supply-chain/config.toml

   1
   2 # cargo-vet config file
   3
   4 [cargo-vet]
   5 version = "0.8"
   6
   7 [imports.bytecode-alliance]
   8 url = "https://raw.githubusercontent.com/bytecodealliance/wasmtime/main/supply-chain/audits.toml"
   9
  10 [imports.embark-studios]
  11 url = "https://raw.githubusercontent.com/EmbarkStudios/rust-ecosystem/main/audits.toml"
  12
  13 [imports.google]
  14 url = "https://raw.githubusercontent.com/google/supply-chain/main/audits.toml"
  15
  16 [imports.isrg]
  17 url = "https://raw.githubusercontent.com/divviup/libprio-rs/main/supply-chain/audits.toml"
  18
  19 [imports.mozilla]
  20 url = "https://raw.githubusercontent.com/mozilla/supply-chain/main/audits.toml"
  21
  22 [policy.autocfg]
  23 audit-as-crates-io = true
  24 notes = "This is the upstream code plus a few local fixes, see bug 1685697."
  25
  26 [policy.chardetng]
  27 audit-as-crates-io = true
  28 notes = "This is a crate Henri wrote which is also published. We should probably update Firefox to tip and certify that."
  29
  30 [policy.chardetng_c]
  31 audit-as-crates-io = true
  32 notes = "This is a crate Henri wrote which is also published. We should probably update Firefox to tip and certify that."
  33
  34 [policy.coremidi]
  35 audit-as-crates-io = true
  36 notes = "This is a pinned version of the upstream code, presumably to get a fix that hadn't been released yet. We should consider switching to the latest official release."
  37
  38 [policy.cose]
  39 audit-as-crates-io = true
  40 notes = "This is upstream plus a warning fix from bug 1823866."
  41
  42 [policy.cssparser]
  43 audit-as-crates-io = true
  44 notes = "Upstream release plus a couple unpublished changes"
  45
  46 [policy.cssparser-macros]
  47 audit-as-crates-io = true
  48 notes = "Upstream release plus a couple unpublished changes"
  49
  50 [policy.d3d12]
  51 audit-as-crates-io = true
  52 notes = "Part of the wgpu repository, pinned as the rest of wgpu crates."
  53
  54 [policy.diplomat]
  55 audit-as-crates-io = true
  56 notes = "Upstream version not to use syn 1.x"
  57
  58 [policy.diplomat-runtime]
  59 audit-as-crates-io = true
  60 notes = "Upstream version not to use syn 1.x"
  61
  62 [policy.diplomat_core]
  63 audit-as-crates-io = true
  64 notes = "Upstream version not to use syn 1.x"
  65
  66 [policy.firefox-on-glean]
  67 audit-as-crates-io = false
  68 notes = "The crates.io version of this is just a placeholder to allow public crates to depend on firefox-on-glean."
  69
  70 [policy.geckodriver]
  71 audit-as-crates-io = false
  72 criteria = "safe-to-run"
  73 notes = "This is a first-party crate which is also published to crates.io. We certify audits for this crate as part of the documented release process, but that step happens after the version bump lands on central so we don't enforce it here. It's also used only for automation, so its subtree can be safe-to-run."
  74
  75 [policy.gkrust-gtest]
  76 criteria = "safe-to-run"
  77 notes = "Used for testing."
  78
  79 [policy.gkrust-shared]
  80 dependency-criteria = { tokio-reactor = [], tokio-threadpool = [] }
  81 notes = "The dependencies on tokio-reactor and tokio-threadpools are just a hack to pin the version used by audioipc-{client,server}. Suppress vetting on those for the same reasons behind the policy entries."
  82
  83 [policy.gluesmith]
  84 criteria = "safe-to-run"
  85 notes = "Used for fuzzing."
  86
  87 [policy.http3server]
  88 criteria = "safe-to-run"
  89 notes = "Used for testing."
