2 # cargo-vet imports lock
4 [[audits.bytecodealliance.audits.arbitrary]]
5 who = "Nick Fitzgerald <fitzgen@gmail.com>"
6 criteria = "safe-to-deploy"
8 notes = "I am the author of this crate."
10 [[audits.bytecodealliance.audits.arbitrary]]
11 who = "Nick Fitzgerald <fitzgen@gmail.com>"
12 criteria = "safe-to-deploy"
14 notes = "I am the author of this crate."
16 [[audits.bytecodealliance.audits.arrayref]]
17 who = "Nick Fitzgerald <fitzgen@gmail.com>"
18 criteria = "safe-to-deploy"
21 Unsafe code, but its logic looks good to me. Necessary given what it is
22 doing. Well tested, has quickchecks.
25 [[audits.bytecodealliance.audits.arrayvec]]
26 who = "Nick Fitzgerald <fitzgen@gmail.com>"
27 criteria = "safe-to-deploy"
30 Well documented invariants, good assertions for those invariants in unsafe code,
31 and tested with MIRI to boot. LGTM.
34 [[audits.bytecodealliance.audits.atty]]
35 who = "Alex Crichton <alex@alexcrichton.com>"
36 criteria = "safe-to-deploy"
39 Contains only unsafe code for what this crate's purpose is and only accesses
40 the environment's terminal information when asked. Does its stated purpose and
44 [[audits.bytecodealliance.audits.bumpalo]]
45 who = "Nick Fitzgerald <fitzgen@gmail.com>"
46 criteria = "safe-to-deploy"
48 notes = "I am the author of this crate."
50 [[audits.bytecodealliance.audits.bumpalo]]
51 who = "Nick Fitzgerald <fitzgen@gmail.com>"
52 criteria = "safe-to-deploy"
54 notes = "I am the author of this crate."
56 [[audits.bytecodealliance.audits.cc]]
57 who = "Alex Crichton <alex@alexcrichton.com>"
58 criteria = "safe-to-deploy"
60 notes = "I am the author of this crate."
62 [[audits.bytecodealliance.audits.cfg-if]]
63 who = "Alex Crichton <alex@alexcrichton.com>"
64 criteria = "safe-to-deploy"
66 notes = "I am the author of this crate."
68 [[audits.bytecodealliance.audits.codespan-reporting]]
69 who = "Jamey Sharp <jsharp@fastly.com>"
70 criteria = "safe-to-deploy"
72 notes = "This library uses `forbid(unsafe_code)` and has no filesystem or network I/O."
74 [[audits.bytecodealliance.audits.crypto-common]]
75 who = "Benjamin Bouvier <public@benj.me>"
76 criteria = "safe-to-deploy"
79 [[audits.bytecodealliance.audits.derive_arbitrary]]
80 who = "Nick Fitzgerald <fitzgen@gmail.com>"
81 criteria = "safe-to-deploy"
83 notes = "I am the author of this crate."
85 [[audits.bytecodealliance.audits.derive_arbitrary]]
86 who = "Nick Fitzgerald <fitzgen@gmail.com>"
87 criteria = "safe-to-deploy"
89 notes = "I am the author of this crate."
91 [[audits.bytecodealliance.audits.form_urlencoded]]
92 who = "Alex Crichton <alex@alexcrichton.com>"
93 criteria = "safe-to-deploy"
96 This is a small crate for working with url-encoded forms which doesn't have any
97 more than what it says on the tin. Contains one `unsafe` block related to
98 performance around utf-8 validation which is fairly easy to verify as correct.
101 [[audits.bytecodealliance.audits.heck]]
102 who = "Alex Crichton <alex@alexcrichton.com>"
103 criteria = "safe-to-deploy"
105 notes = "Contains `forbid_unsafe` and only uses `std::fmt` from the standard library. Otherwise only contains string manipulation."
107 [[audits.bytecodealliance.audits.id-arena]]
108 who = "Nick Fitzgerald <fitzgen@gmail.com>"
109 criteria = "safe-to-deploy"
111 notes = "I am the author of this crate."
113 [[audits.bytecodealliance.audits.leb128]]
114 who = "Nick Fitzgerald <fitzgen@gmail.com>"
115 criteria = "safe-to-deploy"
117 notes = "I am the author of this crate."
119 [[audits.bytecodealliance.audits.percent-encoding]]
120 who = "Alex Crichton <alex@alexcrichton.com>"
121 criteria = "safe-to-deploy"
124 This crate is a single-file crate that does what it says on the tin. There are
125 a few `unsafe` blocks related to utf-8 validation which are locally verifiable
126 as correct and otherwise this crate is good to go.
129 [[audits.bytecodealliance.audits.rustc-demangle]]
130 who = "Alex Crichton <alex@alexcrichton.com>"
131 criteria = "safe-to-deploy"
133 notes = "I am the author of this crate."
