supply-chain/audits.toml

   1
   2 # cargo-vet audits file
   3
   4 [[wildcard-audits.audio_thread_priority]]
   5 who = "Paul Adenot <paul@paul.cx>"
   6 criteria = "safe-to-deploy"
   7 user-id = 1258 # Paul Adenot (padenot)
   8 start = "2019-05-09"
   9 end = "2024-04-24"
  10 notes = """
  11 I've written most of this crate, the rest has been either written and in any
  12 case has been reviewed by Mozilla developers.
  13 """
  14
  15 [[wildcard-audits.authenticator]]
  16 who = "John M. Schanck <jschanck@mozilla.com>"
  17 criteria = "safe-to-deploy"
  18 user-id = 175410 # John Schanck (jschanck)
  19 start = "2022-11-15"
  20 end = "2024-04-26"
  21 notes = "Maintained by the CryptoEng team at Mozilla."
  22
  23 [[wildcard-audits.bhttp]]
  24 who = "Martin Thomson <mt@lowentropy.net>"
  25 criteria = "safe-to-deploy"
  26 user-id = 128763 # Martin Thomson (martinthomson)
  27 start = "2022-08-04"
  28 end = "2024-03-09"
  29 notes = "Though the code is safe to run and deploy, the code for processing HTTP/1.1 messages (the `read-http` feature, specifically) is not suited for deployment in real applications, either clients or servers.  Some features necessary for live deployment are not implemented, such as the proper handling of some types of response (e.g., a response to a HEAD request).  Software that processes HTTP/1.1 messages requires a large number of compatibility tweaks if it is to be deployed interoperably.  This feature only exists to support basic validation tools and is unlikely to be widely compatible."
  30
  31 [[wildcard-audits.cexpr]]
  32 who = "Emilio Cobos Álvarez <emilio@crisal.io>"
  33 criteria = "safe-to-deploy"
  34 user-id = 3788 # Emilio Cobos Álvarez (emilio)
  35 start = "2021-06-21"
  36 end = "2024-04-21"
  37 notes = "No unsafe code, rather straight-forward parser."
  38
  39 [[wildcard-audits.cocoa]]
  40 who = "Bobby Holley <bobbyholley@gmail.com>"
  41 criteria = "safe-to-deploy"
  42 user-id = 2396 # Josh Matthews (jdm)
  43 start = "2019-07-23"
  44 end = "2023-05-04"
  45 renew = false
  46 notes = "I've reviewed every source contribution that was neither authored nor reviewed by Mozilla."
  47
  48 [[wildcard-audits.cocoa]]
  49 who = "Bobby Holley <bobbyholley@gmail.com>"
  50 criteria = "safe-to-deploy"
  51 user-id = 5946 # Jeff Muizelaar (jrmuizel)
  52 start = "2022-11-01"
  53 end = "2023-05-04"
  54 renew = false
  55 notes = "I've reviewed every source contribution that was neither authored nor reviewed by Mozilla."
  56
  57 [[wildcard-audits.cocoa-foundation]]
  58 who = "Bobby Holley <bobbyholley@gmail.com>"
  59 criteria = "safe-to-deploy"
  60 user-id = 5946 # Jeff Muizelaar (jrmuizel)
  61 start = "2023-03-16"
  62 end = "2023-05-04"
  63 renew = false
  64 notes = "I've reviewed every source contribution that was neither authored nor reviewed by Mozilla."
  65
  66 [[wildcard-audits.cocoa-foundation]]
  67 who = "Bobby Holley <bobbyholley@gmail.com>"
  68 criteria = "safe-to-deploy"
  69 user-id = 2396 # Josh Matthews (jdm)
  70 start = "2020-07-20"
  71 end = "2023-05-04"
  72 renew = false
  73 notes = "I've reviewed every source contribution that was neither authored nor reviewed by Mozilla."
  74
  75 [[wildcard-audits.core-foundation]]
  76 who = "Bobby Holley <bobbyholley@gmail.com>"
  77 criteria = "safe-to-deploy"
  78 user-id = 2396 # Josh Matthews (jdm)
  79 start = "2019-11-12"
  80 end = "2023-05-04"
  81 renew = false
  82 notes = "I've reviewed every source contribution that was neither authored nor reviewed by Mozilla."
  83
  84 [[wildcard-audits.core-foundation]]
  85 who = "Bobby Holley <bobbyholley@gmail.com>"
  86 criteria = "safe-to-deploy"
  87 user-id = 5946 # Jeff Muizelaar (jrmuizel)
  88 start = "2019-03-29"
  89 end = "2023-05-04"
  90 renew = false
  91 notes = "I've reviewed every source contribution that was neither authored nor reviewed by Mozilla."
  92
  93 [[wildcard-audits.core-foundation-sys]]
  94 who = "Bobby Holley <bobbyholley@gmail.com>"
  95 criteria = "safe-to-deploy"
  96 user-id = 2396 # Josh Matthews (jdm)
  97 start = "2019-11-12"
  98 end = "2023-05-04"
  99 renew = false
 100 notes = "I've reviewed every source contribution that was neither authored nor reviewed by Mozilla."
 101
 102 [[wildcard-audits.core-foundation-sys]]
 103 who = "Bobby Holley <bobbyholley@gmail.com>"
 104 criteria = "safe-to-deploy"
 105 user-id = 5946 # Jeff Muizelaar (jrmuizel)
 106 start = "2020-10-14"
 107 end = "2023-05-04"
 108 renew = false
 109 notes = "I've reviewed every source contribution that was neither authored nor reviewed by Mozilla."
 110
 111 [[wildcard-audits.core-graphics]]
 112 who = "Bobby Holley <bobbyholley@gmail.com>"
 113 criteria = "safe-to-deploy"
 114 user-id = 2396 # Josh Matthews (jdm)
 115 start = "2019-10-28"
 116 end = "2023-05-04"
 117 renew = false
 118 notes = "I've reviewed every source contribution that was neither authored nor reviewed by Mozilla."
 119
 120 [[wildcard-audits.core-graphics]]
 121 who = "Bobby Holley <bobbyholley@gmail.com>"
 122 criteria = "safe-to-deploy"
 123 user-id = 5946 # Jeff Muizelaar (jrmuizel)
 124 start = "2020-12-08"
 125 end = "2023-05-04"
 126 renew = false
 127 notes = "I've reviewed every source contribution that was neither authored nor reviewed by Mozilla."
 128
 129 [[wildcard-audits.core-graphics-types]]
 130 who = "Bobby Holley <bobbyholley@gmail.com>"
 131 criteria = "safe-to-deploy"
 132 user-id = 2396 # Josh Matthews (jdm)
 133 start = "2020-07-20"
 134 end = "2023-05-04"
 135 renew = false
 136 notes = "I've reviewed every source contribution that was neither authored nor reviewed by Mozilla."
 137
 138 [[wildcard-audits.core-text]]
 139 who = "Bobby Holley <bobbyholley@gmail.com>"
 140 criteria = "safe-to-deploy"
 141 user-id = 2396 # Josh Matthews (jdm)
 142 start = "2019-03-29"
 143 end = "2023-05-04"
 144 renew = false
 145 notes = "I've reviewed every source contribution that was neither authored nor reviewed by Mozilla."
 146
 147 [[wildcard-audits.core-text]]
 148 who = "Bobby Holley <bobbyholley@gmail.com>"
 149 criteria = "safe-to-deploy"
 150 user-id = 5946 # Jeff Muizelaar (jrmuizel)
 151 start = "2021-02-14"
 152 end = "2023-05-04"
 153 renew = false
 154 notes = "I've reviewed every source contribution that was neither authored nor reviewed by Mozilla."
 155
 156 [[wildcard-audits.dogear]]
 157 who = "Bobby Holley <bobbyholley@gmail.com>"
 158 criteria = "safe-to-deploy"
 159 user-id = 27901 # Lina Butler (linabutler)
 160 start = "2019-03-04"
 161 end = "2024-05-05"
 162 notes = "Lina developed this crate as Mozilla staff."
 163
 164 [[wildcard-audits.encoding_rs]]
 165 who = "Henri Sivonen <hsivonen@hsivonen.fi>"
 166 criteria = "safe-to-deploy"
 167 user-id = 4484 # Henri Sivonen (hsivonen)
 168 start = "2019-02-26"
 169 end = "2024-08-28"
 170 notes = "I, Henri Sivonen, wrote encoding_rs for Gecko and have reviewed contributions by others. There are two caveats to the certification: 1) The crate does things that are documented to be UB but that do not appear to actually be UB due to integer types differing from the general rule; https://github.com/hsivonen/encoding_rs/issues/79 . 2) It would be prudent to re-review the code that reinterprets buffers of integers as SIMD vectors; see https://github.com/hsivonen/encoding_rs/issues/87 ."
 171
 172 [[wildcard-audits.etagere]]
 173 who = "Nicolas Silva <nical@fastmail.com>"
 174 criteria = "safe-to-deploy"
 175 user-id = 1281 # Nicolas Silva (nical)
 176 start = "2020-11-12"
 177 end = "2024-04-25"
 178 notes = "I am the author of this crate."
 179
 180 [[wildcard-audits.euclid]]
 181 who = "Nicolas Silva <nical@fastmail.com>"
 182 criteria = "safe-to-deploy"
 183 user-id = 1281 # Nicolas Silva (nical)
 184 start = "2019-03-14"
 185 end = "2024-04-25"
 186 notes = "I wrote most of the commits in the euclid reprository and review every change that is not produced by me."
 187
 188 [[wildcard-audits.freetype]]
 189 who = "Bobby Holley <bobbyholley@gmail.com>"
 190 criteria = "safe-to-deploy"
 191 user-id = 2396 # Josh Matthews (jdm)
 192 start = "2020-02-28"
 193 end = "2023-05-04"
 194 renew = false
 195 notes = "All code written or reviewed by Mozilla staff."
 196
 197 [[wildcard-audits.gleam]]
 198 who = "Bobby Holley <bobbyholley@gmail.com>"
 199 criteria = "safe-to-deploy"
 200 user-id = 2396 # Josh Matthews (jdm)
 201 start = "2019-03-18"
 202 end = "2023-05-04"
 203 renew = false
 204 notes = "All code written or reviewed by Mozilla."
 205
 206 [[wildcard-audits.gleam]]
 207 who = "Bobby Holley <bobbyholley@gmail.com>"
 208 criteria = "safe-to-deploy"
 209 user-id = 5946 # Jeff Muizelaar (jrmuizel)
 210 start = "2023-04-21"
 211 end = "2023-05-04"
 212 renew = false
 213 notes = "All code written or reviewed by Mozilla."
 214
 215 [[wildcard-audits.gleam]]
 216 who = "Bobby Holley <bobbyholley@gmail.com>"
 217 criteria = "safe-to-deploy"
 218 user-id = 1039
 219 start = "2019-03-01"
 220 end = "2023-05-04"
 221 renew = false
 222 notes = "All code written or reviewed by Mozilla."
 223
 224 [[wildcard-audits.glean]]
 225 who = "Chris H-C <chutten@mozilla.com>"
 226 criteria = "safe-to-deploy"
 227 user-id = 48 # Jan-Erik Rediger (badboy)
 228 start = "2020-11-10"
 229 end = "2025-02-12"
 230 notes = "The Glean SDKs are maintained by the Glean Team at Mozilla."
 231
 232 [[wildcard-audits.glean]]
 233 who = "Travis Long <tlong@mozilla.com>"
 234 criteria = "safe-to-deploy"
 235 user-id = 66068 # Travis Long (travis79)
 236 start = "2024-02-12"
 237 end = "2025-02-13"
 238
 239 [[wildcard-audits.glean-core]]
 240 who = "Chris H-C <chutten@mozilla.com>"
 241 criteria = "safe-to-deploy"
 242 user-id = 48 # Jan-Erik Rediger (badboy)
 243 start = "2019-09-24"
 244 end = "2025-02-12"
 245 notes = "The Glean SDKs are maintained by the Glean Team at Mozilla."
 246
 247 [[wildcard-audits.glean-core]]
 248 who = "Travis Long <tlong@mozilla.com>"
 249 criteria = "safe-to-deploy"
 250 user-id = 66068 # Travis Long (travis79)
 251 start = "2020-07-10"
 252 end = "2025-02-13"
 253
 254 [[wildcard-audits.glslopt]]
 255 who = "Jamie Nicol <jnicol@mozilla.com>"
 256 criteria = "safe-to-deploy"
 257 user-id = 84794 # Jamie Nicol (jamienicol)
 258 start = "2020-04-07"
 259 end = "2024-04-25"
 260
 261 [[wildcard-audits.io-surface]]
 262 who = "Bobby Holley <bobbyholley@gmail.com>"
 263 criteria = "safe-to-deploy"
 264 user-id = 2396 # Josh Matthews (jdm)
 265 start = "2019-07-23"
 266 end = "2023-05-04"
 267 renew = false
 268 notes = "I've reviewed every source contribution that was neither authored nor reviewed by Mozilla."
 269
 270 [[wildcard-audits.marionette]]
 271 who = "Henrik Skupin <mail@hskupin.info>"
 272 criteria = "safe-to-run"
 273 user-id = 22262
 274 start = "2020-11-03"
 275 end = "2024-03-31"
 276 notes = "Maintained by the DevTools team at Mozilla and has no unsafe code."
 277
 278 [[wildcard-audits.mozdevice]]
 279 who = "Henrik Skupin <mail@hskupin.info>"
 280 criteria = "safe-to-run"
 281 user-id = 22262
 282 start = "2020-11-03"
 283 end = "2024-03-31"
 284 notes = "Maintained by the DevTools team at Mozilla and has no unsafe code."
 285
 286 [[wildcard-audits.mozprofile]]
 287 who = "Henrik Skupin <mail@hskupin.info>"
 288 criteria = "safe-to-deploy"
 289 user-id = 22262
 290 start = "2020-11-03"
 291 end = "2024-03-31"
 292 notes = "Maintained by the DevTools team at Mozilla and has no unsafe code."
 293
 294 [[wildcard-audits.mozrunner]]
 295 who = "Henrik Skupin <mail@hskupin.info>"
 296 criteria = "safe-to-deploy"
 297 user-id = 22262
 298 start = "2020-11-03"
 299 end = "2024-03-31"
 300 notes = "Maintained by the DevTools team at Mozilla and has no unsafe code."
 301
 302 [[wildcard-audits.mozversion]]
 303 who = "Henrik Skupin <mail@hskupin.info>"
 304 criteria = "safe-to-run"
 305 user-id = 22262
 306 start = "2020-11-03"
 307 end = "2024-03-31"
 308 notes = "Maintained by the DevTools team at Mozilla and has no unsafe code."
 309
 310 [[wildcard-audits.nss-gk-api]]
 311 who = "John M. Schanck <jschanck@mozilla.com>"
 312 criteria = "safe-to-deploy"
 313 user-id = 175410 # John Schanck (jschanck)
 314 start = "2022-11-14"
 315 end = "2024-06-20"
 316 notes = "Maintained by the CryptoEng team at Mozilla."
 317
 318 [[wildcard-audits.ohttp]]
 319 who = "Martin Thomson <mt@lowentropy.net>"
 320 criteria = "safe-to-deploy"
 321 user-id = 128763 # Martin Thomson (martinthomson)
 322 start = "2022-08-04"
 323 end = "2024-03-09"
 324 notes = "This code contains two cryptographic back ends.  No unsafe code is contained if the Rust `hpke` crate is used (the `rust-hpke` feature).  Using NSS (the `nss` feature) involves extensive use of bindings to the native code provided by NSS.  This interface uses wrappers that attempt to add safety to a fundamentally very dangerous library, but those wrappers have only been validated for use following the needs of this crate."
 325
 326 [[wildcard-audits.qcms]]
 327 who = "Jeff Muizelaar <jmuizelaar@mozilla.com>"
 328 criteria = "safe-to-deploy"
 329 user-id = 5946 # Jeff Muizelaar (jrmuizel)
 330 start = "2020-11-05"
 331 end = "2025-01-09"
 332 notes = "Maintained by the Graphics team at Mozilla in mozilla-central."
 333
 334 [[wildcard-audits.rust_cascade]]
 335 who = "Dana Keeler <dkeeler@mozilla.com>"
 336 criteria = "safe-to-deploy"
 337 user-id = 57462 # Dana Keeler (mozkeeler)
 338 start = "2019-11-15"
 339 end = "2024-04-24"
 340 notes = "Written and maintained by the security engineering team at Mozilla."
 341
 342 [[wildcard-audits.unicode-normalization]]
 343 who = "Manish Goregaokar <manishsmail@gmail.com>"
 344 criteria = "safe-to-deploy"
 345 user-id = 1139 # Manish Goregaokar (Manishearth)
 346 start = "2019-11-06"
 347 end = "2024-05-03"
 348 notes = "All code written or reviewed by Manish"
 349
 350 [[wildcard-audits.unicode-segmentation]]
 351 who = "Manish Goregaokar <manishsmail@gmail.com>"
 352 criteria = "safe-to-deploy"
 353 user-id = 1139 # Manish Goregaokar (Manishearth)
 354 start = "2019-05-15"
 355 end = "2024-05-03"
 356 notes = "All code written or reviewed by Manish"
 357
 358 [[wildcard-audits.unicode-width]]
 359 who = "Manish Goregaokar <manishsmail@gmail.com>"
 360 criteria = "safe-to-deploy"
 361 user-id = 1139 # Manish Goregaokar (Manishearth)
 362 start = "2019-12-05"
 363 end = "2024-05-03"
 364 notes = "All code written or reviewed by Manish"
 365
 366 [[wildcard-audits.unicode-xid]]
 367 who = "Manish Goregaokar <manishsmail@gmail.com>"
 368 criteria = "safe-to-deploy"
 369 user-id = 1139 # Manish Goregaokar (Manishearth)
 370 start = "2019-07-25"
 371 end = "2024-05-03"
 372 notes = "All code written or reviewed by Manish"
 373
 374 [[wildcard-audits.uniffi]]
 375 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
 376 criteria = "safe-to-deploy"
 377 user-id = 48 # Jan-Erik Rediger (badboy)
 378 start = "2022-05-05"
 379 end = "2024-06-21"
 380 notes = "Maintained by the Glean and Application Services teams"
 381
 382 [[wildcard-audits.uniffi]]
 383 who = "Ben Dean-Kawamura <bdk@mozilla.com>"
 384 criteria = "safe-to-deploy"
 385 user-id = 127697 # bendk
 386 start = "2021-10-27"
 387 end = "2024-12-11"
 388 notes = "Maintained by the Glean and Application Services teams"
 389
 390 [[wildcard-audits.uniffi_bindgen]]
 391 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
 392 criteria = "safe-to-deploy"
 393 user-id = 48 # Jan-Erik Rediger (badboy)
 394 start = "2022-05-05"
 395 end = "2024-06-21"
 396 notes = "Maintained by the Glean and Application Services teams"
 397
 398 [[wildcard-audits.uniffi_bindgen]]
 399 who = "Ben Dean-Kawamura <bdk@mozilla.com>"
 400 criteria = "safe-to-deploy"
 401 user-id = 127697 # bendk
 402 start = "2021-10-27"
 403 end = "2024-12-11"
 404 notes = "Maintained by the Glean and Application Services teams"
 405
 406 [[wildcard-audits.uniffi_build]]
 407 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
 408 criteria = "safe-to-deploy"
 409 user-id = 48 # Jan-Erik Rediger (badboy)
 410 start = "2022-05-05"
 411 end = "2024-06-21"
 412 notes = "Maintained by the Glean and Application Services teams"
 413
 414 [[wildcard-audits.uniffi_build]]
 415 who = "Ben Dean-Kawamura <bdk@mozilla.com>"
 416 criteria = "safe-to-deploy"
 417 user-id = 127697 # bendk
 418 start = "2021-10-27"
 419 end = "2024-12-11"
 420 notes = "Maintained by the Glean and Application Services teams"
 421
 422 [[wildcard-audits.uniffi_checksum_derive]]
 423 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
 424 criteria = "safe-to-deploy"
 425 user-id = 48 # Jan-Erik Rediger (badboy)
 426 start = "2022-12-16"
 427 end = "2024-06-21"
 428 notes = "Maintained by the Glean and Application Services teams"
 429
 430 [[wildcard-audits.uniffi_checksum_derive]]
 431 who = "Ben Dean-Kawamura <bdk@mozilla.com>"
 432 criteria = "safe-to-deploy"
 433 user-id = 127697 # bendk
 434 start = "2023-01-27"
 435 end = "2024-12-11"
 436 notes = "Maintained by the Glean and Application Services teams"
 437
 438 [[wildcard-audits.uniffi_core]]
 439 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
 440 criteria = "safe-to-deploy"
 441 user-id = 48 # Jan-Erik Rediger (badboy)
 442 start = "2023-06-21"
 443 end = "2024-06-21"
 444 notes = "Maintained by the Glean and Application Services teams"
 445
 446 [[wildcard-audits.uniffi_core]]
 447 who = "Ben Dean-Kawamura <bdk@mozilla.com>"
 448 criteria = "safe-to-deploy"
 449 user-id = 127697 # bendk
 450 start = "2023-01-27"
 451 end = "2024-12-11"
 452 notes = "Maintained by the Glean and Application Services teams"
 453
 454 [[wildcard-audits.uniffi_macros]]
 455 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
 456 criteria = "safe-to-deploy"
 457 user-id = 48 # Jan-Erik Rediger (badboy)
 458 start = "2022-05-05"
 459 end = "2024-06-21"
 460 notes = "Maintained by the Glean and Application Services teams"
 461
 462 [[wildcard-audits.uniffi_macros]]
 463 who = "Ben Dean-Kawamura <bdk@mozilla.com>"
 464 criteria = "safe-to-deploy"
 465 user-id = 127697 # bendk
 466 start = "2021-10-27"
 467 end = "2024-12-11"
 468 notes = "Maintained by the Glean and Application Services teams"
 469
 470 [[wildcard-audits.uniffi_meta]]
 471 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
 472 criteria = "safe-to-deploy"
 473 user-id = 48 # Jan-Erik Rediger (badboy)
 474 start = "2022-08-31"
 475 end = "2024-06-21"
 476 notes = "Maintained by the Glean and Application Services teams"
 477
 478 [[wildcard-audits.uniffi_meta]]
 479 who = "Ben Dean-Kawamura <bdk@mozilla.com>"
 480 criteria = "safe-to-deploy"
 481 user-id = 127697 # bendk
 482 start = "2022-09-13"
 483 end = "2024-12-11"
 484 notes = "Maintained by the Glean and Application Services teams"
 485
 486 [[wildcard-audits.uniffi_testing]]
 487 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
 488 criteria = "safe-to-deploy"
 489 user-id = 48 # Jan-Erik Rediger (badboy)
 490 start = "2022-12-16"
 491 end = "2024-06-21"
 492 notes = "Maintained by the Glean and Application Services teams"
 493
 494 [[wildcard-audits.uniffi_testing]]
 495 who = "Ben Dean-Kawamura <bdk@mozilla.com>"
 496 criteria = "safe-to-deploy"
 497 user-id = 127697 # bendk
 498 start = "2023-01-27"
 499 end = "2024-12-11"
 500 notes = "Maintained by the Glean and Application Services teams"
 501
 502 [[wildcard-audits.uniffi_udl]]
 503 who = "Ben Dean-Kawamura <bdk@mozilla.com>"
 504 criteria = "safe-to-deploy"
 505 user-id = 127697 # bendk
 506 start = "2023-10-18"
 507 end = "2024-12-11"
 508 notes = "Maintained by the Glean and Application Services teams"
 509
 510 [[wildcard-audits.utf8_iter]]
 511 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
 512 criteria = "safe-to-deploy"
 513 user-id = 4484 # Henri Sivonen (hsivonen)
 514 start = "2022-04-19"
 515 end = "2024-06-16"
 516 notes = "Maintained by Henri Sivonen who works at Mozilla."
 517
 518 [[wildcard-audits.webdriver]]
 519 who = "Henrik Skupin <mail@hskupin.info>"
 520 criteria = "safe-to-deploy"
 521 user-id = 22262
 522 start = "2020-11-03"
 523 end = "2024-03-31"
 524 notes = "Maintained by the DevTools team at Mozilla and has no unsafe code."
 525
 526 [[audits.aa-stroke]]
 527 who = "Lee Salzman <lsalzman@mozilla.com>"
 528 criteria = "safe-to-deploy"
 529 version = "0.1.0"
 530 notes = "Written and maintained by Gfx team at Mozilla."
 531
 532 [[audits.aho-corasick]]
 533 who = "Mike Hommey <mh+mozilla@glandium.org>"
 534 criteria = "safe-to-deploy"
 535 delta = "0.7.18 -> 0.7.20"
 536
 537 [[audits.alsa]]
 538 who = "Mike Hommey <mh+mozilla@glandium.org>"
 539 criteria = "safe-to-deploy"
 540 delta = "0.4.3 -> 0.7.0"
 541
 542 [[audits.alsa]]
 543 who = "Mike Hommey <mh+mozilla@glandium.org>"
 544 criteria = "safe-to-deploy"
 545 delta = "0.7.0 -> 0.8.1"
 546
 547 [[audits.android_logger]]
 548 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
 549 criteria = "safe-to-deploy"
 550 version = "0.11.0"
 551 notes = "Small crate, wrapping Android log functionality, reviewed by janerik"
 552
 553 [[audits.android_logger]]
 554 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
 555 criteria = "safe-to-deploy"
 556 delta = "0.11.0 -> 0.11.1"
 557 notes = "Small crate, wrapping Android log functionality, now switched to properly using MaybeUninit"
 558
 559 [[audits.android_logger]]
 560 who = "Mike Hommey <mh+mozilla@glandium.org>"
 561 criteria = "safe-to-deploy"
 562 delta = "0.11.1 -> 0.11.3"
 563
 564 [[audits.android_logger]]
 565 who = "Chris H-C <chutten@mozilla.com>"
 566 criteria = "safe-to-deploy"
 567 delta = "0.11.3 -> 0.12.0"
 568 notes = "Small wrapper crate. This update fixes log level filtering."
 569
 570 [[audits.android_system_properties]]
 571 who = "Nicolas Silva <nical@fastmail.com>"
 572 criteria = "safe-to-deploy"
 573 version = "0.1.2"
 574 notes = "I wrote this crate, reviewed by jimb. It is mostly a Rust port of some C++ code we already ship."
 575
 576 [[audits.android_system_properties]]
 577 who = "Mike Hommey <mh+mozilla@glandium.org>"
 578 criteria = "safe-to-deploy"
 579 delta = "0.1.2 -> 0.1.4"
 580
 581 [[audits.android_system_properties]]
 582 who = "Mike Hommey <mh+mozilla@glandium.org>"
 583 criteria = "safe-to-deploy"
 584 delta = "0.1.4 -> 0.1.5"
 585
 586 [[audits.anyhow]]
 587 who = "Mike Hommey <mh+mozilla@glandium.org>"
 588 criteria = "safe-to-deploy"
 589 delta = "1.0.57 -> 1.0.61"
 590
 591 [[audits.anyhow]]
 592 who = "Bobby Holley <bobbyholley@gmail.com>"
 593 criteria = "safe-to-deploy"
 594 delta = "1.0.58 -> 1.0.57"
 595 notes = "No functional differences, just CI config and docs."