  90
  91 [policy.icu_provider_macros]
  92 audit-as-crates-io = true
  93 notes = "Upstream version not to use syn 1.x"
  94
  95 [policy.icu_testdata]
  96 audit-as-crates-io = false
  97 notes = "Customized ICU4X baked data only that Gecko wants"
  98
  99 [policy.l10nregistry]
 100 dependency-criteria = { fluent-testing = "safe-to-run", tokio = "safe-to-run" }
 101 notes = "This crate has two testing-only dependencies which are specified as regular-but-optional rather than a dev-dependencies, because they need to be available to both benchmarks and integration tests."
 102
 103 [policy.libudev-sys]
 104 audit-as-crates-io = false
 105 notes = "This override is an api-compatible fork with an orthogonal implementation."
 106
 107 [policy.malloc_size_of_derive]
 108 audit-as-crates-io = false
 109 notes = "This was originally servo code which Bobby Holley put on crates.io some years ago and that was moved in-tree as first-party code later on."
 110
 111 [policy.marionette]
 112 audit-as-crates-io = false
 113 notes = "This is a first-party crate which is also published to crates.io. We certify audits for this crate as part of the documented release process, but that step happens after the version bump lands on central so we don't enforce it here."
 114
 115 [policy.midir]
 116 audit-as-crates-io = true
 117 notes = "This is a pinned version of the upstream code, presumably to get a fix that hadn't been released yet. We should consider switching to the latest official release."
 118
 119 [policy."minidump-common:0.17.0@git:6ae42a7f992e8a88ebee661bc77bcedb95cd671f"]
 120 audit-as-crates-io = true
 121 notes = "Unreleased upstream."
 122
 123 [policy.minidump-writer]
 124 audit-as-crates-io = true
 125 notes = "Unreleased upstream."
 126
 127 [policy."mio:0.6.23"]
 128 audit-as-crates-io = true
 129 notes = "Version 0.6.23 is a local fork of upstream which just twiddles some dependencies."
 130
 131 [policy.mozbuild]
 132 audit-as-crates-io = false
 133 notes = "The crates.io version of this is just a placeholder to allow public crates to depend on mozbuild."
 134
 135 [policy.mozdevice]
 136 audit-as-crates-io = false
 137 notes = "This is a first-party crate which is also published to crates.io. We certify audits for this crate as part of the documented release process, but that step happens after the version bump lands on central so we don't enforce it here."
 138
 139 [policy.mozglue-static]
 140 dependency-criteria = { rustc_version = "safe-to-run" }
 141 notes = "The rustc_version dependency is only used in the build script, and does not generate any runtime code"
 142
 143 [policy.mozilla-central-workspace-hack]
 144 audit-as-crates-io = false
 145 criteria = "safe-to-run"
 146 notes = "This is a first-party crate which is also published to crates.io as a convenience for other in-tree crates that depend on it and are published as well. The dependencies from this crate are dependencies of other crates that will get the right criteria through them, but using safe-to-deploy for this one would be too broad."
 147
 148 [policy.mozprofile]
 149 audit-as-crates-io = false
 150 notes = "This is a first-party crate which is also published to crates.io. We certify audits for this crate as part of the documented release process, but that step happens after the version bump lands on central so we don't enforce it here."
 151
 152 [policy.mozrunner]
 153 audit-as-crates-io = false
 154 notes = "This is a first-party crate which is also published to crates.io. We certify audits for this crate as part of the documented release process, but that step happens after the version bump lands on central so we don't enforce it here."
 155
 156 [policy.mozversion]
 157 audit-as-crates-io = false
 158 notes = "This is a first-party crate which is also published to crates.io. We certify audits for this crate as part of the documented release process, but that step happens after the version bump lands on central so we don't enforce it here."
