Bug 1850713: remove duplicated setting of early hint preloader id in `ScriptLoader...
[gecko.git] / supply-chain / imports.lock
blob096b34b2c05e2279c669d57eda8fb3135a280f3e
2 # cargo-vet imports lock
4 [[publisher.aho-corasick]]
5 version = "0.7.20"
6 when = "2022-11-22"
7 user-id = 189
8 user-login = "BurntSushi"
9 user-name = "Andrew Gallant"
11 [[publisher.arbitrary]]
12 version = "1.3.0"
13 when = "2023-03-13"
14 user-id = 696
15 user-login = "fitzgen"
16 user-name = "Nick Fitzgerald"
18 [[publisher.async-trait]]
19 version = "0.1.68"
20 when = "2023-03-24"
21 user-id = 3618
22 user-login = "dtolnay"
23 user-name = "David Tolnay"
25 [[publisher.atomic]]
26 version = "0.4.6"
27 when = "2020-07-05"
28 user-id = 2915
29 user-login = "Amanieu"
30 user-name = "Amanieu d'Antras"
32 [[publisher.audio_thread_priority]]
33 version = "0.26.1"
34 when = "2022-03-22"
35 user-id = 1258
36 user-login = "padenot"
37 user-name = "Paul Adenot"
39 [[publisher.authenticator]]
40 version = "0.4.0-alpha.15"
41 when = "2023-05-15"
42 user-id = 175410
43 user-login = "jschanck"
44 user-name = "John Schanck"
46 [[publisher.authenticator]]
47 version = "0.4.0-alpha.18"
48 when = "2023-06-20"
49 user-id = 175410
50 user-login = "jschanck"
51 user-name = "John Schanck"
53 [[publisher.authenticator]]
54 version = "0.4.0-alpha.19"
55 when = "2023-08-15"
56 user-id = 175410
57 user-login = "jschanck"
58 user-name = "John Schanck"
60 [[publisher.authenticator]]
61 version = "0.4.0-alpha.20"
62 when = "2023-08-24"
63 user-id = 175410
64 user-login = "jschanck"
65 user-name = "John Schanck"
67 [[publisher.bhttp]]
68 version = "0.3.1"
69 when = "2023-02-23"
70 user-id = 128763
71 user-login = "martinthomson"
72 user-name = "Martin Thomson"
74 [[publisher.byteorder]]
75 version = "1.4.3"
76 when = "2021-03-10"
77 user-id = 189
78 user-login = "BurntSushi"
79 user-name = "Andrew Gallant"
81 [[publisher.bytes]]
82 version = "1.4.0"
83 when = "2023-01-31"
84 user-id = 6741
85 user-login = "Darksonn"
86 user-name = "Alice Ryhl"
88 [[publisher.cexpr]]
89 version = "0.6.0"
90 when = "2021-10-11"
91 user-id = 3788
92 user-login = "emilio"
93 user-name = "Emilio Cobos Álvarez"
95 [[publisher.clap]]
96 version = "4.1.14"
97 when = "2023-03-28"
98 user-id = 6743
99 user-login = "epage"
100 user-name = "Ed Page"
102 [[publisher.clap_builder]]
103 version = "4.1.14"
104 when = "2023-03-28"
105 user-id = 6743
106 user-login = "epage"
107 user-name = "Ed Page"
109 [[publisher.clap_derive]]
110 version = "4.1.14"
111 when = "2023-03-28"
112 user-id = 6743
113 user-login = "epage"
114 user-name = "Ed Page"
116 [[publisher.clap_lex]]
117 version = "0.4.1"
118 when = "2023-03-28"
119 user-id = 6743
120 user-login = "epage"
121 user-name = "Ed Page"
123 [[publisher.core-foundation]]
124 version = "0.9.3"
125 when = "2022-02-07"
126 user-id = 5946
127 user-login = "jrmuizel"
128 user-name = "Jeff Muizelaar"
130 [[publisher.core-foundation-sys]]
131 version = "0.8.3"
132 when = "2021-10-12"
133 user-id = 2396
134 user-login = "jdm"
135 user-name = "Josh Matthews"
137 [[publisher.core-graphics]]
138 version = "0.22.3"
139 when = "2021-11-02"
140 user-id = 5946
141 user-login = "jrmuizel"
142 user-name = "Jeff Muizelaar"
144 [[publisher.core-graphics-types]]
145 version = "0.1.1"
146 when = "2020-09-15"
147 user-id = 2396
148 user-login = "jdm"
149 user-name = "Josh Matthews"
151 [[publisher.core-text]]
152 version = "19.2.0"
153 when = "2021-02-14"
154 user-id = 5946
155 user-login = "jrmuizel"
156 user-name = "Jeff Muizelaar"
158 [[publisher.derive_arbitrary]]
159 version = "1.3.0"
160 when = "2023-03-13"
161 user-id = 696
162 user-login = "fitzgen"
163 user-name = "Nick Fitzgerald"
165 [[publisher.dogear]]
166 version = "0.4.0"
167 when = "2019-09-16"
168 user-id = 27901
169 user-login = "linabutler"
170 user-name = "Lina Butler"
172 [[publisher.dtoa]]
173 version = "0.4.8"
174 when = "2021-03-29"
175 user-id = 3618
176 user-login = "dtolnay"
177 user-name = "David Tolnay"
179 [[publisher.encoding_rs]]
180 version = "0.8.33"
181 when = "2023-08-23"
182 user-id = 4484
183 user-login = "hsivonen"
184 user-name = "Henri Sivonen"
186 [[publisher.etagere]]
187 version = "0.2.7"
188 when = "2022-05-04"
189 user-id = 1281
190 user-login = "nical"
191 user-name = "Nicolas Silva"
193 [[publisher.euclid]]
194 version = "0.22.7"
195 when = "2022-04-04"
196 user-id = 1281
197 user-login = "nical"
198 user-name = "Nicolas Silva"
