonstar"
 226 user-name = "Sean McArthur"
 227
 228 [[publisher.indexmap]]
 229 version = "1.9.2"
 230 when = "2022-11-17"
 231 user-id = 539
 232 user-login = "cuviper"
 233 user-name = "Josh Stone"
 234
 235 [[publisher.inherent]]
 236 version = "1.0.7"
 237 when = "2023-03-25"
 238 user-id = 3618
 239 user-login = "dtolnay"
 240 user-name = "David Tolnay"
 241
 242 [[publisher.iovec]]
 243 version = "0.1.4"
 244 when = "2019-10-09"
 245 user-id = 10
 246 user-login = "carllerche"
 247 user-name = "Carl Lerche"
 248
 249 [[publisher.itoa]]
 250 version = "1.0.5"
 251 when = "2022-12-17"
 252 user-id = 3618
 253 user-login = "dtolnay"
 254 user-name = "David Tolnay"
 255
 256 [[publisher.jobserver]]
 257 version = "0.1.25"
 258 when = "2022-09-23"
 259 user-id = 1
 260 user-login = "alexcrichton"
 261 user-name = "Alex Crichton"
 262
 263 [[publisher.libc]]
 264 version = "0.2.132"
 265 when = "2022-08-16"
 266 user-id = 2915
 267 user-login = "Amanieu"
 268 user-name = "Amanieu d'Antras"
 269
 270 [[publisher.lock_api]]
 271 version = "0.4.9"
 272 when = "2022-09-20"
 273 user-id = 2915
 274 user-login = "Amanieu"
 275 user-name = "Amanieu d'Antras"
 276
 277 [[publisher.memchr]]
 278 version = "2.5.0"
 279 when = "2022-04-30"
 280 user-id = 189
 281 user-login = "BurntSushi"
 282 user-name = "Andrew Gallant"
 283
 284 [[publisher.mime]]
 285 version = "0.3.16"
 286 when = "2020-01-07"
 287 user-id = 359
 288 user-login = "seanmonstar"
 289 user-name = "Sean McArthur"
 290
 291 [[publisher.mio]]
 292 version = "0.6.21"
 293 when = "2019-11-27"
 294 user-id = 10
 295 user-login = "carllerche"
 296 user-name = "Carl Lerche"
 297
 298 [[publisher.num_cpus]]
 299 version = "1.15.0"
 300 when = "2022-12-20"
 301 user-id = 359
 302 user-login = "seanmonstar"
 303 user-name = "Sean McArthur"
 304
 305 [[publisher.ohttp]]
 306 version = "0.3.1"
 307 when = "2023-02-23"
 308 user-id = 128763
 309 user-login = "martinthomson"
 310 user-name = "Martin Thomson"
 311
 312 [[publisher.ordered-float]]
 313 version = "3.4.0"
 314 when = "2022-11-06"
 315 user-id = 2017
 316 user-login = "mbrubeck"
 317 user-name = "Matt Brubeck"
 318
 319 [[publisher.parking_lot]]
 320 version = "0.11.2"
 321 when = "2021-08-27"
 322 user-id = 2915
 323 user-login = "Amanieu"
 324 user-name = "Amanieu d'Antras"
 325
 326 [[publisher.parking_lot_core]]
 327 version = "0.8.6"
 328 when = "2022-12-12"
 329 user-id = 2915
 330 user-login = "Amanieu"
 331 user-name = "Amanieu d'Antras"
 332
 333 [[publisher.paste]]
 334 version = "1.0.11"
 335 when = "2022-12-17"
 336 user-id = 3618
 337 user-login = "dtolnay"
 338 user-name = "David Tolnay"
 339
 340 [[publisher.proc-macro-hack]]
 341 version = "0.5.20+deprecated"
 342 when = "2022-12-19"
 343 user-id = 3618
 344 user-login = "dtolnay"
 345 user-name = "David Tolnay"
 346
 347 [[publisher.proc-macro2]]
 348 version = "1.0.59"