 596
 597 [[audits.anyhow]]
 598 who = "Mike Hommey <mh+mozilla@glandium.org>"
 599 criteria = "safe-to-deploy"
 600 delta = "1.0.61 -> 1.0.62"
 601
 602 [[audits.anyhow]]
 603 who = "Mike Hommey <mh+mozilla@glandium.org>"
 604 criteria = "safe-to-deploy"
 605 delta = "1.0.62 -> 1.0.68"
 606
 607 [[audits.anyhow]]
 608 who = "Mike Hommey <mh+mozilla@glandium.org>"
 609 criteria = "safe-to-deploy"
 610 delta = "1.0.68 -> 1.0.69"
 611
 612 [[audits.app_units]]
 613 who = "Emilio Cobos Álvarez <emilio@crisal.io>"
 614 criteria = "safe-to-deploy"
 615 version = "0.7.1"
 616 notes = """
 617 I'm pretty familiar with this crate. It provides a fixed-point numeric type.
 618 The code is pretty straight-forward, there's no unsafe code at all.
 619 """
 620
 621 [[audits.app_units]]
 622 who = "Nicolas Silva <nical@fastmail.com>"
 623 criteria = "safe-to-deploy"
 624 version = "0.7.3"
 625
 626 [[audits.app_units]]
 627 who = "Emilio Cobos Álvarez <emilio@crisal.io>"
 628 criteria = "safe-to-deploy"
 629 delta = "0.7.1 -> 0.7.2"
 630 notes = "Adding repr(transparent) plus a couple minor clean-ups, no functional changes from 0.7.1."
 631
 632 [[audits.arbitrary]]
 633 who = "Mike Hommey <mh+mozilla@glandium.org>"
 634 criteria = "safe-to-run"
 635 delta = "1.1.0 -> 1.1.1"
 636
 637 [[audits.arbitrary]]
 638 who = "Mike Hommey <mh+mozilla@glandium.org>"
 639 criteria = "safe-to-run"
 640 delta = "1.1.1 -> 1.1.3"
 641
 642 [[audits.arbitrary]]
 643 who = "Mike Hommey <mh+mozilla@glandium.org>"
 644 criteria = "safe-to-run"
 645 delta = "1.1.3 -> 1.2.0"
 646
 647 [[audits.arbitrary]]
 648 who = "Mike Hommey <mh+mozilla@glandium.org>"
 649 criteria = "safe-to-run"
 650 delta = "1.2.0 -> 1.2.3"
 651
 652 [[audits.ash]]
 653 who = "Jim Blandy <jimb@red-bean.com>"
 654 criteria = "safe-to-deploy"
 655 delta = "0.37.0+1.3.209 -> 0.37.1+1.3.235"
 656 notes = """
 657 Nicolas Silva, Jim Blandy, and Teodor Tanasoaia audited ash master
 658 branch commits from e43e9c0c to 6bd82768 inclusive.
 659 """
 660
 661 [[audits.ash]]
 662 who = "Nicolas Silva <nical@fastmail.com>"
 663 criteria = "safe-to-deploy"
 664 delta = "0.37.1+1.3.235 -> 0.37.2+1.3.238"
 665
 666 [[audits.ash]]
 667 who = "Teodor Tanasoaia <ttanasoaia@mozilla.com>"
 668 criteria = "safe-to-deploy"
 669 delta = "0.37.2+1.3.238 -> 0.37.3+1.3.251"
 670
 671 [[audits.ashmem]]
 672 who = "Matthew Gregan <kinetik@flim.org>"
 673 criteria = "safe-to-deploy"
 674 version = "0.1.2"
 675 notes = """
 676 Small unsafe wrapper around Android 8.0's ASharedMemory native API that falls
 677 back to older private ioctl-based API at runtime on earlier OS releases.  The
 678 shim code is small and doesn't inspect the API arguments, so is unlikely to
 679 expose any safety issues beyond those presented by the native OS API.
 680 """
 681
 682 [[audits.askama]]
 683 who = "Bobby Holley <bobbyholley@gmail.com>"
 684 criteria = "safe-to-deploy"
 685 version = "0.11.1"
 686 notes = """
 687 Just contains some traits and re-exports for use by a broader package of related
 688 crates. No unsafe code or ambient capability usage.
 689 """
 690
 691 [[audits.async-task]]
 692 who = "Nika Layzell <nika@thelayzells.com>"
 693 criteria = "safe-to-deploy"
 694 delta = "4.0.3 -> 4.0.3@git:f6488e35beccb26eb6e85847b02aa78a42cd3d0e"
 695 notes = "Recorded by bholley, confirmed over slack."
 696
 697 [[audits.async-task]]
 698 who = "Nika Layzell <nika@thelayzells.com>"
 699 criteria = "safe-to-deploy"
 700 delta = "4.0.3 -> 4.3.0"
 701 notes = "Main addition is the new FallibleTask type, which I implemented. No risky unsafe code changes."
 702
 703 [[audits.async-trait]]
 704 who = "Mike Hommey <mh+mozilla@glandium.org>"
 705 criteria = "safe-to-deploy"
 706 delta = "0.1.56 -> 0.1.57"
 707
 708 [[audits.async-trait]]
 709 who = "Mike Hommey <mh+mozilla@glandium.org>"
 710 criteria = "safe-to-deploy"
 711 delta = "0.1.57 -> 0.1.60"
 712
 713 [[audits.async-trait]]
 714 who = "Mike Hommey <mh+mozilla@glandium.org>"
 715 criteria = "safe-to-deploy"
 716 delta = "0.1.60 -> 0.1.64"
 717
 718 [[audits.atomic_refcell]]
 719 who = "Bobby Holley <bholley@mozilla.com>"
 720 criteria = "safe-to-deploy"
 721 version = "0.1.8"
 722 notes = "I maintain this crate and have reviewed every line."
 723
 724 [[audits.atomic_refcell]]
 725 who = "Mike Hommey <mh+mozilla@glandium.org>"
 726 criteria = "safe-to-deploy"
 727 delta = "0.1.8 -> 0.1.9"
 728
 729 [[audits.audio-mixer]]
 730 who = "Chun-Min Chang <chun.m.chang@gmail.com>"
 731 criteria = "safe-to-deploy"
 732 version = "0.1.2"
 733 notes = "audio-mixer is a Mozilla-developed package."
 734
 735 [[audits.audio-mixer]]
 736 who = "Mike Hommey <mh+mozilla@glandium.org>"
 737 criteria = "safe-to-deploy"
 738 delta = "0.1.2 -> 0.1.3"
 739
 740 [[audits.authenticator]]
 741 who = "John M. Schanck <jschanck@mozilla.com>"
 742 criteria = "safe-to-deploy"
 743 version = "0.4.0-alpha.13"
 744 notes = "Maintained by the CryptoEng team at Mozilla."
 745
 746 [[audits.autocfg]]
 747 who = "Josh Stone <jistone@redhat.com>"
 748 criteria = "safe-to-deploy"
 749 version = "1.1.0"
 750 notes = "All code written or reviewed by Josh Stone."
 751
 752 [[audits.base64]]
 753 who = "Mike Hommey <mh+mozilla@glandium.org>"
 754 criteria = "safe-to-deploy"
 755 delta = "0.13.0 -> 0.13.1"
 756
 757 [[audits.bindgen]]
 758 who = "Emilio Cobos Álvarez <emilio@crisal.io>"
 759 criteria = "safe-to-deploy"
 760 version = "0.59.2"
 761 notes = "I'm the primary author and maintainer of the crate."
 762
 763 [[audits.bindgen]]
 764 who = "Emilio Cobos Álvarez <emilio@crisal.io>"
 765 criteria = "safe-to-deploy"
 766 delta = "0.59.2 -> 0.63.0"
 767
 768 [[audits.bindgen]]
 769 who = "Mike Hommey <mh+mozilla@glandium.org>"
 770 criteria = "safe-to-deploy"
 771 delta = "0.63.0 -> 0.64.0"
 772
 773 [[audits.bindgen]]
 774 who = "Mike Hommey <mh+mozilla@glandium.org>"
 775 criteria = "safe-to-deploy"
 776 delta = "0.64.0 -> 0.66.1"
 777
 778 [[audits.bindgen]]
 779 who = "Mike Hommey <mh+mozilla@glandium.org>"
 780 criteria = "safe-to-deploy"
 781 delta = "0.66.1 -> 0.68.1"
 782
 783 [[audits.bindgen]]
 784 who = "Andreas Pehrson <apehrson@mozilla.com>"
 785 criteria = "safe-to-deploy"
 786 delta = "0.68.1 -> 0.69.1"
 787
 788 [[audits.bindgen]]
 789 who = "Mike Hommey <mh+mozilla@glandium.org>"
 790 criteria = "safe-to-deploy"
 791 delta = "0.69.1 -> 0.69.2"
 792
 793 [[audits.bindgen]]
 794 who = "Emilio Cobos Álvarez <emilio@crisal.io>"
 795 criteria = "safe-to-deploy"
 796 delta = "0.69.2 -> 0.69.4"
 797
 798 [[audits.bit-set]]
 799 who = "Aria Beingessner <a.beingessner@gmail.com>"
 800 criteria = "safe-to-deploy"
 801 version = "0.5.2"
 802 notes = "Another crate I own via contain-rs that is ancient and maintenance mode, no known issues."
 803
 804 [[audits.bit-set]]
 805 who = "Mike Hommey <mh+mozilla@glandium.org>"
 806 criteria = "safe-to-deploy"
 807 delta = "0.5.2 -> 0.5.3"
 808
 809 [[audits.bit-vec]]
 810 who = "Aria Beingessner <a.beingessner@gmail.com>"
 811 criteria = "safe-to-deploy"
 812 version = "0.6.3"
 813 notes = "Another crate I own via contain-rs that is ancient and in maintenance mode but otherwise perfectly fine."
 814
 815 [[audits.bitflags]]
 816 who = "Alex Franchuk <afranchuk@mozilla.com>"
 817 criteria = "safe-to-deploy"
 818 delta = "1.3.2 -> 2.0.2"
 819 notes = "Removal of some unsafe code/methods. No changes to externals, just some refactoring (mostly internal)."
 820
 821 [[audits.bitflags]]
 822 who = "Nicolas Silva <nical@fastmail.com>"
 823 criteria = "safe-to-deploy"
 824 delta = "2.0.2 -> 2.1.0"
 825
 826 [[audits.bitflags]]
 827 who = "Teodor Tanasoaia <ttanasoaia@mozilla.com>"
 828 criteria = "safe-to-deploy"
 829 delta = "2.2.1 -> 2.3.2"
 830
 831 [[audits.bitflags]]
 832 who = "Mike Hommey <mh+mozilla@glandium.org>"
 833 criteria = "safe-to-deploy"
 834 delta = "2.3.3 -> 2.4.0"
 835
 836 [[audits.block-buffer]]
 837 who = "Mike Hommey <mh+mozilla@glandium.org>"
 838 criteria = "safe-to-deploy"
 839 delta = "0.10.2 -> 0.10.3"
 840
 841 [[audits.build-parallel]]
 842 who = "Jeff Muizelaar <jmuizelaar@mozilla.com>"
 843 criteria = "safe-to-deploy"
 844 version = "0.1.2"
 845
 846 [[audits.bumpalo]]
 847 who = "Bobby Holley <bobbyholley@gmail.com>"
 848 criteria = "safe-to-run"
 849 delta = "3.9.1 -> 3.10.0"
 850 notes = """
 851 Some nontrivial functional changes but certainly meets the no-malware bar of
 852 safe-to-run. If we needed safe-to-deploy for this in m-c I'd ask Nick to re-
 853 certify this version, but we don't, so this is fine for now.
 854 """
 855
 856 [[audits.bumpalo]]
 857 who = "Mike Hommey <mh+mozilla@glandium.org>"
 858 criteria = "safe-to-run"
 859 delta = "3.11.1 -> 3.12.0"
 860
 861 [[audits.bytes]]
 862 who = "Mike Hommey <mh+mozilla@glandium.org>"
 863 criteria = "safe-to-deploy"
 864 delta = "1.1.0 -> 1.2.1"
 865
 866 [[audits.bytes]]
 867 who = "Mike Hommey <mh+mozilla@glandium.org>"
 868 criteria = "safe-to-deploy"
 869 delta = "1.2.1 -> 1.3.0"
 870
 871 [[audits.bytes]]
 872 who = "Mike Hommey <mh+mozilla@glandium.org>"
 873 criteria = "safe-to-deploy"
 874 delta = "1.3.0 -> 1.4.0"
 875
 876 [[audits.camino]]
 877 who = "Mike Hommey <mh+mozilla@glandium.org>"
 878 criteria = "safe-to-deploy"
 879 delta = "1.0.9 -> 1.1.1"
 880
 881 [[audits.camino]]
 882 who = "Mike Hommey <mh+mozilla@glandium.org>"
 883 criteria = "safe-to-deploy"
 884 delta = "1.1.1 -> 1.1.2"
 885
 886 [[audits.cargo_metadata]]
 887 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
 888 criteria = "safe-to-deploy"
 889 version = "0.15.2"
 890 notes = "I reviewed the whole code base. Parser for the output of cargo-metadata, relying mostly on serde. No unsafe code used."
 891
 892 [[audits.cargo_metadata]]
 893 who = "Mike Hommey <mh+mozilla@glandium.org>"
 894 criteria = "safe-to-deploy"
 895 delta = "0.15.2 -> 0.15.3"
 896
 897 [[audits.cc]]
 898 who = "Mike Hommey <mh+mozilla@glandium.org>"
 899 criteria = "safe-to-deploy"
 900 delta = "1.0.73 -> 1.0.78"
 901
 902 [[audits.chardetng]]
 903 who = "Henri Sivonen <hsivonen@hsivonen.fi>"
 904 criteria = "safe-to-deploy"
 905 version = "0.1.9"
 906 notes = "I, Henri Sivonen, wrote this (safe-code-only) crate for Gecko even though the crate is published via crates.io."
 907
 908 [[audits.chardetng]]
 909 who = "Bobby Holley <bobbyholley@gmail.com>"
 910 criteria = "safe-to-deploy"
 911 delta = "0.1.9 -> 0.1.9@git:3484d3e3ebdc8931493aa5df4d7ee9360a90e76b"
 912
 913 [[audits.chardetng_c]]
 914 who = "Henri Sivonen <hsivonen@hsivonen.fi>"
 915 criteria = "safe-to-deploy"
 916 version = "0.1.2"
 917 notes = "I, Henri Sivonen, wrote this crate for Gecko even though it is published via crates.io. The buffer input assumes Rust slice constraints for the start pointer. In Gecko, this is taken care of by mozilla::Span, but the C API doesn't conform to idiomatic C constraints on this point."
 918
 919 [[audits.chardetng_c]]
 920 who = "Bobby Holley <bobbyholley@gmail.com>"
 921 criteria = "safe-to-deploy"
 922 delta = "0.1.2 -> 0.1.2@git:ed8a4c6f900a90d4dbc1d64b856e61490a1c3570"
 923
 924 [[audits.clang-sys]]
 925 who = "Mike Hommey <mh+mozilla@glandium.org>"
 926 criteria = "safe-to-deploy"
 927 delta = "1.3.3 -> 1.4.0"
 928
 929 [[audits.clang-sys]]
 930 who = "Mike Hommey <mh+mozilla@glandium.org>"
 931 criteria = "safe-to-deploy"
 932 delta = "1.4.0 -> 1.6.0"
 933
 934 [[audits.clap_lex]]
 935 who = "Mike Hommey <mh+mozilla@glandium.org>"
 936 criteria = "safe-to-deploy"
 937 delta = "0.2.0 -> 0.2.2"
 938
 939 [[audits.clap_lex]]
 940 who = "Mike Hommey <mh+mozilla@glandium.org>"
 941 criteria = "safe-to-deploy"
 942 delta = "0.2.2 -> 0.2.4"
 943
 944 [[audits.comedy]]
 945 who = "Nick Alexander <nalexander@mozilla.com>"
 946 criteria = "safe-to-deploy"
 947 version = "0.2.0"
 948 notes = """
 949 The comedy crate was written by Adam Gashlin for Mozilla's use.  The entire
 950 comedy 0.2.0 crate is full of `unsafe` code and makes many assumptions about
 951 memory and layout, but there is no particular processing of untrusted input
 952 here.
 953 """
 954
 955 [[audits.cookie]]
 956 who = "Mike Hommey <mh+mozilla@glandium.org>"
 957 criteria = "safe-to-run"
 958 delta = "0.16.0 -> 0.16.2"
 959
 960 [[audits.core-graphics]]
 961 who = "Teodor Tanasoaia <ttanasoaia@mozilla.com>"
 962 criteria = "safe-to-deploy"
 963 delta = "0.22.3 -> 0.23.1"
 964
 965 [[audits.core-graphics-types]]
 966 who = "Teodor Tanasoaia <ttanasoaia@mozilla.com>"
 967 criteria = "safe-to-deploy"
 968 delta = "0.1.1 -> 0.1.2"
 969
 970 [[audits.core-text]]
 971 who = "Teodor Tanasoaia <ttanasoaia@mozilla.com>"
 972 criteria = "safe-to-deploy"
 973 delta = "19.2.0 -> 20.0.0"
 974
 975 [[audits.core-text]]
 976 who = "Jonathan Kew <jfkthame@gmail.com>"
 977 criteria = "safe-to-deploy"
 978 delta = "20.0.0 -> 20.1.0"
 979 notes = """
 980 The bulk of the 20.0.0 -> 20.1.0 changes were purely cosmetic clippy and rustfmt changes.
 981
 982 The only substantive change was the addition of wrappers to expose two additional Core Text APIs,
 983 the variants of CTFontCreateWithName and CTFontCreateWithFontDescriptor that accept a CTFontOptions
 984 parameter. These are directly parallel to the existing versions without CTFontOptions, and do not
 985 introduce any new forms of risk.
 986 """
 987
 988 [[audits.core_maths]]
 989 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
 990 criteria = "safe-to-deploy"
 991 version = "0.1.0"
 992
 993 [[audits.coreaudio-sys]]
 994 who = "Mike Hommey <mh+mozilla@glandium.org>"
 995 criteria = "safe-to-deploy"
 996 delta = "0.2.10 -> 0.2.11"
 997
 998 [[audits.coreaudio-sys]]
 999 who = "Mike Hommey <mh+mozilla@glandium.org>"
1000 criteria = "safe-to-deploy"
1001 delta = "0.2.11 -> 0.2.12"
1002
1003 [[audits.coreaudio-sys]]
1004 who = "Mike Hommey <mh+mozilla@glandium.org>"
1005 criteria = "safe-to-deploy"
1006 delta = "0.2.12 -> 0.2.13"
1007
1008 [[audits.coreaudio-sys]]
1009 who = "Andreas Pehrson <apehrson@mozilla.com>"
1010 criteria = "safe-to-deploy"
1011 delta = "0.2.13 -> 0.2.14"
1012
1013 [[audits.cose]]
1014 who = "Mathew Hodson <mathew.hodson@gmail.com>"
1015 criteria = "safe-to-deploy"
1016 delta = "0.1.4 -> 0.1.4@git:43c22248d136c8b38fe42ea709d08da6355cf04b"
1017
1018 [[audits.cpufeatures]]
1019 who = "Mike Hommey <mh+mozilla@glandium.org>"
1020 criteria = "safe-to-deploy"
1021 delta = "0.2.2 -> 0.2.4"
1022
1023 [[audits.cpufeatures]]
1024 who = "Mike Hommey <mh+mozilla@glandium.org>"
1025 criteria = "safe-to-deploy"
1026 delta = "0.2.4 -> 0.2.5"
1027
1028 [[audits.cpufeatures]]
1029 who = "Gabriele Svelto <gsvelto@mozilla.com>"
1030 criteria = "safe-to-deploy"
1031 delta = "0.2.7 -> 0.2.8"
1032 notes = "This release contains a single fix for an issue that affected Firefox"
1033
1034 [[audits.crash-context]]
1035 who = "Gabriele Svelto <gsvelto@mozilla.com>"
1036 criteria = "safe-to-deploy"
1037 version = "0.5.1"
1038 notes = "Mozilla employees contributed to this crate and the remaining code was fully audited"
1039
1040 [[audits.crash-context]]
1041 who = "Alex Franchuk <afranchuk@mozilla.com>"
1042 criteria = "safe-to-deploy"
1043 delta = "0.5.1 -> 0.6.0"
1044 notes = """
1045 There are few changes. The main change is the removal of `winapi` in favor of
1046 manually-generated bindings (which are minimal). The few small bugfixes are
1047 sound.
1048 """
1049
1050 [[audits.crash-context]]
1051 who = "Gabriele Svelto <gsvelto@mozilla.com>"
1052 criteria = "safe-to-deploy"
1053 delta = "0.6.0 -> 0.6.1"
1054
1055 [[audits.crossbeam-channel]]
1056 who = "Mike Hommey <mh+mozilla@glandium.org>"
1057 criteria = "safe-to-deploy"
1058 delta = "0.5.4 -> 0.5.6"
1059
1060 [[audits.crossbeam-deque]]
1061 who = "Mike Hommey <mh+mozilla@glandium.org>"
1062 criteria = "safe-to-deploy"
1063 delta = "0.8.1 -> 0.8.2"
1064
1065 [[audits.crossbeam-epoch]]
1066 who = "Mike Hommey <mh+mozilla@glandium.org>"
1067 criteria = "safe-to-deploy"
1068 delta = "0.9.8 -> 0.9.10"
1069
1070 [[audits.crossbeam-epoch]]
1071 who = "Mike Hommey <mh+mozilla@glandium.org>"
1072 criteria = "safe-to-deploy"
1073 delta = "0.9.10 -> 0.9.13"
1074
1075 [[audits.crossbeam-epoch]]
1076 who = "Mike Hommey <mh+mozilla@glandium.org>"
1077 criteria = "safe-to-deploy"
1078 delta = "0.9.13 -> 0.9.14"
1079
1080 [[audits.crossbeam-queue]]
1081 who = "Matthew Gregan <kinetik@flim.org>"
1082 criteria = "safe-to-deploy"
1083 version = "0.3.8"
1084
1085 [[audits.crossbeam-utils]]
1086 who = "Mike Hommey <mh+mozilla@glandium.org>"
1087 criteria = "safe-to-deploy"
1088 delta = "0.8.8 -> 0.8.11"
1089
1090 [[audits.crossbeam-utils]]
1091 who = "Mike Hommey <mh+mozilla@glandium.org>"
1092 criteria = "safe-to-deploy"
1093 delta = "0.8.11 -> 0.8.14"
1094
1095 [[audits.crypto-common]]
1096 who = "Mike Hommey <mh+mozilla@glandium.org>"
1097 criteria = "safe-to-deploy"
1098 delta = "0.1.3 -> 0.1.6"
1099
1100 [[audits.cssparser]]
1101 who = "Emilio Cobos Álvarez <emilio@crisal.io>"
1102 criteria = "safe-to-deploy"
1103 version = "0.29.6"
1104 notes = """
1105 I've reviewed or authored most of the recent changes to this library, and it
1106 was developed by other mozilla folks. Unsafe code there is reasonable (utf-8
1107 casts for serialization and parsing).
1108 """
1109
1110 [[audits.cssparser]]
1111 who = "Bobby Holley <bobbyholley@gmail.com>"
1112 criteria = "safe-to-deploy"
1113 delta = "0.29.6 -> 0.31.0"
1114 notes = """
1115 All the changes in this release were authored by Mozilla staff, except the
1116 uninit_array stuff, which looks fine.
1117 """
1118
1119 [[audits.cssparser]]
1120 who = "Mike Hommey <mh+mozilla@glandium.org>"
1121 criteria = "safe-to-deploy"
1122 delta = "0.31.0 -> 0.31.2"
1123
1124 [[audits.cssparser]]
1125 who = "Emilio Cobos Álvarez <emilio@crisal.io>"
1126 criteria = "safe-to-deploy"
1127 delta = "0.31.2 -> 0.32.0"
1128 notes = "All changes were either authored or reviewed by Mozilla employees."
1129
1130 [[audits.cssparser]]
1131 who = "Emilio Cobos Álvarez <emilio@crisal.io>"
1132 criteria = "safe-to-deploy"
1133 delta = "0.32.0 -> 0.33.0"
1134 notes = """
1135 Mozilla authored. Breaking changes from 0.32 involve splitting color APIs into
1136 their own crate and removing an unused line number offset mechanism.
1137 """
1138
1139 [[audits.cssparser]]
1140 who = "Emilio Cobos Álvarez <emilio@crisal.io>"
1141 criteria = "safe-to-deploy"
1142 delta = "0.33.0 -> 0.33.0@git:aaa966d9d6ae70c4b8a62bb5e3a14c068bb7dff0"
1143 notes = "Only one minimal change exposing a previously-private enumeration."
1144
1145 [[audits.cssparser-color]]
1146 who = "Emilio Cobos Álvarez <emilio@crisal.io>"
1147 criteria = "safe-to-deploy"
1148 version = "0.1.0"
1149 notes = "This code used to live in cssparser's color module. Only moved out. Mozilla-authored."
1150
1151 [[audits.cssparser-macros]]
1152 who = "Emilio Cobos Álvarez <emilio@crisal.io>"
1153 criteria = "safe-to-deploy"
1154 version = "0.6.0"
1155 notes = """
1156 Trivial crate with a single proc macro to compute the max length of the inputs
1157 to a match expression.
1158 """
1159
1160 [[audits.cssparser-macros]]
1161 who = "Mike Hommey <mh+mozilla@glandium.org>"
1162 criteria = "safe-to-deploy"
1163 delta = "0.6.0 -> 0.6.1"
1164
1165 [[audits.cssparser-macros]]
1166 who = "Emilio Cobos Álvarez <emilio@crisal.io>"
1167 criteria = "safe-to-deploy"
1168 delta = "0.6.1 -> 0.6.1@git:aaa966d9d6ae70c4b8a62bb5e3a14c068bb7dff0"
1169 notes = "No changes from already-certified upstream, but needed because it lives in the same git repo as the cssparser crate."
1170
1171 [[audits.cstr]]
1172 who = "Emilio Cobos Álvarez <emilio@crisal.io>"
1173 criteria = "safe-to-deploy"
1174 version = "0.2.10"
1175 notes = """
1176 I've reviewed the code of the crate thoroughly. It generates an unsafe block
1177 which is statically guaranteed to be safe. Inputs to the macro have to be
1178 static so there's no uncontrolled input whatsoever.