200 [[publisher.flate2]]
201 version = "1.0.24"
202 when = "2022-05-28"
203 user-id = 4333
204 user-login = "joshtriplett"
205 user-name = "Josh Triplett"
207 [[publisher.freetype]]
208 version = "0.7.0"
209 when = "2020-07-14"
210 user-id = 2396
211 user-login = "jdm"
212 user-name = "Josh Matthews"
214 [[publisher.gleam]]
215 version = "0.15.0"
216 when = "2023-04-21"
217 user-id = 5946
218 user-login = "jrmuizel"
219 user-name = "Jeff Muizelaar"
221 [[publisher.glean]]
222 version = "53.2.0"
223 when = "2023-08-02"
224 user-id = 48
225 user-login = "badboy"
226 user-name = "Jan-Erik Rediger"
228 [[publisher.glean-core]]
229 version = "53.2.0"
230 when = "2023-08-02"
231 user-id = 48
232 user-login = "badboy"
233 user-name = "Jan-Erik Rediger"
235 [[publisher.glslopt]]
236 version = "0.1.9"
237 when = "2021-03-17"
238 user-id = 84794
239 user-login = "jamienicol"
240 user-name = "Jamie Nicol"
242 [[publisher.headers]]
243 version = "0.3.8"
244 when = "2022-09-02"
245 user-id = 359
246 user-login = "seanmonstar"
247 user-name = "Sean McArthur"
249 [[publisher.httparse]]
250 version = "1.8.0"
251 when = "2022-08-30"
252 user-id = 359
253 user-login = "seanmonstar"
254 user-name = "Sean McArthur"
256 [[publisher.indexmap]]
257 version = "1.9.3"
258 when = "2023-03-24"
259 user-id = 539
260 user-login = "cuviper"
261 user-name = "Josh Stone"
263 [[publisher.inherent]]
264 version = "1.0.7"
265 when = "2023-03-25"
266 user-id = 3618
267 user-login = "dtolnay"
268 user-name = "David Tolnay"
270 [[publisher.iovec]]
271 version = "0.1.4"
272 when = "2019-10-09"
273 user-id = 10
274 user-login = "carllerche"
275 user-name = "Carl Lerche"
277 [[publisher.itoa]]
278 version = "1.0.5"
279 when = "2022-12-17"
280 user-id = 3618
281 user-login = "dtolnay"
282 user-name = "David Tolnay"
284 [[publisher.jobserver]]
285 version = "0.1.25"
286 when = "2022-09-23"
287 user-id = 1
288 user-login = "alexcrichton"
289 user-name = "Alex Crichton"
291 [[publisher.libc]]
292 version = "0.2.132"
293 when = "2022-08-16"
294 user-id = 2915
295 user-login = "Amanieu"
296 user-name = "Amanieu d'Antras"
298 [[publisher.lock_api]]
299 version = "0.4.9"
300 when = "2022-09-20"
301 user-id = 2915
302 user-login = "Amanieu"
303 user-name = "Amanieu d'Antras"
305 [[publisher.memchr]]
306 version = "2.5.0"
307 when = "2022-04-30"
308 user-id = 189
309 user-login = "BurntSushi"
310 user-name = "Andrew Gallant"
312 [[publisher.mime]]
313 version = "0.3.16"
314 when = "2020-01-07"
315 user-id = 359
316 user-login = "seanmonstar"
317 user-name = "Sean McArthur"
319 [[publisher.mio]]
320 version = "0.6.21"
321 when = "2019-11-27"
322 user-id = 10
323 user-login = "carllerche"
324 user-name = "Carl Lerche"
326 [[publisher.nss-gk-api]]
327 version = "0.3.0"
328 when = "2023-06-14"
329 user-id = 175410
330 user-login = "jschanck"
331 user-name = "John Schanck"
333 [[publisher.num_cpus]]
334 version = "1.15.0"
335 when = "2022-12-20"
336 user-id = 359
337 user-login = "seanmonstar"
338 user-name = "Sean McArthur"
340 [[publisher.ohttp]]
341 version = "0.3.1"
342 when = "2023-02-23"
343 user-id = 128763
344 user-login = "martinthomson"
345 user-name = "Martin Thomson"
347 [[publisher.ordered-float]]
348 version = "3.4.0"
349 when = "2022-11-06"
350 user-id = 2017
351 user-login = "mbrubeck"
352 user-name = "Matt Brubeck"
354 [[publisher.parking_lot]]
355 version = "0.12.1"
356 when = "2022-05-31"
357 user-id = 2915
358 user-login = "Amanieu"
359 user-name = "Amanieu d'Antras"
361 [[publisher.parking_lot_core]]
362 version = "0.9.8"
363 when = "2023-06-05"
364 user-id = 2915
365 user-login = "Amanieu"
366 user-name = "Amanieu d'Antras"
368 [[publisher.paste]]
369 version = "1.0.11"
370 when = "2022-12-17"
371 user-id = 3618
372 user-login = "dtolnay"
373 user-name = "David Tolnay"
375 [[publisher.prio]]
376 version = "0.12.1"
377 when = "2023-04-13"
378 user-id = 101233
379 user-login = "le-automaton"
381 [[publisher.proc-macro2]]
382 version = "1.0.59"
383 when = "2023-05-25"
384 user-id = 3618
385 user-login = "dtolnay"
386 user-name = "David Tolnay"
388 [[publisher.proc-macro2]]
389 version = "1.0.66"
390 when = "2023-07-16"
391 user-id = 3618
392 user-login = "dtolnay"
393 user-name = "David Tolnay"
395 [[publisher.quote]]
396 version = "1.0.28"
397 when = "2023-05-25"
398 user-id = 3618
399 user-login = "dtolnay"
400 user-name = "David Tolnay"
402 [[publisher.regex]]
403 version = "1.7.1"
404 when = "2023-01-09"