 349 when = "2023-05-25"
 350 user-id = 3618
 351 user-login = "dtolnay"
 352 user-name = "David Tolnay"
 353
 354 [[publisher.quote]]
 355 version = "1.0.28"
 356 when = "2023-05-25"
 357 user-id = 3618
 358 user-login = "dtolnay"
 359 user-name = "David Tolnay"
 360
 361 [[publisher.regex]]
 362 version = "1.7.1"
 363 when = "2023-01-09"
 364 user-id = 189
 365 user-login = "BurntSushi"
 366 user-name = "Andrew Gallant"
 367
 368 [[publisher.regex-syntax]]
 369 version = "0.6.28"
 370 when = "2022-11-05"
 371 user-id = 189
 372 user-login = "BurntSushi"
 373 user-name = "Andrew Gallant"
 374
 375 [[publisher.rust_cascade]]
 376 version = "1.5.0"
 377 when = "2023-04-05"
 378 user-id = 57462
 379 user-login = "mozkeeler"
 380 user-name = "Dana Keeler"
 381
 382 [[publisher.ryu]]
 383 version = "1.0.12"
 384 when = "2022-12-17"
 385 user-id = 3618
 386 user-login = "dtolnay"
 387 user-name = "David Tolnay"
 388
 389 [[publisher.same-file]]
 390 version = "1.0.6"
 391 when = "2020-01-11"
 392 user-id = 189
 393 user-login = "BurntSushi"
 394 user-name = "Andrew Gallant"
 395
 396 [[publisher.scopeguard]]
 397 version = "1.1.0"
 398 when = "2020-02-16"
 399 user-id = 2915
 400 user-login = "Amanieu"
 401 user-name = "Amanieu d'Antras"
 402
 403 [[publisher.serde]]
 404 version = "1.0.163"
 405 when = "2023-05-11"
 406 user-id = 3618
 407 user-login = "dtolnay"
 408 user-name = "David Tolnay"
 409
 410 [[publisher.serde_bytes]]
 411 version = "0.11.9"
 412 when = "2023-02-05"
 413 user-id = 3618
 414 user-login = "dtolnay"
 415 user-name = "David Tolnay"
 416
 417 [[publisher.serde_derive]]
 418 version = "1.0.163"
 419 when = "2023-05-10"
 420 user-id = 3618
 421 user-login = "dtolnay"
 422 user-name = "David Tolnay"
 423
 424 [[publisher.serde_json]]
 425 version = "1.0.93"
 426 when = "2023-02-08"
 427 user-id = 3618
 428 user-login = "dtolnay"
 429 user-name = "David Tolnay"
 430
 431 [[publisher.serde_repr]]
 432 version = "0.1.12"
 433 when = "2023-03-18"
 434 user-id = 3618
 435 user-login = "dtolnay"
 436 user-name = "David Tolnay"
 437
 438 [[publisher.serde_yaml]]
 439 version = "0.8.26"
 440 when = "2022-07-16"
 441 user-id = 3618
 442 user-login = "dtolnay"
 443 user-name = "David Tolnay"
 444
 445 [[publisher.smallvec]]
 446 version = "1.10.0"
 447 when = "2022-10-02"
 448 user-id = 2017
 449 user-login = "mbrubeck"
 450 user-name = "Matt Brubeck"
 451
 452 [[publisher.syn]]
 453 version = "1.0.107"
 454 when = "2022-12-18"
 455 user-id = 3618
 456 user-login = "dtolnay"
 457 user-name = "David Tolnay"
 458
 459 [[publisher.syn]]
 460 version = "2.0.18"
 461 when = "2023-05-26"
 462 user-id = 3618
 463 user-login = "dtolnay"
 464 user-name = "David Tolnay"
 465
 466 [[publisher.termcolor]]
 467 version = "1.2.0"
 468 when = "2023-01-15"
 469 user-id = 189
 470 user-login = "BurntSushi"
 471 user-name = "Andrew Gallant"
 472