 159
 160 [policy.mp4parse]
 161 audit-as-crates-io = false
 162
 163 [policy.mp4parse_capi]
 164 audit-as-crates-io = false
 165
 166 [policy.naga]
 167 audit-as-crates-io = true
 168 notes = "Part of the wgpu repository, pinned as the rest of wgpu crates."
 169
 170 [policy.peek-poke]
 171 audit-as-crates-io = false
 172
 173 [policy.peek-poke-derive]
 174 audit-as-crates-io = false
 175
 176 [policy.pulse]
 177 audit-as-crates-io = false
 178 notes = "This is a first-party crate which is entirely unrelated to the crates.io package of the same name."
 179
 180 [policy.qcms]
 181 audit-as-crates-io = true
 182 notes = "This is a first-party crate which is also published to crates.io, but we should publish audits for it for the benefit of the ecosystem."
 183
 184 [policy.rure]
 185 audit-as-crates-io = true
 186 notes = "Identical to upstream, but with cdylib and staticlib targets disabled to avoid unnecessary build artifacts and linker errors."
 187
 188 [policy.selectors]
 189 audit-as-crates-io = true
 190 notes = "This is a first-party crate which is also published to crates.io, but we should publish audits for it for the benefit of the ecosystem."
 191
 192 [policy.servo_arc]
 193 audit-as-crates-io = true
 194 notes = "This is a first-party crate which is also published to crates.io, but we should publish audits for it for the benefit of the ecosystem."
 195
 196 [policy.smoosh]
 197 criteria = "safe-to-run"
 198 notes = "We're not shipping this and have no plans to ship it."
 199
 200 [policy.storage]
 201 audit-as-crates-io = false
 202 notes = "This is a first-party crate which is entirely unrelated to the crates.io package of the same name."
 203
 204 [policy.tabs]
 205 audit-as-crates-io = false
 206 notes = "This is a first-party crate, maintained by the appservices team, which is entirely unrelated to the crates.io package of the same name."
 207
 208 [policy.viaduct]
 209 audit-as-crates-io = false
 210 notes = "This is a first-party crate, maintained by the appservices team, which is entirely unrelated to the crates.io package of the same name."
 211
 212 [policy.warp]
 213 audit-as-crates-io = true
 214 notes = "This is a third-party crate, with an extra patch."
 215
 216 [policy.webdriver]
 217 audit-as-crates-io = false
 218 criteria = "safe-to-run"
 219 notes = "This is a first-party crate which is also published to crates.io. We certify audits for this crate as part of the documented release process, but that step happens after the version bump lands on central so we don't enforce it here. It's also used only for automation, so its subtree can be safe-to-run."
 220
 221 [policy.webrender]
 222 audit-as-crates-io = false
 223
 224 [policy.webrender_api]
 225 audit-as-crates-io = false
 226
 227 [policy.webrender_build]
 228 audit-as-crates-io = false
 229
 230 [policy.wgpu-core]
 231 audit-as-crates-io = true
 232 notes = "Upstream project which we pin."
 233
 234 [policy.wgpu-hal]
 235 audit-as-crates-io = true
 236 notes = "Upstream project which we pin."
 237
 238 [policy.wgpu-types]
 239 audit-as-crates-io = true
 240 notes = "Upstream project which we pin."