405 user-id = 189
406 user-login = "BurntSushi"
407 user-name = "Andrew Gallant"
409 [[publisher.regex-syntax]]
410 version = "0.6.28"
411 when = "2022-11-05"
412 user-id = 189
413 user-login = "BurntSushi"
414 user-name = "Andrew Gallant"
416 [[publisher.rust_cascade]]
417 version = "1.5.0"
418 when = "2023-04-05"
419 user-id = 57462
420 user-login = "mozkeeler"
421 user-name = "Dana Keeler"
423 [[publisher.ryu]]
424 version = "1.0.12"
425 when = "2022-12-17"
426 user-id = 3618
427 user-login = "dtolnay"
428 user-name = "David Tolnay"
430 [[publisher.same-file]]
431 version = "1.0.6"
432 when = "2020-01-11"
433 user-id = 189
434 user-login = "BurntSushi"
435 user-name = "Andrew Gallant"
437 [[publisher.scopeguard]]
438 version = "1.1.0"
439 when = "2020-02-16"
440 user-id = 2915
441 user-login = "Amanieu"
442 user-name = "Amanieu d'Antras"
444 [[publisher.serde]]
445 version = "1.0.163"
446 when = "2023-05-11"
447 user-id = 3618
448 user-login = "dtolnay"
449 user-name = "David Tolnay"
451 [[publisher.serde_bytes]]
452 version = "0.11.9"
453 when = "2023-02-05"
454 user-id = 3618
455 user-login = "dtolnay"
456 user-name = "David Tolnay"
458 [[publisher.serde_derive]]
459 version = "1.0.163"
460 when = "2023-05-10"
461 user-id = 3618
462 user-login = "dtolnay"
463 user-name = "David Tolnay"
465 [[publisher.serde_json]]
466 version = "1.0.93"
467 when = "2023-02-08"
468 user-id = 3618
469 user-login = "dtolnay"
470 user-name = "David Tolnay"
472 [[publisher.serde_repr]]
473 version = "0.1.12"
474 when = "2023-03-18"
475 user-id = 3618
476 user-login = "dtolnay"
477 user-name = "David Tolnay"
479 [[publisher.serde_yaml]]
480 version = "0.8.26"
481 when = "2022-07-16"
482 user-id = 3618
483 user-login = "dtolnay"
484 user-name = "David Tolnay"
486 [[publisher.smallvec]]
487 version = "1.10.0"
488 when = "2022-10-02"
489 user-id = 2017
490 user-login = "mbrubeck"
491 user-name = "Matt Brubeck"
493 [[publisher.syn]]
494 version = "1.0.107"
495 when = "2022-12-18"
496 user-id = 3618
497 user-login = "dtolnay"
498 user-name = "David Tolnay"
500 [[publisher.syn]]
501 version = "2.0.18"
502 when = "2023-05-26"
503 user-id = 3618
504 user-login = "dtolnay"
505 user-name = "David Tolnay"
507 [[publisher.termcolor]]
508 version = "1.2.0"
509 when = "2023-01-15"
510 user-id = 189
511 user-login = "BurntSushi"
512 user-name = "Andrew Gallant"
514 [[publisher.threadbound]]
515 version = "0.1.5"
516 when = "2022-12-17"
517 user-id = 3618
518 user-login = "dtolnay"
519 user-name = "David Tolnay"
521 [[publisher.tokio-util]]
522 version = "0.7.2"
523 when = "2022-05-15"
524 user-id = 6741
525 user-login = "Darksonn"
526 user-name = "Alice Ryhl"
528 [[publisher.toml]]
529 version = "0.5.7"
530 when = "2020-10-11"
531 user-id = 1
532 user-login = "alexcrichton"
533 user-name = "Alex Crichton"
535 [[publisher.unicode-ident]]
536 version = "1.0.6"
537 when = "2022-12-17"
538 user-id = 3618
539 user-login = "dtolnay"
540 user-name = "David Tolnay"
542 [[publisher.unicode-segmentation]]
543 version = "1.10.0"
544 when = "2022-09-13"
545 user-id = 1139
546 user-login = "Manishearth"
547 user-name = "Manish Goregaokar"
549 [[publisher.unicode-width]]
550 version = "0.1.10"
551 when = "2022-09-13"
552 user-id = 1139
553 user-login = "Manishearth"
554 user-name = "Manish Goregaokar"
556 [[publisher.unicode-xid]]
557 version = "0.2.4"
558 when = "2022-09-15"
559 user-id = 1139
560 user-login = "Manishearth"
561 user-name = "Manish Goregaokar"
563 [[publisher.uniffi]]
564 version = "0.24.3"
565 when = "2023-08-01"
566 user-id = 48
567 user-login = "badboy"
568 user-name = "Jan-Erik Rediger"
570 [[publisher.uniffi_bindgen]]
571 version = "0.24.3"
572 when = "2023-08-01"
573 user-id = 48
574 user-login = "badboy"
575 user-name = "Jan-Erik Rediger"
577 [[publisher.uniffi_build]]
578 version = "0.24.3"
579 when = "2023-08-01"
580 user-id = 48
581 user-login = "badboy"
582 user-name = "Jan-Erik Rediger"
584 [[publisher.uniffi_checksum_derive]]
585 version = "0.24.3"
586 when = "2023-08-01"
587 user-id = 48
588 user-login = "badboy"
589 user-name = "Jan-Erik Rediger"
591 [[publisher.uniffi_core]]
592 version = "0.24.3"
593 when = "2023-08-01"
594 user-id = 48
595 user-login = "badboy"
596 user-name = "Jan-Erik Rediger"
598 [[publisher.uniffi_macros]]
599 version = "0.24.3"
600 when = "2023-08-01"
601 user-id = 48
602 user-login = "badboy"
603 user-name = "Jan-Erik Rediger"
605 [[publisher.uniffi_meta]]