135 [[audits.bytecodealliance.audits.unicase]]
136 who = "Alex Crichton <alex@alexcrichton.com>"
137 criteria = "safe-to-deploy"
140 This crate contains no `unsafe` code and no unnecessary use of the standard
144 [[audits.bytecodealliance.audits.unicode-bidi]]
145 who = "Alex Crichton <alex@alexcrichton.com>"
146 criteria = "safe-to-deploy"
149 This crate has no unsafe code and does not use `std::*`. Skimming the crate it
150 does not attempt to out of the bounds of what it's already supposed to be doing.
153 [[audits.bytecodealliance.audits.unicode-normalization]]
154 who = "Alex Crichton <alex@alexcrichton.com>"
155 criteria = "safe-to-deploy"
158 This crate contains one usage of `unsafe` which I have manually checked to see
159 it as correct. This crate's size comes in large part due to the generated
160 unicode tables that it contains. This crate is additionally widely used
161 throughout the ecosystem and skimming the crate shows no usage of `std::*` APIs
162 and nothing suspicious.
165 [[audits.bytecodealliance.audits.wasm-encoder]]
166 who = "Alex Crichton <alex@alexcrichton.com>"
167 criteria = "safe-to-deploy"
169 notes = "The Bytecode Alliance is the author of this crate."
171 [[audits.bytecodealliance.audits.wasm-encoder]]
172 who = "Alex Crichton <alex@alexcrichton.com>"
173 criteria = "safe-to-deploy"
175 notes = "The Bytecode Alliance is the author of this crate."
177 [[audits.bytecodealliance.audits.wasm-encoder]]
178 who = "Alex Crichton <alex@alexcrichton.com>"
179 criteria = "safe-to-deploy"
181 notes = "The Bytecode Alliance is the author of this crate."
183 [[audits.bytecodealliance.audits.wasm-encoder]]
184 who = "Alex Crichton <alex@alexcrichton.com>"
185 criteria = "safe-to-deploy"
187 notes = "The Bytecode Alliance is the author of this crate."
189 [[audits.bytecodealliance.audits.wasm-encoder]]
190 who = "Alex Crichton <alex@alexcrichton.com>"
191 criteria = "safe-to-deploy"
193 notes = "The Bytecode Alliance is the author of this crate."
195 [[audits.bytecodealliance.audits.wasm-encoder]]
196 who = "Alex Crichton <alex@alexcrichton.com>"
197 criteria = "safe-to-deploy"
199 notes = "The Bytecode Alliance is the author of this crate."
201 [[audits.bytecodealliance.audits.wasm-encoder]]
202 who = "Alex Crichton <alex@alexcrichton.com>"
203 criteria = "safe-to-deploy"
205 notes = "The Bytecode Alliance is the author of this crate."
207 [[audits.bytecodealliance.audits.wasm-encoder]]
208 who = "Alex Crichton <alex@alexcrichton.com>"
209 criteria = "safe-to-deploy"
211 notes = "The Bytecode Alliance is the author of this crate."
213 [[audits.bytecodealliance.audits.wasm-encoder]]
214 who = "Alex Crichton <alex@alexcrichton.com>"
215 criteria = "safe-to-deploy"
217 notes = "The Bytecode Alliance is the author of this crate."
219 [[audits.bytecodealliance.audits.wasm-encoder]]
220 who = "Alex Crichton <alex@alexcrichton.com>"
221 criteria = "safe-to-deploy"
223 notes = "The Bytecode Alliance is the author of this crate."
225 [[audits.bytecodealliance.audits.wasm-encoder]]
226 who = "Alex Crichton <alex@alexcrichton.com>"
227 criteria = "safe-to-deploy"
228 delta = "0.19.0 -> 0.19.1"
229 notes = "The Bytecode Alliance is the author of this crate."
231 [[audits.bytecodealliance.audits.wasm-smith]]
232 who = "Alex Crichton <alex@alexcrichton.com>"
233 criteria = "safe-to-deploy"
235 notes = "The Bytecode Alliance is the author of this crate."
237 [[audits.bytecodealliance.audits.wasm-smith]]
238 who = "Alex Crichton <alex@alexcrichton.com>"
239 criteria = "safe-to-deploy"
241 notes = "The Bytecode Alliance is the author of this crate."
243 [[audits.bytecodealliance.audits.wasm-smith]]
244 who = "Alex Crichton <alex@alexcrichton.com>"
245 criteria = "safe-to-deploy"
247 notes = "The Bytecode Alliance is the author of this crate."
249 [[audits.bytecodealliance.audits.wasm-smith]]
250 who = "Alex Crichton <alex@alexcrichton.com>"
251 criteria = "safe-to-deploy"
253 notes = "The Bytecode Alliance is the author of this crate."