1179 """
1180
1181 [[audits.cstr]]
1182 who = "Mike Hommey <mh+mozilla@glandium.org>"
1183 criteria = "safe-to-deploy"
1184 delta = "0.2.10 -> 0.2.11"
1185
1186 [[audits.cubeb]]
1187 who = "Matthew Gregan <kinetik@flim.org>"
1188 criteria = "safe-to-deploy"
1189 version = "0.10.1"
1190 notes = """
1191 Mozilla-developed package.
1192 """
1193
1194 [[audits.cubeb]]
1195 who = "Matthew Gregan <kinetik@flim.org>"
1196 criteria = "safe-to-deploy"
1197 delta = "0.10.1 -> 0.10.2"
1198
1199 [[audits.cubeb]]
1200 who = "Mike Hommey <mh+mozilla@glandium.org>"
1201 criteria = "safe-to-deploy"
1202 delta = "0.10.2 -> 0.10.3"
1203
1204 [[audits.cubeb]]
1205 who = "Andreas Pehrson <apehrson@mozilla.com>"
1206 criteria = "safe-to-deploy"
1207 delta = "0.10.3 -> 0.12.0"
1208
1209 [[audits.cubeb-backend]]
1210 who = "Matthew Gregan <kinetik@flim.org>"
1211 criteria = "safe-to-deploy"
1212 version = "0.10.1"
1213 notes = """
1214 Mozilla-developed package.
1215 """
1216
1217 [[audits.cubeb-backend]]
1218 who = "Matthew Gregan <kinetik@flim.org>"
1219 criteria = "safe-to-deploy"
1220 delta = "0.10.1 -> 0.10.2"
1221
1222 [[audits.cubeb-backend]]
1223 who = "Paul Adenot <paul@paul.cx>"
1224 criteria = "safe-to-deploy"
1225 delta = "0.10.2 -> 0.10.3"
1226 notes = """
1227 Mozilla-developed package.
1228 """
1229
1230 [[audits.cubeb-backend]]
1231 who = "Andreas Pehrson <apehrson@mozilla.com>"
1232 criteria = "safe-to-deploy"
1233 delta = "0.10.3 -> 0.10.7"
1234
1235 [[audits.cubeb-backend]]
1236 who = "Andreas Pehrson <apehrson@mozilla.com>"
1237 criteria = "safe-to-deploy"
1238 delta = "0.10.7 -> 0.12.0"
1239
1240 [[audits.cubeb-core]]
1241 who = "Matthew Gregan <kinetik@flim.org>"
1242 criteria = "safe-to-deploy"
1243 version = "0.10.1"
1244 notes = """
1245 Mozilla-developed package.
1246 """
1247
1248 [[audits.cubeb-core]]
1249 who = "Matthew Gregan <kinetik@flim.org>"
1250 criteria = "safe-to-deploy"
1251 delta = "0.10.1 -> 0.10.2"
1252
1253 [[audits.cubeb-core]]
1254 who = "Paul Adenot <paul@paul.cx>"
1255 criteria = "safe-to-deploy"
1256 delta = "0.10.2 -> 0.10.3"
1257 notes = """
1258 Mozilla-developed package.
1259 """
1260
1261 [[audits.cubeb-core]]
1262 who = "Mike Hommey <mh+mozilla@glandium.org>"
1263 criteria = "safe-to-deploy"
1264 delta = "0.10.3 -> 0.10.4"
1265
1266 [[audits.cubeb-core]]
1267 who = "Andreas Pehrson <apehrson@mozilla.com>"
1268 criteria = "safe-to-deploy"
1269 delta = "0.10.4 -> 0.10.7"
1270
1271 [[audits.cubeb-core]]
1272 who = "Andreas Pehrson <apehrson@mozilla.com>"
1273 criteria = "safe-to-deploy"
1274 delta = "0.10.7 -> 0.12.0"
1275
1276 [[audits.cubeb-sys]]
1277 who = "Matthew Gregan <kinetik@flim.org>"
1278 criteria = "safe-to-deploy"
1279 version = "0.10.1"
1280 notes = """
1281 Mozilla-developed package.
1282 """
1283
1284 [[audits.cubeb-sys]]
1285 who = "Matthew Gregan <kinetik@flim.org>"
1286 criteria = "safe-to-deploy"
1287 delta = "0.10.1 -> 0.10.2"
1288
1289 [[audits.cubeb-sys]]
1290 who = "Paul Adenot <paul@paul.cx>"
1291 criteria = "safe-to-deploy"
1292 delta = "0.10.2 -> 0.10.3"
1293 notes = """
1294 Mozilla-developed package.
1295 """
1296
1297 [[audits.cubeb-sys]]
1298 who = "Andreas Pehrson <apehrson@mozilla.com>"
1299 criteria = "safe-to-deploy"
1300 delta = "0.10.3 -> 0.10.7"
1301
1302 [[audits.cubeb-sys]]
1303 who = "Andreas Pehrson <apehrson@mozilla.com>"
1304 criteria = "safe-to-deploy"
1305 delta = "0.10.7 -> 0.12.0"
1306
1307 [[audits.d3d12]]
1308 who = "Jim Blandy <jimb@red-bean.com>"
1309 criteria = "safe-to-deploy"
1310 delta = "0.4.1 -> 0.5.0"
1311 notes = "The commits between 0.4.1 and 0.5.0 were all audited by Dzmitry Malyshau or myself."
1312
1313 [[audits.d3d12]]
1314 who = "Nicolas Silva <nical@fastmail.com>"
1315 criteria = "safe-to-deploy"
1316 delta = "0.5.0 -> 0.7.0"
1317
1318 [[audits.d3d12]]
1319 who = [
1320     "Erich Gubler <egubler@mozilla.com>",
1321     "Teodor Tanasoaia <ttanasoaia@mozilla.com>",
1322     "Erich Gubler <erichdongubler@gmail.com>",
1323     "Jim Blandy <jimb@red-bean.com>",
1324     "Nicolas Silva <nical@fastmail.com>",
1325 ]
1326 criteria = "safe-to-deploy"
1327 delta = "0.7.0 -> 0.19.0@git:07e59eb6fc7de3f682f1c401b9cf9f0da9ee4b4a"
1328 importable = false
1329
1330 [[audits.darling]]
1331 who = "Mike Hommey <mh+mozilla@glandium.org>"
1332 criteria = "safe-to-deploy"
1333 delta = "0.13.4 -> 0.14.2"
1334
1335 [[audits.darling]]
1336 who = "Mike Hommey <mh+mozilla@glandium.org>"
1337 criteria = "safe-to-deploy"
1338 delta = "0.14.2 -> 0.14.3"
1339
1340 [[audits.darling]]
1341 who = "Mike Hommey <mh+mozilla@glandium.org>"
1342 criteria = "safe-to-deploy"
1343 delta = "0.14.3 -> 0.20.1"
1344
1345 [[audits.darling_core]]
1346 who = "Mike Hommey <mh+mozilla@glandium.org>"
1347 criteria = "safe-to-deploy"
1348 delta = "0.13.4 -> 0.14.2"
1349
1350 [[audits.darling_core]]
1351 who = "Mike Hommey <mh+mozilla@glandium.org>"
1352 criteria = "safe-to-deploy"
1353 delta = "0.14.2 -> 0.14.3"
1354
1355 [[audits.darling_core]]
1356 who = "Mike Hommey <mh+mozilla@glandium.org>"
1357 criteria = "safe-to-deploy"
1358 delta = "0.14.3 -> 0.20.1"
1359
1360 [[audits.darling_macro]]
1361 who = "Mike Hommey <mh+mozilla@glandium.org>"
1362 criteria = "safe-to-deploy"
1363 delta = "0.13.4 -> 0.14.2"
1364
1365 [[audits.darling_macro]]
1366 who = "Mike Hommey <mh+mozilla@glandium.org>"
1367 criteria = "safe-to-deploy"
1368 delta = "0.14.2 -> 0.14.3"
1369
1370 [[audits.darling_macro]]
1371 who = "Mike Hommey <mh+mozilla@glandium.org>"
1372 criteria = "safe-to-deploy"
1373 delta = "0.14.3 -> 0.20.1"
1374
1375 [[audits.data-encoding]]
1376 who = "Mike Hommey <mh+mozilla@glandium.org>"
1377 criteria = "safe-to-deploy"
1378 delta = "2.3.2 -> 2.3.3"
1379
1380 [[audits.debugid]]
1381 who = "Gabriele Svelto <gsvelto@mozilla.com>"
1382 criteria = "safe-to-deploy"
1383 version = "0.8.0"
1384 notes = "This crates was written by Sentry and I've fully audited it as Firefox crash reporting machinery relies on it."
1385
1386 [[audits.derive_arbitrary]]
1387 who = "Mike Hommey <mh+mozilla@glandium.org>"
1388 criteria = "safe-to-run"
1389 delta = "1.1.0 -> 1.1.1"
1390
1391 [[audits.derive_arbitrary]]
1392 who = "Mike Hommey <mh+mozilla@glandium.org>"
1393 criteria = "safe-to-run"
1394 delta = "1.1.1 -> 1.1.3"
1395
1396 [[audits.derive_arbitrary]]
1397 who = "Mike Hommey <mh+mozilla@glandium.org>"
1398 criteria = "safe-to-run"
1399 delta = "1.1.3 -> 1.2.1"
1400
1401 [[audits.derive_arbitrary]]
1402 who = "Mike Hommey <mh+mozilla@glandium.org>"
1403 criteria = "safe-to-run"
1404 delta = "1.2.1 -> 1.2.3"
1405
1406 [[audits.derive_arbitrary]]
1407 who = "Mike Hommey <mh+mozilla@glandium.org>"
1408 criteria = "safe-to-run"
1409 delta = "1.3.0 -> 1.3.1"
1410
1411 [[audits.derive_more]]
1412 who = "Mike Hommey <mh+mozilla@glandium.org>"
1413 criteria = "safe-to-deploy"
1414 delta = "0.99.17 -> 1.0.0-beta.2"
1415
1416 [[audits.devd-rs]]
1417 who = "Mike Hommey <mh+mozilla@glandium.org>"
1418 criteria = "safe-to-deploy"
1419 delta = "0.3.4 -> 0.3.5"
1420
1421 [[audits.devd-rs]]
1422 who = "Mike Hommey <mh+mozilla@glandium.org>"
1423 criteria = "safe-to-deploy"
1424 delta = "0.3.5 -> 0.3.6"
1425
1426 [[audits.digest]]
1427 who = "Mike Hommey <mh+mozilla@glandium.org>"
1428 criteria = "safe-to-deploy"
1429 delta = "0.10.3 -> 0.10.6"
1430
1431 [[audits.diplomat]]
1432 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
1433 criteria = "safe-to-deploy"
1434 version = "0.5.2"
1435 notes = "This crate is FFI wrapper generator using by ICU4X ffi libraries. This uses unsafe code to convert paramenters, I have reviewed this and generated headers."
1436
1437 [[audits.diplomat]]
1438 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
1439 criteria = "safe-to-deploy"
1440 delta = "0.5.2 -> 0.5.2@git:8d125999893fedfdf30595e97334c21ec4b18da9"
1441
1442 [[audits.diplomat]]
1443 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
1444 criteria = "safe-to-deploy"
1445 delta = "0.5.2 -> 0.7.0"
1446
1447 [[audits.diplomat-runtime]]
1448 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
1449 criteria = "safe-to-deploy"
1450 version = "0.5.2"
1451 notes = "This crate is FFI wrapper generator runtime using by ICU4X ffi libraries. This uses unsafe code for memory access of FFI. I have reviewed carefully."
1452
1453 [[audits.diplomat-runtime]]
1454 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
1455 criteria = "safe-to-deploy"
1456 delta = "0.5.2 -> 0.5.2@git:8d125999893fedfdf30595e97334c21ec4b18da9"
1457
1458 [[audits.diplomat-runtime]]
1459 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
1460 criteria = "safe-to-deploy"
1461 delta = "0.5.2 -> 0.7.0"
1462
1463 [[audits.diplomat_core]]
1464 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
1465 criteria = "safe-to-deploy"
1466 version = "0.5.2"
1467 notes = "This crate contains unsafe code, no network and no file access."
1468
1469 [[audits.diplomat_core]]
1470 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
1471 criteria = "safe-to-deploy"
1472 delta = "0.5.2 -> 0.5.2@git:8d125999893fedfdf30595e97334c21ec4b18da9"
1473
1474 [[audits.diplomat_core]]
1475 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
1476 criteria = "safe-to-deploy"
1477 delta = "0.5.2 -> 0.7.0"
1478
1479 [[audits.displaydoc]]
1480 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
1481 criteria = "safe-to-deploy"
1482 version = "0.2.3"
1483 notes = """
1484 This crate is convenient macros to implement core::fmt::Display trait.
1485 Although `unsafe` is used for test code to call `libc::abort()`, it has no `unsafe` code in this crate. And there is no file access.
1486 It meets the criteria for safe-to-deploy.
1487 """
1488
1489 [[audits.displaydoc]]
1490 who = "Mike Hommey <mh+mozilla@glandium.org>"
1491 criteria = "safe-to-deploy"
1492 delta = "0.2.3 -> 0.2.4"
1493
1494 [[audits.dogear]]
1495 who = "Sammy Khamis <skhamis@mozilla.com>"
1496 criteria = "safe-to-deploy"
1497 delta = "0.4.0 -> 0.5.0"
1498 notes = "The repository for this crate belongs in the Mozilla org."
1499
1500 [[audits.dtoa-short]]
1501 who = "Bobby Holley <bobbyholley@gmail.com>"
1502 criteria = "safe-to-deploy"
1503 version = "0.3.3"
1504
1505 [[audits.dwrote]]
1506 who = "Bobby Holley <bobbyholley@gmail.com>"
1507 criteria = "safe-to-deploy"
1508 version = "0.11.0"
1509 notes = "All code written or reviewed by Mozilla staff."
1510
1511 [[audits.either]]
1512 who = "Mike Hommey <mh+mozilla@glandium.org>"
1513 criteria = "safe-to-deploy"
1514 delta = "1.6.1 -> 1.7.0"
1515
1516 [[audits.either]]
1517 who = "Mike Hommey <mh+mozilla@glandium.org>"
1518 criteria = "safe-to-deploy"
1519 delta = "1.7.0 -> 1.8.0"
1520
1521 [[audits.either]]
1522 who = "Mike Hommey <mh+mozilla@glandium.org>"
1523 criteria = "safe-to-deploy"
1524 delta = "1.8.0 -> 1.8.1"
1525
1526 [[audits.encoding_c]]
1527 who = "Henri Sivonen <hsivonen@hsivonen.fi>"
1528 criteria = "safe-to-deploy"
1529 version = "0.9.8"
1530 notes = "I, Henri Sivonen, wrote encoding_c for Gecko even though it is published via crates.io. There are two caveats: 1) the C API is designed to be used together with mozilla::Span and is unidiomatic for zero-length inputs otherwise. 2) It is idiomatic in C and C++ to pass uninitialized buffers as output buffers. This is generally documented to be UB in Rust, but idiomatic C and C++ usage here relies on this not actually being UB for buffers of integers (which these buffers are). See https://github.com/hsivonen/encoding_rs/issues/79#issuecomment-1211870361"
1531
1532 [[audits.encoding_c_mem]]
1533 who = "Henri Sivonen <hsivonen@hsivonen.fi>"
1534 criteria = "safe-to-deploy"
1535 version = "0.2.6"
1536 notes = """
1537 I, Henri Sivonen, wrote encoding_c_mem for Gecko even though it is published via crates.io. There are two caveats: 1) the C API is designed to be used together with mozilla::Span and is unidiomatic for zero-length inputs otherwise. 2) It is idiomatic in C and C
1538 ++ to pass uninitialized buffers as output buffers. This is generally documented to be UB in Rust, but idiomatic C and C++ usage here relies on this not actually being UB for buffers of integers (which these buffers are). See https://github.com/hsivonen/encoding_rs/i
1539 ssues/79#issuecomment-1211870361
1540 """
1541
1542 [[audits.encoding_rs]]
1543 who = "Henri Sivonen <hsivonen@hsivonen.fi>"
1544 criteria = "safe-to-deploy"
1545 version = "0.8.31"
1546 notes = "I, Henri Sivonen, wrote encoding_rs for Gecko and have reviewed contributions by others. There are two caveats to the certification: 1) The crate does things that are documented to be UB but that do not appear to actually be UB due to integer types differing from the general rule; https://github.com/hsivonen/encoding_rs/issues/79 . 2) It would be prudent to re-review the code that reinterprets buffers of integers as SIMD vectors; see https://github.com/hsivonen/encoding_rs/issues/87 ."
1547
1548 [[audits.encoding_rs]]
1549 who = "Mike Hommey <mh+mozilla@glandium.org>"
1550 criteria = "safe-to-deploy"
1551 delta = "0.8.31 -> 0.8.32"
1552
1553 [[audits.enum-map]]
1554 who = "Kershaw Chang <kershaw@mozilla.com>"
1555 criteria = "safe-to-deploy"
1556 version = "2.7.3"
1557
1558 [[audits.enum-map-derive]]
1559 who = "Kershaw Chang <kershaw@mozilla.com>"
1560 criteria = "safe-to-deploy"
1561 version = "0.17.0"
1562
1563 [[audits.enum-primitive-derive]]
1564 who = "Gabriele Svelto <gsvelto@mozilla.com>"
1565 criteria = "safe-to-deploy"
1566 version = "0.2.2"
1567
1568 [[audits.enumset]]
1569 who = "Mike Hommey <mh+mozilla@glandium.org>"
1570 criteria = "safe-to-deploy"
1571 delta = "1.0.11 -> 1.0.12"
1572
1573 [[audits.enumset]]
1574 who = "Mike Hommey <mh+mozilla@glandium.org>"
1575 criteria = "safe-to-deploy"
1576 delta = "1.0.12 -> 1.1.2"
1577
1578 [[audits.enumset_derive]]
1579 who = "Mike Hommey <mh+mozilla@glandium.org>"
1580 criteria = "safe-to-deploy"
1581 delta = "0.6.0 -> 0.6.1"
1582
1583 [[audits.enumset_derive]]
1584 who = "Mike Hommey <mh+mozilla@glandium.org>"
1585 criteria = "safe-to-deploy"
1586 delta = "0.6.1 -> 0.8.1"
1587
1588 [[audits.env_logger]]
1589 who = "Mike Hommey <mh+mozilla@glandium.org>"
1590 criteria = "safe-to-deploy"
1591 delta = "0.9.0 -> 0.9.3"
1592
1593 [[audits.env_logger]]
1594 who = "Nicolas Silva <nical@fastmail.com>"
1595 criteria = "safe-to-deploy"
1596 delta = "0.9.3 -> 0.10.0"
1597
1598 [[audits.errno]]
1599 who = "Mike Hommey <mh+mozilla@glandium.org>"
1600 criteria = "safe-to-deploy"
1601 delta = "0.3.1 -> 0.3.3"
1602
1603 [[audits.extend]]
1604 who = "Ben Dean-Kawamura <bdk@mozilla.com>"
1605 criteria = "safe-to-deploy"
1606 version = "1.1.2"
1607 notes = "Inspected the crate and noted that the impl block comes directly from the proc-macro input.  If no new code can be added by this crate, I don't think there can be any issues."
1608
1609 [[audits.extend]]
1610 who = "Mike Hommey <mh+mozilla@glandium.org>"
1611 criteria = "safe-to-deploy"
1612 delta = "1.1.2 -> 1.2.0"
1613
1614 [[audits.fallible_collections]]
1615 who = "Mike Hommey <mh+mozilla@glandium.org>"
1616 criteria = "safe-to-deploy"
1617 delta = "0.4.4 -> 0.4.5"
1618
1619 [[audits.fallible_collections]]
1620 who = "Mike Hommey <mh+mozilla@glandium.org>"
1621 criteria = "safe-to-deploy"
1622 delta = "0.4.5 -> 0.4.6"
1623 notes = "The changes in this version are mine."
1624
1625 [[audits.fastrand]]
1626 who = "Mike Hommey <mh+mozilla@glandium.org>"
1627 criteria = "safe-to-deploy"
1628 delta = "1.7.0 -> 1.8.0"
1629
1630 [[audits.fastrand]]
1631 who = "Mike Hommey <mh+mozilla@glandium.org>"
1632 criteria = "safe-to-deploy"
1633 delta = "1.8.0 -> 1.9.0"
1634
1635 [[audits.fastrand]]
1636 who = "Mike Hommey <mh+mozilla@glandium.org>"
1637 criteria = "safe-to-deploy"
1638 delta = "1.9.0 -> 2.0.0"
1639
1640 [[audits.filetime_win]]
1641 who = "Nick Alexander <nalexander@mozilla.com>"
1642 criteria = "safe-to-deploy"
1643 version = "0.2.0"
1644 notes = """
1645 filetime_win was written by Adam Gashlin for Mozilla's use.  The `unsafe` code
1646 blocks in filetime_win 0.2.0 are straight-forward invocations of `mem::zeroed`
1647 and expected invocations of Win32 APIs (with error handling as appropriate).
1648 """
1649
1650 [[audits.flagset]]
1651 who = "Ryan Hunt <rhunt@eqrion.net>"
1652 criteria = "safe-to-deploy"
1653 version = "0.4.3"
1654 notes = "Uses no ambient capabilities, vetted the one instance of unsafe."
1655
1656 [[audits.flate2]]
1657 who = "Mike Hommey <mh+mozilla@glandium.org>"
1658 criteria = "safe-to-deploy"
1659 delta = "1.0.24 -> 1.0.25"
1660
1661 [[audits.fluent]]
1662 who = "Zibi Braniecki <zibi@unicode.org>"
1663 criteria = "safe-to-deploy"
1664 version = "0.16.0"
1665
1666 [[audits.fluent-bundle]]
1667 who = "Zibi Braniecki <zibi@unicode.org>"
1668 criteria = "safe-to-deploy"
1669 version = "0.15.2"
1670
1671 [[audits.fluent-fallback]]
1672 who = "Zibi Braniecki <zibi@unicode.org>"
1673 criteria = "safe-to-deploy"
1674 version = "0.6.0"
1675
1676 [[audits.fluent-fallback]]
1677 who = "Greg Tatum <tatum.creative@gmail.com>"
1678 criteria = "safe-to-deploy"
1679 delta = "0.6.0 -> 0.7.0"
1680
1681 [[audits.fluent-langneg]]
1682 who = "Zibi Braniecki <zibi@unicode.org>"
1683 criteria = "safe-to-deploy"
1684 version = "0.13.0"
1685
1686 [[audits.fluent-pseudo]]
1687 who = "Zibi Braniecki <zibi@unicode.org>"
1688 criteria = "safe-to-deploy"
1689 version = "0.3.1"
1690
1691 [[audits.fluent-syntax]]
1692 who = "Zibi Braniecki <zibi@unicode.org>"
1693 criteria = "safe-to-deploy"
1694 version = "0.11.0"
1695
1696 [[audits.fluent-testing]]
1697 who = "Zibi Braniecki <zibi@unicode.org>"
1698 criteria = "safe-to-run"
1699 version = "0.0.2"
1700
1701 [[audits.fluent-testing]]
1702 who = "Greg Tatum <tatum.creative@gmail.com>"
1703 criteria = "safe-to-run"
1704 delta = "0.0.2 -> 0.0.3"
1705
1706 [[audits.fnv]]
1707 who = "Bobby Holley <bobbyholley@gmail.com>"
1708 criteria = "safe-to-deploy"
1709 version = "1.0.7"
1710 notes = "Simple hasher implementation with no unsafe code."
1711
1712 [[audits.foreign-types]]
1713 who = "Teodor Tanasoaia <ttanasoaia@mozilla.com>"
1714 criteria = "safe-to-deploy"
1715 delta = "0.3.2 -> 0.5.0"
1716
1717 [[audits.foreign-types-macros]]
1718 who = "Teodor Tanasoaia <ttanasoaia@mozilla.com>"
1719 criteria = "safe-to-deploy"
1720 version = "0.2.3"
1721
1722 [[audits.foreign-types-shared]]
1723 who = "Teodor Tanasoaia <ttanasoaia@mozilla.com>"
1724 criteria = "safe-to-deploy"
1725 delta = "0.1.1 -> 0.3.1"
1726
1727 [[audits.form_urlencoded]]
1728 who = "Valentin Gosu <valentin.gosu@gmail.com>"
1729 criteria = "safe-to-deploy"
1730 version = "1.2.0"
1731
1732 [[audits.form_urlencoded]]
1733 who = "Valentin Gosu <valentin.gosu@gmail.com>"
1734 criteria = "safe-to-deploy"
1735 delta = "1.2.0 -> 1.2.1"
1736
1737 [[audits.fs-err]]
1738 who = "Mike Hommey <mh+mozilla@glandium.org>"
1739 criteria = "safe-to-deploy"
1740 delta = "2.7.0 -> 2.8.1"
1741
1742 [[audits.fs-err]]
1743 who = "Mike Hommey <mh+mozilla@glandium.org>"
1744 criteria = "safe-to-deploy"
1745 delta = "2.8.1 -> 2.9.0"
1746
1747 [[audits.futures]]
1748 who = "Mike Hommey <mh+mozilla@glandium.org>"
1749 criteria = "safe-to-deploy"
1750 delta = "0.3.21 -> 0.3.23"
1751
1752 [[audits.futures]]
1753 who = "Mike Hommey <mh+mozilla@glandium.org>"
1754 criteria = "safe-to-deploy"
1755 delta = "0.3.23 -> 0.3.25"
1756
1757 [[audits.futures]]
1758 who = "Mike Hommey <mh+mozilla@glandium.org>"
1759 criteria = "safe-to-deploy"
1760 delta = "0.3.25 -> 0.3.26"
1761
1762 [[audits.futures]]
1763 who = "Mike Hommey <mh+mozilla@glandium.org>"
1764 criteria = "safe-to-deploy"
1765 delta = "0.3.26 -> 0.3.28"
1766
1767 [[audits.futures-channel]]
1768 who = "Mike Hommey <mh+mozilla@glandium.org>"
1769 criteria = "safe-to-deploy"
1770 delta = "0.3.21 -> 0.3.23"
1771
1772 [[audits.futures-channel]]
1773 who = "Mike Hommey <mh+mozilla@glandium.org>"
1774 criteria = "safe-to-deploy"
1775 delta = "0.3.23 -> 0.3.25"
1776
1777 [[audits.futures-channel]]
1778 who = "Mike Hommey <mh+mozilla@glandium.org>"
1779 criteria = "safe-to-deploy"
1780 delta = "0.3.25 -> 0.3.26"
1781
1782 [[audits.futures-channel]]
1783 who = "Bobby Holley <bobbyholley@gmail.com>"
1784 criteria = "safe-to-deploy"
1785 delta = "0.3.27 -> 0.3.26"
1786
1787 [[audits.futures-channel]]
1788 who = "Mike Hommey <mh+mozilla@glandium.org>"
1789 criteria = "safe-to-deploy"
1790 delta = "0.3.27 -> 0.3.28"
1791
1792 [[audits.futures-core]]
1793 who = "Mike Hommey <mh+mozilla@glandium.org>"
1794 criteria = "safe-to-deploy"
1795 delta = "0.3.21 -> 0.3.23"
1796
1797 [[audits.futures-core]]
1798 who = "Mike Hommey <mh+mozilla@glandium.org>"
1799 criteria = "safe-to-deploy"
1800 delta = "0.3.23 -> 0.3.25"
1801
1802 [[audits.futures-core]]
1803 who = "Mike Hommey <mh+mozilla@glandium.org>"
1804 criteria = "safe-to-deploy"
1805 delta = "0.3.25 -> 0.3.26"
1806
1807 [[audits.futures-core]]
1808 who = "Bobby Holley <bobbyholley@gmail.com>"
1809 criteria = "safe-to-deploy"
1810 delta = "0.3.27 -> 0.3.26"
1811
1812 [[audits.futures-core]]
1813 who = "Mike Hommey <mh+mozilla@glandium.org>"
1814 criteria = "safe-to-deploy"
1815 delta = "0.3.27 -> 0.3.28"
1816
1817 [[audits.futures-executor]]
1818 who = "Mike Hommey <mh+mozilla@glandium.org>"
1819 criteria = "safe-to-deploy"
1820 delta = "0.3.21 -> 0.3.23"
1821
1822 [[audits.futures-executor]]
1823 who = "Mike Hommey <mh+mozilla@glandium.org>"
1824 criteria = "safe-to-deploy"
1825 delta = "0.3.23 -> 0.3.25"
1826
1827 [[audits.futures-executor]]
1828 who = "Mike Hommey <mh+mozilla@glandium.org>"
1829 criteria = "safe-to-deploy"
1830 delta = "0.3.25 -> 0.3.26"
1831
1832 [[audits.futures-executor]]
1833 who = "Bobby Holley <bobbyholley@gmail.com>"
1834 criteria = "safe-to-deploy"
1835 delta = "0.3.27 -> 0.3.23"
1836
1837 [[audits.futures-executor]]
1838 who = "Mike Hommey <mh+mozilla@glandium.org>"
1839 criteria = "safe-to-deploy"
1840 delta = "0.3.27 -> 0.3.28"
1841
1842 [[audits.futures-io]]
1843 who = "Mike Hommey <mh+mozilla@glandium.org>"
1844 criteria = "safe-to-deploy"
1845 delta = "0.3.21 -> 0.3.23"
1846
1847 [[audits.futures-io]]
1848 who = "Mike Hommey <mh+mozilla@glandium.org>"
1849 criteria = "safe-to-deploy"
1850 delta = "0.3.23 -> 0.3.25"
1851
1852 [[audits.futures-io]]
1853 who = "Mike Hommey <mh+mozilla@glandium.org>"
1854 criteria = "safe-to-deploy"
1855 delta = "0.3.25 -> 0.3.26"
1856
1857 [[audits.futures-io]]
1858 who = "Bobby Holley <bobbyholley@gmail.com>"
1859 criteria = "safe-to-deploy"
1860 delta = "0.3.27 -> 0.3.23"
1861
1862 [[audits.futures-io]]
1863 who = "Mike Hommey <mh+mozilla@glandium.org>"
1864 criteria = "safe-to-deploy"
1865 delta = "0.3.27 -> 0.3.28"
1866
1867 [[audits.futures-macro]]
1868 who = "Mike Hommey <mh+mozilla@glandium.org>"
1869 criteria = "safe-to-deploy"
1870 delta = "0.3.21 -> 0.3.23"
1871
1872 [[audits.futures-macro]]
1873 who = "Mike Hommey <mh+mozilla@glandium.org>"
1874 criteria = "safe-to-deploy"
1875 delta = "0.3.23 -> 0.3.25"
1876
1877 [[audits.futures-macro]]
1878 who = "Mike Hommey <mh+mozilla@glandium.org>"
1879 criteria = "safe-to-deploy"
1880 delta = "0.3.25 -> 0.3.26"
1881
1882 [[audits.futures-macro]]
1883 who = "Mike Hommey <mh+mozilla@glandium.org>"
1884 criteria = "safe-to-deploy"
1885 delta = "0.3.26 -> 0.3.28"
1886
1887 [[audits.futures-sink]]
1888 who = "Mike Hommey <mh+mozilla@glandium.org>"
1889 criteria = "safe-to-deploy"
1890 delta = "0.3.21 -> 0.3.23"
1891
1892 [[audits.futures-sink]]
1893 who = "Mike Hommey <mh+mozilla@glandium.org>"
1894 criteria = "safe-to-deploy"
1895 delta = "0.3.23 -> 0.3.25"
1896
1897 [[audits.futures-sink]]
1898 who = "Mike Hommey <mh+mozilla@glandium.org>"
1899 criteria = "safe-to-deploy"
1900 delta = "0.3.25 -> 0.3.26"
1901
1902 [[audits.futures-sink]]
1903 who = "Bobby Holley <bobbyholley@gmail.com>"
1904 criteria = "safe-to-deploy"
1905 delta = "0.3.27 -> 0.3.23"
1906
1907 [[audits.futures-sink]]
1908 who = "Mike Hommey <mh+mozilla@glandium.org>"
1909 criteria = "safe-to-deploy"
1910 delta = "0.3.27 -> 0.3.28"
1911
1912 [[audits.futures-task]]
1913 who = "Mike Hommey <mh+mozilla@glandium.org>"
1914 criteria = "safe-to-deploy"
1915 delta = "0.3.21 -> 0.3.23"
1916
1917 [[audits.futures-task]]
1918 who = "Mike Hommey <mh+mozilla@glandium.org>"
1919 criteria = "safe-to-deploy"
1920 delta = "0.3.23 -> 0.3.25"
1921
1922 [[audits.futures-task]]
1923 who = "Mike Hommey <mh+mozilla@glandium.org>"
1924 criteria = "safe-to-deploy"
1925 delta = "0.3.25 -> 0.3.26"
1926
1927 [[audits.futures-task]]
1928 who = "Mike Hommey <mh+mozilla@glandium.org>"
1929 criteria = "safe-to-deploy"
1930 delta = "0.3.26 -> 0.3.28"
1931
1932 [[audits.futures-util]]
1933 who = "Mike Hommey <mh+mozilla@glandium.org>"
1934 criteria = "safe-to-deploy"
1935 delta = "0.3.21 -> 0.3.23"
1936
1937 [[audits.futures-util]]
1938 who = "Mike Hommey <mh+mozilla@glandium.org>"
1939 criteria = "safe-to-deploy"
1940 delta = "0.3.23 -> 0.3.25"
1941
1942 [[audits.futures-util]]
1943 who = "Mike Hommey <mh+mozilla@glandium.org>"
1944 criteria = "safe-to-deploy"
1945 delta = "0.3.25 -> 0.3.26"
1946
1947 [[audits.futures-util]]
1948 who = "Mike Hommey <mh+mozilla@glandium.org>"
1949 criteria = "safe-to-deploy"
1950 delta = "0.3.26 -> 0.3.28"
1951
1952 [[audits.fxhash]]
1953 who = "Bobby Holley <bobbyholley@gmail.com>"
1954 criteria = "safe-to-deploy"
1955 version = "0.2.1"
1956 notes = "Straightforward crate with no unsafe code, does what it says on the tin."