 473 [[publisher.threadbound]]
 474 version = "0.1.5"
 475 when = "2022-12-17"
 476 user-id = 3618
 477 user-login = "dtolnay"
 478 user-name = "David Tolnay"
 479
 480 [[publisher.tokio-util]]
 481 version = "0.7.2"
 482 when = "2022-05-15"
 483 user-id = 6741
 484 user-login = "Darksonn"
 485 user-name = "Alice Ryhl"
 486
 487 [[publisher.toml]]
 488 version = "0.5.7"
 489 when = "2020-10-11"
 490 user-id = 1
 491 user-login = "alexcrichton"
 492 user-name = "Alex Crichton"
 493
 494 [[publisher.unicode-ident]]
 495 version = "1.0.6"
 496 when = "2022-12-17"
 497 user-id = 3618
 498 user-login = "dtolnay"
 499 user-name = "David Tolnay"
 500
 501 [[publisher.unicode-segmentation]]
 502 version = "1.10.0"
 503 when = "2022-09-13"
 504 user-id = 1139
 505 user-login = "Manishearth"
 506 user-name = "Manish Goregaokar"
 507
 508 [[publisher.unicode-width]]
 509 version = "0.1.10"
 510 when = "2022-09-13"
 511 user-id = 1139
 512 user-login = "Manishearth"
 513 user-name = "Manish Goregaokar"
 514
 515 [[publisher.unicode-xid]]
 516 version = "0.2.4"
 517 when = "2022-09-15"
 518 user-id = 1139
 519 user-login = "Manishearth"
 520 user-name = "Manish Goregaokar"
 521
 522 [[publisher.walkdir]]
 523 version = "2.3.2"
 524 when = "2021-03-22"
 525 user-id = 189
 526 user-login = "BurntSushi"
 527 user-name = "Andrew Gallant"
 528
 529 [[publisher.warp]]
 530 version = "0.3.3"
 531 when = "2022-09-27"
 532 user-id = 359
 533 user-login = "seanmonstar"
 534 user-name = "Sean McArthur"
 535
 536 [[publisher.wasi]]
 537 version = "0.11.0+wasi-snapshot-preview1"
 538 when = "2022-01-19"
 539 user-id = 1
 540 user-login = "alexcrichton"
 541 user-name = "Alex Crichton"
 542
 543 [[publisher.winapi-util]]
 544 version = "0.1.5"
 545 when = "2020-04-20"
 546 user-id = 189
 547 user-login = "BurntSushi"
 548 user-name = "Andrew Gallant"
 549
 550 [[publisher.zeitstempel]]
 551 version = "0.1.1"
 552 when = "2021-03-18"
 553 user-id = 48
 554 user-login = "badboy"
 555 user-name = "Jan-Erik Rediger"
 556
 557 [[audits.bytecode-alliance.wildcard-audits.arbitrary]]
 558 who = "Nick Fitzgerald <fitzgen@gmail.com>"
 559 criteria = "safe-to-deploy"
 560 user-id = 696 # Nick Fitzgerald (fitzgen)
 561 start = "2020-01-14"
 562 end = "2024-04-21"
 563 notes = "I am an author of this crate."
 564
 565 [[audits.bytecode-alliance.wildcard-audits.derive_arbitrary]]
 566 who = "Nick Fitzgerald <fitzgen@gmail.com>"
 567 criteria = "safe-to-deploy"
 568 user-id = 696 # Nick Fitzgerald (fitzgen)
 569 start = "2020-01-14"
 570 end = "2024-04-27"
 571 notes = "I am an author of this crate"
 572
 573 [[audits.bytecode-alliance.audits.arrayref]]
 574 who = "Nick Fitzgerald <fitzgen@gmail.com>"
 575 criteria = "safe-to-deploy"
 576 version = "0.3.6"
 577 notes = """
 578 Unsafe code, but its logic looks good to me. Necessary given what it is
 579 doing. Well tested, has quickchecks.