 241
 242 [policy.wr_malloc_size_of]
 243 audit-as-crates-io = false
 244
 245 [policy.yoke-derive]
 246 audit-as-crates-io = true
 247 notes = "Upstream version not to use syn 1.x"
 248
 249 [policy.zerofrom-derive]
 250 audit-as-crates-io = true
 251 notes = "Upstream version not to use syn 1.x"
 252
 253 [policy.zerovec-derive]
 254 audit-as-crates-io = true
 255 notes = "Upstream version not to use syn 1.x"
 256
 257 [[exemptions.ahash]]
 258 version = "0.7.6"
 259 criteria = "safe-to-deploy"
 260
 261 [[exemptions.alsa]]
 262 version = "0.4.3"
 263 criteria = "safe-to-deploy"
 264
 265 [[exemptions.alsa-sys]]
 266 version = "0.3.1"
 267 criteria = "safe-to-deploy"
 268
 269 [[exemptions.android_log-sys]]
 270 version = "0.2.0"
 271 criteria = "safe-to-deploy"
 272
 273 [[exemptions.askama_derive]]
 274 version = "0.11.2"
 275 criteria = "safe-to-deploy"
 276
 277 [[exemptions.askama_escape]]
 278 version = "0.10.3"
 279 criteria = "safe-to-deploy"
 280
 281 [[exemptions.async-task]]
 282 version = "4.0.3"
 283 criteria = "safe-to-deploy"
 284
 285 [[exemptions.bincode]]
 286 version = "1.3.3"
 287 criteria = "safe-to-deploy"
 288
 289 [[exemptions.bitflags]]
 290 version = "1.3.2"
 291 criteria = "safe-to-deploy"
 292
 293 [[exemptions.bitreader]]
 294 version = "0.3.6"
 295 criteria = "safe-to-deploy"
 296
 297 [[exemptions.block]]
 298 version = "0.1.6"
 299 criteria = "safe-to-deploy"
 300
 301 [[exemptions.cache-padded]]
 302 version = "1.2.0"
 303 criteria = "safe-to-deploy"
 304
 305 [[exemptions.camino]]
 306 version = "1.0.9"
 307 criteria = "safe-to-deploy"
 308
 309 [[exemptions.chrono]]
 310 version = "0.4.19"
 311 criteria = "safe-to-deploy"
 312
 313 [[exemptions.chunky-vec]]
 314 version = "0.1.0"
 315 criteria = "safe-to-deploy"
 316
 317 [[exemptions.clang-sys]]
 318 version = "1.3.3"
 319 criteria = "safe-to-deploy"
 320
 321 [[exemptions.cookie]]
 322 version = "0.16.0"
 323 criteria = "safe-to-run"
 324
 325 [[exemptions.coreaudio-sys]]
 326 version = "0.2.10"
 327 criteria = "safe-to-deploy"
 328
 329 [[exemptions.coremidi]]
 330 version = "0.6.0@git:fc68464b5445caf111e41f643a2e69ccce0b4f83"
 331 criteria = "safe-to-deploy"
 332
 333 [[exemptions.coremidi-sys]]
 334 version = "3.1.0"
 335 criteria = "safe-to-deploy"
 336
 337 [[exemptions.cose]]
 338 version = "0.1.4"
 339 criteria = "safe-to-deploy"
 340
 341 [[exemptions.cose-c]]
 342 version = "0.1.5"
 343 criteria = "safe-to-deploy"
 344
 345 [[exemptions.cpufeatures]]
 346 version = "0.2.2"
 347 criteria = "safe-to-deploy"
 348
 349 [[exemptions.crc32fast]]
 350 version = "1.3.2"
 351 criteria = "safe-to-deploy"
 352
 353 [[exemptions.crossbeam-channel]]
 354 version = "0.5.4"
 355 criteria = "safe-to-deploy"
 356
 357 [[exemptions.crossbeam-deque]]
 358 version = "0.8.1"
 359 criteria = "safe-to-deploy"
 360
 361 [[exemptions.crossbeam-epoch]]
 362 version = "0.9.8"
 363 criteria = "safe-to-deploy"
 364
 365 [[exemptions.crossbeam-utils]]
 366 version = "0.8.8"
 367 criteria = "safe-to-deploy"
 368
 369 [[exemptions.d3d12]]
 370 version = "0.4.1"
 371 criteria = "safe-to-deploy"
 372
 373 [[exemptions.darling]]
 374 version = "0.13.4"
 375 criteria = "safe-to-deploy"
 376
 377 [[exemptions.darling_core]]
 378 version = "0.13.4"
 379 criteria = "safe-to-deploy"
 380
 381 [[exemptions.darling_macro]]
 382 version = "0.13.4"
 383 criteria = "safe-to-deploy"
 384
 385 [[exemptions.data-encoding]]
 386 version = "2.3.2"
 387 criteria = "safe-to-deploy"
 388
 389 [[exemptions.dbus]]
 390 version = "0.6.5"
 391 criteria = "safe-to-deploy"
 392
 393 [[exemptions.derive_more-impl]]
 394 version = "1.0.0-beta.2"
 395 criteria = "safe-to-deploy"
 396 notes = "The crate is new to version 1.0.x, and derived from older versions of derive_more. The differences against 0.99.17 have been audited, but cargo-vet cannot record this information."