255 [[audits.bytecodealliance.audits.wasm-smith]]
256 who = "Alex Crichton <alex@alexcrichton.com>"
257 criteria = "safe-to-deploy"
259 notes = "The Bytecode Alliance is the author of this crate."
261 [[audits.bytecodealliance.audits.wasm-smith]]
262 who = "Alex Crichton <alex@alexcrichton.com>"
263 criteria = "safe-to-run"
265 notes = "The Bytecode Alliance is the author of this crate."
267 [[audits.bytecodealliance.audits.wasm-smith]]
268 who = "Alex Crichton <alex@alexcrichton.com>"
269 criteria = "safe-to-run"
271 notes = "The Bytecode Alliance is the author of this crate."
273 [[audits.bytecodealliance.audits.wasm-smith]]
274 who = "Alex Crichton <alex@alexcrichton.com>"
275 criteria = "safe-to-run"
277 notes = "The Bytecode Alliance is the author of this crate."
279 [[audits.bytecodealliance.audits.wasm-smith]]
280 who = "Alex Crichton <alex@alexcrichton.com>"
281 criteria = "safe-to-run"
283 notes = "The Bytecode Alliance is the author of this crate."
285 [[audits.bytecodealliance.audits.wasm-smith]]
286 who = "Alex Crichton <alex@alexcrichton.com>"
287 criteria = "safe-to-run"
289 notes = "The Bytecode Alliance is the author of this crate."
291 [[audits.bytecodealliance.audits.wasm-smith]]
292 who = "Alex Crichton <alex@alexcrichton.com>"
293 criteria = "safe-to-run"
295 notes = "The Bytecode Alliance is the author of this crate."
297 [[audits.bytecodealliance.audits.wasm-smith]]
298 who = "Alex Crichton <alex@alexcrichton.com>"
299 criteria = "safe-to-run"
301 notes = "The Bytecode Alliance is the author of this crate."
303 [[audits.bytecodealliance.audits.wasmparser]]
304 who = "Alex Crichton <alex@alexcrichton.com>"
305 criteria = "safe-to-deploy"
307 notes = "The Bytecode Alliance is the author of this crate."
309 [[audits.bytecodealliance.audits.wasmparser]]
310 who = "Alex Crichton <alex@alexcrichton.com>"
311 criteria = "safe-to-deploy"
313 notes = "The Bytecode Alliance is the author of this crate."
315 [[audits.bytecodealliance.audits.wasmparser]]
316 who = "Alex Crichton <alex@alexcrichton.com>"
317 criteria = "safe-to-deploy"
319 notes = "The Bytecode Alliance is the author of this crate."
321 [[audits.bytecodealliance.audits.wasmparser]]
322 who = "Alex Crichton <alex@alexcrichton.com>"
323 criteria = "safe-to-deploy"
325 notes = "The Bytecode Alliance is the author of this crate."
327 [[audits.bytecodealliance.audits.wasmparser]]
328 who = "Alex Crichton <alex@alexcrichton.com>"
329 criteria = "safe-to-deploy"
331 notes = "The Bytecode Alliance is the author of this crate."
333 [[audits.bytecodealliance.audits.wasmparser]]
334 who = "Alex Crichton <alex@alexcrichton.com>"
335 criteria = "safe-to-deploy"
337 notes = "The Bytecode Alliance is the author of this crate."
339 [[audits.bytecodealliance.audits.wasmparser]]
340 who = "Alex Crichton <alex@alexcrichton.com>"
341 criteria = "safe-to-deploy"
343 notes = "The Bytecode Alliance is the author of this crate."
345 [[audits.bytecodealliance.audits.wasmparser]]
346 who = "Alex Crichton <alex@alexcrichton.com>"
347 criteria = "safe-to-deploy"
349 notes = "The Bytecode Alliance is the author of this crate."
351 [[audits.bytecodealliance.audits.wasmparser]]
352 who = "Alex Crichton <alex@alexcrichton.com>"
353 criteria = "safe-to-deploy"
355 notes = "The Bytecode Alliance is the author of this crate."
357 [[audits.bytecodealliance.audits.wasmparser]]
358 who = "Alex Crichton <alex@alexcrichton.com>"
359 criteria = "safe-to-deploy"
361 notes = "The Bytecode Alliance is the author of this crate."
363 [[audits.bytecodealliance.audits.wasmparser]]
364 who = "Alex Crichton <alex@alexcrichton.com>"
365 criteria = "safe-to-deploy"
367 notes = "The Bytecode Alliance is the author of this crate."
369 [[audits.bytecodealliance.audits.wasmparser]]
370 who = "Alex Crichton <alex@alexcrichton.com>"
371 criteria = "safe-to-deploy"
373 notes = "The Bytecode Alliance is the author of this crate."
375 [[audits.bytecodealliance.audits.wasmparser]]
376 who = "Alex Crichton <alex@alexcrichton.com>"
377 criteria = "safe-to-deploy"
379 notes = "The Bytecode Alliance is the author of this crate."