 580 """
 581
 582 [[audits.bytecode-alliance.audits.arrayvec]]
 583 who = "Nick Fitzgerald <fitzgen@gmail.com>"
 584 criteria = "safe-to-deploy"
 585 version = "0.7.2"
 586 notes = """
 587 Well documented invariants, good assertions for those invariants in unsafe code,
 588 and tested with MIRI to boot. LGTM.
 589 """
 590
 591 [[audits.bytecode-alliance.audits.base64]]
 592 who = "Pat Hickey <phickey@fastly.com>"
 593 criteria = "safe-to-deploy"
 594 version = "0.21.0"
 595 notes = "This crate has no dependencies, no build.rs, and contains no unsafe code."
 596
 597 [[audits.bytecode-alliance.audits.block-buffer]]
 598 who = "Benjamin Bouvier <public@benj.me>"
 599 criteria = "safe-to-deploy"
 600 delta = "0.9.0 -> 0.10.2"
 601
 602 [[audits.bytecode-alliance.audits.bumpalo]]
 603 who = "Nick Fitzgerald <fitzgen@gmail.com>"
 604 criteria = "safe-to-deploy"
 605 version = "3.11.1"
 606 notes = "I am the author of this crate."
 607
 608 [[audits.bytecode-alliance.audits.cargo-platform]]
 609 who = "Pat Hickey <phickey@fastly.com>"
 610 criteria = "safe-to-deploy"
 611 version = "0.1.2"
 612 notes = "no build, no ambient capabilities, no unsafe"
 613
 614 [[audits.bytecode-alliance.audits.cc]]
 615 who = "Alex Crichton <alex@alexcrichton.com>"
 616 criteria = "safe-to-deploy"
 617 version = "1.0.73"
 618 notes = "I am the author of this crate."
 619
 620 [[audits.bytecode-alliance.audits.cfg-if]]
 621 who = "Alex Crichton <alex@alexcrichton.com>"
 622 criteria = "safe-to-deploy"
 623 version = "1.0.0"
 624 notes = "I am the author of this crate."
 625
 626 [[audits.bytecode-alliance.audits.codespan-reporting]]
 627 who = "Jamey Sharp <jsharp@fastly.com>"
 628 criteria = "safe-to-deploy"
 629 version = "0.11.1"
 630 notes = "This library uses `forbid(unsafe_code)` and has no filesystem or network I/O."
 631
 632 [[audits.bytecode-alliance.audits.crypto-common]]
 633 who = "Benjamin Bouvier <public@benj.me>"
 634 criteria = "safe-to-deploy"
 635 version = "0.1.3"
 636
 637 [[audits.bytecode-alliance.audits.foreign-types]]
 638 who = "Pat Hickey <phickey@fastly.com>"
 639 criteria = "safe-to-deploy"
 640 version = "0.3.2"
 641 notes = "This crate defined a macro-rules which creates wrappers working with FFI types. The implementation of this crate appears to be safe, but each use of this macro would need to be vetted for correctness as well."
 642
 643 [[audits.bytecode-alliance.audits.foreign-types-shared]]
 644 who = "Pat Hickey <phickey@fastly.com>"
 645 criteria = "safe-to-deploy"
 646 version = "0.1.1"
 647
 648 [[audits.bytecode-alliance.audits.form_urlencoded]]
 649 who = "Alex Crichton <alex@alexcrichton.com>"
 650 criteria = "safe-to-deploy"
 651 version = "1.1.0"
 652 notes = """
 653 This is a small crate for working with url-encoded forms which doesn't have any
 654 more than what it says on the tin. Contains one `unsafe` block related to
 655 performance around utf-8 validation which is fairly easy to verify as correct.
 656 """
 657
 658 [[audits.bytecode-alliance.audits.futures-channel]]
 659 who = "Pat Hickey <phickey@fastly.com>"
 660 criteria = "safe-to-deploy"
 661 version = "0.3.27"
 662 notes = "build.rs is just detecting the target and setting cfg. unsafety is for implementing a concurrency primitives using atomics and unsafecell, and is not obviously incorrect (this is the sort of thing I wouldn't certify as correct without formal methods)"
 663
 664 [[audits.bytecode-alliance.audits.futures-core]]
 665 who = "Pat Hickey <phickey@fastly.com>"
 666 criteria = "safe-to-deploy"
 667 version = "0.3.27"
 668 notes = "Unsafe used to implement a concurrency primitive AtomicWaker. Well-commented and not obviously incorrect. Like my other audits of these concurrency primitives inside the futures family, I couldn't certify that it is correct without formal methods, but that is out of scope for this vetting."