 397
 398 [[exemptions.devd-rs]]
 399 version = "0.3.4"
 400 criteria = "safe-to-deploy"
 401
 402 [[exemptions.digest]]
 403 version = "0.10.3"
 404 criteria = "safe-to-deploy"
 405
 406 [[exemptions.dirs]]
 407 version = "4.0.0"
 408 criteria = "safe-to-deploy"
 409
 410 [[exemptions.dirs-sys]]
 411 version = "0.3.7"
 412 criteria = "safe-to-deploy"
 413
 414 [[exemptions.dns-parser]]
 415 version = "0.8.0"
 416 criteria = "safe-to-deploy"
 417
 418 [[exemptions.enumset]]
 419 version = "1.0.11"
 420 criteria = "safe-to-deploy"
 421
 422 [[exemptions.enumset_derive]]
 423 version = "0.6.0"
 424 criteria = "safe-to-deploy"
 425
 426 [[exemptions.env_logger]]
 427 version = "0.9.0"
 428 criteria = "safe-to-deploy"
 429
 430 [[exemptions.error-chain]]
 431 version = "0.12.4"
 432 criteria = "safe-to-deploy"
 433
 434 [[exemptions.fallible-iterator]]
 435 version = "0.2.0"
 436 criteria = "safe-to-deploy"
 437
 438 [[exemptions.fallible-streaming-iterator]]
 439 version = "0.1.9"
 440 criteria = "safe-to-deploy"
 441
 442 [[exemptions.fallible_collections]]
 443 version = "0.4.4"
 444 criteria = "safe-to-deploy"
 445
 446 [[exemptions.ffi-support]]
 447 version = "0.4.4"
 448 criteria = "safe-to-deploy"
 449
 450 [[exemptions.float-cmp]]
 451 version = "0.6.0"
 452 criteria = "safe-to-deploy"
 453
 454 [[exemptions.fs-err]]
 455 version = "2.7.0"
 456 criteria = "safe-to-deploy"
 457
 458 [[exemptions.fuchsia-zircon]]
 459 version = "0.3.3"
 460 criteria = "safe-to-run"
 461
 462 [[exemptions.fuchsia-zircon-sys]]
 463 version = "0.3.3"
 464 criteria = "safe-to-run"
 465
 466 [[exemptions.futures-macro]]
 467 version = "0.3.21"
 468 criteria = "safe-to-deploy"
 469
 470 [[exemptions.futures-task]]
 471 version = "0.3.21"
 472 criteria = "safe-to-deploy"
 473
 474 [[exemptions.futures-util]]
 475 version = "0.3.21"
 476 criteria = "safe-to-deploy"
 477
 478 [[exemptions.generic-array]]
 479 version = "0.14.5"
 480 criteria = "safe-to-deploy"
 481
 482 [[exemptions.getrandom]]
 483 version = "0.2.6"
 484 criteria = "safe-to-deploy"
 485
 486 [[exemptions.gl_generator]]
 487 version = "0.14.0"
 488 criteria = "safe-to-deploy"
 489
 490 [[exemptions.glsl]]
 491 version = "6.0.1"
 492 criteria = "safe-to-deploy"
 493
 494 [[exemptions.goblin]]
 495 version = "0.1.3"
 496 criteria = "safe-to-deploy"
 497
 498 [[exemptions.gpu-alloc]]
 499 version = "0.5.3"
 500 criteria = "safe-to-deploy"
 501
 502 [[exemptions.gpu-alloc-types]]
 503 version = "0.2.0"
 504 criteria = "safe-to-deploy"
 505
 506 [[exemptions.gpu-descriptor]]
 507 version = "0.2.2"
 508 criteria = "safe-to-deploy"
 509
 510 [[exemptions.gpu-descriptor-types]]