381 [[audits.bytecodealliance.audits.wast]]
382 who = "Alex Crichton <alex@alexcrichton.com>"
383 criteria = "safe-to-deploy"
385 notes = "The Bytecode Alliance is the author of this crate."
387 [[audits.bytecodealliance.audits.wast]]
388 who = "Alex Crichton <alex@alexcrichton.com>"
389 criteria = "safe-to-deploy"
391 notes = "The Bytecode Alliance is the author of this crate"
393 [[audits.bytecodealliance.audits.wast]]
394 who = "Alex Crichton <alex@alexcrichton.com>"
395 criteria = "safe-to-deploy"
397 notes = "The Bytecode Alliance is the author of this crate"
399 [[audits.bytecodealliance.audits.wast]]
400 who = "Alex Crichton <alex@alexcrichton.com>"
401 criteria = "safe-to-deploy"
403 notes = "The Bytecode Alliance is the author of this crate."
405 [[audits.bytecodealliance.audits.wast]]
406 who = "Alex Crichton <alex@alexcrichton.com>"
407 criteria = "safe-to-deploy"
409 notes = "The Bytecode Alliance is the author of this crate."
411 [[audits.bytecodealliance.audits.wast]]
412 who = "Alex Crichton <alex@alexcrichton.com>"
413 criteria = "safe-to-deploy"
415 notes = "The Bytecode Alliance is the author of this crate."
417 [[audits.bytecodealliance.audits.wast]]
418 who = "Alex Crichton <alex@alexcrichton.com>"
419 criteria = "safe-to-deploy"
421 notes = "The Bytecode Alliance is the author of this crate."
423 [[audits.bytecodealliance.audits.wast]]
424 who = "Alex Crichton <alex@alexcrichton.com>"
425 criteria = "safe-to-deploy"
427 notes = "The Bytecode Alliance is the author of this crate."
429 [[audits.bytecodealliance.audits.wast]]
430 who = "Alex Crichton <alex@alexcrichton.com>"
431 criteria = "safe-to-deploy"
433 notes = "The Bytecode Alliance is the author of this crate."
435 [[audits.bytecodealliance.audits.wast]]
436 who = "Alex Crichton <alex@alexcrichton.com>"
437 criteria = "safe-to-deploy"
439 notes = "The Bytecode Alliance is the author of this crate."
441 [[audits.bytecodealliance.audits.wast]]
442 who = "Alex Crichton <alex@alexcrichton.com>"
443 criteria = "safe-to-deploy"
445 notes = "The Bytecode Alliance is the author of this crate."
447 [[audits.bytecodealliance.audits.wast]]
448 who = "Alex Crichton <alex@alexcrichton.com>"
449 criteria = "safe-to-deploy"
451 notes = "The Bytecode Alliance is the author of this crate."
453 [audits.chromeos.criteria.crypto-safe]
455 All crypto algorithms in this crate have been reviewed by a relevant expert.
457 **Note**: If a crate does not implement crypto, use `does-not-implement-crypto`,
458 which implies `crypto-safe`, but does not require expert review in order to
461 [audits.chromeos.criteria.does-not-implement-crypto]
463 Inspection reveals that the crate in question does not attempt to implement any
464 cryptographic algorithms on its own.
466 Note that certification of this does not require an expert on all forms of
467 cryptography: it's expected for crates we import to be \"good enough\" citizens,
468 so they'll at least be forthcoming if they try to implement something
469 cryptographic. When in doubt, please ask an expert."""
470 implies = "crypto-safe"
472 [audits.chromeos.criteria.rule-of-two-safe-to-deploy]
474 This is a stronger requirement than the built-in safe-to-deploy criteria,
475 motivated by Chromium's rule-of-two related requirements:
476 https://chromium.googlesource.com/chromium/src/+/master/docs/security/rule-of-2.md#unsafe-code-in-safe-languages
478 This crate will not introduce a serious security vulnerability to production
479 software exposed to untrusted input.
481 Auditors are not required to perform a full logic review of the entire crate.
482 Rather, they must review enough to fully reason about the behavior of all unsafe
483 blocks and usage of powerful imports. For any reasonable usage of the crate in
484 real-world software, an attacker must not be able to manipulate the runtime
485 behavior of these sections in an exploitable or surprising way.
487 Ideally, ambient capabilities (e.g. filesystem access) are hardened against
488 manipulation and consistent with the advertised behavior of the crate. However,
489 some discretion is permitted. In such cases, the nature of the discretion should
490 be recorded in the `notes` field of the audit record.
492 Any unsafe code in this crate must, in general, be kept well-contained, and
493 documentation must exist to describe how Rust's invariants are being upheld
494 despite the unsafe block(s). Nontrivial uses of unsafe must be reviewed by an
495 expert in Rust's unsafety guarantees/non-guarantees.