606 version = "0.24.3"
607 when = "2023-08-01"
608 user-id = 48
609 user-login = "badboy"
610 user-name = "Jan-Erik Rediger"
612 [[publisher.uniffi_testing]]
613 version = "0.24.3"
614 when = "2023-08-01"
615 user-id = 48
616 user-login = "badboy"
617 user-name = "Jan-Erik Rediger"
619 [[publisher.utf8_iter]]
620 version = "1.0.3"
621 when = "2022-09-09"
622 user-id = 4484
623 user-login = "hsivonen"
624 user-name = "Henri Sivonen"
626 [[publisher.walkdir]]
627 version = "2.3.2"
628 when = "2021-03-22"
629 user-id = 189
630 user-login = "BurntSushi"
631 user-name = "Andrew Gallant"
633 [[publisher.warp]]
634 version = "0.3.3"
635 when = "2022-09-27"
636 user-id = 359
637 user-login = "seanmonstar"
638 user-name = "Sean McArthur"
640 [[publisher.wasi]]
641 version = "0.11.0+wasi-snapshot-preview1"
642 when = "2022-01-19"
643 user-id = 1
644 user-login = "alexcrichton"
645 user-name = "Alex Crichton"
647 [[publisher.wasm-encoder]]
648 version = "0.31.0"
649 when = "2023-07-17"
650 user-id = 1
651 user-login = "alexcrichton"
652 user-name = "Alex Crichton"
654 [[publisher.wasm-smith]]
655 version = "0.12.12"
656 when = "2023-07-17"
657 user-id = 1
658 user-login = "alexcrichton"
659 user-name = "Alex Crichton"
661 [[publisher.wasmparser]]
662 version = "0.109.0"
663 when = "2023-07-17"
664 user-id = 1
665 user-login = "alexcrichton"
666 user-name = "Alex Crichton"
668 [[publisher.wast]]
669 version = "62.0.0"
670 when = "2023-07-17"
671 user-id = 1
672 user-login = "alexcrichton"
673 user-name = "Alex Crichton"
675 [[publisher.winapi-util]]
676 version = "0.1.5"
677 when = "2020-04-20"
678 user-id = 189
679 user-login = "BurntSushi"
680 user-name = "Andrew Gallant"
682 [[publisher.zeitstempel]]
683 version = "0.1.1"
684 when = "2021-03-18"
685 user-id = 48
686 user-login = "badboy"
687 user-name = "Jan-Erik Rediger"
689 [[audits.bytecode-alliance.wildcard-audits.arbitrary]]
690 who = "Nick Fitzgerald <fitzgen@gmail.com>"
691 criteria = "safe-to-deploy"
692 user-id = 696 # Nick Fitzgerald (fitzgen)
693 start = "2020-01-14"
694 end = "2024-04-21"
695 notes = "I am an author of this crate."
697 [[audits.bytecode-alliance.wildcard-audits.derive_arbitrary]]
698 who = "Nick Fitzgerald <fitzgen@gmail.com>"
699 criteria = "safe-to-deploy"
700 user-id = 696 # Nick Fitzgerald (fitzgen)
701 start = "2020-01-14"
702 end = "2024-04-27"
703 notes = "I am an author of this crate"
705 [[audits.bytecode-alliance.wildcard-audits.wasm-encoder]]
706 who = "Alex Crichton <alex@alexcrichton.com>"
707 criteria = "safe-to-deploy"
708 user-id = 1 # Alex Crichton (alexcrichton)
709 start = "2020-12-11"
710 end = "2024-04-14"
711 notes = """
712 This is a Bytecode Alliance authored crate maintained in the `wasm-tools`
713 repository of which I'm one of the primary maintainers and publishers for.
714 I am employed by a member of the Bytecode Alliance and plan to continue doing
715 so and will actively maintain this crate over time.
718 [[audits.bytecode-alliance.wildcard-audits.wasm-smith]]
719 who = "Alex Crichton <alex@alexcrichton.com>"
720 criteria = "safe-to-deploy"
721 user-id = 1 # Alex Crichton (alexcrichton)
722 start = "2020-09-03"
723 end = "2024-04-14"
724 notes = """
725 This is a Bytecode Alliance authored crate maintained in the `wasm-tools`
726 repository of which I'm one of the primary maintainers and publishers for.
727 I am employed by a member of the Bytecode Alliance and plan to continue doing
728 so and will actively maintain this crate over time.
731 [[audits.bytecode-alliance.wildcard-audits.wasmparser]]
732 who = "Alex Crichton <alex@alexcrichton.com>"
733 criteria = "safe-to-deploy"
734 user-id = 1 # Alex Crichton (alexcrichton)
735 start = "2020-07-13"
736 end = "2024-04-14"
737 notes = """
738 This is a Bytecode Alliance authored crate maintained in the `wasm-tools`
739 repository of which I'm one of the primary maintainers and publishers for.
740 I am employed by a member of the Bytecode Alliance and plan to continue doing
741 so and will actively maintain this crate over time.
744 [[audits.bytecode-alliance.wildcard-audits.wast]]
745 who = "Alex Crichton <alex@alexcrichton.com>"
746 criteria = "safe-to-deploy"
747 user-id = 1 # Alex Crichton (alexcrichton)
748 start = "2019-10-16"
749 end = "2024-04-14"
750 notes = """
751 This is a Bytecode Alliance authored crate maintained in the `wasm-tools`
752 repository of which I'm one of the primary maintainers and publishers for.