1957
1958 [[audits.generic-array]]
1959 who = "Mike Hommey <mh+mozilla@glandium.org>"
1960 criteria = "safe-to-deploy"
1961 delta = "0.14.5 -> 0.14.6"
1962
1963 [[audits.getrandom]]
1964 who = "Mike Hommey <mh+mozilla@glandium.org>"
1965 criteria = "safe-to-deploy"
1966 delta = "0.2.6 -> 0.2.7"
1967
1968 [[audits.getrandom]]
1969 who = "Mike Hommey <mh+mozilla@glandium.org>"
1970 criteria = "safe-to-deploy"
1971 delta = "0.2.7 -> 0.2.8"
1972
1973 [[audits.getrandom]]
1974 who = "Yannis Juglaret <yjuglaret@mozilla.com>"
1975 criteria = "safe-to-deploy"
1976 delta = "0.2.8 -> 0.2.9"
1977
1978 [[audits.getrandom]]
1979 who = "Simon Friedberger <simon@mozilla.com>"
1980 criteria = "safe-to-deploy"
1981 delta = "0.2.10 -> 0.2.11"
1982
1983 [[audits.gleam]]
1984 who = "Jamie Nicol <jnicol@mozilla.com>"
1985 criteria = "safe-to-deploy"
1986 delta = "0.13.1 -> 0.15.0"
1987
1988 [[audits.glob]]
1989 who = "Mike Hommey <mh+mozilla@glandium.org>"
1990 criteria = "safe-to-deploy"
1991 delta = "0.3.0 -> 0.3.1"
1992
1993 [[audits.glsl]]
1994 who = "Mike Hommey <mh+mozilla@glandium.org>"
1995 criteria = "safe-to-deploy"
1996 delta = "6.0.1 -> 6.0.2"
1997 notes = "I'm the author of the changes in this version of the crate."
1998
1999 [[audits.goblin]]
2000 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
2001 criteria = "safe-to-deploy"
2002 delta = "0.1.3 -> 0.5.4"
2003 notes = "Several bugfixes since 2019. This version is also in use by Mozilla's crash reporting tooling, e.g. minidump-writer"
2004
2005 [[audits.goblin]]
2006 who = "Gabriele Svelto <gsvelto@mozilla.com>"
2007 criteria = "safe-to-deploy"
2008 delta = "0.5.4 -> 0.6.0"
2009 notes = "Mostly bug fixes and some added functionality"
2010
2011 [[audits.goblin]]
2012 who = "Gabriele Svelto <gsvelto@mozilla.com>"
2013 criteria = "safe-to-deploy"
2014 delta = "0.6.0 -> 0.7.1"
2015
2016 [[audits.gpu-alloc]]
2017 who = "Teodor Tanasoaia <ttanasoaia@mozilla.com>"
2018 criteria = "safe-to-deploy"
2019 delta = "0.5.3 -> 0.6.0"
2020
2021 [[audits.gpu-alloc-types]]
2022 who = "Teodor Tanasoaia <ttanasoaia@mozilla.com>"
2023 criteria = "safe-to-deploy"
2024 delta = "0.2.0 -> 0.3.0"
2025
2026 [[audits.gpu-allocator]]
2027 who = "Erich Gubler <erichdongubler@gmail.com>"
2028 criteria = "safe-to-deploy"
2029 version = "0.25.0"
2030
2031 [[audits.gpu-descriptor]]
2032 who = "Mike Hommey <mh+mozilla@glandium.org>"
2033 criteria = "safe-to-deploy"
2034 delta = "0.2.2 -> 0.2.3"
2035
2036 [[audits.guid_win]]
2037 who = "Bobby Holley <bobbyholley@gmail.com>"
2038 criteria = "safe-to-deploy"
2039 version = "0.2.0"
2040 notes = """
2041 This crate has some unsafe code for the FFI bits, which I've reviewed carefully.
2042 It uses the deprecated mem::uninitialized(), which is generally sketchy. However
2043 the usage is pretty straightforward and while it's technically UB, it seems no
2044 more likely to lead to miscompilation than any other use of mem::uninitialized.
2045 """
2046
2047 [[audits.h2]]
2048 who = "Mike Hommey <mh+mozilla@glandium.org>"
2049 criteria = "safe-to-run"
2050 delta = "0.3.13 -> 0.3.14"
2051
2052 [[audits.h2]]
2053 who = "Mike Hommey <mh+mozilla@glandium.org>"
2054 criteria = "safe-to-run"
2055 delta = "0.3.14 -> 0.3.15"
2056
2057 [[audits.half]]
2058 who = "John M. Schanck <jschanck@mozilla.com>"
2059 criteria = "safe-to-deploy"
2060 version = "1.8.2"
2061 notes = """
2062 This crate contains unsafe code for bitwise casts to/from binary16 floating-point
2063 format. I've reviewed these and found no issues. There are no uses of ambient
2064 capabilities.
2065 """
2066
2067 [[audits.hashbrown]]
2068 who = "Mike Hommey <mh+mozilla@glandium.org>"
2069 criteria = "safe-to-deploy"
2070 version = "0.12.3"
2071 notes = "This version is used in rust's libstd, so effectively we're already trusting it"
2072
2073 [[audits.hashlink]]
2074 who = "Mike Hommey <mh+mozilla@glandium.org>"
2075 criteria = "safe-to-deploy"
2076 delta = "0.7.0 -> 0.8.1"
2077
2078 [[audits.headers]]
2079 who = "Mike Hommey <mh+mozilla@glandium.org>"
2080 criteria = "safe-to-run"
2081 delta = "0.3.7 -> 0.3.8"
2082
2083 [[audits.headers-core]]
2084 who = "Bobby Holley <bobbyholley@gmail.com>"
2085 criteria = "safe-to-deploy"
2086 version = "0.2.0"
2087 notes = "Trivial crate, no unsafe code."
2088
2089 [[audits.heck]]
2090 who = "Mike Hommey <mh+mozilla@glandium.org>"
2091 criteria = "safe-to-deploy"
2092 delta = "0.4.0 -> 0.4.1"
2093
2094 [[audits.hermit-abi]]
2095 who = "Mike Hommey <mh+mozilla@glandium.org>"
2096 criteria = "safe-to-deploy"
2097 delta = "0.1.19 -> 0.2.6"
2098
2099 [[audits.hex]]
2100 who = "Simon Friedberger <simon@mozilla.com>"
2101 criteria = "safe-to-deploy"
2102 version = "0.4.3"
2103
2104 [[audits.http]]
2105 who = "Mike Hommey <mh+mozilla@glandium.org>"
2106 criteria = "safe-to-run"
2107 delta = "0.2.8 -> 0.2.9"
2108
2109 [[audits.httparse]]
2110 who = "Mike Hommey <mh+mozilla@glandium.org>"
2111 criteria = "safe-to-run"
2112 delta = "1.7.1 -> 1.8.0"
2113
2114 [[audits.hyper]]
2115 who = "Mike Hommey <mh+mozilla@glandium.org>"
2116 criteria = "safe-to-run"
2117 delta = "0.14.19 -> 0.14.20"
2118
2119 [[audits.hyper]]
2120 who = "Mike Hommey <mh+mozilla@glandium.org>"
2121 criteria = "safe-to-run"
2122 delta = "0.14.20 -> 0.14.22"
2123
2124 [[audits.hyper]]
2125 who = "Mike Hommey <mh+mozilla@glandium.org>"
2126 criteria = "safe-to-run"
2127 delta = "0.14.22 -> 0.14.23"
2128
2129 [[audits.hyper]]
2130 who = "Mike Hommey <mh+mozilla@glandium.org>"
2131 criteria = "safe-to-run"
2132 delta = "0.14.23 -> 0.14.24"
2133
2134 [[audits.icu_capi]]
2135 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
2136 criteria = "safe-to-deploy"
2137 version = "1.2.2"
2138 notes = "This crate is C/C++ FFI for ICU4X using diplomat crate. no unsafe and no file access etc on this crate."
2139
2140 [[audits.icu_capi]]
2141 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
2142 criteria = "safe-to-deploy"
2143 delta = "1.2.2 -> 1.4.0"
2144
2145 [[audits.icu_collections]]
2146 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
2147 criteria = "safe-to-deploy"
2148 version = "1.2.0"
2149 notes = "This crate is used by ICU4X for internal data structure. There is no fileaccess and network access. This uses unsafe block, but we confirm data is valid before."
2150
2151 [[audits.icu_collections]]
2152 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
2153 criteria = "safe-to-deploy"
2154 delta = "1.2.0 -> 1.4.0"
2155
2156 [[audits.icu_locid]]
2157 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
2158 criteria = "safe-to-deploy"
2159 version = "1.2.0"
2160 notes = "This has unsafe block to handle ascii string in utf-8 string. I've vetted the one instance of unsafe code."
2161
2162 [[audits.icu_locid]]
2163 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
2164 criteria = "safe-to-deploy"
2165 delta = "1.2.0 -> 1.4.0"
2166
2167 [[audits.icu_locid_transform]]
2168 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
2169 criteria = "safe-to-deploy"
2170 version = "1.4.0"
2171 notes = "This crate doesn't contain network and file access. Although this has unsafe block, the reason is added in the comment block. I audited code."
2172
2173 [[audits.icu_locid_transform_data]]
2174 who = "Jonathan Kew <jkew@mozilla.com>"
2175 criteria = "safe-to-deploy"
2176 version = "1.4.0"
2177 notes = "Compile-time static for the icu_locid_transform crate."
2178
2179 [[audits.icu_properties]]
2180 who = "Jonathan Kew <jkew@mozilla.com>"
2181 criteria = "safe-to-deploy"
2182 version = "1.4.0"
2183 notes = "This is used by ICU4X for character property lookup. The few (4) usages of unsafe have comments clarifying their safety."
2184
2185 [[audits.icu_properties_data]]
2186 who = "Jonathan Kew <jkew@mozilla.com>"
2187 criteria = "safe-to-deploy"
2188 version = "1.4.0"
2189 notes = "Compile-time static data for the icu_properties crate."
2190
2191 [[audits.icu_provider]]
2192 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
2193 criteria = "safe-to-deploy"
2194 version = "1.2.0"
2195 notes = "Although this has unsafe block, this has a commnet why this is safety and I audited code. Also, this doesn't have file access and network access."
2196
2197 [[audits.icu_provider]]
2198 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
2199 criteria = "safe-to-deploy"
2200 delta = "1.2.0 -> 1.4.0"
2201
2202 [[audits.icu_provider_adapters]]
2203 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
2204 criteria = "safe-to-deploy"
2205 version = "1.2.0"
2206 notes = "This is one of ICU4X data provider crates that depends on data type. This has no unsafe code and uses no ambient capabilities."
2207
2208 [[audits.icu_provider_adapters]]
2209 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
2210 criteria = "safe-to-deploy"
2211 delta = "1.2.0 -> 1.4.0"
2212
2213 [[audits.icu_provider_macros]]
2214 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
2215 criteria = "safe-to-deploy"
2216 version = "1.2.0"
2217 notes = "This crate is macros for ICU4X's data provider implementer. This has no unsafe code and uses no ambient capabilities."
2218
2219 [[audits.icu_provider_macros]]
2220 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
2221 criteria = "safe-to-deploy"
2222 delta = "1.2.0 -> 1.2.0@git:14e9a3a9857be74582abe2dfa7ab799c5eaac873"
2223
2224 [[audits.icu_provider_macros]]
2225 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
2226 criteria = "safe-to-deploy"
2227 delta = "1.2.0 -> 1.4.0"
2228
2229 [[audits.icu_segmenter]]
2230 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
2231 criteria = "safe-to-deploy"
2232 version = "1.2.1"
2233 notes = "Original authors are Makoto Kato and Ting-Yu Lin who work at Mozilla. This crate uses unsafe to matrix calculation, but it is safety to check length. And there is no filesystem / network access."
2234
2235 [[audits.icu_segmenter]]
2236 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
2237 criteria = "safe-to-deploy"
2238 delta = "1.2.1 -> 1.4.0"
2239
2240 [[audits.icu_segmenter_data]]
2241 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
2242 criteria = "safe-to-deploy"
2243 version = "1.4.0"
2244 notes = "This crate is data only for icu_segmenter. There is no filesystem / network access."
2245
2246 [[audits.idna]]
2247 who = "Bobby Holley <bobbyholley@gmail.com>"
2248 criteria = "safe-to-deploy"
2249 delta = "0.3.0 -> 0.2.3"
2250 notes = "Backwards diff with some algorithm changes, no unsafe code."
2251
2252 [[audits.idna]]
2253 who = "Valentin Gosu <valentin.gosu@gmail.com>"
2254 criteria = "safe-to-deploy"
2255 delta = "0.4.0 -> 0.5.0"
2256
2257 [[audits.indexmap]]
2258 who = "Mike Hommey <mh+mozilla@glandium.org>"
2259 criteria = "safe-to-deploy"
2260 delta = "1.8.2 -> 1.9.1"
2261
2262 [[audits.indexmap]]
2263 who = "Mike Hommey <mh+mozilla@glandium.org>"
2264 criteria = "safe-to-deploy"
2265 delta = "1.9.1 -> 1.9.2"
2266
2267 [[audits.inherent]]
2268 who = "Mike Hommey <mh+mozilla@glandium.org>"
2269 criteria = "safe-to-deploy"
2270 delta = "1.0.1 -> 1.0.2"
2271
2272 [[audits.inherent]]
2273 who = "Mike Hommey <mh+mozilla@glandium.org>"
2274 criteria = "safe-to-deploy"
2275 delta = "1.0.2 -> 1.0.3"
2276
2277 [[audits.inherent]]
2278 who = "Mike Hommey <mh+mozilla@glandium.org>"
2279 criteria = "safe-to-deploy"
2280 delta = "1.0.3 -> 1.0.4"
2281
2282 [[audits.inplace_it]]
2283 who = "Mike Hommey <mh+mozilla@glandium.org>"
2284 criteria = "safe-to-deploy"
2285 delta = "0.3.3 -> 0.3.4"
2286
2287 [[audits.intl-memoizer]]
2288 who = "Zibi Braniecki <zibi@unicode.org>"
2289 criteria = "safe-to-deploy"
2290 version = "0.5.1"
2291
2292 [[audits.intl_pluralrules]]
2293 who = "Zibi Braniecki <zibi@unicode.org>"
2294 criteria = "safe-to-deploy"
2295 version = "7.0.1"
2296
2297 [[audits.intl_pluralrules]]
2298 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
2299 criteria = "safe-to-deploy"
2300 delta = "7.0.1 -> 7.0.2"
2301
2302 [[audits.itertools]]
2303 who = "Mike Hommey <mh+mozilla@glandium.org>"
2304 criteria = "safe-to-deploy"
2305 delta = "0.10.3 -> 0.10.5"
2306
2307 [[audits.itoa]]
2308 who = "Mike Hommey <mh+mozilla@glandium.org>"
2309 criteria = "safe-to-deploy"
2310 delta = "1.0.2 -> 1.0.3"
2311
2312 [[audits.itoa]]
2313 who = "Mike Hommey <mh+mozilla@glandium.org>"
2314 criteria = "safe-to-deploy"
2315 delta = "1.0.3 -> 1.0.5"
2316
2317 [[audits.jobserver]]
2318 who = "Mike Hommey <mh+mozilla@glandium.org>"
2319 criteria = "safe-to-deploy"
2320 delta = "0.1.24 -> 0.1.25"
2321
2322 [[audits.keccak]]
2323 who = "Simon Friedberger <simon@mozilla.com>"
2324 criteria = "safe-to-deploy"
2325 delta = "0.1.2 -> 0.1.3"
2326
2327 [[audits.khronos-egl]]
2328 who = "Nicolas Silva <nical@fastmail.com>"
2329 criteria = "safe-to-deploy"
2330 delta = "4.1.0 -> 6.0.0"
2331
2332 [[audits.libc]]
2333 who = "Mike Hommey <mh+mozilla@glandium.org>"
2334 criteria = "safe-to-deploy"
2335 delta = "0.2.126 -> 0.2.132"
2336
2337 [[audits.libc]]
2338 who = "Mike Hommey <mh+mozilla@glandium.org>"
2339 criteria = "safe-to-deploy"
2340 delta = "0.2.132 -> 0.2.138"
2341
2342 [[audits.libc]]
2343 who = "Mike Hommey <mh+mozilla@glandium.org>"
2344 criteria = "safe-to-deploy"
2345 delta = "0.2.138 -> 0.2.139"
2346
2347 [[audits.libc]]
2348 who = "Mike Hommey <mh+mozilla@glandium.org>"
2349 criteria = "safe-to-deploy"
2350 delta = "0.2.147 -> 0.2.148"
2351
2352 [[audits.libloading]]
2353 who = "Mike Hommey <mh+mozilla@glandium.org>"
2354 criteria = "safe-to-deploy"
2355 delta = "0.7.3 -> 0.7.4"
2356
2357 [[audits.libm]]
2358 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
2359 criteria = "safe-to-deploy"
2360 version = "0.2.6"
2361 notes = "This crate uses unsafe block, but this doesn't have network and file access. I audited code."
2362
2363 [[audits.libsqlite3-sys]]
2364 who = "Ben Dean-Kawamura <bdk@mozilla.com>"
2365 criteria = "safe-to-deploy"
2366 delta = "0.25.2 -> 0.26.0"
2367
2368 [[audits.libsqlite3-sys]]
2369 who = "Mark Hammond <mhammond@mozilla.com>"
2370 criteria = "safe-to-deploy"
2371 delta = "0.26.0 -> 0.27.0"
2372
2373 [[audits.linked-hash-map]]
2374 who = "Aria Beingessner <a.beingessner@gmail.com>"
2375 criteria = "safe-to-deploy"
2376 version = "0.5.4"
2377 notes = "I own this crate (I am contain-rs) and 0.5.4 passes miri. This code is very old and used by lots of people, so I'm pretty confident in it, even though it's in maintenance-mode and missing some nice-to-have APIs."
2378
2379 [[audits.linked-hash-map]]
2380 who = "Mike Hommey <mh+mozilla@glandium.org>"
2381 criteria = "safe-to-run"
2382 delta = "0.5.4 -> 0.5.6"
2383
2384 [[audits.litemap]]
2385 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
2386 criteria = "safe-to-deploy"
2387 version = "0.7.0"
2388 notes = "This crete has no unsafe code, no file acceess and no network access."
2389
2390 [[audits.litemap]]
2391 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
2392 criteria = "safe-to-deploy"
2393 delta = "0.7.0 -> 0.7.2"
2394
2395 [[audits.lmdb-rkv]]
2396 who = "Bobby Holley <bobbyholley@gmail.com>"
2397 criteria = "safe-to-deploy"
2398 version = "0.14.0"
2399 notes = "Victor and Myk developed this crate at Mozilla."
2400
2401 [[audits.lock_api]]
2402 who = "Mike Hommey <mh+mozilla@glandium.org>"
2403 criteria = "safe-to-deploy"
2404 delta = "0.4.7 -> 0.4.9"
2405
2406 [[audits.log]]
2407 who = "Mike Hommey <mh+mozilla@glandium.org>"
2408 criteria = "safe-to-deploy"
2409 version = "0.4.17"
2410
2411 [[audits.mach2]]
2412 who = "Gabriele Svelto <gsvelto@mozilla.com>"
2413 criteria = "safe-to-deploy"
2414 version = "0.4.1"
2415
2416 [[audits.malloc_buf]]
2417 who = "Bobby Holley <bobbyholley@gmail.com>"
2418 criteria = "safe-to-deploy"
2419 version = "0.0.6"
2420 notes = """
2421 Very small crate for managing malloc-ed buffers, primarily for use in the objc crate.
2422 There is an edge-case condition that passes slice::from_raw_parts(0x1, 0) which I'm
2423 not entirely certain is technically sound, but in either case I am reasonably confident
2424 it's not exploitable.
2425 """
2426
2427 [[audits.malloc_size_of_derive]]
2428 who = "Bobby Holley <bobbyholley@gmail.com>"
2429 criteria = "safe-to-deploy"
2430 version = "0.1.2"
2431 notes = """
2432 This was originally servo code which I put on crates.io some years ago but didn't
2433 examine at the time, so I examined it now. I didn't perform a full logic review
2434 but convinced myself that any generated code will be entirely safe to deploy.
2435 """
2436
2437 [[audits.matches]]
2438 who = "Bobby Holley <bobbyholley@gmail.com>"
2439 criteria = "safe-to-deploy"
2440 version = "0.1.9"
2441 notes = "This is a trivial crate."
2442
2443 [[audits.matches]]
2444 who = "Mike Hommey <mh+mozilla@glandium.org>"
2445 criteria = "safe-to-deploy"
2446 delta = "0.1.9 -> 0.1.10"
2447
2448 [[audits.md-5]]
2449 who = "Dana Keeler <dkeeler@mozilla.com>"
2450 criteria = "safe-to-deploy"
2451 version = "0.10.5"
2452
2453 [[audits.memmap2]]
2454 who = "Mike Hommey <mh+mozilla@glandium.org>"
2455 criteria = "safe-to-deploy"
2456 delta = "0.5.4 -> 0.5.7"
2457
2458 [[audits.memmap2]]
2459 who = "Mike Hommey <mh+mozilla@glandium.org>"
2460 criteria = "safe-to-deploy"
2461 delta = "0.5.7 -> 0.5.8"
2462
2463 [[audits.memmap2]]
2464 who = "Mike Hommey <mh+mozilla@glandium.org>"
2465 criteria = "safe-to-deploy"
2466 delta = "0.5.8 -> 0.5.9"
2467
2468 [[audits.memmap2]]
2469 who = "Gabriele Svelto <gsvelto@mozilla.com>"
2470 criteria = "safe-to-deploy"
2471 delta = "0.5.9 -> 0.8.0"
2472
2473 [[audits.memmap2]]
2474 who = "Mike Hommey <mh+mozilla@glandium.org>"
2475 criteria = "safe-to-deploy"
2476 delta = "0.8.0 -> 0.9.3"
2477
2478 [[audits.memoffset]]
2479 who = "Gabriele Svelto <gsvelto@mozilla.com>"
2480 criteria = "safe-to-deploy"
2481 delta = "0.6.5 -> 0.7.1"
2482
2483 [[audits.memoffset]]
2484 who = "Gabriele Svelto <gsvelto@mozilla.com>"
2485 criteria = "safe-to-deploy"
2486 delta = "0.8.0 -> 0.9.0"
2487
2488 [[audits.metal]]
2489 who = "Jim Blandy <jimb@red-bean.com>"
2490 criteria = "safe-to-deploy"
2491 version = "0.23.1"
2492 notes = "This audit treats Dzmitry Malyshau (kvark) as a trusted reviewer."
2493
2494 [[audits.metal]]
2495 who = "Jim Blandy <jimb@red-bean.com>"
2496 criteria = "safe-to-deploy"
2497 delta = "0.23.1 -> 0.24.0"
2498 notes = "This audit treats Dzmitry Malyshau (kvark) as a trusted reviewer."