 511 version = "0.1.1"
 512 criteria = "safe-to-deploy"
 513
 514 [[exemptions.hashlink]]
 515 version = "0.7.0"
 516 criteria = "safe-to-deploy"
 517
 518 [[exemptions.hermit-abi]]
 519 version = "0.1.19"
 520 criteria = "safe-to-deploy"
 521
 522 [[exemptions.hexf-parse]]
 523 version = "0.2.1"
 524 criteria = "safe-to-deploy"
 525
 526 [[exemptions.ioctl-sys]]
 527 version = "0.7.1"
 528 criteria = "safe-to-deploy"
 529
 530 [[exemptions.itertools]]
 531 version = "0.10.3"
 532 criteria = "safe-to-deploy"
 533
 534 [[exemptions.khronos-egl]]
 535 version = "4.1.0"
 536 criteria = "safe-to-deploy"
 537
 538 [[exemptions.khronos_api]]
 539 version = "3.1.0"
 540 criteria = "safe-to-deploy"
 541
 542 [[exemptions.lazycell]]
 543 version = "1.3.0"
 544 criteria = "safe-to-deploy"
 545
 546 [[exemptions.libdbus-sys]]
 547 version = "0.2.2"
 548 criteria = "safe-to-deploy"
 549
 550 [[exemptions.libloading]]
 551 version = "0.7.3"
 552 criteria = "safe-to-deploy"
 553
 554 [[exemptions.libsqlite3-sys]]
 555 version = "0.25.2"
 556 criteria = "safe-to-deploy"
 557 suggest = false
 558 notes = "The in-gecko feature that we enable makes only pre-built bindings used, and none of the embedded C code is built. The build script was audited and is not doing anything besides exposing those bindings"
 559
 560 [[exemptions.libudev]]
 561 version = "0.2.0"
 562 criteria = "safe-to-deploy"
 563
 564 [[exemptions.lmdb-rkv-sys]]
 565 version = "0.11.2"
 566 criteria = "safe-to-deploy"
 567 suggest = false
 568 notes = "This crate is forked from another crate and not developed in-house. Given that LMDB-backed RKV is going away, we will probably never bother auditing this"
 569
 570 [[exemptions.mach]]
 571 version = "0.3.2"
 572 criteria = "safe-to-deploy"
 573
 574 [[exemptions.memalloc]]
 575 version = "0.1.0"
 576 criteria = "safe-to-deploy"
 577
 578 [[exemptions.memmap2]]
 579 version = "0.5.4"
 580 criteria = "safe-to-deploy"
 581
 582 [[exemptions.memoffset]]
 583 version = "0.6.5"
 584 criteria = "safe-to-deploy"
 585
 586 [[exemptions.midir]]
 587 version = "0.7.0"
 588 criteria = "safe-to-deploy"
 589
 590 [[exemptions.mime_guess]]
 591 version = "2.0.4"
 592 criteria = "safe-to-deploy"
 593
 594 [[exemptions.minimal-lexical]]
 595 version = "0.2.1"
 596 criteria = "safe-to-deploy"
 597
 598 [[exemptions.mio]]
 599 version = "0.8.0"
 600 criteria = "safe-to-deploy"
 601
 602 [[exemptions.mio-extras]]
 603 version = "2.0.6"
 604 criteria = "safe-to-run"
 605
 606 [[exemptions.miow]]
 607 version = "0.3.7"
 608 criteria = "safe-to-run"
 609
 610 [[exemptions.murmurhash3]]
 611 version = "0.0.5"