753 I am employed by a member of the Bytecode Alliance and plan to continue doing
754 so and will actively maintain this crate over time.
757 [[audits.bytecode-alliance.audits.adler]]
758 who = "Alex Crichton <alex@alexcrichton.com>"
759 criteria = "safe-to-deploy"
760 version = "1.0.2"
761 notes = "This is a small crate which forbids unsafe code and is a straightforward implementation of the adler hashing algorithm."
763 [[audits.bytecode-alliance.audits.arrayref]]
764 who = "Nick Fitzgerald <fitzgen@gmail.com>"
765 criteria = "safe-to-deploy"
766 version = "0.3.6"
767 notes = """
768 Unsafe code, but its logic looks good to me. Necessary given what it is
769 doing. Well tested, has quickchecks.
772 [[audits.bytecode-alliance.audits.arrayvec]]
773 who = "Nick Fitzgerald <fitzgen@gmail.com>"
774 criteria = "safe-to-deploy"
775 version = "0.7.2"
776 notes = """
777 Well documented invariants, good assertions for those invariants in unsafe code,
778 and tested with MIRI to boot. LGTM.
781 [[audits.bytecode-alliance.audits.base64]]
782 who = "Pat Hickey <phickey@fastly.com>"
783 criteria = "safe-to-deploy"
784 version = "0.21.0"
785 notes = "This crate has no dependencies, no build.rs, and contains no unsafe code."
787 [[audits.bytecode-alliance.audits.block-buffer]]
788 who = "Benjamin Bouvier <public@benj.me>"
789 criteria = "safe-to-deploy"
790 delta = "0.9.0 -> 0.10.2"
792 [[audits.bytecode-alliance.audits.bumpalo]]
793 who = "Nick Fitzgerald <fitzgen@gmail.com>"
794 criteria = "safe-to-deploy"
795 version = "3.11.1"
796 notes = "I am the author of this crate."
798 [[audits.bytecode-alliance.audits.cargo-platform]]
799 who = "Pat Hickey <phickey@fastly.com>"
800 criteria = "safe-to-deploy"
801 version = "0.1.2"
802 notes = "no build, no ambient capabilities, no unsafe"
804 [[audits.bytecode-alliance.audits.cc]]
805 who = "Alex Crichton <alex@alexcrichton.com>"
806 criteria = "safe-to-deploy"
807 version = "1.0.73"
808 notes = "I am the author of this crate."
810 [[audits.bytecode-alliance.audits.cfg-if]]
811 who = "Alex Crichton <alex@alexcrichton.com>"
812 criteria = "safe-to-deploy"
813 version = "1.0.0"
814 notes = "I am the author of this crate."
816 [[audits.bytecode-alliance.audits.codespan-reporting]]
817 who = "Jamey Sharp <jsharp@fastly.com>"
818 criteria = "safe-to-deploy"
819 version = "0.11.1"
820 notes = "This library uses `forbid(unsafe_code)` and has no filesystem or network I/O."
822 [[audits.bytecode-alliance.audits.cpufeatures]]
823 who = "Alex Crichton <alex@alexcrichton.com>"
824 criteria = "safe-to-deploy"
825 delta = "0.2.2 -> 0.2.7"
826 notes = """
827 This is a minor update that looks to add some more detected CPU features and
828 various other minor portability fixes such as MIRI support.
831 [[audits.bytecode-alliance.audits.crypto-common]]
832 who = "Benjamin Bouvier <public@benj.me>"
833 criteria = "safe-to-deploy"
834 version = "0.1.3"
836 [[audits.bytecode-alliance.audits.foreign-types]]
837 who = "Pat Hickey <phickey@fastly.com>"
838 criteria = "safe-to-deploy"
839 version = "0.3.2"
840 notes = "This crate defined a macro-rules which creates wrappers working with FFI types. The implementation of this crate appears to be safe, but each use of this macro would need to be vetted for correctness as well."
842 [[audits.bytecode-alliance.audits.foreign-types-shared]]
843 who = "Pat Hickey <phickey@fastly.com>"
844 criteria = "safe-to-deploy"
845 version = "0.1.1"
847 [[audits.bytecode-alliance.audits.form_urlencoded]]
848 who = "Alex Crichton <alex@alexcrichton.com>"
849 criteria = "safe-to-deploy"
850 version = "1.1.0"
851 notes = """
852 This is a small crate for working with url-encoded forms which doesn't have any
853 more than what it says on the tin. Contains one `unsafe` block related to
854 performance around utf-8 validation which is fairly easy to verify as correct.
857 [[audits.bytecode-alliance.audits.futures-channel]]
858 who = "Pat Hickey <phickey@fastly.com>"
859 criteria = "safe-to-deploy"
860 version = "0.3.27"
861 notes = "build.rs is just detecting the target and setting cfg. unsafety is for implementing a concurrency primitives using atomics and unsafecell, and is not obviously incorrect (this is the sort of thing I wouldn't certify as correct without formal methods)"
863 [[audits.bytecode-alliance.audits.futures-core]]
864 who = "Pat Hickey <phickey@fastly.com>"
865 criteria = "safe-to-deploy"
866 version = "0.3.27"
867 notes = "Unsafe used to implement a concurrency primitive AtomicWaker. Well-commented and not obviously incorrect. Like my other audits of these concurrency primitives inside the futures family, I couldn't certify that it is correct without formal methods, but that is out of scope for this vetting."