2499
2500 [[audits.metal]]
2501 who = "Teodor Tanasoaia <ttanasoaia@mozilla.com>"
2502 criteria = "safe-to-deploy"
2503 delta = "0.24.0 -> 0.25.0"
2504
2505 [[audits.metal]]
2506 who = "Erich Gubler <egubler@mozilla.com>"
2507 criteria = "safe-to-deploy"
2508 delta = "0.25.0 -> 0.26.0"
2509
2510 [[audits.metal]]
2511 who = "Nicolas Silva <nical@fastmail.com>, Jim Blandy <jimb@red-bean.com>"
2512 criteria = "safe-to-deploy"
2513 delta = "0.26.0 -> 0.27.0"
2514
2515 [[audits.midir]]
2516 who = "Bobby Holley <bobbyholley@gmail.com>"
2517 criteria = "safe-to-deploy"
2518 delta = "0.7.0 -> 0.7.0@git:519e651241e867af3391db08f9ae6400bc023e18"
2519
2520 [[audits.midir]]
2521 who = "Mike Hommey <mh+mozilla@glandium.org>"
2522 criteria = "safe-to-deploy"
2523 delta = "0.7.0 -> 0.7.0@git:85156e360a37d851734118104619f86bd18e94c6"
2524 importable = false
2525
2526 [[audits.minidump-common]]
2527 who = "Gabriele Svelto <gsvelto@mozilla.com>"
2528 criteria = "safe-to-deploy"
2529 version = "0.15.2"
2530 notes = "The code in this crate was written or reviewed by Mozilla employees."
2531
2532 [[audits.minidump-common]]
2533 who = "Gabriele Svelto <gsvelto@mozilla.com>"
2534 criteria = "safe-to-deploy"
2535 delta = "0.15.2 -> 0.17.0"
2536
2537 [[audits.minidump-common]]
2538 who = "Mike Hommey <mh+mozilla@glandium.org>"
2539 criteria = "safe-to-deploy"
2540 delta = "0.17.0 -> 0.17.0@git:87a29fba5e19cfae5ebf73a57ba31504a3872545"
2541
2542 [[audits.minidump-common]]
2543 who = "Gabriele Svelto <gsvelto@mozilla.com>"
2544 criteria = "safe-to-deploy"
2545 delta = "0.17.0 -> 0.19.1"
2546 notes = "All the changes have been authored or reviewed by Mozilla employees"
2547
2548 [[audits.minidump-common]]
2549 who = "Mike Hommey <mh+mozilla@glandium.org>"
2550 criteria = "safe-to-deploy"
2551 delta = "0.17.0@git:87a29fba5e19cfae5ebf73a57ba31504a3872545 -> 0.17.0@git:6ae42a7f992e8a88ebee661bc77bcedb95cd671f"
2552
2553 [[audits.minidump-writer]]
2554 who = "Gabriele Svelto <gsvelto@mozilla.com>"
2555 criteria = "safe-to-deploy"
2556 version = "0.7.0"
2557 notes = "The code in this crate was written or reviewed by Mozilla employees, the crate it evolved from was written specifically for gecko."
2558
2559 [[audits.minidump-writer]]
2560 who = "Alex Franchuk <afranchuk@mozilla.com>"
2561 criteria = "safe-to-deploy"
2562 delta = "0.7.0 -> 0.8.0"
2563 notes = "The code in this crate was written or reviewed by Mozilla employees, the crate it evolved from was written specifically for gecko."
2564
2565 [[audits.minidump-writer]]
2566 who = "Gabriele Svelto <gsvelto@mozilla.com>"
2567 criteria = "safe-to-deploy"
2568 delta = "0.8.0 -> 0.8.1"
2569
2570 [[audits.minidump-writer]]
2571 who = "Gabriele Svelto <gsvelto@mozilla.com>"
2572 criteria = "safe-to-deploy"
2573 delta = "0.8.1 -> 0.8.1@git:491eb330e78e310c32927e5cc3bd2350af1e93f8"
2574 notes = "All the changes were written by a Mozilla employee (me)"
2575
2576 [[audits.minidump-writer]]
2577 who = "Gabriele Svelto <gsvelto@mozilla.com>"
2578 criteria = "safe-to-deploy"
2579 delta = "0.8.1 -> 0.8.3"
2580 notes = "All changes were authored or reviewed by Mozilla employees"
2581
2582 [[audits.miniz_oxide]]
2583 who = "Mike Hommey <mh+mozilla@glandium.org>"
2584 criteria = "safe-to-deploy"
2585 delta = "0.5.3 -> 0.6.2"
2586
2587 [[audits.mio]]
2588 who = "Bobby Holley <bobbyholley@gmail.com>"
2589 criteria = "safe-to-run"
2590 delta = "0.6.21 -> 0.6.23"
2591
2592 [[audits.mio]]
2593 who = "Mike Hommey <mh+mozilla@glandium.org>"
2594 criteria = "safe-to-deploy"
2595 delta = "0.8.0 -> 0.8.6"
2596
2597 [[audits.mio]]
2598 who = "Mike Hommey <mh+mozilla@glandium.org>"
2599 criteria = "safe-to-deploy"
2600 delta = "0.8.8 -> 0.8.8@git:9a2ef335c366044ffe73b1c4acabe50a1daefe05"
2601 importable = false
2602
2603 [[audits.moz_cbor]]
2604 who = "Bobby Holley <bobbyholley@gmail.com>"
2605 criteria = "safe-to-deploy"
2606 version = "0.1.2"
2607 notes = "Developed by Mozilla staff."
2608
2609 [[audits.naga]]
2610 who = "Dzmitry Malyshau <kvark@fastmail.com>"
2611 criteria = "safe-to-deploy"
2612 version = "0.8.0"
2613 notes = """
2614 This crate, up through the indicated version, was written or reviewed
2615 by Dzmitry Malyshau while he was a Mozilla employee. Dzmitry left
2616 Mozilla at the beginning of February 2022. This audit statement was
2617 collected by Jim Blandy, a Mozilla employee, over email in July 2022:
2618 Dzmitry was shown, and agreed to, the 'safe-to-deploy' text.
2619 """
2620
2621 [[audits.naga]]
2622 who = "Jim Blandy <jimb@red-bean.com>"
2623 criteria = "safe-to-deploy"
2624 delta = "0.8.0 -> 0.9.0"
2625
2626 [[audits.naga]]
2627 who = "Jim Blandy <jimb@red-bean.com>"
2628 criteria = "safe-to-deploy"
2629 delta = "0.9.0 -> 0.10.0"
2630
2631 [[audits.naga]]
2632 who = "Nicolas Silva <nical@fastmail.com>"
2633 criteria = "safe-to-deploy"
2634 delta = "0.10.0 -> 0.11.0"
2635
2636 [[audits.naga]]
2637 who = "Nicolas Silva <nical@fastmail.com>"
2638 criteria = "safe-to-deploy"
2639 delta = "0.11.0 -> 0.12.0"
2640
2641 [[audits.naga]]
2642 who = "Nicolas Silva <nical@fastmail.com>"
2643 criteria = "safe-to-deploy"
2644 delta = "0.12.0 -> 0.13.0"
2645
2646 [[audits.naga]]
2647 who = "Nicolas Silva <nical@fastmail.com>"
2648 criteria = "safe-to-deploy"
2649 delta = "0.13.0 -> 0.14.0"
2650
2651 [[audits.naga]]
2652 who = [
2653     "Teodor Tanasoaia <ttanasoaia@mozilla.com>",
2654     "Erich Gubler <erichdongubler@gmail.com>",
2655     "Jim Blandy <jimb@red-bean.com>",
2656     "Nicolas Silva <nical@fastmail.com>",
2657 ]
2658 criteria = "safe-to-deploy"
2659 delta = "0.14.0 -> 0.19.0@git:07e59eb6fc7de3f682f1c401b9cf9f0da9ee4b4a"
2660 importable = false
2661
2662 [[audits.net2]]
2663 who = "Mike Hommey <mh+mozilla@glandium.org>"
2664 criteria = "safe-to-run"
2665 delta = "0.2.37 -> 0.2.38"
2666
2667 [[audits.new_debug_unreachable]]
2668 who = "Bobby Holley <bobbyholley@gmail.com>"
2669 criteria = "safe-to-deploy"
2670 version = "1.0.4"
2671 notes = "This is a trivial crate."
2672
2673 [[audits.nix]]
2674 who = "Gabriele Svelto <gsvelto@mozilla.com>"
2675 criteria = "safe-to-deploy"
2676 delta = "0.15.0 -> 0.25.0"
2677 notes = "Plenty of new bindings but also several important bug fixes (including buffer overflows). New unsafe sections are restricted to wrappers and are no more dangerous than calling the C functions."
2678
2679 [[audits.nix]]
2680 who = "Mike Hommey <mh+mozilla@glandium.org>"
2681 criteria = "safe-to-deploy"
2682 delta = "0.25.0 -> 0.25.1"
2683
2684 [[audits.nix]]
2685 who = "Mike Hommey <mh+mozilla@glandium.org>"
2686 criteria = "safe-to-deploy"
2687 delta = "0.25.1 -> 0.26.2"
2688
2689 [[audits.nix]]
2690 who = "Gabriele Svelto <gsvelto@mozilla.com>"
2691 criteria = "safe-to-deploy"
2692 delta = "0.26.2 -> 0.27.1"
2693
2694 [[audits.nom]]
2695 who = "Mike Hommey <mh+mozilla@glandium.org>"
2696 criteria = "safe-to-deploy"
2697 delta = "7.1.1 -> 7.1.3"
2698
2699 [[audits.nss-gk-api]]
2700 who = "John M. Schanck <jschanck@mozilla.com>"
2701 criteria = "safe-to-deploy"
2702 version = "0.2.1"
2703 notes = "Maintained by the CryptoEng team at Mozilla."
2704
2705 [[audits.ntapi]]
2706 who = "Mike Hommey <mh+mozilla@glandium.org>"
2707 criteria = "safe-to-deploy"
2708 delta = "0.3.7 -> 0.4.0"
2709
2710 [[audits.num]]
2711 who = "Josh Stone <jistone@redhat.com>"
2712 criteria = "safe-to-deploy"
2713 version = "0.4.0"
2714 notes = "All code written or reviewed by Josh Stone."
2715
2716 [[audits.num-bigint]]
2717 who = "Josh Stone <jistone@redhat.com>"
2718 criteria = "safe-to-deploy"
2719 version = "0.2.6"
2720 notes = "All code written or reviewed by Josh Stone."
2721
2722 [[audits.num-bigint]]
2723 who = "Josh Stone <jistone@redhat.com>"
2724 criteria = "safe-to-deploy"
2725 version = "0.4.3"
2726 notes = "All code written or reviewed by Josh Stone."
2727
2728 [[audits.num-complex]]
2729 who = "Josh Stone <jistone@redhat.com>"
2730 criteria = "safe-to-deploy"
2731 version = "0.4.2"
2732 notes = "All code written or reviewed by Josh Stone."
2733
2734 [[audits.num-derive]]
2735 who = "Josh Stone <jistone@redhat.com>"
2736 criteria = "safe-to-deploy"
2737 version = "0.3.3"
2738 notes = "All code written or reviewed by Josh Stone."
2739
2740 [[audits.num-derive]]
2741 who = "Mike Hommey <mh+mozilla@glandium.org>"
2742 criteria = "safe-to-deploy"
2743 delta = "0.3.3 -> 0.4.0"
2744
2745 [[audits.num-integer]]
2746 who = "Josh Stone <jistone@redhat.com>"
2747 criteria = "safe-to-deploy"
2748 version = "0.1.45"
2749 notes = "All code written or reviewed by Josh Stone."
2750
2751 [[audits.num-iter]]
2752 who = "Josh Stone <jistone@redhat.com>"
2753 criteria = "safe-to-deploy"
2754 version = "0.1.43"
2755 notes = "All code written or reviewed by Josh Stone."
2756
2757 [[audits.num-macros]]
2758 who = "Josh Stone <jistone@redhat.com>"
2759 criteria = "safe-to-deploy"
2760 version = "0.1.40"
2761 notes = "All code written or reviewed by Josh Stone."
2762
2763 [[audits.num-rational]]
2764 who = "Josh Stone <jistone@redhat.com>"
2765 criteria = "safe-to-deploy"
2766 version = "0.4.1"
2767 notes = "All code written or reviewed by Josh Stone."
2768
2769 [[audits.num-traits]]
2770 who = "Josh Stone <jistone@redhat.com>"
2771 criteria = "safe-to-deploy"
2772 version = "0.2.15"
2773 notes = "All code written or reviewed by Josh Stone."
2774
2775 [[audits.num_cpus]]
2776 who = "Mike Hommey <mh+mozilla@glandium.org>"
2777 criteria = "safe-to-deploy"
2778 delta = "1.13.1 -> 1.14.0"
2779
2780 [[audits.num_cpus]]
2781 who = "Mike Hommey <mh+mozilla@glandium.org>"
2782 criteria = "safe-to-deploy"
2783 delta = "1.14.0 -> 1.15.0"
2784
2785 [[audits.object]]
2786 who = "Mike Hommey <mh+mozilla@glandium.org>"
2787 criteria = "safe-to-deploy"
2788 delta = "0.28.4 -> 0.30.0"
2789
2790 [[audits.object]]
2791 who = "Mike Hommey <mh+mozilla@glandium.org>"
2792 criteria = "safe-to-deploy"
2793 delta = "0.30.0 -> 0.30.3"
2794
2795 [[audits.once_cell]]
2796 who = "Mike Hommey <mh+mozilla@glandium.org>"
2797 criteria = "safe-to-deploy"
2798 delta = "1.12.0 -> 1.13.1"
2799
2800 [[audits.once_cell]]
2801 who = "Mike Hommey <mh+mozilla@glandium.org>"
2802 criteria = "safe-to-deploy"
2803 delta = "1.13.1 -> 1.16.0"
2804
2805 [[audits.once_cell]]
2806 who = "Mike Hommey <mh+mozilla@glandium.org>"
2807 criteria = "safe-to-deploy"
2808 delta = "1.16.0 -> 1.17.1"
2809
2810 [[audits.oneshot]]
2811 who = "Ben Dean-Kawamura <bdk@mozilla.com>"
2812 criteria = "safe-to-deploy"
2813 version = "0.1.5"
2814 notes = "Small crate, reviewed by bendk.  There is a decent amount of unsafe code, but it's well tested and the crate has been well-used over the years."
2815
2816 [[audits.oneshot]]
2817 who = "Ben Dean-Kawamura <bdk@mozilla.com>"
2818 criteria = "safe-to-deploy"
2819 version = "0.1.5@git:1f3c657c8073aec4f0b6ebac7be33b4851644745"
2820 notes = """
2821 Small crate, reviewed by bendk.  There is a decent amount of unsafe code, but it's well tested and the crate has been well-used over the years.
2822
2823 The git branch is my fork of the official code that removes the `loom` target to avoid pulling in that crate and its dependencies into moz-central.
2824 This doesn't change any of the functionality -- the `loom` target is only used for testing.
2825 """
2826
2827 [[audits.oneshot-uniffi]]
2828 who = "Ben Dean-Kawamura <bdk@mozilla.com>"
2829 criteria = "safe-to-deploy"
2830 version = "0.1.5"
2831 notes = "This is the essentially same code as `oneshot version 0.1.5` which has already been audited.  The only difference is that it won't pull in `loom` and related dependencies when `mach vendor rust` is run."
2832
2833 [[audits.ordered-float]]
2834 who = "Mike Hommey <mh+mozilla@glandium.org>"
2835 criteria = "safe-to-deploy"
2836 delta = "3.0.0 -> 3.4.0"
2837
2838 [[audits.origin-trial-token]]
2839 who = "Emilio Cobos Álvarez <emilio@crisal.io>"
2840 criteria = "safe-to-deploy"
2841 version = "0.1.1"
2842 notes = """
2843 I'm the author of the crate. The only unsafe code is a view over a byte array
2844 which is properly validated.
2845
2846 Cryptography shenanigans are delegated to the caller so there's no possible
2847 unsoundness there.
2848 """
2849
2850 [[audits.os_str_bytes]]
2851 who = "Mike Hommey <mh+mozilla@glandium.org>"
2852 criteria = "safe-to-deploy"
2853 delta = "6.1.0 -> 6.3.0"
2854
2855 [[audits.os_str_bytes]]
2856 who = "Mike Hommey <mh+mozilla@glandium.org>"
2857 criteria = "safe-to-deploy"
2858 delta = "6.3.0 -> 6.4.1"
2859
2860 [[audits.oxilangtag]]
2861 who = "Jonathan Kew <jkew@mozilla.com>"
2862 criteria = "safe-to-deploy"
2863 version = "0.1.3"
2864 notes = """
2865 I have reviewed all the code in this (small) crate.
2866 There is no unsafe code present.
2867 """
2868
2869 [[audits.packed_simd]]
2870 who = "Henri Sivonen <hsivonen@hsivonen.fi>"
2871 criteria = "safe-to-deploy"
2872 delta = "0.3.8 -> 0.3.9"
2873 notes = "The update from 0.3.8 to 0.3.9 makes mechanical changes to accommodate renaming, compiler updates, and CI service updates."
2874
2875 [[audits.packed_simd]]
2876 who = "Henri Sivonen <hsivonen@hsivonen.fi>"
2877 criteria = "safe-to-deploy"
2878 delta = "0.3.9 -> 0.3.9@git:e588ceb568878e1a3156ea9ce551d5b63ef0cdc4"
2879 notes = "The patch on top of crates.io version 0.3.9 merely deletes code for a feature that Firefox does not use."
2880
2881 [[audits.packed_simd_2]]
2882 who = "Mike Hommey <mh+mozilla@glandium.org>"
2883 criteria = "safe-to-deploy"
2884 delta = "0.3.7 -> 0.3.8"
2885
2886 [[audits.packed_simd_2]]
2887 who = "Bobby Holley <bobbyholley@gmail.com>"
2888 criteria = "safe-to-deploy"
2889 delta = "0.3.8 -> 0.3.8@git:412f9a0aa556611de021bde89dee8fefe6e0fbbd"
2890
2891 [[audits.parking_lot_core]]
2892 who = "Mike Hommey <mh+mozilla@glandium.org>"
2893 criteria = "safe-to-deploy"
2894 delta = "0.8.5 -> 0.8.6"
2895
2896 [[audits.paste]]
2897 who = "Mike Hommey <mh+mozilla@glandium.org>"
2898 criteria = "safe-to-deploy"
2899 delta = "1.0.7 -> 1.0.8"
2900
2901 [[audits.paste]]
2902 who = "Mike Hommey <mh+mozilla@glandium.org>"
2903 criteria = "safe-to-deploy"
2904 delta = "1.0.8 -> 1.0.11"
2905
2906 [[audits.peeking_take_while]]
2907 who = "Bobby Holley <bobbyholley@gmail.com>"
2908 criteria = "safe-to-deploy"
2909 delta = "1.0.0 -> 0.1.2"
2910 notes = "Small refactor of some simple iterator logic, no unsafe code or capabilities."
2911
2912 [[audits.percent-encoding]]
2913 who = "Valentin Gosu <valentin.gosu@gmail.com>"
2914 criteria = "safe-to-deploy"
2915 delta = "2.2.0 -> 2.3.0"
2916
2917 [[audits.percent-encoding]]
2918 who = "Valentin Gosu <valentin.gosu@gmail.com>"
2919 criteria = "safe-to-deploy"
2920 delta = "2.3.0 -> 2.3.1"
2921
2922 [[audits.phf]]
2923 who = "Mike Hommey <mh+mozilla@glandium.org>"
2924 criteria = "safe-to-deploy"
2925 delta = "0.10.1 -> 0.11.2"
2926
2927 [[audits.phf_codegen]]
2928 who = "Mike Hommey <mh+mozilla@glandium.org>"
2929 criteria = "safe-to-deploy"
2930 delta = "0.10.0 -> 0.11.2"
2931
2932 [[audits.phf_generator]]
2933 who = "Mike Hommey <mh+mozilla@glandium.org>"
2934 criteria = "safe-to-deploy"
2935 delta = "0.10.0 -> 0.11.2"
2936
2937 [[audits.phf_macros]]
2938 who = "Mike Hommey <mh+mozilla@glandium.org>"
2939 criteria = "safe-to-deploy"
2940 delta = "0.10.0 -> 0.11.2"
2941
2942 [[audits.phf_shared]]
2943 who = "Mike Hommey <mh+mozilla@glandium.org>"
2944 criteria = "safe-to-deploy"
2945 delta = "0.10.0 -> 0.11.2"
2946
2947 [[audits.pin-project]]
2948 who = "Mike Hommey <mh+mozilla@glandium.org>"
2949 criteria = "safe-to-run"
2950 delta = "1.0.10 -> 1.0.12"
2951
2952 [[audits.pin-project]]
2953 who = "Mike Hommey <mh+mozilla@glandium.org>"
2954 criteria = "safe-to-run"
2955 delta = "1.0.12 -> 1.1.0"
2956
2957 [[audits.pin-project-internal]]
2958 who = "Mike Hommey <mh+mozilla@glandium.org>"
2959 criteria = "safe-to-run"
2960 delta = "1.0.10 -> 1.0.12"
2961
2962 [[audits.pin-project-internal]]
2963 who = "Mike Hommey <mh+mozilla@glandium.org>"
2964 criteria = "safe-to-run"
2965 delta = "1.0.12 -> 1.1.0"
2966
2967 [[audits.pkcs11-bindings]]
2968 who = "Dana Keeler <dkeeler@mozilla.com>"
2969 criteria = "safe-to-deploy"
2970 version = "0.1.0"
2971 notes = """
2972 This crate consists of declarations of types and constants that are
2973 auto-generated by running bindgen on the PKCS#11 specification headers. Other
2974 than the tests generated by bindgen, it consists of no runnable code.
2975 """
2976
2977 [[audits.pkcs11-bindings]]
2978 who = "John M. Schanck <jmschanck@gmail.com>"
2979 criteria = "safe-to-deploy"
2980 version = "0.1.1"
2981
2982 [[audits.pkcs11-bindings]]
2983 who = "Mike Hommey <mh+mozilla@glandium.org>"
2984 criteria = "safe-to-deploy"
2985 delta = "0.1.1 -> 0.1.4"
2986
2987 [[audits.pkcs11-bindings]]
2988 who = "Mike Hommey <mh+mozilla@glandium.org>"
2989 criteria = "safe-to-deploy"
2990 delta = "0.1.4 -> 0.1.5"
2991
2992 [[audits.pkg-config]]
2993 who = "Mike Hommey <mh+mozilla@glandium.org>"
2994 criteria = "safe-to-deploy"
2995 delta = "0.3.25 -> 0.3.26"
2996
2997 [[audits.plane-split]]
2998 who = "Nicolas Silva <nical@fastmail.com>"
2999 criteria = "safe-to-deploy"
3000 version = "0.18.0"
3001 notes = "Mozilla-developed package, no unsafe code, no access to file system, network or other far reaching APIs."
3002
3003 [[audits.ppv-lite86]]
3004 who = "Mike Hommey <mh+mozilla@glandium.org>"
3005 criteria = "safe-to-deploy"
3006 delta = "0.2.16 -> 0.2.17"
3007
3008 [[audits.precomputed-hash]]
3009 who = "Bobby Holley <bobbyholley@gmail.com>"
3010 criteria = "safe-to-deploy"
3011 version = "0.1.1"
3012 notes = "This is a trivial crate."
3013
3014 [[audits.prio]]
3015 who = "Simon Friedberger <simon@mozilla.com>"
3016 criteria = "safe-to-deploy"
3017 version = "0.8.4"
3018 notes = "The crate does not use any unsafe code or ambient capabilities and thus meets the criteria for safe-to-deploy. The cryptography itself should be considered experimental at this phase and is currently undergoing a thorough audit organized by Cloudflare."
3019
3020 [[audits.prio]]
3021 who = "Simon Friedberger <simon@mozilla.com>"
3022 criteria = "safe-to-deploy"
3023 version = "0.9.1"
3024
3025 [[audits.proc-macro-hack]]
3026 who = "Mike Hommey <mh+mozilla@glandium.org>"
3027 criteria = "safe-to-deploy"
3028 delta = "0.5.19 -> 0.5.20+deprecated"
3029
3030 [[audits.proc-macro2]]
3031 who = "Nika Layzell <nika@thelayzells.com>"
3032 criteria = "safe-to-deploy"
3033 version = "1.0.39"
3034 notes = """
3035 `proc-macro2` acts as either a thin(-ish) wrapper around the std-provided
3036 `proc_macro` crate, or as a fallback implementation of the crate, depending on
3037 where it is used.
3038
3039 If using this crate on older versions of rustc (1.56 and earlier), it will
3040 temporarily replace the panic handler while initializing in order to detect if
3041 it is running within a `proc_macro`, which could lead to surprising behaviour.
3042 This should not be an issue for more recent compiler versions, which support
3043 `proc_macro::is_available()`.
3044
3045 The `proc-macro2` crate's fallback behaviour is not identical to the complex
3046 behaviour of the rustc compiler (e.g. it does not perform unicode normalization
3047 for identifiers), however it behaves well enough for its intended use-case
3048 (tests and scripts processing rust code).
3049
3050 `proc-macro2` does not use unsafe code, however exposes one `unsafe` API to
3051 allow bypassing checks in the fallback implementation when constructing
3052 `Literal` using `from_str_unchecked`. This was intended to only be used by the
3053 `quote!` macro, however it has been removed
3054 (https://github.com/dtolnay/quote/commit/f621fe64a8a501cae8e95ebd6848e637bbc79078),
3055 and is likely completely unused. Even when used, this API shouldn't be able to
3056 cause unsoundness.
3057 """
3058
3059 [[audits.proc-macro2]]
3060 who = "Mike Hommey <mh+mozilla@glandium.org>"
3061 criteria = "safe-to-deploy"
3062 delta = "1.0.39 -> 1.0.43"
3063
3064 [[audits.proc-macro2]]
3065 who = "Mike Hommey <mh+mozilla@glandium.org>"
3066 criteria = "safe-to-deploy"
3067 delta = "1.0.43 -> 1.0.49"
3068
3069 [[audits.proc-macro2]]
3070 who = "Mike Hommey <mh+mozilla@glandium.org>"
3071 criteria = "safe-to-deploy"
3072 delta = "1.0.49 -> 1.0.51"
3073
3074 [[audits.procfs-core]]
3075 who = "Gabriele Svelto <gsvelto@mozilla.com>"
3076 criteria = "safe-to-deploy"
3077 version = "0.16.0-RC1"
3078
3079 [[audits.procfs-core]]
3080 who = "Gabriele Svelto <gsvelto@mozilla.com>"
3081 criteria = "safe-to-deploy"
3082 delta = "0.16.0-RC1 -> 0.16.0"
3083
3084 [[audits.profiling]]
3085 who = "Mike Hommey <mh+mozilla@glandium.org>"
3086 criteria = "safe-to-deploy"
3087 delta = "1.0.6 -> 1.0.7"
3088
3089 [[audits.prost]]
3090 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
3091 criteria = "safe-to-deploy"
3092 delta = "0.8.0 -> 0.11.9"
3093 notes = "Mostly internal refactorings. Minimal new unsafe code, but with the invariants explicitly checked in code"
3094
3095 [[audits.prost]]
3096 who = "Drew Willcoxon <adw@mozilla.com>"
3097 criteria = "safe-to-deploy"
3098 delta = "0.11.9 -> 0.12.1"
3099
3100 [[audits.prost-derive]]
3101 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
3102 criteria = "safe-to-deploy"
3103 delta = "0.8.0 -> 0.11.9"
3104 notes = "Documentation and internal refactoring changes only"
3105
3106 [[audits.prost-derive]]
3107 who = "Mike Hommey <mh+mozilla@glandium.org>"
3108 criteria = "safe-to-deploy"
3109 delta = "0.11.9 -> 0.11.9@git:95964e9d33df3c2a9c3f14285e262867cab6f96b"
3110 notes = "Changes against 0.11.9 are mine."