 612 criteria = "safe-to-deploy"
 613
 614 [[exemptions.net2]]
 615 version = "0.2.37"
 616 criteria = "safe-to-run"
 617
 618 [[exemptions.nix]]
 619 version = "0.15.0"
 620 criteria = "safe-to-deploy"
 621
 622 [[exemptions.nom]]
 623 version = "7.1.1"
 624 criteria = "safe-to-deploy"
 625
 626 [[exemptions.objc]]
 627 version = "0.2.7"
 628 criteria = "safe-to-deploy"
 629
 630 [[exemptions.objc_exception]]
 631 version = "0.1.2"
 632 criteria = "safe-to-deploy"
 633
 634 [[exemptions.object]]
 635 version = "0.28.4"
 636 criteria = "safe-to-deploy"
 637
 638 [[exemptions.once_cell]]
 639 version = "1.12.0"
 640 criteria = "safe-to-deploy"
 641
 642 [[exemptions.owning_ref]]
 643 version = "0.4.1"
 644 criteria = "safe-to-deploy"
 645
 646 [[exemptions.packed_simd]]
 647 version = "0.3.8"
 648 criteria = "safe-to-deploy"
 649
 650 [[exemptions.phf]]
 651 version = "0.10.1"
 652 criteria = "safe-to-deploy"
 653
 654 [[exemptions.phf_codegen]]
 655 version = "0.10.0"
 656 criteria = "safe-to-deploy"
 657
 658 [[exemptions.phf_generator]]
 659 version = "0.10.0"
 660 criteria = "safe-to-deploy"
 661
 662 [[exemptions.phf_macros]]
 663 version = "0.10.0"
 664 criteria = "safe-to-deploy"
 665
 666 [[exemptions.phf_shared]]
 667 version = "0.10.0"
 668 criteria = "safe-to-deploy"
 669
 670 [[exemptions.plain]]
 671 version = "0.2.3"
 672 criteria = "safe-to-deploy"
 673
 674 [[exemptions.plist]]
 675 version = "1.3.1"
 676 criteria = "safe-to-run"
 677
 678 [[exemptions.ppv-lite86]]
 679 version = "0.2.16"
 680 criteria = "safe-to-deploy"
 681
 682 [[exemptions.profiling]]
 683 version = "1.0.6"
 684 criteria = "safe-to-deploy"
 685
 686 [[exemptions.prost]]
 687 version = "0.8.0"
 688 criteria = "safe-to-deploy"
 689
 690 [[exemptions.prost-derive]]
 691 version = "0.8.0"
 692 criteria = "safe-to-deploy"
 693
 694 [[exemptions.quick-error]]
 695 version = "1.2.3"
 696 criteria = "safe-to-deploy"
 697
 698 [[exemptions.rand]]
 699 version = "0.8.5"
 700 criteria = "safe-to-deploy"
 701
 702 [[exemptions.remove_dir_all]]
 703 version = "0.5.3"
 704 criteria = "safe-to-deploy"
 705
 706 [[exemptions.replace_with]]
 707 version = "0.1.7"
 708 criteria = "safe-to-deploy"
 709
 710 [[exemptions.ringbuf]]
 711 version = "0.2.8"
 712 criteria = "safe-to-deploy"
 713
 714 [[exemptions.ron]]
 715 version = "0.7.0"
 716 criteria = "safe-to-deploy"
 717
 718 [[exemptions.runloop]]
 719 version = "0.1.0"
 720 criteria = "safe-to-deploy"
 721
 722 [[exemptions.rusqlite]]
 723 version = "0.27.0"
 724 criteria = "safe-to-deploy"
 725
 726 [[exemptions.rust-ini]]
 727 version = "0.10.3"
 728 criteria = "safe-to-deploy"
 729