869 [[audits.bytecode-alliance.audits.futures-executor]]
870 who = "Pat Hickey <phickey@fastly.com>"
871 criteria = "safe-to-deploy"
872 version = "0.3.27"
873 notes = "Unsafe used to implement the unpark mutex, which is well commented and not obviously incorrect. Like with futures-channel I wouldn't be able to certify it as correct without formal methods."
875 [[audits.bytecode-alliance.audits.futures-io]]
876 who = "Pat Hickey <phickey@fastly.com>"
877 criteria = "safe-to-deploy"
878 version = "0.3.27"
880 [[audits.bytecode-alliance.audits.futures-sink]]
881 who = "Pat Hickey <phickey@fastly.com>"
882 criteria = "safe-to-deploy"
883 version = "0.3.27"
885 [[audits.bytecode-alliance.audits.heck]]
886 who = "Alex Crichton <alex@alexcrichton.com>"
887 criteria = "safe-to-deploy"
888 version = "0.4.0"
889 notes = "Contains `forbid_unsafe` and only uses `std::fmt` from the standard library. Otherwise only contains string manipulation."
891 [[audits.bytecode-alliance.audits.id-arena]]
892 who = "Nick Fitzgerald <fitzgen@gmail.com>"
893 criteria = "safe-to-deploy"
894 version = "2.2.1"
895 notes = "I am the author of this crate."
897 [[audits.bytecode-alliance.audits.idna]]
898 who = "Alex Crichton <alex@alexcrichton.com>"
899 criteria = "safe-to-deploy"
900 version = "0.3.0"
901 notes = """
902 This is a crate without unsafe code or usage of the standard library. The large
903 size of this crate comes from the large generated unicode tables file. This
904 crate is broadly used throughout the ecosystem and does not contain anything
905 suspicious.
908 [[audits.bytecode-alliance.audits.leb128]]
909 who = "Nick Fitzgerald <fitzgen@gmail.com>"
910 criteria = "safe-to-deploy"
911 version = "0.2.5"
912 notes = "I am the author of this crate."
914 [[audits.bytecode-alliance.audits.memoffset]]
915 who = "Alex Crichton <alex@alexcrichton.com>"
916 criteria = "safe-to-deploy"
917 delta = "0.7.1 -> 0.8.0"
918 notes = "This was a small update to the crate which has to do with Rust language features and compiler versions, no substantial changes."
920 [[audits.bytecode-alliance.audits.peeking_take_while]]
921 who = "Nick Fitzgerald <fitzgen@gmail.com>"
922 criteria = "safe-to-deploy"
923 version = "1.0.0"
924 notes = "I am the author of this crate."
926 [[audits.bytecode-alliance.audits.percent-encoding]]
927 who = "Alex Crichton <alex@alexcrichton.com>"
928 criteria = "safe-to-deploy"
929 version = "2.2.0"
930 notes = """
931 This crate is a single-file crate that does what it says on the tin. There are
932 a few `unsafe` blocks related to utf-8 validation which are locally verifiable
933 as correct and otherwise this crate is good to go.
936 [[audits.bytecode-alliance.audits.pin-utils]]
937 who = "Pat Hickey <phickey@fastly.com>"
938 criteria = "safe-to-deploy"
939 version = "0.1.0"
941 [[audits.bytecode-alliance.audits.pkg-config]]
942 who = "Pat Hickey <phickey@fastly.com>"
943 criteria = "safe-to-deploy"
944 version = "0.3.25"
945 notes = "This crate shells out to the pkg-config executable, but it appears to sanitize inputs reasonably."
947 [[audits.bytecode-alliance.audits.rustc-demangle]]
948 who = "Alex Crichton <alex@alexcrichton.com>"
949 criteria = "safe-to-deploy"
950 version = "0.1.21"
951 notes = "I am the author of this crate."
953 [[audits.bytecode-alliance.audits.semver]]
954 who = "Pat Hickey <phickey@fastly.com>"
955 criteria = "safe-to-deploy"
956 version = "1.0.17"
957 notes = "plenty of unsafe pointer and vec tricks, but in well-structured and commented code that appears to be correct"
959 [[audits.bytecode-alliance.audits.slab]]
960 who = "Pat Hickey <phickey@fastly.com>"
961 criteria = "safe-to-deploy"
962 version = "0.4.6"
963 notes = "provides a datastructure implemented using std's Vec. all uses of unsafe are just delegating to the underlying unsafe Vec methods."
965 [[audits.bytecode-alliance.audits.unicase]]
966 who = "Alex Crichton <alex@alexcrichton.com>"
967 criteria = "safe-to-deploy"
968 version = "2.6.0"
969 notes = """
970 This crate contains no `unsafe` code and no unnecessary use of the standard
971 library.
974 [[audits.bytecode-alliance.audits.unicode-bidi]]
975 who = "Alex Crichton <alex@alexcrichton.com>"
976 criteria = "safe-to-deploy"
977 version = "0.3.8"
978 notes = """
979 This crate has no unsafe code and does not use `std::*`. Skimming the crate it
980 does not attempt to out of the bounds of what it's already supposed to be doing.
983 [[audits.bytecode-alliance.audits.unicode-normalization]]
984 who = "Alex Crichton <alex@alexcrichton.com>"
985 criteria = "safe-to-deploy"
986 version = "0.1.19"
987 notes = """
988 This crate contains one usage of `unsafe` which I have manually checked to see
989 it as correct. This crate's size comes in large part due to the generated
990 unicode tables that it contains. This crate is additionally widely used
991 throughout the ecosystem and skimming the crate shows no usage of `std::*` APIs
992 and nothing suspicious.