3111
3112 [[audits.prost-derive]]
3113 who = "Drew Willcoxon <adw@mozilla.com>"
3114 criteria = "safe-to-deploy"
3115 delta = "0.11.9 -> 0.12.1"
3116
3117 [[audits.qlog]]
3118 who = "Kershaw Chang <kershaw@mozilla.com>"
3119 criteria = "safe-to-deploy"
3120 version = "0.9.0"
3121
3122 [[audits.qlog]]
3123 who = "Kershaw Chang <kershaw@mozilla.com>"
3124 criteria = "safe-to-deploy"
3125 delta = "0.9.0 -> 0.11.0"
3126
3127 [[audits.qlog]]
3128 who = "Kershaw Chang <kershaw@mozilla.com>"
3129 criteria = "safe-to-deploy"
3130 delta = "0.11.0 -> 0.11.0@git:09ea4b244096a013071cfe2175bbf2945fb7f8d1"
3131 importable = false
3132
3133 [[audits.quote]]
3134 who = "Nika Layzell <nika@thelayzells.com>"
3135 criteria = "safe-to-deploy"
3136 version = "1.0.18"
3137 notes = """
3138 `quote` is a utility crate used by proc-macros to generate TokenStreams
3139 conveniently from source code. The bulk of the logic is some complex
3140 interlocking `macro_rules!` macros which are used to parse and build the
3141 `TokenStream` within the proc-macro.
3142
3143 This crate contains no unsafe code, and the internal logic, while difficult to
3144 read, is generally straightforward. I have audited the the quote macros, ident
3145 formatter, and runtime logic.
3146 """
3147
3148 [[audits.quote]]
3149 who = "Mike Hommey <mh+mozilla@glandium.org>"
3150 criteria = "safe-to-deploy"
3151 delta = "1.0.18 -> 1.0.21"
3152
3153 [[audits.quote]]
3154 who = "Mike Hommey <mh+mozilla@glandium.org>"
3155 criteria = "safe-to-deploy"
3156 delta = "1.0.21 -> 1.0.23"
3157
3158 [[audits.radium]]
3159 who = "Nika Layzell <nika@thelayzells.com>"
3160 criteria = "safe-to-deploy"
3161 version = "0.5.3"
3162 notes = """
3163 I am no longer the primary maintainer of `radium`, however I have audited the
3164 code to ensure it is still correct. The implementation contains no `unsafe`
3165 logic, and will not abstract away `Sync` trait bounds.
3166
3167 The core logic is very simple, and acts as an abstraction trait for `Cell<T>`
3168 and `AtomicT`.
3169 """
3170
3171 [[audits.rand_core]]
3172 who = "Mike Hommey <mh+mozilla@glandium.org>"
3173 criteria = "safe-to-deploy"
3174 delta = "0.6.3 -> 0.6.4"
3175
3176 [[audits.range-alloc]]
3177 who = "Bobby Holley <bobbyholley@gmail.com>"
3178 criteria = "safe-to-deploy"
3179 version = "0.1.2"
3180 notes = "Dzmitry authored this crate while he was staff at Mozilla."
3181
3182 [[audits.range-alloc]]
3183 who = "Mike Hommey <mh+mozilla@glandium.org>"
3184 criteria = "safe-to-deploy"
3185 delta = "0.1.2 -> 0.1.3"
3186
3187 [[audits.range-map]]
3188 who = "Gabriele Svelto <gsvelto@mozilla.com>"
3189 criteria = "safe-to-deploy"
3190 version = "0.2.0"
3191
3192 [[audits.raw-window-handle]]
3193 who = "Jim Blandy <jimb@red-bean.com>"
3194 criteria = "safe-to-deploy"
3195 version = "0.5.0"
3196 notes = "I looked through all the sources of the v0.5.0 crate."
3197
3198 [[audits.raw-window-handle]]
3199 who = "Mike Hommey <mh+mozilla@glandium.org>"
3200 criteria = "safe-to-deploy"
3201 delta = "0.5.0 -> 0.5.2"
3202
3203 [[audits.raw-window-handle]]
3204 who = "Nicolas Silva <nical@fastmail.com>"
3205 criteria = "safe-to-deploy"
3206 delta = "0.5.2 -> 0.6.0"
3207
3208 [[audits.rayon]]
3209 who = "Josh Stone <jistone@redhat.com>"
3210 criteria = "safe-to-deploy"
3211 version = "1.5.3"
3212 notes = "All code written or reviewed by Josh Stone or Niko Matsakis."
3213
3214 [[audits.rayon]]
3215 who = "Mike Hommey <mh+mozilla@glandium.org>"
3216 criteria = "safe-to-deploy"
3217 delta = "1.5.3 -> 1.6.1"
3218
3219 [[audits.rayon-core]]
3220 who = "Josh Stone <jistone@redhat.com>"
3221 criteria = "safe-to-deploy"
3222 version = "1.9.3"
3223 notes = "All code written or reviewed by Josh Stone or Niko Matsakis."
3224
3225 [[audits.rayon-core]]
3226 who = "Mike Hommey <mh+mozilla@glandium.org>"
3227 criteria = "safe-to-deploy"
3228 delta = "1.9.3 -> 1.10.1"
3229
3230 [[audits.rayon-core]]
3231 who = "Mike Hommey <mh+mozilla@glandium.org>"
3232 criteria = "safe-to-deploy"
3233 delta = "1.10.1 -> 1.10.2"
3234
3235 [[audits.redox_syscall]]
3236 who = "Mike Hommey <mh+mozilla@glandium.org>"
3237 criteria = "safe-to-deploy"
3238 delta = "0.2.13 -> 0.2.16"
3239
3240 [[audits.regex]]
3241 who = "Mike Hommey <mh+mozilla@glandium.org>"
3242 criteria = "safe-to-deploy"
3243 delta = "1.5.6 -> 1.6.0"
3244
3245 [[audits.regex]]
3246 who = "Mike Hommey <mh+mozilla@glandium.org>"
3247 criteria = "safe-to-deploy"
3248 delta = "1.6.0 -> 1.7.0"
3249
3250 [[audits.regex]]
3251 who = "Mike Hommey <mh+mozilla@glandium.org>"
3252 criteria = "safe-to-deploy"
3253 delta = "1.7.0 -> 1.7.1"
3254
3255 [[audits.regex-syntax]]
3256 who = "Mike Hommey <mh+mozilla@glandium.org>"
3257 criteria = "safe-to-deploy"
3258 delta = "0.6.26 -> 0.6.27"
3259
3260 [[audits.regex-syntax]]
3261 who = "Mike Hommey <mh+mozilla@glandium.org>"
3262 criteria = "safe-to-deploy"
3263 delta = "0.6.27 -> 0.6.28"
3264
3265 [[audits.rkv]]
3266 who = "Chris H-C <chutten@mozilla.com>"
3267 criteria = "safe-to-deploy"
3268 version = "0.18.2"
3269 notes = "Maintained by Jan-Erik and :krosylight."
3270
3271 [[audits.rkv]]
3272 who = "Chris H-C <chutten@mozilla.com>"
3273 criteria = "safe-to-deploy"
3274 version = "0.18.4"
3275
3276 [[audits.ron]]
3277 who = "Mike Hommey <mh+mozilla@glandium.org>"
3278 criteria = "safe-to-deploy"
3279 delta = "0.7.0 -> 0.7.1"
3280
3281 [[audits.ron]]
3282 who = "Jim Blandy <jimb@red-bean.com>"
3283 criteria = "safe-to-deploy"
3284 delta = "0.7.1 -> 0.8.0"
3285
3286 [[audits.ron]]
3287 who = "Mike Hommey <mh+mozilla@glandium.org>"
3288 criteria = "safe-to-deploy"
3289 delta = "0.8.0 -> 0.8.1"
3290
3291 [[audits.rure]]
3292 who = "Nika Layzell <nika@thelayzells.com>"
3293 criteria = "safe-to-deploy"
3294 version = "0.2.2"
3295 notes = """
3296 This is a fairly straightforward FFI wrapper crate for `regex`, maintained by
3297 the `regex` developers in the same repository.
3298
3299 This crate is explicitly designed for FFI use, and should not be used directly
3300 by Rust code. The exported `extern \"C\"` functions are not marked as `unsafe`,
3301 meaning that it is technically incorrect to use them from within Rust code,
3302 however they are reasonable to use from C code.
3303
3304 The unsafe code in this crate heavily depends on the C caller maintaining
3305 invariants, however these invariants are clearly documented in the `rure.h`
3306 file, bundled with the crate.
3307
3308 I have checked the signatures of each function both in C++ and in the Rust to
3309 ensure they match.  In some places, the c `rure.h` header file is missing a
3310 `const` qualifier which could be present given the Rust code, however this will
3311 have no impact on ABI, and is fairly normal for FFI crates.
3312
3313 Panics are handled in all Rust FFI methods, meaning that projects which do not
3314 disable unwinding will still consistently abort (using `libc::abort()`) if a
3315 panic occurs in the Rust code.
3316 """
3317
3318 [[audits.rusqlite]]
3319 who = "Mike Hommey <mh+mozilla@glandium.org>"
3320 criteria = "safe-to-deploy"
3321 delta = "0.27.0 -> 0.28.0"
3322
3323 [[audits.rusqlite]]
3324 who = "Ben Dean-Kawamura <bdk@mozilla.com>"
3325 criteria = "safe-to-deploy"
3326 delta = "0.28.0 -> 0.29.0"
3327
3328 [[audits.rusqlite]]
3329 who = "Mark Hammond <mhammond@mozilla.com>"
3330 criteria = "safe-to-deploy"
3331 delta = "0.29.0 -> 0.30.0"
3332
3333 [[audits.rust_cascade]]
3334 who = "Mike Hommey <mh+mozilla@glandium.org>"
3335 criteria = "safe-to-deploy"
3336 delta = "1.4.0 -> 1.5.0"
3337
3338 [[audits.rust_decimal]]
3339 who = "Mike Hommey <mh+mozilla@glandium.org>"
3340 criteria = "safe-to-deploy"
3341 delta = "1.24.0 -> 1.25.0"
3342
3343 [[audits.rust_decimal]]
3344 who = "Mike Hommey <mh+mozilla@glandium.org>"
3345 criteria = "safe-to-deploy"
3346 delta = "1.25.0 -> 1.26.1"
3347
3348 [[audits.rust_decimal]]
3349 who = "Mike Hommey <mh+mozilla@glandium.org>"
3350 criteria = "safe-to-deploy"
3351 delta = "1.26.1 -> 1.27.0"
3352
3353 [[audits.rust_decimal]]
3354 who = "Mike Hommey <mh+mozilla@glandium.org>"
3355 criteria = "safe-to-deploy"
3356 delta = "1.27.0 -> 1.28.1"
3357
3358 [[audits.rustc-hash]]
3359 who = "Bobby Holley <bobbyholley@gmail.com>"
3360 criteria = "safe-to-deploy"
3361 version = "1.1.0"
3362 notes = "Straightforward crate with no unsafe code, does what it says on the tin."
3363
3364 [[audits.rustc_version]]
3365 who = "Nika Layzell <nika@thelayzells.com>"
3366 criteria = "safe-to-run"
3367 version = "0.4.0"
3368 notes = """
3369 Straightforward crate which runs `$RUSTC -vV` and parses the output into a
3370 machine-interpretable form for build scripts.
3371 """
3372
3373 [[audits.rustversion]]
3374 who = "Bobby Holley <bobbyholley@gmail.com>"
3375 criteria = "safe-to-deploy"
3376 version = "1.0.9"
3377 notes = """
3378 This crate has a build-time component and procedural macro logic, which I looked
3379 at enough to convince myself it wasn't going to do anything dramatically wrong.
3380 I don't think logic bugs in the version parsing etc can realistically introduce
3381 a security vulnerability.
3382 """
3383
3384 [[audits.rustversion]]
3385 who = "Mike Hommey <mh+mozilla@glandium.org>"
3386 criteria = "safe-to-run"
3387 delta = "1.0.9 -> 1.0.11"
3388
3389 [[audits.ryu]]
3390 who = "Mike Hommey <mh+mozilla@glandium.org>"
3391 criteria = "safe-to-deploy"
3392 delta = "1.0.10 -> 1.0.11"
3393
3394 [[audits.ryu]]
3395 who = "Mike Hommey <mh+mozilla@glandium.org>"
3396 criteria = "safe-to-deploy"
3397 delta = "1.0.11 -> 1.0.12"
3398
3399 [[audits.safemem]]
3400 who = "Bobby Holley <bobbyholley@gmail.com>"
3401 criteria = "safe-to-run"
3402 version = "0.3.3"
3403 notes = "I didn't review the allocation code carefully but it's not malicious."
3404
3405 [[audits.scoped-tls]]
3406 who = "Mike Hommey <mh+mozilla@glandium.org>"
3407 criteria = "safe-to-run"
3408 delta = "1.0.0 -> 1.0.1"
3409
3410 [[audits.scroll]]
3411 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
3412 criteria = "safe-to-deploy"
3413 delta = "0.10.2 -> 0.11.0"
3414 notes = "Small changes to exposed traits, that look reasonable and have additional buffer boundary checks. No unsafe code touched."
3415
3416 [[audits.scroll_derive]]
3417 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
3418 criteria = "safe-to-deploy"
3419 delta = "0.10.5 -> 0.11.0"
3420 notes = "No code changes. Tagged together with its parent crate scroll."
3421
3422 [[audits.scroll_derive]]
3423 who = "Mike Hommey <mh+mozilla@glandium.org>"
3424 criteria = "safe-to-deploy"
3425 delta = "0.11.0 -> 0.11.1"
3426
3427 [[audits.selectors]]
3428 who = "Emilio Cobos Álvarez <emilio@crisal.io>"
3429 criteria = "safe-to-deploy"
3430 version = "0.22.0"
3431 notes = """
3432 This crate is basically developed in-tree. Mozilla employees have either
3433 reviewed or written virtually all of the code.
3434 """
3435
3436 [[audits.semver]]
3437 who = "Mike Hommey <mh+mozilla@glandium.org>"
3438 criteria = "safe-to-deploy"
3439 delta = "1.0.9 -> 1.0.10"
3440
3441 [[audits.semver]]
3442 who = "Mike Hommey <mh+mozilla@glandium.org>"
3443 criteria = "safe-to-deploy"
3444 delta = "1.0.10 -> 1.0.13"
3445
3446 [[audits.semver]]
3447 who = "Mike Hommey <mh+mozilla@glandium.org>"
3448 criteria = "safe-to-deploy"
3449 delta = "1.0.13 -> 1.0.16"
3450
3451 [[audits.semver]]
3452 who = "Bobby Holley <bobbyholley@gmail.com>"
3453 criteria = "safe-to-deploy"
3454 delta = "1.0.17 -> 1.0.16"
3455
3456 [[audits.serde]]
3457 who = "Mike Hommey <mh+mozilla@glandium.org>"
3458 criteria = "safe-to-deploy"
3459 delta = "1.0.137 -> 1.0.143"
3460
3461 [[audits.serde]]
3462 who = "Mike Hommey <mh+mozilla@glandium.org>"
3463 criteria = "safe-to-deploy"
3464 delta = "1.0.143 -> 1.0.144"
3465
3466 [[audits.serde]]
3467 who = "Mike Hommey <mh+mozilla@glandium.org>"
3468 criteria = "safe-to-deploy"
3469 delta = "1.0.144 -> 1.0.151"
3470
3471 [[audits.serde]]
3472 who = "Mike Hommey <mh+mozilla@glandium.org>"
3473 criteria = "safe-to-deploy"
3474 delta = "1.0.151 -> 1.0.152"
3475
3476 [[audits.serde_bytes]]
3477 who = "Mike Hommey <mh+mozilla@glandium.org>"
3478 criteria = "safe-to-deploy"
3479 delta = "0.11.6 -> 0.11.7"
3480
3481 [[audits.serde_bytes]]
3482 who = "Mike Hommey <mh+mozilla@glandium.org>"
3483 criteria = "safe-to-deploy"
3484 delta = "0.11.7 -> 0.11.8"
3485
3486 [[audits.serde_bytes]]
3487 who = "Mike Hommey <mh+mozilla@glandium.org>"
3488 criteria = "safe-to-deploy"
3489 delta = "0.11.8 -> 0.11.9"
3490
3491 [[audits.serde_cbor]]
3492 who = "R. Martinho Fernandes <bugs@rmf.io>"
3493 criteria = "safe-to-deploy"
3494 version = "0.11.1"
3495
3496 [[audits.serde_cbor]]
3497 who = "John M. Schanck <jschanck@mozilla.com>"
3498 criteria = "safe-to-deploy"
3499 delta = "0.11.1 -> 0.11.2"
3500
3501 [[audits.serde_derive]]
3502 who = "Mike Hommey <mh+mozilla@glandium.org>"
3503 criteria = "safe-to-deploy"
3504 delta = "1.0.137 -> 1.0.143"
3505
3506 [[audits.serde_derive]]
3507 who = "Mike Hommey <mh+mozilla@glandium.org>"
3508 criteria = "safe-to-deploy"
3509 delta = "1.0.143 -> 1.0.144"
3510
3511 [[audits.serde_derive]]
3512 who = "Mike Hommey <mh+mozilla@glandium.org>"
3513 criteria = "safe-to-deploy"
3514 delta = "1.0.144 -> 1.0.151"
3515
3516 [[audits.serde_derive]]
3517 who = "Mike Hommey <mh+mozilla@glandium.org>"
3518 criteria = "safe-to-deploy"
3519 delta = "1.0.151 -> 1.0.152"
3520
3521 [[audits.serde_json]]
3522 who = "Mike Hommey <mh+mozilla@glandium.org>"
3523 criteria = "safe-to-deploy"
3524 delta = "1.0.81 -> 1.0.83"
3525
3526 [[audits.serde_json]]
3527 who = "Mike Hommey <mh+mozilla@glandium.org>"
3528 criteria = "safe-to-deploy"
3529 delta = "1.0.83 -> 1.0.85"
3530
3531 [[audits.serde_json]]
3532 who = "Mike Hommey <mh+mozilla@glandium.org>"
3533 criteria = "safe-to-deploy"
3534 delta = "1.0.85 -> 1.0.91"
3535
3536 [[audits.serde_json]]
3537 who = "Mike Hommey <mh+mozilla@glandium.org>"
3538 criteria = "safe-to-deploy"
3539 delta = "1.0.91 -> 1.0.93"
3540
3541 [[audits.serde_path_to_error]]
3542 who = "Ben Dean-Kawamura <bdk@mozilla.com>"
3543 criteria = "safe-to-deploy"
3544 version = "0.1.11"
3545
3546 [[audits.serde_repr]]
3547 who = "Mike Hommey <mh+mozilla@glandium.org>"
3548 criteria = "safe-to-run"
3549 delta = "0.1.8 -> 0.1.9"
3550
3551 [[audits.serde_repr]]
3552 who = "Mike Hommey <mh+mozilla@glandium.org>"
3553 criteria = "safe-to-run"
3554 delta = "0.1.9 -> 0.1.10"
3555
3556 [[audits.serde_with]]
3557 who = "Mike Hommey <mh+mozilla@glandium.org>"
3558 criteria = "safe-to-deploy"
3559 delta = "1.14.0 -> 3.0.0"
3560
3561 [[audits.serde_with_macros]]
3562 who = "Mike Hommey <mh+mozilla@glandium.org>"
3563 criteria = "safe-to-deploy"
3564 delta = "1.5.2 -> 3.0.0"
3565
3566 [[audits.serde_yaml]]
3567 who = "Mike Hommey <mh+mozilla@glandium.org>"
3568 criteria = "safe-to-run"
3569 delta = "0.8.24 -> 0.8.26"
3570
3571 [[audits.servo_arc]]
3572 who = "Emilio Cobos Álvarez <emilio@crisal.io>"
3573 criteria = "safe-to-deploy"
3574 version = "0.1.1"
3575 notes = "Developed in-tree, effectively."
3576
3577 [[audits.sfv]]
3578 who = "Mike Hommey <mh+mozilla@glandium.org>"
3579 criteria = "safe-to-deploy"
3580 delta = "0.9.2 -> 0.9.3"
3581
3582 [[audits.sha1]]
3583 who = "Dana Keeler <dkeeler@mozilla.com>"
3584 criteria = "safe-to-deploy"
3585 version = "0.10.5"
3586
3587 [[audits.sha1]]
3588 who = "Mike Hommey <mh+mozilla@glandium.org>"
3589 criteria = "safe-to-run"
3590 delta = "0.10.0 -> 0.10.5"
3591
3592 [[audits.sha2]]
3593 who = "Mike Hommey <mh+mozilla@glandium.org>"
3594 criteria = "safe-to-deploy"
3595 delta = "0.10.2 -> 0.10.6"
3596
3597 [[audits.sha3]]
3598 who = "Simon Friedberger <simon@mozilla.com>"
3599 criteria = "safe-to-deploy"
3600 delta = "0.10.6 -> 0.10.7"
3601
3602 [[audits.slab]]
3603 who = "Mike Hommey <mh+mozilla@glandium.org>"
3604 criteria = "safe-to-deploy"
3605 delta = "0.4.6 -> 0.4.7"
3606
3607 [[audits.slab]]
3608 who = "Mike Hommey <mh+mozilla@glandium.org>"
3609 criteria = "safe-to-deploy"
3610 delta = "0.4.7 -> 0.4.8"
3611
3612 [[audits.smallbitvec]]
3613 who = "Bobby Holley <bobbyholley@gmail.com>"
3614 criteria = "safe-to-deploy"
3615 version = "2.5.0"
3616 notes = "All code written or reviewed by Mozilla staff."
3617
3618 [[audits.smallbitvec]]
3619 who = "Bobby Holley <bobbyholley@gmail.com>"
3620 criteria = "safe-to-deploy"
3621 delta = "2.5.0 -> 2.5.1"
3622
3623 [[audits.smallvec]]
3624 who = "Mike Hommey <mh+mozilla@glandium.org>"
3625 criteria = "safe-to-deploy"
3626 delta = "1.8.0 -> 1.9.0"
3627
3628 [[audits.smallvec]]
3629 who = "Mike Hommey <mh+mozilla@glandium.org>"
3630 criteria = "safe-to-deploy"
3631 delta = "1.9.0 -> 1.10.0"
3632
3633 [[audits.smart-default]]
3634 who = "Gabriele Svelto <gsvelto@mozilla.com>"
3635 criteria = "safe-to-deploy"
3636 version = "0.6.0"
3637
3638 [[audits.smart-default]]
3639 who = "Mike Hommey <mh+mozilla@glandium.org>"
3640 criteria = "safe-to-deploy"
3641 delta = "0.6.0 -> 0.7.1"
3642
3643 [[audits.socket2]]
3644 who = "Mike Hommey <mh+mozilla@glandium.org>"
3645 criteria = "safe-to-deploy"
3646 delta = "0.4.4 -> 0.4.7"
3647
3648 [[audits.spirv]]
3649 who = "Nicolas Silva <nical@fastmail.com>"
3650 criteria = "safe-to-deploy"
3651 delta = "0.2.0+1.5.4 -> 0.3.0+sdk-1.3.268.0"
3652
3653 [[audits.strck]]
3654 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
3655 criteria = "safe-to-deploy"
3656 version = "0.1.2"
3657 notes = "This crate uses unsafe lock to keep invariant. I auditted code. Also, this doesn't have file access and network access."
3658
3659 [[audits.strck_ident]]
3660 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
3661 criteria = "safe-to-deploy"
3662 version = "0.1.2"
3663 notes = "This crate doesn't use unsafe block, network access and filesystem access."
3664
3665 [[audits.subtle]]
3666 who = "Simon Friedberger <simon@mozilla.com>"
3667 criteria = "safe-to-deploy"
3668 version = "2.5.0"
3669 notes = "The goal is to provide some constant-time correctness for cryptographic implementations. The approach is reasonable, it is known to be insufficient but this is pointed out in the documentation."
3670
3671 [[audits.svg_fmt]]
3672 who = "Bobby Holley <bobbyholley@gmail.com>"
3673 criteria = "safe-to-deploy"
3674 version = "0.4.1"
3675 notes = "Simple string processing with no unsafe code or ambient capability usage."
3676
3677 [[audits.syn]]
3678 who = "Mike Hommey <mh+mozilla@glandium.org>"
3679 criteria = "safe-to-deploy"
3680 delta = "1.0.96 -> 1.0.99"
3681
3682 [[audits.syn]]
3683 who = "Mike Hommey <mh+mozilla@glandium.org>"
3684 criteria = "safe-to-deploy"
3685 delta = "1.0.99 -> 1.0.107"
3686
3687 [[audits.synstructure]]
3688 who = "Nika Layzell <nika@thelayzells.com>"
3689 criteria = "safe-to-deploy"
3690 version = "0.12.6"
3691 notes = """
3692 I am the primary author of the `synstructure` crate, and its current
3693 maintainer. The one use of `unsafe` is unnecessary, but documented and
3694 harmless. It will be removed in the next version.
3695 """
3696
3697 [[audits.synstructure]]
3698 who = "Mike Hommey <mh+mozilla@glandium.org>"
3699 criteria = "safe-to-deploy"
3700 delta = "0.12.6 -> 0.13.0"
3701
3702 [[audits.tempfile]]
3703 who = "Mike Hommey <mh+mozilla@glandium.org>"
3704 criteria = "safe-to-deploy"
3705 delta = "3.6.0 -> 3.8.0"
3706
3707 [[audits.tempfile]]
3708 who = "Mike Hommey <mh+mozilla@glandium.org>"
3709 criteria = "safe-to-deploy"
3710 delta = "3.8.0 -> 3.9.0"
3711
3712 [[audits.termcolor]]
3713 who = "Mike Hommey <mh+mozilla@glandium.org>"
3714 criteria = "safe-to-deploy"
3715 delta = "1.1.3 -> 1.2.0"
3716
3717 [[audits.textwrap]]
3718 who = "Mike Hommey <mh+mozilla@glandium.org>"
3719 criteria = "safe-to-deploy"
3720 delta = "0.15.0 -> 0.15.2"
3721
3722 [[audits.textwrap]]
3723 who = "Mike Hommey <mh+mozilla@glandium.org>"
3724 criteria = "safe-to-deploy"
3725 delta = "0.15.2 -> 0.16.0"
3726
3727 [[audits.thin-vec]]
3728 who = "Aria Beingessner <a.beingessner@gmail.com>"
3729 criteria = "safe-to-deploy"
3730 version = "0.2.5"
3731 notes = "I own this crate, and most of its versions were codeveloped and reviewed by Nika Layzell. This version was not explicitly reviewed by her, but it was specifically a release that made the code pass miri and was reviewed by me. Firefox uses it in the gecko-ffi configuration which is less thoroughly tested and more dangerous but we're reasonably confident in it. The real danger is from C++ code failing to use it correctly in FFI but that's just how FFI is."