 669
 670 [[audits.bytecode-alliance.audits.futures-executor]]
 671 who = "Pat Hickey <phickey@fastly.com>"
 672 criteria = "safe-to-deploy"
 673 version = "0.3.27"
 674 notes = "Unsafe used to implement the unpark mutex, which is well commented and not obviously incorrect. Like with futures-channel I wouldn't be able to certify it as correct without formal methods."
 675
 676 [[audits.bytecode-alliance.audits.futures-io]]
 677 who = "Pat Hickey <phickey@fastly.com>"
 678 criteria = "safe-to-deploy"
 679 version = "0.3.27"
 680
 681 [[audits.bytecode-alliance.audits.futures-sink]]
 682 who = "Pat Hickey <phickey@fastly.com>"
 683 criteria = "safe-to-deploy"
 684 version = "0.3.27"
 685
 686 [[audits.bytecode-alliance.audits.heck]]
 687 who = "Alex Crichton <alex@alexcrichton.com>"
 688 criteria = "safe-to-deploy"
 689 version = "0.4.0"
 690 notes = "Contains `forbid_unsafe` and only uses `std::fmt` from the standard library. Otherwise only contains string manipulation."
 691
 692 [[audits.bytecode-alliance.audits.id-arena]]
 693 who = "Nick Fitzgerald <fitzgen@gmail.com>"
 694 criteria = "safe-to-deploy"
 695 version = "2.2.1"
 696 notes = "I am the author of this crate."
 697
 698 [[audits.bytecode-alliance.audits.idna]]
 699 who = "Alex Crichton <alex@alexcrichton.com>"
 700 criteria = "safe-to-deploy"
 701 version = "0.3.0"
 702 notes = """
 703 This is a crate without unsafe code or usage of the standard library. The large
 704 size of this crate comes from the large generated unicode tables file. This
 705 crate is broadly used throughout the ecosystem and does not contain anything
 706 suspicious.
 707 """
 708
 709 [[audits.bytecode-alliance.audits.leb128]]
 710 who = "Nick Fitzgerald <fitzgen@gmail.com>"
 711 criteria = "safe-to-deploy"
 712 version = "0.2.5"
 713 notes = "I am the author of this crate."
 714
 715 [[audits.bytecode-alliance.audits.memoffset]]
 716 who = "Alex Crichton <alex@alexcrichton.com>"
 717 criteria = "safe-to-deploy"
 718 delta = "0.7.1 -> 0.8.0"
 719 notes = "This was a small update to the crate which has to do with Rust language features and compiler versions, no substantial changes."
 720
 721 [[audits.bytecode-alliance.audits.peeking_take_while]]
 722 who = "Nick Fitzgerald <fitzgen@gmail.com>"
 723 criteria = "safe-to-deploy"
 724 version = "1.0.0"
 725 notes = "I am the author of this crate."
 726
 727 [[audits.bytecode-alliance.audits.percent-encoding]]
 728 who = "Alex Crichton <alex@alexcrichton.com>"
 729 criteria = "safe-to-deploy"
 730 version = "2.2.0"
 731 notes = """
 732 This crate is a single-file crate that does what it says on the tin. There are
 733 a few `unsafe` blocks related to utf-8 validation which are locally verifiable
 734 as correct and otherwise this crate is good to go.
 735 """
 736
 737 [[audits.bytecode-alliance.audits.pin-utils]]
 738 who = "Pat Hickey <phickey@fastly.com>"
 739 criteria = "safe-to-deploy"
 740 version = "0.1.0"
 741
 742 [[audits.bytecode-alliance.audits.pkg-config]]
 743 who = "Pat Hickey <phickey@fastly.com>"
 744 criteria = "safe-to-deploy"
 745 version = "0.3.25"
 746 notes = "This crate shells out to the pkg-config executable, but it appears to sanitize inputs reasonably."