497 For crates which generate deployed code (e.g. build dependencies or procedural
498 macros), reasonable usage of the crate should output code which meets the above
500 implies = "safe-to-deploy"
502 [[audits.chromeos.audits.aho-corasick]]
503 who = "Android Legacy"
504 criteria = "safe-to-run"
507 [[audits.chromeos.audits.anyhow]]
509 criteria = ["safe-to-run", "does-not-implement-crypto"]
512 [[audits.chromeos.audits.arbitrary]]
514 criteria = ["safe-to-run", "does-not-implement-crypto"]
517 [[audits.chromeos.audits.arbitrary]]
519 criteria = ["safe-to-run", "does-not-implement-crypto"]
522 [[audits.chromeos.audits.async-trait]]
523 who = "Android Legacy"
524 criteria = "safe-to-run"
527 [[audits.chromeos.audits.async-trait]]
528 who = "Android Legacy"
529 criteria = ["safe-to-run", "does-not-implement-crypto"]
532 [[audits.chromeos.audits.atty]]
533 who = "Android Legacy"
534 criteria = "safe-to-run"
537 [[audits.chromeos.audits.autocfg]]
539 criteria = ["safe-to-run", "does-not-implement-crypto"]
542 [[audits.chromeos.audits.base64]]
543 who = "Android Legacy"
544 criteria = "safe-to-run"
547 [[audits.chromeos.audits.bindgen]]
548 who = "Android Legacy"
549 criteria = "safe-to-run"
552 [[audits.chromeos.audits.bindgen]]
554 criteria = ["safe-to-run", "does-not-implement-crypto"]
557 [[audits.chromeos.audits.bindgen]]
559 criteria = ["safe-to-run", "does-not-implement-crypto"]
562 [[audits.chromeos.audits.bitflags]]
563 who = "Android Legacy"
564 criteria = "safe-to-run"
567 [[audits.chromeos.audits.bitreader]]
569 criteria = "safe-to-run"
572 [[audits.chromeos.audits.bytes]]
574 criteria = ["safe-to-run", "does-not-implement-crypto"]
577 [[audits.chromeos.audits.bytes]]
578 who = "Android Legacy"
579 criteria = "safe-to-run"
582 [[audits.chromeos.audits.cexpr]]
583 who = "Android Legacy"
584 criteria = "safe-to-run"
587 [[audits.chromeos.audits.cexpr]]
588 who = "Android Legacy"
589 criteria = "safe-to-run"
592 [[audits.chromeos.audits.cfg-if]]
593 who = "Android Legacy"
594 criteria = "safe-to-run"
597 [[audits.chromeos.audits.chrono]]
599 criteria = ["safe-to-run", "does-not-implement-crypto"]
602 [[audits.chromeos.audits.clang-sys]]
603 who = "Android Legacy"
604 criteria = "safe-to-run"
607 [[audits.chromeos.audits.clap]]
608 who = "Android Legacy"
609 criteria = "safe-to-run"
612 [[audits.chromeos.audits.clap]]
614 criteria = ["safe-to-run", "does-not-implement-crypto"]
617 [[audits.chromeos.audits.clap_derive]]
619 criteria = ["safe-to-run", "does-not-implement-crypto"]
622 [[audits.chromeos.audits.clap_lex]]
624 criteria = "safe-to-run"
627 [[audits.chromeos.audits.cmake]]
629 criteria = "safe-to-run"
632 [[audits.chromeos.audits.cmake]]
634 criteria = "safe-to-run"
637 [[audits.chromeos.audits.cty]]
639 criteria = ["safe-to-run", "does-not-implement-crypto"]
642 [[audits.chromeos.audits.dbus]]
643 who = "ChromeOS Legacy"
644 criteria = "safe-to-run"
647 [[audits.chromeos.audits.env_logger]]
648 who = "Android Legacy"
649 criteria = "safe-to-run"
652 [[audits.chromeos.audits.error-chain]]
654 criteria = "safe-to-run"
657 [[audits.chromeos.audits.euclid]]
659 criteria = "safe-to-run"
662 [[audits.chromeos.audits.futures]]
663 who = "Android Legacy"
664 criteria = "safe-to-run"
667 [[audits.chromeos.audits.futures-channel]]
668 who = "Android Legacy"
669 criteria = "safe-to-run"
672 [[audits.chromeos.audits.futures-core]]
673 who = "Android Legacy"
674 criteria = "safe-to-run"
677 [[audits.chromeos.audits.futures-executor]]
678 who = "Android Legacy"
679 criteria = "safe-to-run"
682 [[audits.chromeos.audits.futures-io]]
683 who = "Android Legacy"
684 criteria = "safe-to-run"
687 [[audits.chromeos.audits.futures-macro]]