3732
3733 [[audits.thin-vec]]
3734 who = "Mike Hommey <mh+mozilla@glandium.org>"
3735 criteria = "safe-to-deploy"
3736 delta = "0.2.5 -> 0.2.7"
3737
3738 [[audits.thin-vec]]
3739 who = "Mike Hommey <mh+mozilla@glandium.org>"
3740 criteria = "safe-to-deploy"
3741 delta = "0.2.7 -> 0.2.12"
3742
3743 [[audits.thiserror]]
3744 who = "Mike Hommey <mh+mozilla@glandium.org>"
3745 criteria = "safe-to-deploy"
3746 delta = "1.0.31 -> 1.0.32"
3747
3748 [[audits.thiserror]]
3749 who = "Mike Hommey <mh+mozilla@glandium.org>"
3750 criteria = "safe-to-deploy"
3751 delta = "1.0.32 -> 1.0.38"
3752
3753 [[audits.thiserror-impl]]
3754 who = "Mike Hommey <mh+mozilla@glandium.org>"
3755 criteria = "safe-to-deploy"
3756 delta = "1.0.31 -> 1.0.32"
3757
3758 [[audits.thiserror-impl]]
3759 who = "Mike Hommey <mh+mozilla@glandium.org>"
3760 criteria = "safe-to-deploy"
3761 delta = "1.0.32 -> 1.0.38"
3762
3763 [[audits.threadbound]]
3764 who = "Mike Hommey <mh+mozilla@glandium.org>"
3765 criteria = "safe-to-deploy"
3766 delta = "0.1.3 -> 0.1.4"
3767
3768 [[audits.threadbound]]
3769 who = "Mike Hommey <mh+mozilla@glandium.org>"
3770 criteria = "safe-to-deploy"
3771 delta = "0.1.4 -> 0.1.5"
3772
3773 [[audits.time]]
3774 who = "Mike Hommey <mh+mozilla@glandium.org>"
3775 criteria = "safe-to-deploy"
3776 delta = "0.1.44 -> 0.1.45"
3777
3778 [[audits.time]]
3779 who = "Kershaw Chang <kershaw@mozilla.com>"
3780 criteria = "safe-to-deploy"
3781 delta = "0.1.45 -> 0.3.17"
3782
3783 [[audits.time]]
3784 who = "Mike Hommey <mh+mozilla@glandium.org>"
3785 criteria = "safe-to-run"
3786 delta = "0.3.9 -> 0.3.17"
3787
3788 [[audits.time]]
3789 who = "Kershaw Chang <kershaw@mozilla.com>"
3790 criteria = "safe-to-deploy"
3791 delta = "0.3.17 -> 0.3.23"
3792
3793 [[audits.time-core]]
3794 who = "Kershaw Chang <kershaw@mozilla.com>"
3795 criteria = "safe-to-deploy"
3796 version = "0.1.0"
3797
3798 [[audits.time-core]]
3799 who = "Mike Hommey <mh+mozilla@glandium.org>"
3800 criteria = "safe-to-run"
3801 version = "0.1.0"
3802
3803 [[audits.time-core]]
3804 who = "Kershaw Chang <kershaw@mozilla.com>"
3805 criteria = "safe-to-deploy"
3806 delta = "0.1.0 -> 0.1.1"
3807
3808 [[audits.time-macros]]
3809 who = "Kershaw Chang <kershaw@mozilla.com>"
3810 criteria = "safe-to-deploy"
3811 version = "0.2.6"
3812
3813 [[audits.time-macros]]
3814 who = "Mike Hommey <mh+mozilla@glandium.org>"
3815 criteria = "safe-to-run"
3816 delta = "0.2.4 -> 0.2.6"
3817
3818 [[audits.time-macros]]
3819 who = "Kershaw Chang <kershaw@mozilla.com>"
3820 criteria = "safe-to-deploy"
3821 delta = "0.2.6 -> 0.2.10"
3822
3823 [[audits.tinystr]]
3824 who = "Zibi Braniecki <zibi@unicode.org>"
3825 criteria = "safe-to-deploy"
3826 version = "0.3.4"
3827
3828 [[audits.tinystr]]
3829 who = "Zibi Braniecki <zibi@unicode.org>"
3830 criteria = "safe-to-deploy"
3831 version = "0.6.0"
3832
3833 [[audits.tinystr]]
3834 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
3835 criteria = "safe-to-deploy"
3836 version = "0.7.0"
3837 notes = "One of original auther was Zibi Braniecki who worked at Mozilla and maintained by ICU4X developers (Google and Mozilla). I've vetted the one instance of unsafe code."
3838
3839 [[audits.tinystr]]
3840 who = "Mike Hommey <mh+mozilla@glandium.org>"
3841 criteria = "safe-to-deploy"
3842 delta = "0.7.0 -> 0.7.1"
3843
3844 [[audits.tinystr]]
3845 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
3846 criteria = "safe-to-deploy"
3847 delta = "0.7.1 -> 0.7.4"
3848
3849 [[audits.tokio-macros]]
3850 who = "Mike Hommey <mh+mozilla@glandium.org>"
3851 criteria = "safe-to-run"
3852 delta = "1.8.0 -> 1.8.2"
3853
3854 [[audits.tokio-stream]]
3855 who = "Mike Hommey <mh+mozilla@glandium.org>"
3856 criteria = "safe-to-run"
3857 delta = "0.1.9 -> 0.1.11"
3858
3859 [[audits.tokio-stream]]
3860 who = "Mike Hommey <mh+mozilla@glandium.org>"
3861 criteria = "safe-to-run"
3862 delta = "0.1.11 -> 0.1.12"
3863
3864 [[audits.toml]]
3865 who = "Bobby Holley <bobbyholley@gmail.com>"
3866 criteria = "safe-to-deploy"
3867 delta = "0.5.7 -> 0.5.9"
3868
3869 [[audits.toml]]
3870 who = "Mike Hommey <mh+mozilla@glandium.org>"
3871 criteria = "safe-to-deploy"
3872 delta = "0.5.9 -> 0.5.10"
3873
3874 [[audits.toml]]
3875 who = "Mike Hommey <mh+mozilla@glandium.org>"
3876 criteria = "safe-to-deploy"
3877 delta = "0.5.10 -> 0.5.11"
3878
3879 [[audits.topological-sort]]
3880 who = "Bobby Holley <bobbyholley@gmail.com>"
3881 criteria = "safe-to-deploy"
3882 version = "0.1.0"
3883 notes = "Simple algorithm crate with no unsafe code or capability usage."
3884
3885 [[audits.tower-service]]
3886 who = "Mike Hommey <mh+mozilla@glandium.org>"
3887 criteria = "safe-to-run"
3888 delta = "0.3.1 -> 0.3.2"
3889
3890 [[audits.tracing]]
3891 who = "Mike Hommey <mh+mozilla@glandium.org>"
3892 criteria = "safe-to-run"
3893 delta = "0.1.35 -> 0.1.36"
3894
3895 [[audits.tracing]]
3896 who = "Mike Hommey <mh+mozilla@glandium.org>"
3897 criteria = "safe-to-run"
3898 delta = "0.1.36 -> 0.1.37"
3899
3900 [[audits.tracing-attributes]]
3901 who = "Mike Hommey <mh+mozilla@glandium.org>"
3902 criteria = "safe-to-run"
3903 delta = "0.1.21 -> 0.1.22"
3904
3905 [[audits.tracing-attributes]]
3906 who = "Mike Hommey <mh+mozilla@glandium.org>"
3907 criteria = "safe-to-run"
3908 delta = "0.1.22 -> 0.1.23"
3909
3910 [[audits.tracing-attributes]]
3911 who = "Mike Hommey <mh+mozilla@glandium.org>"
3912 criteria = "safe-to-run"
3913 delta = "0.1.23 -> 0.1.24"
3914
3915 [[audits.tracing-core]]
3916 who = "Mike Hommey <mh+mozilla@glandium.org>"
3917 criteria = "safe-to-run"
3918 delta = "0.1.27 -> 0.1.29"
3919
3920 [[audits.tracing-core]]
3921 who = "Mike Hommey <mh+mozilla@glandium.org>"
3922 criteria = "safe-to-run"
3923 delta = "0.1.29 -> 0.1.30"
3924
3925 [[audits.tracy-rs]]
3926 who = "Glenn Watson <git@intuitionlibrary.com>"
3927 criteria = "safe-to-deploy"
3928 version = "0.1.2"
3929
3930 [[audits.try-lock]]
3931 who = "Mike Hommey <mh+mozilla@glandium.org>"
3932 criteria = "safe-to-run"
3933 delta = "0.2.3 -> 0.2.4"
3934
3935 [[audits.typed-arena-nomut]]
3936 who = "Lee Salzman <lsalzman@gmail.com>"
3937 criteria = "safe-to-deploy"
3938 version = "0.1.0"
3939
3940 [[audits.typenum]]
3941 who = "Mike Hommey <mh+mozilla@glandium.org>"
3942 criteria = "safe-to-deploy"
3943 delta = "1.15.0 -> 1.16.0"
3944
3945 [[audits.uluru]]
3946 who = "Emilio Cobos Álvarez <emilio@crisal.io>"
3947 criteria = "safe-to-deploy"
3948 version = "3.0.0"
3949 notes = """
3950 I've reviewed multiple patches in this crate, including the initial
3951 implementation back in the day. It has no unsafe code at all nowadays.
3952 """
3953
3954 [[audits.unic-langid]]
3955 who = "Zibi Braniecki <zibi@unicode.org>"
3956 criteria = "safe-to-deploy"
3957 version = "0.9.0"
3958
3959 [[audits.unic-langid]]
3960 who = "Mike Hommey <mh+mozilla@glandium.org>"
3961 criteria = "safe-to-deploy"
3962 delta = "0.9.0 -> 0.9.1"
3963
3964 [[audits.unic-langid-impl]]
3965 who = "Zibi Braniecki <zibi@unicode.org>"
3966 criteria = "safe-to-deploy"
3967 version = "0.9.0"
3968
3969 [[audits.unic-langid-impl]]
3970 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
3971 criteria = "safe-to-deploy"
3972 delta = "0.9.0 -> 0.9.1"
3973
3974 [[audits.unic-langid-macros]]
3975 who = "Zibi Braniecki <zibi@unicode.org>"
3976 criteria = "safe-to-deploy"
3977 version = "0.9.0"
3978
3979 [[audits.unic-langid-macros]]
3980 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
3981 criteria = "safe-to-deploy"
3982 delta = "0.9.0 -> 0.9.1"
3983
3984 [[audits.unic-langid-macros-impl]]
3985 who = "Zibi Braniecki <zibi@unicode.org>"
3986 criteria = "safe-to-deploy"
3987 version = "0.9.0"
3988
3989 [[audits.unic-langid-macros-impl]]
3990 who = "Mike Hommey <mh+mozilla@glandium.org>"
3991 criteria = "safe-to-deploy"
3992 delta = "0.9.0 -> 0.9.1"
3993
3994 [[audits.unicode-bidi]]
3995 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
3996 criteria = "safe-to-deploy"
3997 delta = "0.3.8 -> 0.3.13"
3998
3999 [[audits.unicode-bidi]]
4000 who = "Jonathan Kew <jkew@mozilla.com>"
4001 criteria = "safe-to-deploy"
4002 delta = "0.3.13 -> 0.3.14"
4003 notes = "I am the author of the bulk of the upstream changes in this version, and also checked the remaining post-0.3.13 changes."
4004
4005 [[audits.unicode-bidi]]
4006 who = "Jonathan Kew <jfkthame@gmail.com>"
4007 criteria = "safe-to-deploy"
4008 delta = "0.3.14 -> 0.3.15"
4009
4010 [[audits.unicode-ident]]
4011 who = "Mike Hommey <mh+mozilla@glandium.org>"
4012 criteria = "safe-to-deploy"
4013 delta = "1.0.0 -> 1.0.1"
4014
4015 [[audits.unicode-ident]]
4016 who = "Mike Hommey <mh+mozilla@glandium.org>"
4017 criteria = "safe-to-deploy"
4018 delta = "1.0.1 -> 1.0.3"
4019
4020 [[audits.unicode-ident]]
4021 who = "Mike Hommey <mh+mozilla@glandium.org>"
4022 criteria = "safe-to-deploy"
4023 delta = "1.0.3 -> 1.0.6"
4024
4025 [[audits.unicode-normalization]]
4026 who = "Mike Hommey <mh+mozilla@glandium.org>"
4027 criteria = "safe-to-deploy"
4028 delta = "0.1.19 -> 0.1.20"
4029 notes = "I am the author of most of these changes upstream, and prepared the release myself, at which point I looked at the other changes since 0.1.19."
4030
4031 [[audits.unicode-normalization]]
4032 who = "Mike Hommey <mh+mozilla@glandium.org>"
4033 criteria = "safe-to-deploy"
4034 delta = "0.1.20 -> 0.1.21"
4035
4036 [[audits.unicode-normalization]]
4037 who = "Mike Hommey <mh+mozilla@glandium.org>"
4038 criteria = "safe-to-deploy"
4039 delta = "0.1.21 -> 0.1.22"
4040
4041 [[audits.unicode-segmentation]]
4042 who = "Mike Hommey <mh+mozilla@glandium.org>"
4043 criteria = "safe-to-deploy"
4044 delta = "1.9.0 -> 1.10.0"
4045
4046 [[audits.unicode-width]]
4047 who = "Mike Hommey <mh+mozilla@glandium.org>"
4048 criteria = "safe-to-deploy"
4049 delta = "0.1.9 -> 0.1.10"
4050
4051 [[audits.unicode-xid]]
4052 who = "Mike Hommey <mh+mozilla@glandium.org>"
4053 criteria = "safe-to-deploy"
4054 delta = "0.2.3 -> 0.2.4"
4055
4056 [[audits.uniffi]]
4057 who = "Travis Long <tlong@mozilla.com>"
4058 criteria = "safe-to-deploy"
4059 version = "0.19.3"
4060 notes = "Maintained by the Glean and Application Services teams"
4061
4062 [[audits.uniffi]]
4063 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
4064 criteria = "safe-to-deploy"
4065 delta = "0.19.3 -> 0.19.6"
4066 notes = "Maintained by the Glean and Application Services team."
4067
4068 [[audits.uniffi]]
4069 who = "Perry McManis <pmcmanis@mozilla.com>"
4070 criteria = "safe-to-deploy"
4071 delta = "0.19.6 -> 0.20.0"
4072
4073 [[audits.uniffi]]
4074 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
4075 criteria = "safe-to-deploy"
4076 delta = "0.20.0 -> 0.21.0"
4077 notes = "Maintained by the Glean and Application Services team."
4078
4079 [[audits.uniffi]]
4080 who = "Mike Hommey <mh+mozilla@glandium.org>"
4081 criteria = "safe-to-deploy"
4082 delta = "0.21.0 -> 0.21.1"
4083 notes = "No changes."
4084
4085 [[audits.uniffi]]
4086 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
4087 criteria = "safe-to-deploy"
4088 delta = "0.21.1 -> 0.23.0"
4089 notes = "Maintained by the Glean and Application Services team."
4090
4091 [[audits.uniffi_bindgen]]
4092 who = "Travis Long <tlong@mozilla.com>"
4093 criteria = "safe-to-deploy"
4094 version = "0.19.3"
4095 notes = "Maintained by the Glean and Application Services teams."
4096
4097 [[audits.uniffi_bindgen]]
4098 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
4099 criteria = "safe-to-deploy"
4100 delta = "0.19.3 -> 0.19.6"
4101 notes = "Maintained by the Glean and Application Services team."
4102
4103 [[audits.uniffi_bindgen]]
4104 who = "Perry McManis <pmcmanis@mozilla.com>"
4105 criteria = "safe-to-deploy"
4106 delta = "0.19.6 -> 0.20.0"
4107
4108 [[audits.uniffi_bindgen]]
4109 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
4110 criteria = "safe-to-deploy"
4111 delta = "0.20.0 -> 0.21.0"
4112 notes = "Maintained by the Glean and Application Services team."
4113
4114 [[audits.uniffi_bindgen]]
4115 who = "Mike Hommey <mh+mozilla@glandium.org>"
4116 criteria = "safe-to-deploy"
4117 delta = "0.21.0 -> 0.21.1"
4118 notes = "I authored the changes in this version."
4119
4120 [[audits.uniffi_bindgen]]
4121 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
4122 criteria = "safe-to-deploy"
4123 delta = "0.21.1 -> 0.23.0"
4124 notes = "Maintained by the Glean and Application Services team."
4125
4126 [[audits.uniffi_build]]
4127 who = "Travis Long <tlong@mozilla.com>"
4128 criteria = "safe-to-deploy"
4129 version = "0.19.3"
4130 notes = "Maintained by the Glean and Application Services teams."
4131
4132 [[audits.uniffi_build]]
4133 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
4134 criteria = "safe-to-deploy"
4135 delta = "0.19.3 -> 0.19.6"
4136 notes = "Maintained by the Glean and Application Services team."
4137
4138 [[audits.uniffi_build]]
4139 who = "Perry McManis <pmcmanis@mozilla.com>"
4140 criteria = "safe-to-deploy"
4141 delta = "0.19.6 -> 0.20.0"
4142
4143 [[audits.uniffi_build]]
4144 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
4145 criteria = "safe-to-deploy"
4146 delta = "0.20.0 -> 0.21.0"
4147 notes = "Maintained by the Glean and Application Services team."
4148
4149 [[audits.uniffi_build]]
4150 who = "Mike Hommey <mh+mozilla@glandium.org>"
4151 criteria = "safe-to-deploy"
4152 delta = "0.21.0 -> 0.21.1"
4153 notes = "No changes."
4154
4155 [[audits.uniffi_build]]
4156 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
4157 criteria = "safe-to-deploy"
4158 delta = "0.21.1 -> 0.23.0"
4159 notes = "Maintained by the Glean and Application Services team."
4160
4161 [[audits.uniffi_checksum_derive]]
4162 who = "Mike Hommey <mh+mozilla@glandium.org>"
4163 criteria = "safe-to-deploy"
4164 version = "0.21.1"
4165 notes = "I authored this crate."
4166
4167 [[audits.uniffi_checksum_derive]]
4168 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
4169 criteria = "safe-to-deploy"
4170 delta = "0.21.1 -> 0.23.0"
4171 notes = "Maintained by the Glean and Application Services team."
4172
4173 [[audits.uniffi_core]]
4174 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
4175 criteria = "safe-to-deploy"
4176 version = "0.23.0"
4177 notes = "Maintained by the Glean and Application Services teams."
4178
4179 [[audits.uniffi_macros]]
4180 who = "Travis Long <tlong@mozilla.com>"
4181 criteria = "safe-to-deploy"
4182 version = "0.19.3"
4183 notes = "Maintained by the Glean and Application Services teams."
4184
4185 [[audits.uniffi_macros]]
4186 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
4187 criteria = "safe-to-deploy"
4188 delta = "0.19.3 -> 0.19.6"
4189 notes = "Maintained by the Glean and Application Services team."
4190
4191 [[audits.uniffi_macros]]
4192 who = "Perry McManis <pmcmanis@mozilla.com>"
4193 criteria = "safe-to-deploy"
4194 delta = "0.19.6 -> 0.20.0"
4195
4196 [[audits.uniffi_macros]]
4197 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
4198 criteria = "safe-to-deploy"
4199 delta = "0.20.0 -> 0.21.0"
4200 notes = "Maintained by the Glean and Application Services team."
4201
4202 [[audits.uniffi_macros]]
4203 who = "Mike Hommey <mh+mozilla@glandium.org>"
4204 criteria = "safe-to-deploy"
4205 delta = "0.21.0 -> 0.21.1"
4206 notes = "No changes."
4207
4208 [[audits.uniffi_macros]]
4209 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
4210 criteria = "safe-to-deploy"
4211 delta = "0.21.1 -> 0.23.0"
4212 notes = "Maintained by the Glean and Application Services team."
4213
4214 [[audits.uniffi_meta]]
4215 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
4216 criteria = "safe-to-deploy"
4217 version = "0.19.6"
4218 notes = "Maintained by the Glean and Application Services team."
4219
4220 [[audits.uniffi_meta]]
4221 who = "Perry McManis <pmcmanis@mozilla.com>"
4222 criteria = "safe-to-deploy"
4223 delta = "0.19.6 -> 0.20.0"
4224
4225 [[audits.uniffi_meta]]
4226 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
4227 criteria = "safe-to-deploy"
4228 delta = "0.20.0 -> 0.21.0"
4229 notes = "Maintained by the Glean and Application Services team."
4230
4231 [[audits.uniffi_meta]]
4232 who = "Mike Hommey <mh+mozilla@glandium.org>"
4233 criteria = "safe-to-deploy"
4234 delta = "0.21.0 -> 0.21.1"
4235 notes = "I authored the changes in this version."
4236
4237 [[audits.uniffi_meta]]
4238 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
4239 criteria = "safe-to-deploy"
4240 delta = "0.21.1 -> 0.23.0"
4241 notes = "Maintained by the Glean and Application Services team."
4242
4243 [[audits.uniffi_testing]]
4244 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
4245 criteria = "safe-to-deploy"
4246 version = "0.23.0"
4247 notes = "Maintained by the Glean and Application Services team."
4248
4249 [[audits.url]]
4250 who = "Valentin Gosu <valentin.gosu@gmail.com>"
4251 criteria = "safe-to-deploy"
4252 version = "2.4.0"
4253
4254 [[audits.url]]
4255 who = "Valentin Gosu <valentin.gosu@gmail.com>"
4256 criteria = "safe-to-deploy"
4257 delta = "2.4.0 -> 2.4.1"
4258
4259 [[audits.url]]
4260 who = "Valentin Gosu <valentin.gosu@gmail.com>"
4261 criteria = "safe-to-deploy"
4262 delta = "2.4.1 -> 2.5.0"
4263
4264 [[audits.uuid]]
4265 who = "Gabriele Svelto <gsvelto@mozilla.com>"
4266 criteria = "safe-to-deploy"
4267 delta = "0.8.2 -> 1.2.2"
4268
4269 [[audits.uuid]]
4270 who = "Mike Hommey <mh+mozilla@glandium.org>"
4271 criteria = "safe-to-deploy"
4272 delta = "1.2.2 -> 1.3.0"
4273
4274 [[audits.void]]
4275 who = "Bobby Holley <bobbyholley@gmail.com>"
4276 criteria = "safe-to-deploy"
4277 version = "1.0.2"
4278 notes = "Very small crate, just hosts the Void type for easier cross-crate interfacing."
4279
4280 [[audits.warp]]
4281 who = "Mike Hommey <mh+mozilla@glandium.org>"
4282 criteria = "safe-to-run"
4283 delta = "0.3.2 -> 0.3.3"
4284
4285 [[audits.warp]]
4286 who = "Bobby Holley <bobbyholley@gmail.com>"
4287 criteria = "safe-to-run"
4288 delta = "0.3.3 -> 0.3.3@git:4af45fae95bc98b0eba1ef0db17e1dac471bb23d"
4289
4290 [[audits.warp]]
4291 who = "Mike Hommey <mh+mozilla@glandium.org>"
4292 criteria = "safe-to-run"
4293 delta = "0.3.6 -> 0.3.6@git:9d081461ae1167eb321585ce424f4fef6cf0092b"
4294
4295 [[audits.wasm-encoder]]
4296 who = "Ryan Hunt <rhunt@eqrion.net>"
4297 criteria = "safe-to-deploy"
4298 version = "0.7.0"
4299 notes = "Maintained by the Bytecode Alliance, with contributions from Mozilla. This has no unsafe code and uses no ambient capabilities."
4300
4301 [[audits.wasm-encoder]]
4302 who = "Ryan Hunt <rhunt@eqrion.net>"
4303 criteria = "safe-to-deploy"
4304 delta = "0.7.0 -> 0.14.0"
4305 notes = "wasm-encoder has no unsafe code and uses no ambient capabilities."
4306
4307 [[audits.wasm-encoder]]
4308 who = "Yury Delendik <ydelendik@mozilla.com>"
4309 criteria = "safe-to-deploy"
4310 delta = "0.14.0 -> 0.15.0"
4311
4312 [[audits.wasm-encoder]]
4313 who = "Yury Delendik <ydelendik@mozilla.com>"
4314 criteria = "safe-to-deploy"
4315 delta = "0.16.0 -> 0.17.0"
4316
4317 [[audits.wasm-encoder]]
4318 who = "Ryan Hunt <rhunt@eqrion.net>"
4319 criteria = "safe-to-deploy"
4320 delta = "0.19.0 -> 0.19.1"
4321
4322 [[audits.wasm-smith]]
4323 who = "Ryan Hunt <rhunt@eqrion.net>"
4324 criteria = "safe-to-deploy"
4325 version = "0.11.2"
4326 notes = "Maintained by the Bytecode Alliance, with contributions from Mozilla. I've vetted the one instance of unsafe code."
4327
4328 [[audits.wasm-smith]]
4329 who = "Yury Delendik <ydelendik@mozilla.com>"
4330 criteria = "safe-to-run"
4331 delta = "0.11.2 -> 0.11.3"
4332
4333 [[audits.wasm-smith]]
4334 who = "Yury Delendik <ydelendik@mozilla.com>"
4335 criteria = "safe-to-run"
4336 delta = "0.11.4 -> 0.11.5"
4337
4338 [[audits.wasm-smith]]
4339 who = "Ryan Hunt <rhunt@eqrion.net>"
4340 criteria = "safe-to-run"
4341 delta = "0.11.7 -> 0.11.8"
4342
4343 [[audits.wasmparser]]
4344 who = "Ryan Hunt <rhunt@eqrion.net>"
4345 criteria = "safe-to-deploy"
4346 version = "0.87.0"
4347 notes = "Maintained by the Bytecode Alliance, with contributions from Mozilla. I've vetted the one instance of unsafe code."
4348
4349 [[audits.wasmparser]]
4350 who = "Yury Delendik <ydelendik@mozilla.com>"
4351 criteria = "safe-to-deploy"
4352 delta = "0.87.0 -> 0.88.0"
4353
4354 [[audits.wasmparser]]
4355 who = "Yury Delendik <ydelendik@mozilla.com>"
4356 criteria = "safe-to-deploy"
4357 delta = "0.89.1 -> 0.91.0"
4358
4359 [[audits.wasmparser]]
4360 who = "Ryan Hunt <rhunt@eqrion.net>"
4361 criteria = "safe-to-deploy"
4362 delta = "0.93.0 -> 0.94.0"
4363
4364 [[audits.wast]]
4365 who = "Ryan Hunt <rhunt@eqrion.net>"
4366 criteria = "safe-to-deploy"
4367 version = "44.0.0"
4368
4369 [[audits.wast]]
4370 who = "Ryan Hunt <rhunt@eqrion.net>"
4371 criteria = "safe-to-deploy"
4372 version = "44.0.0"
4373 notes = "Maintained by the Bytecode Alliance, with contributions from Mozilla. wast has no unsafe code and the only ambient capability it uses is to read the full contents of a file that is given to it."
4374
4375 [[audits.wast]]
4376 who = "Yury Delendik <ydelendik@mozilla.com>"
4377 criteria = "safe-to-deploy"
4378 delta = "44.0.0 -> 45.0.0"
4379
4380 [[audits.wast]]
4381 who = "Yury Delendik <ydelendik@mozilla.com>"
4382 criteria = "safe-to-deploy"
4383 delta = "46.0.0 -> 47.0.0"
4384
4385 [[audits.wast]]
4386 who = "Ryan Hunt <rhunt@eqrion.net>"
4387 criteria = "safe-to-deploy"
4388 delta = "48.0.0 -> 49.0.0"
4389
4390 [[audits.wast]]
4391 who = "Ben Visness <bvisness@mozilla.com>"
4392 criteria = "safe-to-deploy"
4393 delta = "55.0.0 -> 56.0.0"
4394
4395 [[audits.webrtc-sdp]]
4396 who = "Byron Campen <docfaraday@gmail.com>"
4397 criteria = "safe-to-deploy"
4398 delta = "0.3.9 -> 0.3.10"
4399
4400 [[audits.webrtc-sdp]]
4401 who = "Nicolas Grunbaum <ngrunbaum@mozilla.com>"
4402 criteria = "safe-to-deploy"
4403 delta = "0.3.10 -> 0.3.11"
4404
4405 [[audits.weedle2]]
4406 who = "Travis Long <tlong@mozilla.com>"
4407 criteria = "safe-to-deploy"
4408 version = "3.0.0"
4409 notes = "Maintained by the Glean and Application Services teams."
4410
4411 [[audits.weedle2]]
4412 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
4413 criteria = "safe-to-deploy"
4414 delta = "3.0.0 -> 4.0.0"
4415 notes = "Maintained by the Glean and Application Services team."