 747
 748 [[audits.bytecode-alliance.audits.rustc-demangle]]
 749 who = "Alex Crichton <alex@alexcrichton.com>"
 750 criteria = "safe-to-deploy"
 751 version = "0.1.21"
 752 notes = "I am the author of this crate."
 753
 754 [[audits.bytecode-alliance.audits.semver]]
 755 who = "Pat Hickey <phickey@fastly.com>"
 756 criteria = "safe-to-deploy"
 757 version = "1.0.17"
 758 notes = "plenty of unsafe pointer and vec tricks, but in well-structured and commented code that appears to be correct"
 759
 760 [[audits.bytecode-alliance.audits.slab]]
 761 who = "Pat Hickey <phickey@fastly.com>"
 762 criteria = "safe-to-deploy"
 763 version = "0.4.6"
 764 notes = "provides a datastructure implemented using std's Vec. all uses of unsafe are just delegating to the underlying unsafe Vec methods."
 765
 766 [[audits.bytecode-alliance.audits.unicase]]
 767 who = "Alex Crichton <alex@alexcrichton.com>"
 768 criteria = "safe-to-deploy"
 769 version = "2.6.0"
 770 notes = """
 771 This crate contains no `unsafe` code and no unnecessary use of the standard
 772 library.
 773 """
 774
 775 [[audits.bytecode-alliance.audits.unicode-bidi]]
 776 who = "Alex Crichton <alex@alexcrichton.com>"
 777 criteria = "safe-to-deploy"
 778 version = "0.3.8"
 779 notes = """
 780 This crate has no unsafe code and does not use `std::*`. Skimming the crate it
 781 does not attempt to out of the bounds of what it's already supposed to be doing.
 782 """
 783
 784 [[audits.bytecode-alliance.audits.unicode-normalization]]
 785 who = "Alex Crichton <alex@alexcrichton.com>"
 786 criteria = "safe-to-deploy"
 787 version = "0.1.19"
 788 notes = """
 789 This crate contains one usage of `unsafe` which I have manually checked to see
 790 it as correct. This crate's size comes in large part due to the generated
 791 unicode tables that it contains. This crate is additionally widely used
 792 throughout the ecosystem and skimming the crate shows no usage of `std::*` APIs
 793 and nothing suspicious.
 794 """
 795
 796 [[audits.bytecode-alliance.audits.wasm-encoder]]
 797 who = "Alex Crichton <alex@alexcrichton.com>"
 798 criteria = "safe-to-deploy"
 799 version = "0.25.0"
 800 notes = "The Bytecode Alliance is the author of this crate."
 801
 802 [[audits.bytecode-alliance.audits.wasm-smith]]
 803 who = "Alex Crichton <alex@alexcrichton.com>"
 804 criteria = "safe-to-run"
 805 version = "0.12.5"
 806 notes = "The Bytecode Alliance is the author of this crate."
 807
 808 [[audits.bytecode-alliance.audits.wasmparser]]
 809 who = "Alex Crichton <alex@alexcrichton.com>"
 810 criteria = "safe-to-deploy"
 811 version = "0.102.0"
 812 notes = "The Bytecode Alliance is the author of this crate."
 813
 814 [[audits.bytecode-alliance.audits.wast]]
 815 who = "Alex Crichton <alex@alexcrichton.com>"
 816 criteria = "safe-to-deploy"
 817 version = "55.0.0"
 818 notes = "The Bytecode Alliance is the author of this crate."