688 who = "Android Legacy"
689 criteria = "safe-to-run"
692 [[audits.chromeos.audits.futures-sink]]
693 who = "Android Legacy"
694 criteria = "safe-to-run"
697 [[audits.chromeos.audits.futures-task]]
698 who = "Android Legacy"
699 criteria = "safe-to-run"
702 [[audits.chromeos.audits.futures-util]]
703 who = "Android Legacy"
704 criteria = "safe-to-run"
707 [[audits.chromeos.audits.getrandom]]
708 who = "Android Legacy"
709 criteria = "safe-to-run"
712 [[audits.chromeos.audits.getrandom]]
713 who = "Android Legacy"
714 criteria = "safe-to-run"
717 [[audits.chromeos.audits.glob]]
718 who = "Android Legacy"
719 criteria = "safe-to-run"
722 [[audits.chromeos.audits.h2]]
724 criteria = "safe-to-run"
727 [[audits.chromeos.audits.heck]]
729 criteria = ["safe-to-run", "does-not-implement-crypto"]
732 [[audits.chromeos.audits.hex]]
734 criteria = ["safe-to-run", "does-not-implement-crypto"]
737 [[audits.chromeos.audits.http]]
739 criteria = "safe-to-run"
742 [[audits.chromeos.audits.http-body]]
744 criteria = "safe-to-run"
747 [[audits.chromeos.audits.httpdate]]
749 criteria = "safe-to-run"
752 [[audits.chromeos.audits.hyper]]
754 criteria = "safe-to-run"
757 [[audits.chromeos.audits.instant]]
758 who = "Android Legacy"
759 criteria = "safe-to-run"
762 [[audits.chromeos.audits.itertools]]
764 criteria = "safe-to-run"
767 [[audits.chromeos.audits.itertools]]
769 criteria = "safe-to-run"
772 [[audits.chromeos.audits.itoa]]
773 who = "Android Legacy"
774 criteria = "safe-to-run"
777 [[audits.chromeos.audits.itoa]]
779 criteria = ["safe-to-run", "does-not-implement-crypto"]
782 [[audits.chromeos.audits.lazy_static]]
783 who = "Android Legacy"
784 criteria = "safe-to-run"
787 [[audits.chromeos.audits.lazycell]]
788 who = "Android Legacy"
789 criteria = "safe-to-run"
792 [[audits.chromeos.audits.libc]]
793 who = "Android Legacy"
794 criteria = "safe-to-run"
797 [[audits.chromeos.audits.libdbus-sys]]
798 who = "ChromeOS Legacy"
799 criteria = "safe-to-run"
802 [[audits.chromeos.audits.libloading]]
803 who = "Android Legacy"
804 criteria = "safe-to-run"
807 [[audits.chromeos.audits.lock_api]]
808 who = "Android Legacy"
809 criteria = "safe-to-run"
812 [[audits.chromeos.audits.lock_api]]
813 who = "Android Legacy"
814 criteria = "safe-to-run"
817 [[audits.chromeos.audits.log]]
818 who = "Android Legacy"
819 criteria = "safe-to-run"
822 [[audits.chromeos.audits.log]]
824 criteria = ["safe-to-run", "does-not-implement-crypto"]
827 [[audits.chromeos.audits.memchr]]
828 who = "Android Legacy"
829 criteria = "safe-to-run"
832 [[audits.chromeos.audits.memchr]]
834 criteria = ["safe-to-run", "does-not-implement-crypto"]
837 [[audits.chromeos.audits.mime]]
839 criteria = "safe-to-run"
842 [[audits.chromeos.audits.mio]]
843 who = "Android Legacy"
844 criteria = "safe-to-run"
847 [[audits.chromeos.audits.mio]]
849 criteria = "safe-to-run"
852 [[audits.chromeos.audits.nix]]
853 who = "Android Legacy"
854 criteria = "safe-to-run"
857 [[audits.chromeos.audits.nix]]
858 who = "Android Legacy"
859 criteria = "safe-to-run"
862 [[audits.chromeos.audits.nix]]
864 criteria = ["safe-to-run", "does-not-implement-crypto"]
867 [[audits.chromeos.audits.nom]]
868 who = "Android Legacy"
869 criteria = "safe-to-run"
872 [[audits.chromeos.audits.nom]]
873 who = "Android Legacy"
874 criteria = "safe-to-run"
877 [[audits.chromeos.audits.num-derive]]
878 who = "Android Legacy"
879 criteria = "safe-to-run"
882 [[audits.chromeos.audits.num-traits]]
883 who = "Android Legacy"
884 criteria = "safe-to-run"
887 [[audits.chromeos.audits.num_cpus]]
888 who = "Android Legacy"
889 criteria = "safe-to-run"
892 [[audits.chromeos.audits.once_cell]]
894 criteria = ["safe-to-run", "does-not-implement-crypto"]