4416
4417 [[audits.wgpu-core]]
4418 who = "Dzmitry Malyshau <kvark@fastmail.com>"
4419 criteria = "safe-to-deploy"
4420 version = "0.12.0"
4421 notes = """
4422 This crate, up through the indicated version, was written or reviewed
4423 by Dzmitry Malyshau while he was a Mozilla employee. Dzmitry left
4424 Mozilla at the beginning of February 2022. This audit statement was
4425 collected by Jim Blandy, a Mozilla employee, over email in July 2022:
4426 Dzmitry was shown, and agreed to, the 'safe-to-deploy' text.
4427 """
4428
4429 [[audits.wgpu-core]]
4430 who = "Jim Blandy <jimb@mozilla.com>"
4431 criteria = "safe-to-deploy"
4432 delta = "0.12.0 -> 0.13.0"
4433
4434 [[audits.wgpu-core]]
4435 who = "Jim Blandy <jimb@red-bean.com>"
4436 criteria = "safe-to-deploy"
4437 delta = "0.13.0 -> 0.14.0"
4438 notes = "Audit by Erich Gubler, Jim Blandy, Nicolas Silva, and Teodor Tanasoaia."
4439
4440 [[audits.wgpu-core]]
4441 who = "Nicolas Silva <nical@fastmail.com>"
4442 criteria = "safe-to-deploy"
4443 delta = "0.14.0 -> 0.15.0"
4444
4445 [[audits.wgpu-core]]
4446 who = "Nicolas Silva <nical@fastmail.com>"
4447 criteria = "safe-to-deploy"
4448 delta = "0.15.0 -> 0.16.0"
4449
4450 [[audits.wgpu-core]]
4451 who = "Nicolas Silva <nical@fastmail.com>"
4452 criteria = "safe-to-deploy"
4453 delta = "0.16.0 -> 0.17.0"
4454
4455 [[audits.wgpu-core]]
4456 who = "Nicolas Silva <nical@fastmail.com>"
4457 criteria = "safe-to-deploy"
4458 delta = "0.17.0 -> 0.18.0"
4459
4460 [[audits.wgpu-core]]
4461 who = [
4462     "Teodor Tanasoaia <ttanasoaia@mozilla.com>",
4463     "Erich Gubler <erichdongubler@gmail.com>",
4464     "Jim Blandy <jimb@red-bean.com>",
4465     "Nicolas Silva <nical@fastmail.com>",
4466 ]
4467 criteria = "safe-to-deploy"
4468 delta = "0.18.0 -> 0.19.0@git:07e59eb6fc7de3f682f1c401b9cf9f0da9ee4b4a"
4469 importable = false
4470
4471 [[audits.wgpu-hal]]
4472 who = "Dzmitry Malyshau <kvark@fastmail.com>"
4473 criteria = "safe-to-deploy"
4474 version = "0.12.0"
4475 notes = """
4476 This crate, up through the indicated version, was written or reviewed
4477 by Dzmitry Malyshau while he was a Mozilla employee. Dzmitry left
4478 Mozilla at the beginning of February 2022. This audit statement was
4479 collected by Jim Blandy, a Mozilla employee, over email in July 2022:
4480 Dzmitry was shown, and agreed to, the 'safe-to-deploy' text.
4481 """
4482
4483 [[audits.wgpu-hal]]
4484 who = "Jim Blandy <jimb@mozilla.com>"
4485 criteria = "safe-to-deploy"
4486 delta = "0.12.0 -> 0.13.0"
4487
4488 [[audits.wgpu-hal]]
4489 who = "Jim Blandy <jimb@red-bean.com>"
4490 criteria = "safe-to-deploy"
4491 delta = "0.13.0 -> 0.14.0"
4492 notes = "Audit by Erich Gubler, Jim Blandy, Nicolas Silva, and Teodor Tanasoaia."
4493
4494 [[audits.wgpu-hal]]
4495 who = "Nicolas Silva <nical@fastmail.com>"
4496 criteria = "safe-to-deploy"
4497 delta = "0.14.0 -> 0.15.0"
4498
4499 [[audits.wgpu-hal]]
4500 who = "Nicolas Silva <nical@fastmail.com>"
4501 criteria = "safe-to-deploy"
4502 delta = "0.15.0 -> 0.16.0"
4503
4504 [[audits.wgpu-hal]]
4505 who = "Nicolas Silva <nical@fastmail.com>"
4506 criteria = "safe-to-deploy"
4507 delta = "0.16.0 -> 0.17.0"
4508
4509 [[audits.wgpu-hal]]
4510 who = "Nicolas Silva <nical@fastmail.com>"
4511 criteria = "safe-to-deploy"
4512 delta = "0.17.0 -> 0.18.0"
4513
4514 [[audits.wgpu-hal]]
4515 who = [
4516     "Teodor Tanasoaia <ttanasoaia@mozilla.com>",
4517     "Erich Gubler <erichdongubler@gmail.com>",
4518     "Jim Blandy <jimb@red-bean.com>",
4519     "Nicolas Silva <nical@fastmail.com>",
4520 ]
4521 criteria = "safe-to-deploy"
4522 delta = "0.18.0 -> 0.19.0@git:07e59eb6fc7de3f682f1c401b9cf9f0da9ee4b4a"
4523 importable = false
4524
4525 [[audits.wgpu-types]]
4526 who = "Dzmitry Malyshau <kvark@fastmail.com>"
4527 criteria = "safe-to-deploy"
4528 version = "0.12.0"
4529 notes = """
4530 This crate, up through the indicated version, was written or reviewed
4531 by Dzmitry Malyshau while he was a Mozilla employee. Dzmitry left
4532 Mozilla at the beginning of February 2022. This audit statement was
4533 collected by Jim Blandy, a Mozilla employee, over email in July 2022:
4534 Dzmitry was shown, and agreed to, the 'safe-to-deploy' text.
4535 """
4536
4537 [[audits.wgpu-types]]
4538 who = "Jim Blandy <jimb@mozilla.com>"
4539 criteria = "safe-to-deploy"
4540 delta = "0.12.0 -> 0.13.0"
4541
4542 [[audits.wgpu-types]]
4543 who = "Jim Blandy <jimb@red-bean.com>"
4544 criteria = "safe-to-deploy"
4545 delta = "0.13.0 -> 0.14.0"
4546 notes = "Audit by Erich Gubler, Jim Blandy, Nicolas Silva, and Teodor Tanasoaia."
4547
4548 [[audits.wgpu-types]]
4549 who = "Nicolas Silva <nical@fastmail.com>"
4550 criteria = "safe-to-deploy"
4551 delta = "0.14.0 -> 0.15.0"
4552
4553 [[audits.wgpu-types]]
4554 who = "Nicolas Silva <nical@fastmail.com>"
4555 criteria = "safe-to-deploy"
4556 delta = "0.15.0 -> 0.16.0"
4557
4558 [[audits.wgpu-types]]
4559 who = "Nicolas Silva <nical@fastmail.com>"
4560 criteria = "safe-to-deploy"
4561 delta = "0.16.0 -> 0.17.0"
4562
4563 [[audits.wgpu-types]]
4564 who = "Nicolas Silva <nical@fastmail.com>"
4565 criteria = "safe-to-deploy"
4566 delta = "0.17.0 -> 0.18.0"
4567
4568 [[audits.wgpu-types]]
4569 who = [
4570     "Teodor Tanasoaia <ttanasoaia@mozilla.com>",
4571     "Erich Gubler <erichdongubler@gmail.com>",
4572     "Jim Blandy <jimb@red-bean.com>",
4573     "Nicolas Silva <nical@fastmail.com>",
4574 ]
4575 criteria = "safe-to-deploy"
4576 delta = "0.18.0 -> 0.19.0@git:07e59eb6fc7de3f682f1c401b9cf9f0da9ee4b4a"
4577 importable = false
4578
4579 [[audits.whatsys]]
4580 who = "Bobby Holley <bobbyholley@gmail.com>"
4581 criteria = "safe-to-deploy"
4582 version = "0.1.2"
4583 notes = """
4584 Contains platform-specific FFI code for apple, mac, and windows. The windows code
4585 also contains a small C file compiled at build-time. I audited all of it and it
4586 looks correct.
4587 """
4588
4589 [[audits.whatsys]]
4590 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
4591 criteria = "safe-to-deploy"
4592 delta = "0.1.2 -> 0.3.1"
4593 notes = "Maintained by me. I have written or reviewed all of the code."
4594
4595 [[audits.winreg]]
4596 who = "Ray Kraesig <rkraesig@mozilla.com>"
4597 criteria = "safe-to-run"
4598 version = "0.10.1"
4599 notes = """
4600 This crate uses a lot of `unsafe`; not all of it is necessary, and not all of it
4601 is correct. (In particular, the alignment of data buffers does not seem to be
4602 correctly ensured at type-conversion time.) However, the code is not deceptive,
4603 and any more subtle issues do not appear to be exploitable -- certainly not from
4604 a test environment.
4605 """
4606
4607 [[audits.wpf-gpu-raster]]
4608 who = "Lee Salzman <lsalzman@mozilla.com>"
4609 criteria = "safe-to-deploy"
4610 version = "0.1.0"
4611 notes = "Written and maintained by Gfx team at Mozilla."
4612
4613 [[audits.writeable]]
4614 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
4615 criteria = "safe-to-deploy"
4616 version = "0.5.2"
4617 notes = "writeable is a variation of fmt::Write with sink version. This uses `unsafe` block to handle potentially-invalid UTF-8 character. I've vetted the one instance of unsafe code."
4618
4619 [[audits.writeable]]
4620 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
4621 criteria = "safe-to-deploy"
4622 delta = "0.5.2 -> 0.5.4"
4623
4624 [[audits.xmldecl]]
4625 who = "Henri Sivonen <hsivonen@hsivonen.fi>"
4626 criteria = "safe-to-deploy"
4627 version = "0.2.0"
4628 notes = "I, Henri Sivonen, wrote this crate myself for Gecko even though it's published on crates.io."
4629
4630 [[audits.yoke]]
4631 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
4632 criteria = "safe-to-deploy"
4633 version = "0.7.1"
4634 notes = "This crate is for zero-copy serialization for ICU4X data structure, and maintained by ICU4X team. Since this uses unsafe block for serialization, I audited code."
4635
4636 [[audits.yoke]]
4637 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
4638 criteria = "safe-to-deploy"
4639 delta = "0.7.1 -> 0.7.3"
4640
4641 [[audits.yoke-derive]]
4642 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
4643 criteria = "safe-to-deploy"
4644 version = "0.7.1@git:14e9a3a9857be74582abe2dfa7ab799c5eaac873"
4645 notes = "This crate is a helper for yoke crate that is ICU4X data structure, and maintained by ICU4X team. Since this uses unsafe block for serialization, all has the comment why this uses unsafe and I audited code."
4646
4647 [[audits.yoke-derive]]
4648 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
4649 criteria = "safe-to-deploy"
4650 version = "0.7.3"
4651
4652 [[audits.zerofrom]]
4653 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
4654 criteria = "safe-to-deploy"
4655 version = "0.1.2"
4656 notes = "This crate is zero-copy version of \"From\". This has no unsafe code and uses no ambient capabilities."
4657
4658 [[audits.zerofrom-derive]]
4659 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
4660 criteria = "safe-to-deploy"
4661 version = "0.1.2@git:14e9a3a9857be74582abe2dfa7ab799c5eaac873"
4662 notes = "This is custom derives for `ZeroFrom` that is from zerofrom crate. This has no unsafe code and uses no ambient capabilities."
4663
4664 [[audits.zerofrom-derive]]
4665 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
4666 criteria = "safe-to-deploy"
4667 version = "0.1.3"
4668
4669 [[audits.zerovec]]
4670 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
4671 criteria = "safe-to-deploy"
4672 version = "0.9.4"
4673 notes = "This crate is zero-copy data structure implmentation. Although this uses unsafe block in several code, it requires for zero-copy. And this has a comment in code why this uses unsafe and I audited code."
4674
4675 [[audits.zerovec]]
4676 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
4677 criteria = "safe-to-deploy"
4678 delta = "0.9.4 -> 0.10.1"
4679
4680 [[audits.zerovec-derive]]
4681 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
4682 criteria = "safe-to-deploy"
4683 version = "0.9.4@git:14e9a3a9857be74582abe2dfa7ab799c5eaac873"
4684 notes = "This is custom derives for `ZeroVec` that is from zerovec crate. Although this uses unsafe block for zero-copy, this has a comment in code why this uses unsafe and I audited code."
4685
4686 [[audits.zerovec-derive]]
4687 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
4688 criteria = "safe-to-deploy"
4689 version = "0.10.1"
4690
4691 [[audits.zip]]
4692 who = "Mike Hommey <mh+mozilla@glandium.org>"
4693 criteria = "safe-to-run"
4694 delta = "0.6.2 -> 0.6.3"
4695
4696 [[audits.zip]]
4697 who = "Mike Hommey <mh+mozilla@glandium.org>"
4698 criteria = "safe-to-run"
4699 delta = "0.6.3 -> 0.6.4"
4700
4701 [[trusted.aho-corasick]]
4702 criteria = "safe-to-deploy"
4703 user-id = 189 # Andrew Gallant (BurntSushi)
4704 start = "2019-03-28"
4705 end = "2024-05-03"
4706
4707 [[trusted.anstyle]]
4708 criteria = "safe-to-deploy"
4709 user-id = 6743 # Ed Page (epage)
4710 start = "2022-05-18"
4711 end = "2024-09-28"
4712
4713 [[trusted.async-trait]]
4714 criteria = "safe-to-deploy"
4715 user-id = 3618 # David Tolnay (dtolnay)
4716 start = "2019-07-23"
4717 end = "2024-04-25"
4718
4719 [[trusted.atomic]]
4720 criteria = "safe-to-deploy"
4721 user-id = 2915 # Amanieu d'Antras (Amanieu)
4722 start = "2019-02-22"
4723 end = "2024-05-05"
4724
4725 [[trusted.byteorder]]
4726 criteria = "safe-to-deploy"
4727 user-id = 189 # Andrew Gallant (BurntSushi)
4728 start = "2019-06-09"
4729 end = "2024-05-03"
4730
4731 [[trusted.bytes]]
4732 criteria = "safe-to-deploy"
4733 user-id = 6741 # Alice Ryhl (Darksonn)
4734 start = "2021-01-11"
4735 end = "2024-05-05"
4736
4737 [[trusted.clap]]
4738 criteria = "safe-to-deploy"
4739 user-id = 6743 # Ed Page (epage)
4740 start = "2021-12-08"
4741 end = "2024-06-02"
4742
4743 [[trusted.clap_builder]]
4744 criteria = "safe-to-deploy"
4745 user-id = 6743 # Ed Page (epage)
4746 start = "2023-03-28"
4747 end = "2024-06-02"
4748
4749 [[trusted.clap_derive]]
4750 criteria = "safe-to-deploy"
4751 user-id = 6743 # Ed Page (epage)
4752 start = "2021-12-08"
4753 end = "2024-06-02"
4754
4755 [[trusted.clap_lex]]
4756 criteria = "safe-to-deploy"
4757 user-id = 6743 # Ed Page (epage)
4758 start = "2022-04-15"
4759 end = "2024-06-02"
4760
4761 [[trusted.dtoa]]
4762 criteria = "safe-to-deploy"
4763 user-id = 3618 # David Tolnay (dtolnay)
4764 start = "2019-05-02"
4765 end = "2024-04-25"
4766
4767 [[trusted.equivalent]]
4768 criteria = "safe-to-deploy"
4769 user-id = 539 # Josh Stone (cuviper)
4770 start = "2023-02-05"
4771 end = "2024-07-17"
4772
4773 [[trusted.errno]]
4774 criteria = "safe-to-deploy"
4775 user-id = 6825 # Dan Gohman (sunfishcode)
4776 start = "2023-08-29"
4777 end = "2025-01-11"
4778
4779 [[trusted.flate2]]
4780 criteria = "safe-to-deploy"
4781 user-id = 4333 # Josh Triplett (joshtriplett)
4782 start = "2020-09-30"
4783 end = "2024-05-05"
4784
4785 [[trusted.h2]]
4786 criteria = "safe-to-deploy"
4787 user-id = 359 # Sean McArthur (seanmonstar)
4788 start = "2019-03-13"
4789 end = "2024-12-05"
4790
4791 [[trusted.hashbrown]]
4792 criteria = "safe-to-deploy"
4793 user-id = 2915 # Amanieu d'Antras (Amanieu)
4794 start = "2019-04-02"
4795 end = "2024-07-17"
4796
4797 [[trusted.headers]]
4798 criteria = "safe-to-deploy"
4799 user-id = 359 # Sean McArthur (seanmonstar)
4800 start = "2019-09-09"
4801 end = "2024-04-25"
4802
4803 [[trusted.httparse]]
4804 criteria = "safe-to-deploy"
4805 user-id = 359 # Sean McArthur (seanmonstar)
4806 start = "2019-07-03"
4807 end = "2024-04-25"
4808
4809 [[trusted.indexmap]]
4810 criteria = "safe-to-deploy"
4811 user-id = 539 # Josh Stone (cuviper)
4812 start = "2020-01-15"
4813 end = "2024-05-05"
4814
4815 [[trusted.inherent]]
4816 criteria = "safe-to-deploy"
4817 user-id = 3618 # David Tolnay (dtolnay)
4818 start = "2019-07-14"
4819 end = "2024-04-25"
4820
4821 [[trusted.iovec]]
4822 criteria = "safe-to-deploy"
4823 user-id = 10 # Carl Lerche (carllerche)
4824 start = "2019-10-09"
4825 end = "2024-05-05"
4826
4827 [[trusted.itoa]]
4828 criteria = "safe-to-deploy"
4829 user-id = 3618 # David Tolnay (dtolnay)
4830 start = "2019-05-02"
4831 end = "2024-04-25"
4832
4833 [[trusted.jobserver]]
4834 criteria = "safe-to-deploy"
4835 user-id = 1 # Alex Crichton (alexcrichton)
4836 start = "2019-03-15"
4837 end = "2024-05-05"
4838
4839 [[trusted.libc]]
4840 criteria = "safe-to-deploy"
4841 user-id = 2915 # Amanieu d'Antras (Amanieu)
4842 start = "2021-01-27"
4843 end = "2024-05-05"
4844
4845 [[trusted.libc]]
4846 criteria = "safe-to-deploy"
4847 user-id = 51017 # Yuki Okushi (JohnTitor)
4848 start = "2020-03-17"
4849 end = "2024-10-25"
4850
4851 [[trusted.linux-raw-sys]]
4852 criteria = "safe-to-deploy"
4853 user-id = 6825 # Dan Gohman (sunfishcode)
4854 start = "2021-06-12"
4855 end = "2024-09-08"
4856
4857 [[trusted.lock_api]]
4858 criteria = "safe-to-deploy"
4859 user-id = 2915 # Amanieu d'Antras (Amanieu)
4860 start = "2019-05-04"
4861 end = "2024-05-05"
4862
4863 [[trusted.memchr]]
4864 criteria = "safe-to-deploy"
4865 user-id = 189 # Andrew Gallant (BurntSushi)
4866 start = "2019-07-07"
4867 end = "2024-05-03"
4868
4869 [[trusted.mime]]
4870 criteria = "safe-to-deploy"
4871 user-id = 359 # Sean McArthur (seanmonstar)
4872 start = "2019-09-09"
4873 end = "2024-04-25"
4874
4875 [[trusted.mio]]
4876 criteria = "safe-to-deploy"
4877 user-id = 10 # Carl Lerche (carllerche)
4878 start = "2019-05-15"
4879 end = "2024-05-06"
4880
4881 [[trusted.num_cpus]]
4882 criteria = "safe-to-deploy"
4883 user-id = 359 # Sean McArthur (seanmonstar)
4884 start = "2019-06-10"
4885 end = "2024-04-25"
4886
4887 [[trusted.ordered-float]]
4888 criteria = "safe-to-deploy"
4889 user-id = 2017 # Matt Brubeck (mbrubeck)
4890 start = "2019-03-13"
4891 end = "2024-05-06"
4892
4893 [[trusted.parking_lot]]
4894 criteria = "safe-to-deploy"
4895 user-id = 2915 # Amanieu d'Antras (Amanieu)
4896 start = "2019-05-04"
4897 end = "2024-05-05"
4898
4899 [[trusted.parking_lot_core]]
4900 criteria = "safe-to-deploy"
4901 user-id = 2915 # Amanieu d'Antras (Amanieu)
4902 start = "2019-05-04"
4903 end = "2024-05-05"
4904
4905 [[trusted.paste]]
4906 criteria = "safe-to-deploy"
4907 user-id = 3618 # David Tolnay (dtolnay)
4908 start = "2019-03-19"
4909 end = "2024-04-25"
4910
4911 [[trusted.proc-macro-hack]]
4912 criteria = "safe-to-deploy"
4913 user-id = 3618 # David Tolnay (dtolnay)
4914 start = "2019-04-16"
4915 end = "2024-04-25"
4916
4917 [[trusted.proc-macro2]]
4918 criteria = "safe-to-deploy"
4919 user-id = 3618 # David Tolnay (dtolnay)
4920 start = "2019-04-23"
4921 end = "2024-05-30"
4922
4923 [[trusted.quote]]
4924 criteria = "safe-to-deploy"
4925 user-id = 3618 # David Tolnay (dtolnay)
4926 start = "2019-04-09"
4927 end = "2024-05-30"
4928
4929 [[trusted.regex]]
4930 criteria = "safe-to-deploy"
4931 user-id = 189 # Andrew Gallant (BurntSushi)
4932 start = "2019-02-27"
4933 end = "2024-05-03"
4934
4935 [[trusted.regex-automata]]
4936 criteria = "safe-to-deploy"
4937 user-id = 189 # Andrew Gallant (BurntSushi)
4938 start = "2019-02-25"
4939 end = "2024-09-20"
4940
4941 [[trusted.regex-syntax]]
4942 criteria = "safe-to-deploy"
4943 user-id = 189 # Andrew Gallant (BurntSushi)
4944 start = "2019-03-30"
4945 end = "2024-05-03"
4946
4947 [[trusted.rustix]]
4948 criteria = "safe-to-deploy"
4949 user-id = 6825 # Dan Gohman (sunfishcode)
4950 start = "2021-10-29"
4951 end = "2024-09-08"
4952
4953 [[trusted.ryu]]
4954 criteria = "safe-to-deploy"
4955 user-id = 3618 # David Tolnay (dtolnay)
4956 start = "2019-05-02"
4957 end = "2024-04-25"
4958
4959 [[trusted.same-file]]
4960 criteria = "safe-to-deploy"
4961 user-id = 189 # Andrew Gallant (BurntSushi)
4962 start = "2019-07-16"
4963 end = "2024-05-03"
4964
4965 [[trusted.scopeguard]]
4966 criteria = "safe-to-deploy"
4967 user-id = 2915 # Amanieu d'Antras (Amanieu)
4968 start = "2020-02-16"
4969 end = "2024-05-05"
4970
4971 [[trusted.serde]]
4972 criteria = "safe-to-deploy"
4973 user-id = 3618 # David Tolnay (dtolnay)
4974 start = "2019-03-01"
4975 end = "2024-04-25"
4976
4977 [[trusted.serde_bytes]]
4978 criteria = "safe-to-deploy"
4979 user-id = 3618 # David Tolnay (dtolnay)
4980 start = "2019-02-25"
4981 end = "2024-04-25"
4982
4983 [[trusted.serde_derive]]
4984 criteria = "safe-to-deploy"
4985 user-id = 3618 # David Tolnay (dtolnay)
4986 start = "2019-03-01"
4987 end = "2024-04-25"
4988
4989 [[trusted.serde_json]]
4990 criteria = "safe-to-deploy"
4991 user-id = 3618 # David Tolnay (dtolnay)
4992 start = "2019-02-28"
4993 end = "2024-04-25"
4994
4995 [[trusted.serde_repr]]
4996 criteria = "safe-to-deploy"
4997 user-id = 3618 # David Tolnay (dtolnay)
4998 start = "2019-04-26"
4999 end = "2024-04-25"
5000
5001 [[trusted.serde_yaml]]
5002 criteria = "safe-to-deploy"
5003 user-id = 3618 # David Tolnay (dtolnay)
5004 start = "2019-05-02"
5005 end = "2024-04-25"
5006
5007 [[trusted.smallvec]]
5008 criteria = "safe-to-deploy"
5009 user-id = 2017 # Matt Brubeck (mbrubeck)
5010 start = "2019-10-28"
5011 end = "2024-05-06"
5012
5013 [[trusted.syn]]
5014 criteria = "safe-to-deploy"
5015 user-id = 3618 # David Tolnay (dtolnay)
5016 start = "2019-03-01"
5017 end = "2024-04-25"
5018
5019 [[trusted.termcolor]]
5020 criteria = "safe-to-deploy"
5021 user-id = 189 # Andrew Gallant (BurntSushi)
5022 start = "2019-06-04"
5023 end = "2024-05-03"
5024
5025 [[trusted.thiserror]]
5026 criteria = "safe-to-deploy"
5027 user-id = 3618 # David Tolnay (dtolnay)
5028 start = "2019-10-09"
5029 end = "2024-04-25"
5030
5031 [[trusted.thiserror-impl]]
5032 criteria = "safe-to-deploy"
5033 user-id = 3618 # David Tolnay (dtolnay)
5034 start = "2019-10-09"
5035 end = "2024-04-25"
5036
5037 [[trusted.threadbound]]
5038 criteria = "safe-to-deploy"
5039 user-id = 3618 # David Tolnay (dtolnay)
5040 start = "2020-06-16"
5041 end = "2024-04-25"
5042
5043 [[trusted.tokio-macros]]
5044 criteria = "safe-to-deploy"
5045 user-id = 6741 # Alice Ryhl (Darksonn)
5046 start = "2020-10-26"
5047 end = "2024-05-05"
5048
5049 [[trusted.tokio-util]]
5050 criteria = "safe-to-deploy"
5051 user-id = 6741 # Alice Ryhl (Darksonn)
5052 start = "2021-01-12"
5053 end = "2024-05-05"
5054
5055 [[trusted.toml]]
5056 criteria = "safe-to-deploy"
5057 user-id = 1 # Alex Crichton (alexcrichton)
5058 start = "2019-05-16"
5059 end = "2024-05-06"
5060
5061 [[trusted.unicode-ident]]
5062 criteria = "safe-to-deploy"
5063 user-id = 3618 # David Tolnay (dtolnay)
5064 start = "2021-10-02"
5065 end = "2024-04-25"
5066
5067 [[trusted.walkdir]]
5068 criteria = "safe-to-deploy"
5069 user-id = 189 # Andrew Gallant (BurntSushi)
5070 start = "2019-06-09"
5071 end = "2024-05-03"
5072
5073 [[trusted.warp]]
5074 criteria = "safe-to-deploy"
5075 user-id = 359 # Sean McArthur (seanmonstar)
5076 start = "2019-03-20"
5077 end = "2024-05-08"
5078
5079 [[trusted.wasi]]
5080 criteria = "safe-to-deploy"
5081 user-id = 1 # Alex Crichton (alexcrichton)
5082 start = "2020-06-03"
5083 end = "2024-05-05"
5084
5085 [[trusted.winapi-util]]
5086 criteria = "safe-to-deploy"
5087 user-id = 189 # Andrew Gallant (BurntSushi)
5088 start = "2020-01-11"
5089 end = "2024-05-03"
5090
5091 [[trusted.windows]]
5092 criteria = "safe-to-deploy"
5093 user-id = 64539 # Kenny Kerr (kennykerr)
5094 start = "2021-01-15"
5095 end = "2025-01-30"
5096
5097 [[trusted.windows-core]]
5098 criteria = "safe-to-deploy"
5099 user-id = 64539 # Kenny Kerr (kennykerr)
5100 start = "2021-11-15"
5101 end = "2024-09-20"
5102
5103 [[trusted.windows-sys]]
5104 criteria = "safe-to-deploy"
5105 user-id = 64539 # Kenny Kerr (kennykerr)
5106 start = "2021-11-15"
5107 end = "2024-09-12"