 819
 820 [[audits.embark-studios.audits.anyhow]]
 821 who = "Johan Andersson <opensource@embark-studios.com>"
 822 criteria = "safe-to-deploy"
 823 version = "1.0.58"
 824
 825 [[audits.embark-studios.audits.cty]]
 826 who = "Johan Andersson <opensource@embark-studios.com>"
 827 criteria = "safe-to-deploy"
 828 version = "0.2.2"
 829 notes = "Inspected it and is a tiny crate with just type definitions"
 830
 831 [[audits.embark-studios.audits.derive_more]]
 832 who = "Johan Andersson <opensource@embark-studios.com>"
 833 criteria = "safe-to-deploy"
 834 version = "0.99.17"
 835 notes = "No unsafe usage or ambient capabilities"
 836
 837 [[audits.embark-studios.audits.ident_case]]
 838 who = "Johan Andersson <opensource@embark-studios.com>"
 839 criteria = "safe-to-deploy"
 840 version = "1.0.1"
 841 notes = "No unsafe usage or ambient capabilities"
 842
 843 [[audits.embark-studios.audits.line-wrap]]
 844 who = "Johan Andersson <opensource@embark-studios.com>"
 845 criteria = "safe-to-deploy"
 846 version = "0.1.1"
 847 notes = "No unsafe usage or ambient capabilities"
 848
 849 [[audits.embark-studios.audits.thiserror]]
 850 who = "Johan Andersson <opensource@embark-studios.com>"
 851 criteria = "safe-to-deploy"
 852 version = "1.0.40"
 853 notes = "Wrapper over implementation crate, found no unsafe or ambient capabilities used"
 854
 855 [[audits.embark-studios.audits.thiserror-impl]]
 856 who = "Johan Andersson <opensource@embark-studios.com>"
 857 criteria = "safe-to-deploy"
 858 version = "1.0.40"
 859 notes = "Found no unsafe or ambient capabilities used"
 860
 861 [[audits.embark-studios.audits.yaml-rust]]
 862 who = "Johan Andersson <opensource@embark-studios.com>"
 863 criteria = "safe-to-deploy"
 864 version = "0.4.5"
 865 notes = "No unsafe usage or ambient capabilities"
 866
 867 [[audits.google.audits.ash]]
 868 who = "David Koloski <dkoloski@google.com>"
 869 criteria = "safe-to-deploy"
 870 version = "0.37.0+1.3.209"
 871 notes = "Reviewed on https://fxrev.dev/694269"
 872 aggregated-from = "https://fuchsia.googlesource.com/fuchsia/+/refs/heads/main/third_party/rust_crates/supply-chain/audits.toml?format=TEXT"
 873
 874 [[audits.google.audits.fastrand]]
 875 who = "George Burgess IV <gbiv@google.com>"
 876 criteria = "safe-to-deploy"
 877 version = "1.9.0"
 878 notes = """
 879 `does-not-implement-crypto` is certified because this crate explicitly says
 880 that the RNG here is not cryptographically secure.
 881 """
 882 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
 883
 884 [[audits.google.audits.glob]]
 885 who = "George Burgess IV <gbiv@google.com>"
 886 criteria = "safe-to-deploy"
 887 version = "0.3.1"
 888 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
 889
 890 [[audits.google.audits.h2]]
 891 who = "ChromeOS"
 892 criteria = "safe-to-run"
 893 version = "0.3.14"
 894 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
 895
 896 [[audits.google.audits.http]]
 897 who = "ChromeOS"
 898 criteria = "safe-to-run"
 899 version = "0.2.8"
 900 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
 901
 902 [[audits.google.audits.http-body]]
 903 who = "ChromeOS"
 904 criteria = "safe-to-run"
 905 version = "0.4.5"
 906 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
 907
 908 [[audits.google.audits.httpdate]]
 909 who = "ChromeOS"
 910 criteria = "safe-to-run"
 911 version = "1.0.2"
 912 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
 913
 914 [[audits.google.audits.hyper]]
 915 who = "ChromeOS"
 916 criteria = "safe-to-run"
 917 version = "0.14.20"
 918 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
 919
 920 [[audits.google.audits.pin-project]]
 921 who = "ChromeOS"
 922 criteria = "safe-to-run"