995 [[audits.embark-studios.audits.anyhow]]
996 who = "Johan Andersson <opensource@embark-studios.com>"
997 criteria = "safe-to-deploy"
998 version = "1.0.58"
1000 [[audits.embark-studios.audits.cty]]
1001 who = "Johan Andersson <opensource@embark-studios.com>"
1002 criteria = "safe-to-deploy"
1003 version = "0.2.2"
1004 notes = "Inspected it and is a tiny crate with just type definitions"
1006 [[audits.embark-studios.audits.derive_more]]
1007 who = "Johan Andersson <opensource@embark-studios.com>"
1008 criteria = "safe-to-deploy"
1009 version = "0.99.17"
1010 notes = "No unsafe usage or ambient capabilities"
1012 [[audits.embark-studios.audits.ident_case]]
1013 who = "Johan Andersson <opensource@embark-studios.com>"
1014 criteria = "safe-to-deploy"
1015 version = "1.0.1"
1016 notes = "No unsafe usage or ambient capabilities"
1018 [[audits.embark-studios.audits.line-wrap]]
1019 who = "Johan Andersson <opensource@embark-studios.com>"
1020 criteria = "safe-to-deploy"
1021 version = "0.1.1"
1022 notes = "No unsafe usage or ambient capabilities"
1024 [[audits.embark-studios.audits.thiserror]]
1025 who = "Johan Andersson <opensource@embark-studios.com>"
1026 criteria = "safe-to-deploy"
1027 version = "1.0.40"
1028 notes = "Wrapper over implementation crate, found no unsafe or ambient capabilities used"
1030 [[audits.embark-studios.audits.thiserror-impl]]
1031 who = "Johan Andersson <opensource@embark-studios.com>"
1032 criteria = "safe-to-deploy"
1033 version = "1.0.40"
1034 notes = "Found no unsafe or ambient capabilities used"
1036 [[audits.embark-studios.audits.yaml-rust]]
1037 who = "Johan Andersson <opensource@embark-studios.com>"
1038 criteria = "safe-to-deploy"
1039 version = "0.4.5"
1040 notes = "No unsafe usage or ambient capabilities"
1042 [[audits.google.audits.ash]]
1043 who = "David Koloski <dkoloski@google.com>"
1044 criteria = "safe-to-deploy"
1045 version = "0.37.0+1.3.209"
1046 notes = "Reviewed on https://fxrev.dev/694269"
1047 aggregated-from = "https://fuchsia.googlesource.com/fuchsia/+/refs/heads/main/third_party/rust_crates/supply-chain/audits.toml?format=TEXT"
1049 [[audits.google.audits.fastrand]]
1050 who = "George Burgess IV <gbiv@google.com>"
1051 criteria = "safe-to-deploy"
1052 version = "1.9.0"
1053 notes = """
1054 `does-not-implement-crypto` is certified because this crate explicitly says
1055 that the RNG here is not cryptographically secure.
1057 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1059 [[audits.google.audits.futures]]
1060 who = "George Burgess IV <gbiv@google.com>"
1061 criteria = "safe-to-deploy"
1062 version = "0.3.28"
1063 notes = """
1064 `futures` has no logic other than tests - it simply `pub use`s things from
1065 other crates.
1067 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1069 [[audits.google.audits.glob]]
1070 who = "George Burgess IV <gbiv@google.com>"
1071 criteria = "safe-to-deploy"
1072 version = "0.3.1"
1073 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1075 [[audits.google.audits.h2]]
1076 who = "ChromeOS"
1077 criteria = "safe-to-run"
1078 version = "0.3.14"
1079 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1081 [[audits.google.audits.http]]
1082 who = "ChromeOS"
1083 criteria = "safe-to-run"
1084 version = "0.2.8"
1085 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1087 [[audits.google.audits.http-body]]
1088 who = "ChromeOS"
1089 criteria = "safe-to-run"
1090 version = "0.4.5"
1091 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1093 [[audits.google.audits.httpdate]]
1094 who = "ChromeOS"
1095 criteria = "safe-to-run"
1096 version = "1.0.2"
1097 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1099 [[audits.google.audits.hyper]]
1100 who = "ChromeOS"
1101 criteria = "safe-to-run"
1102 version = "0.14.20"
1103 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1105 [[audits.google.audits.pin-project]]
1106 who = "ChromeOS"
1107 criteria = "safe-to-run"
1108 version = "1.0.12"
1109 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1111 [[audits.google.audits.pin-project-internal]]
1112 who = "ChromeOS"
1113 criteria = "safe-to-run"
1114 version = "1.0.12"
1115 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1117 [[audits.google.audits.pin-project-lite]]
1118 who = "David Koloski <dkoloski@google.com>"
1119 criteria = "safe-to-deploy"
1120 version = "0.2.9"
1121 notes = "Reviewed on https://fxrev.dev/824504"
1122 aggregated-from = "https://fuchsia.googlesource.com/fuchsia/+/refs/heads/main/third_party/rust_crates/supply-chain/audits.toml?format=TEXT"
1124 [[audits.google.audits.scoped-tls]]
1125 who = "George Burgess IV <gbiv@google.com>"
1126 criteria = "safe-to-run"
1127 version = "1.0.0"
1128 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1130 [[audits.google.audits.serde_urlencoded]]
1131 who = "ChromeOS"
1132 criteria = "safe-to-run"
1133 version = "0.7.1"
1134 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1136 [[audits.google.audits.tokio-stream]]
1137 who = "David Koloski <dkoloski@google.com>"
1138 criteria = "safe-to-deploy"
1139 version = "0.1.11"
1140 notes = "Reviewed on https://fxrev.dev/804724"