897 [[audits.chromeos.audits.os_str_bytes]]
899 criteria = ["safe-to-run", "does-not-implement-crypto"]
902 [[audits.chromeos.audits.owning_ref]]
904 criteria = ["safe-to-run", "does-not-implement-crypto"]
907 [[audits.chromeos.audits.parking_lot]]
908 who = "Android Legacy"
909 criteria = "safe-to-run"
912 [[audits.chromeos.audits.parking_lot_core]]
913 who = "Android Legacy"
914 criteria = "safe-to-run"
917 [[audits.chromeos.audits.paste]]
918 who = "Android Legacy"
919 criteria = "safe-to-run"
922 [[audits.chromeos.audits.peeking_take_while]]
923 who = "George Burgess IV <gbiv@google.com>"
924 criteria = "does-not-implement-crypto"
927 [[audits.chromeos.audits.peeking_take_while]]
928 who = "Android Legacy"
929 criteria = "safe-to-run"
932 [[audits.chromeos.audits.percent-encoding]]
934 criteria = ["safe-to-run", "does-not-implement-crypto"]
937 [[audits.chromeos.audits.pin-project]]
939 criteria = "safe-to-run"
942 [[audits.chromeos.audits.pin-project-internal]]
944 criteria = "safe-to-run"
947 [[audits.chromeos.audits.pin-project-lite]]
948 who = "Android Legacy"
949 criteria = "safe-to-run"
952 [[audits.chromeos.audits.pin-project-lite]]
954 criteria = "safe-to-run"
957 [[audits.chromeos.audits.pin-utils]]
958 who = "Android Legacy"
959 criteria = "safe-to-run"
962 [[audits.chromeos.audits.ppv-lite86]]
963 who = "Android Legacy"
964 criteria = "safe-to-run"
967 [[audits.chromeos.audits.proc-macro-hack]]
968 who = "Android Legacy"
969 criteria = "safe-to-run"
972 [[audits.chromeos.audits.proc-macro2]]
973 who = "Android Legacy"
974 criteria = "safe-to-run"
977 [[audits.chromeos.audits.proc-macro2]]
978 who = "Chrome OS Toolchain"
979 criteria = "safe-to-run"
982 [[audits.chromeos.audits.proc-macro2]]
984 criteria = ["safe-to-run", "does-not-implement-crypto"]
987 [[audits.chromeos.audits.prost]]
989 criteria = "safe-to-run"
992 [[audits.chromeos.audits.prost-derive]]
994 criteria = "safe-to-run"
997 [[audits.chromeos.audits.quote]]
998 who = "Android Legacy"
999 criteria = "safe-to-run"
1002 [[audits.chromeos.audits.quote]]
1004 criteria = ["safe-to-run", "does-not-implement-crypto"]
1007 [[audits.chromeos.audits.rand]]
1008 who = "Android Legacy"
1009 criteria = "safe-to-run"
1012 [[audits.chromeos.audits.rand_chacha]]
1013 who = "Android Legacy"
1014 criteria = "safe-to-run"
1017 [[audits.chromeos.audits.rand_chacha]]
1018 who = "Android Legacy"
1019 criteria = "safe-to-run"
1022 [[audits.chromeos.audits.rand_core]]
1023 who = "Android Legacy"
1024 criteria = "safe-to-run"
1027 [[audits.chromeos.audits.rand_core]]
1028 who = "Android Legacy"
1029 criteria = "safe-to-run"
1032 [[audits.chromeos.audits.regex]]
1033 who = "Android Legacy"
1034 criteria = "safe-to-run"
1037 [[audits.chromeos.audits.regex-syntax]]
1038 who = "Android Legacy"
1039 criteria = "safe-to-run"
1042 [[audits.chromeos.audits.rustc-demangle]]
1043 who = "Android Legacy"
1044 criteria = "safe-to-run"
1047 [[audits.chromeos.audits.rustc-hash]]
1048 who = "Android Legacy"
1049 criteria = "safe-to-run"
1052 [[audits.chromeos.audits.ryu]]
1053 who = "Android Legacy"
1054 criteria = "safe-to-run"
1057 [[audits.chromeos.audits.same-file]]
1058 who = "Android Legacy"
1059 criteria = "safe-to-run"
1062 [[audits.chromeos.audits.scopeguard]]
1063 who = "Android Legacy"
1064 criteria = "safe-to-run"
1067 [[audits.chromeos.audits.serde]]
1068 who = "Android Legacy"
1069 criteria = "safe-to-run"
1072 [[audits.chromeos.audits.serde]]
1074 criteria = ["safe-to-run", "does-not-implement-crypto"]
1077 [[audits.chromeos.audits.serde_derive]]
1079 criteria = ["safe-to-run", "does-not-implement-crypto"]
1082 [[audits.chromeos.audits.serde_json]]
1083 who = "Android Legacy"