 730 [[exemptions.rust_decimal]]
 731 version = "1.24.0"
 732 criteria = "safe-to-deploy"
 733
 734 [[exemptions.scroll]]
 735 version = "0.10.2"
 736 criteria = "safe-to-deploy"
 737
 738 [[exemptions.scroll_derive]]
 739 version = "0.10.5"
 740 criteria = "safe-to-deploy"
 741
 742 [[exemptions.self_cell]]
 743 version = "0.10.2"
 744 criteria = "safe-to-deploy"
 745
 746 [[exemptions.serde_with]]
 747 version = "1.14.0"
 748 criteria = "safe-to-deploy"
 749
 750 [[exemptions.serde_with_macros]]
 751 version = "1.5.2"
 752 criteria = "safe-to-deploy"
 753
 754 [[exemptions.sfv]]
 755 version = "0.9.2"
 756 criteria = "safe-to-deploy"
 757
 758 [[exemptions.shlex]]
 759 version = "1.1.0"
 760 criteria = "safe-to-deploy"
 761
 762 [[exemptions.siphasher]]
 763 version = "0.3.10"
 764 criteria = "safe-to-deploy"
 765
 766 [[exemptions.socket2]]
 767 version = "0.4.4"
 768 criteria = "safe-to-deploy"
 769
 770 [[exemptions.spirv]]
 771 version = "0.2.0+1.5.4"
 772 criteria = "safe-to-deploy"
 773
 774 [[exemptions.stable_deref_trait]]
 775 version = "1.2.0"
 776 criteria = "safe-to-deploy"
 777
 778 [[exemptions.static_assertions]]
 779 version = "1.1.0"
 780 criteria = "safe-to-deploy"
 781
 782 [[exemptions.strsim]]
 783 version = "0.10.0"
 784 criteria = "safe-to-deploy"
 785
 786 [[exemptions.tempfile]]
 787 version = "3.3.0"
 788 criteria = "safe-to-deploy"
 789
 790 [[exemptions.time]]
 791 version = "0.1.44"
 792 criteria = "safe-to-deploy"
 793
 794 [[exemptions.triple_buffer]]
 795 version = "5.0.6"
 796 criteria = "safe-to-deploy"
 797
 798 [[exemptions.type-map]]
 799 version = "0.4.0"
 800 criteria = "safe-to-deploy"
 801
 802 [[exemptions.typenum]]
 803 version = "1.15.0"
 804 criteria = "safe-to-deploy"
 805
 806 [[exemptions.unix_path]]
 807 version = "1.0.1"
 808 criteria = "safe-to-run"
 809
 810 [[exemptions.unix_str]]
 811 version = "1.0.0"
 812 criteria = "safe-to-run"
 813
 814 [[exemptions.uuid]]
 815 version = "0.8.2"
 816 criteria = "safe-to-deploy"
 817
 818 [[exemptions.webrtc-sdp]]
 819 version = "0.3.9"
 820 criteria = "safe-to-deploy"
 821
 822 [[exemptions.winapi]]
 823 version = "0.3.9"
 824 criteria = "safe-to-deploy"
 825
 826 [[exemptions.winapi-i686-pc-windows-gnu]]
 827 version = "0.4.0"
 828 criteria = "safe-to-deploy"
 829
 830 [[exemptions.winapi-x86_64-pc-windows-gnu]]
 831 version = "0.4.0"
 832 criteria = "safe-to-deploy"
 833
 834 [[exemptions.wio]]
 835 version = "0.2.2"
 836 criteria = "safe-to-deploy"
 837
 838 [[exemptions.xml-rs]]
 839 version = "0.8.4"
 840 criteria = "safe-to-deploy"
 841
 842 [[exemptions.zip]]
 843 version = "0.6.2"
 844 criteria = "safe-to-run"