1141 aggregated-from = "https://fuchsia.googlesource.com/fuchsia/+/refs/heads/main/third_party/rust_crates/supply-chain/audits.toml?format=TEXT"
1143 [[audits.google.audits.tower-service]]
1144 who = "ChromeOS"
1145 criteria = "safe-to-run"
1146 version = "0.3.2"
1147 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1149 [[audits.google.audits.tracing]]
1150 who = "ChromeOS"
1151 criteria = "safe-to-run"
1152 version = "0.1.35"
1153 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1155 [[audits.google.audits.tracing-attributes]]
1156 who = "ChromeOS"
1157 criteria = "safe-to-run"
1158 version = "0.1.22"
1159 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1161 [[audits.google.audits.tracing-core]]
1162 who = "ChromeOS"
1163 criteria = "safe-to-run"
1164 version = "0.1.29"
1165 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1167 [[audits.google.audits.try-lock]]
1168 who = "ChromeOS"
1169 criteria = "safe-to-run"
1170 version = "0.2.3"
1171 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1173 [[audits.google.audits.version_check]]
1174 who = "George Burgess IV <gbiv@google.com>"
1175 criteria = "safe-to-deploy"
1176 version = "0.9.4"
1177 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1179 [[audits.google.audits.want]]
1180 who = "ChromeOS"
1181 criteria = "safe-to-run"
1182 version = "0.3.0"
1183 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1185 [[audits.isrg.wildcard-audits.prio]]
1186 who = "David Cook <dcook@divviup.org>"
1187 criteria = "safe-to-deploy"
1188 user-id = 101233 # le-automaton
1189 start = "2020-09-28"
1190 end = "2024-03-23"
1192 [[audits.isrg.audits.block-buffer]]
1193 who = "David Cook <dcook@divviup.org>"
1194 criteria = "safe-to-deploy"
1195 version = "0.9.0"
1197 [[audits.isrg.audits.keccak]]
1198 who = "David Cook <dcook@divviup.org>"
1199 criteria = "safe-to-deploy"
1200 version = "0.1.2"
1202 [[audits.isrg.audits.once_cell]]
1203 who = "Brandon Pitman <bran@bran.land>"
1204 criteria = "safe-to-deploy"
1205 delta = "1.17.1 -> 1.17.2"
1207 [[audits.isrg.audits.once_cell]]
1208 who = "David Cook <dcook@divviup.org>"
1209 criteria = "safe-to-deploy"
1210 delta = "1.17.2 -> 1.18.0"
1212 [[audits.isrg.audits.rand_core]]
1213 who = "David Cook <dcook@divviup.org>"
1214 criteria = "safe-to-deploy"
1215 version = "0.6.3"
1217 [[audits.isrg.audits.rayon-core]]
1218 who = "Brandon Pitman <bran@bran.land>"
1219 criteria = "safe-to-deploy"
1220 delta = "1.10.2 -> 1.11.0"
1222 [[audits.isrg.audits.sha2]]
1223 who = "David Cook <dcook@divviup.org>"
1224 criteria = "safe-to-deploy"
1225 version = "0.10.2"
1227 [[audits.isrg.audits.sha3]]
1228 who = "David Cook <dcook@divviup.org>"
1229 criteria = "safe-to-deploy"
1230 version = "0.10.6"
1232 [[audits.mozilla.wildcard-audits.zeitstempel]]
1233 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
1234 criteria = "safe-to-deploy"
1235 user-id = 48 # Jan-Erik Rediger (badboy)
1236 start = "2021-03-03"
1237 end = "2024-05-10"
1238 notes = "Maintained by me"
1239 aggregated-from = "https://raw.githubusercontent.com/mozilla/glean/main/supply-chain/audits.toml"
1241 [[audits.mozilla.audits.askama]]
1242 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
1243 criteria = "safe-to-deploy"
1244 delta = "0.11.1 -> 0.12.0"
1245 notes = "No new unsafe usage, mostly dependency updates and smaller API changes"
1246 aggregated-from = "https://raw.githubusercontent.com/mozilla/glean/main/supply-chain/audits.toml"
1248 [[audits.mozilla.audits.askama_derive]]
1249 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
1250 criteria = "safe-to-deploy"
1251 delta = "0.11.2 -> 0.12.1"
1252 notes = "Dependency updates, a new toml dependency and some API changes. No unsafe use."
1253 aggregated-from = "https://raw.githubusercontent.com/mozilla/glean/main/supply-chain/audits.toml"
1255 [[audits.mozilla.audits.basic-toml]]
1256 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
1257 criteria = "safe-to-deploy"
1258 version = "0.1.2"
1259 notes = "TOML parser, forked from toml 0.5"
1260 aggregated-from = "https://raw.githubusercontent.com/mozilla/glean/main/supply-chain/audits.toml"
1262 [[audits.mozilla.audits.either]]
1263 who = "Nika Layzell <nika@thelayzells.com>"
1264 criteria = "safe-to-deploy"
1265 version = "1.6.1"
1266 notes = """
1267 Straightforward crate providing the Either enum and trait implementations with
1268 no unsafe code.
1270 aggregated-from = "https://raw.githubusercontent.com/mozilla/cargo-vet/main/supply-chain/audits.toml"
1272 [[audits.mozilla.audits.lazy_static]]
1273 who = "Nika Layzell <nika@thelayzells.com>"
1274 criteria = "safe-to-deploy"
1275 version = "1.4.0"
1276 notes = "I have read over the macros, and audited the unsafe code."
1277 aggregated-from = "https://raw.githubusercontent.com/mozilla/cargo-vet/main/supply-chain/audits.toml"
1279 [[audits.mozilla.audits.time]]
1280 who = "Kershaw Chang <kershaw@mozilla.com>"
1281 criteria = "safe-to-deploy"
1282 delta = "0.1.45 -> 0.3.17"
1283 aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
1285 [[audits.mozilla.audits.time-macros]]
1286 who = "Kershaw Chang <kershaw@mozilla.com>"
1287 criteria = "safe-to-deploy"
1288 version = "0.2.6"
1289 aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"