1084 criteria = "safe-to-run"
1087 [[audits.chromeos.audits.serde_urlencoded]]
1089 criteria = "safe-to-run"
1092 [[audits.chromeos.audits.shlex]]
1093 who = "Android Legacy"
1094 criteria = "safe-to-run"
1097 [[audits.chromeos.audits.shlex]]
1098 who = "Android Legacy"
1099 criteria = "safe-to-run"
1102 [[audits.chromeos.audits.slab]]
1103 who = "Android Legacy"
1104 criteria = "safe-to-run"
1107 [[audits.chromeos.audits.slab]]
1108 who = "Android Legacy"
1109 criteria = "safe-to-run"
1112 [[audits.chromeos.audits.smallvec]]
1113 who = "Android Legacy"
1114 criteria = "safe-to-run"
1117 [[audits.chromeos.audits.static_assertions]]
1119 criteria = ["safe-to-run", "does-not-implement-crypto"]
1122 [[audits.chromeos.audits.syn]]
1123 who = "Android Legacy"
1124 criteria = "safe-to-run"
1127 [[audits.chromeos.audits.syn]]
1129 criteria = "safe-to-run"
1132 [[audits.chromeos.audits.syn]]
1134 criteria = ["safe-to-run", "does-not-implement-crypto"]
1137 [[audits.chromeos.audits.termcolor]]
1138 who = "Android Legacy"
1139 criteria = "safe-to-run"
1142 [[audits.chromeos.audits.textwrap]]
1143 who = "Android Legacy"
1144 criteria = "safe-to-run"
1147 [[audits.chromeos.audits.textwrap]]
1149 criteria = ["safe-to-run", "does-not-implement-crypto"]
1152 [[audits.chromeos.audits.textwrap]]
1154 criteria = ["safe-to-run", "does-not-implement-crypto"]
1157 [[audits.chromeos.audits.thiserror]]
1158 who = "Android Legacy"
1159 criteria = "safe-to-run"
1162 [[audits.chromeos.audits.thiserror-impl]]
1163 who = "Android Legacy"
1164 criteria = "safe-to-run"
1167 [[audits.chromeos.audits.tokio]]
1168 who = "Android Legacy"
1169 criteria = "safe-to-run"
1172 [[audits.chromeos.audits.tokio-macros]]
1173 who = "Android Legacy"
1174 criteria = "safe-to-run"
1177 [[audits.chromeos.audits.tokio-stream]]
1178 who = "Android Legacy"
1179 criteria = "safe-to-run"
1182 [[audits.chromeos.audits.tokio-util]]
1184 criteria = "safe-to-run"
1187 [[audits.chromeos.audits.tower-service]]
1189 criteria = "safe-to-run"
1192 [[audits.chromeos.audits.tracing]]
1194 criteria = "safe-to-run"
1197 [[audits.chromeos.audits.tracing-attributes]]
1199 criteria = "safe-to-run"
1202 [[audits.chromeos.audits.tracing-core]]
1204 criteria = "safe-to-run"
1207 [[audits.chromeos.audits.try-lock]]
1209 criteria = "safe-to-run"
1212 [[audits.chromeos.audits.unicode-ident]]
1214 criteria = ["safe-to-run", "does-not-implement-crypto"]
1217 [[audits.chromeos.audits.unicode-segmentation]]
1218 who = "Android Legacy"
1219 criteria = "safe-to-run"
1222 [[audits.chromeos.audits.unicode-segmentation]]
1224 criteria = ["safe-to-run", "does-not-implement-crypto"]
1227 [[audits.chromeos.audits.unicode-width]]
1228 who = "Android Legacy"
1229 criteria = "safe-to-run"
1232 [[audits.chromeos.audits.unicode-xid]]
1233 who = "Android Legacy"
1234 criteria = "safe-to-run"
1237 [[audits.chromeos.audits.walkdir]]
1238 who = "Android Legacy"
1239 criteria = "safe-to-run"
1242 [[audits.chromeos.audits.walkdir]]
1243 who = "Android Legacy"
1244 criteria = "safe-to-run"
1247 [[audits.chromeos.audits.want]]
1249 criteria = "safe-to-run"
1252 [[audits.embark.audits.anyhow]]
1253 who = "Johan Andersson <opensource@embark-studios.com>"
1254 criteria = "safe-to-deploy"
1257 [[audits.embark.audits.cty]]
1258 who = "Johan Andersson <opensource@embark-studios.com>"
1259 criteria = "safe-to-deploy"
1261 notes = "Inspected it and is a tiny crate with just type definitions"
1263 [[audits.embark.audits.serial_test]]
1264 who = "Johan Andersson <opensource@embark-studios.com>"
1265 criteria = "safe-to-run"
1268 [[audits.embark.audits.serial_test_derive]]
1269 who = "Johan Andersson <opensource@embark-studios.com>"
1270 criteria = "safe-to-run"