 923 version = "1.0.12"
 924 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
 925
 926 [[audits.google.audits.pin-project-internal]]
 927 who = "ChromeOS"
 928 criteria = "safe-to-run"
 929 version = "1.0.12"
 930 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
 931
 932 [[audits.google.audits.scoped-tls]]
 933 who = "George Burgess IV <gbiv@google.com>"
 934 criteria = "safe-to-run"
 935 version = "1.0.0"
 936 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
 937
 938 [[audits.google.audits.serde_urlencoded]]
 939 who = "ChromeOS"
 940 criteria = "safe-to-run"
 941 version = "0.7.1"
 942 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
 943
 944 [[audits.google.audits.tokio-stream]]
 945 who = "David Koloski <dkoloski@google.com>"
 946 criteria = "safe-to-deploy"
 947 version = "0.1.11"
 948 notes = "Reviewed on https://fxrev.dev/804724"
 949 aggregated-from = "https://fuchsia.googlesource.com/fuchsia/+/refs/heads/main/third_party/rust_crates/supply-chain/audits.toml?format=TEXT"
 950
 951 [[audits.google.audits.tower-service]]
 952 who = "ChromeOS"
 953 criteria = "safe-to-run"
 954 version = "0.3.2"
 955 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
 956
 957 [[audits.google.audits.tracing]]
 958 who = "ChromeOS"
 959 criteria = "safe-to-run"
 960 version = "0.1.35"
 961 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
 962
 963 [[audits.google.audits.tracing-attributes]]
 964 who = "ChromeOS"
 965 criteria = "safe-to-run"
 966 version = "0.1.22"
 967 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
 968
 969 [[audits.google.audits.tracing-core]]
 970 who = "ChromeOS"
 971 criteria = "safe-to-run"
 972 version = "0.1.29"
 973 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
 974
 975 [[audits.google.audits.try-lock]]
 976 who = "ChromeOS"
 977 criteria = "safe-to-run"
 978 version = "0.2.3"
 979 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
 980
 981 [[audits.google.audits.version_check]]
 982 who = "George Burgess IV <gbiv@google.com>"
 983 criteria = "safe-to-deploy"
 984 version = "0.9.4"
 985 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
 986
 987 [[audits.google.audits.want]]
 988 who = "ChromeOS"
 989 criteria = "safe-to-run"
 990 version = "0.3.0"
 991 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
 992
 993 [[audits.isrg.audits.block-buffer]]
 994 who = "David Cook <dcook@divviup.org>"
 995 criteria = "safe-to-deploy"
 996 version = "0.9.0"
 997
 998 [[audits.isrg.audits.rayon-core]]
 999 who = "Brandon Pitman <bran@bran.land>"
1000 criteria = "safe-to-deploy"
1001 delta = "1.10.2 -> 1.11.0"
1002
1003 [[audits.mozilla.wildcard-audits.zeitstempel]]
1004 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
1005 criteria = "safe-to-deploy"
1006 user-id = 48 # Jan-Erik Rediger (badboy)
1007 start = "2021-03-03"
1008 end = "2024-05-10"
1009 notes = "Maintained by me"
1010 aggregated-from = "https://raw.githubusercontent.com/mozilla/glean/main/supply-chain/audits.toml"
1011
1012 [[audits.mozilla.audits.either]]
1013 who = "Nika Layzell <nika@thelayzells.com>"
1014 criteria = "safe-to-deploy"
1015 version = "1.6.1"
1016 notes = """
1017 Straightforward crate providing the Either enum and trait implementations with
1018 no unsafe code.
1019 """
1020 aggregated-from = "https://raw.githubusercontent.com/mozilla/cargo-vet/main/supply-chain/audits.toml"
1021
1022 [[audits.mozilla.audits.lazy_static]]
1023 who = "Nika Layzell <nika@thelayzells.com>"
1024 criteria = "safe-to-deploy"
1025 version = "1.4.0"
1026 notes = "I have read over the macros, and audited the unsafe code."
1027 aggregated-from = "https://raw.githubusercontent.com/mozilla/cargo-vet/main/supply-chain/audits.toml"